Commit Graph

5666 Commits

Author SHA1 Message Date
Roy Marples
5ac1235b99
DHCP: No longer set interface mtu (#346)
We've been enforcing an interface MTU that is slightly larger
than the minimum for some time.
Instead, log an error than the MTU is smaller than the minimum
to send a BOOTP message.

The DHCP MTU is only used when adding routes as setting the
interface MTU can cause a PHY reset which is bad.

Fixes #345
2024-07-29 16:17:08 +01:00
taoyl-g
9330dbb44f
DHCP: Handle option 108 correctly when receiving 0.0.0.0 OFFER (#342)
* DHCP: Handle option 108 correctly when receiving 0.0.0.0 OFFER

According to RFC8925 section 3.3.1, when the server supports both option
108 (IPv6-Only Preferred) and option 116 (Auto-Configure), and the
client only sends IPv6-Only Preferred option, then the server SHOULD
return 0.0.0.0 as the offered address, and not setting the
Auto-Configure option.

However, in our current client code, the IPv6-Only Preferred option in a
0.0.0.0 OFFER is only handled correctly when the Auto-Configure option
is present. This patch fixes this issue.

---------

Co-authored-by: Roy Marples <roy@marples.name>
2024-07-25 11:50:59 +01:00
Leo Ruan
65f5692a12
IPv4LL: Restart ARP probling on address conflict (#340)
* IPv4LL: Restart ARP probling on address conflict

When IPv4LL address conflict is detected, it is failed to restart IPv4LL
since IPv4LL is running. The commit fixes the problem by restarting ARP
probing instead of restarting IPv4LL.

---------

Co-authored-by: Roy Marples <roy@marples.name>
2024-07-25 09:37:11 +01:00
Roy Marples
fff58e65f5 DHCP6: Don't remove state in DISCOVER
As we might still have config that failed to CONFIRM/REBIND.
Try and remove timers more sensibly rather than blaket statements
so that expire timeout still works.
2024-07-09 13:39:45 +01:00
Roy Marples
896f9f8cf7 DHCP6: Persist configuration on confirm/rebind failure
only expire the lease once the last address has expired.
This is more in accordance with RFC8415 18.2.
Note, we still require an initial confirm/rebind on link state
change to ensure the configuration for link is valid.

Extending the lastlease in DHCP6 has been removed.

Fixes #174.
2024-07-09 13:39:07 +01:00
Roy Marples
81a3d19f15 DHCP: Remove an assertation in get_lease if ia is NULL
It's very unlikely that is would be NULL and it only
triggers when a STATIC or INFORM address is ripped out under us.
2024-07-09 13:26:24 +01:00
Roy Marples
b6cbf299bc linux: allow roaming without IFF_DORMANT
IFF_DORMANT is apparently only set by supplicants.
For roaming without supplicants, we need to check that IFF_UP and
IFF_LOWER_UP are set, but IFF_RUNNING is not.

Thanks to Boris Krasnovskiy for the patch.
Fixes #335.

While here, remove our define if IFF_LOWER_UP as we can now include
linux/if.h
2024-06-27 06:32:23 +01:00
Roy Marples
d451274d1a DHCP6: Add commentary around why we read leases
Fixes #336.
2024-06-26 14:09:41 +01:00
Roy Marples
ea10a3d887 privsep: Sweep ELE_ERROR away for BPF
It's just noise and we'll handle NETDOWN in the loop.
We sometimes see it on Linux when a wireless interface "roams"
in fake testing.
2024-06-26 12:30:42 +01:00
Roy Marples
4908d931fc DHCP6: Don't remove delegated prefix addresses on start or fail
In the event where an interface is first delegated and then
started, we don't want the reading of a lease file to remove the
delegated prefixes or addresses.
Neither do we want any DHCP6 failure to remove the delegated
addresses.

As such, we also can't test the actual DHCP6 state when building
routes. Instead, just change the test for a delegated prefix
or not so we can still prefer non delegated routes.

While here, fix reject routes being restored for privsep.

Fixes #333.
2024-06-26 09:36:35 +01:00
Roy Marples
8bc7607216 DHCP6: Don't remove delegated prefix addresses on start
In the event where an interface is first delegated and then
started, we don't want the reading of a lease file to remove the
delegated prefixes or addresses.

As such, we also can't test the actual DHCP6 state when building
routes. Instead, just change the test for a delegated prefix
or not so we can still prefer non delegated routes.

Fixes #333.
2024-06-25 12:08:45 +01:00
Roy Marples
410fae4e55 IPv6: make more readable (nfc) 2024-06-24 12:05:58 +01:00
Roy Marples
7ffa777c1e IPv6: Delay for LL address before delay for start
This syncs with DHCPv6 when waiting for LL.
2024-06-24 12:04:03 +01:00
Roy Marples
612dec0bc0 Fix prior patch which might also fix #333 2024-06-24 12:01:36 +01:00
Roy Marples
34d4ccbd0e IPv6: DUPLICATED could be announced by RTM_DELADDR
This at least is true on Linux when addresses are not permanent.
As such, update address flags on all paths and run DAD hooks
even for address deletions.

This helps to give reason to the messages that pid 0 has deleted
your newly added address.
2024-06-21 13:03:06 +01:00
Roy Marples
21e3dbf971 linux: Prefer local over address when both in netlink RTA
Fixes #332.
2024-06-17 23:50:31 +01:00
Roy Marples
4395477920 Improve and document prior. 2024-06-17 10:04:16 +01:00
Brett Holman
25806878c9 Force dumplease to parse stdin
Checking if data exists in the stdin buffer via an ioctl is
unreliable. Allow a user to pass '-' to force stdin parsing.
This provides a fix that will allow "no interfaces" to still
mean "dump all interfaces".

Fixes #285
2024-06-17 09:48:16 +01:00
Roy Marples
127c0b77a8 configure: add --enable-ntp
It just uncomments the option to request ntp_servers in dhcpcd.conf.
Fixes #331.
2024-06-15 14:02:30 +01:00
Roy Marples
a15ba1987c Release dhcpcd-10.0.8 2024-05-24 17:01:54 +01:00
Roy Marples
486175335c Fix compile for builds without ARP 2024-05-24 15:54:40 +00:00
Roy Marples
e7f139d3be configure: fix the closefrom test
Fixes #327.
2024-05-24 13:23:37 +01:00
Roy Marples
906675d41e Spell ADVERTISEMENT correctly.
Fixes #326
2024-05-24 12:59:32 +01:00
Roy Marples
3067b38dc8 Release dhcpcd-10.0.7 2024-05-24 11:41:54 +01:00
Roy Marples
6149af646b DHCP: use request_time, fallback_time and ipv4ll_time
Rather than reboot time.

This allows reboot time of zero to skip the using old leases
while still allowing REQUESTs to gracefully fallback to DISCOVER.

request_time has a default of 180 seconds to mirror the DHCPv6
equivalent.
fallback_time and ipv4_ll time have a default of 5 seconds
to mirror the default reboot time.

Fixes #325 and affects #255.
2024-05-24 10:30:29 +00:00
Roy Marples
8dc7f72c63 DHCP6: Wait for IRT to elapse before requesting advertisments
RFC 8415 15 and 18.2.1 list this as a MUST.

Fixes #317.
2024-05-17 22:12:26 +00:00
Benjamin Drung
6fd656fb5b hooks/30-hostname: Exit with 0 if setting hostname is not needed
If the hostname is already set before dhcpcd is started, `need_hostname`
will hit the "No old hostname" case and will call `false` to return 1.
`set_hostname` will return with the same return value. Then
`30-hostname` will exit with the same exit value:

```
dhcpcd-10.0.6 starting
dev: loaded udev
DUID 00:03:00:01:3c:97:0e:e9:32:3c
enp0s25: IAID 0e:e9:32:3c
enp0s25: soliciting a DHCP lease
enp0s25: offered 192.168.3.61 from 192.168.1.7
enp0s25: ignoring offer of 192.168.3.61 from 192.168.1.8
enp0s25: probing address 192.168.3.61/20
enp0s25: leased 192.168.3.61 for 3600 seconds
enp0s25: adding route to 192.168.0.0/20
enp0s25: adding default route via 192.168.1.1
script_status: /usr/lib/dhcpcd/dhcpcd-run-hooks: WEXITSTATUS 1
exiting due to oneshot
dhcpcd exited
```

Return with value 0 in case setting the hostname is not needed.

Bug-Ubuntu: https://launchpad.net/bugs/2064926
Signed-off-by: Benjamin Drung <benjamin.drung@canonical.com>
2024-05-13 16:19:40 +01:00
Roy Marples
dfb0dc2577 DHCPv6: Don't re-INFORM if the RA changes
RFC 8415 21.23
If the Reply to an Information-request message does not contain this
option, the client MUST behave as if the option with the value
IRT_DEFAULT was provided.

So we should not be influenced by only the RA changing the pl/vl
times of it's addresses.
2024-05-04 23:33:11 +01:00
Roy Marples
40c99e59aa privsep: Reduce fd use
On start close all FD's above stderr.
Close some fd's we don't need in processes spawned from priv.
Ensure we init some FD's to -1 to ensure we don't close stdin.
If DEBUG_FD is defined, we log FD's opened by pid.
Audit process FD usage and document it so I don't forget it.

Fixes #316.
2024-05-04 12:38:49 +01:00
Roy Marples
6a6c13f46d Add compat support for closefrom cribbed from libbsd
We had compat support in older dhcpcd but we want it faster
when linux supports faster, because, you know, fast.
2024-05-04 12:38:49 +01:00
Roy Marples
5dd6ee1437 dhcpcd: Only drop/release address family specified when given
Fixes #311
2024-04-27 11:12:29 +00:00
Colin McInnes
ad41d26a26 Fix time_offset to be int to match RFC-2132
https://datatracker.ietf.org/doc/html/rfc2132#section-3.4

time_offset (dhcp v4 option 2) should be int32, not uint32, as it can
indicate a time offset east (positive) or west (negative) of zero
meridian.
2024-04-27 12:01:54 +01:00
Roy Marples
0fbd29b0b9 hooks: stop wpa_supplicant on STOPPED
Taken from Void Linux package
2024-04-13 11:16:58 +01:00
Roy Marples
9d2e7e74fd linux: modern kernels can create stable private addresses
Just improve the comment.
Closes #301
2024-04-08 09:31:08 +01:00
Taoyu Li
faa3f54eba Respect IPV6_PREFERRED_ONLY flag on DHS_NONE state
Current IPv6_PREFERRED_ONLY (option 108) handling code is only effective
when current state is DHS_DISCOVER and DHS_REBOOT. However, when we
receive multiple ACKs upon our REQUEST, the first ACK will trigger the
use_v6only code path and dhcp_drop() us into DHS_NONE state, as a result
the option 108 on the second ACK won't be handled correctly and we'll
bind to the lease instead.

This patch fixes the issue by adding DHS_NONE as a state to respect
option 108 as well.
2024-04-02 10:07:39 +01:00
Roy Marples
9f8bb1fc12 compat: stub out _rs_forkhandler for compat/arc4random.c
We need to keep the fd open at fork, but we retained the code to
handle a fork.

The original update to chacha avoided this by guarding the call
but left the code alive which produced an unused function warning
on the GitHub Ubuntu runner.
This update fixes that.
2024-04-02 09:55:18 +01:00
Roy Marples
0ab1dfa54e DHCP6: Remove leading space from delegated_dhcp6_prefix 2024-03-28 16:50:32 +00:00
Daniel Goertzen
f1cf924ad6
add RFC4191 support (#297)
* add RFC4191 support

- handles route information options from RAs.
- refactor `sa_fromprefix()` to expose lower level functionality
- refactor `ipv6nd_rtprefix()` to be usable outside of `struct ra` context

* changes as requested by RM

- mostly minor/cosmetic changes
- functional change: "no longer a default router" warning moved to capture changes from routeinfo options

* simplify routeinfo_find/new
2024-03-09 01:27:57 +00:00
Lloyd Parkes
457f21c112
Define the Azure Endpoint and other site-specific options (#299)
Added the azureendpoint site-specific option as an ipaddress
definition to make it easier for Azure VMs using dhcpcd to get their
WireServer endpoint address.

Added binhex definitions for all otherwise undefined site-specific
options so that site-specific hooks can use them.
2024-02-25 12:21:12 +00:00
Petr Menšík
727c78f503
Move dhcp(v4) packet size check earlier (#295)
dhcp_handlebootp handled zero sized packets correctly, but
dhcp_redirect_dhcp did not have such protection. Move size check before
both of them. Size when called from dhcp_packet is checked by
is_packet_udp_bootp call. Only dhcp_recvmsg needs earlier checking to be
added.

Fixes #283
2024-02-16 16:15:35 +00:00
Roy Marples
8ab7ca1eb4 DHCP: DECLINE address on ARP defend failure
Also, drop the lease.
This should get us a new address from the DHCP server when we
re-enter DISCOVER to avoid looping on the same address and fail
again.
2023-12-24 12:07:25 +00:00
pradeep-brightsign
e65e82a58d
dhcpcd: Add support for arp persist defence (#273)
RFC 5227 recommends 3 ways to deal with address conflict detection.
a) Stop everything.
b) Defend and then stop on fail - this is what dhcpcd currently does.
c) Notify and carry on.

The current change implements the option c. A new option arp_persistdefence
has been added and when this is enabled, the a defence is attempted upon a
conflict and when that fails, an error is logged on every other conflict
within the DEFEND_INTERVAL and the current IP address is retained.

Fixes #272
2023-12-21 10:26:09 +00:00
Roy Marples
1c8ae59836 Release dhcpcd-10.0.6 2023-12-18 15:39:51 +00:00
Roy Marples
01de6f23d3 DHCP6: For Prefix Delegation, the - interface means no assignment
- is an invalid interface name.
So we take this to mean don't assign the Delegated Prefix to
any interfaces.
The reject route for the Delegated Prefix is still installed.

Fixes #270
2023-12-18 12:22:13 +00:00
Roy Marples
c7a142affe DHCP6: Improve logging when changing IA type
Changing from PD to IA or IA to PD can result in a diagnostic
when there is no address to confirm AND we haven't loaded
a lease.
This improves the check and no more Success errors should
be reported.
2023-12-18 12:15:10 +00:00
Roy Marples
411e6539fd Fully configure an interface when being activated.
We need the full configuration - for example dhcpcd.conf
might have environment options for the hooks for the interface
being activated.

Because we now guard against starting protocols with IF_ACTIVE_USER
this is safe.

Fixes #257.
2023-12-14 22:56:00 +00:00
Roy Marples
0a0bbfe74e Fix year 2023-12-12 07:13:29 +00:00
Roy Marples
e337bd7ce4 Document that limiting address protocol can affect signalling dhcpcd
Fixes #264
2023-12-10 08:27:30 +00:00
Roy Marples
6788608eb0 Fix an unused var warning for capsicum for prior 2023-11-13 16:05:04 +00:00
Roy Marples
8d12632c67 Fix privsep builds for prior. 2023-11-13 15:54:50 +00:00