#include <errno.h>

#include <fcntl.h>

#include <signal.h>

#include <stdint.h>

#include <stdlib.h>

#include <string.h>

#include <sys/socket.h>

#include <syslog.h>

#include <time.h>

#include <unistd.h>

#include "sd-id128.h"

#include "sd-journal.h"

#include "alloc-util.h"

#include "fd-util.h"

#include "formats-util.h"

#include "hashmap.h"

#include "hostname-util.h"

#include "io-util.h"

#include "journal-internal.h"

#include "log.h"

#include "logs-show.h"

#include "macro.h"

#include "output-mode.h"

#include "parse-util.h"

#include "process-util.h"

#include "sparse-endian.h"

#include "string-table.h"

#include "string-util.h"

#include "terminal-util.h"

#include "time-util.h"

#include "utf8.h"

#include "util.h"

#define PRINT_LINE_THRESHOLD 3

#define PRINT_CHAR_THRESHOLD 300

#define JSON_THRESHOLD 4096

static int print_catalog(FILE *f, sd_journal *j) {

int r;

_cleanup_free_ char *t = NULL, *z = NULL;

r = sd_journal_get_catalog(j, &t);

if (r < 0)

return r;

z = strreplace(strstrip(t), "\n", "\n-- ");

if (!z)

return log_oom();

fputs("-- ", f);

fputs(z, f);

fputc('\n', f);

return 0;

}

static int parse_field(const void *data, size_t length, const char *field, char **target, size_t *target_size) {

size_t fl, nl;

void *buf;

assert(data);

assert(field);

assert(target);

assert(target_size);

fl = strlen(field);

if (length < fl)

return 0;

if (memcmp(data, field, fl))

return 0;

nl = length - fl;

buf = malloc(nl+1);

if (!buf)

return log_oom();

memcpy(buf, (const char*) data + fl, nl);

((char*)buf)[nl] = 0;

free(*target);

*target = buf;

*target_size = nl;

return 1;

}

static bool shall_print(const char *p, size_t l, OutputFlags flags) {

assert(p);

if (flags & OUTPUT_SHOW_ALL)

return true;

if (l >= PRINT_CHAR_THRESHOLD)

return false;

if (!utf8_is_printable(p, l))

return false;

return true;

}

static bool print_multiline(FILE *f, unsigned prefix, unsigned n_columns, OutputFlags flags, int priority, const char* message, size_t message_len) {

const char *color_on = "", *color_off = "";

const char *pos, *end;

bool ellipsized = false;

int line = 0;

if (flags & OUTPUT_COLOR) {

if (priority <= LOG_ERR) {

color_on = ANSI_HIGHLIGHT_RED;

color_off = ANSI_NORMAL;

} else if (priority <= LOG_NOTICE) {

color_on = ANSI_HIGHLIGHT;

color_off = ANSI_NORMAL;

}

}

/* A special case: make sure that we print a newline when

if (message_len == 0)

fputs("\n", f);

for (pos = message;

pos < message + message_len;

pos = end + 1, line++) {

bool continuation = line > 0;

bool tail_line;

int len;

for (end = pos; end < message + message_len && *end != '\n'; end++)

;

len = end - pos;

assert(len >= 0);

/* We need to figure out when we are showing not-last line, *and*

tail_line =

line + 1 == PRINT_LINE_THRESHOLD ||

end + 1 >= message + PRINT_CHAR_THRESHOLD;

if (flags & (OUTPUT_FULL_WIDTH | OUTPUT_SHOW_ALL) ||

(prefix + len + 1 < n_columns && !tail_line)) {

fprintf(f, "%*s%s%.*s%s\n",

continuation * prefix, "",

color_on, len, pos, color_off);

continue;

}

/* Beyond this point, ellipsization will happen. */

ellipsized = true;

if (prefix < n_columns && n_columns - prefix >= 3) {

if (n_columns - prefix > (unsigned) len + 3)

fprintf(f, "%*s%s%.*s...%s\n",

continuation * prefix, "",

color_on, len, pos, color_off);

else {

_cleanup_free_ char *e;

e = ellipsize_mem(pos, len, n_columns - prefix,

tail_line ? 100 : 90);

if (!e)

fprintf(f, "%*s%s%.*s%s\n",

continuation * prefix, "",

color_on, len, pos, color_off);

else

fprintf(f, "%*s%s%s%s\n",

continuation * prefix, "",

color_on, e, color_off);

}

} else

fputs("...\n", f);

if (tail_line)

break;

}

return ellipsized;

}

static int output_short(

FILE *f,

sd_journal *j,

OutputMode mode,

unsigned n_columns,

OutputFlags flags) {

int r;

const void *data;

size_t length;

size_t n = 0;

_cleanup_free_ char *hostname = NULL, *identifier = NULL, *comm = NULL, *pid = NULL, *fake_pid = NULL, *message = NULL, *realtime = NULL, *monotonic = NULL, *priority = NULL;

size_t hostname_len = 0, identifier_len = 0, comm_len = 0, pid_len = 0, fake_pid_len = 0, message_len = 0, realtime_len = 0, monotonic_len = 0, priority_len = 0;

int p = LOG_INFO;

bool ellipsized = false;

assert(f);

assert(j);

/* Set the threshold to one bigger than the actual print

sd_journal_set_data_threshold(j, flags & (OUTPUT_SHOW_ALL|OUTPUT_FULL_WIDTH) ? 0 : PRINT_CHAR_THRESHOLD + 1);

JOURNAL_FOREACH_DATA_RETVAL(j, data, length, r) {

r = parse_field(data, length, "PRIORITY=", &priority, &priority_len);

if (r < 0)

return r;

else if (r > 0)

continue;

r = parse_field(data, length, "_HOSTNAME=", &hostname, &hostname_len);

if (r < 0)

return r;

else if (r > 0)

continue;

r = parse_field(data, length, "SYSLOG_IDENTIFIER=", &identifier, &identifier_len);

if (r < 0)

return r;

else if (r > 0)

continue;

r = parse_field(data, length, "_COMM=", &comm, &comm_len);

if (r < 0)

return r;

else if (r > 0)

continue;

r = parse_field(data, length, "_PID=", &pid, &pid_len);

if (r < 0)

return r;

else if (r > 0)

continue;

r = parse_field(data, length, "SYSLOG_PID=", &fake_pid, &fake_pid_len);

if (r < 0)

return r;

else if (r > 0)

continue;

r = parse_field(data, length, "_SOURCE_REALTIME_TIMESTAMP=", &realtime, &realtime_len);

if (r < 0)

return r;

else if (r > 0)

continue;

r = parse_field(data, length, "_SOURCE_MONOTONIC_TIMESTAMP=", &monotonic, &monotonic_len);

if (r < 0)

return r;

else if (r > 0)

continue;

r = parse_field(data, length, "MESSAGE=", &message, &message_len);

if (r < 0)

return r;

}

if (r < 0)

return log_error_errno(r, "Failed to get journal fields: %m");

if (!message) {

log_debug("Skipping message without MESSAGE= field.");

return 0;

}

if (!(flags & OUTPUT_SHOW_ALL))

strip_tab_ansi(&message, &message_len);

if (priority_len == 1 && *priority >= '0' && *priority <= '7')

p = *priority - '0';

if (mode == OUTPUT_SHORT_MONOTONIC) {

uint64_t t;

sd_id128_t boot_id;

r = -ENOENT;

if (monotonic)

r = safe_atou64(monotonic, &t);

if (r < 0)

r = sd_journal_get_monotonic_usec(j, &t, &boot_id);

if (r < 0)

return log_error_errno(r, "Failed to get monotonic timestamp: %m");

fprintf(f, "[%5llu.%06llu]",

(unsigned long long) (t / USEC_PER_SEC),

(unsigned long long) (t % USEC_PER_SEC));

n += 1 + 5 + 1 + 6 + 1;

} else {

char buf[64];

uint64_t x;

time_t t;

struct tm tm;

struct tm *(*gettime_r)(const time_t *, struct tm *);

r = -ENOENT;

gettime_r = (flags & OUTPUT_UTC) ? gmtime_r : localtime_r;

if (realtime)

r = safe_atou64(realtime, &x);

if (r < 0)

r = sd_journal_get_realtime_usec(j, &x);

if (r < 0)

return log_error_errno(r, "Failed to get realtime timestamp: %m");

t = (time_t) (x / USEC_PER_SEC);

switch(mode) {

case OUTPUT_SHORT_ISO:

r = strftime(buf, sizeof(buf), "%Y-%m-%dT%H:%M:%S%z", gettime_r(&t, &tm));

break;

case OUTPUT_SHORT_PRECISE:

r = strftime(buf, sizeof(buf), "%b %d %H:%M:%S", gettime_r(&t, &tm));

if (r > 0)

snprintf(buf + strlen(buf), sizeof(buf) - strlen(buf),

".%06llu", (unsigned long long) (x % USEC_PER_SEC));

break;

default:

r = strftime(buf, sizeof(buf), "%b %d %H:%M:%S", gettime_r(&t, &tm));

}

if (r <= 0) {

log_error("Failed to format time.");

return -EINVAL;

}

fputs(buf, f);

n += strlen(buf);

}

if (hostname && shall_print(hostname, hostname_len, flags)) {

fprintf(f, " %.*s", (int) hostname_len, hostname);

n += hostname_len + 1;

}

if (identifier && shall_print(identifier, identifier_len, flags)) {

fprintf(f, " %.*s", (int) identifier_len, identifier);

n += identifier_len + 1;

} else if (comm && shall_print(comm, comm_len, flags)) {

fprintf(f, " %.*s", (int) comm_len, comm);

n += comm_len + 1;

} else

fputs(" unknown", f);

if (pid && shall_print(pid, pid_len, flags)) {

fprintf(f, "[%.*s]", (int) pid_len, pid);

n += pid_len + 2;

} else if (fake_pid && shall_print(fake_pid, fake_pid_len, flags)) {

fprintf(f, "[%.*s]", (int) fake_pid_len, fake_pid);

n += fake_pid_len + 2;

}

if (!(flags & OUTPUT_SHOW_ALL) && !utf8_is_printable(message, message_len)) {

char bytes[FORMAT_BYTES_MAX];

fprintf(f, ": [%s blob data]\n", format_bytes(bytes, sizeof(bytes), message_len));

} else {

fputs(": ", f);

ellipsized |=

print_multiline(f, n + 2, n_columns, flags, p, message, message_len);

}

if (flags & OUTPUT_CATALOG)

print_catalog(f, j);

return ellipsized;

}

static int output_verbose(

FILE *f,

sd_journal *j,

OutputMode mode,

unsigned n_columns,

OutputFlags flags) {

const void *data;

size_t length;

_cleanup_free_ char *cursor = NULL;

uint64_t realtime;

char ts[FORMAT_TIMESTAMP_MAX + 7];

int r;

assert(f);

assert(j);

sd_journal_set_data_threshold(j, 0);

r = sd_journal_get_data(j, "_SOURCE_REALTIME_TIMESTAMP", &data, &length);

if (r == -ENOENT)

log_debug("Source realtime timestamp not found");

else if (r < 0)

return log_full_errno(r == -EADDRNOTAVAIL ? LOG_DEBUG : LOG_ERR, r, "Failed to get source realtime timestamp: %m");

else {

_cleanup_free_ char *value = NULL;

size_t size;

r = parse_field(data, length, "_SOURCE_REALTIME_TIMESTAMP=", &value, &size);

if (r < 0)

return r;

else {

assert(r > 0);

r = safe_atou64(value, &realtime);

if (r < 0)

log_debug_errno(r, "Failed to parse realtime timestamp: %m");

}

}

if (r < 0) {

r = sd_journal_get_realtime_usec(j, &realtime);

if (r < 0)

return log_full_errno(r == -EADDRNOTAVAIL ? LOG_DEBUG : LOG_ERR, r, "Failed to get realtime timestamp: %m");

}

r = sd_journal_get_cursor(j, &cursor);

if (r < 0)

return log_error_errno(r, "Failed to get cursor: %m");

fprintf(f, "%s [%s]\n",

flags & OUTPUT_UTC ?

format_timestamp_us_utc(ts, sizeof(ts), realtime) :

format_timestamp_us(ts, sizeof(ts), realtime),

cursor);

JOURNAL_FOREACH_DATA_RETVAL(j, data, length, r) {

const char *c;

int fieldlen;

const char *on = "", *off = "";

c = memchr(data, '=', length);

if (!c) {

log_error("Invalid field.");

return -EINVAL;

}

fieldlen = c - (const char*) data;

if (flags & OUTPUT_COLOR && startswith(data, "MESSAGE=")) {

on = ANSI_HIGHLIGHT;

off = ANSI_NORMAL;

}

if (flags & OUTPUT_SHOW_ALL ||

(((length < PRINT_CHAR_THRESHOLD) || flags & OUTPUT_FULL_WIDTH)

&& utf8_is_printable(data, length))) {

fprintf(f, " %s%.*s=", on, fieldlen, (const char*)data);

print_multiline(f, 4 + fieldlen + 1, 0, OUTPUT_FULL_WIDTH, 0, c + 1, length - fieldlen - 1);

fputs(off, f);

} else {

char bytes[FORMAT_BYTES_MAX];

fprintf(f, " %s%.*s=[%s blob data]%s\n",

on,

(int) (c - (const char*) data),

(const char*) data,

format_bytes(bytes, sizeof(bytes), length - (c - (const char *) data) - 1),

off);

}

}

if (r < 0)

return r;

if (flags & OUTPUT_CATALOG)

print_catalog(f, j);

return 0;

}

static int output_export(

FILE *f,

sd_journal *j,

OutputMode mode,

unsigned n_columns,

OutputFlags flags) {

sd_id128_t boot_id;

char sid[33];

int r;

usec_t realtime, monotonic;

_cleanup_free_ char *cursor = NULL;

const void *data;

size_t length;

assert(j);

sd_journal_set_data_threshold(j, 0);

r = sd_journal_get_realtime_usec(j, &realtime);

if (r < 0)

return log_error_errno(r, "Failed to get realtime timestamp: %m");

r = sd_journal_get_monotonic_usec(j, &monotonic, &boot_id);

if (r < 0)

return log_error_errno(r, "Failed to get monotonic timestamp: %m");

r = sd_journal_get_cursor(j, &cursor);

if (r < 0)

return log_error_errno(r, "Failed to get cursor: %m");

fprintf(f,

"__CURSOR=%s\n"

"__REALTIME_TIMESTAMP="USEC_FMT"\n"

"__MONOTONIC_TIMESTAMP="USEC_FMT"\n"

"_BOOT_ID=%s\n",

cursor,

realtime,

monotonic,

sd_id128_to_string(boot_id, sid));

JOURNAL_FOREACH_DATA_RETVAL(j, data, length, r) {

/* We already printed the boot id, from the data in

if (length >= 9 &&

startswith(data, "_BOOT_ID="))

continue;

if (utf8_is_printable_newline(data, length, false))

fwrite(data, length, 1, f);

else {

const char *c;

uint64_t le64;

c = memchr(data, '=', length);

if (!c) {

log_error("Invalid field.");

return -EINVAL;

}

fwrite(data, c - (const char*) data, 1, f);

fputc('\n', f);

le64 = htole64(length - (c - (const char*) data) - 1);

fwrite(&le64, sizeof(le64), 1, f);

fwrite(c + 1, length - (c - (const char*) data) - 1, 1, f);

}

fputc('\n', f);

}

if (r < 0)

return r;

fputc('\n', f);

return 0;

}

void json_escape(

FILE *f,

const char* p,

size_t l,

OutputFlags flags) {

assert(f);

assert(p);

if (!(flags & OUTPUT_SHOW_ALL) && l >= JSON_THRESHOLD)

fputs("null", f);

else if (!utf8_is_printable(p, l)) {

bool not_first = false;

fputs("[ ", f);

while (l > 0) {

if (not_first)

fprintf(f, ", %u", (uint8_t) *p);

else {

not_first = true;

fprintf(f, "%u", (uint8_t) *p);

}

p++;

l--;

}

fputs(" ]", f);

} else {

fputc('\"', f);

while (l > 0) {

if (*p == '"' || *p == '\\') {

fputc('\\', f);

fputc(*p, f);

} else if (*p == '\n')

fputs("\\n", f);

else if ((uint8_t) *p < ' ')

fprintf(f, "\\u%04x", (uint8_t) *p);

else

fputc(*p, f);

p++;

l--;

}

fputc('\"', f);

}

}

static int output_json(

FILE *f,

sd_journal *j,

OutputMode mode,

unsigned n_columns,

OutputFlags flags) {

uint64_t realtime, monotonic;

_cleanup_free_ char *cursor = NULL;

const void *data;

size_t length;

sd_id128_t boot_id;

char sid[33], *k;

int r;

Hashmap *h = NULL;

bool done, separator;

assert(j);

sd_journal_set_data_threshold(j, flags & OUTPUT_SHOW_ALL ? 0 : JSON_THRESHOLD);

r = sd_journal_get_realtime_usec(j, &realtime);

if (r < 0)

return log_error_errno(r, "Failed to get realtime timestamp: %m");

r = sd_journal_get_monotonic_usec(j, &monotonic, &boot_id);

if (r < 0)

return log_error_errno(r, "Failed to get monotonic timestamp: %m");

r = sd_journal_get_cursor(j, &cursor);

if (r < 0)

return log_error_errno(r, "Failed to get cursor: %m");

if (mode == OUTPUT_JSON_PRETTY)

fprintf(f,

"{\n"

"\t\"__CURSOR\" : \"%s\",\n"

"\t\"__REALTIME_TIMESTAMP\" : \""USEC_FMT"\",\n"

"\t\"__MONOTONIC_TIMESTAMP\" : \""USEC_FMT"\",\n"

"\t\"_BOOT_ID\" : \"%s\"",

cursor,

realtime,

monotonic,

sd_id128_to_string(boot_id, sid));

else {

if (mode == OUTPUT_JSON_SSE)

fputs("data: ", f);

fprintf(f,

"{ \"__CURSOR\" : \"%s\", "

"\"__REALTIME_TIMESTAMP\" : \""USEC_FMT"\", "

"\"__MONOTONIC_TIMESTAMP\" : \""USEC_FMT"\", "

"\"_BOOT_ID\" : \"%s\"",

cursor,

realtime,

monotonic,

sd_id128_to_string(boot_id, sid));

}

h = hashmap_new(&string_hash_ops);

if (!h)

return log_oom();

/* First round, iterate through the entry and count how often each field appears */

JOURNAL_FOREACH_DATA_RETVAL(j, data, length, r) {

const char *eq;

char *n;

unsigned u;

if (length >= 9 &&

memcmp(data, "_BOOT_ID=", 9) == 0)

continue;

eq = memchr(data, '=', length);

if (!eq)

continue;

n = strndup(data, eq - (const char*) data);

if (!n) {

r = log_oom();

goto finish;

}

u = PTR_TO_UINT(hashmap_get(h, n));

if (u == 0) {

r = hashmap_put(h, n, UINT_TO_PTR(1));

if (r < 0) {

free(n);

log_oom();

goto finish;

}

} else {

r = hashmap_update(h, n, UINT_TO_PTR(u + 1));

free(n);

if (r < 0) {

log_oom();

goto finish;

}

}

}

if (r < 0)

return r;

separator = true;

do {

done = true;

SD_JOURNAL_FOREACH_DATA(j, data, length) {

const char *eq;

char *kk, *n;

size_t m;

unsigned u;

/* We already printed the boot id, from the data in

if (length >= 9 &&

memcmp(data, "_BOOT_ID=", 9) == 0)

continue;

eq = memchr(data, '=', length);

if (!eq)

continue;

if (separator) {

if (mode == OUTPUT_JSON_PRETTY)

fputs(",\n\t", f);

else

fputs(", ", f);

}

m = eq - (const char*) data;

n = strndup(data, m);

if (!n) {

r = log_oom();

goto finish;

}

u = PTR_TO_UINT(hashmap_get2(h, n, (void**) &kk));

if (u == 0) {

/* We already printed this, let's jump to the next */

free(n);

separator = false;

continue;

} else if (u == 1) {

/* Field only appears once, output it directly */

json_escape(f, data, m, flags);

fputs(" : ", f);

json_escape(f, eq + 1, length - m - 1, flags);

hashmap_remove(h, n);

free(kk);

free(n);

separator = true;

continue;

} else {

/* Field appears multiple times, output it as array */

json_escape(f, data, m, flags);

fputs(" : [ ", f);

json_escape(f, eq + 1, length - m - 1, flags);

/* Iterate through the end of the list */

while (sd_journal_enumerate_data(j, &data, &length) > 0) {

if (length < m + 1)

continue;

if (memcmp(data, n, m) != 0)

continue;

if (((const char*) data)[m] != '=')

continue;

fputs(", ", f);

json_escape(f, (const char*) data + m + 1, length - m - 1, flags);

}

fputs(" ]", f);

hashmap_remove(h, n);

free(kk);

free(n);

/* Iterate data fields form the beginning */

done = false;

separator = true;

break;

}

}

} while (!done);

if (mode == OUTPUT_JSON_PRETTY)

fputs("\n}\n", f);

else if (mode == OUTPUT_JSON_SSE)

fputs("}\n\n", f);

else

fputs(" }\n", f);

r = 0;

finish:

while ((k = hashmap_steal_first_key(h)))

free(k);

hashmap_free(h);

return r;

}

static int output_cat(

FILE *f,

sd_journal *j,

OutputMode mode,

unsigned n_columns,

OutputFlags flags) {

const void *data;

size_t l;

int r;

assert(j);

assert(f);

sd_journal_set_data_threshold(j, 0);

r = sd_journal_get_data(j, "MESSAGE", &data, &l);

if (r < 0) {

/* An entry without MESSAGE=? */

if (r == -ENOENT)

return 0;

return log_error_errno(r, "Failed to get data: %m");

}

assert(l >= 8);

fwrite((const char*) data + 8, 1, l - 8, f);

fputc('\n', f);

return 0;

}

static int (*output_funcs[_OUTPUT_MODE_MAX])(

FILE *f,

sd_journal*j,

OutputMode mode,

unsigned n_columns,

OutputFlags flags) = {

[OUTPUT_SHORT] = output_short,

[OUTPUT_SHORT_ISO] = output_short,

[OUTPUT_SHORT_PRECISE] = output_short,

[OUTPUT_SHORT_MONOTONIC] = output_short,

[OUTPUT_VERBOSE] = output_verbose,

[OUTPUT_EXPORT] = output_export,

[OUTPUT_JSON] = output_json,

[OUTPUT_JSON_PRETTY] = output_json,

[OUTPUT_JSON_SSE] = output_json,

[OUTPUT_CAT] = output_cat

};

int output_journal(

FILE *f,

sd_journal *j,

OutputMode mode,

unsigned n_columns,

OutputFlags flags,

bool *ellipsized) {

int ret;

assert(mode >= 0);

assert(mode < _OUTPUT_MODE_MAX);

if (n_columns <= 0)

n_columns = columns();

ret = output_funcs[mode](f, j, mode, n_columns, flags);

fflush(stdout);

if (ellipsized && ret > 0)

*ellipsized = true;

return ret;

}

static int maybe_print_begin_newline(FILE *f, OutputFlags *flags) {

assert(f);

assert(flags);

if (!(*flags & OUTPUT_BEGIN_NEWLINE))

return 0;

/* Print a beginning new line if that's request, but only once

fputc('\n', f);

*flags &= ~OUTPUT_BEGIN_NEWLINE;

return 0;

}

static int show_journal(FILE *f,

sd_journal *j,

OutputMode mode,

unsigned n_columns,

usec_t not_before,

unsigned how_many,

OutputFlags flags,

bool *ellipsized) {

int r;

unsigned line = 0;

bool need_seek = false;

int warn_cutoff = flags & OUTPUT_WARN_CUTOFF;

assert(j);

assert(mode >= 0);

assert(mode < _OUTPUT_MODE_MAX);

/* Seek to end */

r = sd_journal_seek_tail(j);

if (r < 0)

return log_error_errno(r, "Failed to seek to tail: %m");

r = sd_journal_previous_skip(j, how_many);

if (r < 0)

return log_error_errno(r, "Failed to skip previous: %m");

for (;;) {

for (;;) {

usec_t usec;

if (need_seek) {

r = sd_journal_next(j);

if (r < 0)

return log_error_errno(r, "Failed to iterate through journal: %m");

}

if (r == 0)

break;

need_seek = true;

if (not_before > 0) {

r = sd_journal_get_monotonic_usec(j, &usec, NULL);

/* -ESTALE is returned if the

if (r == -ESTALE)

continue;

else if (r < 0)

return log_error_errno(r, "Failed to get journal time: %m");

if (usec < not_before)

continue;

}

line ++;

maybe_print_begin_newline(f, &flags);

r = output_journal(f, j, mode, n_columns, flags, ellipsized);

if (r < 0)

return r;

}

if (warn_cutoff && line < how_many && not_before > 0) {

sd_id128_t boot_id;

usec_t cutoff = 0;

/* Check whether the cutoff line is too early */

r = sd_id128_get_boot(&boot_id);

if (r < 0)

return log_error_errno(r, "Failed to get boot id: %m");

r = sd_journal_get_cutoff_monotonic_usec(j, boot_id, &cutoff, NULL);

if (r < 0)

return log_error_errno(r, "Failed to get journal cutoff time: %m");

if (r > 0 && not_before < cutoff) {

maybe_print_begin_newline(f, &flags);

fprintf(f, "Warning: Journal has been rotated since unit was started. Log output is incomplete or unavailable.\n");

}

warn_cutoff = false;

}

if (!(flags & OUTPUT_FOLLOW))

break;

r = sd_journal_wait(j, USEC_INFINITY);

if (r < 0)

return log_error_errno(r, "Failed to wait for journal: %m");

}

return 0;

}

int add_matches_for_unit(sd_journal *j, const char *unit) {

int r;

char *m1, *m2, *m3, *m4;

assert(j);

assert(unit);

m1 = strjoina("_SYSTEMD_UNIT=", unit);

m2 = strjoina("COREDUMP_UNIT=", unit);

m3 = strjoina("UNIT=", unit);

m4 = strjoina("OBJECT_SYSTEMD_UNIT=", unit);

(void)(

/* Look for messages from the service itself */

(r = sd_journal_add_match(j, m1, 0)) ||

/* Look for coredumps of the service */

(r = sd_journal_add_disjunction(j)) ||

(r = sd_journal_add_match(j, "MESSAGE_ID=fc2e22bc6ee647b6b90729ab34a250b1", 0)) ||

(r = sd_journal_add_match(j, "_UID=0", 0)) ||

(r = sd_journal_add_match(j, m2, 0)) ||

/* Look for messages from PID 1 about this service */

(r = sd_journal_add_disjunction(j)) ||

(r = sd_journal_add_match(j, "_PID=1", 0)) ||

(r = sd_journal_add_match(j, m3, 0)) ||

/* Look for messages from authorized daemons about this service */

(r = sd_journal_add_disjunction(j)) ||

(r = sd_journal_add_match(j, "_UID=0", 0)) ||

(r = sd_journal_add_match(j, m4, 0))

);

if (r == 0 && endswith(unit, ".slice")) {

char *m5 = strappend("_SYSTEMD_SLICE=", unit);

/* Show all messages belonging to a slice */

(void)(

(r = sd_journal_add_disjunction(j)) ||

(r = sd_journal_add_match(j, m5, 0))

);

}

return r;

}

int add_matches_for_user_unit(sd_journal *j, const char *unit, uid_t uid) {

int r;

char *m1, *m2, *m3, *m4;

char muid[sizeof("_UID=") + DECIMAL_STR_MAX(uid_t)];

assert(j);

assert(unit);

m1 = strjoina("_SYSTEMD_USER_UNIT=", unit);

m2 = strjoina("USER_UNIT=", unit);

m3 = strjoina("COREDUMP_USER_UNIT=", unit);

m4 = strjoina("OBJECT_SYSTEMD_USER_UNIT=", unit);

sprintf(muid, "_UID="UID_FMT, uid);

(void) (

/* Look for messages from the user service itself */

(r = sd_journal_add_match(j, m1, 0)) ||

(r = sd_journal_add_match(j, muid, 0)) ||

/* Look for messages from systemd about this service */

(r = sd_journal_add_disjunction(j)) ||

(r = sd_journal_add_match(j, m2, 0)) ||

(r = sd_journal_add_match(j, muid, 0)) ||

/* Look for coredumps of the service */

(r = sd_journal_add_disjunction(j)) ||

(r = sd_journal_add_match(j, m3, 0)) ||

(r = sd_journal_add_match(j, muid, 0)) ||

(r = sd_journal_add_match(j, "_UID=0", 0)) ||

/* Look for messages from authorized daemons about this service */

(r = sd_journal_add_disjunction(j)) ||

(r = sd_journal_add_match(j, m4, 0)) ||

(r = sd_journal_add_match(j, muid, 0)) ||

(r = sd_journal_add_match(j, "_UID=0", 0))

);

if (r == 0 && endswith(unit, ".slice")) {

char *m5 = strappend("_SYSTEMD_SLICE=", unit);

/* Show all messages belonging to a slice */

(void)(

(r = sd_journal_add_disjunction(j)) ||

(r = sd_journal_add_match(j, m5, 0)) ||

(r = sd_journal_add_match(j, muid, 0))

);

}

return r;

}

static int get_boot_id_for_machine(const char *machine, sd_id128_t *boot_id) {

_cleanup_close_pair_ int pair[2] = { -1, -1 };

_cleanup_close_ int pidnsfd = -1, mntnsfd = -1, rootfd = -1;

pid_t pid, child;

siginfo_t si;

char buf[37];

ssize_t k;

int r;

assert(machine);

assert(boot_id);

if (!machine_name_is_valid(machine))

return -EINVAL;

r = container_get_leader(machine, &pid);

if (r < 0)

return r;

r = namespace_open(pid, &pidnsfd, &mntnsfd, NULL, NULL, &rootfd);

if (r < 0)

return r;

if (socketpair(AF_UNIX, SOCK_DGRAM, 0, pair) < 0)

return -errno;

child = fork();

if (child < 0)

return -errno;

if (child == 0) {

int fd;

pair[0] = safe_close(pair[0]);

r = namespace_enter(pidnsfd, mntnsfd, -1, -1, rootfd);

if (r < 0)

_exit(EXIT_FAILURE);

fd = open("/proc/sys/kernel/random/boot_id", O_RDONLY|O_CLOEXEC|O_NOCTTY);

if (fd < 0)

_exit(EXIT_FAILURE);

r = loop_read_exact(fd, buf, 36, false);

safe_close(fd);

if (r < 0)

_exit(EXIT_FAILURE);

k = send(pair[1], buf, 36, MSG_NOSIGNAL);

if (k != 36)

_exit(EXIT_FAILURE);

_exit(EXIT_SUCCESS);

}

pair[1] = safe_close(pair[1]);

r = wait_for_terminate(child, &si);

if (r < 0 || si.si_code != CLD_EXITED || si.si_status != EXIT_SUCCESS)

return r < 0 ? r : -EIO;

k = recv(pair[0], buf, 36, 0);

if (k != 36)

return -EIO;

buf[36] = 0;

r = sd_id128_from_string(buf, boot_id);

if (r < 0)

return r;

return 0;

}

int add_match_this_boot(sd_journal *j, const char *machine) {

char match[9+32+1] = "_BOOT_ID=";

sd_id128_t boot_id;

int r;

assert(j);

if (machine) {

r = get_boot_id_for_machine(machine, &boot_id);

if (r < 0)

return log_error_errno(r, "Failed to get boot id of container %s: %m", machine);

} else {

r = sd_id128_get_boot(&boot_id);

if (r < 0)

return log_error_errno(r, "Failed to get boot id: %m");

}

sd_id128_to_string(boot_id, match + 9);

r = sd_journal_add_match(j, match, strlen(match));

if (r < 0)

return log_error_errno(r, "Failed to add match: %m");

r = sd_journal_add_conjunction(j);

if (r < 0)

return log_error_errno(r, "Failed to add conjunction: %m");

return 0;

}

int show_journal_by_unit(

FILE *f,

const char *unit,

OutputMode mode,

unsigned n_columns,

usec_t not_before,

unsigned how_many,

uid_t uid,

OutputFlags flags,

int journal_open_flags,

bool system_unit,

bool *ellipsized) {

_cleanup_(sd_journal_closep) sd_journal *j = NULL;

int r;

assert(mode >= 0);

assert(mode < _OUTPUT_MODE_MAX);

assert(unit);

if (how_many <= 0)

return 0;

r = sd_journal_open(&j, journal_open_flags);

if (r < 0)

return log_error_errno(r, "Failed to open journal: %m");

r = add_match_this_boot(j, NULL);

if (r < 0)

return r;

if (system_unit)

r = add_matches_for_unit(j, unit);

else

r = add_matches_for_user_unit(j, unit, uid);

if (r < 0)

return log_error_errno(r, "Failed to add unit matches: %m");

if (_unlikely_(log_get_max_level() >= LOG_DEBUG)) {

_cleanup_free_ char *filter;

filter = journal_make_match_string(j);

if (!filter)

return log_oom();

log_debug("Journal filter: %s", filter);

}

return show_journal(f, j, mode, n_columns, not_before, how_many, flags, ellipsized);

}

static const char *const output_mode_table[_OUTPUT_MODE_MAX] = {

[OUTPUT_SHORT] = "short",

[OUTPUT_SHORT_ISO] = "short-iso",

[OUTPUT_SHORT_PRECISE] = "short-precise",

[OUTPUT_SHORT_MONOTONIC] = "short-monotonic",

[OUTPUT_VERBOSE] = "verbose",

[OUTPUT_EXPORT] = "export",

[OUTPUT_JSON] = "json",

[OUTPUT_JSON_PRETTY] = "json-pretty",

[OUTPUT_JSON_SSE] = "json-sse",

[OUTPUT_CAT] = "cat"

};

DEFINE_STRING_TABLE_LOOKUP(output_mode, OutputMode);