19086794632

Committed 04 Nov 2025 08:16PM UTC coverage: 72.165% (-0.1%) from 72.279%

Build # 19086794632

Build Type

push

github

Committed by

yuwata

Commit Message

TEST-64-UDEV-STORAGE: generate debugging logs

Let's see if it provides something useful for debugging issue #39544.

Run Details

305891 of 423878 relevant lines covered (72.16%)

1224411.04 hits per line

Source File
Press 'n' to go to next uncovered line, 'b' for previous

66.98

/src/core/executor.c

/* SPDX-License-Identifier: LGPL-2.1-or-later */

#include <getopt.h>
#include <stdlib.h>

#include "sd-messages.h"

#include "alloc-util.h"
#include "argv-util.h"
#include "build.h"
#include "capability-util.h"
#include "cgroup.h"
#include "dynamic-user.h"
#include "exec-invoke.h"
#include "execute.h"
#include "execute-serialize.h"
#include "exit-status.h"
#include "fd-util.h"
#include "fdset.h"
#include "fileio.h"
#include "getopt-defs.h"
#include "label-util.h"
#include "log.h"
#include "parse-util.h"
#include "pretty-print.h"
#include "selinux-util.h"
#include "static-destruct.h"

static FILE *arg_serialization = NULL;

STATIC_DESTRUCTOR_REGISTER(arg_serialization, fclosep);

static int help(void) {
        _cleanup_free_ char *link = NULL;
        int r;

        r = terminal_urlify_man("systemd", "1", &link);
        if (r < 0)
                return log_oom();

        printf("%s [OPTIONS...]\n\n"
               "%sSandbox and execute processes.%s\n\n"
               "  -h --help                Show this help and exit\n"
               "     --version             Print version string and exit\n"
               "     --log-target=TARGET   Set log target (console, journal,\n"
               "                                           journal-or-kmsg,\n"
               "                                           kmsg, null)\n"
               "     --log-level=LEVEL     Set log level (debug, info, notice,\n"
               "                                          warning, err, crit,\n"
               "                                          alert, emerg)\n"
               "     --log-color=BOOL      Highlight important messages\n"
               "     --log-location=BOOL   Include code location in messages\n"
               "     --log-time=BOOL       Prefix messages with current time\n"
               "     --deserialize=FD      Deserialize process config from FD\n"
               "\nSee the %s for details.\n",
               program_invocation_short_name,
               ansi_highlight(),
               ansi_normal(),
               link);

        return 0;
}

static int parse_argv(int argc, char *argv[]) {
        enum {
                COMMON_GETOPT_ARGS,
                ARG_VERSION,
                ARG_DESERIALIZE,
        };

        static const struct option options[] = {
                { "log-level",      required_argument, NULL, ARG_LOG_LEVEL      },
                { "log-target",     required_argument, NULL, ARG_LOG_TARGET     },
                { "log-color",      required_argument, NULL, ARG_LOG_COLOR      },
                { "log-location",   required_argument, NULL, ARG_LOG_LOCATION   },
                { "log-time",       required_argument, NULL, ARG_LOG_TIME       },
                { "help",           no_argument,       NULL, 'h'                },
                { "version",        no_argument,       NULL, ARG_VERSION        },
                { "deserialize",    required_argument, NULL, ARG_DESERIALIZE    },
                {}
        };

        int c, r;

        assert(argc >= 0);
        assert(argv);

        while ((c = getopt_long(argc, argv, "h", options, NULL)) >= 0)
                switch (c) {
                case 'h':
                        return help();

                case ARG_VERSION:
                        return version();

                case ARG_LOG_LEVEL:
                        r = log_set_max_level_from_string(optarg);
                        if (r < 0)
                                return log_error_errno(r, "Failed to parse log level \"%s\": %m", optarg);

                        break;

                case ARG_LOG_TARGET:
                        r = log_set_target_from_string(optarg);
                        if (r < 0)
                                return log_error_errno(r, "Failed to parse log target \"%s\": %m", optarg);

                        break;

                case ARG_LOG_COLOR:
                        r = log_show_color_from_string(optarg);
                        if (r < 0)
                                return log_error_errno(
                                                r,
                                                "Failed to parse log color setting \"%s\": %m",
                                                optarg);

                        break;

                case ARG_LOG_LOCATION:
                        r = log_show_location_from_string(optarg);
                        if (r < 0)
                                return log_error_errno(
                                                r,
                                                "Failed to parse log location setting \"%s\": %m",
                                                optarg);

                        break;

                case ARG_LOG_TIME:
                        r = log_show_time_from_string(optarg);
                        if (r < 0)
                                return log_error_errno(
                                                r,
                                                "Failed to parse log time setting \"%s\": %m",
                                                optarg);

                        break;

                case ARG_DESERIALIZE: {
                        _cleanup_close_ int fd = -EBADF;
                        FILE *f;

                        fd = parse_fd(optarg);
                        if (fd < 0)
                                return log_error_errno(fd,
                                                       "Failed to parse serialization fd \"%s\": %m",
                                                       optarg);

                        r = fd_cloexec(fd, /* cloexec= */ true);
                        if (r < 0)
                                return log_error_errno(r,
                                                       "Failed to set serialization fd %d to close-on-exec: %m",
                                                       fd);

                        f = take_fdopen(&fd, "r");
                        if (!f)
                                return log_error_errno(errno, "Failed to open serialization fd %d: %m", fd);

                        safe_fclose(arg_serialization);
                        arg_serialization = f;

                        break;
                }

                case '?':
                        return -EINVAL;

                default:
                        assert_not_reached();
                }

        if (!arg_serialization)
                return log_error_errno(SYNTHETIC_ERRNO(EINVAL), "No serialization fd specified.");

        return 1 /* work to do */;
}

static int run(int argc, char *argv[]) {
        _cleanup_fdset_free_ FDSet *fdset = NULL;
        _cleanup_(cgroup_context_done) CGroupContext cgroup_context = {};
        _cleanup_(exec_context_done) ExecContext context = {};
        _cleanup_(exec_command_done) ExecCommand command = {};
        _cleanup_(exec_params_deep_clear) ExecParameters params = EXEC_PARAMETERS_INIT(/* flags= */ 0);
        _cleanup_(exec_shared_runtime_done) ExecSharedRuntime shared = {
                .userns_storage_socket = EBADF_PAIR,
                .netns_storage_socket = EBADF_PAIR,
                .ipcns_storage_socket = EBADF_PAIR,
        };
        _cleanup_(dynamic_creds_done) DynamicCreds dynamic_creds = {};
        _cleanup_(exec_runtime_clear) ExecRuntime runtime = {
                .ephemeral_storage_socket = EBADF_PAIR,
                .shared = &shared,
                .dynamic_creds = &dynamic_creds,
        };
        int exit_status = EXIT_SUCCESS, r;

        exec_context_init(&context);
        cgroup_context_init(&cgroup_context);

        /* We might be starting the journal itself, we'll be told by the caller what to do */
        log_set_always_reopen_console(true);
        log_set_prohibit_ipc(true);
        log_setup();

        r = parse_argv(argc, argv);
        if (r <= 0)
                return r;

        /* Now that we know the intended log target, allow IPC and open the final log target. */
        log_set_prohibit_ipc(false);
        log_open();

        /* Clear ambient capabilities, so services do not inherit them implicitly. Dropping them does
         * not affect the permitted and effective sets which are important for the executor itself to
         * operate. */
        r = capability_ambient_set_apply(0, /* also_inherit= */ false);
        if (r < 0)
                log_warning_errno(r, "Failed to clear ambient capabilities, ignoring: %m");

        /* This call would collect all passed fds and enable CLOEXEC. We'll unset it in exec_invoke (flag_fds)
         * for fds that shall be passed to the child.
         * The serialization fd is set to CLOEXEC in parse_argv, so it's also filtered. */
        r = fdset_new_fill(/* filter_cloexec= */ 0, &fdset);
        if (r < 0)
                return log_error_errno(r, "Failed to create fd set: %m");

        /* Initialize lazily. SMACK is just a few operations, but the SELinux is very slow as it requires
         * loading the entire database in memory, so we will do it lazily only if it is actually needed, to
         * avoid wasting 2ms-10ms for each sd-executor that gets spawned. */
        r = mac_init_lazy();
        if (r < 0)
                return log_error_errno(r, "Failed to initialize MAC layer: %m");

        r = exec_deserialize_invocation(arg_serialization,
                                        fdset,
                                        &context,
                                        &command,
                                        &params,
                                        &runtime,
                                        &cgroup_context);
        if (r < 0)
                return log_error_errno(r, "Failed to deserialize: %m");

        LOG_CONTEXT_PUSH_EXEC(&context, &params);

        arg_serialization = safe_fclose(arg_serialization);
        fdset = fdset_free(fdset);

        r = exec_invoke(&command,
                        &context,
                        &params,
                        &runtime,
                        &cgroup_context,
                        &exit_status);
        if (r < 0) {
                const char *status = ASSERT_PTR(
                                exit_status_to_string(exit_status, EXIT_STATUS_LIBC | EXIT_STATUS_SYSTEMD));

                log_struct_errno(LOG_ERR, r,
                                 LOG_MESSAGE_ID(SD_MESSAGE_SPAWN_FAILED_STR),
                                 LOG_EXEC_MESSAGE(&params, "Failed at step %s spawning %s: %m",
                                                  status, command.path),
                                 LOG_ITEM("EXECUTABLE=%s", command.path));
        } else
                /* r == 0: 'skip' is chosen in the confirm spawn prompt
                 * r > 0:  expected/ignored failure, do not log at error level */
                assert((r == 0) == (exit_status == EXIT_SUCCESS));

        return exit_status;
}

int main(int argc, char *argv[]) {
        int r;

        /* We use safe_fork() for spawning sd-pam helper process, which internally calls rename_process().
         * As the last step of renaming, all saved argvs are memzero()-ed. Hence, we need to save the argv
         * first to prevent showing "intense" cmdline. See #30352. */
        save_argc_argv(argc, argv);

        r = run(argc, argv);

        mac_selinux_finish();
        static_destruct();

        return r < 0 ? EXIT_FAILURE : r;
}

1	/* SPDX-License-Identifier: LGPL-2.1-or-later */
2
3	#include <getopt.h>
4	#include <stdlib.h>
5
6	#include "sd-messages.h"
7
8	#include "alloc-util.h"
9	#include "argv-util.h"
10	#include "build.h"
11	#include "capability-util.h"
12	#include "cgroup.h"
13	#include "dynamic-user.h"
14	#include "exec-invoke.h"
15	#include "execute.h"
16	#include "execute-serialize.h"
17	#include "exit-status.h"
18	#include "fd-util.h"
19	#include "fdset.h"
20	#include "fileio.h"
21	#include "getopt-defs.h"
22	#include "label-util.h"
23	#include "log.h"
24	#include "parse-util.h"
25	#include "pretty-print.h"
26	#include "selinux-util.h"
27	#include "static-destruct.h"
28
29	static FILE *arg_serialization = NULL;
30
31	STATIC_DESTRUCTOR_REGISTER(arg_serialization, fclosep);	32✔
32
33	static int help(void) {	×
34	_cleanup_free_ char *link = NULL;	×
35	int r;	×
36
37	r = terminal_urlify_man("systemd", "1", &link);	×
38	if (r < 0)	×
39	return log_oom();	×
40
41	printf("%s [OPTIONS...]\n\n"	×
42	"%sSandbox and execute processes.%s\n\n"
43	" -h --help Show this help and exit\n"
44	" --version Print version string and exit\n"
45	" --log-target=TARGET Set log target (console, journal,\n"
46	" journal-or-kmsg,\n"
47	" kmsg, null)\n"
48	" --log-level=LEVEL Set log level (debug, info, notice,\n"
49	" warning, err, crit,\n"
50	" alert, emerg)\n"
51	" --log-color=BOOL Highlight important messages\n"
52	" --log-location=BOOL Include code location in messages\n"
53	" --log-time=BOOL Prefix messages with current time\n"
54	" --deserialize=FD Deserialize process config from FD\n"
55	"\nSee the %s for details.\n",
56	program_invocation_short_name,
57	ansi_highlight(),
58	ansi_normal(),
59	link);
60
61	return 0;
62	}
63
64	static int parse_argv(int argc, char *argv[]) {	12,251✔
65	enum {	12,251✔
66	COMMON_GETOPT_ARGS,
67	ARG_VERSION,
68	ARG_DESERIALIZE,
69	};
70
71	static const struct option options[] = {	12,251✔
72	{ "log-level", required_argument, NULL, ARG_LOG_LEVEL },
73	{ "log-target", required_argument, NULL, ARG_LOG_TARGET },
74	{ "log-color", required_argument, NULL, ARG_LOG_COLOR },
75	{ "log-location", required_argument, NULL, ARG_LOG_LOCATION },
76	{ "log-time", required_argument, NULL, ARG_LOG_TIME },
77	{ "help", no_argument, NULL, 'h' },
78	{ "version", no_argument, NULL, ARG_VERSION },
79	{ "deserialize", required_argument, NULL, ARG_DESERIALIZE },
80	{}
81	};
82
83	int c, r;	12,251✔
84
85	assert(argc >= 0);	12,251✔
86	assert(argv);	12,251✔
87
88	while ((c = getopt_long(argc, argv, "h", options, NULL)) >= 0)	49,004✔
89	switch (c) {	36,753✔
90	case 'h':	×
91	return help();	×
92
93	case ARG_VERSION:	×
94	return version();	×
95
96	case ARG_LOG_LEVEL:	12,251✔
97	r = log_set_max_level_from_string(optarg);	12,251✔
98	if (r < 0)	12,251✔
99	return log_error_errno(r, "Failed to parse log level \"%s\": %m", optarg);	×
100
101	break;
102
103	case ARG_LOG_TARGET:	12,251✔
104	r = log_set_target_from_string(optarg);	12,251✔
105	if (r < 0)	12,251✔
106	return log_error_errno(r, "Failed to parse log target \"%s\": %m", optarg);	×
107
108	break;
109
110	case ARG_LOG_COLOR:	×
111	r = log_show_color_from_string(optarg);	×
112	if (r < 0)	×
113	return log_error_errno(	×
114	r,
115	"Failed to parse log color setting \"%s\": %m",
116	optarg);
117
118	break;
119
120	case ARG_LOG_LOCATION:	×
121	r = log_show_location_from_string(optarg);	×
122	if (r < 0)	×
123	return log_error_errno(	×
124	r,
125	"Failed to parse log location setting \"%s\": %m",
126	optarg);
127
128	break;
129
130	case ARG_LOG_TIME:	×
131	r = log_show_time_from_string(optarg);	×
132	if (r < 0)	×
133	return log_error_errno(	×
134	r,
135	"Failed to parse log time setting \"%s\": %m",
136	optarg);
137
138	break;
139
140	case ARG_DESERIALIZE: {	12,251✔
141	_cleanup_close_ int fd = -EBADF;	12,251✔
142	FILE *f;	12,251✔
143
144	fd = parse_fd(optarg);	12,251✔
145	if (fd < 0)	12,251✔
146	return log_error_errno(fd,	×
147	"Failed to parse serialization fd \"%s\": %m",
148	optarg);
149
150	r = fd_cloexec(fd, /* cloexec= */ true);	12,251✔
151	if (r < 0)	12,251✔
152	return log_error_errno(r,	×
153	"Failed to set serialization fd %d to close-on-exec: %m",
154	fd);
155
156	f = take_fdopen(&fd, "r");	12,251✔
157	if (!f)	12,251✔
158	return log_error_errno(errno, "Failed to open serialization fd %d: %m", fd);	×
159
160	safe_fclose(arg_serialization);	12,251✔
161	arg_serialization = f;	12,251✔
162
163	break;	12,251✔
164	}
165
166	case '?':
167	return -EINVAL;
168
169	default:	×
170	assert_not_reached();	×
171	}
172
173	if (!arg_serialization)	12,251✔
174	return log_error_errno(SYNTHETIC_ERRNO(EINVAL), "No serialization fd specified.");	×
175
176	return 1 /* work to do */;
177	}
178
179	static int run(int argc, char *argv[]) {	12,251✔
180	_cleanup_fdset_free_ FDSet *fdset = NULL;	32✔
181	_cleanup_(cgroup_context_done) CGroupContext cgroup_context = {};	32✔
182	_cleanup_(exec_context_done) ExecContext context = {};	32✔
183	_cleanup_(exec_command_done) ExecCommand command = {};	32✔
184	_cleanup_(exec_params_deep_clear) ExecParameters params = EXEC_PARAMETERS_INIT(/* flags= */ 0);	32✔
185	_cleanup_(exec_shared_runtime_done) ExecSharedRuntime shared = {	32✔
186	.userns_storage_socket = EBADF_PAIR,
187	.netns_storage_socket = EBADF_PAIR,
188	.ipcns_storage_socket = EBADF_PAIR,
189	};
190	_cleanup_(dynamic_creds_done) DynamicCreds dynamic_creds = {};	32✔
191	_cleanup_(exec_runtime_clear) ExecRuntime runtime = {	32✔
192	.ephemeral_storage_socket = EBADF_PAIR,
193	.shared = &shared,
194	.dynamic_creds = &dynamic_creds,
195	};
196	int exit_status = EXIT_SUCCESS, r;	12,251✔
197
198	exec_context_init(&context);	12,251✔
199	cgroup_context_init(&cgroup_context);	12,251✔
200
201	/* We might be starting the journal itself, we'll be told by the caller what to do */
202	log_set_always_reopen_console(true);	12,251✔
203	log_set_prohibit_ipc(true);	12,251✔
204	log_setup();	12,251✔
205
206	r = parse_argv(argc, argv);	12,251✔
207	if (r <= 0)	12,251✔
208	return r;
209
210	/* Now that we know the intended log target, allow IPC and open the final log target. */
211	log_set_prohibit_ipc(false);	12,251✔
212	log_open();	12,251✔
213
214	/* Clear ambient capabilities, so services do not inherit them implicitly. Dropping them does
215	* not affect the permitted and effective sets which are important for the executor itself to
216	* operate. */
217	r = capability_ambient_set_apply(0, /* also_inherit= */ false);	12,251✔
218	if (r < 0)	12,251✔
219	log_warning_errno(r, "Failed to clear ambient capabilities, ignoring: %m");	×
220
221	/* This call would collect all passed fds and enable CLOEXEC. We'll unset it in exec_invoke (flag_fds)
222	* for fds that shall be passed to the child.
223	* The serialization fd is set to CLOEXEC in parse_argv, so it's also filtered. */
224	r = fdset_new_fill(/* filter_cloexec= */ 0, &fdset);	12,251✔
225	if (r < 0)	12,251✔
226	return log_error_errno(r, "Failed to create fd set: %m");	×
227
228	/* Initialize lazily. SMACK is just a few operations, but the SELinux is very slow as it requires
229	* loading the entire database in memory, so we will do it lazily only if it is actually needed, to
230	* avoid wasting 2ms-10ms for each sd-executor that gets spawned. */
231	r = mac_init_lazy();	12,251✔
232	if (r < 0)	12,251✔
233	return log_error_errno(r, "Failed to initialize MAC layer: %m");	×
234
235	r = exec_deserialize_invocation(arg_serialization,	12,251✔
236	fdset,
237	&context,
238	&command,
239	&params,
240	&runtime,
241	&cgroup_context);
242	if (r < 0)	12,251✔
243	return log_error_errno(r, "Failed to deserialize: %m");	×
244
245	LOG_CONTEXT_PUSH_EXEC(&context, &params);	35,423✔
246
247	arg_serialization = safe_fclose(arg_serialization);	12,251✔
248	fdset = fdset_free(fdset);	12,251✔
249
250	r = exec_invoke(&command,	12,251✔
251	&context,
252	&params,
253	&runtime,
254	&cgroup_context,
255	&exit_status);
256	if (r < 0) {	32✔
257	const char *status = ASSERT_PTR(	31✔
258	exit_status_to_string(exit_status, EXIT_STATUS_LIBC \| EXIT_STATUS_SYSTEMD));
259
260	log_struct_errno(LOG_ERR, r,	31✔
261	LOG_MESSAGE_ID(SD_MESSAGE_SPAWN_FAILED_STR),
262	LOG_EXEC_MESSAGE(&params, "Failed at step %s spawning %s: %m",
263	status, command.path),
264	LOG_ITEM("EXECUTABLE=%s", command.path));
265	} else
266	/* r == 0: 'skip' is chosen in the confirm spawn prompt
267	* r > 0: expected/ignored failure, do not log at error level */
268	assert((r == 0) == (exit_status == EXIT_SUCCESS));	1✔
269
270	return exit_status;	32✔
271	}
272
273	int main(int argc, char *argv[]) {	12,251✔
274	int r;	12,251✔
275
276	/* We use safe_fork() for spawning sd-pam helper process, which internally calls rename_process().
277	* As the last step of renaming, all saved argvs are memzero()-ed. Hence, we need to save the argv
278	* first to prevent showing "intense" cmdline. See #30352. */
279	save_argc_argv(argc, argv);	12,251✔
280
281	r = run(argc, argv);	12,251✔
282
283	mac_selinux_finish();	32✔
284	static_destruct();	32✔
285
286	return r < 0 ? EXIT_FAILURE : r;	32✔
287	}

systemd / systemd / 19086794632

Source File Press 'n' to go to next uncovered line, 'b' for previous

Source File
Press 'n' to go to next uncovered line, 'b' for previous