path: root/src/core/nm-checkpoint.c

/* SPDX-License-Identifier: GPL-2.0-or-later */
/*
 * Copyright (C) 2016 Red Hat, Inc.
 */

#include "src/core/nm-default-daemon.h"

#include "nm-checkpoint.h"

#include "nm-active-connection.h"
#include "nm-act-request.h"
#include "libnm-core-aux-intern/nm-auth-subject.h"
#include "nm-core-utils.h"
#include "nm-dbus-interface.h"
#include "devices/nm-device.h"
#include "nm-config.h"
#include "nm-manager.h"
#include "settings/nm-settings.h"
#include "settings/nm-settings-connection.h"
#include "settings/plugins/keyfile/nms-keyfile-storage.h"
#include "nm-simple-connection.h"
#include "nm-utils.h"

/*****************************************************************************/

typedef struct {
    char              *original_dev_path;
    char              *original_dev_name;
    NMDeviceType       dev_type;
    NMDevice          *device;
    NMConnection      *applied_connection;
    NMConnection      *settings_connection;
    guint64            ac_version_id;
    NMDeviceState      state;
    bool               is_software : 1;
    bool               realized : 1;
    bool               activation_lifetime_bound_to_profile_visibility : 1;
    bool               settings_connection_is_unsaved : 1;
    bool               settings_connection_is_shadowed : 1;
    NMUnmanFlagOp      unmanaged_explicit;
    NMActivationReason activation_reason;
    gulong             dev_exported_change_id;
} DeviceCheckpoint;

NM_GOBJECT_PROPERTIES_DEFINE(NMCheckpoint, PROP_DEVICES, PROP_CREATED, PROP_ROLLBACK_TIMEOUT, );

struct _NMCheckpointPrivate {
    /* properties */
    GHashTable *devices;
    GPtrArray  *removed_devices;
    gint64      created_at_ms;
    guint32     rollback_timeout_s;
    guint       timeout_id;
    /* private members */
    NMManager              *manager;
    NMCheckpointCreateFlags flags;
    GHashTable             *connection_uuids;
    gulong                  dev_removed_id;

    NMCheckpointTimeoutCallback timeout_cb;
    gpointer                    timeout_data;

    NMGlobalDnsConfig *global_dns_config;
};

struct _NMCheckpointClass {
    NMDBusObjectClass parent;
};

G_DEFINE_TYPE(NMCheckpoint, nm_checkpoint, NM_TYPE_DBUS_OBJECT)

#define NM_CHECKPOINT_GET_PRIVATE(self) _NM_GET_PRIVATE_PTR(self, NMCheckpoint, NM_IS_CHECKPOINT)

/*****************************************************************************/

#define _NMLOG_PREFIX_NAME "checkpoint"
#define _NMLOG_DOMAIN      LOGD_CORE

#define _NMLOG(level, ...)                                                 \
    G_STMT_START                                                           \
    {                                                                      \
        if (nm_logging_enabled(level, _NMLOG_DOMAIN)) {                    \
            char __prefix[32];                                             \
                                                                           \
            if (self)                                                      \
                g_snprintf(__prefix,                                       \
                           sizeof(__prefix),                               \
                           "%s[%p]",                                       \
                           ""_NMLOG_PREFIX_NAME                            \
                           "",                                             \
                           (self));                                        \
            else                                                           \
                g_strlcpy(__prefix, _NMLOG_PREFIX_NAME, sizeof(__prefix)); \
            _nm_log((level),                                               \
                    (_NMLOG_DOMAIN),                                       \
                    0,                                                     \
                    NULL,                                                  \
                    NULL,                                                  \
                    "%s: " _NM_UTILS_MACRO_FIRST(__VA_ARGS__),             \
                    __prefix _NM_UTILS_MACRO_REST(__VA_ARGS__));           \
        }                                                                  \
    }                                                                      \
    G_STMT_END

/*****************************************************************************/

void
nm_checkpoint_log_destroy(NMCheckpoint *self)
{
    _LOGI("destroy %s", nm_dbus_object_get_path(NM_DBUS_OBJECT(self)));
}

void
nm_checkpoint_set_timeout_callback(NMCheckpoint               *self,
                                   NMCheckpointTimeoutCallback callback,
                                   gpointer                    user_data)
{
    NMCheckpointPrivate *priv = NM_CHECKPOINT_GET_PRIVATE(self);

    /* in glib world, we would have a GSignal for this. But as there
     * is only one subscriber, it's simpler to just set and unset(!)
     * the callback this way. */
    priv->timeout_cb   = callback;
    priv->timeout_data = user_data;
}

NMDevice *
nm_checkpoint_includes_devices(NMCheckpoint *self, NMDevice *const *devices, guint n_devices)
{
    NMCheckpointPrivate *priv = NM_CHECKPOINT_GET_PRIVATE(self);
    guint                i;

    for (i = 0; i < n_devices; i++) {
        if (g_hash_table_contains(priv->devices, devices[i]))
            return devices[i];
    }
    return NULL;
}

NMDevice *
nm_checkpoint_includes_devices_of(NMCheckpoint *self, NMCheckpoint *cp_for_devices)
{
    NMCheckpointPrivate *priv  = NM_CHECKPOINT_GET_PRIVATE(self);
    NMCheckpointPrivate *priv2 = NM_CHECKPOINT_GET_PRIVATE(cp_for_devices);
    GHashTableIter       iter;
    NMDevice            *device;

    g_hash_table_iter_init(&iter, priv2->devices);
    while (g_hash_table_iter_next(&iter, (gpointer *) &device, NULL)) {
        if (g_hash_table_contains(priv->devices, device))
            return device;
    }
    return NULL;
}

static NMSettingsConnection *
find_settings_connection(NMCheckpoint     *self,
                         DeviceCheckpoint *dev_checkpoint,
                         gboolean         *need_update,
                         gboolean         *need_activation)
{
    NMCheckpointPrivate  *priv = NM_CHECKPOINT_GET_PRIVATE(self);
    NMActiveConnection   *active;
    NMSettingsConnection *sett_conn;
    const char           *uuid, *ac_uuid;
    const CList          *tmp_clist;
    gboolean              sett_conn_unsaved;
    gboolean              sett_conn_shadowed;
    NMSettingsStorage    *storage;

    *need_activation = FALSE;
    *need_update     = FALSE;

    uuid      = nm_connection_get_uuid(dev_checkpoint->settings_connection);
    sett_conn = nm_settings_get_connection_by_uuid(NM_SETTINGS_GET, uuid);

    if (!sett_conn)
        return NULL;

    /* Check if the connection changed */
    if (!nm_connection_compare(dev_checkpoint->settings_connection,
                               nm_settings_connection_get_connection(sett_conn),
                               NM_SETTING_COMPARE_FLAG_EXACT)) {
        _LOGT("rollback: settings connection %s changed", uuid);
        *need_update     = TRUE;
        *need_activation = TRUE;
    }

    /* Check if the connection storage changed */
    storage            = nm_settings_connection_get_storage(sett_conn);
    sett_conn_unsaved  = NM_FLAGS_HAS(nm_settings_connection_get_flags(sett_conn),
                                     NM_SETTINGS_CONNECTION_INT_FLAGS_UNSAVED);
    sett_conn_shadowed = storage && nm_settings_storage_get_shadowed_storage(storage, NULL);

    if (sett_conn_unsaved != dev_checkpoint->settings_connection_is_unsaved
        || sett_conn_shadowed != dev_checkpoint->settings_connection_is_shadowed) {
        _LOGT("rollback: storage changed for settings connection %s: unsaved (%d -> %d), shadowed "
              "(%d -> %d)",
              uuid,
              dev_checkpoint->settings_connection_is_unsaved,
              sett_conn_unsaved,
              dev_checkpoint->settings_connection_is_shadowed,
              sett_conn_shadowed);
        *need_update = TRUE;
    }

    /* Check if the active state changed */
    nm_manager_for_each_active_connection (priv->manager, active, tmp_clist) {
        ac_uuid =
            nm_settings_connection_get_uuid(nm_active_connection_get_settings_connection(active));
        if (nm_streq(uuid, ac_uuid)) {
            _LOGT("rollback: connection %s is active", uuid);
            break;
        }
    }

    if (!active) {
        _LOGT("rollback: connection %s is not active", uuid);
        *need_activation = TRUE;
        return sett_conn;
    }

    /* Check if the connection was reactivated/reapplied */
    if (nm_active_connection_version_id_get(active) != dev_checkpoint->ac_version_id) {
        _LOGT("rollback: active connection version id of %s changed", uuid);
        *need_activation = TRUE;
    }

    return sett_conn;
}

static gboolean
restore_and_activate_connection(NMCheckpoint *self, DeviceCheckpoint *dev_checkpoint)
{
    NMCheckpointPrivate            *priv = NM_CHECKPOINT_GET_PRIVATE(self);
    NMSettingsConnection           *connection;
    gs_unref_object NMAuthSubject  *subject     = NULL;
    GError                         *local_error = NULL;
    gboolean                        need_update, need_activation;
    NMSettingsConnectionPersistMode persist_mode;
    NMSettingsConnectionIntFlags    sett_flags;
    NMSettingsConnectionIntFlags    sett_mask;

    connection = find_settings_connection(self, dev_checkpoint, &need_update, &need_activation);

    /* FIXME: we need to ensure to re-create/update the profile for the
     *   same settings plugin. E.g. if it was a keyfile in /run or /etc,
     *   it must be again. If it was previously handled by a certain settings plugin,
     *   so it must again.
     *
     * FIXME: preserve and restore the right settings flags (volatile, nm-generated). */
    sett_flags = NM_SETTINGS_CONNECTION_INT_FLAGS_NONE;
    sett_mask  = NM_SETTINGS_CONNECTION_INT_FLAGS_NONE;

    /* With regard to storage, there are 4 different possible states for the settings
     * connection: 1) persistent; 2) in-memory only; 3) in-memory shadowing a persistent
     * file; 4) in-memory shadowing a detached persistent file (i.e. the deletion of
     * the connection doesn't delete the persistent file).
     * It would be difficult to implement the full rollback of the exact state for the
     * last two cases because that would require to store information about the shadowed
     * storage, restore the file and the nmmeta section in /run.
     * Therefore, if we need to roll back a in-memory-with-shadowed-file connection,
     * promote it to a full persistent connection.
     */
    if (dev_checkpoint->settings_connection_is_unsaved
        && !dev_checkpoint->settings_connection_is_shadowed) {
        persist_mode = NM_SETTINGS_CONNECTION_PERSIST_MODE_IN_MEMORY_ONLY;
    } else {
        if (dev_checkpoint->settings_connection_is_unsaved) {
            _LOGW("rollback: device \"%s\" had an in-memory connection with persistent "
                  "storage. After rollback, the connection will become persistent",
                  dev_checkpoint->original_dev_name);
        }
        persist_mode = NM_SETTINGS_CONNECTION_PERSIST_MODE_TO_DISK;
    }

    if (connection) {
        if (need_update) {
            _LOGD("rollback: updating connection %s", nm_settings_connection_get_uuid(connection));
            nm_settings_connection_update(
                connection,
                NULL,
                dev_checkpoint->settings_connection,
                persist_mode,
                sett_flags,
                sett_mask,
                NM_SETTINGS_CONNECTION_UPDATE_REASON_RESET_SYSTEM_SECRETS
                    | NM_SETTINGS_CONNECTION_UPDATE_REASON_UPDATE_NON_SECRET,
                "checkpoint-rollback",
                NULL);
        }
    } else {
        /* The connection was deleted, recreate it */
        _LOGD("rollback: adding connection %s again",
              nm_connection_get_uuid(dev_checkpoint->settings_connection));

        if (!nm_settings_add_connection(NM_SETTINGS_GET,
                                        NULL,
                                        dev_checkpoint->settings_connection,
                                        persist_mode,
                                        NM_SETTINGS_CONNECTION_ADD_REASON_NONE,
                                        sett_flags,
                                        &connection,
                                        &local_error)) {
            _LOGD("rollback: connection add failure: %s", local_error->message);
            g_clear_error(&local_error);
            return FALSE;
        }
        need_activation = TRUE;
    }

    /* If the device is software, a brand new NMDevice may have been created
     * after adding the new connection; or the old device might have been
     * deleted and we need to fetch it again. */
    if (dev_checkpoint->is_software && !dev_checkpoint->device) {
        dev_checkpoint->device = nm_manager_get_device(priv->manager,
                                                       dev_checkpoint->original_dev_name,
                                                       dev_checkpoint->dev_type);
        nm_g_object_ref(dev_checkpoint->device);
    }

    if (!dev_checkpoint->device) {
        _LOGD("rollback: device cannot be restored");
        return FALSE;
    }

    if (need_activation) {
        _LOGD("rollback: reactivating connection %s", nm_settings_connection_get_uuid(connection));
        subject = nm_auth_subject_new_internal();

        /* Disconnect the device if needed. This necessary because now
         * the manager prevents the reactivation of the same connection by
         * an internal subject. */
        if (nm_device_get_state(dev_checkpoint->device) > NM_DEVICE_STATE_DISCONNECTED
            && nm_device_get_state(dev_checkpoint->device) < NM_DEVICE_STATE_DEACTIVATING) {
            if (!NM_FLAGS_HAS(priv->flags, NM_CHECKPOINT_CREATE_FLAG_NO_PRESERVE_EXTERNAL_PORTS)) {
                nm_device_activation_state_set_preserve_external_ports(dev_checkpoint->device,
                                                                       TRUE);
            }

            nm_device_state_changed(dev_checkpoint->device,
                                    NM_DEVICE_STATE_DEACTIVATING,
                                    NM_DEVICE_STATE_REASON_NEW_ACTIVATION);
        }

        if (!nm_manager_activate_connection(
                priv->manager,
                connection,
                dev_checkpoint->applied_connection,
                NULL,
                dev_checkpoint->device,
                subject,
                NM_ACTIVATION_TYPE_MANAGED,
                dev_checkpoint->activation_reason,
                dev_checkpoint->activation_lifetime_bound_to_profile_visibility
                    ? NM_ACTIVATION_STATE_FLAG_LIFETIME_BOUND_TO_PROFILE_VISIBILITY
                    : NM_ACTIVATION_STATE_FLAG_NONE,
                &local_error)) {
            _LOGW("rollback: reactivation of connection %s/%s failed: %s",
                  nm_settings_connection_get_id(connection),
                  nm_settings_connection_get_uuid(connection),
                  local_error->message);
            g_clear_error(&local_error);
            return FALSE;
        }
    }
    return TRUE;
}

GVariant *
nm_checkpoint_rollback(NMCheckpoint *self)
{
    NMCheckpointPrivate *priv = NM_CHECKPOINT_GET_PRIVATE(self);
    DeviceCheckpoint    *dev_checkpoint;
    GHashTableIter       iter;
    NMDevice            *device;
    GVariantBuilder      builder;
    uint                 i;

    _LOGI("rollback of %s", nm_dbus_object_get_path(NM_DBUS_OBJECT(self)));
    g_variant_builder_init(&builder, G_VARIANT_TYPE("a{su}"));

    /* Start creating removed devices (if any and if possible) */
    if (priv->removed_devices) {
        for (i = 0; i < priv->removed_devices->len; i++) {
            guint32 result = NM_ROLLBACK_RESULT_OK;

            dev_checkpoint = priv->removed_devices->pdata[i];
            _LOGD("rollback: restoring removed device %s (state %d, realized %d, explicitly "
                  "unmanaged %d)",
                  dev_checkpoint->original_dev_name,
                  (int) dev_checkpoint->state,
                  dev_checkpoint->realized,
                  dev_checkpoint->unmanaged_explicit);

            if (dev_checkpoint->applied_connection) {
                if (!restore_and_activate_connection(self, dev_checkpoint))
                    result = NM_ROLLBACK_RESULT_ERR_FAILED;
            }
            g_variant_builder_add(&builder, "{su}", dev_checkpoint->original_dev_path, result);
        }
    }

    /* Start rolling-back each device */
    g_hash_table_iter_init(&iter, priv->devices);
    while (g_hash_table_iter_next(&iter, (gpointer *) &device, (gpointer *) &dev_checkpoint)) {
        guint32 result = NM_ROLLBACK_RESULT_OK;

        _LOGD("rollback: restoring device %s (state %d, realized %d, explicitly unmanaged %d)",
              dev_checkpoint->original_dev_name,
              (int) dev_checkpoint->state,
              dev_checkpoint->realized,
              dev_checkpoint->unmanaged_explicit);

        if (nm_device_is_real(device)) {
            if (!dev_checkpoint->realized) {
                _LOGD("rollback: device was not realized, unmanage it");
                nm_device_set_unmanaged_by_flags_queue(device,
                                                       NM_UNMANAGED_USER_EXPLICIT,
                                                       NM_UNMAN_FLAG_OP_SET_UNMANAGED,
                                                       NM_DEVICE_STATE_REASON_NOW_UNMANAGED);
                goto next_dev;
            }
        } else {
            if (dev_checkpoint->realized) {
                if (dev_checkpoint->is_software) {
                    /* try to recreate software device */
                    _LOGD("rollback: software device not realized, will re-activate");
                    goto activate;
                } else {
                    _LOGD("rollback: device is not realized");
                    result = NM_ROLLBACK_RESULT_ERR_FAILED;
                }
            }
            goto next_dev;
        }

        /* Manage the device again if needed */
        if (nm_device_get_unmanaged_flags(device, NM_UNMANAGED_USER_EXPLICIT)
            && dev_checkpoint->unmanaged_explicit != NM_UNMAN_FLAG_OP_SET_UNMANAGED) {
            _LOGD("rollback: restore unmanaged user-explicit");
            nm_device_set_unmanaged_by_flags_queue(device,
                                                   NM_UNMANAGED_USER_EXPLICIT,
                                                   dev_checkpoint->unmanaged_explicit,
                                                   NM_DEVICE_STATE_REASON_NOW_MANAGED);
        }

        if (dev_checkpoint->state == NM_DEVICE_STATE_UNMANAGED) {
            if (nm_device_get_state(device) != NM_DEVICE_STATE_UNMANAGED
                || dev_checkpoint->unmanaged_explicit == NM_UNMAN_FLAG_OP_SET_UNMANAGED) {
                _LOGD("rollback: explicitly unmanage device");
                nm_device_set_unmanaged_by_flags_queue(device,
                                                       NM_UNMANAGED_USER_EXPLICIT,
                                                       NM_UNMAN_FLAG_OP_SET_UNMANAGED,
                                                       NM_DEVICE_STATE_REASON_NOW_UNMANAGED);
            }
            goto next_dev;
        }

activate:
        if (dev_checkpoint->applied_connection) {
            if (!restore_and_activate_connection(self, dev_checkpoint)) {
                result = NM_ROLLBACK_RESULT_ERR_FAILED;
                goto next_dev;
            }
        } else {
            /* The device was initially disconnected, deactivate any existing connection */

            if (nm_device_get_state(device) > NM_DEVICE_STATE_DISCONNECTED
                && nm_device_get_state(device) < NM_DEVICE_STATE_DEACTIVATING) {
                _LOGD("rollback: disconnecting device");
                nm_device_state_changed(device,
                                        NM_DEVICE_STATE_DEACTIVATING,
                                        NM_DEVICE_STATE_REASON_USER_REQUESTED);
            }
        }

next_dev:
        g_variant_builder_add(&builder, "{su}", dev_checkpoint->original_dev_path, result);
    }

    if (NM_FLAGS_HAS(priv->flags, NM_CHECKPOINT_CREATE_FLAG_DELETE_NEW_CONNECTIONS)) {
        NMSettingsConnection          *con;
        gs_free NMSettingsConnection **list = NULL;

        g_return_val_if_fail(priv->connection_uuids, NULL);
        list = nm_settings_get_connections_clone(
            NM_SETTINGS_GET,
            NULL,
            NULL,
            NULL,
            nm_settings_connection_cmp_autoconnect_priority_p_with_data,
            NULL);

        for (i = 0; list[i]; i++) {
            con = list[i];
            if (!g_hash_table_contains(priv->connection_uuids,
                                       nm_settings_connection_get_uuid(con))) {
                _LOGD("rollback: deleting new connection %s", nm_settings_connection_get_uuid(con));
                nm_settings_connection_delete(con, FALSE);
            }
        }
    }

    if (NM_FLAGS_HAS(priv->flags, NM_CHECKPOINT_CREATE_FLAG_DISCONNECT_NEW_DEVICES)) {
        const CList  *tmp_lst;
        NMDeviceState state;

        nm_manager_for_each_device (priv->manager, device, tmp_lst) {
            if (g_hash_table_contains(priv->devices, device))
                continue;

            /* Also ignore devices that were in the checkpoint initially and
             * were moved to 'removed_devices' because they got removed from
             * the system. */
            if (priv->removed_devices) {
                gboolean found = FALSE;

                for (i = 0; i < priv->removed_devices->len; i++) {
                    dev_checkpoint = priv->removed_devices->pdata[i];
                    if (dev_checkpoint->dev_type == nm_device_get_device_type(device)
                        && nm_streq0(dev_checkpoint->original_dev_name,
                                     nm_device_get_iface(device))) {
                        found = TRUE;
                        break;
                    }
                }
                if (found)
                    continue;
            }

            state = nm_device_get_state(device);
            if (state > NM_DEVICE_STATE_DISCONNECTED && state < NM_DEVICE_STATE_DEACTIVATING) {
                _LOGD("rollback: disconnecting new device %s", nm_device_get_iface(device));
                nm_device_state_changed(device,
                                        NM_DEVICE_STATE_DEACTIVATING,
                                        NM_DEVICE_STATE_REASON_USER_REQUESTED);
            }
        }
    }
    if (NM_FLAGS_HAS(priv->flags, NM_CHECKPOINT_CREATE_FLAG_TRACK_INTERNAL_GLOBAL_DNS)
        && priv->global_dns_config) {
        gs_free_error GError *error = NULL;
        NMConfig             *config;

        config = nm_manager_get_config(priv->manager);
        nm_assert(config);
        if (!nm_config_set_global_dns(config, priv->global_dns_config, &error)) {
            _LOGE("set global DNS failed with error: %s", error->message);
        }
    }

    return g_variant_new("(a{su})", &builder);
}

static void
device_checkpoint_destroy(gpointer data)
{
    DeviceCheckpoint *dev_checkpoint = data;

    nm_clear_g_signal_handler(dev_checkpoint->device, &dev_checkpoint->dev_exported_change_id);
    g_clear_object(&dev_checkpoint->applied_connection);
    g_clear_object(&dev_checkpoint->settings_connection);
    g_clear_object(&dev_checkpoint->device);
    g_free(dev_checkpoint->original_dev_path);
    g_free(dev_checkpoint->original_dev_name);

    g_slice_free(DeviceCheckpoint, dev_checkpoint);
}

static void
_move_dev_to_removed_devices(NMDevice *device, NMCheckpoint *checkpoint)
{
    NMCheckpointPrivate *priv = NM_CHECKPOINT_GET_PRIVATE(checkpoint);
    DeviceCheckpoint    *dev_checkpoint;

    g_return_if_fail(device);

    dev_checkpoint = g_hash_table_lookup(priv->devices, device);
    if (!dev_checkpoint)
        return;

    g_hash_table_steal(priv->devices, dev_checkpoint->device);
    nm_clear_g_signal_handler(dev_checkpoint->device, &dev_checkpoint->dev_exported_change_id);
    g_clear_object(&dev_checkpoint->device);

    if (!priv->removed_devices)
        priv->removed_devices =
            g_ptr_array_new_with_free_func((GDestroyNotify) device_checkpoint_destroy);
    g_ptr_array_add(priv->removed_devices, dev_checkpoint);

    _notify(checkpoint, PROP_DEVICES);
}

static void
_dev_exported_changed(NMDBusObject *obj, NMCheckpoint *checkpoint)
{
    _move_dev_to_removed_devices(NM_DEVICE(obj), checkpoint);
}

static DeviceCheckpoint *
device_checkpoint_create(NMCheckpoint *checkpoint, NMDevice *device)
{
    DeviceCheckpoint     *dev_checkpoint;
    NMConnection         *applied_connection;
    NMSettingsConnection *settings_connection;
    const char           *path;
    NMActRequest         *act_request;

    nm_assert(NM_IS_DEVICE(device));
    nm_assert(nm_device_is_real(device));

    path = nm_dbus_object_get_path(NM_DBUS_OBJECT(device));

    dev_checkpoint                         = g_slice_new0(DeviceCheckpoint);
    dev_checkpoint->device                 = g_object_ref(device);
    dev_checkpoint->original_dev_path      = g_strdup(path);
    dev_checkpoint->original_dev_name      = g_strdup(nm_device_get_iface(device));
    dev_checkpoint->dev_type               = nm_device_get_device_type(device);
    dev_checkpoint->state                  = nm_device_get_state(device);
    dev_checkpoint->is_software            = nm_device_is_software(device);
    dev_checkpoint->realized               = nm_device_is_real(device);
    dev_checkpoint->dev_exported_change_id = g_signal_connect(device,
                                                              NM_DBUS_OBJECT_EXPORTED_CHANGED,
                                                              G_CALLBACK(_dev_exported_changed),
                                                              checkpoint);

    if (nm_device_get_unmanaged_mask(device, NM_UNMANAGED_USER_EXPLICIT)) {
        dev_checkpoint->unmanaged_explicit =
            !!nm_device_get_unmanaged_flags(device, NM_UNMANAGED_USER_EXPLICIT);
    } else
        dev_checkpoint->unmanaged_explicit = NM_UNMAN_FLAG_OP_FORGET;

    act_request = nm_device_get_act_request(device);
    if (act_request) {
        NMSettingsStorage *storage;

        settings_connection = nm_act_request_get_settings_connection(act_request);
        applied_connection  = nm_act_request_get_applied_connection(act_request);

        dev_checkpoint->applied_connection  = nm_simple_connection_new_clone(applied_connection);
        dev_checkpoint->settings_connection = nm_simple_connection_new_clone(
            nm_settings_connection_get_connection(settings_connection));
        dev_checkpoint->ac_version_id =
            nm_active_connection_version_id_get(NM_ACTIVE_CONNECTION(act_request));
        dev_checkpoint->activation_reason =
            nm_active_connection_get_activation_reason(NM_ACTIVE_CONNECTION(act_request));
        dev_checkpoint->activation_lifetime_bound_to_profile_visibility =
            NM_FLAGS_HAS(nm_active_connection_get_state_flags(NM_ACTIVE_CONNECTION(act_request)),
                         NM_ACTIVATION_STATE_FLAG_LIFETIME_BOUND_TO_PROFILE_VISIBILITY);

        storage = nm_settings_connection_get_storage(settings_connection);
        dev_checkpoint->settings_connection_is_unsaved =
            NM_FLAGS_HAS(nm_settings_connection_get_flags(settings_connection),
                         NM_SETTINGS_CONNECTION_INT_FLAGS_UNSAVED);
        dev_checkpoint->settings_connection_is_shadowed =
            storage && nm_settings_storage_get_shadowed_storage(storage, NULL);
    }

    return dev_checkpoint;
}

static gboolean
_timeout_cb(gpointer user_data)
{
    NMCheckpoint        *self = user_data;
    NMCheckpointPrivate *priv = NM_CHECKPOINT_GET_PRIVATE(self);

    priv->timeout_id = 0;

    if (priv->timeout_cb)
        priv->timeout_cb(self, priv->timeout_data);

    /* beware, @self likely got destroyed! */
    return G_SOURCE_REMOVE;
}

void
nm_checkpoint_adjust_rollback_timeout(NMCheckpoint *self, guint32 add_timeout)
{
    guint32 rollback_timeout_s;
    gint64  now_ms, add_timeout_ms, rollback_timeout_ms;

    NMCheckpointPrivate *priv = NM_CHECKPOINT_GET_PRIVATE(self);

    nm_clear_g_source(&priv->timeout_id);

    if (add_timeout == 0)
        rollback_timeout_s = 0;
    else {
        now_ms              = nm_utils_get_monotonic_timestamp_msec();
        add_timeout_ms      = ((gint64) add_timeout) * 1000;
        rollback_timeout_ms = (now_ms - priv->created_at_ms) + add_timeout_ms;

        /* round to nearest integer second. Since NM_CHECKPOINT_ROLLBACK_TIMEOUT is
         * in units seconds, it will be able to exactly express the timeout. */
        rollback_timeout_s = NM_MIN((rollback_timeout_ms + 500) / 1000, (gint64) G_MAXUINT32);

        /* we expect the timeout to be positive, because add_timeout_ms is positive.
         * We cannot accept a zero, because it means "infinity". */
        nm_assert(rollback_timeout_s > 0);

        priv->timeout_id =
            g_timeout_add(NM_MIN(add_timeout_ms, (gint64) G_MAXUINT32), _timeout_cb, self);
    }

    if (rollback_timeout_s != priv->rollback_timeout_s) {
        priv->rollback_timeout_s = rollback_timeout_s;
        _notify(self, PROP_ROLLBACK_TIMEOUT);
    }
}

/*****************************************************************************/

static void
get_property(GObject *object, guint prop_id, GValue *value, GParamSpec *pspec)
{
    NMCheckpoint        *self = NM_CHECKPOINT(object);
    NMCheckpointPrivate *priv = NM_CHECKPOINT_GET_PRIVATE(self);

    switch (prop_id) {
    case PROP_DEVICES:
        nm_dbus_utils_g_value_set_object_path_from_hash(value, priv->devices, FALSE);
        break;
    case PROP_CREATED:
        g_value_set_int64(
            value,
            nm_utils_monotonic_timestamp_as_boottime(priv->created_at_ms, NM_UTILS_NSEC_PER_MSEC));
        break;
    case PROP_ROLLBACK_TIMEOUT:
        g_value_set_uint(value, priv->rollback_timeout_s);
        break;
    default:
        G_OBJECT_WARN_INVALID_PROPERTY_ID(object, prop_id, pspec);
        break;
    }
}

/*****************************************************************************/

static void
nm_checkpoint_init(NMCheckpoint *self)
{
    NMCheckpointPrivate *priv;

    priv = G_TYPE_INSTANCE_GET_PRIVATE(self, NM_TYPE_CHECKPOINT, NMCheckpointPrivate);

    self->_priv = priv;

    c_list_init(&self->checkpoints_lst);

    priv->devices = g_hash_table_new_full(nm_direct_hash, NULL, NULL, device_checkpoint_destroy);
}

static void
_device_removed(NMManager *manager, NMDevice *device, gpointer user_data)
{
    _move_dev_to_removed_devices(device, NM_CHECKPOINT(user_data));
}

NMCheckpoint *
nm_checkpoint_new(NMManager              *manager,
                  GPtrArray              *devices,
                  guint32                 rollback_timeout_s,
                  NMCheckpointCreateFlags flags)
{
    NMCheckpoint                *self;
    NMCheckpointPrivate         *priv;
    NMSettingsConnection *const *con;
    gint64                       rollback_timeout_ms;
    guint                        i;

    g_return_val_if_fail(manager, NULL);
    g_return_val_if_fail(devices, NULL);
    g_return_val_if_fail(devices->len > 0, NULL);

    self = g_object_new(NM_TYPE_CHECKPOINT, NULL);

    priv                     = NM_CHECKPOINT_GET_PRIVATE(self);
    priv->manager            = g_object_ref(manager);
    priv->rollback_timeout_s = rollback_timeout_s;
    priv->created_at_ms      = nm_utils_get_monotonic_timestamp_msec();
    priv->flags              = flags;

    if (rollback_timeout_s != 0) {
        rollback_timeout_ms = ((gint64) rollback_timeout_s) * 1000;
        priv->timeout_id =
            g_timeout_add(NM_MIN(rollback_timeout_ms, (gint64) G_MAXUINT32), _timeout_cb, self);
    }

    if (NM_FLAGS_HAS(flags, NM_CHECKPOINT_CREATE_FLAG_DELETE_NEW_CONNECTIONS)) {
        priv->connection_uuids = g_hash_table_new_full(nm_str_hash, g_str_equal, g_free, NULL);
        for (con = nm_settings_get_connections(NM_SETTINGS_GET, NULL); *con; con++) {
            g_hash_table_add(priv->connection_uuids,
                             g_strdup(nm_settings_connection_get_uuid(*con)));
        }
    }

    for (i = 0; i < devices->len; i++) {
        NMDevice *device = devices->pdata[i];

        /* As long as the check point instance exists, it will keep a reference
         * to the device also if the device gets removed (by rmmod or by deleting
         * a connection profile for a software device). */
        g_hash_table_insert(priv->devices, device, device_checkpoint_create(self, device));
    }

    priv->dev_removed_id = g_signal_connect(priv->manager,
                                            NM_MANAGER_DEVICE_REMOVED,
                                            G_CALLBACK(_device_removed),
                                            self);
    if (NM_FLAGS_HAS(flags, NM_CHECKPOINT_CREATE_FLAG_TRACK_INTERNAL_GLOBAL_DNS)) {
        NMConfigData      *config_data;
        NMGlobalDnsConfig *dns_config = NULL;

        config_data = nm_config_get_data(nm_manager_get_config(manager));
        if (config_data) {
            dns_config = nm_config_data_get_global_dns_config(config_data);
            if (!dns_config || nm_global_dns_config_is_internal(dns_config)) {
                priv->global_dns_config = nm_global_dns_config_clone(dns_config);
            }
        }
    }

    return self;
}

static void
dispose(GObject *object)
{
    NMCheckpoint        *self = NM_CHECKPOINT(object);
    NMCheckpointPrivate *priv = NM_CHECKPOINT_GET_PRIVATE(self);

    nm_assert(c_list_is_empty(&self->checkpoints_lst));

    nm_clear_pointer(&priv->devices, g_hash_table_unref);
    nm_clear_pointer(&priv->connection_uuids, g_hash_table_unref);
    nm_clear_pointer(&priv->removed_devices, g_ptr_array_unref);
    nm_global_dns_config_free(priv->global_dns_config);

    nm_clear_g_signal_handler(priv->manager, &priv->dev_removed_id);
    g_clear_object(&priv->manager);

    nm_clear_g_source(&priv->timeout_id);

    G_OBJECT_CLASS(nm_checkpoint_parent_class)->dispose(object);
}

static const NMDBusInterfaceInfoExtended interface_info_checkpoint = {
    .parent = NM_DEFINE_GDBUS_INTERFACE_INFO_INIT(
        NM_DBUS_INTERFACE_CHECKPOINT,
        .properties = NM_DEFINE_GDBUS_PROPERTY_INFOS(
            NM_DEFINE_DBUS_PROPERTY_INFO_EXTENDED_READABLE("Devices", "ao", NM_CHECKPOINT_DEVICES),
            NM_DEFINE_DBUS_PROPERTY_INFO_EXTENDED_READABLE("Created", "x", NM_CHECKPOINT_CREATED),
            NM_DEFINE_DBUS_PROPERTY_INFO_EXTENDED_READABLE("RollbackTimeout",
                                                           "u",
                                                           NM_CHECKPOINT_ROLLBACK_TIMEOUT), ), ),
};

static void
nm_checkpoint_class_init(NMCheckpointClass *checkpoint_class)
{
    GObjectClass      *object_class      = G_OBJECT_CLASS(checkpoint_class);
    NMDBusObjectClass *dbus_object_class = NM_DBUS_OBJECT_CLASS(checkpoint_class);

    g_type_class_add_private(object_class, sizeof(NMCheckpointPrivate));

    dbus_object_class->export_path     = NM_DBUS_EXPORT_PATH_NUMBERED(NM_DBUS_PATH "/Checkpoint");
    dbus_object_class->interface_infos = NM_DBUS_INTERFACE_INFOS(&interface_info_checkpoint);

    object_class->dispose      = dispose;
    object_class->get_property = get_property;

    obj_properties[PROP_DEVICES] = g_param_spec_boxed(NM_CHECKPOINT_DEVICES,
                                                      "",
                                                      "",
                                                      G_TYPE_STRV,
                                                      G_PARAM_READABLE | G_PARAM_STATIC_STRINGS);

    obj_properties[PROP_CREATED] = g_param_spec_int64(NM_CHECKPOINT_CREATED,
                                                      "",
                                                      "",
                                                      G_MININT64,
                                                      G_MAXINT64,
                                                      0,
                                                      G_PARAM_READABLE | G_PARAM_STATIC_STRINGS);

    obj_properties[PROP_ROLLBACK_TIMEOUT] =
        g_param_spec_uint(NM_CHECKPOINT_ROLLBACK_TIMEOUT,
                          "",
                          "",
                          0,
                          G_MAXUINT32,
                          0,
                          G_PARAM_READABLE | G_PARAM_STATIC_STRINGS);

    g_object_class_install_properties(object_class, _PROPERTY_ENUMS_LAST, obj_properties);
}