mirror of
https://github.com/morgan9e/systemd
synced 2026-04-14 08:25:20 +09:00
When running unprivileged containers, we run into a scenario where an unpriv owned cgroup has a subcgroup delegated to another user (i.e. the container's own UIDs). When the owner of that cgroup dies without cleaning it up then the unpriv service manager might encounter a cgroup it cannot delete anymore. Let's address that: let's expose a method call on the service manager (primarly in PID1) that can be used to delete a subcgroup of a unit one owns. This would then allow the unpriv service manager to ask the priv service manager to get rid of such a cgroup. This commit only adds the method call, the next commit then adds the code that makes use of this.
57 lines
2.7 KiB
C
57 lines
2.7 KiB
C
/* SPDX-License-Identifier: LGPL-2.1-or-later */
|
|
#pragma once
|
|
|
|
#include "sd-bus.h"
|
|
|
|
#include "unit.h"
|
|
|
|
extern const sd_bus_vtable bus_unit_vtable[];
|
|
extern const sd_bus_vtable bus_unit_cgroup_vtable[];
|
|
|
|
void bus_unit_send_change_signal(Unit *u);
|
|
void bus_unit_send_pending_change_signal(Unit *u, bool including_new);
|
|
int bus_unit_send_pending_freezer_message(Unit *u, bool cancelled);
|
|
void bus_unit_send_removed_signal(Unit *u);
|
|
|
|
int bus_unit_method_start_generic(sd_bus_message *message, Unit *u, JobType job_type, bool reload_if_possible, sd_bus_error *error);
|
|
int bus_unit_method_enqueue_job(sd_bus_message *message, void *userdata, sd_bus_error *error);
|
|
int bus_unit_method_kill(sd_bus_message *message, void *userdata, sd_bus_error *error);
|
|
int bus_unit_method_reset_failed(sd_bus_message *message, void *userdata, sd_bus_error *error);
|
|
|
|
int bus_unit_set_properties(Unit *u, sd_bus_message *message, UnitWriteFlags flags, bool commit, sd_bus_error *error);
|
|
int bus_unit_method_set_properties(sd_bus_message *message, void *userdata, sd_bus_error *error);
|
|
int bus_unit_method_get_processes(sd_bus_message *message, void *userdata, sd_bus_error *error);
|
|
int bus_unit_method_attach_processes(sd_bus_message *message, void *userdata, sd_bus_error *error);
|
|
int bus_unit_method_remove_subgroup(sd_bus_message *message, void *userdata, sd_bus_error *error);
|
|
int bus_unit_method_ref(sd_bus_message *message, void *userdata, sd_bus_error *error);
|
|
int bus_unit_method_unref(sd_bus_message *message, void *userdata, sd_bus_error *error);
|
|
int bus_unit_method_clean(sd_bus_message *message, void *userdata, sd_bus_error *error);
|
|
int bus_unit_method_freeze(sd_bus_message *message, void *userdata, sd_bus_error *error);
|
|
int bus_unit_method_thaw(sd_bus_message *message, void *userdata, sd_bus_error *error);
|
|
|
|
typedef enum BusUnitQueueFlags {
|
|
BUS_UNIT_QUEUE_RELOAD_IF_POSSIBLE = 1 << 0,
|
|
BUS_UNIT_QUEUE_VERBOSE_REPLY = 1 << 1,
|
|
} BusUnitQueueFlags;
|
|
|
|
int bus_unit_queue_job_one(
|
|
sd_bus_message *message,
|
|
Unit *u,
|
|
JobType type,
|
|
JobMode mode,
|
|
BusUnitQueueFlags flags,
|
|
sd_bus_message *reply,
|
|
sd_bus_error *error);
|
|
int bus_unit_queue_job(
|
|
sd_bus_message *message,
|
|
Unit *u,
|
|
JobType type,
|
|
JobMode mode,
|
|
BusUnitQueueFlags flags,
|
|
sd_bus_error *error);
|
|
int bus_unit_validate_load_state(Unit *u, sd_bus_error *error);
|
|
|
|
int bus_unit_track_add_name(Unit *u, const char *name);
|
|
int bus_unit_track_add_sender(Unit *u, sd_bus_message *m);
|
|
int bus_unit_track_remove_sender(Unit *u, sd_bus_message *m);
|