procd/service, branch master

instance: disable console logging

2026-05-04T11:28:32Z

This spams the logs with every in- and outcoming byte. Signed-off-by: Andre Heider

instance: don't print error in case cgroups are disabled

2026-03-13T22:32:39Z

cgroups aren't enabled on targets with small_flash, which currently means that the user is bothered with noisy warning messages because the instance cgroup cannot be created. Silently skip cgroups setup if not supported by the kernel, as it was before commit 7e5b324 ("instance: check length of names when creating cgroups"). Fixes: #33 Fixes: 7e5b324 ("instance: check length of names when creating cgroups") Signed-off-by: Daniel Golle

instance: use positive error numbers for strerror()

2026-03-13T22:32:36Z

strerror() expects positive error numbers, but instance_add_cgroup() returns negative errors. Invert the error value, so strerror becomes meaningful. Fixes: 7e5b324 ("instance: check length of names when creating cgroups") Signed-off-by: Daniel Golle

service: fix use-after-free in per-instance set_data handler

2026-03-11T17:27:53Z

service_handle_set_data() filled the instance data list with pointers directly into the ubus request message buffer. After the handler returned, ubus freed that buffer, leaving dangling pointers that caused a crash when instance_dump() later iterated the list. Fix this by duplicating the blob data with blob_memdup(), mirroring what service_update_data() already does for service-level data. Signed-off-by: Felix Fietkau

instance: use mkdir_p helper

2026-02-14T21:16:47Z

Use mkdir_p() libubox helper function to create cgroup instance directories. This simplifies instance_add_cgroup() and also avoids returning an error in case the service directory already exists. Fixes: openwrt/procd#31 Fixes: 7e5b324 ("instance: check length of names when creating cgroups") Signed-off-by: Daniel Golle

instance: check length of names when creating cgroups

2026-02-09T11:37:13Z

A stack buffer overflow may occur during path construction in instance_add_cgroup if the snprintf calls before the strcat call fill the 256-byte stack buffer. Check the length at all stages when creating and appending the string in the buffer and return an error in case it gets to long. Fixes: 83053b6 ("instance: add instances into unified cgroup hierarchy") Fixes: TOB-OWRT-8 Reported-by: Trail of Bits Signed-off-by: Daniel Golle

service instance: Improve handling of watchdog config changes

2026-02-09T11:31:44Z

When the ubus call "ubus call service watchdog" is used, it's expected that the service might change its watchdog values during runtime when it pets the watchdog. The instance restarting behavior was setup though to restart the instance if these changed. This causes any service which adjusts its watchdog to be restarted via "/etc/init.d/SERVICENAME start" which is probably not what was intended. Introduce a new variable, self_managed, if the service adjusted these values at runtime so that a "start" doesn't cause the entire service to restart. Signed-off-by: Tim Nordell

service instance: Fix overwriting of watchdog linked list members

2026-02-09T11:31:44Z

The instance_config_move(...) function copies the settings from a newly constructed instance from a "ubus call service set {...}" call into a prior instance. The `in->watchdog.timeout` is of the type `struct uloop_timeout` which contains a `struct list` inside of it. This list is a linked list structure, so when the uloop_timeout is already in the linked list, this overwrites this particular location with a NULL pointer for the next/prev entries. This causes procd to crash. This crash occurs every time "ubus call service set {...}" is called (e.g. via /etc/init.d/SERVICE start) when a daemon is using the "watchdog" feature has already been started. Fixes: 28be011 ("instance: make sure values are not inherited from previous runs") Signed-off-by: Tim Nordell

service: send ubus notifications for event triggers

2025-10-02T09:03:45Z

This makes it easier to use procd as distribution for system events Signed-off-by: Felix Fietkau

service: implement set_data ubus method

2025-09-30T17:47:04Z

This can be used to update service and instance data explicitly. Without this change, instances could only be updated by sending the full instance data again. Signed-off-by: Felix Fietkau