No OneTemporary
Actions

Size

980 KB

Referenced Files

None

Subscribers

None

View Options

This file is larger than 256 KB, so syntax highlighting was skipped.

	diff --git a/daemons/fenced/fenced_commands.c b/daemons/fenced/fenced_commands.c
	index ff846a5c09..ece8502549 100644
	--- a/daemons/fenced/fenced_commands.c
	+++ b/daemons/fenced/fenced_commands.c
	@@ -1,3540 +1,3540 @@
	/*
	* Copyright 2009-2022 the Pacemaker project contributors
	*
	* The version control history for this file may have further details.
	*
	* This source code is licensed under the GNU General Public License version 2
	* or later (GPLv2+) WITHOUT ANY WARRANTY.
	*/

	#include <crm_internal.h>

	#include <sys/param.h>
	#include <stdio.h>
	#include <sys/types.h>
	#include <sys/wait.h>
	#include <sys/stat.h>
	#include <unistd.h>
	#include <sys/utsname.h>

	#include <stdlib.h>
	#include <errno.h>
	#include <fcntl.h>
	#include <ctype.h>

	#include <crm/crm.h>
	#include <crm/msg_xml.h>
	#include <crm/common/ipc.h>
	#include <crm/common/ipc_internal.h>
	#include <crm/cluster/internal.h>
	#include <crm/common/mainloop.h>

	#include <crm/stonith-ng.h>
	#include <crm/fencing/internal.h>
	#include <crm/common/xml.h>

	#include <pacemaker-fenced.h>

	GHashTable *device_list = NULL;
	GHashTable *topology = NULL;
	GList *cmd_list = NULL;

	static GHashTable *fenced_handlers = NULL;

	struct device_search_s {
	/* target of fence action */
	char *host;
	/* requested fence action */
	char *action;
	/* timeout to use if a device is queried dynamically for possible targets */
	int per_device_timeout;
	/* number of registered fencing devices at time of request */
	int replies_needed;
	/* number of device replies received so far */
	int replies_received;
	/* whether the target is eligible to perform requested action (or off) */
	bool allow_suicide;

	/* private data to pass to search callback function */
	void *user_data;
	/* function to call when all replies have been received */
	void (callback) (GList devices, void *user_data);
	/* devices capable of performing requested action (or off if remapping) */
	GList *capable;
	};

	static gboolean stonith_device_dispatch(gpointer user_data);
	static void st_child_done(int pid, const pcmk__action_result_t *result,
	void *user_data);
	static void stonith_send_reply(xmlNode * reply, int call_options, const char *remote_peer,
	pcmk__client_t *client);

	static void search_devices_record_result(struct device_search_s search, const char device,
	gboolean can_fence);

	static int get_agent_metadata(const char agent, xmlNode *metadata);
	static void read_action_metadata(stonith_device_t *device);
	static enum fenced_target_by unpack_level_kind(xmlNode *level);

	typedef struct async_command_s {

	int id;
	int pid;
	int fd_stdout;
	int options;
	int default_timeout; /* seconds */
	int timeout; /* seconds */

	int start_delay; /* seconds */
	int delay_id;

	char *op;
	char *origin;
	char *client;
	char *client_name;
	char *remote_op_id;

	char *victim;
	uint32_t victim_nodeid;
	char *action;
	char *device;

	GList *device_list;
	GList *device_next;

	void *internal_user_data;
	void (done_cb) (int pid, const pcmk__action_result_t result,
	void *user_data);
	guint timer_sigterm;
	guint timer_sigkill;
	/*! If the operation timed out, this is the last signal
	* we sent to the process to get it to terminate */
	int last_timeout_signo;

	stonith_device_t *active_on;
	stonith_device_t *activating_on;
	} async_command_t;

	static xmlNode construct_async_reply(async_command_t cmd,
	const pcmk__action_result_t *result);

	static gboolean
	is_action_required(const char action, stonith_device_t device)
	{
	return device && device->automatic_unfencing && pcmk__str_eq(action, "on",
	pcmk__str_casei);
	}

	static int
	get_action_delay_max(stonith_device_t * device, const char * action)
	{
	const char *value = NULL;
	int delay_max = 0;

	if (!pcmk__is_fencing_action(action)) {
	return 0;
	}

	value = g_hash_table_lookup(device->params, PCMK_STONITH_DELAY_MAX);
	if (value) {
	delay_max = crm_parse_interval_spec(value) / 1000;
	}

	return delay_max;
	}

	static int
	get_action_delay_base(stonith_device_t device, const char action, const char *victim)
	{
	char *hash_value = NULL;
	int delay_base = 0;

	if (!pcmk__is_fencing_action(action)) {
	return 0;
	}

	hash_value = g_hash_table_lookup(device->params, PCMK_STONITH_DELAY_BASE);

	if (hash_value) {
	char *value = strdup(hash_value);
	char *valptr = value;

	CRM_ASSERT(value != NULL);

	if (victim) {
	for (char *val = strtok(value, "; \t"); val != NULL; val = strtok(NULL, "; \t")) {
	char *mapval = strchr(val, ':');

	if (mapval == NULL \|\| mapval[1] == 0) {
	crm_err("pcmk_delay_base: empty value in mapping", val);
	continue;
	}

	if (mapval != val && strncasecmp(victim, val, (size_t)(mapval - val)) == 0) {
	value = mapval + 1;
	crm_debug("pcmk_delay_base mapped to %s for %s", value, victim);
	break;
	}
	}
	}

	if (strchr(value, ':') == 0) {
	delay_base = crm_parse_interval_spec(value) / 1000;
	}

	free(valptr);
	}

	return delay_base;
	}

	/*!
	* \internal
	* \brief Override STONITH timeout with pcmk_*_timeout if available
	*
	* \param[in] device STONITH device to use
	* \param[in] action STONITH action name
	* \param[in] default_timeout Timeout to use if device does not have
	* a pcmk_*_timeout parameter for action
	*
	* \return Value of pcmk_(action)_timeout if available, otherwise default_timeout
	* \note For consistency, it would be nice if reboot/off/on timeouts could be
	* set the same way as start/stop/monitor timeouts, i.e. with an
	* <operation> entry in the fencing resource configuration. However that
	* is insufficient because fencing devices may be registered directly via
	* the fencer's register_device() API instead of going through the CIB
	* (e.g. stonith_admin uses it for its -R option, and the executor uses it
	* to ensure a device is registered when a command is issued). As device
	* properties, pcmk_*_timeout parameters can be grabbed by the fencer when
	* the device is registered, whether by CIB change or API call.
	*/
	static int
	get_action_timeout(stonith_device_t * device, const char *action, int default_timeout)
	{
	if (action && device && device->params) {
	char buffer[64] = { 0, };
	const char *value = NULL;

	/* If "reboot" was requested but the device does not support it,
	* we will remap to "off", so check timeout for "off" instead
	*/
	if (pcmk__str_eq(action, "reboot", pcmk__str_casei)
	&& !pcmk_is_set(device->flags, st_device_supports_reboot)) {
	crm_trace("%s doesn't support reboot, using timeout for off instead",
	device->id);
	action = "off";
	}

	/* If the device config specified an action-specific timeout, use it */
	snprintf(buffer, sizeof(buffer), "pcmk_%s_timeout", action);
	value = g_hash_table_lookup(device->params, buffer);
	if (value) {
	return atoi(value);
	}
	}
	return default_timeout;
	}

	static void
	free_async_command(async_command_t * cmd)
	{
	if (!cmd) {
	return;
	}

	if (cmd->delay_id) {
	g_source_remove(cmd->delay_id);
	}

	cmd_list = g_list_remove(cmd_list, cmd);

	g_list_free_full(cmd->device_list, free);
	free(cmd->device);
	free(cmd->action);
	free(cmd->victim);
	free(cmd->remote_op_id);
	free(cmd->client);
	free(cmd->client_name);
	free(cmd->origin);
	free(cmd->op);
	free(cmd);
	}

	static async_command_t *
	create_async_command(xmlNode * msg)
	{
	async_command_t *cmd = NULL;
	xmlNode *op = get_xpath_object("//@" F_STONITH_ACTION, msg, LOG_ERR);
	const char *action = crm_element_value(op, F_STONITH_ACTION);

	CRM_CHECK(action != NULL, crm_log_xml_warn(msg, "NoAction"); return NULL);

	crm_log_xml_trace(msg, "Command");
	cmd = calloc(1, sizeof(async_command_t));
	crm_element_value_int(msg, F_STONITH_CALLID, &(cmd->id));
	crm_element_value_int(msg, F_STONITH_CALLOPTS, &(cmd->options));
	crm_element_value_int(msg, F_STONITH_TIMEOUT, &(cmd->default_timeout));
	cmd->timeout = cmd->default_timeout;
	// Value -1 means disable any static/random fencing delays
	crm_element_value_int(msg, F_STONITH_DELAY, &(cmd->start_delay));

	cmd->origin = crm_element_value_copy(msg, F_ORIG);
	cmd->remote_op_id = crm_element_value_copy(msg, F_STONITH_REMOTE_OP_ID);
	cmd->client = crm_element_value_copy(msg, F_STONITH_CLIENTID);
	cmd->client_name = crm_element_value_copy(msg, F_STONITH_CLIENTNAME);
	cmd->op = crm_element_value_copy(msg, F_STONITH_OPERATION);
	cmd->action = strdup(action);
	cmd->victim = crm_element_value_copy(op, F_STONITH_TARGET);
	cmd->device = crm_element_value_copy(op, F_STONITH_DEVICE);

	CRM_CHECK(cmd->op != NULL, crm_log_xml_warn(msg, "NoOp"); free_async_command(cmd); return NULL);
	CRM_CHECK(cmd->client != NULL, crm_log_xml_warn(msg, "NoClient"));

	cmd->done_cb = st_child_done;
	cmd_list = g_list_append(cmd_list, cmd);
	return cmd;
	}

	static int
	get_action_limit(stonith_device_t * device)
	{
	const char *value = NULL;
	int action_limit = 1;

	value = g_hash_table_lookup(device->params, PCMK_STONITH_ACTION_LIMIT);
	if ((value == NULL)
	\|\| (pcmk__scan_min_int(value, &action_limit, INT_MIN) != pcmk_rc_ok)
	\|\| (action_limit == 0)) {
	action_limit = 1;
	}
	return action_limit;
	}

	static int
	get_active_cmds(stonith_device_t * device)
	{
	int counter = 0;
	GList *gIter = NULL;
	GList *gIterNext = NULL;

	CRM_CHECK(device != NULL, return 0);

	for (gIter = cmd_list; gIter != NULL; gIter = gIterNext) {
	async_command_t *cmd = gIter->data;

	gIterNext = gIter->next;

	if (cmd->active_on == device) {
	counter++;
	}
	}

	return counter;
	}

	static void
	fork_cb(int pid, void *user_data)
	{
	async_command_t cmd = (async_command_t ) user_data;
	stonith_device_t * device =
	/* in case of a retry we've done the move from
	activating_on to active_on already
	*/
	cmd->activating_on?cmd->activating_on:cmd->active_on;

	CRM_ASSERT(device);
	crm_debug("Operation '%s' [%d]%s%s using %s now running with %ds timeout",
	cmd->action, pid,
	((cmd->victim == NULL)? "" : " targeting "),
	((cmd->victim == NULL)? "" : cmd->victim),
	device->id, cmd->timeout);
	cmd->active_on = device;
	cmd->activating_on = NULL;
	}

	static int
	get_agent_metadata_cb(gpointer data) {
	stonith_device_t *device = data;
	guint period_ms;

	switch (get_agent_metadata(device->agent, &device->agent_metadata)) {
	case pcmk_rc_ok:
	if (device->agent_metadata) {
	read_action_metadata(device);
	stonith__device_parameter_flags(&(device->flags), device->id,
	device->agent_metadata);
	}
	return G_SOURCE_REMOVE;

	case EAGAIN:
	period_ms = pcmk__mainloop_timer_get_period(device->timer);
	if (period_ms < 160 * 1000) {
	mainloop_timer_set_period(device->timer, 2 * period_ms);
	}
	return G_SOURCE_CONTINUE;

	default:
	return G_SOURCE_REMOVE;
	}
	}

	/*!
	* \internal
	* \brief Call a command's action callback for an internal (not library) result
	*
	* \param[in] cmd Command to report result for
	* \param[in] execution_status Execution status to use for result
	* \param[in] exit_status Exit status to use for result
	* \param[in] exit_reason Exit reason to use for result
	*/
	static void
	report_internal_result(async_command_t *cmd, int exit_status,
	int execution_status, const char *exit_reason)
	{
	pcmk__action_result_t result = PCMK__UNKNOWN_RESULT;

	pcmk__set_result(&result, exit_status, execution_status, exit_reason);
	cmd->done_cb(0, &result, cmd);
	pcmk__reset_result(&result);
	}

	static gboolean
	stonith_device_execute(stonith_device_t * device)
	{
	int exec_rc = 0;
	const char *action_str = NULL;
	const char *host_arg = NULL;
	async_command_t *cmd = NULL;
	stonith_action_t *action = NULL;
	int active_cmds = 0;
	int action_limit = 0;
	GList *gIter = NULL;
	GList *gIterNext = NULL;

	CRM_CHECK(device != NULL, return FALSE);

	active_cmds = get_active_cmds(device);
	action_limit = get_action_limit(device);
	if (action_limit > -1 && active_cmds >= action_limit) {
	crm_trace("%s is over its action limit of %d (%u active action%s)",
	device->id, action_limit, active_cmds,
	pcmk__plural_s(active_cmds));
	return TRUE;
	}

	for (gIter = device->pending_ops; gIter != NULL; gIter = gIterNext) {
	async_command_t *pending_op = gIter->data;

	gIterNext = gIter->next;

	if (pending_op && pending_op->delay_id) {
	crm_trace("Operation '%s'%s%s using %s was asked to run too early, "
	"waiting for start delay of %ds",
	pending_op->action,
	((pending_op->victim == NULL)? "" : " targeting "),
	((pending_op->victim == NULL)? "" : pending_op->victim),
	device->id, pending_op->start_delay);
	continue;
	}

	device->pending_ops = g_list_remove_link(device->pending_ops, gIter);
	g_list_free_1(gIter);

	cmd = pending_op;
	break;
	}

	if (cmd == NULL) {
	crm_trace("No actions using %s are needed", device->id);
	return TRUE;
	}

	if (pcmk__str_any_of(device->agent, STONITH_WATCHDOG_AGENT,
	STONITH_WATCHDOG_AGENT_INTERNAL, NULL)) {
	if (pcmk__is_fencing_action(cmd->action)) {
	if (node_does_watchdog_fencing(stonith_our_uname)) {
	pcmk__panic(__func__);
	goto done;
	}
	} else {
	crm_info("Faking success for %s watchdog operation", cmd->action);
	report_internal_result(cmd, CRM_EX_OK, PCMK_EXEC_DONE, NULL);
	goto done;
	}
	}

	#if SUPPORT_CIBSECRETS
	exec_rc = pcmk__substitute_secrets(device->id, device->params);
	if (exec_rc != pcmk_rc_ok) {
	if (pcmk__str_eq(cmd->action, "stop", pcmk__str_casei)) {
	crm_info("Proceeding with stop operation for %s "
	"despite being unable to load CIB secrets (%s)",
	device->id, pcmk_rc_str(exec_rc));
	} else {
	crm_err("Considering %s unconfigured "
	"because unable to load CIB secrets: %s",
	device->id, pcmk_rc_str(exec_rc));
	report_internal_result(cmd, CRM_EX_ERROR, PCMK_EXEC_NO_SECRETS,
	"Failed to get CIB secrets");
	goto done;
	}
	}
	#endif

	action_str = cmd->action;
	if (pcmk__str_eq(cmd->action, "reboot", pcmk__str_casei)
	&& !pcmk_is_set(device->flags, st_device_supports_reboot)) {

	crm_notice("Remapping 'reboot' action%s%s using %s to 'off' "
	"because agent '%s' does not support reboot",
	((cmd->victim == NULL)? "" : " targeting "),
	((cmd->victim == NULL)? "" : cmd->victim),
	device->id, device->agent);
	action_str = "off";
	}

	if (pcmk_is_set(device->flags, st_device_supports_parameter_port)) {
	host_arg = "port";

	} else if (pcmk_is_set(device->flags, st_device_supports_parameter_plug)) {
	host_arg = "plug";
	}

	action = stonith_action_create(device->agent,
	action_str,
	cmd->victim,
	cmd->victim_nodeid,
	cmd->timeout, device->params,
	device->aliases, host_arg);

	/* for async exec, exec_rc is negative for early error exit
	otherwise handling of success/errors is done via callbacks */
	cmd->activating_on = device;
	exec_rc = stonith_action_execute_async(action, (void *)cmd,
	cmd->done_cb, fork_cb);
	if (exec_rc < 0) {
	cmd->activating_on = NULL;
	cmd->done_cb(0, stonith__action_result(action), cmd);
	stonith__destroy_action(action);
	}

	done:
	/* Device might get triggered to work by multiple fencing commands
	* simultaneously. Trigger the device again to make sure any
	* remaining concurrent commands get executed. */
	if (device->pending_ops) {
	mainloop_set_trigger(device->work);
	}
	return TRUE;
	}

	static gboolean
	stonith_device_dispatch(gpointer user_data)
	{
	return stonith_device_execute(user_data);
	}

	static gboolean
	start_delay_helper(gpointer data)
	{
	async_command_t *cmd = data;
	stonith_device_t *device = NULL;

	cmd->delay_id = 0;
	device = cmd->device ? g_hash_table_lookup(device_list, cmd->device) : NULL;

	if (device) {
	mainloop_set_trigger(device->work);
	}

	return FALSE;
	}

	static void
	schedule_stonith_command(async_command_t * cmd, stonith_device_t * device)
	{
	int delay_max = 0;
	int delay_base = 0;
	int requested_delay = cmd->start_delay;

	CRM_CHECK(cmd != NULL, return);
	CRM_CHECK(device != NULL, return);

	if (cmd->device) {
	free(cmd->device);
	}

	if (device->include_nodeid && cmd->victim) {
	crm_node_t *node = crm_get_peer(0, cmd->victim);

	cmd->victim_nodeid = node->id;
	}

	cmd->device = strdup(device->id);
	cmd->timeout = get_action_timeout(device, cmd->action, cmd->default_timeout);

	if (cmd->remote_op_id) {
	crm_debug("Scheduling '%s' action%s%s using %s for remote peer %s "
	"with op id %.8s and timeout %ds",
	cmd->action,
	cmd->victim ? " targeting " : "", cmd->victim ? cmd->victim : "",
	device->id, cmd->origin, cmd->remote_op_id, cmd->timeout);
	} else {
	crm_debug("Scheduling '%s' action%s%s using %s for %s with timeout %ds",
	cmd->action,
	cmd->victim ? " targeting " : "", cmd->victim ? cmd->victim : "",
	device->id, cmd->client, cmd->timeout);
	}

	device->pending_ops = g_list_append(device->pending_ops, cmd);
	mainloop_set_trigger(device->work);

	// Value -1 means disable any static/random fencing delays
	if (requested_delay < 0) {
	return;
	}

	delay_max = get_action_delay_max(device, cmd->action);
	delay_base = get_action_delay_base(device, cmd->action, cmd->victim);
	if (delay_max == 0) {
	delay_max = delay_base;
	}
	if (delay_max < delay_base) {
	crm_warn(PCMK_STONITH_DELAY_BASE " (%ds) is larger than "
	PCMK_STONITH_DELAY_MAX " (%ds) for %s using %s "
	"(limiting to maximum delay)",
	delay_base, delay_max, cmd->action, device->id);
	delay_base = delay_max;
	}
	if (delay_max > 0) {
	// coverity[dont_call] We're not using rand() for security
	cmd->start_delay +=
	((delay_max != delay_base)?(rand() % (delay_max - delay_base)):0)
	+ delay_base;
	}

	if (cmd->start_delay > 0) {
	crm_notice("Delaying '%s' action%s%s using %s for %ds " CRM_XS
	" timeout=%ds requested_delay=%ds base=%ds max=%ds",
	cmd->action,
	cmd->victim ? " targeting " : "", cmd->victim ? cmd->victim : "",
	device->id, cmd->start_delay, cmd->timeout,
	requested_delay, delay_base, delay_max);
	cmd->delay_id =
	g_timeout_add_seconds(cmd->start_delay, start_delay_helper, cmd);
	}
	}

	static void
	free_device(gpointer data)
	{
	GList *gIter = NULL;
	stonith_device_t *device = data;

	g_hash_table_destroy(device->params);
	g_hash_table_destroy(device->aliases);

	for (gIter = device->pending_ops; gIter != NULL; gIter = gIter->next) {
	async_command_t *cmd = gIter->data;

	crm_warn("Removal of device '%s' purged operation '%s'", device->id, cmd->action);
	report_internal_result(cmd, CRM_EX_ERROR, PCMK_EXEC_NO_FENCE_DEVICE,
	"Device was removed before action could be executed");
	}
	g_list_free(device->pending_ops);

	g_list_free_full(device->targets, free);

	if (device->timer) {
	mainloop_timer_stop(device->timer);
	mainloop_timer_del(device->timer);
	}

	mainloop_destroy_trigger(device->work);

	free_xml(device->agent_metadata);
	free(device->namespace);
	free(device->on_target_actions);
	free(device->agent);
	free(device->id);
	free(device);
	}

	void free_device_list(void)
	{
	if (device_list != NULL) {
	g_hash_table_destroy(device_list);
	device_list = NULL;
	}
	}

	void
	init_device_list(void)
	{
	if (device_list == NULL) {
	device_list = pcmk__strkey_table(NULL, free_device);
	}
	}

	static GHashTable *
	build_port_aliases(const char hostmap, GList * targets)
	{
	char *name = NULL;
	int last = 0, lpc = 0, max = 0, added = 0;
	GHashTable *aliases = pcmk__strikey_table(free, free);

	if (hostmap == NULL) {
	return aliases;
	}

	max = strlen(hostmap);
	for (; lpc <= max; lpc++) {
	switch (hostmap[lpc]) {
	/* Skip escaped chars */
	case '\\':
	lpc++;
	break;

	/* Assignment chars */
	case '=':
	case ':':
	if (lpc > last) {
	free(name);
	name = calloc(1, 1 + lpc - last);
	memcpy(name, hostmap + last, lpc - last);
	}
	last = lpc + 1;
	break;

	/* Delimeter chars */
	/* case ',': Potentially used to specify multiple ports */
	case 0:
	case ';':
	case ' ':
	case '\t':
	if (name) {
	char *value = NULL;
	int k = 0;

	value = calloc(1, 1 + lpc - last);
	memcpy(value, hostmap + last, lpc - last);

	for (int i = 0; value[i] != '\0'; i++) {
	if (value[i] != '\\') {
	value[k++] = value[i];
	}
	}
	value[k] = '\0';

	crm_debug("Adding alias '%s'='%s'", name, value);
	g_hash_table_replace(aliases, name, value);
	if (targets) {
	targets = g_list_append(targets, strdup(value));
	}
	value = NULL;
	name = NULL;
	added++;

	} else if (lpc > last) {
	crm_debug("Parse error at offset %d near '%s'", lpc - last, hostmap + last);
	}

	last = lpc + 1;
	break;
	}

	if (hostmap[lpc] == 0) {
	break;
	}
	}

	if (added == 0) {
	crm_info("No host mappings detected in '%s'", hostmap);
	}

	free(name);
	return aliases;
	}

	GHashTable *metadata_cache = NULL;

	void
	free_metadata_cache(void) {
	if (metadata_cache != NULL) {
	g_hash_table_destroy(metadata_cache);
	metadata_cache = NULL;
	}
	}

	static void
	init_metadata_cache(void) {
	if (metadata_cache == NULL) {
	metadata_cache = pcmk__strkey_table(free, free);
	}
	}

	int
	get_agent_metadata(const char agent, xmlNode * metadata)
	{
	char *buffer = NULL;

	if (metadata == NULL) {
	return EINVAL;
	}
	*metadata = NULL;
	if (pcmk__str_eq(agent, STONITH_WATCHDOG_AGENT_INTERNAL, pcmk__str_none)) {
	return pcmk_rc_ok;
	}
	init_metadata_cache();
	buffer = g_hash_table_lookup(metadata_cache, agent);
	if (buffer == NULL) {
	stonith_t *st = stonith_api_new();
	int rc;

	if (st == NULL) {
	crm_warn("Could not get agent meta-data: "
	"API memory allocation failed");
	return EAGAIN;
	}
	rc = st->cmds->metadata(st, st_opt_sync_call, agent,
	NULL, &buffer, 10);
	stonith_api_delete(st);
	if (rc \|\| !buffer) {
	crm_err("Could not retrieve metadata for fencing agent %s", agent);
	return EAGAIN;
	}
	g_hash_table_replace(metadata_cache, strdup(agent), buffer);
	}

	*metadata = string2xml(buffer);
	return pcmk_rc_ok;
	}

	static gboolean
	is_nodeid_required(xmlNode * xml)
	{
	xmlXPathObjectPtr xpath = NULL;

	if (stand_alone) {
	return FALSE;
	}

	if (!xml) {
	return FALSE;
	}

	xpath = xpath_search(xml, "//parameter[@name='nodeid']");
	if (numXpathResults(xpath) <= 0) {
	freeXpathObject(xpath);
	return FALSE;
	}

	freeXpathObject(xpath);
	return TRUE;
	}

	#define MAX_ACTION_LEN 256

	static char *
	add_action(char actions, const char action)
	{
	int offset = 0;

	if (actions == NULL) {
	actions = calloc(1, MAX_ACTION_LEN);
	} else {
	offset = strlen(actions);
	}

	if (offset > 0) {
	offset += snprintf(actions+offset, MAX_ACTION_LEN - offset, " ");
	}
	offset += snprintf(actions+offset, MAX_ACTION_LEN - offset, "%s", action);

	return actions;
	}

	static void
	read_action_metadata(stonith_device_t *device)
	{
	xmlXPathObjectPtr xpath = NULL;
	int max = 0;
	int lpc = 0;

	if (device->agent_metadata == NULL) {
	return;
	}

	xpath = xpath_search(device->agent_metadata, "//action");
	max = numXpathResults(xpath);

	if (max <= 0) {
	freeXpathObject(xpath);
	return;
	}

	for (lpc = 0; lpc < max; lpc++) {
	const char *action = NULL;
	xmlNode *match = getXpathResult(xpath, lpc);

	CRM_LOG_ASSERT(match != NULL);
	if(match == NULL) { continue; };

	action = crm_element_value(match, "name");

	if(pcmk__str_eq(action, "list", pcmk__str_casei)) {
	stonith__set_device_flags(device->flags, device->id,
	st_device_supports_list);
	} else if(pcmk__str_eq(action, "status", pcmk__str_casei)) {
	stonith__set_device_flags(device->flags, device->id,
	st_device_supports_status);
	} else if(pcmk__str_eq(action, "reboot", pcmk__str_casei)) {
	stonith__set_device_flags(device->flags, device->id,
	st_device_supports_reboot);
	} else if (pcmk__str_eq(action, "on", pcmk__str_casei)) {
	/* "automatic" means the cluster will unfence node when it joins */
	/* "required" is a deprecated synonym for "automatic" */
	if (pcmk__xe_attr_is_true(match, "automatic") \|\| pcmk__xe_attr_is_true(match, "required")) {
	device->automatic_unfencing = TRUE;
	}
	}

	if (action && pcmk__xe_attr_is_true(match, "on_target")) {
	device->on_target_actions = add_action(device->on_target_actions, action);
	}
	}

	freeXpathObject(xpath);
	}

	/*!
	* \internal
	* \brief Set a pcmk_*_action parameter if not already set
	*
	* \param[in,out] params Device parameters
	* \param[in] action Name of action
	* \param[in] value Value to use if action is not already set
	*/
	static void
	map_action(GHashTable params, const char action, const char *value)
	{
	char *key = crm_strdup_printf("pcmk_%s_action", action);

	if (g_hash_table_lookup(params, key)) {
	crm_warn("Ignoring %s='%s', see %s instead",
	STONITH_ATTR_ACTION_OP, value, key);
	free(key);
	} else {
	crm_warn("Mapping %s='%s' to %s='%s'",
	STONITH_ATTR_ACTION_OP, value, key, value);
	g_hash_table_insert(params, key, strdup(value));
	}
	}

	/*!
	* \internal
	* \brief Create device parameter table from XML
	*
	* \param[in] name Device name (used for logging only)
	* \param[in,out] params Device parameters
	*/
	static GHashTable *
	xml2device_params(const char name, xmlNode dev)
	{
	GHashTable *params = xml2list(dev);
	const char *value;

	/* Action should never be specified in the device configuration,
	* but we support it for users who are familiar with other software
	* that worked that way.
	*/
	value = g_hash_table_lookup(params, STONITH_ATTR_ACTION_OP);
	if (value != NULL) {
	crm_warn("%s has '%s' parameter, which should never be specified in configuration",
	name, STONITH_ATTR_ACTION_OP);

	if (*value == '\0') {
	crm_warn("Ignoring empty '%s' parameter", STONITH_ATTR_ACTION_OP);

	} else if (strcmp(value, "reboot") == 0) {
	crm_warn("Ignoring %s='reboot' (see stonith-action cluster property instead)",
	STONITH_ATTR_ACTION_OP);

	} else if (strcmp(value, "off") == 0) {
	map_action(params, "reboot", value);

	} else {
	map_action(params, "off", value);
	map_action(params, "reboot", value);
	}

	g_hash_table_remove(params, STONITH_ATTR_ACTION_OP);
	}

	return params;
	}

	static const char *
	target_list_type(stonith_device_t * dev)
	{
	const char *check_type = NULL;

	check_type = g_hash_table_lookup(dev->params, PCMK_STONITH_HOST_CHECK);

	if (check_type == NULL) {

	if (g_hash_table_lookup(dev->params, PCMK_STONITH_HOST_LIST)) {
	check_type = "static-list";
	} else if (g_hash_table_lookup(dev->params, PCMK_STONITH_HOST_MAP)) {
	check_type = "static-list";
	} else if (pcmk_is_set(dev->flags, st_device_supports_list)) {
	check_type = "dynamic-list";
	} else if (pcmk_is_set(dev->flags, st_device_supports_status)) {
	check_type = "status";
	} else {
	check_type = PCMK__VALUE_NONE;
	}
	}

	return check_type;
	}

	static stonith_device_t *
	build_device_from_xml(xmlNode *dev)
	{
	const char *value;
	stonith_device_t *device = NULL;
	char *agent = crm_element_value_copy(dev, "agent");

	CRM_CHECK(agent != NULL, return device);

	device = calloc(1, sizeof(stonith_device_t));

	CRM_CHECK(device != NULL, {free(agent); return device;});

	device->id = crm_element_value_copy(dev, XML_ATTR_ID);
	device->agent = agent;
	device->namespace = crm_element_value_copy(dev, "namespace");
	device->params = xml2device_params(device->id, dev);

	value = g_hash_table_lookup(device->params, PCMK_STONITH_HOST_LIST);
	if (value) {
	device->targets = stonith__parse_targets(value);
	}

	value = g_hash_table_lookup(device->params, PCMK_STONITH_HOST_MAP);
	device->aliases = build_port_aliases(value, &(device->targets));

	value = target_list_type(device);
	if (!pcmk__str_eq(value, "static-list", pcmk__str_casei) && device->targets) {
	/* Other than "static-list", dev-> targets is unnecessary. */
	g_list_free_full(device->targets, free);
	device->targets = NULL;
	}
	switch (get_agent_metadata(device->agent, &device->agent_metadata)) {
	case pcmk_rc_ok:
	if (device->agent_metadata) {
	read_action_metadata(device);
	stonith__device_parameter_flags(&(device->flags), device->id,
	device->agent_metadata);
	}
	break;

	case EAGAIN:
	if (device->timer == NULL) {
	device->timer = mainloop_timer_add("get_agent_metadata", 10 * 1000,
	TRUE, get_agent_metadata_cb, device);
	}
	if (!mainloop_timer_running(device->timer)) {
	mainloop_timer_start(device->timer);
	}
	break;

	default:
	break;
	}

	value = g_hash_table_lookup(device->params, "nodeid");
	if (!value) {
	device->include_nodeid = is_nodeid_required(device->agent_metadata);
	}

	value = crm_element_value(dev, "rsc_provides");
	- if (pcmk__str_eq(value, "unfencing", pcmk__str_casei)) {
	+ if (pcmk__str_eq(value, PCMK__VALUE_UNFENCING, pcmk__str_casei)) {
	device->automatic_unfencing = TRUE;
	}

	if (is_action_required("on", device)) {
	crm_info("Fencing device '%s' requires unfencing", device->id);
	}

	if (device->on_target_actions) {
	crm_info("Fencing device '%s' requires actions (%s) to be executed "
	"on target", device->id, device->on_target_actions);
	}

	device->work = mainloop_add_trigger(G_PRIORITY_HIGH, stonith_device_dispatch, device);
	/* TODO: Hook up priority */

	return device;
	}

	static void
	schedule_internal_command(const char *origin,
	stonith_device_t * device,
	const char *action,
	const char *victim,
	int timeout,
	void *internal_user_data,
	void (*done_cb) (int pid,
	const pcmk__action_result_t *result,
	void *user_data))
	{
	async_command_t *cmd = NULL;

	cmd = calloc(1, sizeof(async_command_t));

	cmd->id = -1;
	cmd->default_timeout = timeout ? timeout : 60;
	cmd->timeout = cmd->default_timeout;
	cmd->action = strdup(action);
	pcmk__str_update(&cmd->victim, victim);
	cmd->device = strdup(device->id);
	cmd->origin = strdup(origin);
	cmd->client = strdup(crm_system_name);
	cmd->client_name = strdup(crm_system_name);

	cmd->internal_user_data = internal_user_data;
	cmd->done_cb = done_cb; /* cmd, not internal_user_data, is passed to 'done_cb' as the userdata */

	schedule_stonith_command(cmd, device);
	}

	// Fence agent status commands use custom exit status codes
	enum fence_status_code {
	fence_status_invalid = -1,
	fence_status_active = 0,
	fence_status_unknown = 1,
	fence_status_inactive = 2,
	};

	static void
	status_search_cb(int pid, const pcmk__action_result_t result, void user_data)
	{
	async_command_t *cmd = user_data;
	struct device_search_s *search = cmd->internal_user_data;
	stonith_device_t *dev = cmd->device ? g_hash_table_lookup(device_list, cmd->device) : NULL;
	gboolean can = FALSE;

	free_async_command(cmd);

	if (!dev) {
	search_devices_record_result(search, NULL, FALSE);
	return;
	}

	mainloop_set_trigger(dev->work);

	if (result->execution_status != PCMK_EXEC_DONE) {
	crm_warn("Assuming %s cannot fence %s "
	"because status could not be executed: %s%s%s%s",
	dev->id, search->host,
	pcmk_exec_status_str(result->execution_status),
	((result->exit_reason == NULL)? "" : " ("),
	((result->exit_reason == NULL)? "" : result->exit_reason),
	((result->exit_reason == NULL)? "" : ")"));
	search_devices_record_result(search, dev->id, FALSE);
	return;
	}

	switch (result->exit_status) {
	case fence_status_unknown:
	crm_trace("%s reported it cannot fence %s", dev->id, search->host);
	break;

	case fence_status_active:
	case fence_status_inactive:
	crm_trace("%s reported it can fence %s", dev->id, search->host);
	can = TRUE;
	break;

	default:
	crm_warn("Assuming %s cannot fence %s "
	"(status returned unknown code %d)",
	dev->id, search->host, result->exit_status);
	break;
	}
	search_devices_record_result(search, dev->id, can);
	}

	static void
	dynamic_list_search_cb(int pid, const pcmk__action_result_t *result,
	void *user_data)
	{
	async_command_t *cmd = user_data;
	struct device_search_s *search = cmd->internal_user_data;
	stonith_device_t *dev = cmd->device ? g_hash_table_lookup(device_list, cmd->device) : NULL;
	gboolean can_fence = FALSE;

	free_async_command(cmd);

	/* Host/alias must be in the list output to be eligible to be fenced
	*
	* Will cause problems if down'd nodes aren't listed or (for virtual nodes)
	* if the guest is still listed despite being moved to another machine
	*/
	if (!dev) {
	search_devices_record_result(search, NULL, FALSE);
	return;
	}

	mainloop_set_trigger(dev->work);

	if (pcmk__result_ok(result)) {
	crm_info("Refreshing target list for %s", dev->id);
	g_list_free_full(dev->targets, free);
	dev->targets = stonith__parse_targets(result->action_stdout);
	dev->targets_age = time(NULL);

	} else if (dev->targets != NULL) {
	if (result->execution_status == PCMK_EXEC_DONE) {
	crm_info("Reusing most recent target list for %s "
	"because list returned error code %d",
	dev->id, result->exit_status);
	} else {
	crm_info("Reusing most recent target list for %s "
	"because list could not be executed: %s%s%s%s",
	dev->id, pcmk_exec_status_str(result->execution_status),
	((result->exit_reason == NULL)? "" : " ("),
	((result->exit_reason == NULL)? "" : result->exit_reason),
	((result->exit_reason == NULL)? "" : ")"));
	}

	} else { // We have never successfully executed list
	if (result->execution_status == PCMK_EXEC_DONE) {
	crm_warn("Assuming %s cannot fence %s "
	"because list returned error code %d",
	dev->id, search->host, result->exit_status);
	} else {
	crm_warn("Assuming %s cannot fence %s "
	"because list could not be executed: %s%s%s%s",
	dev->id, search->host,
	pcmk_exec_status_str(result->execution_status),
	((result->exit_reason == NULL)? "" : " ("),
	((result->exit_reason == NULL)? "" : result->exit_reason),
	((result->exit_reason == NULL)? "" : ")"));
	}

	/* Fall back to pcmk_host_check="status" if the user didn't explicitly
	* specify "dynamic-list".
	*/
	if (g_hash_table_lookup(dev->params, PCMK_STONITH_HOST_CHECK) == NULL) {
	crm_notice("Switching to pcmk_host_check='status' for %s", dev->id);
	g_hash_table_replace(dev->params, strdup(PCMK_STONITH_HOST_CHECK),
	strdup("status"));
	}
	}

	if (dev->targets) {
	const char *alias = g_hash_table_lookup(dev->aliases, search->host);

	if (!alias) {
	alias = search->host;
	}
	if (pcmk__str_in_list(alias, dev->targets, pcmk__str_casei)) {
	can_fence = TRUE;
	}
	}
	search_devices_record_result(search, dev->id, can_fence);
	}

	/*!
	* \internal
	* \brief Returns true if any key in first is not in second or second has a different value for key
	*/
	static int
	device_params_diff(GHashTable first, GHashTable second) {
	char *key = NULL;
	char *value = NULL;
	GHashTableIter gIter;

	g_hash_table_iter_init(&gIter, first);
	while (g_hash_table_iter_next(&gIter, (void )&key, (void )&value)) {

	if(strstr(key, "CRM_meta") == key) {
	continue;
	} else if(strcmp(key, "crm_feature_set") == 0) {
	continue;
	} else {
	char *other_value = g_hash_table_lookup(second, key);

	if (!other_value \|\| !pcmk__str_eq(other_value, value, pcmk__str_casei)) {
	crm_trace("Different value for %s: %s != %s", key, other_value, value);
	return 1;
	}
	}
	}

	return 0;
	}

	/*!
	* \internal
	* \brief Checks to see if an identical device already exists in the device_list
	*/
	static stonith_device_t *
	device_has_duplicate(stonith_device_t * device)
	{
	stonith_device_t *dup = g_hash_table_lookup(device_list, device->id);

	if (!dup) {
	crm_trace("No match for %s", device->id);
	return NULL;

	} else if (!pcmk__str_eq(dup->agent, device->agent, pcmk__str_casei)) {
	crm_trace("Different agent: %s != %s", dup->agent, device->agent);
	return NULL;
	}

	/* Use calculate_operation_digest() here? */
	if (device_params_diff(device->params, dup->params) \|\|
	device_params_diff(dup->params, device->params)) {
	return NULL;
	}

	crm_trace("Match");
	return dup;
	}

	int
	stonith_device_register(xmlNode *dev, gboolean from_cib)
	{
	stonith_device_t *dup = NULL;
	stonith_device_t *device = build_device_from_xml(dev);
	guint ndevices = 0;
	int rv = pcmk_ok;

	CRM_CHECK(device != NULL, return -ENOMEM);

	/* do we have a watchdog-device? */
	if (pcmk__str_eq(device->id, STONITH_WATCHDOG_ID, pcmk__str_none) \|\|
	pcmk__str_any_of(device->agent, STONITH_WATCHDOG_AGENT,
	STONITH_WATCHDOG_AGENT_INTERNAL, NULL)) do {
	if (stonith_watchdog_timeout_ms <= 0) {
	crm_err("Ignoring watchdog fence device without "
	"stonith-watchdog-timeout set.");
	rv = -ENODEV;
	/* fall through to cleanup & return */
	} else if (!pcmk__str_any_of(device->agent, STONITH_WATCHDOG_AGENT,
	STONITH_WATCHDOG_AGENT_INTERNAL, NULL)) {
	crm_err("Ignoring watchdog fence device with unknown "
	"agent '%s' unequal '" STONITH_WATCHDOG_AGENT "'.",
	device->agent?device->agent:"");
	rv = -ENODEV;
	/* fall through to cleanup & return */
	} else if (!pcmk__str_eq(device->id, STONITH_WATCHDOG_ID,
	pcmk__str_none)) {
	crm_err("Ignoring watchdog fence device "
	"named %s !='"STONITH_WATCHDOG_ID"'.",
	device->id?device->id:"");
	rv = -ENODEV;
	/* fall through to cleanup & return */
	} else {
	if (pcmk__str_eq(device->agent, STONITH_WATCHDOG_AGENT,
	pcmk__str_none)) {
	/* this either has an empty list or the targets
	configured for watchdog-fencing
	*/
	g_list_free_full(stonith_watchdog_targets, free);
	stonith_watchdog_targets = device->targets;
	device->targets = NULL;
	}
	if (node_does_watchdog_fencing(stonith_our_uname)) {
	g_list_free_full(device->targets, free);
	device->targets = stonith__parse_targets(stonith_our_uname);
	g_hash_table_replace(device->params,
	strdup(PCMK_STONITH_HOST_LIST),
	strdup(stonith_our_uname));
	/* proceed as with any other stonith-device */
	break;
	}

	crm_debug("Skip registration of watchdog fence device on node not in host-list.");
	/* cleanup and fall through to more cleanup and return */
	device->targets = NULL;
	stonith_device_remove(device->id, from_cib);
	}
	free_device(device);
	return rv;
	} while (0);

	dup = device_has_duplicate(device);
	if (dup) {
	ndevices = g_hash_table_size(device_list);
	crm_debug("Device '%s' already in device list (%d active device%s)",
	device->id, ndevices, pcmk__plural_s(ndevices));
	free_device(device);
	device = dup;
	dup = g_hash_table_lookup(device_list, device->id);
	dup->dirty = FALSE;

	} else {
	stonith_device_t *old = g_hash_table_lookup(device_list, device->id);

	if (from_cib && old && old->api_registered) {
	/* If the cib is writing over an entry that is shared with a stonith client,
	* copy any pending ops that currently exist on the old entry to the new one.
	* Otherwise the pending ops will be reported as failures
	*/
	crm_info("Overwriting existing entry for %s from CIB", device->id);
	device->pending_ops = old->pending_ops;
	device->api_registered = TRUE;
	old->pending_ops = NULL;
	if (device->pending_ops) {
	mainloop_set_trigger(device->work);
	}
	}
	g_hash_table_replace(device_list, device->id, device);

	ndevices = g_hash_table_size(device_list);
	crm_notice("Added '%s' to device list (%d active device%s)",
	device->id, ndevices, pcmk__plural_s(ndevices));
	}

	if (from_cib) {
	device->cib_registered = TRUE;
	} else {
	device->api_registered = TRUE;
	}

	return pcmk_ok;
	}

	void
	stonith_device_remove(const char *id, bool from_cib)
	{
	stonith_device_t *device = g_hash_table_lookup(device_list, id);
	guint ndevices = 0;

	if (!device) {
	ndevices = g_hash_table_size(device_list);
	crm_info("Device '%s' not found (%d active device%s)",
	id, ndevices, pcmk__plural_s(ndevices));
	return;
	}

	if (from_cib) {
	device->cib_registered = FALSE;
	} else {
	device->verified = FALSE;
	device->api_registered = FALSE;
	}

	if (!device->cib_registered && !device->api_registered) {
	g_hash_table_remove(device_list, id);
	ndevices = g_hash_table_size(device_list);
	crm_info("Removed '%s' from device list (%d active device%s)",
	id, ndevices, pcmk__plural_s(ndevices));
	} else {
	crm_trace("Not removing '%s' from device list (%d active) because "
	"still registered via:%s%s",
	id, g_hash_table_size(device_list),
	(device->cib_registered? " cib" : ""),
	(device->api_registered? " api" : ""));
	}
	}

	/*!
	* \internal
	* \brief Return the number of stonith levels registered for a node
	*
	* \param[in] tp Node's topology table entry
	*
	* \return Number of non-NULL levels in topology entry
	* \note This function is used only for log messages.
	*/
	static int
	count_active_levels(stonith_topology_t * tp)
	{
	int lpc = 0;
	int count = 0;

	for (lpc = 0; lpc < ST_LEVEL_MAX; lpc++) {
	if (tp->levels[lpc] != NULL) {
	count++;
	}
	}
	return count;
	}

	static void
	free_topology_entry(gpointer data)
	{
	stonith_topology_t *tp = data;

	int lpc = 0;

	for (lpc = 0; lpc < ST_LEVEL_MAX; lpc++) {
	if (tp->levels[lpc] != NULL) {
	g_list_free_full(tp->levels[lpc], free);
	}
	}
	free(tp->target);
	free(tp->target_value);
	free(tp->target_pattern);
	free(tp->target_attribute);
	free(tp);
	}

	void
	free_topology_list(void)
	{
	if (topology != NULL) {
	g_hash_table_destroy(topology);
	topology = NULL;
	}
	}

	void
	init_topology_list(void)
	{
	if (topology == NULL) {
	topology = pcmk__strkey_table(NULL, free_topology_entry);
	}
	}

	char *
	stonith_level_key(xmlNode *level, enum fenced_target_by mode)
	{
	if (mode == fenced_target_by_unknown) {
	mode = unpack_level_kind(level);
	}
	switch (mode) {
	case fenced_target_by_name:
	return crm_element_value_copy(level, XML_ATTR_STONITH_TARGET);

	case fenced_target_by_pattern:
	return crm_element_value_copy(level, XML_ATTR_STONITH_TARGET_PATTERN);

	case fenced_target_by_attribute:
	return crm_strdup_printf("%s=%s",
	crm_element_value(level, XML_ATTR_STONITH_TARGET_ATTRIBUTE),
	crm_element_value(level, XML_ATTR_STONITH_TARGET_VALUE));

	default:
	return crm_strdup_printf("unknown-%s", ID(level));
	}
	}

	/*!
	* \internal
	* \brief Parse target identification from topology level XML
	*
	* \param[in] level Topology level XML to parse
	*
	* \return How to identify target of \p level
	*/
	static int
	unpack_level_kind(xmlNode *level)
	{
	if (crm_element_value(level, XML_ATTR_STONITH_TARGET) != NULL) {
	return fenced_target_by_name;
	}
	if (crm_element_value(level, XML_ATTR_STONITH_TARGET_PATTERN) != NULL) {
	return fenced_target_by_pattern;
	}
	if (!stand_alone /* if standalone, there's no attribute manager */
	&& (crm_element_value(level, XML_ATTR_STONITH_TARGET_ATTRIBUTE) != NULL)
	&& (crm_element_value(level, XML_ATTR_STONITH_TARGET_VALUE) != NULL)) {
	return fenced_target_by_attribute;
	}
	return fenced_target_by_unknown;
	}

	static stonith_key_value_t *
	parse_device_list(const char *devices)
	{
	int lpc = 0;
	int max = 0;
	int last = 0;
	stonith_key_value_t *output = NULL;

	if (devices == NULL) {
	return output;
	}

	max = strlen(devices);
	for (lpc = 0; lpc <= max; lpc++) {
	if (devices[lpc] == ',' \|\| devices[lpc] == 0) {
	char *line = strndup(devices + last, lpc - last);

	output = stonith_key_value_add(output, NULL, line);
	free(line);

	last = lpc + 1;
	}
	}

	return output;
	}

	/*!
	* \internal
	* \brief Unpack essential information from topology request XML
	*
	* \param[in] xml Request XML to search
	* \param[out] mode If not NULL, where to store level kind
	* \param[out] target If not NULL, where to store representation of target
	* \param[out] id If not NULL, where to store level number
	* \param[out] desc If not NULL, where to store log-friendly level description
	*
	* \return Topology level XML from within \p xml, or NULL if not found
	* \note The caller is responsible for freeing \p target and \p desc if set.
	*/
	static xmlNode *
	unpack_level_request(xmlNode xml, enum fenced_target_by mode, char **target,
	int id, char *desc)
	{
	enum fenced_target_by local_mode = fenced_target_by_unknown;
	char *local_target = NULL;
	int local_id = 0;

	/* The level element can be the top element or lower. If top level, don't
	* search by xpath, because it might give multiple hits if the XML is the
	* CIB.
	*/
	if ((xml != NULL)
	&& !pcmk__str_eq(TYPE(xml), XML_TAG_FENCING_LEVEL, pcmk__str_none)) {
	xml = get_xpath_object("//" XML_TAG_FENCING_LEVEL, xml, LOG_WARNING);
	}

	if (xml == NULL) {
	if (desc != NULL) {
	*desc = crm_strdup_printf("missing");
	}
	} else {
	local_mode = unpack_level_kind(xml);
	local_target = stonith_level_key(xml, local_mode);
	crm_element_value_int(xml, XML_ATTR_STONITH_INDEX, &local_id);
	if (desc != NULL) {
	*desc = crm_strdup_printf("%s[%d]", local_target, local_id);
	}
	}

	if (mode != NULL) {
	*mode = local_mode;
	}
	if (id != NULL) {
	*id = local_id;
	}

	if (target != NULL) {
	*target = local_target;
	} else {
	free(local_target);
	}

	return xml;
	}

	/*!
	* \internal
	* \brief Register a fencing topology level for a target
	*
	* Given an XML request specifying the target name, level index, and device IDs
	* for the level, this will create an entry for the target in the global topology
	* table if one does not already exist, then append the specified device IDs to
	* the entry's device list for the specified level.
	*
	* \param[in] msg XML request for STONITH level registration
	* \param[out] desc If not NULL, set to string representation "TARGET[LEVEL]"
	* \param[out] result Where to set result of registration
	*/
	void
	fenced_register_level(xmlNode msg, char desc, pcmk__action_result_t result)
	{
	int id = 0;
	xmlNode *level;
	enum fenced_target_by mode;
	char *target;

	stonith_topology_t *tp;
	stonith_key_value_t *dIter = NULL;
	stonith_key_value_t *devices = NULL;

	CRM_CHECK(result != NULL, return);

	level = unpack_level_request(msg, &mode, &target, &id, desc);
	if (level == NULL) {
	fenced_set_protocol_error(result);
	return;
	}

	// Ensure a valid target was specified
	if (mode == fenced_target_by_unknown) {
	crm_warn("Ignoring registration for topology level '%s' "
	"without valid target", pcmk__s(ID(level), "<null>"));
	free(target);
	crm_log_xml_trace(level, "Bad level");
	pcmk__format_result(result, CRM_EX_INVALID_PARAM, PCMK_EXEC_INVALID,
	"Invalid target for topology level '%s'",
	pcmk__s(ID(level), "<null>"));
	return;
	}

	// Ensure level ID is in allowed range
	if ((id <= 0) \|\| (id >= ST_LEVEL_MAX)) {
	crm_warn("Ignoring topology registration for %s with invalid level %d",
	target, id);
	free(target);
	crm_log_xml_trace(level, "Bad level");
	pcmk__format_result(result, CRM_EX_INVALID_PARAM, PCMK_EXEC_INVALID,
	"Invalid level number '%s' for topology level '%s'",
	pcmk__s(crm_element_value(level,
	XML_ATTR_STONITH_INDEX),
	"<null>"),
	pcmk__s(ID(level), "<null>"));
	return;
	}

	/* Find or create topology table entry */
	tp = g_hash_table_lookup(topology, target);
	if (tp == NULL) {
	tp = calloc(1, sizeof(stonith_topology_t));
	if (tp == NULL) {
	pcmk__set_result(result, CRM_EX_ERROR, PCMK_EXEC_ERROR,
	strerror(ENOMEM));
	free(target);
	return;
	}
	tp->kind = mode;
	tp->target = target;
	tp->target_value = crm_element_value_copy(level, XML_ATTR_STONITH_TARGET_VALUE);
	tp->target_pattern = crm_element_value_copy(level, XML_ATTR_STONITH_TARGET_PATTERN);
	tp->target_attribute = crm_element_value_copy(level, XML_ATTR_STONITH_TARGET_ATTRIBUTE);

	g_hash_table_replace(topology, tp->target, tp);
	crm_trace("Added %s (%d) to the topology (%d active entries)",
	target, (int) mode, g_hash_table_size(topology));
	} else {
	free(target);
	}

	if (tp->levels[id] != NULL) {
	crm_info("Adding to the existing %s[%d] topology entry",
	tp->target, id);
	}

	devices = parse_device_list(crm_element_value(level, XML_ATTR_STONITH_DEVICES));
	for (dIter = devices; dIter; dIter = dIter->next) {
	const char *device = dIter->value;

	crm_trace("Adding device '%s' for %s[%d]", device, tp->target, id);
	tp->levels[id] = g_list_append(tp->levels[id], strdup(device));
	}
	stonith_key_value_freeall(devices, 1, 1);

	{
	int nlevels = count_active_levels(tp);

	crm_info("Target %s has %d active fencing level%s",
	tp->target, nlevels, pcmk__plural_s(nlevels));
	}

	pcmk__set_result(result, CRM_EX_OK, PCMK_EXEC_DONE, NULL);
	}

	/*!
	* \internal
	* \brief Unregister a fencing topology level for a target
	*
	* Given an XML request specifying the target name and level index (or 0 for all
	* levels), this will remove any corresponding entry for the target from the
	* global topology table.
	*
	* \param[in] msg XML request for STONITH level registration
	* \param[out] desc If not NULL, set to string representation "TARGET[LEVEL]"
	* \param[out] result Where to set result of unregistration
	*/
	void
	fenced_unregister_level(xmlNode msg, char *desc,
	pcmk__action_result_t *result)
	{
	int id = -1;
	stonith_topology_t *tp;
	char *target;
	xmlNode *level = NULL;

	CRM_CHECK(result != NULL, return);

	level = unpack_level_request(msg, NULL, &target, &id, desc);
	if (level == NULL) {
	fenced_set_protocol_error(result);
	return;
	}

	// Ensure level ID is in allowed range
	if ((id < 0) \|\| (id >= ST_LEVEL_MAX)) {
	crm_warn("Ignoring topology unregistration for %s with invalid level %d",
	target, id);
	free(target);
	crm_log_xml_trace(level, "Bad level");
	pcmk__format_result(result, CRM_EX_INVALID_PARAM, PCMK_EXEC_INVALID,
	"Invalid level number '%s' for topology level '%s'",
	pcmk__s(crm_element_value(level,
	XML_ATTR_STONITH_INDEX),
	"<null>"),
	pcmk__s(ID(level), "<null>"));
	return;
	}

	tp = g_hash_table_lookup(topology, target);
	if (tp == NULL) {
	guint nentries = g_hash_table_size(topology);

	crm_info("No fencing topology found for %s (%d active %s)",
	target, nentries,
	pcmk__plural_alt(nentries, "entry", "entries"));

	} else if (id == 0 && g_hash_table_remove(topology, target)) {
	guint nentries = g_hash_table_size(topology);

	crm_info("Removed all fencing topology entries related to %s "
	"(%d active %s remaining)", target, nentries,
	pcmk__plural_alt(nentries, "entry", "entries"));

	} else if (tp->levels[id] != NULL) {
	guint nlevels;

	g_list_free_full(tp->levels[id], free);
	tp->levels[id] = NULL;

	nlevels = count_active_levels(tp);
	crm_info("Removed level %d from fencing topology for %s "
	"(%d active level%s remaining)",
	id, target, nlevels, pcmk__plural_s(nlevels));
	}

	free(target);
	pcmk__set_result(result, CRM_EX_OK, PCMK_EXEC_DONE, NULL);
	}

	static char *
	list_to_string(GList list, const char delim, gboolean terminate_with_delim)
	{
	int max = g_list_length(list);
	size_t delim_len = delim?strlen(delim):0;
	size_t alloc_size = 1 + (max?((max-1+(terminate_with_delim?1:0))*delim_len):0);
	char *rv;
	GList *gIter;

	for (gIter = list; gIter != NULL; gIter = gIter->next) {
	const char value = (const char ) gIter->data;

	alloc_size += strlen(value);
	}
	rv = calloc(alloc_size, sizeof(char));
	if (rv) {
	char *pos = rv;
	const char *lead_delim = "";

	for (gIter = list; gIter != NULL; gIter = gIter->next) {
	const char value = (const char ) gIter->data;

	pos = &pos[sprintf(pos, "%s%s", lead_delim, value)];
	lead_delim = delim;
	}
	if (max && terminate_with_delim) {
	sprintf(pos, "%s", delim);
	}
	}
	return rv;
	}

	/*!
	* \internal
	* \brief Execute a fence agent action directly (and asynchronously)
	*
	* Handle a STONITH_OP_EXEC API message by scheduling a requested agent action
	* directly on a specified device. Only list, monitor, and status actions are
	* expected to use this call, though it should work with any agent command.
	*
	* \param[in] msg Request XML specifying action
	* \param[out] result Where to store result of action
	*
	* \note If the action is monitor, the device must be registered via the API
	* (CIB registration is not sufficient), because monitor should not be
	* possible unless the device is "started" (API registered).
	*/
	static void
	execute_agent_action(xmlNode msg, pcmk__action_result_t result)
	{
	xmlNode *dev = get_xpath_object("//" F_STONITH_DEVICE, msg, LOG_ERR);
	xmlNode *op = get_xpath_object("//@" F_STONITH_ACTION, msg, LOG_ERR);
	const char *id = crm_element_value(dev, F_STONITH_DEVICE);
	const char *action = crm_element_value(op, F_STONITH_ACTION);
	async_command_t *cmd = NULL;
	stonith_device_t *device = NULL;

	if ((id == NULL) \|\| (action == NULL)) {
	crm_info("Malformed API action request: device %s, action %s",
	(id? id : "not specified"),
	(action? action : "not specified"));
	fenced_set_protocol_error(result);
	return;
	}

	if (pcmk__str_eq(id, STONITH_WATCHDOG_ID, pcmk__str_none)) {
	// Watchdog agent actions are implemented internally
	if (stonith_watchdog_timeout_ms <= 0) {
	pcmk__set_result(result, CRM_EX_ERROR, PCMK_EXEC_NO_FENCE_DEVICE,
	"Watchdog fence device not configured");
	return;

	} else if (pcmk__str_eq(action, "list", pcmk__str_casei)) {
	pcmk__set_result(result, CRM_EX_OK, PCMK_EXEC_DONE, NULL);
	pcmk__set_result_output(result,
	list_to_string(stonith_watchdog_targets,
	"\n", TRUE),
	NULL);
	return;

	} else if (pcmk__str_eq(action, "monitor", pcmk__str_casei)) {
	pcmk__set_result(result, CRM_EX_OK, PCMK_EXEC_DONE, NULL);
	return;
	}
	}

	device = g_hash_table_lookup(device_list, id);
	if (device == NULL) {
	crm_info("Ignoring API '%s' action request because device %s not found",
	action, id);
	pcmk__format_result(result, CRM_EX_ERROR, PCMK_EXEC_NO_FENCE_DEVICE,
	"'%s' not found", id);
	return;

	} else if (!device->api_registered && !strcmp(action, "monitor")) {
	// Monitors may run only on "started" (API-registered) devices
	crm_info("Ignoring API '%s' action request because device %s not active",
	action, id);
	pcmk__format_result(result, CRM_EX_ERROR, PCMK_EXEC_NO_FENCE_DEVICE,
	"'%s' not active", id);
	return;
	}

	cmd = create_async_command(msg);
	if (cmd == NULL) {
	fenced_set_protocol_error(result);
	return;
	}

	schedule_stonith_command(cmd, device);
	pcmk__set_result(result, CRM_EX_OK, PCMK_EXEC_PENDING, NULL);
	}

	static void
	search_devices_record_result(struct device_search_s search, const char device, gboolean can_fence)
	{
	search->replies_received++;

	if (can_fence && device) {
	search->capable = g_list_append(search->capable, strdup(device));
	}

	if (search->replies_needed == search->replies_received) {

	guint ndevices = g_list_length(search->capable);

	crm_debug("Search found %d device%s that can perform '%s' targeting %s",
	ndevices, pcmk__plural_s(ndevices),
	(search->action? search->action : "unknown action"),
	(search->host? search->host : "any node"));

	search->callback(search->capable, search->user_data);
	free(search->host);
	free(search->action);
	free(search);
	}
	}

	/*!
	* \internal
	* \brief Check whether the local host is allowed to execute a fencing action
	*
	* \param[in] device Fence device to check
	* \param[in] action Fence action to check
	* \param[in] target Hostname of fence target
	* \param[in] allow_suicide Whether self-fencing is allowed for this operation
	*
	* \return TRUE if local host is allowed to execute action, FALSE otherwise
	*/
	static gboolean
	localhost_is_eligible(const stonith_device_t device, const char action,
	const char *target, gboolean allow_suicide)
	{
	gboolean localhost_is_target = pcmk__str_eq(target, stonith_our_uname,
	pcmk__str_casei);

	if (device && action && device->on_target_actions
	&& strstr(device->on_target_actions, action)) {
	if (!localhost_is_target) {
	crm_trace("Operation '%s' using %s can only be executed for "
	"local host, not %s", action, device->id, target);
	return FALSE;
	}

	} else if (localhost_is_target && !allow_suicide) {
	crm_trace("'%s' operation does not support self-fencing", action);
	return FALSE;
	}
	return TRUE;
	}

	static void
	can_fence_host_with_device(stonith_device_t * dev, struct device_search_s *search)
	{
	gboolean can = FALSE;
	const char *check_type = NULL;
	const char *host = search->host;
	const char *alias = NULL;

	CRM_LOG_ASSERT(dev != NULL);

	if (dev == NULL) {
	goto search_report_results;
	} else if (host == NULL) {
	can = TRUE;
	goto search_report_results;
	}

	/* Short-circuit query if this host is not allowed to perform the action */
	if (pcmk__str_eq(search->action, "reboot", pcmk__str_casei)) {
	/* A "reboot" might get remapped to "off" then "on", so short-circuit
	* only if all three are disallowed. If only one or two are disallowed,
	* we'll report that with the results. We never allow suicide for
	* remapped "on" operations because the host is off at that point.
	*/
	if (!localhost_is_eligible(dev, "reboot", host, search->allow_suicide)
	&& !localhost_is_eligible(dev, "off", host, search->allow_suicide)
	&& !localhost_is_eligible(dev, "on", host, FALSE)) {
	goto search_report_results;
	}
	} else if (!localhost_is_eligible(dev, search->action, host,
	search->allow_suicide)) {
	goto search_report_results;
	}

	alias = g_hash_table_lookup(dev->aliases, host);
	if (alias == NULL) {
	alias = host;
	}

	check_type = target_list_type(dev);

	if (pcmk__str_eq(check_type, PCMK__VALUE_NONE, pcmk__str_casei)) {
	can = TRUE;

	} else if (pcmk__str_eq(check_type, "static-list", pcmk__str_casei)) {

	/* Presence in the hostmap is sufficient
	* Only use if all hosts on which the device can be active can always fence all listed hosts
	*/

	if (pcmk__str_in_list(host, dev->targets, pcmk__str_casei)) {
	can = TRUE;
	} else if (g_hash_table_lookup(dev->params, PCMK_STONITH_HOST_MAP)
	&& g_hash_table_lookup(dev->aliases, host)) {
	can = TRUE;
	}

	} else if (pcmk__str_eq(check_type, "dynamic-list", pcmk__str_casei)) {
	time_t now = time(NULL);

	if (dev->targets == NULL \|\| dev->targets_age + 60 < now) {
	int device_timeout = get_action_timeout(dev, "list", search->per_device_timeout);

	if (device_timeout > search->per_device_timeout) {
	crm_notice("Since the pcmk_list_timeout(%ds) parameter of %s is larger than stonith-timeout(%ds), timeout may occur",
	device_timeout, dev->id, search->per_device_timeout);
	}

	crm_trace("Running '%s' to check whether %s is eligible to fence %s (%s)",
	check_type, dev->id, search->host, search->action);

	schedule_internal_command(__func__, dev, "list", NULL,
	search->per_device_timeout, search, dynamic_list_search_cb);

	/* we'll respond to this search request async in the cb */
	return;
	}

	if (pcmk__str_in_list(alias, dev->targets, pcmk__str_casei)) {
	can = TRUE;
	}

	} else if (pcmk__str_eq(check_type, "status", pcmk__str_casei)) {
	int device_timeout = get_action_timeout(dev, check_type, search->per_device_timeout);

	if (device_timeout > search->per_device_timeout) {
	crm_notice("Since the pcmk_status_timeout(%ds) parameter of %s is larger than stonith-timeout(%ds), timeout may occur",
	device_timeout, dev->id, search->per_device_timeout);
	}

	crm_trace("Running '%s' to check whether %s is eligible to fence %s (%s)",
	check_type, dev->id, search->host, search->action);
	schedule_internal_command(__func__, dev, "status", search->host,
	search->per_device_timeout, search, status_search_cb);
	/* we'll respond to this search request async in the cb */
	return;
	} else {
	crm_err("Invalid value for " PCMK_STONITH_HOST_CHECK ": %s", check_type);
	check_type = "Invalid " PCMK_STONITH_HOST_CHECK;
	}

	if (pcmk__str_eq(host, alias, pcmk__str_casei)) {
	crm_info("%s is%s eligible to fence (%s) %s: %s",
	dev->id, (can? "" : " not"), search->action, host, check_type);
	} else {
	crm_info("%s is%s eligible to fence (%s) %s (aka. '%s'): %s",
	dev->id, (can? "" : " not"), search->action, host, alias,
	check_type);
	}

	search_report_results:
	search_devices_record_result(search, dev ? dev->id : NULL, can);
	}

	static void
	search_devices(gpointer key, gpointer value, gpointer user_data)
	{
	stonith_device_t *dev = value;
	struct device_search_s *search = user_data;

	can_fence_host_with_device(dev, search);
	}

	#define DEFAULT_QUERY_TIMEOUT 20
	static void
	get_capable_devices(const char host, const char action, int timeout, bool suicide, void *user_data,
	void (callback) (GList devices, void *user_data))
	{
	struct device_search_s *search;
	guint ndevices = g_hash_table_size(device_list);

	if (ndevices == 0) {
	callback(NULL, user_data);
	return;
	}

	search = calloc(1, sizeof(struct device_search_s));
	if (!search) {
	crm_crit("Cannot search for capable fence devices: %s",
	strerror(ENOMEM));
	callback(NULL, user_data);
	return;
	}

	pcmk__str_update(&search->host, host);
	pcmk__str_update(&search->action, action);
	search->per_device_timeout = timeout;
	search->allow_suicide = suicide;
	search->callback = callback;
	search->user_data = user_data;

	/* We are guaranteed this many replies, even if a device is
	* unregistered while the search is in progress.
	*/
	search->replies_needed = ndevices;

	crm_debug("Searching %d device%s to see which can execute '%s' targeting %s",
	ndevices, pcmk__plural_s(ndevices),
	(search->action? search->action : "unknown action"),
	(search->host? search->host : "any node"));
	g_hash_table_foreach(device_list, search_devices, search);
	}

	struct st_query_data {
	xmlNode *reply;
	char *remote_peer;
	char *client_id;
	char *target;
	char *action;
	int call_options;
	};

	/*!
	* \internal
	* \brief Add action-specific attributes to query reply XML
	*
	* \param[in,out] xml XML to add attributes to
	* \param[in] action Fence action
	* \param[in] device Fence device
	* \param[in] target Fence target
	*/
	static void
	add_action_specific_attributes(xmlNode xml, const char action,
	stonith_device_t device, const char target)
	{
	int action_specific_timeout;
	int delay_max;
	int delay_base;

	CRM_CHECK(xml && action && device, return);

	if (is_action_required(action, device)) {
	crm_trace("Action '%s' is required using %s", action, device->id);
	crm_xml_add_int(xml, F_STONITH_DEVICE_REQUIRED, 1);
	}

	action_specific_timeout = get_action_timeout(device, action, 0);
	if (action_specific_timeout) {
	crm_trace("Action '%s' has timeout %dms using %s",
	action, action_specific_timeout, device->id);
	crm_xml_add_int(xml, F_STONITH_ACTION_TIMEOUT, action_specific_timeout);
	}

	delay_max = get_action_delay_max(device, action);
	if (delay_max > 0) {
	crm_trace("Action '%s' has maximum random delay %dms using %s",
	action, delay_max, device->id);
	crm_xml_add_int(xml, F_STONITH_DELAY_MAX, delay_max / 1000);
	}

	delay_base = get_action_delay_base(device, action, target);
	if (delay_base > 0) {
	crm_xml_add_int(xml, F_STONITH_DELAY_BASE, delay_base / 1000);
	}

	if ((delay_max > 0) && (delay_base == 0)) {
	crm_trace("Action '%s' has maximum random delay %dms using %s",
	action, delay_max, device->id);
	} else if ((delay_max == 0) && (delay_base > 0)) {
	crm_trace("Action '%s' has a static delay of %dms using %s",
	action, delay_base, device->id);
	} else if ((delay_max > 0) && (delay_base > 0)) {
	crm_trace("Action '%s' has a minimum delay of %dms and a randomly chosen "
	"maximum delay of %dms using %s",
	action, delay_base, delay_max, device->id);
	}
	}

	/*!
	* \internal
	* \brief Add "disallowed" attribute to query reply XML if appropriate
	*
	* \param[in,out] xml XML to add attribute to
	* \param[in] action Fence action
	* \param[in] device Fence device
	* \param[in] target Fence target
	* \param[in] allow_suicide Whether self-fencing is allowed
	*/
	static void
	add_disallowed(xmlNode xml, const char action, stonith_device_t *device,
	const char *target, gboolean allow_suicide)
	{
	if (!localhost_is_eligible(device, action, target, allow_suicide)) {
	crm_trace("Action '%s' using %s is disallowed for local host",
	action, device->id);
	pcmk__xe_set_bool_attr(xml, F_STONITH_ACTION_DISALLOWED, true);
	}
	}

	/*!
	* \internal
	* \brief Add child element with action-specific values to query reply XML
	*
	* \param[in,out] xml XML to add attribute to
	* \param[in] action Fence action
	* \param[in] device Fence device
	* \param[in] target Fence target
	* \param[in] allow_suicide Whether self-fencing is allowed
	*/
	static void
	add_action_reply(xmlNode xml, const char action, stonith_device_t *device,
	const char *target, gboolean allow_suicide)
	{
	xmlNode *child = create_xml_node(xml, F_STONITH_ACTION);

	crm_xml_add(child, XML_ATTR_ID, action);
	add_action_specific_attributes(child, action, device, target);
	add_disallowed(child, action, device, target, allow_suicide);
	}

	static void
	stonith_query_capable_device_cb(GList * devices, void *user_data)
	{
	struct st_query_data *query = user_data;
	int available_devices = 0;
	xmlNode *dev = NULL;
	xmlNode *list = NULL;
	GList *lpc = NULL;
	pcmk__client_t *client = NULL;

	if (query->client_id != NULL) {
	client = pcmk__find_client_by_id(query->client_id);
	if ((client == NULL) && (query->remote_peer == NULL)) {
	crm_trace("Skipping reply to %s: no longer a client",
	query->client_id);
	goto done;
	}
	}

	/* Pack the results into XML */
	list = create_xml_node(NULL, __func__);
	crm_xml_add(list, F_STONITH_TARGET, query->target);
	for (lpc = devices; lpc != NULL; lpc = lpc->next) {
	stonith_device_t *device = g_hash_table_lookup(device_list, lpc->data);
	const char *action = query->action;

	if (!device) {
	/* It is possible the device got unregistered while
	* determining who can fence the target */
	continue;
	}

	available_devices++;

	dev = create_xml_node(list, F_STONITH_DEVICE);
	crm_xml_add(dev, XML_ATTR_ID, device->id);
	crm_xml_add(dev, "namespace", device->namespace);
	crm_xml_add(dev, "agent", device->agent);
	crm_xml_add_int(dev, F_STONITH_DEVICE_VERIFIED, device->verified);

	/* If the originating fencer wants to reboot the node, and we have a
	* capable device that doesn't support "reboot", remap to "off" instead.
	*/
	if (!pcmk_is_set(device->flags, st_device_supports_reboot)
	&& pcmk__str_eq(query->action, "reboot", pcmk__str_casei)) {
	crm_trace("%s doesn't support reboot, using values for off instead",
	device->id);
	action = "off";
	}

	/* Add action-specific values if available */
	add_action_specific_attributes(dev, action, device, query->target);
	if (pcmk__str_eq(query->action, "reboot", pcmk__str_casei)) {
	/* A "reboot" might get remapped to "off" then "on", so after
	* sending the "reboot"-specific values in the main element, we add
	* sub-elements for "off" and "on" values.
	*
	* We short-circuited earlier if "reboot", "off" and "on" are all
	* disallowed for the local host. However if only one or two are
	* disallowed, we send back the results and mark which ones are
	* disallowed. If "reboot" is disallowed, this might cause problems
	* with older fencer versions, which won't check for it. Older
	* versions will ignore "off" and "on", so they are not a problem.
	*/
	add_disallowed(dev, action, device, query->target,
	pcmk_is_set(query->call_options, st_opt_allow_suicide));
	add_action_reply(dev, "off", device, query->target,
	pcmk_is_set(query->call_options, st_opt_allow_suicide));
	add_action_reply(dev, "on", device, query->target, FALSE);
	}

	/* A query without a target wants device parameters */
	if (query->target == NULL) {
	xmlNode *attrs = create_xml_node(dev, XML_TAG_ATTRS);

	g_hash_table_foreach(device->params, hash2field, attrs);
	}
	}

	crm_xml_add_int(list, F_STONITH_AVAILABLE_DEVICES, available_devices);
	if (query->target) {
	crm_debug("Found %d matching device%s for target '%s'",
	available_devices, pcmk__plural_s(available_devices),
	query->target);
	} else {
	crm_debug("%d device%s installed",
	available_devices, pcmk__plural_s(available_devices));
	}

	if (list != NULL) {
	crm_log_xml_trace(list, "Add query results");
	add_message_xml(query->reply, F_STONITH_CALLDATA, list);
	}

	stonith_send_reply(query->reply, query->call_options, query->remote_peer,
	client);

	done:
	free_xml(query->reply);
	free(query->remote_peer);
	free(query->client_id);
	free(query->target);
	free(query->action);
	free(query);
	free_xml(list);
	g_list_free_full(devices, free);
	}

	/*!
	* \internal
	* \brief Log the result of an asynchronous command
	*
	* \param[in] cmd Command the result is for
	* \param[in] result Result of command
	* \param[in] pid Process ID of command, if available
	* \param[in] next Alternate device that will be tried if command failed
	* \param[in] op_merged Whether this command was merged with an earlier one
	*/
	static void
	log_async_result(async_command_t cmd, const pcmk__action_result_t result,
	int pid, const char *next, bool op_merged)
	{
	int log_level = LOG_ERR;
	int output_log_level = LOG_NEVER;
	guint devices_remaining = g_list_length(cmd->device_next);

	GString *msg = g_string_sized_new(80); // Reasonable starting size

	// Choose log levels appropriately if we have a result
	if (pcmk__result_ok(result)) {
	log_level = (cmd->victim == NULL)? LOG_DEBUG : LOG_NOTICE;
	if ((result->action_stdout != NULL)
	&& !pcmk__str_eq(cmd->action, "metadata", pcmk__str_casei)) {
	output_log_level = LOG_DEBUG;
	}
	next = NULL;
	} else {
	log_level = (cmd->victim == NULL)? LOG_NOTICE : LOG_ERR;
	if ((result->action_stdout != NULL)
	&& !pcmk__str_eq(cmd->action, "metadata", pcmk__str_casei)) {
	output_log_level = LOG_WARNING;
	}
	}

	// Build the log message piece by piece
	g_string_printf(msg, "Operation '%s' ", cmd->action);
	if (pid != 0) {
	g_string_append_printf(msg, "[%d] ", pid);
	}
	if (cmd->victim != NULL) {
	g_string_append_printf(msg, "targeting %s ", cmd->victim);
	}
	if (cmd->device != NULL) {
	g_string_append_printf(msg, "using %s ", cmd->device);
	}

	// Add exit status or execution status as appropriate
	if (result->execution_status == PCMK_EXEC_DONE) {
	g_string_append_printf(msg, "returned %d", result->exit_status);
	} else {
	g_string_append_printf(msg, "could not be executed: %s",
	pcmk_exec_status_str(result->execution_status));
	}

	// Add exit reason and next device if appropriate
	if (result->exit_reason != NULL) {
	g_string_append_printf(msg, " (%s)", result->exit_reason);
	}
	if (next != NULL) {
	g_string_append_printf(msg, ", retrying with %s", next);
	}
	if (devices_remaining > 0) {
	g_string_append_printf(msg, " (%u device%s remaining)",
	(unsigned int) devices_remaining,
	pcmk__plural_s(devices_remaining));
	}
	g_string_append_printf(msg, " " CRM_XS " %scall %d from %s",
	(op_merged? "merged " : ""), cmd->id,
	cmd->client_name);

	// Log the result
	do_crm_log(log_level, "%s", msg->str);
	g_string_free(msg, TRUE);

	// Log the output (which may have multiple lines), if appropriate
	if (output_log_level != LOG_NEVER) {
	char *prefix = crm_strdup_printf("%s[%d]", cmd->device, pid);

	crm_log_output(output_log_level, prefix, result->action_stdout);
	free(prefix);
	}
	}

	/*!
	* \internal
	* \brief Reply to requester after asynchronous command completion
	*
	* \param[in] cmd Command that completed
	* \param[in] result Result of command
	* \param[in] pid Process ID of command, if available
	* \param[in] merged If true, command was merged with another, not executed
	*/
	static void
	send_async_reply(async_command_t cmd, const pcmk__action_result_t result,
	int pid, bool merged)
	{
	xmlNode *reply = NULL;
	pcmk__client_t *client = NULL;

	CRM_CHECK((cmd != NULL) && (result != NULL), return);

	log_async_result(cmd, result, pid, NULL, merged);

	if (cmd->client != NULL) {
	client = pcmk__find_client_by_id(cmd->client);
	if ((client == NULL) && (cmd->origin == NULL)) {
	crm_trace("Skipping reply to %s: no longer a client", cmd->client);
	return;
	}
	}

	reply = construct_async_reply(cmd, result);
	if (merged) {
	pcmk__xe_set_bool_attr(reply, F_STONITH_MERGED, true);
	}

	if (!stand_alone && pcmk__is_fencing_action(cmd->action)
	&& pcmk__str_eq(cmd->origin, cmd->victim, pcmk__str_casei)) {
	/* The target was also the originator, so broadcast the result on its
	* behalf (since it will be unable to).
	*/
	crm_trace("Broadcast '%s' result for %s (target was also originator)",
	cmd->action, cmd->victim);
	crm_xml_add(reply, F_SUBTYPE, "broadcast");
	crm_xml_add(reply, F_STONITH_OPERATION, T_STONITH_NOTIFY);
	send_cluster_message(NULL, crm_msg_stonith_ng, reply, FALSE);
	} else {
	// Reply only to the originator
	stonith_send_reply(reply, cmd->options, cmd->origin, client);
	}

	crm_log_xml_trace(reply, "Reply");
	free_xml(reply);

	if (stand_alone) {
	/* Do notification with a clean data object */
	xmlNode *notify_data = create_xml_node(NULL, T_STONITH_NOTIFY_FENCE);

	stonith__xe_set_result(notify_data, result);
	crm_xml_add(notify_data, F_STONITH_TARGET, cmd->victim);
	crm_xml_add(notify_data, F_STONITH_OPERATION, cmd->op);
	crm_xml_add(notify_data, F_STONITH_DELEGATE, "localhost");
	crm_xml_add(notify_data, F_STONITH_DEVICE, cmd->device);
	crm_xml_add(notify_data, F_STONITH_REMOTE_OP_ID, cmd->remote_op_id);
	crm_xml_add(notify_data, F_STONITH_ORIGIN, cmd->client);

	fenced_send_notification(T_STONITH_NOTIFY_FENCE, result, notify_data);
	fenced_send_notification(T_STONITH_NOTIFY_HISTORY, NULL, NULL);
	}
	}

	static void
	cancel_stonith_command(async_command_t * cmd)
	{
	stonith_device_t *device;

	CRM_CHECK(cmd != NULL, return);

	if (!cmd->device) {
	return;
	}

	device = g_hash_table_lookup(device_list, cmd->device);

	if (device) {
	crm_trace("Cancel scheduled '%s' action using %s",
	cmd->action, device->id);
	device->pending_ops = g_list_remove(device->pending_ops, cmd);
	}
	}

	static void
	st_child_done(int pid, const pcmk__action_result_t result, void user_data)
	{
	stonith_device_t *device = NULL;
	stonith_device_t *next_device = NULL;
	async_command_t *cmd = user_data;

	GList *gIter = NULL;
	GList *gIterNext = NULL;

	CRM_CHECK(cmd != NULL, return);

	cmd->active_on = NULL;

	/* The device is ready to do something else now */
	device = g_hash_table_lookup(device_list, cmd->device);
	if (device) {
	if (!device->verified && pcmk__result_ok(result) &&
	(pcmk__strcase_any_of(cmd->action, "list", "monitor", "status", NULL))) {

	device->verified = TRUE;
	}

	mainloop_set_trigger(device->work);
	}

	if (pcmk__result_ok(result)) {
	GList *iter;
	/* see if there are any required devices left to execute for this op */
	for (iter = cmd->device_next; iter != NULL; iter = iter->next) {
	next_device = g_hash_table_lookup(device_list, iter->data);

	if (next_device != NULL && is_action_required(cmd->action, next_device)) {
	cmd->device_next = iter->next;
	break;
	}
	next_device = NULL;
	}

	} else if ((cmd->device_next != NULL)
	&& !is_action_required(cmd->action, device)) {
	/* if this device didn't work out, see if there are any others we can try.
	* if the failed device was 'required', we can't pick another device. */
	next_device = g_hash_table_lookup(device_list, cmd->device_next->data);
	cmd->device_next = cmd->device_next->next;
	}

	/* this operation requires more fencing, hooray! */
	if (next_device) {
	log_async_result(cmd, result, pid, next_device->id, false);
	schedule_stonith_command(cmd, next_device);
	/* Prevent cmd from being freed */
	cmd = NULL;
	goto done;
	}

	send_async_reply(cmd, result, pid, false);

	if (!pcmk__result_ok(result)) {
	goto done;
	}

	/* Check to see if any operations are scheduled to do the exact
	* same thing that just completed. If so, rather than
	* performing the same fencing operation twice, return the result
	* of this operation for all pending commands it matches. */
	for (gIter = cmd_list; gIter != NULL; gIter = gIterNext) {
	async_command_t *cmd_other = gIter->data;

	gIterNext = gIter->next;

	if (cmd == cmd_other) {
	continue;
	}

	/* A pending scheduled command matches the command that just finished if.
	* 1. The client connections are different.
	* 2. The node victim is the same.
	* 3. The fencing action is the same.
	* 4. The device scheduled to execute the action is the same.
	*/
	if (pcmk__str_eq(cmd->client, cmd_other->client, pcmk__str_casei) \|\|
	!pcmk__str_eq(cmd->victim, cmd_other->victim, pcmk__str_casei) \|\|
	!pcmk__str_eq(cmd->action, cmd_other->action, pcmk__str_casei) \|\|
	!pcmk__str_eq(cmd->device, cmd_other->device, pcmk__str_casei)) {

	continue;
	}

	/* Duplicate merging will do the right thing for either type of remapped
	* reboot. If the executing fencer remapped an unsupported reboot to
	* off, then cmd->action will be reboot and will be merged with any
	* other reboot requests. If the originating fencer remapped a
	* topology reboot to off then on, we will get here once with
	* cmd->action "off" and once with "on", and they will be merged
	* separately with similar requests.
	*/
	crm_notice("Merging fencing action '%s' targeting %s originating from "
	"client %s with identical fencing request from client %s",
	cmd_other->action, cmd_other->victim, cmd_other->client_name,
	cmd->client_name);

	cmd_list = g_list_remove_link(cmd_list, gIter);

	send_async_reply(cmd_other, result, pid, true);
	cancel_stonith_command(cmd_other);

	free_async_command(cmd_other);
	g_list_free_1(gIter);
	}

	done:
	free_async_command(cmd);
	}

	static gint
	sort_device_priority(gconstpointer a, gconstpointer b)
	{
	const stonith_device_t *dev_a = a;
	const stonith_device_t *dev_b = b;

	if (dev_a->priority > dev_b->priority) {
	return -1;
	} else if (dev_a->priority < dev_b->priority) {
	return 1;
	}
	return 0;
	}

	static void
	stonith_fence_get_devices_cb(GList * devices, void *user_data)
	{
	async_command_t *cmd = user_data;
	stonith_device_t *device = NULL;
	guint ndevices = g_list_length(devices);

	crm_info("Found %d matching device%s for target '%s'",
	ndevices, pcmk__plural_s(ndevices), cmd->victim);

	if (devices != NULL) {
	/* Order based on priority */
	devices = g_list_sort(devices, sort_device_priority);
	device = g_hash_table_lookup(device_list, devices->data);
	}

	if (device == NULL) { // No device found
	pcmk__action_result_t result = PCMK__UNKNOWN_RESULT;

	pcmk__format_result(&result, CRM_EX_ERROR, PCMK_EXEC_NO_FENCE_DEVICE,
	"No device configured for target '%s'",
	cmd->victim);
	send_async_reply(cmd, &result, 0, false);
	pcmk__reset_result(&result);
	free_async_command(cmd);
	g_list_free_full(devices, free);

	} else { // Device found, schedule it for fencing
	cmd->device_list = devices;
	cmd->device_next = devices->next;
	schedule_stonith_command(cmd, device);
	}
	}

	/*!
	* \internal
	* \brief Execute a fence action via the local node
	*
	* \param[in] msg Fencing request
	* \param[out] result Where to store result of fence action
	*/
	static void
	fence_locally(xmlNode msg, pcmk__action_result_t result)
	{
	const char *device_id = NULL;
	stonith_device_t *device = NULL;
	async_command_t *cmd = create_async_command(msg);
	xmlNode *dev = get_xpath_object("//@" F_STONITH_TARGET, msg, LOG_ERR);

	CRM_CHECK(result != NULL, return);

	if (cmd == NULL) {
	fenced_set_protocol_error(result);
	return;
	}

	device_id = crm_element_value(dev, F_STONITH_DEVICE);
	if (device_id != NULL) {
	device = g_hash_table_lookup(device_list, device_id);
	if (device == NULL) {
	crm_err("Requested device '%s' is not available", device_id);
	pcmk__format_result(result, CRM_EX_ERROR, PCMK_EXEC_NO_FENCE_DEVICE,
	"Requested device '%s' not found", device_id);
	return;
	}
	schedule_stonith_command(cmd, device);

	} else {
	const char *host = crm_element_value(dev, F_STONITH_TARGET);

	if (pcmk_is_set(cmd->options, st_opt_cs_nodeid)) {
	int nodeid = 0;
	crm_node_t *node = NULL;

	pcmk__scan_min_int(host, &nodeid, 0);
	node = pcmk__search_known_node_cache(nodeid, NULL, CRM_GET_PEER_ANY);
	if (node != NULL) {
	host = node->uname;
	}
	}

	/* If we get to here, then self-fencing is implicitly allowed */
	get_capable_devices(host, cmd->action, cmd->default_timeout,
	TRUE, cmd, stonith_fence_get_devices_cb);
	}

	pcmk__set_result(result, CRM_EX_OK, PCMK_EXEC_PENDING, NULL);
	}

	/*!
	* \internal
	* \brief Build an XML reply for a fencing operation
	*
	* \param[in] request Request that reply is for
	* \param[in] data If not NULL, add to reply as call data
	* \param[in] result Full result of fencing operation
	*
	* \return Newly created XML reply
	* \note The caller is responsible for freeing the result.
	* \note This has some overlap with construct_async_reply(), but that copies
	* values from an async_command_t, whereas this one copies them from the
	* request.
	*/
	xmlNode *
	fenced_construct_reply(xmlNode request, xmlNode data,
	pcmk__action_result_t *result)
	{
	xmlNode *reply = NULL;

	reply = create_xml_node(NULL, T_STONITH_REPLY);

	crm_xml_add(reply, "st_origin", __func__);
	crm_xml_add(reply, F_TYPE, T_STONITH_NG);
	stonith__xe_set_result(reply, result);

	if (request == NULL) {
	/* Most likely, this is the result of a stonith operation that was
	* initiated before we came up. Unfortunately that means we lack enough
	* information to provide clients with a full result.
	*
	* @TODO Maybe synchronize this information at start-up?
	*/
	crm_warn("Missing request information for client notifications for "
	"operation with result '%s' (initiated before we came up?)",
	pcmk_exec_status_str(result->execution_status));

	} else {
	const char *name = NULL;
	const char *value = NULL;

	// Attributes to copy from request to reply
	const char *names[] = {
	F_STONITH_OPERATION,
	F_STONITH_CALLID,
	F_STONITH_CLIENTID,
	F_STONITH_CLIENTNAME,
	F_STONITH_REMOTE_OP_ID,
	F_STONITH_CALLOPTS
	};

	for (int lpc = 0; lpc < PCMK__NELEM(names); lpc++) {
	name = names[lpc];
	value = crm_element_value(request, name);
	crm_xml_add(reply, name, value);
	}
	if (data != NULL) {
	add_message_xml(reply, F_STONITH_CALLDATA, data);
	}
	}
	return reply;
	}

	/*!
	* \internal
	* \brief Build an XML reply to an asynchronous fencing command
	*
	* \param[in] cmd Fencing command that reply is for
	* \param[in] result Command result
	*/
	static xmlNode *
	construct_async_reply(async_command_t cmd, const pcmk__action_result_t result)
	{
	xmlNode *reply = create_xml_node(NULL, T_STONITH_REPLY);

	crm_xml_add(reply, "st_origin", __func__);
	crm_xml_add(reply, F_TYPE, T_STONITH_NG);
	crm_xml_add(reply, F_STONITH_OPERATION, cmd->op);
	crm_xml_add(reply, F_STONITH_DEVICE, cmd->device);
	crm_xml_add(reply, F_STONITH_REMOTE_OP_ID, cmd->remote_op_id);
	crm_xml_add(reply, F_STONITH_CLIENTID, cmd->client);
	crm_xml_add(reply, F_STONITH_CLIENTNAME, cmd->client_name);
	crm_xml_add(reply, F_STONITH_TARGET, cmd->victim);
	crm_xml_add(reply, F_STONITH_ACTION, cmd->op);
	crm_xml_add(reply, F_STONITH_ORIGIN, cmd->origin);
	crm_xml_add_int(reply, F_STONITH_CALLID, cmd->id);
	crm_xml_add_int(reply, F_STONITH_CALLOPTS, cmd->options);

	stonith__xe_set_result(reply, result);
	return reply;
	}

	bool fencing_peer_active(crm_node_t *peer)
	{
	if (peer == NULL) {
	return FALSE;
	} else if (peer->uname == NULL) {
	return FALSE;
	} else if (pcmk_is_set(peer->processes, crm_get_cluster_proc())) {
	return TRUE;
	}
	return FALSE;
	}

	void
	set_fencing_completed(remote_fencing_op_t *op)
	{
	struct timespec tv;

	qb_util_timespec_from_epoch_get(&tv);
	op->completed = tv.tv_sec;
	op->completed_nsec = tv.tv_nsec;
	}

	/*!
	* \internal
	* \brief Look for alternate node needed if local node shouldn't fence target
	*
	* \param[in] target Node that must be fenced
	*
	* \return Name of an alternate node that should fence \p target if any,
	* or NULL otherwise
	*/
	static const char *
	check_alternate_host(const char *target)
	{
	const char *alternate_host = NULL;

	crm_trace("Checking if we (%s) can fence %s", stonith_our_uname, target);
	if (find_topology_for_host(target) && pcmk__str_eq(target, stonith_our_uname, pcmk__str_casei)) {
	GHashTableIter gIter;
	crm_node_t *entry = NULL;

	g_hash_table_iter_init(&gIter, crm_peer_cache);
	while (g_hash_table_iter_next(&gIter, NULL, (void **)&entry)) {
	crm_trace("Checking for %s.%d != %s", entry->uname, entry->id, target);
	if (fencing_peer_active(entry)
	&& !pcmk__str_eq(entry->uname, target, pcmk__str_casei)) {
	alternate_host = entry->uname;
	break;
	}
	}
	if (alternate_host == NULL) {
	crm_err("No alternate host available to handle request "
	"for self-fencing with topology");
	g_hash_table_iter_init(&gIter, crm_peer_cache);
	while (g_hash_table_iter_next(&gIter, NULL, (void **)&entry)) {
	crm_notice("Peer[%d] %s", entry->id, entry->uname);
	}
	}
	}

	return alternate_host;
	}

	/*!
	* \internal
	* \brief Send a reply to a CPG peer or IPC client
	*
	* \param[in] reply XML reply to send
	* \param[in] call_options Send synchronously if st_opt_sync_call is set here
	* \param[in] remote_peer If not NULL, name of peer node to send CPG reply
	* \param[in] client If not NULL, client to send IPC reply
	*/
	static void
	stonith_send_reply(xmlNode reply, int call_options, const char remote_peer,
	pcmk__client_t *client)
	{
	CRM_CHECK((reply != NULL) && ((remote_peer != NULL) \|\| (client != NULL)),
	return);

	if (remote_peer == NULL) {
	do_local_reply(reply, client, call_options);
	} else {
	send_cluster_message(crm_get_peer(0, remote_peer), crm_msg_stonith_ng,
	reply, FALSE);
	}
	}

	static void
	remove_relay_op(xmlNode * request)
	{
	xmlNode *dev = get_xpath_object("//@" F_STONITH_ACTION, request, LOG_TRACE);
	const char *relay_op_id = NULL;
	const char *op_id = NULL;
	const char *client_name = NULL;
	const char *target = NULL;
	remote_fencing_op_t *relay_op = NULL;

	if (dev) {
	target = crm_element_value(dev, F_STONITH_TARGET);
	}

	relay_op_id = crm_element_value(request, F_STONITH_REMOTE_OP_ID_RELAY);
	op_id = crm_element_value(request, F_STONITH_REMOTE_OP_ID);
	client_name = crm_element_value(request, F_STONITH_CLIENTNAME);

	/* Delete RELAY operation. */
	if (relay_op_id && target && pcmk__str_eq(target, stonith_our_uname, pcmk__str_casei)) {
	relay_op = g_hash_table_lookup(stonith_remote_op_list, relay_op_id);

	if (relay_op) {
	GHashTableIter iter;
	remote_fencing_op_t *list_op = NULL;
	g_hash_table_iter_init(&iter, stonith_remote_op_list);

	/* If the operation to be deleted is registered as a duplicate, delete the registration. */
	while (g_hash_table_iter_next(&iter, NULL, (void **)&list_op)) {
	GList *dup_iter = NULL;
	if (list_op != relay_op) {
	for (dup_iter = list_op->duplicates; dup_iter != NULL; dup_iter = dup_iter->next) {
	remote_fencing_op_t *other = dup_iter->data;
	if (other == relay_op) {
	other->duplicates = g_list_remove(other->duplicates, relay_op);
	break;
	}
	}
	}
	}
	crm_debug("Deleting relay op %s ('%s' targeting %s for %s), "
	"replaced by op %s ('%s' targeting %s for %s)",
	relay_op->id, relay_op->action, relay_op->target,
	relay_op->client_name, op_id, relay_op->action, target,
	client_name);

	g_hash_table_remove(stonith_remote_op_list, relay_op_id);
	}
	}
	}

	/*!
	* \internal
	* \brief Check whether an API request was sent by a privileged user
	*
	* API commands related to fencing configuration may be done only by privileged
	* IPC users (i.e. root or hacluster), because all other users should go through
	* the CIB to have ACLs applied. If no client was given, this is a peer request,
	* which is always allowed.
	*
	* \param[in] c IPC client that sent request (or NULL if sent by CPG peer)
	* \param[in] op Requested API operation (for logging only)
	*
	* \return true if sender is peer or privileged client, otherwise false
	*/
	static inline bool
	is_privileged(pcmk__client_t c, const char op)
	{
	if ((c == NULL) \|\| pcmk_is_set(c->flags, pcmk__client_privileged)) {
	return true;
	} else {
	crm_warn("Rejecting IPC request '%s' from unprivileged client %s",
	pcmk__s(op, "<null>"), pcmk__client_name(c));
	return false;
	}
	}

	// CRM_OP_REGISTER
	static xmlNode *
	handle_register_request(pcmk__request_t *request)
	{
	xmlNode *reply = create_xml_node(NULL, "reply");

	CRM_ASSERT(request->ipc_client != NULL);
	crm_xml_add(reply, F_STONITH_OPERATION, CRM_OP_REGISTER);
	crm_xml_add(reply, F_STONITH_CLIENTID, request->ipc_client->id);
	pcmk__set_result(&request->result, CRM_EX_OK, PCMK_EXEC_DONE, NULL);
	pcmk__set_request_flags(request, pcmk__request_reuse_options);
	return reply;
	}

	// STONITH_OP_EXEC
	static xmlNode *
	handle_agent_request(pcmk__request_t *request)
	{
	execute_agent_action(request->xml, &request->result);
	if (request->result.execution_status == PCMK_EXEC_PENDING) {
	return NULL;
	}
	return fenced_construct_reply(request->xml, NULL, &request->result);
	}

	// STONITH_OP_TIMEOUT_UPDATE
	static xmlNode *
	handle_update_timeout_request(pcmk__request_t *request)
	{
	const char *call_id = crm_element_value(request->xml, F_STONITH_CALLID);
	const char *client_id = crm_element_value(request->xml, F_STONITH_CLIENTID);
	int op_timeout = 0;

	crm_element_value_int(request->xml, F_STONITH_TIMEOUT, &op_timeout);
	do_stonith_async_timeout_update(client_id, call_id, op_timeout);
	pcmk__set_result(&request->result, CRM_EX_OK, PCMK_EXEC_DONE, NULL);
	return NULL;
	}

	// STONITH_OP_QUERY
	static xmlNode *
	handle_query_request(pcmk__request_t *request)
	{
	int timeout = 0;
	xmlNode *dev = NULL;
	const char *action = NULL;
	const char *target = NULL;
	const char *client_id = crm_element_value(request->xml, F_STONITH_CLIENTID);
	struct st_query_data *query = NULL;

	if (request->peer != NULL) {
	// Record it for the future notification
	create_remote_stonith_op(client_id, request->xml, TRUE);
	}

	/* Delete the DC node RELAY operation. */
	remove_relay_op(request->xml);

	pcmk__set_result(&request->result, CRM_EX_OK, PCMK_EXEC_DONE, NULL);

	dev = get_xpath_object("//@" F_STONITH_ACTION, request->xml, LOG_NEVER);
	if (dev != NULL) {
	const char *device = crm_element_value(dev, F_STONITH_DEVICE);

	if (pcmk__str_eq(device, "manual_ack", pcmk__str_casei)) {
	return NULL; // No query or reply necessary
	}
	target = crm_element_value(dev, F_STONITH_TARGET);
	action = crm_element_value(dev, F_STONITH_ACTION);
	}

	crm_log_xml_trace(request->xml, "Query");

	query = calloc(1, sizeof(struct st_query_data));
	CRM_ASSERT(query != NULL);

	query->reply = fenced_construct_reply(request->xml, NULL, &request->result);
	pcmk__str_update(&query->remote_peer, request->peer);
	pcmk__str_update(&query->client_id, client_id);
	pcmk__str_update(&query->target, target);
	pcmk__str_update(&query->action, action);
	query->call_options = request->call_options;

	crm_element_value_int(request->xml, F_STONITH_TIMEOUT, &timeout);
	get_capable_devices(target, action, timeout,
	pcmk_is_set(query->call_options, st_opt_allow_suicide),
	query, stonith_query_capable_device_cb);
	return NULL;
	}

	// T_STONITH_NOTIFY
	static xmlNode *
	handle_notify_request(pcmk__request_t *request)
	{
	const char *flag_name = NULL;

	CRM_ASSERT(request->ipc_client != NULL);
	flag_name = crm_element_value(request->xml, F_STONITH_NOTIFY_ACTIVATE);
	if (flag_name != NULL) {
	crm_debug("Enabling %s callbacks for client %s",
	flag_name, pcmk__request_origin(request));
	pcmk__set_client_flags(request->ipc_client, get_stonith_flag(flag_name));
	}

	flag_name = crm_element_value(request->xml, F_STONITH_NOTIFY_DEACTIVATE);
	if (flag_name != NULL) {
	crm_debug("Disabling %s callbacks for client %s",
	flag_name, pcmk__request_origin(request));
	pcmk__clear_client_flags(request->ipc_client,
	get_stonith_flag(flag_name));
	}

	pcmk__set_result(&request->result, CRM_EX_OK, PCMK_EXEC_DONE, NULL);
	pcmk__set_request_flags(request, pcmk__request_reuse_options);

	return pcmk__ipc_create_ack(request->ipc_flags, "ack", CRM_EX_OK);
	}

	// STONITH_OP_RELAY
	static xmlNode *
	handle_relay_request(pcmk__request_t *request)
	{
	xmlNode *dev = get_xpath_object("//@" F_STONITH_TARGET, request->xml,
	LOG_TRACE);

	crm_notice("Received forwarded fencing request from "
	"%s %s to fence (%s) peer %s",
	pcmk__request_origin_type(request),
	pcmk__request_origin(request),
	crm_element_value(dev, F_STONITH_ACTION),
	crm_element_value(dev, F_STONITH_TARGET));

	if (initiate_remote_stonith_op(NULL, request->xml, FALSE) == NULL) {
	fenced_set_protocol_error(&request->result);
	return fenced_construct_reply(request->xml, NULL, &request->result);
	}

	pcmk__set_result(&request->result, CRM_EX_OK, PCMK_EXEC_PENDING, NULL);
	return NULL;
	}

	// STONITH_OP_FENCE
	static xmlNode *
	handle_fence_request(pcmk__request_t *request)
	{
	if ((request->peer != NULL) \|\| stand_alone) {
	fence_locally(request->xml, &request->result);

	} else if (pcmk_is_set(request->call_options, st_opt_manual_ack)) {
	switch (fenced_handle_manual_confirmation(request->ipc_client,
	request->xml)) {
	case pcmk_rc_ok:
	pcmk__set_result(&request->result, CRM_EX_OK, PCMK_EXEC_DONE,
	NULL);
	break;
	case EINPROGRESS:
	pcmk__set_result(&request->result, CRM_EX_OK, PCMK_EXEC_PENDING,
	NULL);
	break;
	default:
	fenced_set_protocol_error(&request->result);
	break;
	}

	} else {
	const char *alternate_host = NULL;
	xmlNode *dev = get_xpath_object("//@" F_STONITH_TARGET, request->xml,
	LOG_TRACE);
	const char *target = crm_element_value(dev, F_STONITH_TARGET);
	const char *action = crm_element_value(dev, F_STONITH_ACTION);
	const char *device = crm_element_value(dev, F_STONITH_DEVICE);

	if (request->ipc_client != NULL) {
	int tolerance = 0;

	crm_notice("Client %s wants to fence (%s) %s using %s",
	pcmk__request_origin(request), action,
	target, (device? device : "any device"));
	crm_element_value_int(dev, F_STONITH_TOLERANCE, &tolerance);
	if (stonith_check_fence_tolerance(tolerance, target, action)) {
	pcmk__set_result(&request->result, CRM_EX_OK, PCMK_EXEC_DONE,
	NULL);
	return fenced_construct_reply(request->xml, NULL,
	&request->result);
	}

	} else {
	crm_notice("Peer %s wants to fence (%s) '%s' with device '%s'",
	request->peer, action, target,
	(device == NULL)? "(any)" : device);
	}

	alternate_host = check_alternate_host(target);

	if ((alternate_host != NULL) && (request->ipc_client != NULL)) {
	const char *client_id = NULL;
	remote_fencing_op_t *op = NULL;

	crm_notice("Forwarding self-fencing request to peer %s "
	"due to topology", alternate_host);

	if (request->ipc_client->id == 0) {
	client_id = crm_element_value(request->xml, F_STONITH_CLIENTID);
	} else {
	client_id = request->ipc_client->id;
	}

	/* Create a duplicate fencing operation to relay with the client ID.
	* When a query response is received, this operation should be
	* deleted to avoid keeping the duplicate around.
	*/
	op = create_remote_stonith_op(client_id, request->xml, FALSE);

	crm_xml_add(request->xml, F_STONITH_OPERATION, STONITH_OP_RELAY);
	crm_xml_add(request->xml, F_STONITH_CLIENTID,
	request->ipc_client->id);
	crm_xml_add(request->xml, F_STONITH_REMOTE_OP_ID, op->id);
	send_cluster_message(crm_get_peer(0, alternate_host),
	crm_msg_stonith_ng, request->xml, FALSE);
	pcmk__set_result(&request->result, CRM_EX_OK, PCMK_EXEC_PENDING,
	NULL);

	} else if (initiate_remote_stonith_op(request->ipc_client, request->xml,
	FALSE) == NULL) {
	fenced_set_protocol_error(&request->result);

	} else {
	pcmk__set_result(&request->result, CRM_EX_OK, PCMK_EXEC_PENDING,
	NULL);
	}
	}

	if (request->result.execution_status == PCMK_EXEC_PENDING) {
	return NULL;
	}
	return fenced_construct_reply(request->xml, NULL, &request->result);
	}

	// STONITH_OP_FENCE_HISTORY
	static xmlNode *
	handle_history_request(pcmk__request_t *request)
	{
	xmlNode *reply = NULL;
	xmlNode *data = NULL;

	stonith_fence_history(request->xml, &data, request->peer,
	request->call_options);
	pcmk__set_result(&request->result, CRM_EX_OK, PCMK_EXEC_DONE, NULL);
	if (!pcmk_is_set(request->call_options, st_opt_discard_reply)) {
	/* When the local node broadcasts its history, it sets
	* st_opt_discard_reply and doesn't need a reply.
	*/
	reply = fenced_construct_reply(request->xml, data, &request->result);
	}
	free_xml(data);
	return reply;
	}

	// STONITH_OP_DEVICE_ADD
	static xmlNode *
	handle_device_add_request(pcmk__request_t *request)
	{
	const char *op = crm_element_value(request->xml, F_STONITH_OPERATION);
	xmlNode *dev = get_xpath_object("//" F_STONITH_DEVICE, request->xml,
	LOG_ERR);

	if (is_privileged(request->ipc_client, op)) {
	int rc = stonith_device_register(dev, FALSE);

	pcmk__set_result(&request->result,
	((rc == pcmk_ok)? CRM_EX_OK : CRM_EX_ERROR),
	stonith__legacy2status(rc),
	((rc == pcmk_ok)? NULL : pcmk_strerror(rc)));
	} else {
	pcmk__set_result(&request->result, CRM_EX_INSUFFICIENT_PRIV,
	PCMK_EXEC_INVALID,
	"Unprivileged users must register device via CIB");
	}
	fenced_send_device_notification(op, &request->result,
	(dev == NULL)? NULL : ID(dev));
	return fenced_construct_reply(request->xml, NULL, &request->result);
	}

	// STONITH_OP_DEVICE_DEL
	static xmlNode *
	handle_device_delete_request(pcmk__request_t *request)
	{
	xmlNode *dev = get_xpath_object("//" F_STONITH_DEVICE, request->xml,
	LOG_ERR);
	const char *device_id = crm_element_value(dev, XML_ATTR_ID);
	const char *op = crm_element_value(request->xml, F_STONITH_OPERATION);

	if (is_privileged(request->ipc_client, op)) {
	stonith_device_remove(device_id, false);
	pcmk__set_result(&request->result, CRM_EX_OK, PCMK_EXEC_DONE, NULL);
	} else {
	pcmk__set_result(&request->result, CRM_EX_INSUFFICIENT_PRIV,
	PCMK_EXEC_INVALID,
	"Unprivileged users must delete device via CIB");
	}
	fenced_send_device_notification(op, &request->result, device_id);
	return fenced_construct_reply(request->xml, NULL, &request->result);
	}

	// STONITH_OP_LEVEL_ADD
	static xmlNode *
	handle_level_add_request(pcmk__request_t *request)
	{
	char *desc = NULL;
	const char *op = crm_element_value(request->xml, F_STONITH_OPERATION);

	if (is_privileged(request->ipc_client, op)) {
	fenced_register_level(request->xml, &desc, &request->result);
	} else {
	unpack_level_request(request->xml, NULL, NULL, NULL, &desc);
	pcmk__set_result(&request->result, CRM_EX_INSUFFICIENT_PRIV,
	PCMK_EXEC_INVALID,
	"Unprivileged users must add level via CIB");
	}
	fenced_send_level_notification(op, &request->result, desc);
	free(desc);
	return fenced_construct_reply(request->xml, NULL, &request->result);
	}

	// STONITH_OP_LEVEL_DEL
	static xmlNode *
	handle_level_delete_request(pcmk__request_t *request)
	{
	char *desc = NULL;
	const char *op = crm_element_value(request->xml, F_STONITH_OPERATION);

	if (is_privileged(request->ipc_client, op)) {
	fenced_unregister_level(request->xml, &desc, &request->result);
	} else {
	unpack_level_request(request->xml, NULL, NULL, NULL, &desc);
	pcmk__set_result(&request->result, CRM_EX_INSUFFICIENT_PRIV,
	PCMK_EXEC_INVALID,
	"Unprivileged users must delete level via CIB");
	}
	fenced_send_level_notification(op, &request->result, desc);
	free(desc);
	return fenced_construct_reply(request->xml, NULL, &request->result);
	}

	// CRM_OP_RM_NODE_CACHE
	static xmlNode *
	handle_cache_request(pcmk__request_t *request)
	{
	int node_id = 0;
	const char *name = NULL;

	crm_element_value_int(request->xml, XML_ATTR_ID, &node_id);
	name = crm_element_value(request->xml, XML_ATTR_UNAME);
	reap_crm_member(node_id, name);
	pcmk__set_result(&request->result, CRM_EX_OK, PCMK_EXEC_DONE, NULL);
	return NULL;
	}

	static xmlNode *
	handle_unknown_request(pcmk__request_t *request)
	{
	const char *op = crm_element_value(request->xml, F_STONITH_OPERATION);

	crm_err("Unknown IPC request %s from %s %s",
	op, pcmk__request_origin_type(request),
	pcmk__request_origin(request));
	pcmk__format_result(&request->result, CRM_EX_PROTOCOL, PCMK_EXEC_INVALID,
	"Unknown IPC request type '%s' (bug?)",
	pcmk__s(op, "<null>"));
	return fenced_construct_reply(request->xml, NULL, &request->result);
	}

	static void
	fenced_register_handlers(void)
	{
	pcmk__server_command_t handlers[] = {
	{ CRM_OP_REGISTER, handle_register_request },
	{ STONITH_OP_EXEC, handle_agent_request },
	{ STONITH_OP_TIMEOUT_UPDATE, handle_update_timeout_request },
	{ STONITH_OP_QUERY, handle_query_request },
	{ T_STONITH_NOTIFY, handle_notify_request },
	{ STONITH_OP_RELAY, handle_relay_request },
	{ STONITH_OP_FENCE, handle_fence_request },
	{ STONITH_OP_FENCE_HISTORY, handle_history_request },
	{ STONITH_OP_DEVICE_ADD, handle_device_add_request },
	{ STONITH_OP_DEVICE_DEL, handle_device_delete_request },
	{ STONITH_OP_LEVEL_ADD, handle_level_add_request },
	{ STONITH_OP_LEVEL_DEL, handle_level_delete_request },
	{ CRM_OP_RM_NODE_CACHE, handle_cache_request },
	{ NULL, handle_unknown_request },
	};

	fenced_handlers = pcmk__register_handlers(handlers);
	}

	void
	fenced_unregister_handlers(void)
	{
	if (fenced_handlers != NULL) {
	g_hash_table_destroy(fenced_handlers);
	fenced_handlers = NULL;
	}
	}

	static void
	handle_request(pcmk__request_t *request)
	{
	xmlNode *reply = NULL;
	const char *reason = NULL;

	if (fenced_handlers == NULL) {
	fenced_register_handlers();
	}
	reply = pcmk__process_request(request, fenced_handlers);
	if (reply != NULL) {
	if (pcmk_is_set(request->flags, pcmk__request_reuse_options)
	&& (request->ipc_client != NULL)) {
	/* Certain IPC-only commands must reuse the call options from the
	* original request rather than the ones set by stonith_send_reply()
	* -> do_local_reply().
	*/
	pcmk__ipc_send_xml(request->ipc_client, request->ipc_id, reply,
	request->ipc_flags);
	request->ipc_client->request_id = 0;
	} else {
	stonith_send_reply(reply, request->call_options,
	request->peer, request->ipc_client);
	}
	free_xml(reply);
	}

	reason = request->result.exit_reason;
	crm_debug("Processed %s request from %s %s: %s%s%s%s",
	request->op, pcmk__request_origin_type(request),
	pcmk__request_origin(request),
	pcmk_exec_status_str(request->result.execution_status),
	(reason == NULL)? "" : " (",
	(reason == NULL)? "" : reason,
	(reason == NULL)? "" : ")");
	}

	static void
	handle_reply(pcmk__client_t client, xmlNode request, const char *remote_peer)
	{
	// Copy, because request might be freed before we want to log this
	char *op = crm_element_value_copy(request, F_STONITH_OPERATION);

	if (pcmk__str_eq(op, STONITH_OP_QUERY, pcmk__str_none)) {
	process_remote_stonith_query(request);
	} else if (pcmk__str_any_of(op, T_STONITH_NOTIFY, STONITH_OP_FENCE, NULL)) {
	fenced_process_fencing_reply(request);
	} else {
	crm_err("Ignoring unknown %s reply from %s %s",
	pcmk__s(op, "untyped"), ((client == NULL)? "peer" : "client"),
	((client == NULL)? remote_peer : pcmk__client_name(client)));
	crm_log_xml_warn(request, "UnknownOp");
	free(op);
	return;
	}
	crm_debug("Processed %s reply from %s %s",
	op, ((client == NULL)? "peer" : "client"),
	((client == NULL)? remote_peer : pcmk__client_name(client)));
	free(op);
	}

	/*!
	* \internal
	* \brief Handle a message from an IPC client or CPG peer
	*
	* \param[in] client If not NULL, IPC client that sent message
	* \param[in] id If from IPC client, IPC message ID
	* \param[in] flags Message flags
	* \param[in] message Message XML
	* \param[in] remote_peer If not NULL, CPG peer that sent message
	*/
	void
	stonith_command(pcmk__client_t *client, uint32_t id, uint32_t flags,
	xmlNode message, const char remote_peer)
	{
	int call_options = st_opt_none;
	bool is_reply = false;

	CRM_CHECK(message != NULL, return);

	if (get_xpath_object("//" T_STONITH_REPLY, message, LOG_NEVER) != NULL) {
	is_reply = true;
	}
	crm_element_value_int(message, F_STONITH_CALLOPTS, &call_options);
	crm_debug("Processing %ssynchronous %s %s %u from %s %s",
	pcmk_is_set(call_options, st_opt_sync_call)? "" : "a",
	crm_element_value(message, F_STONITH_OPERATION),
	(is_reply? "reply" : "request"), id,
	((client == NULL)? "peer" : "client"),
	((client == NULL)? remote_peer : pcmk__client_name(client)));

	if (pcmk_is_set(call_options, st_opt_sync_call)) {
	CRM_ASSERT(client == NULL \|\| client->request_id == id);
	}

	if (is_reply) {
	handle_reply(client, message, remote_peer);
	} else {
	pcmk__request_t request = {
	.ipc_client = client,
	.ipc_id = id,
	.ipc_flags = flags,
	.peer = remote_peer,
	.xml = message,
	.call_options = call_options,
	.result = PCMK__UNKNOWN_RESULT,
	};

	request.op = crm_element_value_copy(request.xml, F_STONITH_OPERATION);
	CRM_CHECK(request.op != NULL, return);

	if (pcmk_is_set(request.call_options, st_opt_sync_call)) {
	pcmk__set_request_flags(&request, pcmk__request_sync);
	}

	handle_request(&request);
	pcmk__reset_request(&request);
	}
	}
	diff --git a/daemons/fenced/pacemaker-fenced.c b/daemons/fenced/pacemaker-fenced.c
	index 6a4d501bb4..44ee959ad8 100644
	--- a/daemons/fenced/pacemaker-fenced.c
	+++ b/daemons/fenced/pacemaker-fenced.c
	@@ -1,1708 +1,1708 @@
	/*
	* Copyright 2009-2022 the Pacemaker project contributors
	*
	* The version control history for this file may have further details.
	*
	* This source code is licensed under the GNU General Public License version 2
	* or later (GPLv2+) WITHOUT ANY WARRANTY.
	*/

	#include <crm_internal.h>

	#include <sys/param.h>
	#include <stdio.h>
	#include <sys/types.h>
	#include <sys/stat.h>
	#include <unistd.h>
	#include <sys/utsname.h>

	#include <stdlib.h>
	#include <errno.h>
	#include <fcntl.h>
	#include <inttypes.h> // PRIu32, PRIx32

	#include <crm/crm.h>
	#include <crm/msg_xml.h>
	#include <crm/common/ipc.h>
	#include <crm/common/ipc_internal.h>
	#include <crm/cluster/internal.h>

	#include <crm/stonith-ng.h>
	#include <crm/fencing/internal.h>
	#include <crm/common/xml.h>
	#include <crm/common/xml_internal.h>

	#include <crm/common/mainloop.h>

	#include <crm/cib/internal.h>
	#include <crm/pengine/status.h>
	#include <pacemaker-internal.h>

	#include <pacemaker-fenced.h>

	char *stonith_our_uname = NULL;
	long stonith_watchdog_timeout_ms = 0;
	GList *stonith_watchdog_targets = NULL;

	static GMainLoop *mainloop = NULL;

	gboolean stand_alone = FALSE;
	static gboolean no_cib_connect = FALSE;
	static gboolean stonith_shutdown_flag = FALSE;

	static qb_ipcs_service_t *ipcs = NULL;
	static xmlNode *local_cib = NULL;
	static pe_working_set_t *fenced_data_set = NULL;
	static const unsigned long long data_set_flags = pe_flag_quick_location
	\| pe_flag_no_compat
	\| pe_flag_no_counts;

	static cib_t *cib_api = NULL;

	static pcmk__output_t *out = NULL;

	pcmk__supported_format_t formats[] = {
	PCMK__SUPPORTED_FORMAT_LOG,
	PCMK__SUPPORTED_FORMAT_NONE,
	PCMK__SUPPORTED_FORMAT_TEXT,
	{ NULL, NULL, NULL }
	};

	static void stonith_shutdown(int nsig);
	static void stonith_cleanup(void);

	static int32_t
	st_ipc_accept(qb_ipcs_connection_t * c, uid_t uid, gid_t gid)
	{
	if (stonith_shutdown_flag) {
	crm_info("Ignoring new client [%d] during shutdown",
	pcmk__client_pid(c));
	return -EPERM;
	}

	if (pcmk__new_client(c, uid, gid) == NULL) {
	return -EIO;
	}
	return 0;
	}

	/* Exit code means? */
	static int32_t
	st_ipc_dispatch(qb_ipcs_connection_t * qbc, void *data, size_t size)
	{
	uint32_t id = 0;
	uint32_t flags = 0;
	int call_options = 0;
	xmlNode *request = NULL;
	pcmk__client_t *c = pcmk__find_client(qbc);
	const char *op = NULL;

	if (c == NULL) {
	crm_info("Invalid client: %p", qbc);
	return 0;
	}

	request = pcmk__client_data2xml(c, data, &id, &flags);
	if (request == NULL) {
	pcmk__ipc_send_ack(c, id, flags, "nack", CRM_EX_PROTOCOL);
	return 0;
	}


	op = crm_element_value(request, F_CRM_TASK);
	if(pcmk__str_eq(op, CRM_OP_RM_NODE_CACHE, pcmk__str_casei)) {
	crm_xml_add(request, F_TYPE, T_STONITH_NG);
	crm_xml_add(request, F_STONITH_OPERATION, op);
	crm_xml_add(request, F_STONITH_CLIENTID, c->id);
	crm_xml_add(request, F_STONITH_CLIENTNAME, pcmk__client_name(c));
	crm_xml_add(request, F_STONITH_CLIENTNODE, stonith_our_uname);

	send_cluster_message(NULL, crm_msg_stonith_ng, request, FALSE);
	free_xml(request);
	return 0;
	}

	if (c->name == NULL) {
	const char *value = crm_element_value(request, F_STONITH_CLIENTNAME);

	if (value == NULL) {
	value = "unknown";
	}
	c->name = crm_strdup_printf("%s.%u", value, c->pid);
	}

	crm_element_value_int(request, F_STONITH_CALLOPTS, &call_options);
	crm_trace("Flags %#08" PRIx32 "/%#08x for command %" PRIu32
	" from client %s", flags, call_options, id, pcmk__client_name(c));

	if (pcmk_is_set(call_options, st_opt_sync_call)) {
	CRM_ASSERT(flags & crm_ipc_client_response);
	CRM_LOG_ASSERT(c->request_id == 0); /* This means the client has two synchronous events in-flight */
	c->request_id = id; /* Reply only to the last one */
	}

	crm_xml_add(request, F_STONITH_CLIENTID, c->id);
	crm_xml_add(request, F_STONITH_CLIENTNAME, pcmk__client_name(c));
	crm_xml_add(request, F_STONITH_CLIENTNODE, stonith_our_uname);

	stonith_command(c, id, flags, request, NULL);

	free_xml(request);
	return 0;
	}

	/* Error code means? */
	static int32_t
	st_ipc_closed(qb_ipcs_connection_t * c)
	{
	pcmk__client_t *client = pcmk__find_client(c);

	if (client == NULL) {
	return 0;
	}

	crm_trace("Connection %p closed", c);
	pcmk__free_client(client);

	/* 0 means: yes, go ahead and destroy the connection */
	return 0;
	}

	static void
	st_ipc_destroy(qb_ipcs_connection_t * c)
	{
	crm_trace("Connection %p destroyed", c);
	st_ipc_closed(c);
	}

	static void
	stonith_peer_callback(xmlNode * msg, void *private_data)
	{
	const char *remote_peer = crm_element_value(msg, F_ORIG);
	const char *op = crm_element_value(msg, F_STONITH_OPERATION);

	if (pcmk__str_eq(op, "poke", pcmk__str_none)) {
	return;
	}

	crm_log_xml_trace(msg, "Peer[inbound]");
	stonith_command(NULL, 0, 0, msg, remote_peer);
	}

	#if SUPPORT_COROSYNC
	static void
	stonith_peer_ais_callback(cpg_handle_t handle,
	const struct cpg_name *groupName,
	uint32_t nodeid, uint32_t pid, void *msg, size_t msg_len)
	{
	uint32_t kind = 0;
	xmlNode *xml = NULL;
	const char *from = NULL;
	char *data = pcmk_message_common_cs(handle, nodeid, pid, msg, &kind, &from);

	if(data == NULL) {
	return;
	}
	if (kind == crm_class_cluster) {
	xml = string2xml(data);
	if (xml == NULL) {
	crm_err("Invalid XML: '%.120s'", data);
	free(data);
	return;
	}
	crm_xml_add(xml, F_ORIG, from);
	/* crm_xml_add_int(xml, F_SEQ, wrapper->id); */
	stonith_peer_callback(xml, NULL);
	}

	free_xml(xml);
	free(data);
	return;
	}

	static void
	stonith_peer_cs_destroy(gpointer user_data)
	{
	crm_crit("Lost connection to cluster layer, shutting down");
	stonith_shutdown(0);
	}
	#endif

	void
	do_local_reply(xmlNode notify_src, pcmk__client_t client, int call_options)
	{
	/* send callback to originating child */
	int local_rc = pcmk_rc_ok;
	int rid = 0;
	uint32_t ipc_flags = crm_ipc_server_event;

	if (pcmk_is_set(call_options, st_opt_sync_call)) {
	CRM_LOG_ASSERT(client->request_id);
	rid = client->request_id;
	client->request_id = 0;
	ipc_flags = crm_ipc_flags_none;
	}

	local_rc = pcmk__ipc_send_xml(client, rid, notify_src, ipc_flags);
	if (local_rc == pcmk_rc_ok) {
	crm_trace("Sent response %d to client %s",
	rid, pcmk__client_name(client));
	} else {
	crm_warn("%synchronous reply to client %s failed: %s",
	(pcmk_is_set(call_options, st_opt_sync_call)? "S" : "As"),
	pcmk__client_name(client), pcmk_rc_str(local_rc));
	}
	}

	uint64_t
	get_stonith_flag(const char *name)
	{
	if (pcmk__str_eq(name, T_STONITH_NOTIFY_FENCE, pcmk__str_casei)) {
	return st_callback_notify_fence;

	} else if (pcmk__str_eq(name, STONITH_OP_DEVICE_ADD, pcmk__str_casei)) {
	return st_callback_device_add;

	} else if (pcmk__str_eq(name, STONITH_OP_DEVICE_DEL, pcmk__str_casei)) {
	return st_callback_device_del;

	} else if (pcmk__str_eq(name, T_STONITH_NOTIFY_HISTORY, pcmk__str_casei)) {
	return st_callback_notify_history;

	} else if (pcmk__str_eq(name, T_STONITH_NOTIFY_HISTORY_SYNCED, pcmk__str_casei)) {
	return st_callback_notify_history_synced;

	}
	return st_callback_unknown;
	}

	static void
	stonith_notify_client(gpointer key, gpointer value, gpointer user_data)
	{

	xmlNode *update_msg = user_data;
	pcmk__client_t *client = value;
	const char *type = NULL;

	CRM_CHECK(client != NULL, return);
	CRM_CHECK(update_msg != NULL, return);

	type = crm_element_value(update_msg, F_SUBTYPE);
	CRM_CHECK(type != NULL, crm_log_xml_err(update_msg, "notify"); return);

	if (client->ipcs == NULL) {
	crm_trace("Skipping client with NULL channel");
	return;
	}

	if (pcmk_is_set(client->flags, get_stonith_flag(type))) {
	int rc = pcmk__ipc_send_xml(client, 0, update_msg,
	- crm_ipc_server_event\|crm_ipc_server_error);
	+ crm_ipc_server_event);

	if (rc != pcmk_rc_ok) {
	crm_warn("%s notification of client %s failed: %s "
	CRM_XS " id=%.8s rc=%d", type, pcmk__client_name(client),
	pcmk_rc_str(rc), client->id, rc);
	} else {
	crm_trace("Sent %s notification to client %s",
	type, pcmk__client_name(client));
	}
	}
	}

	void
	do_stonith_async_timeout_update(const char client_id, const char call_id, int timeout)
	{
	pcmk__client_t *client = NULL;
	xmlNode *notify_data = NULL;

	if (!timeout \|\| !call_id \|\| !client_id) {
	return;
	}

	client = pcmk__find_client_by_id(client_id);
	if (!client) {
	return;
	}

	notify_data = create_xml_node(NULL, T_STONITH_TIMEOUT_VALUE);
	crm_xml_add(notify_data, F_TYPE, T_STONITH_TIMEOUT_VALUE);
	crm_xml_add(notify_data, F_STONITH_CALLID, call_id);
	crm_xml_add_int(notify_data, F_STONITH_TIMEOUT, timeout);

	crm_trace("timeout update is %d for client %s and call id %s", timeout, client_id, call_id);

	if (client) {
	pcmk__ipc_send_xml(client, 0, notify_data, crm_ipc_server_event);
	}

	free_xml(notify_data);
	}

	/*!
	* \internal
	* \brief Notify relevant IPC clients of a fencing operation result
	*
	* \param[in] type Notification type
	* \param[in] result Result of fencing operation (assume success if NULL)
	* \param[in] data If not NULL, add to notification as call data
	*/
	void
	fenced_send_notification(const char type, const pcmk__action_result_t result,
	xmlNode *data)
	{
	/* TODO: Standardize the contents of data */
	xmlNode *update_msg = create_xml_node(NULL, "notify");

	CRM_LOG_ASSERT(type != NULL);

	crm_xml_add(update_msg, F_TYPE, T_STONITH_NOTIFY);
	crm_xml_add(update_msg, F_SUBTYPE, type);
	crm_xml_add(update_msg, F_STONITH_OPERATION, type);
	stonith__xe_set_result(update_msg, result);

	if (data != NULL) {
	add_message_xml(update_msg, F_STONITH_CALLDATA, data);
	}

	crm_trace("Notifying clients");
	pcmk__foreach_ipc_client(stonith_notify_client, update_msg);
	free_xml(update_msg);
	crm_trace("Notify complete");
	}

	/*!
	* \internal
	* \brief Send notifications for a configuration change to subscribed clients
	*
	* \param[in] op Notification type (STONITH_OP_DEVICE_ADD,
	* STONITH_OP_DEVICE_DEL, STONITH_OP_LEVEL_ADD, or
	* STONITH_OP_LEVEL_DEL)
	* \param[in] result Operation result
	* \param[in] desc Description of what changed
	* \param[in] active Current number of devices or topologies in use
	*/
	static void
	send_config_notification(const char op, const pcmk__action_result_t result,
	const char *desc, int active)
	{
	xmlNode *notify_data = create_xml_node(NULL, op);

	CRM_CHECK(notify_data != NULL, return);

	crm_xml_add(notify_data, F_STONITH_DEVICE, desc);
	crm_xml_add_int(notify_data, F_STONITH_ACTIVE, active);

	fenced_send_notification(op, result, notify_data);
	free_xml(notify_data);
	}

	/*!
	* \internal
	* \brief Send notifications for a device change to subscribed clients
	*
	* \param[in] op Notification type (STONITH_OP_DEVICE_ADD or
	* STONITH_OP_DEVICE_DEL)
	* \param[in] result Operation result
	* \param[in] desc ID of device that changed
	*/
	void
	fenced_send_device_notification(const char *op,
	const pcmk__action_result_t *result,
	const char *desc)
	{
	send_config_notification(op, result, desc, g_hash_table_size(device_list));
	}

	/*!
	* \internal
	* \brief Send notifications for a topology level change to subscribed clients
	*
	* \param[in] op Notification type (STONITH_OP_LEVEL_ADD or
	* STONITH_OP_LEVEL_DEL)
	* \param[in] result Operation result
	* \param[in] desc String representation of level (<target>[<level_index>])
	*/
	void
	fenced_send_level_notification(const char *op,
	const pcmk__action_result_t *result,
	const char *desc)
	{
	send_config_notification(op, result, desc, g_hash_table_size(topology));
	}

	static void
	topology_remove_helper(const char *node, int level)
	{
	char *desc = NULL;
	pcmk__action_result_t result = PCMK__UNKNOWN_RESULT;
	xmlNode *data = create_xml_node(NULL, XML_TAG_FENCING_LEVEL);

	crm_xml_add(data, F_STONITH_ORIGIN, __func__);
	crm_xml_add_int(data, XML_ATTR_STONITH_INDEX, level);
	crm_xml_add(data, XML_ATTR_STONITH_TARGET, node);

	fenced_unregister_level(data, &desc, &result);
	fenced_send_level_notification(STONITH_OP_LEVEL_DEL, &result, desc);
	pcmk__reset_result(&result);
	free_xml(data);
	free(desc);
	}

	static void
	remove_cib_device(xmlXPathObjectPtr xpathObj)
	{
	int max = numXpathResults(xpathObj), lpc = 0;

	for (lpc = 0; lpc < max; lpc++) {
	const char *rsc_id = NULL;
	const char *standard = NULL;
	xmlNode *match = getXpathResult(xpathObj, lpc);

	CRM_LOG_ASSERT(match != NULL);
	if(match != NULL) {
	standard = crm_element_value(match, XML_AGENT_ATTR_CLASS);
	}

	if (!pcmk__str_eq(standard, PCMK_RESOURCE_CLASS_STONITH, pcmk__str_casei)) {
	continue;
	}

	rsc_id = crm_element_value(match, XML_ATTR_ID);

	stonith_device_remove(rsc_id, true);
	}
	}

	static void
	remove_topology_level(xmlNode *match)
	{
	int index = 0;
	char *key = NULL;

	CRM_CHECK(match != NULL, return);

	key = stonith_level_key(match, fenced_target_by_unknown);
	crm_element_value_int(match, XML_ATTR_STONITH_INDEX, &index);
	topology_remove_helper(key, index);
	free(key);
	}

	static void
	add_topology_level(xmlNode *match)
	{
	char *desc = NULL;
	pcmk__action_result_t result = PCMK__UNKNOWN_RESULT;

	CRM_CHECK(match != NULL, return);

	fenced_register_level(match, &desc, &result);
	fenced_send_level_notification(STONITH_OP_LEVEL_ADD, &result, desc);
	pcmk__reset_result(&result);
	free(desc);
	}

	static void
	remove_fencing_topology(xmlXPathObjectPtr xpathObj)
	{
	int max = numXpathResults(xpathObj), lpc = 0;

	for (lpc = 0; lpc < max; lpc++) {
	xmlNode *match = getXpathResult(xpathObj, lpc);

	CRM_LOG_ASSERT(match != NULL);
	if (match && crm_element_value(match, XML_DIFF_MARKER)) {
	/* Deletion */
	int index = 0;
	char *target = stonith_level_key(match, fenced_target_by_unknown);

	crm_element_value_int(match, XML_ATTR_STONITH_INDEX, &index);
	if (target == NULL) {
	crm_err("Invalid fencing target in element %s", ID(match));

	} else if (index <= 0) {
	crm_err("Invalid level for %s in element %s", target, ID(match));

	} else {
	topology_remove_helper(target, index);
	}
	/* } else { Deal with modifications during the 'addition' stage */
	}
	}
	}

	static void
	register_fencing_topology(xmlXPathObjectPtr xpathObj)
	{
	int max = numXpathResults(xpathObj), lpc = 0;

	for (lpc = 0; lpc < max; lpc++) {
	xmlNode *match = getXpathResult(xpathObj, lpc);

	remove_topology_level(match);
	add_topology_level(match);
	}
	}

	/* Fencing
	<diff crm_feature_set="3.0.6">
	<diff-removed>
	<fencing-topology>
	<fencing-level id="f-p1.1" target="pcmk-1" index="1" devices="poison-pill" __crm_diff_marker__="removed:top"/>
	<fencing-level id="f-p1.2" target="pcmk-1" index="2" devices="power" __crm_diff_marker__="removed:top"/>
	<fencing-level devices="disk,network" id="f-p2.1"/>
	</fencing-topology>
	</diff-removed>
	<diff-added>
	<fencing-topology>
	<fencing-level id="f-p.1" target="pcmk-1" index="1" devices="poison-pill" __crm_diff_marker__="added:top"/>
	<fencing-level id="f-p2.1" target="pcmk-2" index="1" devices="disk,something"/>
	<fencing-level id="f-p3.1" target="pcmk-2" index="2" devices="power" __crm_diff_marker__="added:top"/>
	</fencing-topology>
	</diff-added>
	</diff>
	*/

	static void
	fencing_topology_init(void)
	{
	xmlXPathObjectPtr xpathObj = NULL;
	const char *xpath = "//" XML_TAG_FENCING_LEVEL;

	crm_trace("Full topology refresh");
	free_topology_list();
	init_topology_list();

	/* Grab everything */
	xpathObj = xpath_search(local_cib, xpath);
	register_fencing_topology(xpathObj);

	freeXpathObject(xpathObj);
	}

	#define rsc_name(x) x->clone_name?x->clone_name:x->id

	/*!
	* \internal
	* \brief Check whether our uname is in a resource's allowed node list
	*
	* \param[in] rsc Resource to check
	*
	* \return Pointer to node object if found, NULL otherwise
	*/
	static pe_node_t *
	our_node_allowed_for(pe_resource_t *rsc)
	{
	GHashTableIter iter;
	pe_node_t *node = NULL;

	if (rsc && stonith_our_uname) {
	g_hash_table_iter_init(&iter, rsc->allowed_nodes);
	while (g_hash_table_iter_next(&iter, NULL, (void **)&node)) {
	if (node && strcmp(node->details->uname, stonith_our_uname) == 0) {
	break;
	}
	node = NULL;
	}
	}
	return node;
	}

	static void
	watchdog_device_update(void)
	{
	if (stonith_watchdog_timeout_ms > 0) {
	if (!g_hash_table_lookup(device_list, STONITH_WATCHDOG_ID) &&
	!stonith_watchdog_targets) {
	/* getting here watchdog-fencing enabled, no device there yet
	and reason isn't stonith_watchdog_targets preventing that
	*/
	int rc;
	xmlNode *xml;

	xml = create_device_registration_xml(
	STONITH_WATCHDOG_ID,
	st_namespace_internal,
	STONITH_WATCHDOG_AGENT,
	NULL, /* stonith_device_register will add our
	own name as PCMK_STONITH_HOST_LIST param
	so we can skip that here
	*/
	NULL);
	rc = stonith_device_register(xml, TRUE);
	free_xml(xml);
	if (rc != pcmk_ok) {
	crm_crit("Cannot register watchdog pseudo fence agent");
	crm_exit(CRM_EX_FATAL);
	}
	}

	} else {
	/* be silent if no device - todo parameter to stonith_device_remove */
	if (g_hash_table_lookup(device_list, STONITH_WATCHDOG_ID)) {
	stonith_device_remove(STONITH_WATCHDOG_ID, true);
	}
	}
	}

	static void
	update_stonith_watchdog_timeout_ms(xmlNode *cib)
	{
	long timeout_ms = 0;
	xmlNode *stonith_watchdog_xml = NULL;
	const char *value = NULL;

	stonith_watchdog_xml = get_xpath_object("//nvpair[@name='stonith-watchdog-timeout']",
	cib, LOG_NEVER);
	if (stonith_watchdog_xml) {
	value = crm_element_value(stonith_watchdog_xml, XML_NVPAIR_ATTR_VALUE);
	}
	if (value) {
	timeout_ms = crm_get_msec(value);
	}

	if (timeout_ms < 0) {
	timeout_ms = pcmk__auto_watchdog_timeout();
	}

	stonith_watchdog_timeout_ms = timeout_ms;
	}

	/*!
	* \internal
	* \brief If a resource or any of its children are STONITH devices, update their
	* definitions given a cluster working set.
	*
	* \param[in] rsc Resource to check
	* \param[in] data_set Cluster working set with device information
	*/
	static void cib_device_update(pe_resource_t rsc, pe_working_set_t data_set)
	{
	pe_node_t *node = NULL;
	const char *value = NULL;
	const char *rclass = NULL;
	pe_node_t *parent = NULL;

	/* If this is a complex resource, check children rather than this resource itself. */
	if(rsc->children) {
	GList *gIter = NULL;
	for (gIter = rsc->children; gIter != NULL; gIter = gIter->next) {
	cib_device_update(gIter->data, data_set);
	if(pe_rsc_is_clone(rsc)) {
	crm_trace("Only processing one copy of the clone %s", rsc->id);
	break;
	}
	}
	return;
	}

	/* We only care about STONITH resources. */
	rclass = crm_element_value(rsc->xml, XML_AGENT_ATTR_CLASS);
	if (!pcmk__str_eq(rclass, PCMK_RESOURCE_CLASS_STONITH, pcmk__str_casei)) {
	return;
	}

	/* If this STONITH resource is disabled, remove it. */
	if (pe__resource_is_disabled(rsc)) {
	crm_info("Device %s has been disabled", rsc->id);
	return;
	}

	/* if watchdog-fencing is disabled handle any watchdog-fence
	resource as if it was disabled
	*/
	if ((stonith_watchdog_timeout_ms <= 0) &&
	pcmk__str_eq(rsc->id, STONITH_WATCHDOG_ID, pcmk__str_none)) {
	crm_info("Watchdog-fencing disabled thus handling "
	"device %s as disabled", rsc->id);
	return;
	}

	/* Check whether our node is allowed for this resource (and its parent if in a group) */
	node = our_node_allowed_for(rsc);
	if (rsc->parent && (rsc->parent->variant == pe_group)) {
	parent = our_node_allowed_for(rsc->parent);
	}

	if(node == NULL) {
	/* Our node is disallowed, so remove the device */
	GHashTableIter iter;

	crm_info("Device %s has been disabled on %s: unknown", rsc->id, stonith_our_uname);
	g_hash_table_iter_init(&iter, rsc->allowed_nodes);
	while (g_hash_table_iter_next(&iter, NULL, (void **)&node)) {
	crm_trace("Available: %s = %d", node->details->uname, node->weight);
	}

	return;

	} else if(node->weight < 0 \|\| (parent && parent->weight < 0)) {
	/* Our node (or its group) is disallowed by score, so remove the device */
	char *score = score2char((node->weight < 0) ? node->weight : parent->weight);

	crm_info("Device %s has been disabled on %s: score=%s", rsc->id, stonith_our_uname, score);
	free(score);

	return;

	} else {
	/* Our node is allowed, so update the device information */
	int rc;
	xmlNode *data;
	GHashTable *rsc_params = NULL;
	GHashTableIter gIter;
	stonith_key_value_t *params = NULL;

	const char *name = NULL;
	const char *agent = crm_element_value(rsc->xml, XML_EXPR_ATTR_TYPE);
	const char *rsc_provides = NULL;

	crm_debug("Device %s is allowed on %s: score=%d", rsc->id, stonith_our_uname, node->weight);
	rsc_params = pe_rsc_params(rsc, node, data_set);
	get_meta_attributes(rsc->meta, rsc, node, data_set);

	rsc_provides = g_hash_table_lookup(rsc->meta, PCMK_STONITH_PROVIDES);

	g_hash_table_iter_init(&gIter, rsc_params);
	while (g_hash_table_iter_next(&gIter, (gpointer ) & name, (gpointer ) & value)) {
	if (!name \|\| !value) {
	continue;
	}
	params = stonith_key_value_add(params, name, value);
	crm_trace(" %s=%s", name, value);
	}

	data = create_device_registration_xml(rsc_name(rsc), st_namespace_any,
	agent, params, rsc_provides);
	stonith_key_value_freeall(params, 1, 1);
	rc = stonith_device_register(data, TRUE);
	CRM_ASSERT(rc == pcmk_ok);
	free_xml(data);
	}
	}

	/*!
	* \internal
	* \brief Update all STONITH device definitions based on current CIB
	*/
	static void
	cib_devices_update(void)
	{
	GHashTableIter iter;
	stonith_device_t *device = NULL;

	crm_info("Updating devices to version %s.%s.%s",
	crm_element_value(local_cib, XML_ATTR_GENERATION_ADMIN),
	crm_element_value(local_cib, XML_ATTR_GENERATION),
	crm_element_value(local_cib, XML_ATTR_NUMUPDATES));

	if (fenced_data_set->now != NULL) {
	crm_time_free(fenced_data_set->now);
	fenced_data_set->now = NULL;
	}
	fenced_data_set->localhost = stonith_our_uname;
	pcmk__schedule_actions(local_cib, data_set_flags, fenced_data_set);

	g_hash_table_iter_init(&iter, device_list);
	while (g_hash_table_iter_next(&iter, NULL, (void **)&device)) {
	if (device->cib_registered) {
	device->dirty = TRUE;
	}
	}

	/* have list repopulated if cib has a watchdog-fencing-resource
	TODO: keep a cached list for queries happening while we are refreshing
	*/
	g_list_free_full(stonith_watchdog_targets, free);
	stonith_watchdog_targets = NULL;
	g_list_foreach(fenced_data_set->resources, (GFunc) cib_device_update, fenced_data_set);

	g_hash_table_iter_init(&iter, device_list);
	while (g_hash_table_iter_next(&iter, NULL, (void **)&device)) {
	if (device->dirty) {
	g_hash_table_iter_remove(&iter);
	}
	}

	fenced_data_set->input = NULL; // Wasn't a copy, so don't let API free it
	pe_reset_working_set(fenced_data_set);
	}

	static void
	update_cib_stonith_devices_v2(const char event, xmlNode msg)
	{
	xmlNode *change = NULL;
	char *reason = NULL;
	bool needs_update = FALSE;
	xmlNode *patchset = get_message_xml(msg, F_CIB_UPDATE_RESULT);

	for (change = pcmk__xml_first_child(patchset); change != NULL;
	change = pcmk__xml_next(change)) {
	const char *op = crm_element_value(change, XML_DIFF_OP);
	const char *xpath = crm_element_value(change, XML_DIFF_PATH);
	const char *shortpath = NULL;

	if ((op == NULL) \|\|
	(strcmp(op, "move") == 0) \|\|
	strstr(xpath, "/"XML_CIB_TAG_STATUS)) {
	continue;
	} else if (pcmk__str_eq(op, "delete", pcmk__str_casei) && strstr(xpath, "/"XML_CIB_TAG_RESOURCE)) {
	const char *rsc_id = NULL;
	char *search = NULL;
	char *mutable = NULL;

	if (strstr(xpath, XML_TAG_ATTR_SETS) \|\|
	strstr(xpath, XML_TAG_META_SETS)) {
	needs_update = TRUE;
	reason = strdup("(meta) attribute deleted from resource");
	break;
	}
	mutable = strdup(xpath);
	rsc_id = strstr(mutable, "primitive[@id=\'");
	if (rsc_id != NULL) {
	rsc_id += strlen("primitive[@id=\'");
	search = strchr(rsc_id, '\'');
	}
	if (search != NULL) {
	*search = 0;
	stonith_device_remove(rsc_id, true);
	/* watchdog_device_update called afterwards
	to fall back to implicit definition if needed */
	} else {
	crm_warn("Ignoring malformed CIB update (resource deletion)");
	}
	free(mutable);

	} else if (strstr(xpath, "/"XML_CIB_TAG_RESOURCES) \|\|
	strstr(xpath, "/"XML_CIB_TAG_CONSTRAINTS) \|\|
	strstr(xpath, "/"XML_CIB_TAG_RSCCONFIG)) {
	shortpath = strrchr(xpath, '/'); CRM_ASSERT(shortpath);
	reason = crm_strdup_printf("%s %s", op, shortpath+1);
	needs_update = TRUE;
	break;
	}
	}

	if(needs_update) {
	crm_info("Updating device list from CIB: %s", reason);
	cib_devices_update();
	} else {
	crm_trace("No updates for device list found in CIB");
	}
	free(reason);
	}


	static void
	update_cib_stonith_devices_v1(const char event, xmlNode msg)
	{
	const char *reason = "none";
	gboolean needs_update = FALSE;
	xmlXPathObjectPtr xpath_obj = NULL;

	/* process new constraints */
	xpath_obj = xpath_search(msg, "//" F_CIB_UPDATE_RESULT "//" XML_CONS_TAG_RSC_LOCATION);
	if (numXpathResults(xpath_obj) > 0) {
	int max = numXpathResults(xpath_obj), lpc = 0;

	/* Safest and simplest to always recompute */
	needs_update = TRUE;
	reason = "new location constraint";

	for (lpc = 0; lpc < max; lpc++) {
	xmlNode *match = getXpathResult(xpath_obj, lpc);

	crm_log_xml_trace(match, "new constraint");
	}
	}
	freeXpathObject(xpath_obj);

	/* process deletions */
	xpath_obj = xpath_search(msg, "//" F_CIB_UPDATE_RESULT "//" XML_TAG_DIFF_REMOVED "//" XML_CIB_TAG_RESOURCE);
	if (numXpathResults(xpath_obj) > 0) {
	remove_cib_device(xpath_obj);
	}
	freeXpathObject(xpath_obj);

	/* process additions */
	xpath_obj = xpath_search(msg, "//" F_CIB_UPDATE_RESULT "//" XML_TAG_DIFF_ADDED "//" XML_CIB_TAG_RESOURCE);
	if (numXpathResults(xpath_obj) > 0) {
	int max = numXpathResults(xpath_obj), lpc = 0;

	for (lpc = 0; lpc < max; lpc++) {
	const char *rsc_id = NULL;
	const char *standard = NULL;
	xmlNode *match = getXpathResult(xpath_obj, lpc);

	rsc_id = crm_element_value(match, XML_ATTR_ID);
	standard = crm_element_value(match, XML_AGENT_ATTR_CLASS);

	if (!pcmk__str_eq(standard, PCMK_RESOURCE_CLASS_STONITH, pcmk__str_casei)) {
	continue;
	}

	crm_trace("Fencing resource %s was added or modified", rsc_id);
	reason = "new resource";
	needs_update = TRUE;
	}
	}
	freeXpathObject(xpath_obj);

	if(needs_update) {
	crm_info("Updating device list from CIB: %s", reason);
	cib_devices_update();
	}
	}

	static void
	update_cib_stonith_devices(const char event, xmlNode msg)
	{
	int format = 1;
	xmlNode *patchset = get_message_xml(msg, F_CIB_UPDATE_RESULT);

	CRM_ASSERT(patchset);
	crm_element_value_int(patchset, "format", &format);
	switch(format) {
	case 1:
	update_cib_stonith_devices_v1(event, msg);
	break;
	case 2:
	update_cib_stonith_devices_v2(event, msg);
	break;
	default:
	crm_warn("Unknown patch format: %d", format);
	}
	}

	/* Needs to hold node name + attribute name + attribute value + 75 */
	#define XPATH_MAX 512

	/*!
	* \internal
	* \brief Check whether a node has a specific attribute name/value
	*
	* \param[in] node Name of node to check
	* \param[in] name Name of an attribute to look for
	* \param[in] value The value the named attribute needs to be set to in order to be considered a match
	*
	* \return TRUE if the locally cached CIB has the specified node attribute
	*/
	gboolean
	node_has_attr(const char node, const char name, const char *value)
	{
	char xpath[XPATH_MAX];
	xmlNode *match;
	int n;

	CRM_CHECK(local_cib != NULL, return FALSE);

	/* Search for the node's attributes in the CIB. While the schema allows
	* multiple sets of instance attributes, and allows instance attributes to
	* use id-ref to reference values elsewhere, that is intended for resources,
	* so we ignore that here.
	*/
	n = snprintf(xpath, XPATH_MAX, "//" XML_CIB_TAG_NODES
	"/" XML_CIB_TAG_NODE "[@uname='%s']/" XML_TAG_ATTR_SETS
	"/" XML_CIB_TAG_NVPAIR "[@name='%s' and @value='%s']",
	node, name, value);
	match = get_xpath_object(xpath, local_cib, LOG_NEVER);

	CRM_CHECK(n < XPATH_MAX, return FALSE);
	return (match != NULL);
	}

	/*!
	* \internal
	* \brief Check whether a node does watchdog-fencing
	*
	* \param[in] node Name of node to check
	*
	* \return TRUE if node found in stonith_watchdog_targets
	* or stonith_watchdog_targets is empty indicating
	* all nodes are doing watchdog-fencing
	*/
	gboolean
	node_does_watchdog_fencing(const char *node)
	{
	return ((stonith_watchdog_targets == NULL) \|\|
	pcmk__str_in_list(node, stonith_watchdog_targets, pcmk__str_casei));
	}


	static void
	update_fencing_topology(const char event, xmlNode msg)
	{
	int format = 1;
	const char *xpath;
	xmlXPathObjectPtr xpathObj = NULL;
	xmlNode *patchset = get_message_xml(msg, F_CIB_UPDATE_RESULT);

	CRM_ASSERT(patchset);
	crm_element_value_int(patchset, "format", &format);

	if(format == 1) {
	/* Process deletions (only) */
	xpath = "//" F_CIB_UPDATE_RESULT "//" XML_TAG_DIFF_REMOVED "//" XML_TAG_FENCING_LEVEL;
	xpathObj = xpath_search(msg, xpath);

	remove_fencing_topology(xpathObj);
	freeXpathObject(xpathObj);

	/* Process additions and changes */
	xpath = "//" F_CIB_UPDATE_RESULT "//" XML_TAG_DIFF_ADDED "//" XML_TAG_FENCING_LEVEL;
	xpathObj = xpath_search(msg, xpath);

	register_fencing_topology(xpathObj);
	freeXpathObject(xpathObj);

	} else if(format == 2) {
	xmlNode *change = NULL;
	int add[] = { 0, 0, 0 };
	int del[] = { 0, 0, 0 };

	xml_patch_versions(patchset, add, del);

	for (change = pcmk__xml_first_child(patchset); change != NULL;
	change = pcmk__xml_next(change)) {
	const char *op = crm_element_value(change, XML_DIFF_OP);
	const char *xpath = crm_element_value(change, XML_DIFF_PATH);

	if(op == NULL) {
	continue;

	} else if(strstr(xpath, "/" XML_TAG_FENCING_LEVEL) != NULL) {
	/* Change to a specific entry */

	crm_trace("Handling %s operation %d.%d.%d for %s", op, add[0], add[1], add[2], xpath);
	if(strcmp(op, "move") == 0) {
	continue;

	} else if(strcmp(op, "create") == 0) {
	add_topology_level(change->children);

	} else if(strcmp(op, "modify") == 0) {
	xmlNode *match = first_named_child(change, XML_DIFF_RESULT);

	if(match) {
	remove_topology_level(match->children);
	add_topology_level(match->children);
	}

	} else if(strcmp(op, "delete") == 0) {
	/* Nuclear option, all we have is the path and an id... not enough to remove a specific entry */
	crm_info("Re-initializing fencing topology after %s operation %d.%d.%d for %s",
	op, add[0], add[1], add[2], xpath);
	fencing_topology_init();
	return;
	}

	} else if (strstr(xpath, "/" XML_TAG_FENCING_TOPOLOGY) != NULL) {
	/* Change to the topology in general */
	crm_info("Re-initializing fencing topology after top-level %s operation %d.%d.%d for %s",
	op, add[0], add[1], add[2], xpath);
	fencing_topology_init();
	return;

	} else if (strstr(xpath, "/" XML_CIB_TAG_CONFIGURATION)) {
	/* Changes to the whole config section, possibly including the topology as a whild */
	if(first_named_child(change, XML_TAG_FENCING_TOPOLOGY) == NULL) {
	crm_trace("Nothing for us in %s operation %d.%d.%d for %s.",
	op, add[0], add[1], add[2], xpath);

	} else if(strcmp(op, "delete") == 0 \|\| strcmp(op, "create") == 0) {
	crm_info("Re-initializing fencing topology after top-level %s operation %d.%d.%d for %s.",
	op, add[0], add[1], add[2], xpath);
	fencing_topology_init();
	return;
	}

	} else {
	crm_trace("Nothing for us in %s operation %d.%d.%d for %s",
	op, add[0], add[1], add[2], xpath);
	}
	}

	} else {
	crm_warn("Unknown patch format: %d", format);
	}
	}
	static bool have_cib_devices = FALSE;

	static void
	update_cib_cache_cb(const char event, xmlNode msg)
	{
	int rc = pcmk_ok;
	long timeout_ms_saved = stonith_watchdog_timeout_ms;
	gboolean need_full_refresh = FALSE;

	if(!have_cib_devices) {
	crm_trace("Skipping updates until we get a full dump");
	return;

	} else if(msg == NULL) {
	crm_trace("Missing %s update", event);
	return;
	}

	/* Maintain a local copy of the CIB so that we have full access
	* to device definitions, location constraints, and node attributes
	*/
	if (local_cib != NULL) {
	int rc = pcmk_ok;
	xmlNode *patchset = NULL;

	crm_element_value_int(msg, F_CIB_RC, &rc);
	if (rc != pcmk_ok) {
	return;
	}

	patchset = get_message_xml(msg, F_CIB_UPDATE_RESULT);
	xml_log_patchset(LOG_TRACE, "Config update", patchset);
	rc = xml_apply_patchset(local_cib, patchset, TRUE);
	switch (rc) {
	case pcmk_ok:
	case -pcmk_err_old_data:
	break;
	case -pcmk_err_diff_resync:
	case -pcmk_err_diff_failed:
	crm_notice("[%s] Patch aborted: %s (%d)", event, pcmk_strerror(rc), rc);
	free_xml(local_cib);
	local_cib = NULL;
	break;
	default:
	crm_warn("[%s] ABORTED: %s (%d)", event, pcmk_strerror(rc), rc);
	free_xml(local_cib);
	local_cib = NULL;
	}
	}

	if (local_cib == NULL) {
	crm_trace("Re-requesting full CIB");
	rc = cib_api->cmds->query(cib_api, NULL, &local_cib, cib_scope_local \| cib_sync_call);
	if(rc != pcmk_ok) {
	crm_err("Couldn't retrieve the CIB: %s (%d)", pcmk_strerror(rc), rc);
	return;
	}
	CRM_ASSERT(local_cib != NULL);
	need_full_refresh = TRUE;
	}

	pcmk__refresh_node_caches_from_cib(local_cib);
	update_stonith_watchdog_timeout_ms(local_cib);

	if (timeout_ms_saved != stonith_watchdog_timeout_ms) {
	need_full_refresh = TRUE;
	} else {
	update_fencing_topology(event, msg);
	update_cib_stonith_devices(event, msg);
	watchdog_device_update();
	}

	if (need_full_refresh) {
	fencing_topology_init();
	cib_devices_update();
	watchdog_device_update();
	}
	}

	static void
	init_cib_cache_cb(xmlNode * msg, int call_id, int rc, xmlNode * output, void *user_data)
	{
	crm_info("Updating device list from CIB");
	have_cib_devices = TRUE;
	local_cib = copy_xml(output);

	pcmk__refresh_node_caches_from_cib(local_cib);
	update_stonith_watchdog_timeout_ms(local_cib);

	fencing_topology_init();
	cib_devices_update();
	watchdog_device_update();
	}

	static void
	stonith_shutdown(int nsig)
	{
	crm_info("Terminating with %d clients", pcmk__ipc_client_count());
	stonith_shutdown_flag = TRUE;
	if (mainloop != NULL && g_main_loop_is_running(mainloop)) {
	g_main_loop_quit(mainloop);
	} else {
	stonith_cleanup();
	crm_exit(CRM_EX_OK);
	}
	}

	static void
	cib_connection_destroy(gpointer user_data)
	{
	if (stonith_shutdown_flag) {
	crm_info("Connection to the CIB manager closed");
	return;
	} else {
	crm_crit("Lost connection to the CIB manager, shutting down");
	}
	if (cib_api) {
	cib_api->cmds->signoff(cib_api);
	}
	stonith_shutdown(0);
	}

	static void
	stonith_cleanup(void)
	{
	if (cib_api) {
	cib_api->cmds->del_notify_callback(cib_api, T_CIB_DIFF_NOTIFY, update_cib_cache_cb);
	cib_api->cmds->signoff(cib_api);
	}

	if (ipcs) {
	qb_ipcs_destroy(ipcs);
	}

	crm_peer_destroy();
	pcmk__client_cleanup();
	free_stonith_remote_op_list();
	free_topology_list();
	free_device_list();
	free_metadata_cache();
	fenced_unregister_handlers();

	free(stonith_our_uname);
	stonith_our_uname = NULL;

	free_xml(local_cib);
	local_cib = NULL;
	}

	static pcmk__cli_option_t long_options[] = {
	// long option, argument type, storage, short option, description, flags
	{
	"stand-alone", no_argument, 0, 's',
	"\tDeprecated (will be removed in a future release)",
	pcmk__option_default
	},
	{
	"stand-alone-w-cpg", no_argument, 0, 'c',
	"\tIntended for use in regression testing only",
	pcmk__option_default
	},
	{
	"logfile", required_argument, 0, 'l',
	NULL, pcmk__option_default
	},
	{
	"verbose", no_argument, 0, 'V',
	NULL, pcmk__option_default
	},
	{
	"version", no_argument, 0, '$',
	NULL, pcmk__option_default
	},
	{
	"help", no_argument, 0, '?',
	NULL, pcmk__option_default
	},
	{ 0, 0, 0, 0 }
	};

	static void
	setup_cib(void)
	{
	int rc, retries = 0;

	cib_api = cib_new();
	if (cib_api == NULL) {
	crm_err("No connection to the CIB manager");
	return;
	}

	do {
	sleep(retries);
	rc = cib_api->cmds->signon(cib_api, CRM_SYSTEM_STONITHD, cib_command);
	} while (rc == -ENOTCONN && ++retries < 5);

	if (rc != pcmk_ok) {
	crm_err("Could not connect to the CIB manager: %s (%d)", pcmk_strerror(rc), rc);

	} else if (pcmk_ok !=
	cib_api->cmds->add_notify_callback(cib_api, T_CIB_DIFF_NOTIFY, update_cib_cache_cb)) {
	crm_err("Could not set CIB notification callback");

	} else {
	rc = cib_api->cmds->query(cib_api, NULL, NULL, cib_scope_local);
	cib_api->cmds->register_callback(cib_api, rc, 120, FALSE, NULL, "init_cib_cache_cb",
	init_cib_cache_cb);
	cib_api->cmds->set_connection_dnotify(cib_api, cib_connection_destroy);
	crm_info("Watching for fencing topology changes");
	}
	}

	struct qb_ipcs_service_handlers ipc_callbacks = {
	.connection_accept = st_ipc_accept,
	.connection_created = NULL,
	.msg_process = st_ipc_dispatch,
	.connection_closed = st_ipc_closed,
	.connection_destroyed = st_ipc_destroy
	};

	/*!
	* \internal
	* \brief Callback for peer status changes
	*
	* \param[in] type What changed
	* \param[in] node What peer had the change
	* \param[in] data Previous value of what changed
	*/
	static void
	st_peer_update_callback(enum crm_status_type type, crm_node_t * node, const void *data)
	{
	if ((type != crm_status_processes)
	&& !pcmk_is_set(node->flags, crm_remote_node)) {
	/*
	* This is a hack until we can send to a nodeid and/or we fix node name lookups
	* These messages are ignored in stonith_peer_callback()
	*/
	xmlNode *query = create_xml_node(NULL, "stonith_command");

	crm_xml_add(query, F_XML_TAGNAME, "stonith_command");
	crm_xml_add(query, F_TYPE, T_STONITH_NG);
	crm_xml_add(query, F_STONITH_OPERATION, "poke");

	crm_debug("Broadcasting our uname because of node %u", node->id);
	send_cluster_message(NULL, crm_msg_stonith_ng, query, FALSE);

	free_xml(query);
	}
	}

	int
	main(int argc, char **argv)
	{
	int flag;
	int lpc = 0;
	int argerr = 0;
	int option_index = 0;
	crm_cluster_t *cluster = NULL;
	const char *actions[] = { "reboot", "off", "on", "list", "monitor", "status" };
	crm_ipc_t *old_instance = NULL;
	int rc = pcmk_rc_ok;

	crm_log_preinit(NULL, argc, argv);
	pcmk__set_cli_options(NULL, "[options]", long_options,
	"daemon for executing fencing devices in a "
	"Pacemaker cluster");

	while (1) {
	flag = pcmk__next_cli_option(argc, argv, &option_index, NULL);
	if (flag == -1) {
	break;
	}

	switch (flag) {
	case 'V':
	crm_bump_log_level(argc, argv);
	break;
	case 'l':
	{
	int rc = pcmk__add_logfile(optarg);

	if (rc != pcmk_rc_ok) {
	/* Logging has not yet been initialized, so stderr is
	* the only way to get information out
	*/
	fprintf(stderr, "Logging to %s is disabled: %s\n",
	optarg, pcmk_rc_str(rc));
	}
	}
	break;
	case 's':
	stand_alone = TRUE;
	break;
	case 'c':
	stand_alone = FALSE;
	no_cib_connect = TRUE;
	break;
	case '$':
	case '?':
	pcmk__cli_help(flag, CRM_EX_OK);
	break;
	default:
	++argerr;
	break;
	}
	}

	if (argc - optind == 1 && pcmk__str_eq("metadata", argv[optind], pcmk__str_casei)) {
	printf("<?xml version=\"1.0\"?><!DOCTYPE resource-agent SYSTEM \"ra-api-1.dtd\">\n");
	printf("<resource-agent name=\"pacemaker-fenced\">\n");
	printf(" <version>1.0</version>\n");
	printf(" <longdesc lang=\"en\">Instance attributes available for all \"stonith\"-class resources"
	" and used by Pacemaker's fence daemon, formerly known as stonithd</longdesc>\n");
	#ifdef ENABLE_NLS
	printf(_(" <longdesc lang=\"en\">Instance attributes available for all \"stonith\"-class resources"
	" and used by Pacemaker's fence daemon, formerly known as stonithd</longdesc>\n"));
	#endif
	printf(" <shortdesc lang=\"en\">Instance attributes available for all \"stonith\"-class resources</shortdesc>\n");
	#ifdef ENABLE_NLS
	printf(_(" <shortdesc lang=\"en\">Instance attributes available for all \"stonith\"-class resources</shortdesc>\n"));
	#endif
	printf(" <parameters>\n");

	#if 0
	// priority is not implemented yet
	printf(" <parameter name=\"priority\" unique=\"0\">\n");
	printf(" <shortdesc lang=\"en\">Devices that are not in a topology "
	"are tried in order of highest to lowest integer priority</shortdesc>\n");
	printf(" <content type=\"integer\" default=\"0\"/>\n");
	printf(" </parameter>\n");
	#endif

	printf(" <parameter name=\"%s\" unique=\"0\">\n",
	PCMK_STONITH_HOST_ARGUMENT);
	printf(" <longdesc lang=\"en\">Some devices do not support the "
	"standard 'port' parameter or may provide additional ones. Use "
	"this to specify an alternate, device-specific, parameter "
	"that should indicate the machine to be fenced. A value of "
	"'%s' can be used to tell the cluster not to supply any "
	"additional parameters.\n"
	" </longdesc>\n", PCMK__VALUE_NONE);
	#ifdef ENABLE_NLS
	printf(_(" <longdesc lang=\"en\">Some devices do not support the "
	"standard 'port' parameter or may provide additional ones. Use "
	"this to specify an alternate, device-specific, parameter "
	"that should indicate the machine to be fenced. A value of "
	"'%s' can be used to tell the cluster not to supply any "
	"additional parameters.\n"
	" </longdesc>\n"), PCMK__VALUE_NONE);
	#endif
	printf
	(" <shortdesc lang=\"en\">Advanced use only: An alternate parameter to supply instead of 'port'</shortdesc>\n");
	#ifdef ENABLE_NLS
	printf
	(_(" <shortdesc lang=\"en\">Advanced use only: An alternate parameter to supply instead of 'port'</shortdesc>\n"));
	#endif
	printf(" <content type=\"string\" default=\"port\"/>\n");
	printf(" </parameter>\n");

	printf(" <parameter name=\"%s\" unique=\"0\">\n",
	PCMK_STONITH_HOST_MAP);
	printf
	(" <longdesc lang=\"en\">Eg. node1:1;node2:2,3 would tell the cluster to use port 1 for node1 and ports 2 and 3 for node2</longdesc>\n");
	#ifdef ENABLE_NLS
	printf
	(_(" <longdesc lang=\"en\">Eg. node1:1;node2:2,3 would tell the cluster to use port 1 for node1 and ports 2 and 3 for node2</longdesc>\n"));
	#endif
	printf
	(" <shortdesc lang=\"en\">A mapping of host names to ports numbers for devices that do not support host names.</shortdesc>\n");
	#ifdef ENABLE_NLS
	printf
	(_(" <shortdesc lang=\"en\">A mapping of host names to ports numbers for devices that do not support host names.</shortdesc>\n"));
	#endif
	printf(" <content type=\"string\" default=\"\"/>\n");
	printf(" </parameter>\n");

	printf(" <parameter name=\"%s\" unique=\"0\">\n",
	PCMK_STONITH_HOST_LIST);
	printf(" <longdesc lang=\"en\">Eg. node1,node2,node3</longdesc>\n");
	printf(" <shortdesc lang=\"en\">A list of machines controlled by "
	"this device (Optional unless %s=static-list).</shortdesc>\n",
	PCMK_STONITH_HOST_CHECK);
	printf(" <content type=\"string\" default=\"\"/>\n");
	printf(" </parameter>\n");

	printf(" <parameter name=\"%s\" unique=\"0\">\n",
	PCMK_STONITH_HOST_CHECK);
	printf(" <longdesc lang=\"en\">Allowed values: dynamic-list "
	"(query the device via the 'list' command), static-list "
	"(check the " PCMK_STONITH_HOST_LIST " attribute), status "
	"(query the device via the 'status' command), "
	PCMK__VALUE_NONE " (assume every device can fence every "
	"machine)</longdesc>\n");
	printf
	(" <shortdesc lang=\"en\">How to determine which machines are controlled by the device.</shortdesc>\n");
	printf(" <content type=\"string\" default=\"dynamic-list\"/>\n");
	printf(" </parameter>\n");

	printf(" <parameter name=\"%s\" unique=\"0\">\n",
	PCMK_STONITH_DELAY_MAX);
	printf(" <longdesc lang=\"en\">This prevents double fencing when "
	"using slow devices such as sbd.\nUse this to enable a random "
	"delay for fencing actions.\nThe overall delay is derived from "
	"this random delay value adding a static delay so that the sum "
	"is kept below the maximum delay.</longdesc>\n");
	printf(" <shortdesc lang=\"en\">Enable a delay of no more than the "
	"time specified before executing fencing actions. Pacemaker "
	"derives the overall delay by taking the value of "
	PCMK_STONITH_DELAY_BASE " and adding a random delay value such "
	"that the sum is kept below this maximum.</shortdesc>\n");
	printf(" <content type=\"time\" default=\"0s\"/>\n");
	printf(" </parameter>\n");

	printf(" <parameter name=\"%s\" unique=\"0\">\n",
	PCMK_STONITH_DELAY_BASE);
	printf(" <longdesc lang=\"en\">This enables a static delay for "
	"fencing actions, which can help avoid \"death matches\" where "
	"two nodes try to fence each other at the same time. If "
	PCMK_STONITH_DELAY_MAX " is also used, a random delay will be "
	"added such that the total delay is kept below that value.\n"
	"This can be set to a single time value to apply to any node "
	"targeted by this device (useful if a separate device is "
	"configured for each target), or to a node map (for example, "
	"\"node1:1s;node2:5\") to set a different value per target.\n"
	" </longdesc>\n");
	printf(" <shortdesc lang=\"en\">Enable a base delay for "
	"fencing actions and specify base delay value.</shortdesc>\n");
	printf(" <content type=\"string\" default=\"0s\"/>\n");
	printf(" </parameter>\n");

	printf(" <parameter name=\"%s\" unique=\"0\">\n",
	PCMK_STONITH_ACTION_LIMIT);
	printf
	(" <longdesc lang=\"en\">Cluster property concurrent-fencing=true needs to be configured first.\n"
	"Then use this to specify the maximum number of actions can be performed in parallel on this device. -1 is unlimited.</longdesc>\n");
	printf
	(" <shortdesc lang=\"en\">The maximum number of actions can be performed in parallel on this device</shortdesc>\n");
	printf(" <content type=\"integer\" default=\"1\"/>\n");
	printf(" </parameter>\n");


	for (lpc = 0; lpc < PCMK__NELEM(actions); lpc++) {
	printf(" <parameter name=\"pcmk_%s_action\" unique=\"0\">\n", actions[lpc]);
	printf
	(" <longdesc lang=\"en\">Some devices do not support the standard commands or may provide additional ones.\n"
	"Use this to specify an alternate, device-specific, command that implements the '%s' action.</longdesc>\n",
	actions[lpc]);
	printf
	(" <shortdesc lang=\"en\">Advanced use only: An alternate command to run instead of '%s'</shortdesc>\n",
	actions[lpc]);
	printf(" <content type=\"string\" default=\"%s\"/>\n", actions[lpc]);
	printf(" </parameter>\n");

	printf(" <parameter name=\"pcmk_%s_timeout\" unique=\"0\">\n", actions[lpc]);
	printf
	(" <longdesc lang=\"en\">Some devices need much more/less time to complete than normal.\n"
	"Use this to specify an alternate, device-specific, timeout for '%s' actions.</longdesc>\n",
	actions[lpc]);
	printf
	(" <shortdesc lang=\"en\">Advanced use only: Specify an alternate timeout to use for %s actions instead of stonith-timeout</shortdesc>\n",
	actions[lpc]);
	printf(" <content type=\"time\" default=\"60s\"/>\n");
	printf(" </parameter>\n");

	printf(" <parameter name=\"pcmk_%s_retries\" unique=\"0\">\n", actions[lpc]);
	printf(" <longdesc lang=\"en\">Some devices do not support multiple connections."
	" Operations may 'fail' if the device is busy with another task so Pacemaker will automatically retry the operation, if there is time remaining."
	" Use this option to alter the number of times Pacemaker retries '%s' actions before giving up."
	"</longdesc>\n", actions[lpc]);
	printf
	(" <shortdesc lang=\"en\">Advanced use only: The maximum number of times to retry the '%s' command within the timeout period</shortdesc>\n",
	actions[lpc]);
	printf(" <content type=\"integer\" default=\"2\"/>\n");
	printf(" </parameter>\n");
	}

	printf(" </parameters>\n");
	printf("</resource-agent>\n");
	return CRM_EX_OK;
	}

	if (optind != argc) {
	++argerr;
	}

	if (argerr) {
	pcmk__cli_help('?', CRM_EX_USAGE);
	}

	crm_log_init(NULL, LOG_INFO, TRUE, FALSE, argc, argv, FALSE);

	crm_notice("Starting Pacemaker fencer");

	old_instance = crm_ipc_new("stonith-ng", 0);
	if (crm_ipc_connect(old_instance)) {
	/* IPC end-point already up */
	crm_ipc_close(old_instance);
	crm_ipc_destroy(old_instance);
	crm_err("pacemaker-fenced is already active, aborting startup");
	crm_exit(CRM_EX_OK);
	} else {
	/* not up or not authentic, we'll proceed either way */
	crm_ipc_destroy(old_instance);
	old_instance = NULL;
	}

	mainloop_add_signal(SIGTERM, stonith_shutdown);

	crm_peer_init();

	fenced_data_set = pe_new_working_set();
	CRM_ASSERT(fenced_data_set != NULL);

	cluster = calloc(1, sizeof(crm_cluster_t));
	CRM_ASSERT(cluster != NULL);

	if (stand_alone == FALSE) {

	if (is_corosync_cluster()) {
	#if SUPPORT_COROSYNC
	cluster->destroy = stonith_peer_cs_destroy;
	cluster->cpg.cpg_deliver_fn = stonith_peer_ais_callback;
	cluster->cpg.cpg_confchg_fn = pcmk_cpg_membership;
	#endif
	}

	crm_set_status_callback(&st_peer_update_callback);

	if (crm_cluster_connect(cluster) == FALSE) {
	crm_crit("Cannot sign in to the cluster... terminating");
	crm_exit(CRM_EX_FATAL);
	}
	stonith_our_uname = strdup(cluster->uname);

	if (no_cib_connect == FALSE) {
	setup_cib();
	}

	} else {
	stonith_our_uname = strdup("localhost");
	crm_warn("Stand-alone mode is deprecated and will be removed "
	"in a future release");
	}

	init_device_list();
	init_topology_list();

	pcmk__serve_fenced_ipc(&ipcs, &ipc_callbacks);

	pcmk__register_formats(NULL, formats);
	rc = pcmk__output_new(&out, "log", NULL, argv);
	if ((rc != pcmk_rc_ok) \|\| (out == NULL)) {
	crm_err("Can't log resource details due to internal error: %s\n",
	pcmk_rc_str(rc));
	crm_exit(CRM_EX_FATAL);
	}

	pe__register_messages(out);
	pcmk__register_lib_messages(out);

	pcmk__output_set_log_level(out, LOG_TRACE);
	fenced_data_set->priv = out;

	/* Create the mainloop and run it... */
	mainloop = g_main_loop_new(NULL, FALSE);
	crm_notice("Pacemaker fencer successfully started and accepting connections");
	g_main_loop_run(mainloop);

	stonith_cleanup();
	free(cluster->uuid);
	free(cluster->uname);
	free(cluster);
	pe_free_working_set(fenced_data_set);

	out->finish(out, CRM_EX_OK, true, NULL);
	pcmk__output_free(out);
	pcmk__unregister_formats();

	crm_exit(CRM_EX_OK);
	}
	diff --git a/daemons/schedulerd/pacemaker-schedulerd.c b/daemons/schedulerd/pacemaker-schedulerd.c
	index da1e9db4e2..a8c6d80047 100644
	--- a/daemons/schedulerd/pacemaker-schedulerd.c
	+++ b/daemons/schedulerd/pacemaker-schedulerd.c
	@@ -1,180 +1,181 @@
	/*
	* Copyright 2004-2022 the Pacemaker project contributors
	*
	* The version control history for this file may have further details.
	*
	* This source code is licensed under the GNU General Public License version 2
	* or later (GPLv2+) WITHOUT ANY WARRANTY.
	*/

	#include <crm_internal.h>

	#include <crm/crm.h>
	#include <stdio.h>
	#include <stdbool.h>

	#include <stdlib.h>
	#include <errno.h>

	#include <crm/common/cmdline_internal.h>
	#include <crm/common/ipc_internal.h>
	#include <crm/common/mainloop.h>
	#include <crm/pengine/internal.h>
	#include <pacemaker-internal.h>

	#include "pacemaker-schedulerd.h"

	#define SUMMARY "pacemaker-schedulerd - daemon for calculating a Pacemaker cluster's response to events"

	struct {
	gchar **remainder;
	} options;

	pcmk__output_t *logger_out = NULL;
	pcmk__output_t *out = NULL;

	static GMainLoop *mainloop = NULL;
	static qb_ipcs_service_t *ipcs = NULL;
	static crm_exit_t exit_code = CRM_EX_OK;

	pcmk__supported_format_t formats[] = {
	PCMK__SUPPORTED_FORMAT_NONE,
	PCMK__SUPPORTED_FORMAT_TEXT,
	PCMK__SUPPORTED_FORMAT_XML,
	{ NULL, NULL, NULL }
	};

	void pengine_shutdown(int nsig);

	static GOptionContext *
	build_arg_context(pcmk__common_args_t args, GOptionGroup *group) {
	GOptionContext *context = NULL;

	GOptionEntry extra_prog_entries[] = {
	{ G_OPTION_REMAINING, 0, G_OPTION_FLAG_NONE, G_OPTION_ARG_STRING_ARRAY, &options.remainder,
	NULL,
	NULL },

	{ NULL }
	};

	context = pcmk__build_arg_context(args, "text (default), xml", group, NULL);
	pcmk__add_main_args(context, extra_prog_entries);
	return context;
	}

	int
	main(int argc, char **argv)
	{
	GError *error = NULL;
	int rc = pcmk_rc_ok;

	GOptionGroup *output_group = NULL;
	pcmk__common_args_t *args = pcmk__new_common_args(SUMMARY);
	gchar **processed_args = pcmk__cmdline_preproc(argv, NULL);
	GOptionContext *context = build_arg_context(args, &output_group);

	crm_log_preinit(NULL, argc, argv);
	mainloop_add_signal(SIGTERM, pengine_shutdown);

	pcmk__register_formats(NULL, formats);
	if (!g_option_context_parse_strv(context, &processed_args, &error)) {
	exit_code = CRM_EX_USAGE;
	goto done;
	}

	rc = pcmk__output_new(&out, args->output_ty, args->output_dest, argv);
	if ((rc != pcmk_rc_ok) \|\| (out == NULL)) {
	exit_code = CRM_EX_FATAL;
	g_set_error(&error, PCMK__EXITC_ERROR, exit_code, "Error creating output format %s: %s",
	args->output_ty, pcmk_rc_str(rc));
	goto done;
	}

	pe__register_messages(out);
	pcmk__register_lib_messages(out);

	if (options.remainder) {
	if (g_strv_length(options.remainder) == 1 &&
	pcmk__str_eq("metadata", options.remainder[0], pcmk__str_casei)) {
	pe_metadata(out);
	goto done;
	} else {
	exit_code = CRM_EX_USAGE;
	g_set_error(&error, PCMK__EXITC_ERROR, exit_code,
	"Unsupported extra command line parameters");
	goto done;
	}
	}

	if (args->version) {
	out->version(out, false);
	goto done;
	}

	pcmk__cli_init_logging("pacemaker-schedulerd", args->verbosity);
	crm_log_init(NULL, LOG_INFO, TRUE, FALSE, argc, argv, FALSE);
	crm_notice("Starting Pacemaker scheduler");

	if (pcmk__daemon_can_write(PE_STATE_DIR, NULL) == FALSE) {
	crm_err("Terminating due to bad permissions on " PE_STATE_DIR);
	exit_code = CRM_EX_FATAL;
	g_set_error(&error, PCMK__EXITC_ERROR, exit_code,
	"ERROR: Bad permissions on %s (see logs for details)", PE_STATE_DIR);
	goto done;
	}

	ipcs = pcmk__serve_schedulerd_ipc(&ipc_callbacks);
	if (ipcs == NULL) {
	g_set_error(&error, PCMK__EXITC_ERROR, exit_code,
	"Failed to create pacemaker-schedulerd server: exiting and inhibiting respawn");
	exit_code = CRM_EX_FATAL;
	goto done;
	}

	logger_out = pcmk__new_logger();
	if (logger_out == NULL) {
	exit_code = CRM_EX_FATAL;
	goto done;
	}
	-
	+ pe__register_messages(logger_out);
	+ pcmk__register_lib_messages(logger_out);
	pcmk__output_set_log_level(logger_out, LOG_TRACE);

	/* Create the mainloop and run it... */
	mainloop = g_main_loop_new(NULL, FALSE);
	crm_notice("Pacemaker scheduler successfully started and accepting connections");
	g_main_loop_run(mainloop);

	done:
	g_strfreev(options.remainder);
	g_strfreev(processed_args);
	pcmk__free_arg_context(context);

	pcmk__output_and_clear_error(error, out);
	pengine_shutdown(0);
	}

	void
	pengine_shutdown(int nsig)
	{
	if (ipcs != NULL) {
	crm_trace("Closing IPC server");
	mainloop_del_ipc_server(ipcs);
	ipcs = NULL;
	}

	if (logger_out != NULL) {
	logger_out->finish(logger_out, exit_code, true, NULL);
	pcmk__output_free(logger_out);
	logger_out = NULL;
	}

	if (out != NULL) {
	out->finish(out, exit_code, true, NULL);
	pcmk__output_free(out);
	out = NULL;
	}

	pcmk__unregister_formats();
	crm_exit(exit_code);
	}
	diff --git a/include/crm/common/Makefile.am b/include/crm/common/Makefile.am
	index c492680441..51800c84a8 100644
	--- a/include/crm/common/Makefile.am
	+++ b/include/crm/common/Makefile.am
	@@ -1,51 +1,52 @@
	#
	# Copyright 2004-2022 the Pacemaker project contributors
	#
	# The version control history for this file may have further details.
	#
	# This source code is licensed under the GNU General Public License version 2
	# or later (GPLv2+) WITHOUT ANY WARRANTY.
	#

	MAINTAINERCLEANFILES = Makefile.in

	headerdir=$(pkgincludedir)/crm/common

	header_HEADERS = acl.h \
	agents.h \
	agents_compat.h \
	cib.h \
	ipc.h \
	ipc_attrd_internal.h \
	ipc_controld.h \
	ipc_pacemakerd.h \
	ipc_schedulerd.h \
	iso8601.h \
	logging.h \
	logging_compat.h \
	mainloop.h \
	mainloop_compat.h \
	nvpair.h \
	output.h \
	results.h \
	+ results_compat.h \
	util.h \
	util_compat.h \
	xml.h \
	xml_compat.h

	noinst_HEADERS = alerts_internal.h \
	attrd_internal.h \
	cmdline_internal.h \
	health_internal.h \
	internal.h \
	ipc_internal.h \
	iso8601_internal.h \
	lists_internal.h \
	logging_internal.h \
	messages_internal.h \
	options_internal.h \
	output_internal.h \
	remote_internal.h \
	results_internal.h \
	strings_internal.h \
	xml_internal.h
	diff --git a/include/crm/common/internal.h b/include/crm/common/internal.h
	index 344763c12e..76c8537e5c 100644
	--- a/include/crm/common/internal.h
	+++ b/include/crm/common/internal.h
	@@ -1,403 +1,404 @@
	/*
	* Copyright 2015-2022 the Pacemaker project contributors
	*
	* The version control history for this file may have further details.
	*
	* This source code is licensed under the GNU Lesser General Public License
	* version 2.1 or later (LGPLv2.1+) WITHOUT ANY WARRANTY.
	*/

	#ifndef CRM_COMMON_INTERNAL__H
	#define CRM_COMMON_INTERNAL__H

	#include <unistd.h> // getpid()
	#include <stdbool.h> // bool
	#include <stdint.h> // uint8_t, uint64_t
	#include <string.h> // strcmp()
	#include <fcntl.h> // open()
	#include <sys/types.h> // uid_t, gid_t, pid_t

	#include <glib.h> // guint, GList, GHashTable
	#include <libxml/tree.h> // xmlNode

	#include <crm/common/util.h> // crm_strdup_printf()
	#include <crm/common/logging.h> // do_crm_log_unlikely(), etc.
	#include <crm/common/mainloop.h> // mainloop_io_t, struct ipc_client_callbacks
	#include <crm/common/health_internal.h>
	#include <crm/common/iso8601_internal.h>
	#include <crm/common/results_internal.h>
	#include <crm/common/messages_internal.h>
	#include <crm/common/strings_internal.h>

	/* This says whether the current application is a Pacemaker daemon or not,
	* and is used to change default logging settings such as whether to log to
	* stderr, etc., as well as a few other details such as whether blackbox signal
	* handling is enabled.
	*
	* It is set when logging is initialized, and does not need to be set directly.
	*/
	extern bool pcmk__is_daemon;

	// Number of elements in a statically defined array
	#define PCMK__NELEM(a) ((int) (sizeof(a)/sizeof(a[0])) )

	/* internal ACL-related utilities */

	char *pcmk__uid2username(uid_t uid);
	const char pcmk__update_acl_user(xmlNode request, const char *field,
	const char *peer_user);

	static inline bool
	pcmk__is_privileged(const char *user)
	{
	return user && (!strcmp(user, CRM_DAEMON_USER) \|\| !strcmp(user, "root"));
	}

	void pcmk__enable_acl(xmlNode acl_source, xmlNode target, const char *user);

	bool pcmk__check_acl(xmlNode xml, const char name,
	enum xml_private_flags mode);

	#if SUPPORT_CIBSECRETS
	/* internal CIB utilities (from cib_secrets.c) */

	int pcmk__substitute_secrets(const char rsc_id, GHashTable params);
	#endif


	/* internal digest-related utilities (from digest.c) */

	bool pcmk__verify_digest(xmlNode input, const char expected);


	/* internal I/O utilities (from io.c) */

	int pcmk__real_path(const char path, char *resolved_path);

	char pcmk__series_filename(const char directory, const char *series,
	int sequence, bool bzip);
	int pcmk__read_series_sequence(const char directory, const char series,
	unsigned int *seq);
	void pcmk__write_series_sequence(const char directory, const char series,
	unsigned int sequence, int max);
	int pcmk__chown_series_sequence(const char directory, const char series,
	uid_t uid, gid_t gid);

	int pcmk__build_path(const char *path_c, mode_t mode);
	char pcmk__full_path(const char filename, const char *dirname);
	bool pcmk__daemon_can_write(const char dir, const char file);
	void pcmk__sync_directory(const char *name);

	int pcmk__file_contents(const char filename, char *contents);
	int pcmk__write_sync(int fd, const char *contents);
	int pcmk__set_nonblocking(int fd);
	const char *pcmk__get_tmpdir(void);

	void pcmk__close_fds_in_child(bool);

	/*!
	* \internal
	* \brief Open /dev/null to consume next available file descriptor
	*
	* Open /dev/null, disregarding the result. This is intended when daemonizing to
	* be able to null stdin, stdout, and stderr.
	*
	* \param[in] flags O_RDONLY (stdin) or O_WRONLY (stdout and stderr)
	*/
	static inline void
	pcmk__open_devnull(int flags)
	{
	// Static analysis clutter
	// cppcheck-suppress leakReturnValNotUsed
	(void) open("/dev/null", flags);
	}


	/* internal main loop utilities (from mainloop.c) */

	int pcmk__add_mainloop_ipc(crm_ipc_t ipc, int priority, void userdata,
	struct ipc_client_callbacks *callbacks,
	mainloop_io_t **source);
	guint pcmk__mainloop_timer_get_period(mainloop_timer_t *timer);


	/* internal name/value utilities (from nvpair.c) */

	int pcmk__scan_nvpair(const char input, char name, char *value);
	char pcmk__format_nvpair(const char name, const char *value,
	const char *units);
	char pcmk__format_named_time(const char name, time_t epoch_time);

	/*!
	* \internal
	* \brief Add a boolean attribute to an XML node.
	*
	* \param[in,out] node XML node to add attributes to
	* \param[in] name XML attribute to create
	* \param[in] value Value to give to the attribute
	*/
	void
	pcmk__xe_set_bool_attr(xmlNodePtr node, const char *name, bool value);

	/*!
	* \internal
	* \brief Extract a boolean attribute's value from an XML element
	*
	* \param[in] node XML node to get attribute from
	* \param[in] name XML attribute to get
	*
	* \return True if the given \p name is an attribute on \p node and has
	* the value "true", False in all other cases
	*/
	bool
	pcmk__xe_attr_is_true(xmlNodePtr node, const char *name);

	/*!
	* \internal
	* \brief Extract a boolean attribute's value from an XML element, with
	* error checking
	*
	* \param[in] node XML node to get attribute from
	* \param[in] name XML attribute to get
	* \param[out] value Destination for the value of the attribute
	*
	* \return EINVAL if \p name or \p value are NULL, ENODATA if \p node is
	* NULL or the attribute does not exist, pcmk_rc_unknown_format
	* if the attribute is not a boolean, and pcmk_rc_ok otherwise.
	*
	* \note \p value only has any meaning if the return value is pcmk_rc_ok.
	*/
	int
	pcmk__xe_get_bool_attr(xmlNodePtr node, const char name, bool value);


	/* internal procfs utilities (from procfs.c) */

	pid_t pcmk__procfs_pid_of(const char *name);
	unsigned int pcmk__procfs_num_cores(void);
	-
	+int pcmk__procfs_pid2path(pid_t pid, char path[], size_t path_size);
	+bool pcmk__procfs_has_pids(void);

	/* internal XML schema functions (from xml.c) */

	void crm_schema_init(void);
	void crm_schema_cleanup(void);


	/* internal functions related to process IDs (from pid.c) */

	/*!
	* \internal
	* \brief Check whether process exists (by PID and optionally executable path)
	*
	* \param[in] pid PID of process to check
	* \param[in] daemon If not NULL, path component to match with procfs entry
	*
	* \return Standard Pacemaker return code
	* \note Particular return codes of interest include pcmk_rc_ok for alive,
	* ESRCH for process is not alive (verified by kill and/or executable path
	* match), EACCES for caller unable or not allowed to check. A result of
	* "alive" is less reliable when \p daemon is not provided or procfs is
	* not available, since there is no guarantee that the PID has not been
	* recycled for another process.
	* \note This function cannot be used to verify \e authenticity of the process.
	*/
	int pcmk__pid_active(pid_t pid, const char *daemon);

	int pcmk__read_pidfile(const char filename, pid_t pid);
	int pcmk__pidfile_matches(const char *filename, pid_t expected_pid,
	const char expected_name, pid_t pid);
	int pcmk__lock_pidfile(const char filename, const char name);


	/* internal functions related to resource operations (from operations.c) */

	// printf-style format to create operation ID from resource, action, interval
	#define PCMK__OP_FMT "%s_%s_%u"

	char pcmk__op_key(const char rsc_id, const char *op_type, guint interval_ms);
	char pcmk__notify_key(const char rsc_id, const char *notify_type,
	const char *op_type);
	char *pcmk__transition_key(int transition_id, int action_id, int target_rc,
	const char *node);
	void pcmk__filter_op_for_digest(xmlNode *param_set);
	bool pcmk__is_fencing_action(const char *action);


	// bitwise arithmetic utilities

	/*!
	* \internal
	* \brief Set specified flags in a flag group
	*
	* \param[in] function Function name of caller
	* \param[in] line Line number of caller
	* \param[in] log_level Log a message at this level
	* \param[in] flag_type Label describing this flag group (for logging)
	* \param[in] target Name of object whose flags these are (for logging)
	* \param[in] flag_group Flag group being manipulated
	* \param[in] flags Which flags in the group should be set
	* \param[in] flags_str Readable equivalent of \p flags (for logging)
	*
	* \return Possibly modified flag group
	*/
	static inline uint64_t
	pcmk__set_flags_as(const char *function, int line, uint8_t log_level,
	const char flag_type, const char target,
	uint64_t flag_group, uint64_t flags, const char *flags_str)
	{
	uint64_t result = flag_group \| flags;

	if (result != flag_group) {
	do_crm_log_unlikely(log_level,
	"%s flags %#.8llx (%s) for %s set by %s:%d",
	((flag_type == NULL)? "Group of" : flag_type),
	(unsigned long long) flags,
	((flags_str == NULL)? "flags" : flags_str),
	((target == NULL)? "target" : target),
	function, line);
	}
	return result;
	}

	/*!
	* \internal
	* \brief Clear specified flags in a flag group
	*
	* \param[in] function Function name of caller
	* \param[in] line Line number of caller
	* \param[in] log_level Log a message at this level
	* \param[in] flag_type Label describing this flag group (for logging)
	* \param[in] target Name of object whose flags these are (for logging)
	* \param[in] flag_group Flag group being manipulated
	* \param[in] flags Which flags in the group should be cleared
	* \param[in] flags_str Readable equivalent of \p flags (for logging)
	*
	* \return Possibly modified flag group
	*/
	static inline uint64_t
	pcmk__clear_flags_as(const char *function, int line, uint8_t log_level,
	const char flag_type, const char target,
	uint64_t flag_group, uint64_t flags, const char *flags_str)
	{
	uint64_t result = flag_group & ~flags;

	if (result != flag_group) {
	do_crm_log_unlikely(log_level,
	"%s flags %#.8llx (%s) for %s cleared by %s:%d",
	((flag_type == NULL)? "Group of" : flag_type),
	(unsigned long long) flags,
	((flags_str == NULL)? "flags" : flags_str),
	((target == NULL)? "target" : target),
	function, line);
	}
	return result;
	}

	// miscellaneous utilities (from utils.c)

	void pcmk__daemonize(const char name, const char pidfile);
	void pcmk__panic(const char *origin);
	pid_t pcmk__locate_sbd(void);
	void pcmk__sleep_ms(unsigned int ms);

	extern int pcmk__score_red;
	extern int pcmk__score_green;
	extern int pcmk__score_yellow;

	/*!
	* \internal
	* \brief Resize a dynamically allocated memory block
	*
	* \param[in] ptr Memory block to resize (or NULL to allocate new memory)
	* \param[in] size New size of memory block in bytes (must be > 0)
	*
	* \return Pointer to resized memory block
	*
	* \note This asserts on error, so the result is guaranteed to be non-NULL
	* (which is the main advantage of this over directly using realloc()).
	*/
	static inline void *
	pcmk__realloc(void *ptr, size_t size)
	{
	void *new_ptr;

	// realloc(p, 0) can replace free(p) but this wrapper can't
	CRM_ASSERT(size > 0);

	new_ptr = realloc(ptr, size);
	if (new_ptr == NULL) {
	free(ptr);
	abort();
	}
	return new_ptr;
	}


	static inline char *
	pcmk__getpid_s(void)
	{
	return crm_strdup_printf("%lu", (unsigned long) getpid());
	}

	// More efficient than g_list_length(list) == 1
	static inline bool
	pcmk__list_of_1(GList *list)
	{
	return list && (list->next == NULL);
	}

	// More efficient than g_list_length(list) > 1
	static inline bool
	pcmk__list_of_multiple(GList *list)
	{
	return list && (list->next != NULL);
	}

	/* convenience functions for failure-related node attributes */

	#define PCMK__FAIL_COUNT_PREFIX "fail-count"
	#define PCMK__LAST_FAILURE_PREFIX "last-failure"

	/*!
	* \internal
	* \brief Generate a failure-related node attribute name for a resource
	*
	* \param[in] prefix Start of attribute name
	* \param[in] rsc_id Resource name
	* \param[in] op Operation name
	* \param[in] interval_ms Operation interval
	*
	* \return Newly allocated string with attribute name
	*
	* \note Failure attributes are named like PREFIX-RSC#OP_INTERVAL (for example,
	* "fail-count-myrsc#monitor_30000"). The '#' is used because it is not
	* a valid character in a resource ID, to reliably distinguish where the
	* operation name begins. The '_' is used simply to be more comparable to
	* action labels like "myrsc_monitor_30000".
	*/
	static inline char *
	pcmk__fail_attr_name(const char prefix, const char rsc_id, const char *op,
	guint interval_ms)
	{
	CRM_CHECK(prefix && rsc_id && op, return NULL);
	return crm_strdup_printf("%s-%s#%s_%u", prefix, rsc_id, op, interval_ms);
	}

	static inline char *
	pcmk__failcount_name(const char rsc_id, const char op, guint interval_ms)
	{
	return pcmk__fail_attr_name(PCMK__FAIL_COUNT_PREFIX, rsc_id, op,
	interval_ms);
	}

	static inline char *
	pcmk__lastfailure_name(const char rsc_id, const char op, guint interval_ms)
	{
	return pcmk__fail_attr_name(PCMK__LAST_FAILURE_PREFIX, rsc_id, op,
	interval_ms);
	}

	// internal resource agent functions (from agents.c)
	int pcmk__effective_rc(int rc);

	#endif /* CRM_COMMON_INTERNAL__H */
	diff --git a/include/crm/common/ipc.h b/include/crm/common/ipc.h
	index d17f00eea5..b43f66e8bb 100644
	--- a/include/crm/common/ipc.h
	+++ b/include/crm/common/ipc.h
	@@ -1,231 +1,233 @@
	/*
	- * Copyright 2004-2020 the Pacemaker project contributors
	+ * Copyright 2004-2022 the Pacemaker project contributors
	*
	* The version control history for this file may have further details.
	*
	* This source code is licensed under the GNU Lesser General Public License
	* version 2.1 or later (LGPLv2.1+) WITHOUT ANY WARRANTY.
	*/

	#ifndef PCMK__CRM_COMMON_IPC__H
	# define PCMK__CRM_COMMON_IPC__H


	#include <sys/uio.h>
	#include <qb/qbipcc.h>
	#include <crm/common/xml.h>

	#ifdef __cplusplus
	extern "C" {
	#endif

	/**
	* \file
	* \brief IPC interface to Pacemaker daemons
	*
	* \ingroup core
	*/

	/*
	* Message creation utilities
	*
	* These are used for both IPC messages and cluster layer messages. However,
	* since this is public API, they stay in this header for backward
	* compatibility.
	*/

	#define create_reply(request, xml_response_data) \
	create_reply_adv(request, xml_response_data, __func__)

	xmlNode create_reply_adv(xmlNode request, xmlNode *xml_response_data,
	const char *origin);

	#define create_request(task, xml_data, host_to, sys_to, sys_from, uuid_from) \
	create_request_adv(task, xml_data, host_to, sys_to, sys_from, uuid_from, \
	__func__)

	xmlNode create_request_adv(const char task, xmlNode *xml_data,
	const char host_to, const char sys_to,
	const char sys_from, const char uuid_from,
	const char *origin);


	/*
	* The library supports two methods of creating IPC connections. The older code
	* allows connecting to any arbitrary IPC name. The newer code only allows
	* connecting to one of the Pacemaker daemons.
	*
	* As daemons are converted to use the new model, the old functions should be
	* considered deprecated for use with those daemons. Once all daemons are
	* converted, the old functions should be officially deprecated as public API
	* and eventually made internal API.
	*/

	/*
	* Pacemaker daemon IPC
	*/

	//! Available IPC interfaces
	enum pcmk_ipc_server {
	pcmk_ipc_attrd, //!< Attribute manager
	pcmk_ipc_based, //!< CIB manager
	pcmk_ipc_controld, //!< Controller
	pcmk_ipc_execd, //!< Executor
	pcmk_ipc_fenced, //!< Fencer
	pcmk_ipc_pacemakerd, //!< Launcher
	pcmk_ipc_schedulerd, //!< Scheduler
	};

	//! Possible event types that an IPC event callback can be called for
	enum pcmk_ipc_event {
	pcmk_ipc_event_connect, //!< Result of asynchronous connection attempt
	pcmk_ipc_event_disconnect, //!< Termination of IPC connection
	pcmk_ipc_event_reply, //!< Daemon's reply to client IPC request
	pcmk_ipc_event_notify, //!< Notification from daemon
	};

	//! How IPC replies should be dispatched
	enum pcmk_ipc_dispatch {
	pcmk_ipc_dispatch_main, //!< Attach IPC to GMainLoop for dispatch
	pcmk_ipc_dispatch_poll, //!< Caller will poll and dispatch IPC
	pcmk_ipc_dispatch_sync, //!< Sending a command will wait for any reply
	};

	//! Client connection to Pacemaker IPC
	typedef struct pcmk_ipc_api_s pcmk_ipc_api_t;

	/*!
	* \brief Callback function type for Pacemaker daemon IPC APIs
	*
	* \param[in] api IPC API connection
	* \param[in] event_type The type of event that occurred
	* \param[in] status Event status
	* \param[in] event_data Event-specific data
	* \param[in] user_data Caller data provided when callback was registered
	*
	* \note For connection and disconnection events, event_data may be NULL (for
	* local IPC) or the name of the connected node (for remote IPC, for
	* daemons that support that). For reply and notify events, event_data is
	* defined by the specific daemon API.
	*/
	typedef void (pcmk_ipc_callback_t)(pcmk_ipc_api_t api,
	enum pcmk_ipc_event event_type,
	crm_exit_t status,
	void event_data, void user_data);

	int pcmk_new_ipc_api(pcmk_ipc_api_t **api, enum pcmk_ipc_server server);

	void pcmk_free_ipc_api(pcmk_ipc_api_t *api);

	int pcmk_connect_ipc(pcmk_ipc_api_t *api, enum pcmk_ipc_dispatch dispatch_type);

	void pcmk_disconnect_ipc(pcmk_ipc_api_t *api);

	int pcmk_poll_ipc(pcmk_ipc_api_t *api, int timeout_ms);

	void pcmk_dispatch_ipc(pcmk_ipc_api_t *api);

	void pcmk_register_ipc_callback(pcmk_ipc_api_t *api, pcmk_ipc_callback_t cb,
	void *user_data);

	const char pcmk_ipc_name(pcmk_ipc_api_t api, bool for_log);

	bool pcmk_ipc_is_connected(pcmk_ipc_api_t *api);

	int pcmk_ipc_purge_node(pcmk_ipc_api_t api, const char node_name,
	uint32_t nodeid);


	/*
	* Generic IPC API (to eventually be deprecated as public API and made internal)
	*/

	/* INDENT-OFF */
	enum crm_ipc_flags
	{
	crm_ipc_flags_none = 0x00000000,

	crm_ipc_compressed = 0x00000001, /* Message has been compressed */

	crm_ipc_proxied = 0x00000100, /* _ALL_ replies to proxied connections need to be sent as events */
	crm_ipc_client_response = 0x00000200, /* A Response is expected in reply */

	// These are options for Pacemaker's internal use only (pcmk__ipc_send_*())
	crm_ipc_server_event = 0x00010000, /* Send an Event instead of a Response */
	crm_ipc_server_free = 0x00020000, /* Free the iovec after sending */
	crm_ipc_proxied_relay_response = 0x00040000, /* all replies to proxied connections are sent as events, this flag preserves whether the event should be treated as an actual event, or a response.*/

	- crm_ipc_server_info = 0x00100000, /* Log failures as LOG_INFO */
	- crm_ipc_server_error = 0x00200000, /* Log failures as LOG_ERR */
	+#if !defined(PCMK_ALLOW_DEPRECATED) \|\| (PCMK_ALLOW_DEPRECATED == 1)
	+ crm_ipc_server_info = 0x00100000, //!< \deprecated Unused
	+ crm_ipc_server_error = 0x00200000, //!< \deprecated Unused
	+#endif
	};
	/* INDENT-ON */

	typedef struct crm_ipc_s crm_ipc_t;

	crm_ipc_t crm_ipc_new(const char name, size_t max_size);
	bool crm_ipc_connect(crm_ipc_t * client);
	void crm_ipc_close(crm_ipc_t * client);
	void crm_ipc_destroy(crm_ipc_t * client);
	void pcmk_free_ipc_event(struct iovec *event);

	int crm_ipc_send(crm_ipc_t * client, xmlNode * message, enum crm_ipc_flags flags,
	int32_t ms_timeout, xmlNode ** reply);

	int crm_ipc_get_fd(crm_ipc_t * client);
	bool crm_ipc_connected(crm_ipc_t * client);
	int crm_ipc_ready(crm_ipc_t * client);
	long crm_ipc_read(crm_ipc_t * client);
	const char crm_ipc_buffer(crm_ipc_t client);
	uint32_t crm_ipc_buffer_flags(crm_ipc_t * client);
	const char crm_ipc_name(crm_ipc_t client);
	unsigned int crm_ipc_default_buffer_size(void);

	/*!
	* \brief Check the authenticity of the IPC socket peer process (legacy)
	*
	* If everything goes well, peer's authenticity is verified by the means
	* of comparing against provided referential UID and GID (either satisfies),
	* and the result of this check can be deduced from the return value.
	* As an exception, detected UID of 0 ("root") satisfies arbitrary
	* provided referential daemon's credentials.
	*
	* \param[in] sock IPC related, connected Unix socket to check peer of
	* \param[in] refuid referential UID to check against
	* \param[in] refgid referential GID to check against
	* \param[out] gotpid to optionally store obtained PID of the peer
	* (not available on FreeBSD, special value of 1
	* used instead, and the caller is required to
	* special case this value respectively)
	* \param[out] gotuid to optionally store obtained UID of the peer
	* \param[out] gotgid to optionally store obtained GID of the peer
	*
	* \return 0 if IPC related socket's peer is not authentic given the
	* referential credentials (see above), 1 if it is,
	* negative value on error (generally expressing -errno unless
	* it was zero even on nonhappy path, -pcmk_err_generic is
	* returned then; no message is directly emitted)
	*
	* \note While this function is tolerant on what constitutes authorized
	* IPC daemon process (its effective user matches UID=0 or \p refuid,
	* or at least its group matches \p refgid), either or both (in case
	* of UID=0) mismatches on the expected credentials of such peer
	* process \e shall be investigated at the caller when value of 1
	* gets returned there, since higher-than-expected privileges in
	* respect to the expected/intended credentials possibly violate
	* the least privilege principle and may pose an additional risk
	* (i.e. such accidental inconsistency shall be eventually fixed).
	*/
	int crm_ipc_is_authentic_process(int sock, uid_t refuid, gid_t refgid,
	pid_t gotpid, uid_t gotuid, gid_t *gotgid);

	/* This is controller-specific but is declared in this header for C API
	* backward compatibility.
	*/
	xmlNode create_hello_message(const char uuid, const char *client_name,
	const char major_version, const char minor_version);

	#ifdef __cplusplus
	}
	#endif

	#endif
	diff --git a/include/crm/common/iso8601_internal.h b/include/crm/common/iso8601_internal.h
	index 0360b30175..50103451fe 100644
	--- a/include/crm/common/iso8601_internal.h
	+++ b/include/crm/common/iso8601_internal.h
	@@ -1,40 +1,39 @@
	/*
	- * Copyright 2015-2021 the Pacemaker project contributors
	+ * Copyright 2015-2022 the Pacemaker project contributors
	*
	* The version control history for this file may have further details.
	*
	* This source code is licensed under the GNU Lesser General Public License
	* version 2.1 or later (LGPLv2.1+) WITHOUT ANY WARRANTY.
	*/

	#ifndef PCMK__ISO8601_INTERNAL__H
	# define PCMK__ISO8601_INTERNAL__H

	#include <time.h>
	#include <sys/time.h>
	#include <ctype.h>
	#include <crm/common/iso8601.h>

	typedef struct pcmk__time_us pcmk__time_hr_t;

	pcmk__time_hr_t pcmk__time_hr_convert(pcmk__time_hr_t target, crm_time_t *dt);
	void pcmk__time_set_hr_dt(crm_time_t target, pcmk__time_hr_t hr_dt);
	-pcmk__time_hr_t pcmk__time_timeval_hr_convert(pcmk__time_hr_t target,
	- struct timeval *tv);
	+pcmk__time_hr_t pcmk__time_hr_now(time_t epoch);
	pcmk__time_hr_t pcmk__time_hr_new(const char date_time);
	void pcmk__time_hr_free(pcmk__time_hr_t *hr_dt);
	char pcmk__time_format_hr(const char format, pcmk__time_hr_t *hr_dt);
	const char pcmk__epoch2str(time_t when);
	const char *pcmk__readable_interval(guint interval_ms);

	struct pcmk__time_us {
	int years;
	int months; /* Only for durations */
	int days;
	int seconds;
	int offset; /* Seconds */
	bool duration;
	int useconds;
	};

	#endif
	diff --git a/include/crm/common/options_internal.h b/include/crm/common/options_internal.h
	index ea025417fd..494a3e7235 100644
	--- a/include/crm/common/options_internal.h
	+++ b/include/crm/common/options_internal.h
	@@ -1,156 +1,160 @@
	/*
	* Copyright 2006-2022 the Pacemaker project contributors
	*
	* The version control history for this file may have further details.
	*
	* This source code is licensed under the GNU Lesser General Public License
	* version 2.1 or later (LGPLv2.1+) WITHOUT ANY WARRANTY.
	*/

	#ifndef PCMK__OPTIONS_INTERNAL__H
	# define PCMK__OPTIONS_INTERNAL__H

	# ifndef PCMK__CONFIG_H
	# define PCMK__CONFIG_H
	# include <config.h> // HAVE_GETOPT, _Noreturn
	# endif

	# include <glib.h> // GHashTable
	# include <stdbool.h> // bool

	/*
	* Command-line option handling
	*
	* This will all eventually go away as everything is converted to use GOption
	*/

	# ifdef HAVE_GETOPT_H
	# include <getopt.h>
	# else
	# define no_argument 0
	# define required_argument 1
	# endif

	enum pcmk__cli_option_flags {
	pcmk__option_default = (1 << 0),
	pcmk__option_hidden = (1 << 1),
	pcmk__option_paragraph = (1 << 2),
	pcmk__option_example = (1 << 3),
	};

	typedef struct pcmk__cli_option_s {
	/* Fields from 'struct option' in getopt.h */
	/* name of long option */
	const char *name;
	/*
	* one of no_argument, required_argument, and optional_argument:
	* whether option takes an argument
	*/
	int has_arg;
	/* if not NULL, set flag to val when option found /
	int *flag;
	/* if flag not NULL, value to set flag to; else return value /
	int val;

	/* Custom fields */
	const char *desc;
	long flags;
	} pcmk__cli_option_t;

	void pcmk__set_cli_options(const char short_options, const char usage,
	pcmk__cli_option_t *long_options,
	const char *app_desc);
	int pcmk__next_cli_option(int argc, char *argv, int index,
	const char **longname);
	_Noreturn void pcmk__cli_help(char cmd, crm_exit_t exit_code);
	void pcmk__cli_option_cleanup(void);


	/*
	* Environment variable option handling
	*/

	const char pcmk__env_option(const char option);
	void pcmk__set_env_option(const char option, const char value);
	bool pcmk__env_option_enabled(const char daemon, const char option);


	/*
	* Cluster option handling
	*/

	typedef struct pcmk__cluster_option_s {
	const char *name;
	const char *alt_name;
	const char *type;
	const char *values;
	const char *default_value;

	bool (is_valid)(const char );

	const char *description_short;
	const char *description_long;

	} pcmk__cluster_option_t;

	const char pcmk__cluster_option(GHashTable options,
	pcmk__cluster_option_t *option_list, int len,
	const char *name);

	char pcmk__format_option_metadata(const char name, const char *desc_short,
	const char *desc_long,
	pcmk__cluster_option_t *option_list, int len);

	void pcmk__validate_cluster_options(GHashTable *options,
	pcmk__cluster_option_t *option_list,
	int len);

	bool pcmk__valid_interval_spec(const char *value);
	bool pcmk__valid_boolean(const char *value);
	bool pcmk__valid_number(const char *value);
	bool pcmk__valid_positive_number(const char *value);
	bool pcmk__valid_quorum(const char *value);
	bool pcmk__valid_script(const char *value);
	bool pcmk__valid_percentage(const char *value);

	// from watchdog.c
	long pcmk__get_sbd_timeout(void);
	bool pcmk__get_sbd_sync_resource_startup(void);
	long pcmk__auto_watchdog_timeout(void);
	bool pcmk__valid_sbd_timeout(const char *value);

	// Constants for environment variable names
	#define PCMK__ENV_BLACKBOX "blackbox"
	#define PCMK__ENV_CLUSTER_TYPE "cluster_type"
	#define PCMK__ENV_DEBUG "debug"
	#define PCMK__ENV_LOGFACILITY "logfacility"
	#define PCMK__ENV_LOGFILE "logfile"
	#define PCMK__ENV_LOGPRIORITY "logpriority"
	#define PCMK__ENV_MCP "mcp"
	#define PCMK__ENV_NODE_START_STATE "node_start_state"
	#define PCMK__ENV_PHYSICAL_HOST "physical_host"
	#define PCMK__ENV_QUORUM_TYPE "quorum_type"
	#define PCMK__ENV_SHUTDOWN_DELAY "shutdown_delay"
	#define PCMK__ENV_STDERR "stderr"

	// Constants for cluster option names
	#define PCMK__OPT_NODE_HEALTH_BASE "node-health-base"
	#define PCMK__OPT_NODE_HEALTH_GREEN "node-health-green"
	#define PCMK__OPT_NODE_HEALTH_RED "node-health-red"
	#define PCMK__OPT_NODE_HEALTH_STRATEGY "node-health-strategy"
	#define PCMK__OPT_NODE_HEALTH_YELLOW "node-health-yellow"

	// Constants for meta-attribute names
	#define PCMK__META_ALLOW_UNHEALTHY_NODES "allow-unhealthy-nodes"

	// Constants for enumerated values for various options
	#define PCMK__VALUE_CUSTOM "custom"
	+#define PCMK__VALUE_FENCING "fencing"
	#define PCMK__VALUE_GREEN "green"
	#define PCMK__VALUE_MIGRATE_ON_RED "migrate-on-red"
	#define PCMK__VALUE_NONE "none"
	+#define PCMK__VALUE_NOTHING "nothing"
	#define PCMK__VALUE_ONLY_GREEN "only-green"
	#define PCMK__VALUE_PROGRESSIVE "progressive"
	+#define PCMK__VALUE_QUORUM "quorum"
	#define PCMK__VALUE_RED "red"
	+#define PCMK__VALUE_UNFENCING "unfencing"
	#define PCMK__VALUE_YELLOW "yellow"

	#endif // PCMK__OPTIONS_INTERNAL__H
	diff --git a/include/crm/common/output_internal.h b/include/crm/common/output_internal.h
	index 74ee833c15..907d8acbc6 100644
	--- a/include/crm/common/output_internal.h
	+++ b/include/crm/common/output_internal.h
	@@ -1,882 +1,886 @@
	/*
	* Copyright 2019-2022 the Pacemaker project contributors
	*
	* The version control history for this file may have further details.
	*
	* This source code is licensed under the GNU Lesser General Public License
	* version 2.1 or later (LGPLv2.1+) WITHOUT ANY WARRANTY.
	*/

	#ifndef PCMK__OUTPUT_INTERNAL__H
	# define PCMK__OUTPUT_INTERNAL__H

	# include <stdbool.h>
	# include <stdio.h>
	# include <libxml/tree.h>
	# include <libxml/HTMLtree.h>

	# include <glib.h>
	# include <crm/common/results.h>

	#ifdef __cplusplus
	extern "C" {
	#endif

	/**
	* \file
	* \brief Formatted output for pacemaker tools
	*/


	# define PCMK__API_VERSION "2.21"

	#if defined(PCMK__WITH_ATTRIBUTE_OUTPUT_ARGS)
	# define PCMK__OUTPUT_ARGS(ARGS...) __attribute__((output_args(ARGS)))
	#else
	# define PCMK__OUTPUT_ARGS(ARGS...)
	#endif

	typedef struct pcmk__output_s pcmk__output_t;

	/*!
	* \internal
	* \brief The type of a function that creates a ::pcmk__output_t.
	*
	* Instances of this type are passed to pcmk__register_format(), stored in an
	* internal data structure, and later accessed by pcmk__output_new(). For
	* examples, see pcmk__mk_xml_output() and pcmk__mk_text_output().
	*
	* \param[in] argv The list of command line arguments.
	*/
	typedef pcmk__output_t * (pcmk__output_factory_t)(char *argv);

	/*!
	* \internal
	* \brief The type of a custom message formatting function.
	*
	* These functions are defined by various libraries to support formatting of
	* types aside from the basic types provided by a ::pcmk__output_t.
	*
	* The meaning of the return value will be different for each message.
	* In general, however, 0 should be returned on success and a positive value
	* on error.
	*
	* \note These functions must not call va_start or va_end - that is done
	* automatically before the custom formatting function is called.
	*/
	typedef int (pcmk__message_fn_t)(pcmk__output_t out, va_list args);

	/*!
	* \internal
	* \brief Internal type for tracking custom messages.
	*
	* Each library can register functions that format custom message types. These
	* are commonly used to handle some library-specific type. Registration is
	* done by first defining a table of ::pcmk__message_entry_t structures and
	* then passing that table to pcmk__register_messages(). Separate handlers
	* can be defined for the same message, but for different formats (xml vs.
	* text). Unknown formats will be ignored.
	*
	* Additionally, a "default" value for fmt_table can be used. In this case,
	* fn will be registered for all supported formats. It is also possible to
	* register a default and then override that registration with a format-specific
	* function if necessary.
	*
	* \note The ::pcmk__message_entry_t table is processed in one pass, in order,
	* from top to bottom. This means later entries with the same message_id will
	* override previous ones. Thus, any default entry must come before any
	* format-specific entries for the same message_id.
	*/
	typedef struct pcmk__message_entry_s {
	/*!
	* \brief The message to be handled.
	*
	* This must be the same ID that is passed to the message function of
	* a ::pcmk__output_t. Unknown message IDs will be ignored.
	*/
	const char *message_id;

	/*!
	* \brief The format type this handler is for.
	*
	* This name must match the fmt_name of the currently active formatter in
	* order for the registered function to be called. It is valid to have
	* multiple entries for the same message_id but with different fmt_name
	* values.
	*/
	const char *fmt_name;

	/*!
	* \brief The function to be called for message_id given a match on
	* fmt_name. See comments on ::pcmk__message_fn_t.
	*/
	pcmk__message_fn_t fn;
	} pcmk__message_entry_t;

	/*!
	* \internal
	* \brief This structure contains everything needed to add support for a
	* single output formatter to a command line program.
	*/
	typedef struct pcmk__supported_format_s {
	/*!
	* \brief The name of this output formatter, which should match the
	* fmt_name parameter in some ::pcmk__output_t structure.
	*/
	const char *name;

	/*!
	* \brief A function that creates a ::pcmk__output_t.
	*/
	pcmk__output_factory_t create;

	/*!
	* \brief Format-specific command line options. This can be NULL if
	* no command line options should be supported.
	*/
	GOptionEntry *options;
	} pcmk__supported_format_t;

	/* The following three blocks need to be updated each time a new base formatter
	* is added.
	*/

	extern GOptionEntry pcmk__html_output_entries[];
	extern GOptionEntry pcmk__log_output_entries[];
	extern GOptionEntry pcmk__none_output_entries[];
	extern GOptionEntry pcmk__text_output_entries[];
	extern GOptionEntry pcmk__xml_output_entries[];

	pcmk__output_t pcmk__mk_html_output(char *argv);
	pcmk__output_t pcmk__mk_log_output(char *argv);
	pcmk__output_t pcmk__mk_none_output(char *argv);
	pcmk__output_t pcmk__mk_text_output(char *argv);
	pcmk__output_t pcmk__mk_xml_output(char *argv);

	#define PCMK__SUPPORTED_FORMAT_HTML { "html", pcmk__mk_html_output, pcmk__html_output_entries }
	#define PCMK__SUPPORTED_FORMAT_LOG { "log", pcmk__mk_log_output, pcmk__log_output_entries }
	#define PCMK__SUPPORTED_FORMAT_NONE { PCMK__VALUE_NONE, pcmk__mk_none_output, \
	pcmk__none_output_entries }
	#define PCMK__SUPPORTED_FORMAT_TEXT { "text", pcmk__mk_text_output, pcmk__text_output_entries }
	#define PCMK__SUPPORTED_FORMAT_XML { "xml", pcmk__mk_xml_output, pcmk__xml_output_entries }

	/*!
	* \brief This structure contains everything that makes up a single output
	* formatter.
	*
	* Instances of this structure may be created by calling pcmk__output_new()
	* with the name of the desired formatter. They should later be freed with
	* pcmk__output_free().
	*/
	struct pcmk__output_s {
	/*!
	* \brief The name of this output formatter.
	*/
	const char *fmt_name;

	/*!
	* \brief Should this formatter supress most output?
	*
	* \note This setting is not respected by all formatters. In general,
	* machine-readable output formats will not support this while
	* user-oriented formats will. Callers should use is_quiet()
	* to test whether to print or not.
	*/
	bool quiet;

	/*!
	* \brief A copy of the request that generated this output.
	*
	* In the case of command line usage, this would be the command line
	* arguments. For other use cases, it could be different.
	*/
	gchar *request;

	/*!
	* \brief Where output should be written.
	*
	* This could be a file handle, or stdout or stderr. This is really only
	* useful internally.
	*/
	FILE *dest;

	/*!
	* \brief Custom messages that are currently registered on this formatter.
	*
	* Keys are the string message IDs, values are ::pcmk__message_fn_t function
	* pointers.
	*/
	GHashTable *messages;

	/*!
	* \brief Implementation-specific private data.
	*
	* Each individual formatter may have some private data useful in its
	* implementation. This points to that data. Callers should not rely on
	* its contents or structure.
	*/
	void *priv;

	/*!
	* \internal
	* \brief Take whatever actions are necessary to prepare out for use. This is
	* called by pcmk__output_new(). End users should not need to call this.
	*
	* \note For formatted output implementers - This function should be written in
	* such a way that it can be called repeatedly on an already initialized
	* object without causing problems, or on a previously finished object
	* without crashing.
	*
	* \param[in,out] out The output functions structure.
	*
	* \return true on success, false on error.
	*/
	bool (init) (pcmk__output_t out);

	/*!
	* \internal
	* \brief Free the private formatter-specific data.
	*
	* This is called from pcmk__output_free() and does not typically need to be
	* called directly.
	*
	* \param[in,out] out The output functions structure.
	*/
	void (free_priv) (pcmk__output_t out);

	/*!
	* \internal
	* \brief Take whatever actions are necessary to end formatted output.
	*
	* This could include flushing output to a file, but does not include freeing
	* anything. The finish method can potentially be fairly complicated, adding
	* additional information to the internal data structures or doing whatever
	* else. It is therefore suggested that finish only be called once.
	*
	* \note The print parameter will only affect those formatters that do all
	* their output at the end. Console-oriented formatters typically print
	* a line at a time as they go, so this parameter will not affect them.
	* Structured formatters will honor it, however.
	*
	* \note The copy_dest parameter does not apply to all formatters. Console-
	* oriented formatters do not build up a structure as they go, and thus
	* do not have anything to return. Structured formatters will honor it,
	* however. Note that each type of formatter will return a different
	* type of value in this parameter. To use this parameter, call this
	* function like so:
	*
	* \code
	* xmlNode *dest = NULL;
	* out->finish(out, exit_code, false, (void **) &dest);
	* \endcode
	*
	* \param[in,out] out The output functions structure.
	* \param[in] exit_status The exit value of the whole program.
	* \param[in] print Whether this function should write any output.
	* \param[out] copy_dest A destination to store a copy of the internal
	* data structure for this output, or NULL if no
	* copy is required. The caller should free this
	* memory when done with it.
	*/
	void (finish) (pcmk__output_t out, crm_exit_t exit_status, bool print,
	void **copy_dest);

	/*!
	* \internal
	* \brief Finalize output and then immediately set back up to start a new set
	* of output.
	*
	* This is conceptually the same as calling finish and then init, though in
	* practice more be happening behind the scenes.
	*
	* \note This function differs from finish in that no exit_status is added.
	* The idea is that the program is not shutting down, so there is not
	* yet a final exit code. Call finish on the last time through if this
	* is needed.
	*
	* \param[in,out] out The output functions structure.
	*/
	void (reset) (pcmk__output_t out);

	/*!
	* \internal
	* \brief Register a custom message.
	*
	* \param[in,out] out The output functions structure.
	* \param[in] message_id The name of the message to register. This name
	* will be used as the message_id parameter to the
	* message function in order to call the custom
	* format function.
	* \param[in] fn The custom format function to call for message_id.
	*/
	void (register_message) (pcmk__output_t out, const char *message_id,
	pcmk__message_fn_t fn);

	/*!
	* \internal
	* \brief Call a previously registered custom message.
	*
	* \param[in,out] out The output functions structure.
	* \param[in] message_id The name of the message to call. This name must
	* be the same as the message_id parameter of some
	* previous call to register_message.
	* \param[in] ... Arguments to be passed to the registered function.
	*
	* \return A standard Pacemaker return code. Generally: 0 if a function was
	* registered for the message, that function was called, and returned
	* successfully; EINVAL if no function was registered; or pcmk_rc_no_output
	* if a function was called but produced no output.
	*/
	int (message) (pcmk__output_t out, const char *message_id, ...);

	/*!
	* \internal
	* \brief Format the output of a completed subprocess.
	*
	* \param[in,out] out The output functions structure.
	* \param[in] exit_status The exit value of the subprocess.
	* \param[in] proc_stdout stdout from the completed subprocess.
	* \param[in] proc_stderr stderr from the completed subprocess.
	*/
	void (subprocess_output) (pcmk__output_t out, int exit_status,
	const char proc_stdout, const char proc_stderr);

	/*!
	* \internal
	* \brief Format version information. This is useful for the --version
	* argument of command line tools.
	*
	* \param[in,out] out The output functions structure.
	* \param[in] extended Add additional version information.
	*/
	void (version) (pcmk__output_t out, bool extended);

	/*!
	* \internal
	* \brief Format an informational message that should be shown to
	* to an interactive user. Not all formatters will do this.
	*
	* \note A newline will automatically be added to the end of the format
	* string, so callers should not include a newline.
	*
	* \param[in,out] out The output functions structure.
	* \param[in] buf The message to be printed.
	* \param[in] ... Arguments to be formatted.
	*
	* \return A standard Pacemaker return code. Generally: pcmk_rc_ok
	* if output was produced and pcmk_rc_no_output if it was not.
	* As not all formatters implement this function, those that
	* do not will always just return pcmk_rc_no_output.
	*/
	int (info) (pcmk__output_t out, const char *format, ...) G_GNUC_PRINTF(2, 3);

	/*!
	* \internal
	* \brief Format an error message that should be shown to an interactive
	* user. Not all formatters will do this.
	*
	* \note A newline will automatically be added to the end of the format
	* string, so callers should not include a newline.
	*
	* \param[in,out] out The output functions structure.
	* \param[in] buf The message to be printed.
	* \param[in] ... Arguments to be formatted.
	*/
	void (err) (pcmk__output_t out, const char *format, ...) G_GNUC_PRINTF(2, 3);

	/*!
	* \internal
	* \brief Format already formatted XML.
	*
	* \param[in,out] out The output functions structure.
	* \param[in] name A name to associate with the XML.
	* \param[in] buf The XML in a string.
	*/
	void (output_xml) (pcmk__output_t out, const char name, const char buf);

	/*!
	* \internal
	* \brief Start a new list of items.
	*
	* \note For text output, this corresponds to another level of indentation. For
	* XML output, this corresponds to wrapping any following output in another
	* layer of tags.
	*
	* \note If singular_noun and plural_noun are non-NULL, calling end_list will
	* result in a summary being added.
	*
	* \param[in,out] out The output functions structure.
	* \param[in] singular_noun When outputting the summary for a list with
	* one item, the noun to use.
	* \param[in] plural_noun When outputting the summary for a list with
	* more than one item, the noun to use.
	* \param[in] format The format string.
	* \param[in] ... Arguments to be formatted.
	*/
	void (begin_list) (pcmk__output_t out, const char *singular_noun,
	const char plural_noun, const char format, ...)
	G_GNUC_PRINTF(4, 5);

	/*!
	* \internal
	* \brief Format a single item in a list.
	*
	* \param[in,out] out The output functions structure.
	* \param[in] name A name to associate with this item.
	* \param[in] format The format string.
	* \param[in] ... Arguments to be formatted.
	*/
	void (list_item) (pcmk__output_t out, const char name, const char format, ...)
	G_GNUC_PRINTF(3, 4);

	/*!
	* \internal
	* \brief Increment the internal counter of the current list's length.
	*
	* Typically, this counter is maintained behind the scenes as a side effect
	* of calling list_item(). However, custom functions that maintain lists
	* some other way will need to manage this counter manually. This is
	* useful for implementing custom message functions and should not be
	* needed otherwise.
	*
	* \param[in,out] out The output functions structure.
	*/
	void (increment_list) (pcmk__output_t out);

	/*!
	* \internal
	* \brief Conclude a list.
	*
	* \note If begin_list was called with non-NULL for both the singular_noun
	* and plural_noun arguments, this function will output a summary.
	* Otherwise, no summary will be added.
	*
	* \param[in,out] out The output functions structure.
	*/
	void (end_list) (pcmk__output_t out);

	/*!
	* \internal
	* \brief Should anything be printed to the user?
	*
	* \note This takes into account both the \p quiet value as well as the
	* current formatter.
	*
	* \param[in] out The output functions structure.
	*
	* \return true if output should be supressed, false otherwise.
	*/
	bool (is_quiet) (pcmk__output_t out);

	/*!
	* \internal
	* \brief Output a spacer. Not all formatters will do this.
	*
	* \param[in] out The output functions structure.
	*/
	void (spacer) (pcmk__output_t out);

	/*!
	* \internal
	* \brief Output a progress indicator. This is likely only useful for
	* plain text, console based formatters.
	*
	* \param[in] out The output functions structure.
	* \param[in] end If true, output a newline afterwards. This should
	* only be used the last time this function is called.
	*
	*/
	void (progress) (pcmk__output_t out, bool end);

	/*!
	* \internal
	* \brief Prompt the user for input. Not all formatters will do this.
	*
	* \note This function is part of pcmk__output_t, but unlike all other
	* function it does not take that as an argument. In general, a
	* prompt will go directly to the screen and therefore bypass any
	* need to use the formatted output code to decide where and how
	* to display.
	*
	* \param[in] prompt The prompt to display. This is required.
	* \param[in] echo If true, echo the user's input to the screen. Set
	* to false for password entry.
	* \param[out] dest Where to store the user's response. This is
	* required.
	*/
	void (prompt) (const char prompt, bool echo, char **dest);
	};

	/*!
	* \internal
	* \brief Call a formatting function for a previously registered message.
	*
	* \note This function is for implementing custom formatters. It should not
	* be called directly. Instead, call out->message.
	*
	* \param[in,out] out The output functions structure.
	* \param[in] message_id The message to be handled. Unknown messages
	* will be ignored.
	* \param[in] ... Arguments to be passed to the registered function.
	*/
	int
	pcmk__call_message(pcmk__output_t out, const char message_id, ...);

	/*!
	* \internal
	* \brief Free a ::pcmk__output_t structure that was previously created by
	* pcmk__output_new().
	*
	* \note While the create and finish functions are designed in such a way that
	* they can be called repeatedly, this function will completely free the
	* memory of the object. Once this function has been called, producing
	* more output requires starting over from pcmk__output_new().
	*
	* \param[in,out] out The output structure.
	*/
	void pcmk__output_free(pcmk__output_t *out);

	/*!
	* \internal
	* \brief Create a new ::pcmk__output_t structure.
	*
	* \param[in,out] out The destination of the new ::pcmk__output_t.
	* \param[in] fmt_name How should output be formatted?
	* \param[in] filename Where should formatted output be written to? This
	* can be a filename (which will be overwritten if it
	* already exists), or NULL or "-" for stdout. For no
	* output, pass a filename of "/dev/null".
	* \param[in] argv The list of command line arguments.
	*
	* \return Standard Pacemaker return code
	*/
	int pcmk__output_new(pcmk__output_t *out, const char fmt_name,
	const char filename, char *argv);

	/*!
	* \internal
	* \brief Register a new output formatter, making it available for use
	* the same as a base formatter.
	*
	* \param[in,out] group A ::GOptionGroup that formatted output related command
	* line arguments should be added to. This can be NULL
	* for use outside of command line programs.
	* \param[in] name The name of the format. This will be used to select a
	* format from command line options and for displaying help.
	* \param[in] create A function that creates a ::pcmk__output_t.
	* \param[in] options Format-specific command line options. These will be
	* added to the context. This argument can also be NULL.
	*
	* \return 0 on success or an error code on error.
	*/
	int
	pcmk__register_format(GOptionGroup group, const char name,
	pcmk__output_factory_t create, GOptionEntry *options);

	/*!
	* \internal
	* \brief Register an entire table of output formatters at once.
	*
	* \param[in,out] group A ::GOptionGroup that formatted output related command
	* line arguments should be added to. This can be NULL
	* for use outside of command line programs.
	* \param[in] table An array of ::pcmk__supported_format_t which should
	* all be registered. This array must be NULL-terminated.
	*
	*/
	void
	pcmk__register_formats(GOptionGroup group, pcmk__supported_format_t table);

	/*!
	* \internal
	* \brief Unregister a previously registered table of custom formatting
	* functions and destroy the internal data structures associated with them.
	*/
	void
	pcmk__unregister_formats(void);

	/*!
	* \internal
	* \brief Register a function to handle a custom message.
	*
	* \note This function is for implementing custom formatters. It should not
	* be called directly. Instead, call out->register_message.
	*
	* \param[in,out] out The output functions structure.
	* \param[in] message_id The message to be handled.
	* \param[in] fn The custom format function to call for message_id.
	*/
	void
	pcmk__register_message(pcmk__output_t out, const char message_id,
	pcmk__message_fn_t fn);

	/*!
	* \internal
	* \brief Register an entire table of custom formatting functions at once.
	*
	* This table can contain multiple formatting functions for the same message ID
	* if they are for different format types.
	*
	* \param[in,out] out The output functions structure.
	* \param[in] table An array of ::pcmk__message_entry_t values which should
	* all be registered. This array must be NULL-terminated.
	*/
	void
	pcmk__register_messages(pcmk__output_t out, pcmk__message_entry_t table);

	/* Functions that are useful for implementing custom message formatters */

	/*!
	* \internal
	* \brief A printf-like function.
	*
	* This function writes to out->dest and indents the text to the current level
	* of the text formatter's nesting. This should be used when implementing
	* custom message functions instead of printf.
	*
	* \param[in,out] out The output functions structure.
	*/
	void
	pcmk__indented_printf(pcmk__output_t out, const char format, ...) G_GNUC_PRINTF(2, 3);

	/*!
	* \internal
	* \brief A vprintf-like function.
	*
	* This function is like pcmk__indented_printf(), except it takes a va_list instead
	* of a list of arguments. This should be used when implementing custom message
	* functions instead of vprintf.
	*
	* \param[in,out] out The output functions structure.
	* \param[in] format The format string.
	* \param[in] args A list of arguments to apply to the format string.
	*/
	void
	pcmk__indented_vprintf(pcmk__output_t out, const char format, va_list args) G_GNUC_PRINTF(2, 0);


	/*!
	* \internal
	* \brief A printf-like function.
	*
	* This function writes to out->dest without indenting the text. This should be
	* used with implementing custom message functions instead of printf.
	*
	* \param[in,out] out The output functions structure.
	*/
	void
	pcmk__formatted_printf(pcmk__output_t out, const char format, ...) G_GNUC_PRINTF(2, 3);

	/*!
	* \internal
	* \brief A vprintf-like function.
	*
	* This function is like pcmk__formatted_printf(), except it takes a va_list instead
	* of a list of arguments. This should be used when implementing custom message
	* functions instead of vprintf.
	*
	* \param[in,out] out The output functions structure.
	* \param[in] format The format string.
	* \param[in] args A list of arguments to apply to the format string.
	*/
	void
	pcmk__formatted_vprintf(pcmk__output_t out, const char format, va_list args) G_GNUC_PRINTF(2, 0);

	/*!
	* \internal
	* \brief Prompt the user for input.
	*
	* \param[in] prompt The prompt to display
	* \param[in] echo If true, echo the user's input to the screen. Set
	* to false for password entry.
	* \param[out] dest Where to store the user's response.
	*/
	void
	pcmk__text_prompt(const char prompt, bool echo, char *dest);

	/*!
	* \internal
	* \brief Set the log level used by the formatted output logger.
	*
	* \param[in,out] out The output functions structure.
	* \param[in] log_level The log level constant (LOG_INFO, LOG_ERR, etc.)
	* to use.
	*
	* \note By default, LOG_INFO is used.
	* \note Almost all formatted output messages will respect this setting.
	* However, out->err will always log at LOG_ERR.
	*/
	void
	pcmk__output_set_log_level(pcmk__output_t *out, int log_level);

	/*!
	* \internal
	* \brief Create and return a new XML node with the given name, as a child of the
	* current list parent. The new node is then added as the new list parent,
	* meaning all subsequent nodes will be its children. This is used when
	* implementing custom functions.
	*
	* \param[in,out] out The output functions structure.
	* \param[in] name The name of the node to be created.
	* \param[in] ... Name/value pairs to set as XML properties.
	*/
	xmlNodePtr
	pcmk__output_xml_create_parent(pcmk__output_t out, const char name, ...)
	G_GNUC_NULL_TERMINATED;

	/*!
	* \internal
	* \brief Add the given node as a child of the current list parent. This is
	* used when implementing custom message functions.
	*
	* \param[in,out] out The output functions structure.
	* \param[in] node An XML node to be added as a child.
	*/
	void
	pcmk__output_xml_add_node(pcmk__output_t *out, xmlNodePtr node);

	/*!
	* \internal
	* \brief Create and return a new XML node with the given name, as a child of the
	* current list parent. This is used when implementing custom functions.
	*
	* \param[in,out] out The output functions structure.
	* \param[in] name The name of the node to be created.
	* \param[in] ... Name/value pairs to set as XML properties.
	*/
	xmlNodePtr
	pcmk__output_create_xml_node(pcmk__output_t out, const char name, ...)
	G_GNUC_NULL_TERMINATED;

	/*!
	* \internal
	* \brief Like pcmk__output_create_xml_node(), but add the given text content to the
	* new node.
	*
	* \param[in,out] out The output functions structure.
	* \param[in] name The name of the node to be created.
	* \param[in] content The text content of the node.
	*/
	xmlNodePtr
	pcmk__output_create_xml_text_node(pcmk__output_t out, const char name, const char *content);

	/*!
	* \internal
	* \brief Push a parent XML node onto the stack. This is used when implementing
	* custom message functions.
	*
	* The XML output formatter maintains an internal stack to keep track of which nodes
	* are parents in order to build up the tree structure. This function can be used
	* to temporarily push a new node onto the stack. After calling this function, any
	* other formatting functions will have their nodes added as children of this new
	* parent.
	*
	* \param[in,out] out The output functions structure.
	* \param[in] node The node to be added/
	*/
	void
	pcmk__output_xml_push_parent(pcmk__output_t *out, xmlNodePtr node);

	/*!
	* \internal
	* \brief Pop a parent XML node onto the stack. This is used when implementing
	* custom message functions.
	*
	* This function removes a parent node from the stack. See pcmk__xml_push_parent()
	* for more details.
	*
	* \note Little checking is done with this function. Be sure you only pop parents
	* that were previously pushed. In general, it is best to keep the code between
	* push and pop simple.
	*
	* \param[in,out] out The output functions structure.
	*/
	void
	pcmk__output_xml_pop_parent(pcmk__output_t *out);

	/*!
	* \internal
	* \brief Peek a parent XML node onto the stack. This is used when implementing
	* custom message functions.
	*
	* This function peeks a parent node on stack. See pcmk__xml_push_parent()
	* for more details. It has no side-effect and can be called for an empty stack.
	*
	* \note Little checking is done with this function.
	*
	* \param[in,out] out The output functions structure.
	*
	* \return NULL if stack is empty, otherwise the parent of the stack.
	*/
	xmlNodePtr
	pcmk__output_xml_peek_parent(pcmk__output_t *out);

	/*!
	* \internal
	* \brief Create a new XML node consisting of the provided text inside an HTML
	* element node of the given name.
	*
	* \param[in,out] out The output functions structure.
	* \param[in] element_name The name of the new HTML element.
	* \param[in] id The CSS ID selector to apply to this element.
	* If NULL, no ID is added.
	* \param[in] class_name The CSS class selector to apply to this element.
	* If NULL, no class is added.
	* \param[in] text The text content of the node.
	*/
	xmlNodePtr
	pcmk__output_create_html_node(pcmk__output_t out, const char element_name, const char *id,
	const char class_name, const char text);

	/*!
	* \internal
	* \brief Add an HTML tag to the <head> section.
	*
	* The arguments after name are a NULL-terminated list of keys and values,
	* all of which will be added as attributes to the given tag. For instance,
	* the following code would generate the tag "<meta http-equiv='refresh' content='19'>":
	*
	* \code
	* pcmk__html_add_header("meta", "http-equiv", "refresh", "content", "19", NULL);
	* \endcode
	*
	* \param[in] name The HTML tag for the new node.
	* \param[in] ... A NULL-terminated key/value list of attributes.
	*/
	void
	pcmk__html_add_header(const char *name, ...)
	G_GNUC_NULL_TERMINATED;

	/*!
	* \internal
	* \brief Handle end-of-program error reporting
	*
	* \param[in,out] error A GError object potentially containing some error.
	* If NULL, do nothing.
	* \param[in] out The output functions structure. If NULL, any errors
	* will simply be printed to stderr.
	*/
	void pcmk__output_and_clear_error(GError error, pcmk__output_t out);

	+int pcmk__xml_output_new(pcmk__output_t *out, xmlNodePtr xml);
	+void pcmk__xml_output_finish(pcmk__output_t out, xmlNodePtr xml);
	+pcmk__output_t *pcmk__new_logger(void);
	+
	#define PCMK__OUTPUT_SPACER_IF(out_obj, cond) \
	if (cond) { \
	out->spacer(out); \
	}

	#define PCMK__OUTPUT_LIST_HEADER(out_obj, cond, retcode, title...) \
	if (retcode == pcmk_rc_no_output) { \
	PCMK__OUTPUT_SPACER_IF(out_obj, cond); \
	retcode = pcmk_rc_ok; \
	out_obj->begin_list(out_obj, NULL, NULL, title); \
	}

	#define PCMK__OUTPUT_LIST_FOOTER(out_obj, retcode) \
	if (retcode == pcmk_rc_ok) { \
	out_obj->end_list(out_obj); \
	}

	#ifdef __cplusplus
	}
	#endif

	#endif
	diff --git a/include/crm/common/results.h b/include/crm/common/results.h
	index 62bf02b6e3..4f5415f768 100644
	--- a/include/crm/common/results.h
	+++ b/include/crm/common/results.h
	@@ -1,364 +1,365 @@
	/*
	- * Copyright 2012-2021 the Pacemaker project contributors
	+ * Copyright 2012-2022 the Pacemaker project contributors
	*
	* The version control history for this file may have further details.
	*
	* This source code is licensed under the GNU Lesser General Public License
	* version 2.1 or later (LGPLv2.1+) WITHOUT ANY WARRANTY.
	*/
	#ifndef PCMK__CRM_COMMON_RESULTS__H
	# define PCMK__CRM_COMMON_RESULTS__H

	#ifdef __cplusplus
	extern "C" {
	#endif

	/*!
	* \file
	* \brief Function and executable result codes
	* \ingroup core
	*/

	// Lifted from config.h
	/* The _Noreturn keyword of C11. */
	#ifndef _Noreturn
	# if (defined __cplusplus \
	&& ((201103 <= __cplusplus && !(__GNUC__ == 4 && __GNUC_MINOR__ == 7)) \
	\|\| (defined _MSC_VER && 1900 <= _MSC_VER)))
	# define _Noreturn [[noreturn]]
	# elif ((!defined __cplusplus \|\| defined __clang__) \
	&& (201112 <= (defined __STDC_VERSION__ ? __STDC_VERSION__ : 0) \
	\|\| 4 < __GNUC__ + (7 <= __GNUC_MINOR__)))
	/* _Noreturn works as-is. */
	# elif 2 < __GNUC__ + (8 <= __GNUC_MINOR__) \|\| 0x5110 <= __SUNPRO_C
	# define _Noreturn __attribute__ ((__noreturn__))
	# elif 1200 <= (defined _MSC_VER ? _MSC_VER : 0)
	# define _Noreturn __declspec (noreturn)
	# else
	# define _Noreturn
	# endif
	#endif

	# define CRM_ASSERT(expr) do { \
	if (!(expr)) { \
	crm_abort(__FILE__, __func__, __LINE__, #expr, TRUE, FALSE); \
	abort(); /* crm_abort() doesn't always abort! */ \
	} \
	} while(0)

	/*
	* Function return codes
	*
	* Most Pacemaker API functions return an integer return code. There are two
	* alternative interpretations. The legacy interpration is that the absolute
	* value of the return code is either a system error number or a custom
	* pcmk_err_* number. This is less than ideal because system error numbers are
	* constrained only to the positive int range, so there's the possibility that
	* system errors and custom errors could collide (which did in fact happen
	* already on one architecture). The new intepretation is that negative values
	* are from the pcmk_rc_e enum, and positive values are system error numbers.
	* Both use 0 for success.
	*
	* For system error codes, see:
	* - /usr/include/asm-generic/errno.h
	* - /usr/include/asm-generic/errno-base.h
	*/

	// Legacy custom return codes for Pacemaker API functions (deprecated)
	# define pcmk_ok 0
	# define PCMK_ERROR_OFFSET 190 /* Replacements on non-linux systems, see include/portability.h */
	# define PCMK_CUSTOM_OFFSET 200 /* Purely custom codes */
	# define pcmk_err_generic 201
	# define pcmk_err_no_quorum 202
	# define pcmk_err_schema_validation 203
	# define pcmk_err_transform_failed 204
	# define pcmk_err_old_data 205
	# define pcmk_err_diff_failed 206
	# define pcmk_err_diff_resync 207
	# define pcmk_err_cib_modified 208
	# define pcmk_err_cib_backup 209
	# define pcmk_err_cib_save 210
	# define pcmk_err_schema_unchanged 211
	# define pcmk_err_cib_corrupt 212
	# define pcmk_err_multiple 213
	# define pcmk_err_node_unknown 214
	# define pcmk_err_already 215
	/* On HPPA 215 is ENOSYM (Unknown error 215), which hopefully never happens. */
	#ifdef __hppa__
	# define pcmk_err_bad_nvpair 250 /* 216 is ENOTSOCK */
	# define pcmk_err_unknown_format 252 /* 217 is EDESTADDRREQ */
	#else
	# define pcmk_err_bad_nvpair 216
	# define pcmk_err_unknown_format 217
	#endif

	/*!
	* \enum pcmk_rc_e
	* \brief Return codes for Pacemaker API functions
	*
	* Any Pacemaker API function documented as returning a "standard Pacemaker
	* return code" will return pcmk_rc_ok (0) on success, and one of this
	* enumeration's other (negative) values or a (positive) system error number
	* otherwise. The custom codes are at -1001 and lower, so that the caller may
	* use -1 through -1000 for their own custom values if desired. While generally
	* referred to as "errors", nonzero values simply indicate a result, which might
	* or might not be an error depending on the calling context.
	*/
	enum pcmk_rc_e {
	/* When adding new values, use consecutively lower numbers, update the array
	* in lib/common/results.c, and test with crm_error.
	*/
	pcmk_rc_invalid_transition = -1031,
	pcmk_rc_graph_error = -1030,
	pcmk_rc_dot_error = -1029,
	pcmk_rc_underflow = -1028,
	pcmk_rc_no_input = -1027,
	pcmk_rc_no_output = -1026,
	pcmk_rc_after_range = -1025,
	pcmk_rc_within_range = -1024,
	pcmk_rc_before_range = -1023,
	pcmk_rc_undetermined = -1022,
	pcmk_rc_op_unsatisfied = -1021,
	pcmk_rc_ipc_pid_only = -1020,
	pcmk_rc_ipc_unresponsive = -1019,
	pcmk_rc_ipc_unauthorized = -1018,
	pcmk_rc_no_quorum = -1017,
	pcmk_rc_schema_validation = -1016,
	pcmk_rc_schema_unchanged = -1015,
	pcmk_rc_transform_failed = -1014,
	pcmk_rc_old_data = -1013,
	pcmk_rc_diff_failed = -1012,
	pcmk_rc_diff_resync = -1011,
	pcmk_rc_cib_modified = -1010,
	pcmk_rc_cib_backup = -1009,
	pcmk_rc_cib_save = -1008,
	pcmk_rc_cib_corrupt = -1007,
	pcmk_rc_multiple = -1006,
	pcmk_rc_node_unknown = -1005,
	pcmk_rc_already = -1004,
	pcmk_rc_bad_nvpair = -1003,
	pcmk_rc_unknown_format = -1002,
	// Developers: Use a more specific code than pcmk_rc_error whenever possible
	pcmk_rc_error = -1001,

	// Values -1 through -1000 reserved for caller use

	pcmk_rc_ok = 0

	// Positive values reserved for system error numbers
	};


	/*!
	* \enum ocf_exitcode
	* \brief Exit status codes for resource agents
	*
	* The OCF Resource Agent API standard enumerates the possible exit status codes
	* that agents should return. Besides being used with OCF agents, these values
	* are also used by the executor as a universal status for all agent standards;
	* actual results are mapped to these before returning them to clients.
	*/
	enum ocf_exitcode {
	PCMK_OCF_OK = 0, //!< Success
	PCMK_OCF_UNKNOWN_ERROR = 1, //!< Unspecified error
	PCMK_OCF_INVALID_PARAM = 2, //!< Parameter invalid (in local context)
	PCMK_OCF_UNIMPLEMENT_FEATURE = 3, //!< Requested action not implemented
	PCMK_OCF_INSUFFICIENT_PRIV = 4, //!< Insufficient privileges
	PCMK_OCF_NOT_INSTALLED = 5, //!< Dependencies not available locally
	PCMK_OCF_NOT_CONFIGURED = 6, //!< Parameter invalid (inherently)
	PCMK_OCF_NOT_RUNNING = 7, //!< Service safely stopped
	PCMK_OCF_RUNNING_PROMOTED = 8, //!< Service active and promoted
	PCMK_OCF_FAILED_PROMOTED = 9, //!< Service failed and possibly in promoted role
	PCMK_OCF_DEGRADED = 190, //!< Service active but more likely to fail soon
	PCMK_OCF_DEGRADED_PROMOTED = 191, //!< Service promoted but more likely to fail soon

	/* These two are Pacemaker extensions, not in the OCF standard. The
	* controller records PCMK_OCF_UNKNOWN for pending actions.
	* PCMK_OCF_CONNECTION_DIED is used only with older DCs that don't support
	* PCMK_EXEC_NOT_CONNECTED.
	- *
	- * @TODO PCMK_OCF_UNKNOWN should be deprecated, and an execution status of
	- * PCMK_EXEC_PENDING relied on instead (though it might be worthwhile to
	- * keep PCMK_OCF_UNKNOWN as an invalid value for initializing new action
	- * objects). However, backward compatibility must be considered (processing
	- * old saved CIB files, rolling upgrades with older DCs, older
	- * Pacemaker Remote nodes or connection hosts, and older bundles).
	*/
	PCMK_OCF_CONNECTION_DIED = 189, //!< \deprecated See PCMK_EXEC_NOT_CONNECTED
	PCMK_OCF_UNKNOWN = 193, //!< Action is pending

	#if !defined(PCMK_ALLOW_DEPRECATED) \|\| (PCMK_ALLOW_DEPRECATED == 1)
	// Former Pacemaker extensions
	PCMK_OCF_EXEC_ERROR = 192, //!< \deprecated (Unused)
	PCMK_OCF_SIGNAL = 194, //!< \deprecated (Unused)
	PCMK_OCF_NOT_SUPPORTED = 195, //!< \deprecated (Unused)
	PCMK_OCF_PENDING = 196, //!< \deprecated (Unused)
	PCMK_OCF_CANCELLED = 197, //!< \deprecated (Unused)
	PCMK_OCF_TIMEOUT = 198, //!< \deprecated (Unused)
	PCMK_OCF_OTHER_ERROR = 199, //!< \deprecated (Unused)

	//! \deprecated Use PCMK_OCF_RUNNING_PROMOTED instead
	PCMK_OCF_RUNNING_MASTER = PCMK_OCF_RUNNING_PROMOTED,

	//! \deprecated Use PCMK_OCF_FAILED_PROMOTED instead
	PCMK_OCF_FAILED_MASTER = PCMK_OCF_FAILED_PROMOTED,

	//! \deprecated Use PCMK_OCF_DEGRADED_PROMOTED instead
	PCMK_OCF_DEGRADED_MASTER = PCMK_OCF_DEGRADED_PROMOTED,
	#endif
	};

	/*!
	* \enum crm_exit_e
	* \brief Exit status codes for tools and daemons
	*
	* We want well-specified (i.e. OS-invariant) exit status codes for our daemons
	* and applications so they can be relied on by callers. (Function return codes
	* and errno's do not make good exit statuses.)
	*
	* The only hard rule is that exit statuses must be between 0 and 255; all else
	* is convention. Universally, 0 is success, and 1 is generic error (excluding
	* OSes we don't support -- for example, OpenVMS considers 1 success!).
	*
	* For init scripts, the LSB gives meaning to 0-7, and sets aside 150-199 for
	* application use. OCF adds 8-9 and 190-191.
	*
	* sysexits.h was an attempt to give additional meanings, but never really
	* caught on. It uses 0 and 64-78.
	*
	* Bash reserves 2 ("incorrect builtin usage") and 126-255 (126 is "command
	* found but not executable", 127 is "command not found", 128 + n is
	* "interrupted by signal n").
	*
	* tldp.org recommends 64-113 for application use.
	*
	* We try to overlap with the above conventions when practical.
	*/
	typedef enum crm_exit_e {
	// Common convention
	CRM_EX_OK = 0, //!< Success
	CRM_EX_ERROR = 1, //!< Unspecified error

	// LSB + OCF
	CRM_EX_INVALID_PARAM = 2, //!< Parameter invalid (in local context)
	CRM_EX_UNIMPLEMENT_FEATURE = 3, //!< Requested action not implemented
	CRM_EX_INSUFFICIENT_PRIV = 4, //!< Insufficient privileges
	CRM_EX_NOT_INSTALLED = 5, //!< Dependencies not available locally
	CRM_EX_NOT_CONFIGURED = 6, //!< Parameter invalid (inherently)
	CRM_EX_NOT_RUNNING = 7, //!< Service safely stopped
	+ CRM_EX_PROMOTED = 8, //!< Service active and promoted
	+ CRM_EX_FAILED_PROMOTED = 9, //!< Service failed and possibly promoted

	// sysexits.h
	CRM_EX_USAGE = 64, //!< Command line usage error
	CRM_EX_DATAERR = 65, //!< User-supplied data incorrect
	CRM_EX_NOINPUT = 66, //!< Input file not available
	CRM_EX_NOUSER = 67, //!< User does not exist
	CRM_EX_NOHOST = 68, //!< Host unknown
	CRM_EX_UNAVAILABLE = 69, //!< Needed service unavailable
	CRM_EX_SOFTWARE = 70, //!< Internal software bug
	CRM_EX_OSERR = 71, //!< External (OS/environmental) problem
	CRM_EX_OSFILE = 72, //!< System file not usable
	CRM_EX_CANTCREAT = 73, //!< File couldn't be created
	CRM_EX_IOERR = 74, //!< File I/O error
	CRM_EX_TEMPFAIL = 75, //!< Try again
	CRM_EX_PROTOCOL = 76, //!< Protocol violated
	CRM_EX_NOPERM = 77, //!< Non-file permission issue
	CRM_EX_CONFIG = 78, //!< Misconfiguration

	// Custom
	CRM_EX_FATAL = 100, //!< Do not respawn
	CRM_EX_PANIC = 101, //!< Panic the local host
	CRM_EX_DISCONNECT = 102, //!< Lost connection to something
	CRM_EX_OLD = 103, //!< Update older than existing config
	CRM_EX_DIGEST = 104, //!< Digest comparison failed
	CRM_EX_NOSUCH = 105, //!< Requested item does not exist
	CRM_EX_QUORUM = 106, //!< Local partition does not have quorum
	CRM_EX_UNSAFE = 107, //!< Requires --force or new conditions
	CRM_EX_EXISTS = 108, //!< Requested item already exists
	CRM_EX_MULTIPLE = 109, //!< Requested item has multiple matches
	CRM_EX_EXPIRED = 110, //!< Requested item has expired
	CRM_EX_NOT_YET_IN_EFFECT = 111, //!< Requested item is not in effect
	CRM_EX_INDETERMINATE = 112, //!< Could not determine status
	CRM_EX_UNSATISFIED = 113, //!< Requested item does not satisfy constraints

	// Other
	CRM_EX_TIMEOUT = 124, //!< Convention from timeout(1)

	/* Anything above 128 overlaps with some shells' use of these values for
	* "interrupted by signal N", and so may be unreliable when detected by
	* shell scripts.
	*/

	// OCF Resource Agent API 1.1
	CRM_EX_DEGRADED = 190, //!< Service active but more likely to fail soon
	CRM_EX_DEGRADED_PROMOTED = 191, //!< Service promoted but more likely to fail soon

	+ /* Custom
	+ *
	+ * This can be used to initialize exit status variables or to indicate that
	+ * a command is pending (which is what the controller uses it for).
	+ */
	+ CRM_EX_NONE = 193, //!< No exit status available
	+
	CRM_EX_MAX = 255, //!< Ensure crm_exit_t can hold this
	} crm_exit_t;

	/*!
	* \enum pcmk_exec_status
	* \brief Execution status
	*
	* These codes are used to specify the result of the attempt to execute an
	* agent, rather than the agent's result itself.
	*/
	enum pcmk_exec_status {
	PCMK_EXEC_UNKNOWN = -2, //!< Used only to initialize variables
	PCMK_EXEC_PENDING = -1, //!< Action is in progress
	PCMK_EXEC_DONE, //!< Action completed, result is known
	PCMK_EXEC_CANCELLED, //!< Action was cancelled
	PCMK_EXEC_TIMEOUT, //!< Action did not complete in time
	PCMK_EXEC_NOT_SUPPORTED, //!< Agent does not implement requested action
	PCMK_EXEC_ERROR, //!< Execution failed, may be retried
	PCMK_EXEC_ERROR_HARD, //!< Execution failed, do not retry on node
	PCMK_EXEC_ERROR_FATAL, //!< Execution failed, do not retry anywhere
	PCMK_EXEC_NOT_INSTALLED, //!< Agent or dependency not available locally
	PCMK_EXEC_NOT_CONNECTED, //!< No connection to executor
	PCMK_EXEC_INVALID, //!< Action cannot be attempted (e.g. shutdown)
	PCMK_EXEC_NO_FENCE_DEVICE, //!< No fence device is configured for target
	PCMK_EXEC_NO_SECRETS, //!< Necessary CIB secrets are unavailable

	// Add new values above here then update this one below
	PCMK_EXEC_MAX = PCMK_EXEC_NO_SECRETS, //!< Maximum value for this enum
	};

	const char *pcmk_rc_name(int rc);
	const char *pcmk_rc_str(int rc);
	crm_exit_t pcmk_rc2exitc(int rc);
	enum ocf_exitcode pcmk_rc2ocf(int rc);
	int pcmk_rc2legacy(int rc);
	int pcmk_legacy2rc(int legacy_rc);
	const char *pcmk_strerror(int rc);
	const char *pcmk_errorname(int rc);
	const char *bz2_strerror(int rc);
	-crm_exit_t crm_errno2exit(int rc);
	const char *crm_exit_name(crm_exit_t exit_code);
	const char *crm_exit_str(crm_exit_t exit_code);
	_Noreturn crm_exit_t crm_exit(crm_exit_t rc);

	static inline const char *
	pcmk_exec_status_str(enum pcmk_exec_status status)
	{
	switch (status) {
	case PCMK_EXEC_PENDING: return "pending";
	case PCMK_EXEC_DONE: return "complete";
	case PCMK_EXEC_CANCELLED: return "Cancelled";
	case PCMK_EXEC_TIMEOUT: return "Timed Out";
	case PCMK_EXEC_NOT_SUPPORTED: return "NOT SUPPORTED";
	case PCMK_EXEC_ERROR: return "Error";
	case PCMK_EXEC_ERROR_HARD: return "Hard error";
	case PCMK_EXEC_ERROR_FATAL: return "Fatal error";
	case PCMK_EXEC_NOT_INSTALLED: return "Not installed";
	case PCMK_EXEC_NOT_CONNECTED: return "Internal communication failure";
	case PCMK_EXEC_INVALID: return "Cannot execute now";
	case PCMK_EXEC_NO_FENCE_DEVICE: return "No fence device";
	case PCMK_EXEC_NO_SECRETS: return "CIB secrets unavailable";
	default: return "UNKNOWN!";
	}
	}

	#ifdef __cplusplus
	}
	#endif

	#endif
	diff --git a/include/crm/common/results_compat.h b/include/crm/common/results_compat.h
	new file mode 100644
	index 0000000000..00ac6b2596
	--- /dev/null
	+++ b/include/crm/common/results_compat.h
	@@ -0,0 +1,35 @@
	+/*
	+ * Copyright 2022 the Pacemaker project contributors
	+ *
	+ * The version control history for this file may have further details.
	+ *
	+ * This source code is licensed under the GNU Lesser General Public License
	+ * version 2.1 or later (LGPLv2.1+) WITHOUT ANY WARRANTY.
	+ */
	+
	+#ifndef PCMK__CRM_COMMON_RESULTS_COMPAT__H
	+# define PCMK__CRM_COMMON_RESULTS_COMPAT__H
	+
	+#include <crm/common/results.h>
	+
	+#ifdef __cplusplus
	+extern "C" {
	+#endif
	+
	+/**
	+ * \file
	+ * \brief Deprecated Pacemaker results API
	+ * \ingroup core
	+ * \deprecated Do not include this header directly. The result APIs in this
	+ * header, and the header itself, will be removed in a future
	+ * release.
	+ */
	+
	+//! \deprecated Use pcmk_rc2exitc(pcmk_legacy2rc(rc)) instead
	+crm_exit_t crm_errno2exit(int rc);
	+
	+#ifdef __cplusplus
	+}
	+#endif
	+
	+#endif // PCMK__CRM_COMMON_MAINLOOP_COMPAT__H
	diff --git a/include/crm/common/xml.h b/include/crm/common/xml.h
	index 2578a64730..9182f55361 100644
	--- a/include/crm/common/xml.h
	+++ b/include/crm/common/xml.h
	@@ -1,309 +1,307 @@
	/*
	- * Copyright 2004-2021 the Pacemaker project contributors
	+ * Copyright 2004-2022 the Pacemaker project contributors
	*
	* The version control history for this file may have further details.
	*
	* This source code is licensed under the GNU Lesser General Public License
	* version 2.1 or later (LGPLv2.1+) WITHOUT ANY WARRANTY.
	*/

	#ifndef PCMK__CRM_COMMON_XML__H
	# define PCMK__CRM_COMMON_XML__H


	# include <stdio.h>
	# include <sys/types.h>
	# include <unistd.h>

	# include <stdlib.h>
	# include <errno.h>
	# include <fcntl.h>

	# include <libxml/tree.h>
	# include <libxml/xpath.h>

	# include <crm/crm.h>
	# include <crm/common/nvpair.h>

	#ifdef __cplusplus
	extern "C" {
	#endif

	/**
	* \file
	* \brief Wrappers for and extensions to libxml2
	* \ingroup core
	*/

	/* Define compression parameters for IPC messages
	*
	* Compression costs a LOT, so we don't want to do it unless we're hitting
	* message limits. Currently, we use 128KB as the threshold, because higher
	* values don't play well with the heartbeat stack. With an earlier limit of
	* 10KB, compressing 184 of 1071 messages accounted for 23% of the total CPU
	* used by the cib.
	*/
	# define CRM_BZ2_BLOCKS 4
	# define CRM_BZ2_WORK 20
	# define CRM_BZ2_THRESHOLD 128 * 1024

	-# define XML_PARANOIA_CHECKS 0
	-
	typedef const xmlChar *pcmkXmlStr;

	gboolean add_message_xml(xmlNode * msg, const char field, xmlNode xml);
	xmlNode get_message_xml(xmlNode msg, const char *field);

	xmlDoc getDocPtr(xmlNode node);

	/*
	* Replacement function for xmlCopyPropList which at the very least,
	* doesn't work the way I would expect it to.
	*
	* Copy all the attributes/properties from src into target.
	*
	* Not recursive, does not return anything.
	*
	*/
	void copy_in_properties(xmlNode * target, xmlNode * src);
	void expand_plus_plus(xmlNode * target, const char name, const char value);
	void fix_plus_plus_recursive(xmlNode * target);

	/*
	* Create a node named "name" as a child of "parent"
	* If parent is NULL, creates an unconnected node.
	*
	* Returns the created node
	*
	*/
	xmlNode create_xml_node(xmlNode parent, const char *name);

	/*
	* Create a node named "name" as a child of "parent", giving it the provided
	* text content.
	* If parent is NULL, creates an unconnected node.
	*
	* Returns the created node
	*
	*/
	xmlNode pcmk_create_xml_text_node(xmlNode parent, const char name, const char content);

	/*
	* Create a new HTML node named "element_name" as a child of "parent", giving it the
	* provided text content. Optionally, apply a CSS #id and #class.
	*
	* Returns the created node.
	*/
	xmlNode pcmk_create_html_node(xmlNode parent, const char element_name, const char id,
	const char class_name, const char text);

	/*
	*
	*/
	void purge_diff_markers(xmlNode * a_node);

	/*
	* Returns a deep copy of src_node
	*
	*/
	xmlNode copy_xml(xmlNode src_node);

	/*
	* Add a copy of xml_node to new_parent
	*/
	xmlNode add_node_copy(xmlNode new_parent, xmlNode * xml_node);

	int add_node_nocopy(xmlNode * parent, const char name, xmlNode child);

	/*
	* XML I/O Functions
	*
	* Whitespace between tags is discarded.
	*/
	xmlNode filename2xml(const char filename);

	xmlNode *stdin2xml(void);

	xmlNode string2xml(const char input);

	int write_xml_fd(xmlNode * xml_node, const char *filename, int fd, gboolean compress);
	int write_xml_file(xmlNode * xml_node, const char *filename, gboolean compress);

	char dump_xml_formatted(xmlNode msg);
	/* Also dump the text node with xml_log_option_text enabled */
	char dump_xml_formatted_with_text(xmlNode msg);

	char dump_xml_unformatted(xmlNode msg);

	/*
	* Diff related Functions
	*/
	xmlNode diff_xml_object(xmlNode left, xmlNode * right, gboolean suppress);

	xmlNode subtract_xml_object(xmlNode parent, xmlNode * left, xmlNode * right,
	gboolean full, gboolean * changed, const char *marker);

	gboolean can_prune_leaf(xmlNode * xml_node);

	/*
	* Searching & Modifying
	*/
	xmlNode find_xml_node(xmlNode cib, const char *node_path, gboolean must_find);

	void xml_remove_prop(xmlNode * obj, const char *name);

	gboolean replace_xml_child(xmlNode * parent, xmlNode * child, xmlNode * update,
	gboolean delete_only);

	gboolean update_xml_child(xmlNode * child, xmlNode * to_update);

	int find_xml_children(xmlNode ** children, xmlNode * root,
	const char tag, const char field, const char *value,
	gboolean search_matches);

	xmlNode get_xpath_object(const char xpath, xmlNode * xml_obj, int error_level);
	xmlNode get_xpath_object_relative(const char xpath, xmlNode * xml_obj, int error_level);

	static inline const char *
	crm_element_name(const xmlNode *xml)
	{
	return xml? (const char *)(xml->name) : NULL;
	}

	static inline const char *
	crm_map_element_name(const xmlNode *xml)
	{
	const char *name = crm_element_name(xml);

	if (strcmp(name, "master") == 0) {
	return "clone";
	} else {
	return name;
	}
	}

	gboolean xml_has_children(const xmlNode * root);

	char calculate_on_disk_digest(xmlNode local_cib);
	char calculate_operation_digest(xmlNode local_cib, const char *version);
	char calculate_xml_versioned_digest(xmlNode input, gboolean sort, gboolean do_filter,
	const char *version);

	/* schema-related functions (from schemas.c) */
	gboolean validate_xml(xmlNode * xml_blob, const char *validation, gboolean to_logs);
	gboolean validate_xml_verbose(xmlNode * xml_blob);

	/*!
	* \brief Update CIB XML to most recent schema version
	*
	* "Update" means either actively employ XSLT-based transformation(s)
	* (if intermediate product to transform valid per its declared schema version,
	* transformation available, proceeded successfully with a result valid per
	* expectated newer schema version), or just try to bump the marked validating
	* schema until all gradually rising schema versions attested or the first
	* such attempt subsequently fails to validate. Which of the two styles will
	* be used depends on \p transform parameter (positive/negative, respectively).
	*
	* \param[in,out] xml_blob XML tree representing CIB, may be swapped with
	* an "updated" one
	* \param[out] best The highest configuration version (per its index
	* in the global schemas table) it was possible to
	* reach during the update steps while ensuring
	* the validity of the result; if no validation
	* success was observed against possibly multiple
	* schemas, the value is less or equal the result
	* of \c get_schema_version applied on the input
	* \p xml_blob value (unless that function maps it
	* to -1, then 0 would be used instead)
	* \param[in] max When \p transform is positive, this allows to
	* set upper boundary schema (per its index in the
	* global schemas table) beyond which it's forbidden
	* to update by the means of XSLT transformation
	* \param[in] transform Whether to employ XSLT-based transformation so
	* as to allow overcoming possible incompatibilities
	* between major schema versions (see above)
	* \param[in] to_logs If true, output notable progress info to
	* internal log streams; if false, to stderr
	*
	* \return \c pcmk_ok if no non-recoverable error encountered (up to
	* caller to evaluate if the update satisfies the requirements
	* per returned \p best value), negative value carrying the reason
	* otherwise
	*/
	int update_validation(xmlNode *xml_blob, int best, int max,
	gboolean transform, gboolean to_logs);

	int get_schema_version(const char *name);
	const char *get_schema_name(int version);
	const char *xml_latest_schema(void);
	gboolean cli_config_update(xmlNode ** xml, int *best_version, gboolean to_logs);

	/*!
	* \brief Initialize the CRM XML subsystem
	*
	* This method sets global XML settings and loads pacemaker schemas into the cache.
	*/
	void crm_xml_init(void);
	void crm_xml_cleanup(void);

	void pcmk_free_xml_subtree(xmlNode *xml);
	void free_xml(xmlNode * child);

	xmlNode first_named_child(const xmlNode parent, const char *name);
	xmlNode crm_next_same_xml(const xmlNode sibling);

	xmlNode sorted_xml(xmlNode input, xmlNode * parent, gboolean recursive);
	xmlXPathObjectPtr xpath_search(xmlNode * xml_top, const char *path);
	void crm_foreach_xpath_result(xmlNode xml, const char xpath,
	void (helper)(xmlNode, void), void user_data);
	xmlNode expand_idref(xmlNode input, xmlNode * top);

	void freeXpathObject(xmlXPathObjectPtr xpathObj);
	xmlNode *getXpathResult(xmlXPathObjectPtr xpathObj, int index);
	void dedupXpathResults(xmlXPathObjectPtr xpathObj);

	static inline int numXpathResults(xmlXPathObjectPtr xpathObj)
	{
	if(xpathObj == NULL \|\| xpathObj->nodesetval == NULL) {
	return 0;
	}
	return xpathObj->nodesetval->nodeNr;
	}

	bool xml_tracking_changes(xmlNode * xml);
	bool xml_document_dirty(xmlNode *xml);
	void xml_track_changes(xmlNode * xml, const char user, xmlNode acl_source, bool enforce_acls);
	void xml_calculate_changes(xmlNode old_xml, xmlNode new_xml);
	void xml_calculate_significant_changes(xmlNode old_xml, xmlNode new_xml);
	void xml_accept_changes(xmlNode * xml);
	void xml_log_changes(uint8_t level, const char function, xmlNode xml);
	void xml_log_patchset(uint8_t level, const char function, xmlNode xml);
	bool xml_patch_versions(xmlNode *patchset, int add[3], int del[3]);

	xmlNode *xml_create_patchset(
	int format, xmlNode source, xmlNode target, bool *config, bool manage_version);
	int xml_apply_patchset(xmlNode xml, xmlNode patchset, bool check_version);

	void patchset_process_digest(xmlNode patch, xmlNode source, xmlNode *target, bool with_digest);

	void save_xml_to_file(xmlNode * xml, const char desc, const char filename);
	char xml_get_path(xmlNode xml);

	char * crm_xml_escape(const char *text);
	void crm_xml_sanitize_id(char *id);
	void crm_xml_set_id(xmlNode xml, const char format, ...) G_GNUC_PRINTF(2, 3);

	/*!
	* \brief xmlNode destructor which can be used in glib collections
	*/
	void crm_destroy_xml(gpointer data);

	#if !defined(PCMK_ALLOW_DEPRECATED) \|\| (PCMK_ALLOW_DEPRECATED == 1)
	#include <crm/common/xml_compat.h>
	#endif

	#ifdef __cplusplus
	}
	#endif

	#endif
	diff --git a/include/crm/common/xml_compat.h b/include/crm/common/xml_compat.h
	index ecfe4a5f6a..c79852d2b3 100644
	--- a/include/crm/common/xml_compat.h
	+++ b/include/crm/common/xml_compat.h
	@@ -1,47 +1,50 @@
	/*
	* Copyright 2004-2022 the Pacemaker project contributors
	*
	* The version control history for this file may have further details.
	*
	* This source code is licensed under the GNU Lesser General Public License
	* version 2.1 or later (LGPLv2.1+) WITHOUT ANY WARRANTY.
	*/

	#ifndef PCMK__CRM_COMMON_XML_COMPAT__H
	# define PCMK__CRM_COMMON_XML_COMPAT__H

	#include <glib.h> // gboolean
	#include <libxml/tree.h> // xmlNode
	#include <crm/common/xml.h> // crm_xml_add()

	#ifdef __cplusplus
	extern "C" {
	#endif

	/**
	* \file
	* \brief Deprecated Pacemaker XML API
	* \ingroup core
	* \deprecated Do not include this header directly. The XML APIs in this
	* header, and the header itself, will be removed in a future
	* release.
	*/

	+//! \deprecated Do not use (will be removed in a future release)
	+#define XML_PARANOIA_CHECKS 0
	+
	//! \deprecated This function will be removed in a future release
	xmlNode find_entity(xmlNode parent, const char node_name, const char id);

	//! \deprecated Use xml_apply_patchset() instead
	gboolean apply_xml_diff(xmlNode old_xml, xmlNode diff, xmlNode **new_xml);

	//! \deprecated Use crm_xml_add() with "true" or "false" instead
	static inline const char *
	crm_xml_add_boolean(xmlNode node, const char name, gboolean value)
	{
	return crm_xml_add(node, name, (value? "true" : "false"));
	}

	#ifdef __cplusplus
	}
	#endif

	#endif // PCMK__CRM_COMMON_XML_COMPAT__H
	diff --git a/include/pcmki/pcmki_output.h b/include/pcmki/pcmki_output.h
	index 1987138606..a2a8085548 100644
	--- a/include/pcmki/pcmki_output.h
	+++ b/include/pcmki/pcmki_output.h
	@@ -1,39 +1,32 @@
	/*
	- * Copyright 2019-2021 the Pacemaker project contributors
	+ * Copyright 2019-2022 the Pacemaker project contributors
	*
	* The version control history for this file may have further details.
	*
	* This source code is licensed under the GNU Lesser General Public License
	* version 2.1 or later (LGPLv2.1+) WITHOUT ANY WARRANTY.
	*/
	#ifndef PCMK__PCMKI_PCMKI_OUTPUT__H
	# define PCMK__PCMKI_PCMKI_OUTPUT__H

	# include <libxml/tree.h>
	# include <crm/common/output_internal.h>

	#ifdef __cplusplus
	extern "C" {
	#endif

	-extern pcmk__supported_format_t pcmk__out_formats[];
	-
	-int pcmk__out_prologue(pcmk__output_t *out, xmlNodePtr xml);
	-void pcmk__out_epilogue(pcmk__output_t out, xmlNodePtr xml, int retval);
	-
	/* This function registers only the formatted output messages that are a part
	* of libpacemaker. It is not to be confused with pcmk__register_messages,
	* which is a part of formatted output support and registers a whole table of
	* messages at a time.
	*/
	void pcmk__register_lib_messages(pcmk__output_t *out);

	int pcmk__cluster_status_text(pcmk__output_t *out, va_list args);

	-pcmk__output_t *pcmk__new_logger(void);
	-
	#ifdef __cplusplus
	}
	#endif

	#endif
	diff --git a/lib/common/iso8601.c b/lib/common/iso8601.c
	index 1f70940166..1b2863e02d 100644
	--- a/lib/common/iso8601.c
	+++ b/lib/common/iso8601.c
	@@ -1,1794 +1,1804 @@
	/*
	* Copyright 2005-2022 the Pacemaker project contributors
	*
	* The version control history for this file may have further details.
	*
	* This source code is licensed under the GNU Lesser General Public License
	* version 2.1 or later (LGPLv2.1+) WITHOUT ANY WARRANTY.
	*/

	/*
	* References:
	* https://en.wikipedia.org/wiki/ISO_8601
	* http://www.staff.science.uu.nl/~gent0113/calendar/isocalendar.htm
	*/

	#include <crm_internal.h>
	#include <crm/crm.h>
	#include <time.h>
	#include <ctype.h>
	#include <string.h>
	#include <stdbool.h>
	#include <crm/common/iso8601.h>

	/*
	* Andrew's code was originally written for OSes whose "struct tm" contains:
	* long tm_gmtoff; :: Seconds east of UTC
	* const char *tm_zone; :: Timezone abbreviation
	* Some OSes lack these, instead having:
	* time_t (or long) timezone;
	:: "difference between UTC and local standard time"
	* char *tzname[2] = { "...", "..." };
	* I (David Lee) confess to not understanding the details. So my attempted
	* generalisations for where their use is necessary may be flawed.
	*
	* 1. Does "difference between ..." subtract the same or opposite way?
	* 2. Should it use "altzone" instead of "timezone"?
	* 3. Should it use tzname[0] or tzname[1]? Interaction with timezone/altzone?
	*/
	#if defined(HAVE_STRUCT_TM_TM_GMTOFF)
	# define GMTOFF(tm) ((tm)->tm_gmtoff)
	#else
	/* Note: extern variable; macro argument not actually used. */
	# define GMTOFF(tm) (-timezone+daylight)
	#endif

	#define HOUR_SECONDS (60 * 60)
	#define DAY_SECONDS (HOUR_SECONDS * 24)

	// A date/time or duration
	struct crm_time_s {
	int years; // Calendar year (date/time) or number of years (duration)
	int months; // Number of months (duration only)
	int days; // Ordinal day of year (date/time) or number of days (duration)
	int seconds; // Seconds of day (date/time) or number of seconds (duration)
	int offset; // Seconds offset from UTC (date/time only)
	bool duration; // True if duration
	};

	static crm_time_t parse_date(const char date_str);

	static crm_time_t *
	crm_get_utc_time(crm_time_t *dt)
	{
	crm_time_t *utc = NULL;

	if (dt == NULL) {
	errno = EINVAL;
	return NULL;
	}

	utc = crm_time_new_undefined();
	utc->years = dt->years;
	utc->days = dt->days;
	utc->seconds = dt->seconds;
	utc->offset = 0;

	if (dt->offset) {
	crm_time_add_seconds(utc, -dt->offset);
	} else {
	/* Durations (which are the only things that can include months, never have a timezone */
	utc->months = dt->months;
	}

	crm_time_log(LOG_TRACE, "utc-source", dt,
	crm_time_log_date \| crm_time_log_timeofday \| crm_time_log_with_timezone);
	crm_time_log(LOG_TRACE, "utc-target", utc,
	crm_time_log_date \| crm_time_log_timeofday \| crm_time_log_with_timezone);
	return utc;
	}

	crm_time_t *
	crm_time_new(const char *date_time)
	{
	time_t tm_now;
	crm_time_t *dt = NULL;

	tzset();
	if (date_time == NULL) {
	tm_now = time(NULL);
	dt = crm_time_new_undefined();
	crm_time_set_timet(dt, &tm_now);
	} else {
	dt = parse_date(date_time);
	}
	return dt;
	}

	/*!
	* \brief Allocate memory for an uninitialized time object
	*
	* \return Newly allocated time object
	* \note The caller is responsible for freeing the return value using
	* crm_time_free().
	*/
	crm_time_t *
	crm_time_new_undefined()
	{
	crm_time_t *result = calloc(1, sizeof(crm_time_t));

	CRM_ASSERT(result != NULL);
	return result;
	}

	/*!
	* \brief Check whether a time object has been initialized yet
	*
	* \param[in] t Time object to check
	*
	* \return TRUE if time object has been initialized, FALSE otherwise
	*/
	bool
	crm_time_is_defined(const crm_time_t *t)
	{
	// Any nonzero member indicates something has been done to t
	return (t != NULL) && (t->years \|\| t->months \|\| t->days \|\| t->seconds
	\|\| t->offset \|\| t->duration);
	}

	void
	crm_time_free(crm_time_t * dt)
	{
	if (dt == NULL) {
	return;
	}
	free(dt);
	}

	static int
	year_days(int year)
	{
	int d = 365;

	if (crm_time_leapyear(year)) {
	d++;
	}
	return d;
	}

	/* From http://myweb.ecu.edu/mccartyr/ISOwdALG.txt :
	*
	* 5. Find the Jan1Weekday for Y (Monday=1, Sunday=7)
	* YY = (Y-1) % 100
	* C = (Y-1) - YY
	* G = YY + YY/4
	* Jan1Weekday = 1 + (((((C / 100) % 4) x 5) + G) % 7)
	*/
	int
	crm_time_january1_weekday(int year)
	{
	int YY = (year - 1) % 100;
	int C = (year - 1) - YY;
	int G = YY + YY / 4;
	int jan1 = 1 + (((((C / 100) % 4) * 5) + G) % 7);

	crm_trace("YY=%d, C=%d, G=%d", YY, C, G);
	crm_trace("January 1 %.4d: %d", year, jan1);
	return jan1;
	}

	int
	crm_time_weeks_in_year(int year)
	{
	int weeks = 52;
	int jan1 = crm_time_january1_weekday(year);

	/* if jan1 == thursday */
	if (jan1 == 4) {
	weeks++;
	} else {
	jan1 = crm_time_january1_weekday(year + 1);
	/* if dec31 == thursday aka. jan1 of next year is a friday */
	if (jan1 == 5) {
	weeks++;
	}

	}
	return weeks;
	}

	// Jan-Dec plus Feb of leap years
	static int month_days[13] = {
	31, 28, 31, 30, 31, 30, 31, 31, 30, 31, 30, 31, 29
	};

	/*!
	* \brief Return number of days in given month of given year
	*
	* \param[in] Ordinal month (1-12)
	* \param[in] Gregorian year
	*
	* \return Number of days in given month (0 if given month is invalid)
	*/
	int
	crm_time_days_in_month(int month, int year)
	{
	if ((month < 1) \|\| (month > 12)) {
	return 0;
	}
	if ((month == 2) && crm_time_leapyear(year)) {
	month = 13;
	}
	return month_days[month - 1];
	}

	bool
	crm_time_leapyear(int year)
	{
	gboolean is_leap = FALSE;

	if (year % 4 == 0) {
	is_leap = TRUE;
	}
	if (year % 100 == 0 && year % 400 != 0) {
	is_leap = FALSE;
	}
	return is_leap;
	}

	static uint32_t
	get_ordinal_days(uint32_t y, uint32_t m, uint32_t d)
	{
	int lpc;

	for (lpc = 1; lpc < m; lpc++) {
	d += crm_time_days_in_month(lpc, y);
	}
	return d;
	}

	void
	crm_time_log_alias(int log_level, const char file, const char function, int line,
	const char prefix, crm_time_t date_time, int flags)
	{
	char *date_s = crm_time_as_string(date_time, flags);

	if (log_level == LOG_STDOUT) {
	printf("%s%s%s\n",
	(prefix? prefix : ""), (prefix? ": " : ""), date_s);
	} else {
	do_crm_log_alias(log_level, file, function, line, "%s%s%s",
	(prefix? prefix : ""), (prefix? ": " : ""), date_s);
	}
	free(date_s);
	}

	static void
	crm_time_get_sec(int sec, uint * h, uint * m, uint * s)
	{
	uint hours, minutes, seconds;

	if (sec < 0) {
	seconds = 0 - sec;
	} else {
	seconds = sec;
	}

	hours = seconds / HOUR_SECONDS;
	seconds -= HOUR_SECONDS * hours;

	minutes = seconds / 60;
	seconds -= 60 * minutes;

	crm_trace("%d == %.2d:%.2d:%.2d", sec, hours, minutes, seconds);

	*h = hours;
	*m = minutes;
	*s = seconds;
	}

	int
	crm_time_get_timeofday(crm_time_t * dt, uint * h, uint * m, uint * s)
	{
	crm_time_get_sec(dt->seconds, h, m, s);
	return TRUE;
	}

	int
	crm_time_get_timezone(crm_time_t * dt, uint * h, uint * m)
	{
	uint s;

	crm_time_get_sec(dt->seconds, h, m, &s);
	return TRUE;
	}

	long long
	crm_time_get_seconds(crm_time_t * dt)
	{
	int lpc;
	crm_time_t *utc = NULL;
	long long in_seconds = 0;

	if (dt == NULL) {
	return 0;
	}

	utc = crm_get_utc_time(dt);
	if (utc == NULL) {
	return 0;
	}

	for (lpc = 1; lpc < utc->years; lpc++) {
	long long dmax = year_days(lpc);

	in_seconds += DAY_SECONDS * dmax;
	}

	/* utc->months is an offset that can only be set for a duration.
	* By definition, the value is variable depending on the date to
	* which it is applied.
	*
	* Force 30-day months so that something vaguely sane happens
	* for anyone that tries to use a month in this way.
	*/
	if (utc->months > 0) {
	in_seconds += DAY_SECONDS * 30 * (long long) (utc->months);
	}

	if (utc->days > 0) {
	in_seconds += DAY_SECONDS * (long long) (utc->days - 1);
	}
	in_seconds += utc->seconds;

	crm_time_free(utc);
	return in_seconds;
	}

	#define EPOCH_SECONDS 62135596800ULL /* Calculated using crm_time_get_seconds() */
	long long
	crm_time_get_seconds_since_epoch(crm_time_t * dt)
	{
	return (dt == NULL)? 0 : (crm_time_get_seconds(dt) - EPOCH_SECONDS);
	}

	int
	crm_time_get_gregorian(crm_time_t * dt, uint * y, uint * m, uint * d)
	{
	int months = 0;
	int days = dt->days;

	if(dt->years != 0) {
	for (months = 1; months <= 12 && days > 0; months++) {
	int mdays = crm_time_days_in_month(months, dt->years);

	if (mdays >= days) {
	break;
	} else {
	days -= mdays;
	}
	}

	} else if (dt->months) {
	/* This is a duration including months, don't convert the days field */
	months = dt->months;

	} else {
	/* This is a duration not including months, still don't convert the days field */
	}

	*y = dt->years;
	*m = months;
	*d = days;
	crm_trace("%.4d-%.3d -> %.4d-%.2d-%.2d", dt->years, dt->days, dt->years, months, days);
	return TRUE;
	}

	int
	crm_time_get_ordinal(crm_time_t * dt, uint * y, uint * d)
	{
	*y = dt->years;
	*d = dt->days;
	return TRUE;
	}

	int
	crm_time_get_isoweek(crm_time_t * dt, uint * y, uint * w, uint * d)
	{
	/*
	* Monday 29 December 2008 is written "2009-W01-1"
	* Sunday 3 January 2010 is written "2009-W53-7"
	*/
	int year_num = 0;
	int jan1 = crm_time_january1_weekday(dt->years);
	int h = -1;

	CRM_CHECK(dt->days > 0, return FALSE);

	/* 6. Find the Weekday for Y M D */
	h = dt->days + jan1 - 1;
	*d = 1 + ((h - 1) % 7);

	/* 7. Find if Y M D falls in YearNumber Y-1, WeekNumber 52 or 53 */
	if (dt->days <= (8 - jan1) && jan1 > 4) {
	crm_trace("year--, jan1=%d", jan1);
	year_num = dt->years - 1;
	*w = crm_time_weeks_in_year(year_num);

	} else {
	year_num = dt->years;
	}

	/* 8. Find if Y M D falls in YearNumber Y+1, WeekNumber 1 */
	if (year_num == dt->years) {
	int dmax = year_days(year_num);
	int correction = 4 - *d;

	if ((dmax - dt->days) < correction) {
	crm_trace("year++, jan1=%d, i=%d vs. %d", jan1, dmax - dt->days, correction);
	year_num = dt->years + 1;
	*w = 1;
	}
	}

	/* 9. Find if Y M D falls in YearNumber Y, WeekNumber 1 through 53 */
	if (year_num == dt->years) {
	int j = dt->days + (7 - *d) + (jan1 - 1);

	*w = j / 7;
	if (jan1 > 4) {
	*w -= 1;
	}
	}

	*y = year_num;
	crm_trace("Converted %.4d-%.3d to %.4d-W%.2d-%d", dt->years, dt->days, y, w, *d);
	return TRUE;
	}

	#define DATE_MAX 128

	static void
	crm_duration_as_string(crm_time_t dt, char result)
	{
	size_t offset = 0;

	if (dt->years) {
	offset += snprintf(result + offset, DATE_MAX - offset, "%4d year%s ",
	dt->years, pcmk__plural_s(dt->years));
	}
	if (dt->months) {
	offset += snprintf(result + offset, DATE_MAX - offset, "%2d month%s ",
	dt->months, pcmk__plural_s(dt->months));
	}
	if (dt->days) {
	offset += snprintf(result + offset, DATE_MAX - offset, "%2d day%s ",
	dt->days, pcmk__plural_s(dt->days));
	}

	if (((offset == 0) \|\| (dt->seconds != 0))
	&& (dt->seconds > -60) && (dt->seconds < 60)) {
	offset += snprintf(result + offset, DATE_MAX - offset, "%d second%s",
	dt->seconds, pcmk__plural_s(dt->seconds));
	} else if (dt->seconds) {
	uint h = 0, m = 0, s = 0;

	offset += snprintf(result + offset, DATE_MAX - offset, "%d seconds (",
	dt->seconds);
	crm_time_get_sec(dt->seconds, &h, &m, &s);
	if (h) {
	offset += snprintf(result + offset, DATE_MAX - offset, "%u hour%s%s",
	h, pcmk__plural_s(h), ((m \|\| s)? " " : ""));
	}
	if (m) {
	offset += snprintf(result + offset, DATE_MAX - offset, "%u minute%s%s",
	m, pcmk__plural_s(m), (s? " " : ""));
	}
	if (s) {
	offset += snprintf(result + offset, DATE_MAX - offset, "%u second%s",
	s, pcmk__plural_s(s));
	}
	offset += snprintf(result + offset, DATE_MAX - offset, ")");
	}
	}

	char *
	crm_time_as_string(crm_time_t * date_time, int flags)
	{
	crm_time_t *dt = NULL;
	crm_time_t *utc = NULL;
	char result[DATE_MAX] = { '\0', };
	char *result_copy = NULL;
	size_t offset = 0;

	// Convert to UTC if local timezone was not requested
	if (date_time && date_time->offset
	&& !pcmk_is_set(flags, crm_time_log_with_timezone)) {
	crm_trace("UTC conversion");
	utc = crm_get_utc_time(date_time);
	dt = utc;
	} else {
	dt = date_time;
	}

	if (!crm_time_is_defined(dt)) {
	strcpy(result, "<undefined time>");
	goto done;
	}

	// Simple cases: as duration, seconds, or seconds since epoch

	if (flags & crm_time_log_duration) {
	crm_duration_as_string(date_time, result);
	goto done;
	}

	if (flags & crm_time_seconds) {
	snprintf(result, DATE_MAX, "%lld", crm_time_get_seconds(date_time));
	goto done;
	}

	if (flags & crm_time_epoch) {
	snprintf(result, DATE_MAX, "%lld",
	crm_time_get_seconds_since_epoch(date_time));
	goto done;
	}

	// As readable string

	if (flags & crm_time_log_date) {
	if (flags & crm_time_weeks) { // YYYY-WW-D
	uint y, w, d;

	if (crm_time_get_isoweek(dt, &y, &w, &d)) {
	offset += snprintf(result + offset, DATE_MAX - offset,
	"%u-W%.2u-%u", y, w, d);
	}

	} else if (flags & crm_time_ordinal) { // YYYY-DDD
	uint y, d;

	if (crm_time_get_ordinal(dt, &y, &d)) {
	offset += snprintf(result + offset, DATE_MAX - offset,
	"%u-%.3u", y, d);
	}

	} else { // YYYY-MM-DD
	uint y, m, d;

	if (crm_time_get_gregorian(dt, &y, &m, &d)) {
	offset += snprintf(result + offset, DATE_MAX - offset,
	"%.4u-%.2u-%.2u", y, m, d);
	}
	}
	}

	if (flags & crm_time_log_timeofday) {
	uint h = 0, m = 0, s = 0;

	if (offset > 0) {
	offset += snprintf(result + offset, DATE_MAX - offset, " ");
	}

	if (crm_time_get_timeofday(dt, &h, &m, &s)) {
	offset += snprintf(result + offset, DATE_MAX - offset,
	"%.2u:%.2u:%.2u", h, m, s);
	}

	if ((flags & crm_time_log_with_timezone) && (dt->offset != 0)) {
	crm_time_get_sec(dt->offset, &h, &m, &s);
	offset += snprintf(result + offset, DATE_MAX - offset,
	" %c%.2u:%.2u",
	((dt->offset < 0)? '-' : '+'), h, m);
	} else {
	offset += snprintf(result + offset, DATE_MAX - offset, "Z");
	}
	}

	done:
	crm_time_free(utc);

	result_copy = strdup(result);
	CRM_ASSERT(result_copy != NULL);
	return result_copy;
	}

	/*!
	* \internal
	* \brief Determine number of seconds from an hour:minute:second string
	*
	* \param[in] time_str Time specification string
	* \param[out] result Number of seconds equivalent to time_str
	*
	* \return TRUE if specification was valid, FALSE (and set errno) otherwise
	* \note This may return the number of seconds in a day (which is out of bounds
	* for a time object) if given 24:00:00.
	*/
	static bool
	crm_time_parse_sec(const char time_str, int result)
	{
	int rc;
	uint hour = 0;
	uint minute = 0;
	uint second = 0;

	*result = 0;

	// Must have at least hour, but minutes and seconds are optional
	rc = sscanf(time_str, "%d:%d:%d", &hour, &minute, &second);
	if (rc == 1) {
	rc = sscanf(time_str, "%2d%2d%2d", &hour, &minute, &second);
	}
	if (rc == 0) {
	crm_err("%s is not a valid ISO 8601 time specification", time_str);
	errno = EINVAL;
	return FALSE;
	}

	crm_trace("Got valid time: %.2d:%.2d:%.2d", hour, minute, second);

	if ((hour == 24) && (minute == 0) && (second == 0)) {
	// Equivalent to 00:00:00 of next day, return number of seconds in day
	} else if (hour >= 24) {
	crm_err("%s is not a valid ISO 8601 time specification "
	"because %d is not a valid hour", time_str, hour);
	errno = EINVAL;
	return FALSE;
	}
	if (minute >= 60) {
	crm_err("%s is not a valid ISO 8601 time specification "
	"because %d is not a valid minute", time_str, minute);
	errno = EINVAL;
	return FALSE;
	}
	if (second >= 60) {
	crm_err("%s is not a valid ISO 8601 time specification "
	"because %d is not a valid second", time_str, second);
	errno = EINVAL;
	return FALSE;
	}

	result = (hour HOUR_SECONDS) + (minute * 60) + second;
	return TRUE;
	}

	static bool
	crm_time_parse_offset(const char offset_str, int offset)
	{
	tzset();

	if (offset_str == NULL) {
	// Use local offset
	#if defined(HAVE_STRUCT_TM_TM_GMTOFF)
	time_t now = time(NULL);
	struct tm *now_tm = localtime(&now);
	#endif
	int h_offset = GMTOFF(now_tm) / HOUR_SECONDS;
	int m_offset = (GMTOFF(now_tm) - (HOUR_SECONDS * h_offset)) / 60;

	if (h_offset < 0 && m_offset < 0) {
	m_offset = 0 - m_offset;
	}
	offset = (HOUR_SECONDS h_offset) + (60 * m_offset);
	return TRUE;
	}

	if (offset_str[0] == 'Z') { // @TODO invalid if anything after?
	*offset = 0;
	return TRUE;
	}

	*offset = 0;
	if ((offset_str[0] == '+') \|\| (offset_str[0] == '-')
	\|\| isdigit((int)offset_str[0])) {

	gboolean negate = FALSE;

	if (offset_str[0] == '+') {
	offset_str++;
	} else if (offset_str[0] == '-') {
	negate = TRUE;
	offset_str++;
	}
	if (crm_time_parse_sec(offset_str, offset) == FALSE) {
	return FALSE;
	}
	if (negate) {
	offset = 0 - offset;
	}
	} // @TODO else invalid?
	return TRUE;
	}

	/*!
	* \internal
	* \brief Parse the time portion of an ISO 8601 date/time string
	*
	* \param[in] time_str Time portion of specification (after any 'T')
	* \param[in,out] a_time Time object to parse into
	*
	* \return TRUE if valid time was parsed, FALSE (and set errno) otherwise
	* \note This may add a day to a_time (if the time is 24:00:00).
	*/
	static bool
	crm_time_parse(const char time_str, crm_time_t a_time)
	{
	uint h, m, s;
	char *offset_s = NULL;

	tzset();

	if (time_str) {
	if (crm_time_parse_sec(time_str, &(a_time->seconds)) == FALSE) {
	return FALSE;
	}
	offset_s = strstr(time_str, "Z");
	if (offset_s == NULL) {
	offset_s = strstr(time_str, " ");
	if (offset_s) {
	while (isspace(offset_s[0])) {
	offset_s++;
	}
	}
	}
	}

	if (crm_time_parse_offset(offset_s, &(a_time->offset)) == FALSE) {
	return FALSE;
	}
	crm_time_get_sec(a_time->offset, &h, &m, &s);
	crm_trace("Got tz: %c%2.d:%.2d", ((a_time->offset < 0)? '-' : '+'), h, m);

	if (a_time->seconds == DAY_SECONDS) {
	// 24:00:00 == 00:00:00 of next day
	a_time->seconds = 0;
	crm_time_add_days(a_time, 1);
	}
	return TRUE;
	}

	/*
	* \internal
	* \brief Parse a time object from an ISO 8601 date/time specification
	*
	* \param[in] date_str ISO 8601 date/time specification (or "epoch")
	*
	* \return New time object on success, NULL (and set errno) otherwise
	*/
	static crm_time_t *
	parse_date(const char *date_str)
	{
	const char *time_s = NULL;
	crm_time_t *dt = NULL;

	int year = 0;
	int month = 0;
	int week = 0;
	int day = 0;
	int rc = 0;

	if (pcmk__str_empty(date_str)) {
	crm_err("No ISO 8601 date/time specification given");
	goto invalid;
	}

	if ((date_str[0] == 'T') \|\| (date_str[2] == ':')) {
	/* Just a time supplied - Infer current date */
	dt = crm_time_new(NULL);
	if (date_str[0] == 'T') {
	time_s = date_str + 1;
	} else {
	time_s = date_str;
	}
	goto parse_time;
	}

	dt = crm_time_new_undefined();

	if (!strncasecmp("epoch", date_str, 5)
	&& ((date_str[5] == '\0') \|\| (date_str[5] == '/') \|\| isspace(date_str[5]))) {
	dt->days = 1;
	dt->years = 1970;
	crm_time_log(LOG_TRACE, "Unpacked", dt, crm_time_log_date \| crm_time_log_timeofday);
	return dt;
	}

	/* YYYY-MM-DD */
	rc = sscanf(date_str, "%d-%d-%d", &year, &month, &day);
	if (rc == 1) {
	/* YYYYMMDD */
	rc = sscanf(date_str, "%4d%2d%2d", &year, &month, &day);
	}
	if (rc == 3) {
	if (month > 12) {
	crm_err("'%s' is not a valid ISO 8601 date/time specification "
	"because '%d' is not a valid month", date_str, month);
	goto invalid;
	} else if (day > crm_time_days_in_month(month, year)) {
	crm_err("'%s' is not a valid ISO 8601 date/time specification "
	"because '%d' is not a valid day of the month",
	date_str, day);
	goto invalid;
	} else {
	dt->years = year;
	dt->days = get_ordinal_days(year, month, day);
	crm_trace("Parsed Gregorian date '%.4d-%.3d' from date string '%s'",
	year, dt->days, date_str);
	}
	goto parse_time;
	}

	/* YYYY-DDD */
	rc = sscanf(date_str, "%d-%d", &year, &day);
	if (rc == 2) {
	if (day > year_days(year)) {
	crm_err("'%s' is not a valid ISO 8601 date/time specification "
	"because '%d' is not a valid day of the year (max %d)",
	date_str, day, year_days(year));
	goto invalid;
	}
	crm_trace("Parsed ordinal year %d and days %d from date string '%s'",
	year, day, date_str);
	dt->days = day;
	dt->years = year;
	goto parse_time;
	}

	/* YYYY-Www-D */
	rc = sscanf(date_str, "%d-W%d-%d", &year, &week, &day);
	if (rc == 3) {
	if (week > crm_time_weeks_in_year(year)) {
	crm_err("'%s' is not a valid ISO 8601 date/time specification "
	"because '%d' is not a valid week of the year (max %d)",
	date_str, week, crm_time_weeks_in_year(year));
	goto invalid;
	} else if (day < 1 \|\| day > 7) {
	crm_err("'%s' is not a valid ISO 8601 date/time specification "
	"because '%d' is not a valid day of the week",
	date_str, day);
	goto invalid;
	} else {
	/*
	* See https://en.wikipedia.org/wiki/ISO_week_date
	*
	* Monday 29 December 2008 is written "2009-W01-1"
	* Sunday 3 January 2010 is written "2009-W53-7"
	* Saturday 27 September 2008 is written "2008-W37-6"
	*
	* If 1 January is on a Monday, Tuesday, Wednesday or Thursday, it is in week 01.
	* If 1 January is on a Friday, Saturday or Sunday, it is in week 52 or 53 of the previous year.
	*/
	int jan1 = crm_time_january1_weekday(year);

	crm_trace("Got year %d (Jan 1 = %d), week %d, and day %d from date string '%s'",
	year, jan1, week, day, date_str);

	dt->years = year;
	crm_time_add_days(dt, (week - 1) * 7);

	if (jan1 <= 4) {
	crm_time_add_days(dt, 1 - jan1);
	} else {
	crm_time_add_days(dt, 8 - jan1);
	}

	crm_time_add_days(dt, day);
	}
	goto parse_time;
	}

	crm_err("'%s' is not a valid ISO 8601 date/time specification", date_str);
	goto invalid;

	parse_time:

	if (time_s == NULL) {
	time_s = date_str + strspn(date_str, "0123456789-W");
	if ((time_s[0] == ' ') \|\| (time_s[0] == 'T')) {
	++time_s;
	} else {
	time_s = NULL;
	}
	}
	if ((time_s != NULL) && (crm_time_parse(time_s, dt) == FALSE)) {
	goto invalid;
	}

	crm_time_log(LOG_TRACE, "Unpacked", dt, crm_time_log_date \| crm_time_log_timeofday);
	if (crm_time_check(dt) == FALSE) {
	crm_err("'%s' is not a valid ISO 8601 date/time specification",
	date_str);
	goto invalid;
	}
	return dt;

	invalid:
	crm_time_free(dt);
	errno = EINVAL;
	return NULL;
	}

	// Parse an ISO 8601 numeric value and return number of characters consumed
	// @TODO This cannot handle >INT_MAX int values
	// @TODO Fractions appear to be not working
	// @TODO Error out on invalid specifications
	static int
	parse_int(const char str, int field_width, int upper_bound, int result)
	{
	int lpc = 0;
	int offset = 0;
	int intermediate = 0;
	gboolean fraction = FALSE;
	gboolean negate = FALSE;

	*result = 0;
	if (*str == '\0') {
	return 0;
	}

	if (str[offset] == 'T') {
	offset++;
	}

	if (str[offset] == '.' \|\| str[offset] == ',') {
	fraction = TRUE;
	field_width = -1;
	offset++;
	} else if (str[offset] == '-') {
	negate = TRUE;
	offset++;
	} else if (str[offset] == '+' \|\| str[offset] == ':') {
	offset++;
	}

	for (; (fraction \|\| lpc < field_width) && isdigit((int)str[offset]); lpc++) {
	if (fraction) {
	intermediate = (str[offset] - '0') / (10 ^ lpc);
	} else {
	result = 10;
	intermediate = str[offset] - '0';
	}
	*result += intermediate;
	offset++;
	}
	if (fraction) {
	result = (int)(result * upper_bound);

	} else if (upper_bound > 0 && *result > upper_bound) {
	*result = upper_bound;
	}
	if (negate) {
	result = 0 - result;
	}
	if (lpc > 0) {
	crm_trace("Found int: %d. Stopped at str[%d]='%c'", *result, lpc, str[lpc]);
	return offset;
	}
	return 0;
	}

	/*!
	* \brief Parse a time duration from an ISO 8601 duration specification
	*
	* \param[in] period_s ISO 8601 duration specification (optionally followed by
	* whitespace, after which the rest of the string will be
	* ignored)
	*
	* \return New time object on success, NULL (and set errno) otherwise
	* \note It is the caller's responsibility to return the result using
	* crm_time_free().
	*/
	crm_time_t *
	crm_time_parse_duration(const char *period_s)
	{
	gboolean is_time = FALSE;
	crm_time_t *diff = NULL;

	if (pcmk__str_empty(period_s)) {
	crm_err("No ISO 8601 time duration given");
	goto invalid;
	}
	if (period_s[0] != 'P') {
	crm_err("'%s' is not a valid ISO 8601 time duration "
	"because it does not start with a 'P'", period_s);
	goto invalid;
	}
	if ((period_s[1] == '\0') \|\| isspace(period_s[1])) {
	crm_err("'%s' is not a valid ISO 8601 time duration "
	"because nothing follows 'P'", period_s);
	goto invalid;
	}

	diff = crm_time_new_undefined();
	diff->duration = TRUE;

	for (const char *current = period_s + 1;
	current[0] && (current[0] != '/') && !isspace(current[0]);
	++current) {

	int an_int = 0, rc;

	if (current[0] == 'T') {
	/* A 'T' separates year/month/day from hour/minute/seconds. We don't
	* require it strictly, but just use it to differentiate month from
	* minutes.
	*/
	is_time = TRUE;
	continue;
	}

	// An integer must be next
	rc = parse_int(current, 10, 0, &an_int);
	if (rc == 0) {
	crm_err("'%s' is not a valid ISO 8601 time duration "
	"because no integer at '%s'", period_s, current);
	goto invalid;
	}
	current += rc;

	// A time unit must be next (we're not strict about the order)
	switch (current[0]) {
	case 'Y':
	diff->years = an_int;
	break;
	case 'M':
	if (is_time) {
	/* Minutes */
	diff->seconds += an_int * 60;
	} else {
	diff->months = an_int;
	}
	break;
	case 'W':
	diff->days += an_int * 7;
	break;
	case 'D':
	diff->days += an_int;
	break;
	case 'H':
	diff->seconds += an_int * HOUR_SECONDS;
	break;
	case 'S':
	diff->seconds += an_int;
	break;
	case '\0':
	crm_err("'%s' is not a valid ISO 8601 time duration "
	"because no units after %d", period_s, an_int);
	goto invalid;
	default:
	crm_err("'%s' is not a valid ISO 8601 time duration "
	"because '%c' is not a valid time unit",
	period_s, current[0]);
	goto invalid;
	}
	}

	if (!crm_time_is_defined(diff)) {
	crm_err("'%s' is not a valid ISO 8601 time duration "
	"because no amounts and units given", period_s);
	goto invalid;
	}
	return diff;

	invalid:
	crm_time_free(diff);
	errno = EINVAL;
	return NULL;
	}

	/*!
	* \brief Parse a time period from an ISO 8601 interval specification
	*
	* \param[in] period_str ISO 8601 interval specification (start/end,
	* start/duration, or duration/end)
	*
	* \return New time period object on success, NULL (and set errno) otherwise
	* \note The caller is responsible for freeing the result using
	* crm_time_free_period().
	*/
	crm_time_period_t *
	crm_time_parse_period(const char *period_str)
	{
	const char *original = period_str;
	crm_time_period_t *period = NULL;

	if (pcmk__str_empty(period_str)) {
	crm_err("No ISO 8601 time period given");
	goto invalid;
	}

	tzset();
	period = calloc(1, sizeof(crm_time_period_t));
	CRM_ASSERT(period != NULL);

	if (period_str[0] == 'P') {
	period->diff = crm_time_parse_duration(period_str);
	if (period->diff == NULL) {
	goto error;
	}
	} else {
	period->start = parse_date(period_str);
	if (period->start == NULL) {
	goto error;
	}
	}

	period_str = strstr(original, "/");
	if (period_str) {
	++period_str;
	if (period_str[0] == 'P') {
	if (period->diff != NULL) {
	crm_err("'%s' is not a valid ISO 8601 time period "
	"because it has two durations",
	original);
	goto invalid;
	}
	period->diff = crm_time_parse_duration(period_str);
	if (period->diff == NULL) {
	goto error;
	}
	} else {
	period->end = parse_date(period_str);
	if (period->end == NULL) {
	goto error;
	}
	}

	} else if (period->diff != NULL) {
	// Only duration given, assume start is now
	period->start = crm_time_new(NULL);

	} else {
	// Only start given
	crm_err("'%s' is not a valid ISO 8601 time period "
	"because it has no duration or ending time",
	original);
	goto invalid;
	}

	if (period->start == NULL) {
	period->start = crm_time_subtract(period->end, period->diff);

	} else if (period->end == NULL) {
	period->end = crm_time_add(period->start, period->diff);
	}

	if (crm_time_check(period->start) == FALSE) {
	crm_err("'%s' is not a valid ISO 8601 time period "
	"because the start is invalid", period_str);
	goto invalid;
	}
	if (crm_time_check(period->end) == FALSE) {
	crm_err("'%s' is not a valid ISO 8601 time period "
	"because the end is invalid", period_str);
	goto invalid;
	}
	return period;

	invalid:
	errno = EINVAL;
	error:
	crm_time_free_period(period);
	return NULL;
	}

	/*!
	* \brief Free a dynamically allocated time period object
	*
	* \param[in] period Time period to free
	*/
	void
	crm_time_free_period(crm_time_period_t *period)
	{
	if (period) {
	crm_time_free(period->start);
	crm_time_free(period->end);
	crm_time_free(period->diff);
	free(period);
	}
	}

	void
	crm_time_set(crm_time_t * target, crm_time_t * source)
	{
	crm_trace("target=%p, source=%p", target, source);

	CRM_CHECK(target != NULL && source != NULL, return);

	target->years = source->years;
	target->days = source->days;
	target->months = source->months; /* Only for durations */
	target->seconds = source->seconds;
	target->offset = source->offset;

	crm_time_log(LOG_TRACE, "source", source,
	crm_time_log_date \| crm_time_log_timeofday \| crm_time_log_with_timezone);
	crm_time_log(LOG_TRACE, "target", target,
	crm_time_log_date \| crm_time_log_timeofday \| crm_time_log_with_timezone);
	}

	static void
	ha_set_tm_time(crm_time_t * target, struct tm *source)
	{
	int h_offset = 0;
	int m_offset = 0;

	/* Ensure target is fully initialized */
	target->years = 0;
	target->months = 0;
	target->days = 0;
	target->seconds = 0;
	target->offset = 0;
	target->duration = FALSE;

	if (source->tm_year > 0) {
	/* years since 1900 */
	target->years = 1900 + source->tm_year;
	}

	if (source->tm_yday >= 0) {
	/* days since January 1 [0-365] */
	target->days = 1 + source->tm_yday;
	}

	if (source->tm_hour >= 0) {
	target->seconds += HOUR_SECONDS * source->tm_hour;
	}
	if (source->tm_min >= 0) {
	target->seconds += 60 * source->tm_min;
	}
	if (source->tm_sec >= 0) {
	target->seconds += source->tm_sec;
	}

	/* tm_gmtoff == offset from UTC in seconds */
	h_offset = GMTOFF(source) / HOUR_SECONDS;
	m_offset = (GMTOFF(source) - (HOUR_SECONDS * h_offset)) / 60;
	crm_trace("Time offset is %lds (%.2d:%.2d)",
	GMTOFF(source), h_offset, m_offset);

	target->offset += HOUR_SECONDS * h_offset;
	target->offset += 60 * m_offset;
	}

	void
	crm_time_set_timet(crm_time_t * target, time_t * source)
	{
	ha_set_tm_time(target, localtime(source));
	}

	crm_time_t *
	pcmk_copy_time(crm_time_t *source)
	{
	crm_time_t *target = crm_time_new_undefined();

	crm_time_set(target, source);
	return target;
	}

	crm_time_t *
	crm_time_add(crm_time_t * dt, crm_time_t * value)
	{
	crm_time_t *utc = NULL;
	crm_time_t *answer = NULL;

	if ((dt == NULL) \|\| (value == NULL)) {
	errno = EINVAL;
	return NULL;
	}

	answer = pcmk_copy_time(dt);

	utc = crm_get_utc_time(value);
	if (utc == NULL) {
	crm_time_free(answer);
	return NULL;
	}

	answer->years += utc->years;
	crm_time_add_months(answer, utc->months);
	crm_time_add_days(answer, utc->days);
	crm_time_add_seconds(answer, utc->seconds);

	crm_time_free(utc);
	return answer;
	}

	crm_time_t *
	crm_time_calculate_duration(crm_time_t * dt, crm_time_t * value)
	{
	crm_time_t *utc = NULL;
	crm_time_t *answer = NULL;

	if ((dt == NULL) \|\| (value == NULL)) {
	errno = EINVAL;
	return NULL;
	}

	utc = crm_get_utc_time(value);
	if (utc == NULL) {
	return NULL;
	}

	answer = crm_get_utc_time(dt);
	if (answer == NULL) {
	crm_time_free(utc);
	return NULL;
	}
	answer->duration = TRUE;

	answer->years -= utc->years;
	if(utc->months != 0) {
	crm_time_add_months(answer, -utc->months);
	}
	crm_time_add_days(answer, -utc->days);
	crm_time_add_seconds(answer, -utc->seconds);

	crm_time_free(utc);
	return answer;
	}

	crm_time_t *
	crm_time_subtract(crm_time_t * dt, crm_time_t * value)
	{
	crm_time_t *utc = NULL;
	crm_time_t *answer = NULL;

	if ((dt == NULL) \|\| (value == NULL)) {
	errno = EINVAL;
	return NULL;
	}

	utc = crm_get_utc_time(value);
	if (utc == NULL) {
	return NULL;
	}

	answer = pcmk_copy_time(dt);
	answer->years -= utc->years;
	if(utc->months != 0) {
	crm_time_add_months(answer, -utc->months);
	}
	crm_time_add_days(answer, -utc->days);
	crm_time_add_seconds(answer, -utc->seconds);

	return answer;
	}

	/*!
	* \brief Check whether a time object represents a sensible date/time
	*
	* \param[in] dt Date/time object to check
	*
	* \return TRUE if years, days, and seconds are sensible, FALSE otherwise
	*/
	bool
	crm_time_check(crm_time_t * dt)
	{
	return (dt != NULL)
	&& (dt->days > 0) && (dt->days <= year_days(dt->years))
	&& (dt->seconds >= 0) && (dt->seconds < DAY_SECONDS);
	}

	#define do_cmp_field(l, r, field) \
	if(rc == 0) { \
	if(l->field > r->field) { \
	crm_trace("%s: %d > %d", \
	#field, l->field, r->field); \
	rc = 1; \
	} else if(l->field < r->field) { \
	crm_trace("%s: %d < %d", \
	#field, l->field, r->field); \
	rc = -1; \
	} \
	}

	int
	crm_time_compare(crm_time_t a, crm_time_t b)
	{
	int rc = 0;
	crm_time_t *t1 = crm_get_utc_time(a);
	crm_time_t *t2 = crm_get_utc_time(b);

	if ((t1 == NULL) && (t2 == NULL)) {
	rc = 0;
	} else if (t1 == NULL) {
	rc = -1;
	} else if (t2 == NULL) {
	rc = 1;
	} else {
	do_cmp_field(t1, t2, years);
	do_cmp_field(t1, t2, days);
	do_cmp_field(t1, t2, seconds);
	}

	crm_time_free(t1);
	crm_time_free(t2);
	return rc;
	}

	/*!
	* \brief Add a given number of seconds to a date/time or duration
	*
	* \param[in] a_time Date/time or duration to add seconds to
	* \param[in] extra Number of seconds to add
	*/
	void
	crm_time_add_seconds(crm_time_t *a_time, int extra)
	{
	int days = 0;

	crm_trace("Adding %d seconds to %d (max=%d)",
	extra, a_time->seconds, DAY_SECONDS);
	a_time->seconds += extra;
	days = a_time->seconds / DAY_SECONDS;
	a_time->seconds %= DAY_SECONDS;

	// Don't have negative seconds
	if (a_time->seconds < 0) {
	a_time->seconds += DAY_SECONDS;
	--days;
	}

	crm_time_add_days(a_time, days);
	}

	void
	crm_time_add_days(crm_time_t * a_time, int extra)
	{
	int lower_bound = 1;
	int ydays = crm_time_leapyear(a_time->years) ? 366 : 365;

	crm_trace("Adding %d days to %.4d-%.3d", extra, a_time->years, a_time->days);

	a_time->days += extra;
	while (a_time->days > ydays) {
	a_time->years++;
	a_time->days -= ydays;
	ydays = crm_time_leapyear(a_time->years) ? 366 : 365;
	}

	if(a_time->duration) {
	lower_bound = 0;
	}

	while (a_time->days < lower_bound) {
	a_time->years--;
	a_time->days += crm_time_leapyear(a_time->years) ? 366 : 365;
	}
	}

	void
	crm_time_add_months(crm_time_t * a_time, int extra)
	{
	int lpc;
	uint32_t y, m, d, dmax;

	crm_time_get_gregorian(a_time, &y, &m, &d);
	crm_trace("Adding %d months to %.4d-%.2d-%.2d", extra, y, m, d);

	if (extra > 0) {
	for (lpc = extra; lpc > 0; lpc--) {
	m++;
	if (m == 13) {
	m = 1;
	y++;
	}
	}
	} else {
	for (lpc = -extra; lpc > 0; lpc--) {
	m--;
	if (m == 0) {
	m = 12;
	y--;
	}
	}
	}

	dmax = crm_time_days_in_month(m, y);
	if (dmax < d) {
	/* Preserve day-of-month unless the month doesn't have enough days */
	d = dmax;
	}

	crm_trace("Calculated %.4d-%.2d-%.2d", y, m, d);

	a_time->years = y;
	a_time->days = get_ordinal_days(y, m, d);

	crm_time_get_gregorian(a_time, &y, &m, &d);
	crm_trace("Got %.4d-%.2d-%.2d", y, m, d);
	}

	void
	crm_time_add_minutes(crm_time_t * a_time, int extra)
	{
	crm_time_add_seconds(a_time, extra * 60);
	}

	void
	crm_time_add_hours(crm_time_t * a_time, int extra)
	{
	crm_time_add_seconds(a_time, extra * HOUR_SECONDS);
	}

	void
	crm_time_add_weeks(crm_time_t * a_time, int extra)
	{
	crm_time_add_days(a_time, extra * 7);
	}

	void
	crm_time_add_years(crm_time_t * a_time, int extra)
	{
	a_time->years += extra;
	}

	static void
	ha_get_tm_time( struct tm target, crm_time_t source)
	{
	*target = (struct tm) {
	.tm_year = source->years - 1900,
	.tm_mday = source->days,
	.tm_sec = source->seconds % 60,
	.tm_min = ( source->seconds / 60 ) % 60,
	.tm_hour = source->seconds / HOUR_SECONDS,
	.tm_isdst = -1, /* don't adjust */

	#if defined(HAVE_STRUCT_TM_TM_GMTOFF)
	.tm_gmtoff = source->offset
	#endif
	};
	mktime(target);
	}

	/* The high-resolution variant of time object was added to meet an immediate
	* need, and is kept internal API.
	*
	* @TODO The long-term goal is to come up with a clean, unified design for a
	* time type (or types) that meets all the various needs, to replace
	* crm_time_t, pcmk__time_hr_t, and struct timespec (in lrmd_cmd_t).
	* Using glib's GDateTime is a possibility (if we are willing to require
	* glib >= 2.26).
	*/

	pcmk__time_hr_t *
	pcmk__time_hr_convert(pcmk__time_hr_t target, crm_time_t dt)
	{
	pcmk__time_hr_t *hr_dt = NULL;

	if (dt) {
	hr_dt = target?target:calloc(1, sizeof(pcmk__time_hr_t));
	CRM_ASSERT(hr_dt != NULL);
	*hr_dt = (pcmk__time_hr_t) {
	.years = dt->years,
	.months = dt->months,
	.days = dt->days,
	.seconds = dt->seconds,
	.offset = dt->offset,
	.duration = dt->duration
	};
	}

	return hr_dt;
	}

	void
	pcmk__time_set_hr_dt(crm_time_t target, pcmk__time_hr_t hr_dt)
	{
	CRM_ASSERT((hr_dt) && (target));
	*target = (crm_time_t) {
	.years = hr_dt->years,
	.months = hr_dt->months,
	.days = hr_dt->days,
	.seconds = hr_dt->seconds,
	.offset = hr_dt->offset,
	.duration = hr_dt->duration
	};
	}

	+/*!
	+ * \internal
	+ * \brief Return the current time as a high-resolution time
	+ *
	+ * \param[out] epoch If not NULL, this will be set to seconds since epoch
	+ *
	+ * \return Newly allocated high-resolution time set to the current time
	+ */
	pcmk__time_hr_t *
	-pcmk__time_timeval_hr_convert(pcmk__time_hr_t target, struct timeval tv)
	+pcmk__time_hr_now(time_t *epoch)
	{
	+ struct timespec tv;
	crm_time_t dt;
	- pcmk__time_hr_t *ret;
	+ pcmk__time_hr_t *hr;

	- crm_time_set_timet(&dt, &tv->tv_sec);
	- ret = pcmk__time_hr_convert(target, &dt);
	- if (ret) {
	- ret->useconds = tv->tv_usec;
	+ qb_util_timespec_from_epoch_get(&tv);
	+ if (epoch != NULL) {
	+ *epoch = tv.tv_sec;
	+ }
	+ crm_time_set_timet(&dt, &(tv.tv_sec));
	+ hr = pcmk__time_hr_convert(NULL, &dt);
	+ if (hr != NULL) {
	+ hr->useconds = tv.tv_nsec / QB_TIME_NS_IN_USEC;
	}
	- return ret;
	+ return hr;
	}

	pcmk__time_hr_t *
	pcmk__time_hr_new(const char *date_time)
	{
	pcmk__time_hr_t *hr_dt = NULL;
	- struct timeval tv_now;

	- if (!date_time) {
	- if (gettimeofday(&tv_now, NULL) == 0) {
	- hr_dt = pcmk__time_timeval_hr_convert(NULL, &tv_now);
	- }
	+ if (date_time == NULL) {
	+ hr_dt = pcmk__time_hr_now(NULL);
	} else {
	crm_time_t *dt;

	dt = parse_date(date_time);
	hr_dt = pcmk__time_hr_convert(NULL, dt);
	crm_time_free(dt);
	}
	return hr_dt;
	}

	void
	pcmk__time_hr_free(pcmk__time_hr_t * hr_dt)
	{
	free(hr_dt);
	}

	char *
	pcmk__time_format_hr(const char format, pcmk__time_hr_t hr_dt)
	{
	const char *mark_s;
	int max = 128, scanned_pos = 0, printed_pos = 0, fmt_pos = 0,
	date_len = 0, nano_digits = 0;
	char nano_s[10], date_s[max+1], nanofmt_s[5] = "%", *tmp_fmt_s;
	struct tm tm;
	crm_time_t dt;

	if (!format) {
	return NULL;
	}
	pcmk__time_set_hr_dt(&dt, hr_dt);
	ha_get_tm_time(&tm, &dt);
	sprintf(nano_s, "%06d000", hr_dt->useconds);

	while ((format[scanned_pos]) != '\0') {
	mark_s = strchr(&format[scanned_pos], '%');
	if (mark_s) {
	int fmt_len = 1;

	fmt_pos = mark_s - format;
	while ((format[fmt_pos+fmt_len] != '\0') &&
	(format[fmt_pos+fmt_len] >= '0') &&
	(format[fmt_pos+fmt_len] <= '9')) {
	fmt_len++;
	}
	scanned_pos = fmt_pos + fmt_len + 1;
	if (format[fmt_pos+fmt_len] == 'N') {
	nano_digits = atoi(&format[fmt_pos+1]);
	nano_digits = (nano_digits > 6)?6:nano_digits;
	nano_digits = (nano_digits < 0)?0:nano_digits;
	sprintf(&nanofmt_s[1], ".%ds", nano_digits);
	} else {
	if (format[scanned_pos] != '\0') {
	continue;
	}
	fmt_pos = scanned_pos; /* print till end */
	}
	} else {
	scanned_pos = strlen(format);
	fmt_pos = scanned_pos; /* print till end */
	}
	tmp_fmt_s = strndup(&format[printed_pos], fmt_pos - printed_pos);
	#ifdef GCC_FORMAT_NONLITERAL_CHECKING_ENABLED
	#pragma GCC diagnostic push
	#pragma GCC diagnostic ignored "-Wformat-nonliteral"
	#endif
	date_len += strftime(&date_s[date_len], max-date_len, tmp_fmt_s, &tm);
	#ifdef GCC_FORMAT_NONLITERAL_CHECKING_ENABLED
	#pragma GCC diagnostic pop
	#endif
	printed_pos = scanned_pos;
	free(tmp_fmt_s);
	if (nano_digits) {
	#ifdef GCC_FORMAT_NONLITERAL_CHECKING_ENABLED
	#pragma GCC diagnostic push
	#pragma GCC diagnostic ignored "-Wformat-nonliteral"
	#endif
	date_len += snprintf(&date_s[date_len], max-date_len,
	nanofmt_s, nano_s);
	#ifdef GCC_FORMAT_NONLITERAL_CHECKING_ENABLED
	#pragma GCC diagnostic pop
	#endif
	nano_digits = 0;
	}
	}

	return (date_len == 0)?NULL:strdup(date_s);
	}

	/*!
	* \internal
	* \brief Return human-friendly string corresponding to a time
	*
	* \param[in] when Pointer to epoch time value (or NULL for current time)
	*
	* \return Current time as string (as by ctime() but without newline) on
	* success, NULL otherwise
	* \note The return value points to a statically allocated string which might be
	* overwritten by subsequent calls to any of the C library date and time
	* functions.
	*/
	const char *
	pcmk__epoch2str(time_t *when)
	{
	char *since_epoch = NULL;

	if (when == NULL) {
	time_t a_time = time(NULL);

	if (a_time == (time_t) -1) {
	return NULL;
	} else {
	since_epoch = ctime(&a_time);
	}
	} else {
	since_epoch = ctime(when);
	}

	if (since_epoch == NULL) {
	return NULL;
	} else {
	return pcmk__trim(since_epoch);
	}
	}

	/*!
	* \internal
	* \brief Given a millisecond interval, return a log-friendly string
	*
	* \param[in] interval_ms Interval in milliseconds
	*
	* \return Readable version of \p interval_ms
	*
	* \note The return value is a pointer to static memory that will be
	* overwritten by later calls to this function.
	*/
	const char *
	pcmk__readable_interval(guint interval_ms)
	{
	#define MS_IN_S (1000)
	#define MS_IN_M (MS_IN_S * 60)
	#define MS_IN_H (MS_IN_M * 60)
	#define MS_IN_D (MS_IN_H * 24)
	#define MAXSTR sizeof("..d..h..m..s...ms")
	static char str[MAXSTR] = { '\0', };
	int offset = 0;

	if (interval_ms > MS_IN_D) {
	offset += snprintf(str + offset, MAXSTR - offset, "%ud",
	interval_ms / MS_IN_D);
	interval_ms -= (interval_ms / MS_IN_D) * MS_IN_D;
	}
	if (interval_ms > MS_IN_H) {
	offset += snprintf(str + offset, MAXSTR - offset, "%uh",
	interval_ms / MS_IN_H);
	interval_ms -= (interval_ms / MS_IN_H) * MS_IN_H;
	}
	if (interval_ms > MS_IN_M) {
	offset += snprintf(str + offset, MAXSTR - offset, "%um",
	interval_ms / MS_IN_M);
	interval_ms -= (interval_ms / MS_IN_M) * MS_IN_M;
	}

	// Ns, N.NNNs, or NNNms
	if (interval_ms > MS_IN_S) {
	offset += snprintf(str + offset, MAXSTR - offset, "%u",
	interval_ms / MS_IN_S);
	interval_ms -= (interval_ms / MS_IN_S) * MS_IN_S;
	if (interval_ms > 0) {
	offset += snprintf(str + offset, MAXSTR - offset, ".%03u",
	interval_ms);
	}
	(void) snprintf(str + offset, MAXSTR - offset, "s");

	} else if (interval_ms > 0) {
	(void) snprintf(str + offset, MAXSTR - offset, "%ums", interval_ms);

	} else if (str[0] == '\0') {
	strcpy(str, "0s");
	}
	return str;
	}
	diff --git a/lib/common/nvpair.c b/lib/common/nvpair.c
	index 02fb4b2ef5..b6d18f5387 100644
	--- a/lib/common/nvpair.c
	+++ b/lib/common/nvpair.c
	@@ -1,1020 +1,1008 @@
	/*
	* Copyright 2004-2022 the Pacemaker project contributors
	*
	* The version control history for this file may have further details.
	*
	* This source code is licensed under the GNU Lesser General Public License
	* version 2.1 or later (LGPLv2.1+) WITHOUT ANY WARRANTY.
	*/

	#include <crm_internal.h>

	#include <stdio.h>
	#include <sys/types.h>
	#include <string.h>
	#include <ctype.h>
	#include <glib.h>
	#include <libxml/tree.h>

	#include <crm/crm.h>
	#include <crm/msg_xml.h>
	#include <crm/common/xml.h>
	#include <crm/common/xml_internal.h>
	#include "crmcommon_private.h"

	/*
	* This file isolates handling of three types of name/value pairs:
	*
	* - pcmk_nvpair_t data type
	* - XML attributes (<TAG ... NAME=VALUE ...>)
	* - XML nvpair elements (<nvpair id=ID name=NAME value=VALUE>)
	*/

	// pcmk_nvpair_t handling

	/*!
	* \internal
	* \brief Allocate a new name/value pair
	*
	* \param[in] name New name (required)
	* \param[in] value New value
	*
	* \return Newly allocated name/value pair
	* \note The caller is responsible for freeing the result with
	* \c pcmk__free_nvpair().
	*/
	static pcmk_nvpair_t *
	pcmk__new_nvpair(const char name, const char value)
	{
	pcmk_nvpair_t *nvpair = NULL;

	CRM_ASSERT(name);

	nvpair = calloc(1, sizeof(pcmk_nvpair_t));
	CRM_ASSERT(nvpair);

	pcmk__str_update(&nvpair->name, name);
	pcmk__str_update(&nvpair->value, value);
	return nvpair;
	}

	/*!
	* \internal
	* \brief Free a name/value pair
	*
	* \param[in] nvpair Name/value pair to free
	*/
	static void
	pcmk__free_nvpair(gpointer data)
	{
	if (data) {
	pcmk_nvpair_t *nvpair = data;

	free(nvpair->name);
	free(nvpair->value);
	free(nvpair);
	}
	}

	/*!
	* \brief Prepend a name/value pair to a list
	*
	* \param[in,out] nvpairs List to modify
	* \param[in] name New entry's name
	* \param[in] value New entry's value
	*
	* \return New head of list
	* \note The caller is responsible for freeing the list with
	* \c pcmk_free_nvpairs().
	*/
	GSList *
	pcmk_prepend_nvpair(GSList nvpairs, const char name, const char *value)
	{
	return g_slist_prepend(nvpairs, pcmk__new_nvpair(name, value));
	}

	/*!
	* \brief Free a list of name/value pairs
	*
	* \param[in] list List to free
	*/
	void
	pcmk_free_nvpairs(GSList *nvpairs)
	{
	g_slist_free_full(nvpairs, pcmk__free_nvpair);
	}

	/*!
	* \internal
	* \brief Compare two name/value pairs
	*
	* \param[in] a First name/value pair to compare
	* \param[in] b Second name/value pair to compare
	*
	* \return 0 if a == b, 1 if a > b, -1 if a < b
	*/
	static gint
	pcmk__compare_nvpair(gconstpointer a, gconstpointer b)
	{
	int rc = 0;
	const pcmk_nvpair_t *pair_a = a;
	const pcmk_nvpair_t *pair_b = b;

	CRM_ASSERT(a != NULL);
	CRM_ASSERT(pair_a->name != NULL);

	CRM_ASSERT(b != NULL);
	CRM_ASSERT(pair_b->name != NULL);

	rc = strcmp(pair_a->name, pair_b->name);
	if (rc < 0) {
	return -1;
	} else if (rc > 0) {
	return 1;
	}
	return 0;
	}

	/*!
	* \brief Sort a list of name/value pairs
	*
	* \param[in,out] list List to sort
	*
	* \return New head of list
	*/
	GSList *
	pcmk_sort_nvpairs(GSList *list)
	{
	return g_slist_sort(list, pcmk__compare_nvpair);
	}

	/*!
	* \brief Create a list of name/value pairs from an XML node's attributes
	*
	* \param[in] XML to parse
	*
	* \return New list of name/value pairs
	* \note It is the caller's responsibility to free the list with
	* \c pcmk_free_nvpairs().
	*/
	GSList *
	pcmk_xml_attrs2nvpairs(xmlNode *xml)
	{
	GSList *result = NULL;

	for (xmlAttrPtr iter = pcmk__xe_first_attr(xml); iter != NULL;
	iter = iter->next) {

	result = pcmk_prepend_nvpair(result,
	(const char *) iter->name,
	(const char *) pcmk__xml_attr_value(iter));
	}
	return result;
	}

	/*!
	* \internal
	* \brief Add an XML attribute corresponding to a name/value pair
	*
	* Suitable for glib list iterators, this function adds a NAME=VALUE
	* XML attribute based on a given name/value pair.
	*
	* \param[in] data Name/value pair
	* \param[out] user_data XML node to add attributes to
	*/
	static void
	pcmk__nvpair_add_xml_attr(gpointer data, gpointer user_data)
	{
	pcmk_nvpair_t *pair = data;
	xmlNode *parent = user_data;

	crm_xml_add(parent, pair->name, pair->value);
	}

	/*!
	* \brief Add XML attributes based on a list of name/value pairs
	*
	* \param[in] list List of name/value pairs
	* \param[in,out] xml XML node to add attributes to
	*/
	void
	pcmk_nvpairs2xml_attrs(GSList list, xmlNode xml)
	{
	g_slist_foreach(list, pcmk__nvpair_add_xml_attr, xml);
	}

	// convenience function for name=value strings

	/*!
	* \internal
	* \brief Extract the name and value from an input string formatted as "name=value".
	* If unable to extract them, they are returned as NULL.
	*
	* \param[in] input The input string, likely from the command line
	* \param[out] name Everything before the first '=' in the input string
	* \param[out] value Everything after the first '=' in the input string
	*
	* \return 2 if both name and value could be extracted, 1 if only one could, and
	* and error code otherwise
	*/
	int
	pcmk__scan_nvpair(const char input, char name, char *value)
	{
	#ifdef SSCANF_HAS_M
	*name = NULL;
	*value = NULL;
	if (sscanf(input, "%m[^=]=%m[^\n]", name, value) <= 0) {
	return -pcmk_err_bad_nvpair;
	}
	#else
	char *sep = NULL;
	*name = NULL;
	*value = NULL;

	sep = strstr(optarg, "=");
	if (sep == NULL) {
	return -pcmk_err_bad_nvpair;
	}

	*name = strndup(input, sep-input);

	if (*name == NULL) {
	return -ENOMEM;
	}

	/* If the last char in optarg is =, the user gave no
	* value for the option. Leave it as NULL.
	*/
	if (*(sep+1) != '\0') {
	*value = strdup(sep+1);

	if (*value == NULL) {
	return -ENOMEM;
	}
	}
	#endif

	if (name != NULL && value != NULL) {
	return 2;
	} else if (name != NULL \|\| value != NULL) {
	return 1;
	} else {
	return -pcmk_err_bad_nvpair;
	}
	}

	/*!
	* \internal
	* \brief Format a name/value pair.
	*
	* Units can optionally be provided for the value. Note that unlike most
	* formatting functions, this one returns the formatted string. It is
	* assumed that the most common use of this function will be to build up
	* a string to be output as part of other functions.
	*
	* \note The caller is responsible for freeing the return value after use.
	*
	* \param[in] name The name of the nvpair.
	* \param[in] value The value of the nvpair.
	* \param[in] units Optional units for the value, or NULL.
	*
	* \return Newly allocated string with name/value pair
	*/
	char *
	pcmk__format_nvpair(const char name, const char value, const char *units)
	{
	return crm_strdup_printf("%s=\"%s%s\"", name, value, units ? units : "");
	}

	/*!
	* \internal
	* \brief Format a name/time pair.
	*
	* See pcmk__format_nvpair() for more details.
	*
	* \note The caller is responsible for freeing the return value after use.
	*
	* \param[in] name The name for the time.
	* \param[in] epoch_time The time to format.
	*
	* \return Newly allocated string with name/value pair
	*/
	char *
	pcmk__format_named_time(const char *name, time_t epoch_time)
	{
	const char *now_str = pcmk__epoch2str(&epoch_time);

	return crm_strdup_printf("%s=\"%s\"", name, now_str ? now_str : "");
	}

	// XML attribute handling

	/*!
	* \brief Create an XML attribute with specified name and value
	*
	* \param[in,out] node XML node to modify
	* \param[in] name Attribute name to set
	* \param[in] value Attribute value to set
	*
	* \return New value on success, \c NULL otherwise
	* \note This does nothing if node, name, or value are \c NULL or empty.
	*/
	const char *
	crm_xml_add(xmlNode node, const char name, const char *value)
	{
	bool dirty = FALSE;
	xmlAttr *attr = NULL;

	CRM_CHECK(node != NULL, return NULL);
	CRM_CHECK(name != NULL, return NULL);

	if (value == NULL) {
	return NULL;
	}
	-#if XML_PARANOIA_CHECKS
	- {
	- const char *old_value = NULL;
	-
	- old_value = crm_element_value(node, name);
	-
	- /* Could be re-setting the same value */
	- CRM_CHECK(old_value != value,
	- crm_err("Cannot reset %s with crm_xml_add(%s)", name, value);
	- return value);
	- }
	-#endif

	if (pcmk__tracking_xml_changes(node, FALSE)) {
	const char *old = crm_element_value(node, name);

	if (old == NULL \|\| value == NULL \|\| strcmp(old, value) != 0) {
	dirty = TRUE;
	}
	}

	if (dirty && (pcmk__check_acl(node, name, pcmk__xf_acl_create) == FALSE)) {
	crm_trace("Cannot add %s=%s to %s", name, value, node->name);
	return NULL;
	}

	attr = xmlSetProp(node, (pcmkXmlStr) name, (pcmkXmlStr) value);
	if (dirty) {
	pcmk__mark_xml_attr_dirty(attr);
	}

	CRM_CHECK(attr && attr->children && attr->children->content, return NULL);
	return (char *)attr->children->content;
	}

	/*!
	* \brief Replace an XML attribute with specified name and (possibly NULL) value
	*
	* \param[in,out] node XML node to modify
	* \param[in] name Attribute name to set
	* \param[in] value Attribute value to set
	*
	* \return New value on success, \c NULL otherwise
	* \note This does nothing if node or name is \c NULL or empty.
	*/
	const char *
	crm_xml_replace(xmlNode node, const char name, const char *value)
	{
	bool dirty = FALSE;
	xmlAttr *attr = NULL;
	const char *old_value = NULL;

	CRM_CHECK(node != NULL, return NULL);
	CRM_CHECK(name != NULL && name[0] != 0, return NULL);

	old_value = crm_element_value(node, name);

	/* Could be re-setting the same value */
	CRM_CHECK(old_value != value, return value);

	if (pcmk__check_acl(node, name, pcmk__xf_acl_write) == FALSE) {
	/* Create a fake object linked to doc->_private instead? */
	crm_trace("Cannot replace %s=%s to %s", name, value, node->name);
	return NULL;

	} else if (old_value && !value) {
	xml_remove_prop(node, name);
	return NULL;
	}

	if (pcmk__tracking_xml_changes(node, FALSE)) {
	if (!old_value \|\| !value \|\| !strcmp(old_value, value)) {
	dirty = TRUE;
	}
	}

	attr = xmlSetProp(node, (pcmkXmlStr) name, (pcmkXmlStr) value);
	if (dirty) {
	pcmk__mark_xml_attr_dirty(attr);
	}
	CRM_CHECK(attr && attr->children && attr->children->content, return NULL);
	return (char *) attr->children->content;
	}

	/*!
	* \brief Create an XML attribute with specified name and integer value
	*
	* This is like \c crm_xml_add() but taking an integer value.
	*
	* \param[in,out] node XML node to modify
	* \param[in] name Attribute name to set
	* \param[in] value Attribute value to set
	*
	* \return New value as string on success, \c NULL otherwise
	* \note This does nothing if node or name are \c NULL or empty.
	*/
	const char *
	crm_xml_add_int(xmlNode node, const char name, int value)
	{
	char *number = pcmk__itoa(value);
	const char *added = crm_xml_add(node, name, number);

	free(number);
	return added;
	}

	/*!
	* \brief Create an XML attribute with specified name and unsigned value
	*
	* This is like \c crm_xml_add() but taking a guint value.
	*
	* \param[in,out] node XML node to modify
	* \param[in] name Attribute name to set
	* \param[in] ms Attribute value to set
	*
	* \return New value as string on success, \c NULL otherwise
	* \note This does nothing if node or name are \c NULL or empty.
	*/
	const char *
	crm_xml_add_ms(xmlNode node, const char name, guint ms)
	{
	char *number = crm_strdup_printf("%u", ms);
	const char *added = crm_xml_add(node, name, number);

	free(number);
	return added;
	}

	// Maximum size of null-terminated string representation of 64-bit integer
	// -9223372036854775808
	#define LLSTRSIZE 21

	/*!
	* \brief Create an XML attribute with specified name and long long int value
	*
	* This is like \c crm_xml_add() but taking a long long int value. It is a
	* useful equivalent for defined types like time_t, etc.
	*
	* \param[in,out] xml XML node to modify
	* \param[in] name Attribute name to set
	* \param[in] value Attribute value to set
	*
	* \return New value as string on success, \c NULL otherwise
	* \note This does nothing if xml or name are \c NULL or empty.
	* This does not support greater than 64-bit values.
	*/
	const char *
	crm_xml_add_ll(xmlNode xml, const char name, long long value)
	{
	char s[LLSTRSIZE] = { '\0', };

	if (snprintf(s, LLSTRSIZE, "%lld", (long long) value) == LLSTRSIZE) {
	return NULL;
	}
	return crm_xml_add(xml, name, s);
	}

	/*!
	* \brief Create XML attributes for seconds and microseconds
	*
	* This is like \c crm_xml_add() but taking a struct timeval.
	*
	* \param[in,out] xml XML node to modify
	* \param[in] name_sec Name of XML attribute for seconds
	* \param[in] name_usec Name of XML attribute for microseconds (or NULL)
	* \param[in] value Time value to set
	*
	* \return New seconds value as string on success, \c NULL otherwise
	* \note This does nothing if xml, name_sec, or value is \c NULL.
	*/
	const char *
	crm_xml_add_timeval(xmlNode xml, const char name_sec, const char *name_usec,
	const struct timeval *value)
	{
	const char *added = NULL;

	if (xml && name_sec && value) {
	added = crm_xml_add_ll(xml, name_sec, (long long) value->tv_sec);
	if (added && name_usec) {
	// Any error is ignored (we successfully added seconds)
	crm_xml_add_ll(xml, name_usec, (long long) value->tv_usec);
	}
	}
	return added;
	}

	/*!
	* \brief Retrieve the value of an XML attribute
	*
	* \param[in] data XML node to check
	* \param[in] name Attribute name to check
	*
	* \return Value of specified attribute (may be \c NULL)
	*/
	const char *
	crm_element_value(const xmlNode data, const char name)
	{
	xmlAttr *attr = NULL;

	if (data == NULL) {
	crm_err("Couldn't find %s in NULL", name ? name : "<null>");
	CRM_LOG_ASSERT(data != NULL);
	return NULL;

	} else if (name == NULL) {
	crm_err("Couldn't find NULL in %s", crm_element_name(data));
	return NULL;
	}

	/* The first argument to xmlHasProp() has always been const,
	* but libxml2 <2.9.2 didn't declare that, so cast it
	*/
	attr = xmlHasProp((xmlNode *) data, (pcmkXmlStr) name);
	if (!attr \|\| !attr->children) {
	return NULL;
	}
	return (const char *) attr->children->content;
	}

	/*!
	* \brief Retrieve the integer value of an XML attribute
	*
	* This is like \c crm_element_value() but getting the value as an integer.
	*
	* \param[in] data XML node to check
	* \param[in] name Attribute name to check
	* \param[in] dest Where to store element value
	*
	* \return 0 on success, -1 otherwise
	*/
	int
	crm_element_value_int(const xmlNode data, const char name, int *dest)
	{
	const char *value = NULL;

	CRM_CHECK(dest != NULL, return -1);
	value = crm_element_value(data, name);
	if (value) {
	long long value_ll;

	if ((pcmk__scan_ll(value, &value_ll, 0LL) != pcmk_rc_ok)
	\|\| (value_ll < INT_MIN) \|\| (value_ll > INT_MAX)) {
	*dest = PCMK__PARSE_INT_DEFAULT;
	} else {
	*dest = (int) value_ll;
	return 0;
	}
	}
	return -1;
	}

	/*!
	* \brief Retrieve the long long integer value of an XML attribute
	*
	* This is like \c crm_element_value() but getting the value as a long long int.
	*
	* \param[in] data XML node to check
	* \param[in] name Attribute name to check
	* \param[in] dest Where to store element value
	*
	* \return 0 on success, -1 otherwise
	*/
	int
	crm_element_value_ll(const xmlNode data, const char name, long long *dest)
	{
	const char *value = NULL;

	CRM_CHECK(dest != NULL, return -1);
	value = crm_element_value(data, name);
	if ((value != NULL)
	&& (pcmk__scan_ll(value, dest, PCMK__PARSE_INT_DEFAULT) == pcmk_rc_ok)) {
	return 0;
	}
	return -1;
	}

	/*!
	* \brief Retrieve the millisecond value of an XML attribute
	*
	* This is like \c crm_element_value() but returning the value as a guint.
	*
	* \param[in] data XML node to check
	* \param[in] name Attribute name to check
	* \param[out] dest Where to store attribute value
	*
	* \return \c pcmk_ok on success, -1 otherwise
	*/
	int
	crm_element_value_ms(const xmlNode data, const char name, guint *dest)
	{
	const char *value = NULL;
	long long value_ll;

	CRM_CHECK(dest != NULL, return -1);
	*dest = 0;
	value = crm_element_value(data, name);
	if ((pcmk__scan_ll(value, &value_ll, 0LL) != pcmk_rc_ok)
	\|\| (value_ll < 0) \|\| (value_ll > G_MAXUINT)) {
	return -1;
	}
	*dest = (guint) value_ll;
	return pcmk_ok;
	}

	/*!
	* \brief Retrieve the seconds-since-epoch value of an XML attribute
	*
	* This is like \c crm_element_value() but returning the value as a time_t.
	*
	* \param[in] xml XML node to check
	* \param[in] name Attribute name to check
	* \param[out] dest Where to store attribute value
	*
	* \return \c pcmk_ok on success, -1 otherwise
	*/
	int
	crm_element_value_epoch(const xmlNode xml, const char name, time_t *dest)
	{
	long long value_ll = 0;

	if (crm_element_value_ll(xml, name, &value_ll) < 0) {
	return -1;
	}

	/* Unfortunately, we can't do any bounds checking, since time_t has neither
	* standardized bounds nor constants defined for them.
	*/
	*dest = (time_t) value_ll;
	return pcmk_ok;
	}

	/*!
	* \brief Retrieve the value of XML second/microsecond attributes as time
	*
	* This is like \c crm_element_value() but returning value as a struct timeval.
	*
	* \param[in] xml XML to parse
	* \param[in] name_sec Name of XML attribute for seconds
	* \param[in] name_usec Name of XML attribute for microseconds
	* \param[out] dest Where to store result
	*
	* \return \c pcmk_ok on success, -errno on error
	* \note Values default to 0 if XML or XML attribute does not exist
	*/
	int
	crm_element_value_timeval(const xmlNode xml, const char name_sec,
	const char name_usec, struct timeval dest)
	{
	long long value_i = 0;

	CRM_CHECK(dest != NULL, return -EINVAL);
	dest->tv_sec = 0;
	dest->tv_usec = 0;

	if (xml == NULL) {
	return pcmk_ok;
	}

	/* Unfortunately, we can't do any bounds checking, since there are no
	* constants provided for the bounds of time_t and suseconds_t, and
	* calculating them isn't worth the effort. If there are XML values
	* beyond the native sizes, there will probably be worse problems anyway.
	*/

	// Parse seconds
	errno = 0;
	if (crm_element_value_ll(xml, name_sec, &value_i) < 0) {
	return -errno;
	}
	dest->tv_sec = (time_t) value_i;

	// Parse microseconds
	if (crm_element_value_ll(xml, name_usec, &value_i) < 0) {
	return -errno;
	}
	dest->tv_usec = (suseconds_t) value_i;

	return pcmk_ok;
	}

	/*!
	* \brief Retrieve a copy of the value of an XML attribute
	*
	* This is like \c crm_element_value() but allocating new memory for the result.
	*
	* \param[in] data XML node to check
	* \param[in] name Attribute name to check
	*
	* \return Value of specified attribute (may be \c NULL)
	* \note The caller is responsible for freeing the result.
	*/
	char *
	crm_element_value_copy(const xmlNode data, const char name)
	{
	char *value_copy = NULL;

	pcmk__str_update(&value_copy, crm_element_value(data, name));
	return value_copy;
	}

	/*!
	* \brief Add hash table entry to XML as (possibly legacy) name/value
	*
	* Suitable for \c g_hash_table_foreach(), this function takes a hash table key
	* and value, with an XML node passed as user data, and adds an XML attribute
	* with the specified name and value if it does not already exist. If the key
	* name starts with a digit, this will instead add a \<param name=NAME
	* value=VALUE/> child to the XML (for legacy compatibility with heartbeat).
	*
	* \param[in] key Key of hash table entry
	* \param[in] value Value of hash table entry
	* \param[in] user_data XML node
	*/
	void
	hash2smartfield(gpointer key, gpointer value, gpointer user_data)
	{
	const char *name = key;
	const char *s_value = value;

	xmlNode *xml_node = user_data;

	if (isdigit(name[0])) {
	xmlNode *tmp = create_xml_node(xml_node, XML_TAG_PARAM);

	crm_xml_add(tmp, XML_NVPAIR_ATTR_NAME, name);
	crm_xml_add(tmp, XML_NVPAIR_ATTR_VALUE, s_value);

	} else if (crm_element_value(xml_node, name) == NULL) {
	crm_xml_add(xml_node, name, s_value);
	crm_trace("dumped: %s=%s", name, s_value);

	} else {
	crm_trace("duplicate: %s=%s", name, s_value);
	}
	}

	/*!
	* \brief Set XML attribute based on hash table entry
	*
	* Suitable for \c g_hash_table_foreach(), this function takes a hash table key
	* and value, with an XML node passed as user data, and adds an XML attribute
	* with the specified name and value if it does not already exist.
	*
	* \param[in] key Key of hash table entry
	* \param[in] value Value of hash table entry
	* \param[in] user_data XML node
	*/
	void
	hash2field(gpointer key, gpointer value, gpointer user_data)
	{
	const char *name = key;
	const char *s_value = value;

	xmlNode *xml_node = user_data;

	if (crm_element_value(xml_node, name) == NULL) {
	crm_xml_add(xml_node, name, s_value);

	} else {
	crm_trace("duplicate: %s=%s", name, s_value);
	}
	}

	/*!
	* \brief Set XML attribute based on hash table entry, as meta-attribute name
	*
	* Suitable for \c g_hash_table_foreach(), this function takes a hash table key
	* and value, with an XML node passed as user data, and adds an XML attribute
	* with the meta-attribute version of the specified name and value if it does
	* not already exist and if the name does not appear to be cluster-internal.
	*
	* \param[in] key Key of hash table entry
	* \param[in] value Value of hash table entry
	* \param[in] user_data XML node
	*/
	void
	hash2metafield(gpointer key, gpointer value, gpointer user_data)
	{
	char *crm_name = NULL;

	if (key == NULL \|\| value == NULL) {
	return;
	}

	/* Filter out cluster-generated attributes that contain a '#' or ':'
	* (like fail-count and last-failure).
	*/
	for (crm_name = key; *crm_name; ++crm_name) {
	if ((crm_name == '#') \|\| (crm_name == ':')) {
	return;
	}
	}

	crm_name = crm_meta_name(key);
	hash2field(crm_name, value, user_data);
	free(crm_name);
	}

	// nvpair handling

	/*!
	* \brief Create an XML name/value pair
	*
	* \param[in] parent If not \c NULL, make new XML node a child of this one
	* \param[in] id If not \c NULL, use this as ID (otherwise auto-generate)
	* \param[in] name Name to use
	* \param[in] value Value to use
	*
	* \return New XML object on success, \c NULL otherwise
	*/
	xmlNode *
	crm_create_nvpair_xml(xmlNode parent, const char id, const char *name,
	const char *value)
	{
	xmlNode *nvp;

	/* id can be NULL so we auto-generate one, and name can be NULL if this
	* will be used to delete a name/value pair by ID, but both can't be NULL
	*/
	CRM_CHECK(id \|\| name, return NULL);

	nvp = create_xml_node(parent, XML_CIB_TAG_NVPAIR);
	CRM_CHECK(nvp, return NULL);

	if (id) {
	crm_xml_add(nvp, XML_ATTR_ID, id);
	} else {
	const char *parent_id = ID(parent);

	crm_xml_set_id(nvp, "%s-%s",
	(parent_id? parent_id : XML_CIB_TAG_NVPAIR), name);
	}
	crm_xml_add(nvp, XML_NVPAIR_ATTR_NAME, name);
	crm_xml_add(nvp, XML_NVPAIR_ATTR_VALUE, value);
	return nvp;
	}

	/*!
	* \brief Add XML nvpair element based on hash table entry
	*
	* Suitable for \c g_hash_table_foreach(), this function takes a hash table key
	* and value, with an XML node passed as the user data, and adds an \c nvpair
	* XML element with the specified name and value.
	*
	* \param[in] key Key of hash table entry
	* \param[in] value Value of hash table entry
	* \param[in] user_data XML node
	*/
	void
	hash2nvpair(gpointer key, gpointer value, gpointer user_data)
	{
	const char *name = key;
	const char *s_value = value;
	xmlNode *xml_node = user_data;

	crm_create_nvpair_xml(xml_node, name, name, s_value);
	crm_trace("dumped: name=%s value=%s", name, s_value);
	}

	/*!
	* \brief Retrieve XML attributes as a hash table
	*
	* Given an XML element, this will look for any \<attributes> element child,
	* creating a hash table of (newly allocated string) name/value pairs taken
	* first from the attributes element's NAME=VALUE XML attributes, and then
	* from any \<param name=NAME value=VALUE> children of attributes.
	*
	* \param[in] XML node to parse
	*
	* \return Hash table with name/value pairs
	* \note It is the caller's responsibility to free the result using
	* \c g_hash_table_destroy().
	*/
	GHashTable *
	xml2list(xmlNode *parent)
	{
	xmlNode *child = NULL;
	xmlAttrPtr pIter = NULL;
	xmlNode *nvpair_list = NULL;
	GHashTable *nvpair_hash = pcmk__strkey_table(free, free);

	CRM_CHECK(parent != NULL, return nvpair_hash);

	nvpair_list = find_xml_node(parent, XML_TAG_ATTRS, FALSE);
	if (nvpair_list == NULL) {
	crm_trace("No attributes in %s", crm_element_name(parent));
	crm_log_xml_trace(parent, "No attributes for resource op");
	}

	crm_log_xml_trace(nvpair_list, "Unpacking");

	for (pIter = pcmk__xe_first_attr(nvpair_list); pIter != NULL;
	pIter = pIter->next) {

	const char p_name = (const char )pIter->name;
	const char *p_value = pcmk__xml_attr_value(pIter);

	crm_trace("Added %s=%s", p_name, p_value);

	g_hash_table_insert(nvpair_hash, strdup(p_name), strdup(p_value));
	}

	for (child = pcmk__xml_first_child(nvpair_list); child != NULL;
	child = pcmk__xml_next(child)) {

	if (strcmp((const char *)child->name, XML_TAG_PARAM) == 0) {
	const char *key = crm_element_value(child, XML_NVPAIR_ATTR_NAME);
	const char *value = crm_element_value(child, XML_NVPAIR_ATTR_VALUE);

	crm_trace("Added %s=%s", key, value);
	if (key != NULL && value != NULL) {
	g_hash_table_insert(nvpair_hash, strdup(key), strdup(value));
	}
	}
	}

	return nvpair_hash;
	}

	void
	pcmk__xe_set_bool_attr(xmlNodePtr node, const char *name, bool value)
	{
	crm_xml_add(node, name, value ? XML_BOOLEAN_TRUE : XML_BOOLEAN_FALSE);
	}

	int
	pcmk__xe_get_bool_attr(xmlNodePtr node, const char name, bool value) {
	const char *xml_value = NULL;
	int ret, rc;

	if (node == NULL) {
	return ENODATA;
	} else if (name == NULL \|\| value == NULL) {
	return EINVAL;
	}

	xml_value = crm_element_value(node, name);

	if (xml_value == NULL) {
	return ENODATA;
	}

	rc = crm_str_to_boolean(xml_value, &ret);
	if (rc == 1) {
	*value = ret;
	return pcmk_rc_ok;
	} else {
	return pcmk_rc_unknown_format;
	}
	}

	bool
	pcmk__xe_attr_is_true(xmlNodePtr node, const char *name)
	{
	bool value = false;
	int rc;

	rc = pcmk__xe_get_bool_attr(node, name, &value);
	return rc == pcmk_rc_ok && value == true;
	}

	// Deprecated functions kept only for backward API compatibility
	// LCOV_EXCL_START

	#include <crm/common/util_compat.h>

	int
	pcmk_scan_nvpair(const char input, char name, char *value)
	{
	return pcmk__scan_nvpair(input, name, value);
	}

	char *
	pcmk_format_nvpair(const char name, const char value,
	const char *units)
	{
	return pcmk__format_nvpair(name, value, units);
	}

	char *
	pcmk_format_named_time(const char *name, time_t epoch_time)
	{
	return pcmk__format_named_time(name, epoch_time);
	}

	// LCOV_EXCL_STOP
	// End deprecated API
	diff --git a/lib/common/output.c b/lib/common/output.c
	index 58872e096d..470d3499d9 100644
	--- a/lib/common/output.c
	+++ b/lib/common/output.c
	@@ -1,169 +1,240 @@
	/*
	- * Copyright 2019-2021 the Pacemaker project contributors
	+ * Copyright 2019-2022 the Pacemaker project contributors
	*
	* The version control history for this file may have further details.
	*
	* This source code is licensed under the GNU Lesser General Public License
	* version 2.1 or later (LGPLv2.1+) WITHOUT ANY WARRANTY.
	*/

	#include <crm_internal.h>

	#include <crm/common/util.h>
	#include <crm/common/xml.h>
	#include <libxml/tree.h>

	static GHashTable *formatters = NULL;

	void
	pcmk__output_free(pcmk__output_t *out) {
	out->free_priv(out);

	if (out->messages != NULL) {
	g_hash_table_destroy(out->messages);
	}

	g_free(out->request);
	free(out);
	}

	int
	pcmk__output_new(pcmk__output_t *out, const char fmt_name, const char *filename,
	char **argv) {
	pcmk__output_factory_t create = NULL;;

	if (formatters == NULL) {
	return EINVAL;
	}

	/* If no name was given, just try "text". It's up to each tool to register
	* what it supports so this also may not be valid.
	*/
	if (fmt_name == NULL) {
	create = g_hash_table_lookup(formatters, "text");
	} else {
	create = g_hash_table_lookup(formatters, fmt_name);
	}

	if (create == NULL) {
	return pcmk_rc_unknown_format;
	}

	*out = create(argv);
	if (*out == NULL) {
	return ENOMEM;
	}

	if (pcmk__str_eq(filename, "-", pcmk__str_null_matches)) {
	(*out)->dest = stdout;
	} else {
	(*out)->dest = fopen(filename, "w");
	if ((*out)->dest == NULL) {
	return errno;
	}
	}

	(*out)->quiet = false;
	(*out)->messages = pcmk__strkey_table(free, NULL);

	if ((out)->init(out) == false) {
	pcmk__output_free(*out);
	return ENOMEM;
	}

	setenv("OCF_OUTPUT_FORMAT", (*out)->fmt_name, 1);

	return pcmk_rc_ok;
	}

	int
	pcmk__register_format(GOptionGroup group, const char name,
	pcmk__output_factory_t create, GOptionEntry *options) {
	if (create == NULL) {
	return -EINVAL;
	}

	if (formatters == NULL) {
	formatters = pcmk__strkey_table(free, NULL);
	}

	if (options != NULL && group != NULL) {
	g_option_group_add_entries(group, options);
	}

	g_hash_table_insert(formatters, strdup(name), create);
	return 0;
	}

	void
	pcmk__register_formats(GOptionGroup group, pcmk__supported_format_t formats) {
	pcmk__supported_format_t *entry = NULL;

	if (formats == NULL) {
	return;
	}

	for (entry = formats; entry->name != NULL; entry++) {
	pcmk__register_format(group, entry->name, entry->create, entry->options);
	}
	}

	void
	pcmk__unregister_formats() {
	if (formatters != NULL) {
	g_hash_table_destroy(formatters);
	}
	}

	int
	pcmk__call_message(pcmk__output_t out, const char message_id, ...) {
	va_list args;
	int rc = pcmk_rc_ok;
	pcmk__message_fn_t fn;

	fn = g_hash_table_lookup(out->messages, message_id);
	if (fn == NULL) {
	crm_debug("Called unknown output message '%s' for format '%s'",
	message_id, out->fmt_name);
	return EINVAL;
	}

	va_start(args, message_id);
	rc = fn(out, args);
	va_end(args);

	return rc;
	}

	void
	pcmk__register_message(pcmk__output_t out, const char message_id,
	pcmk__message_fn_t fn) {
	g_hash_table_replace(out->messages, strdup(message_id), fn);
	}

	void
	pcmk__register_messages(pcmk__output_t out, pcmk__message_entry_t table) {
	pcmk__message_entry_t *entry;

	for (entry = table; entry->message_id != NULL; entry++) {
	if (pcmk__strcase_any_of(entry->fmt_name, "default", out->fmt_name, NULL)) {
	pcmk__register_message(out, entry->message_id, entry->fn);
	}
	}
	}

	void
	pcmk__output_and_clear_error(GError error, pcmk__output_t out)
	{
	if (error == NULL) {
	return;
	}

	if (out != NULL) {
	out->err(out, "%s: %s", g_get_prgname(), error->message);
	} else {
	fprintf(stderr, "%s: %s\n", g_get_prgname(), error->message);
	}

	g_clear_error(&error);
	}
	+
	+/*!
	+ * \internal
	+ * \brief Create an XML-only output object
	+ *
	+ * Create an output object that supports only the XML format, and free
	+ * existing XML if supplied (particularly useful for libpacemaker public API
	+ * functions that want to free any previous result supplied by the caller).
	+ *
	+ * \param[out] out Where to put newly created output object
	+ * \param[in,out] xml If non-NULL, this will be freed
	+ *
	+ * \return Standard Pacemaker return code
	+ */
	+int
	+pcmk__xml_output_new(pcmk__output_t *out, xmlNodePtr xml) {
	+ pcmk__supported_format_t xml_format[] = {
	+ PCMK__SUPPORTED_FORMAT_XML,
	+ { NULL, NULL, NULL }
	+ };
	+
	+ if (*xml != NULL) {
	+ xmlFreeNode(*xml);
	+ *xml = NULL;
	+ }
	+ pcmk__register_formats(NULL, xml_format);
	+ return pcmk__output_new(out, "xml", NULL, NULL);
	+}
	+
	+/*!
	+ * \internal
	+ * \brief Finish and free an XML-only output object
	+ *
	+ * \param[in] out Output object to free
	+ * \param[out] xml Where to store XML output
	+ */
	+void
	+pcmk__xml_output_finish(pcmk__output_t out, xmlNodePtr xml) {
	+ out->finish(out, 0, FALSE, (void **) xml);
	+ pcmk__output_free(out);
	+}
	+
	+/*!
	+ * \internal
	+ * \brief Create a new output object using the "log" format
	+ *
	+ * Create a new output object using the "log" format, and register the
	+ * libpe_status and libpacemaker messages.
	+ *
	+ * \return Newly created output object, or NULL on error
	+ */
	+pcmk__output_t *
	+pcmk__new_logger(void)
	+{
	+ int rc = pcmk_rc_ok;
	+ pcmk__output_t *out = NULL;
	+ const char* argv[] = { "", NULL };
	+ pcmk__supported_format_t formats[] = {
	+ PCMK__SUPPORTED_FORMAT_LOG,
	+ { NULL, NULL, NULL }
	+ };
	+
	+ pcmk__register_formats(NULL, formats);
	+ rc = pcmk__output_new(&out, "log", NULL, (char**)argv);
	+ if ((rc != pcmk_rc_ok) \|\| (out == NULL)) {
	+ crm_err("Can't log certain messages due to internal error: %s",
	+ pcmk_rc_str(rc));
	+ return NULL;
	+ }
	+ return out;
	+}
	diff --git a/lib/common/pid.c b/lib/common/pid.c
	index b2804f1f16..b9749c6b76 100644
	--- a/lib/common/pid.c
	+++ b/lib/common/pid.c
	@@ -1,261 +1,240 @@
	/*
	- * Copyright 2004-2020 the Pacemaker project contributors
	+ * Copyright 2004-2022 the Pacemaker project contributors
	*
	* The version control history for this file may have further details.
	*
	* This source code is licensed under the GNU Lesser General Public License
	* version 2.1 or later (LGPLv2.1+) WITHOUT ANY WARRANTY.
	*/

	#include <crm_internal.h>

	#ifndef _GNU_SOURCE
	# define _GNU_SOURCE
	#endif

	#include <stdio.h>
	#include <string.h>
	#include <sys/stat.h>

	#include <crm/crm.h>

	int
	pcmk__pid_active(pid_t pid, const char *daemon)
	{
	static pid_t last_asked_pid = 0; /* log spam prevention */
	-#if SUPPORT_PROCFS
	- static int have_proc_pid = 0;
	-#else
	- static int have_proc_pid = -1;
	-#endif
	int rc = 0;
	- bool no_name_check = ((daemon == NULL) \|\| (have_proc_pid == -1));
	-
	- if (have_proc_pid == 0) {
	- /* evaluation of /proc/PID/exe applicability via self-introspection */
	- char proc_path[PATH_MAX], exe_path[PATH_MAX];
	- snprintf(proc_path, sizeof(proc_path), "/proc/%lld/exe",
	- (long long) getpid());
	- have_proc_pid = 1;
	- if (readlink(proc_path, exe_path, sizeof(exe_path) - 1) < 0) {
	- have_proc_pid = -1;
	- }
	- }

	if (pid <= 0) {
	return EINVAL;
	}

	rc = kill(pid, 0);
	if ((rc < 0) && (errno == ESRCH)) {
	return ESRCH; /* no such PID detected */

	- } else if ((rc < 0) && no_name_check) {
	+ } else if ((daemon == NULL) \|\| !pcmk__procfs_has_pids()) {
	+ // The kill result is all we have, we can't check the name
	+
	+ if (rc == 0) {
	+ return pcmk_rc_ok;
	+ }
	rc = errno;
	if (last_asked_pid != pid) {
	crm_info("Cannot examine PID %lld: %s",
	- (long long) pid, strerror(errno));
	+ (long long) pid, pcmk_rc_str(rc));
	last_asked_pid = pid;
	}
	return rc; /* errno != ESRCH */

	- } else if ((rc == 0) && no_name_check) {
	- return pcmk_rc_ok; /* kill as the only indicator, cannot double check */
	-
	- } else if (daemon != NULL) {
	+ } else {
	/* make sure PID hasn't been reused by another process
	XXX: might still be just a zombie, which could confuse decisions */
	bool checked_through_kill = (rc == 0);
	- char proc_path[PATH_MAX], exe_path[PATH_MAX], myexe_path[PATH_MAX];
	- snprintf(proc_path, sizeof(proc_path), "/proc/%lld/exe",
	- (long long) pid);
	-
	- rc = readlink(proc_path, exe_path, sizeof(exe_path) - 1);
	- if (rc < 0) {
	- int rdlnk_errno = errno;
	-
	- if (rdlnk_errno != EACCES) {
	- int rc = kill(pid,0); /* check once again - filter out races */
	+ char exe_path[PATH_MAX], myexe_path[PATH_MAX];

	- if ((rc < 0) && (errno == ESRCH)) {
	+ rc = pcmk__procfs_pid2path(pid, exe_path, sizeof(exe_path));
	+ if (rc != pcmk_rc_ok) {
	+ if (rc != EACCES) {
	+ // Check again to filter out races
	+ if ((kill(pid, 0) < 0) && (errno == ESRCH)) {
	return ESRCH;
	}
	}
	if (last_asked_pid != pid) {
	- if (rdlnk_errno == EACCES) {
	- crm_info("Could not read from %s: %s " CRM_XS " errno=%d",
	- proc_path, strerror(rdlnk_errno), rdlnk_errno);
	+ if (rc == EACCES) {
	+ crm_info("Could not get executable for PID %lld: %s "
	+ CRM_XS " rc=%d",
	+ (long long) pid, pcmk_rc_str(rc), rc);
	} else {
	- crm_err("Could not read from %s: %s " CRM_XS " errno=%d",
	- proc_path, strerror(rdlnk_errno), rdlnk_errno);
	+ crm_err("Could not get executable for PID %lld: %s "
	+ CRM_XS " rc=%d",
	+ (long long) pid, pcmk_rc_str(rc), rc);
	}
	last_asked_pid = pid;
	}
	- if ((rdlnk_errno == EACCES) && checked_through_kill) {
	- // Trust kill result, can't double-check via path
	- return pcmk_rc_ok;
	- } else if (rdlnk_errno == EACCES) {
	- return EACCES;
	+ if (rc == EACCES) {
	+ // Trust kill if it was OK (we can't double-check via path)
	+ return checked_through_kill? pcmk_rc_ok : EACCES;
	} else {
	return ESRCH; /* most likely errno == ENOENT */
	}
	}
	- exe_path[rc] = '\0';

	if (daemon[0] != '/') {
	rc = snprintf(myexe_path, sizeof(myexe_path), CRM_DAEMON_DIR"/%s",
	daemon);
	} else {
	rc = snprintf(myexe_path, sizeof(myexe_path), "%s", daemon);
	}

	if (rc > 0 && rc < sizeof(myexe_path) && !strcmp(exe_path, myexe_path)) {
	return pcmk_rc_ok;
	}
	}

	return ESRCH;
	}

	#define LOCKSTRLEN 11

	/*!
	* \internal
	* \brief Read a process ID from a file
	*
	* \param[in] filename Process ID file to read
	* \param[out] pid Where to put PID that was read
	*
	* \return Standard Pacemaker return code
	*/
	int
	pcmk__read_pidfile(const char filename, pid_t pid)
	{
	int fd;
	struct stat sbuf;
	int rc = pcmk_rc_unknown_format;
	long long pid_read = 0;
	char buf[LOCKSTRLEN + 1];

	CRM_CHECK((filename != NULL) && (pid != NULL), return EINVAL);

	fd = open(filename, O_RDONLY);
	if (fd < 0) {
	return errno;
	}

	if ((fstat(fd, &sbuf) >= 0) && (sbuf.st_size < LOCKSTRLEN)) {
	sleep(2); /* if someone was about to create one,
	* give'm a sec to do so
	*/
	}

	if (read(fd, buf, sizeof(buf)) < 1) {
	rc = errno;
	goto bail;
	}

	if (sscanf(buf, "%lld", &pid_read) > 0) {
	if (pid_read <= 0) {
	rc = ESRCH;
	} else {
	rc = pcmk_rc_ok;
	*pid = (pid_t) pid_read;
	crm_trace("Read pid %lld from %s", pid_read, filename);
	}
	}

	bail:
	close(fd);
	return rc;
	}

	/*!
	* \internal
	* \brief Check whether a process from a PID file matches expected values
	*
	* \param[in] filename Path of PID file
	* \param[in] expected_pid If positive, compare to this PID
	* \param[in] expected_name If not NULL, the PID from the PID file is valid
	* only if it is active as a process with this name
	* \param[out] pid If not NULL, store PID found in PID file here
	*
	* \return Standard Pacemaker return code
	*/
	int
	pcmk__pidfile_matches(const char *filename, pid_t expected_pid,
	const char expected_name, pid_t pid)
	{
	pid_t pidfile_pid = 0;
	int rc = pcmk__read_pidfile(filename, &pidfile_pid);

	if (pid) {
	*pid = pidfile_pid;
	}

	if (rc != pcmk_rc_ok) {
	// Error reading PID file or invalid contents
	unlink(filename);
	rc = ENOENT;

	} else if ((expected_pid > 0) && (pidfile_pid == expected_pid)) {
	// PID in file matches what was expected
	rc = pcmk_rc_ok;

	} else if (pcmk__pid_active(pidfile_pid, expected_name) == ESRCH) {
	// Contains a stale value
	unlink(filename);
	rc = ENOENT;

	} else if ((expected_pid > 0) && (pidfile_pid != expected_pid)) {
	// Locked by existing process
	rc = EEXIST;
	}

	return rc;
	}

	/*!
	* \internal
	* \brief Create a PID file for the current process (if not already existent)
	*
	* \param[in] filename Name of PID file to create
	* \param[in] name Name of current process
	*
	* \return Standard Pacemaker return code
	*/
	int
	pcmk__lock_pidfile(const char filename, const char name)
	{
	pid_t mypid = getpid();
	int fd = 0;
	int rc = 0;
	char buf[LOCKSTRLEN + 2];

	rc = pcmk__pidfile_matches(filename, 0, name, NULL);
	if ((rc != pcmk_rc_ok) && (rc != ENOENT)) {
	// Locked by existing process
	return rc;
	}

	fd = open(filename, O_CREAT \| O_WRONLY \| O_EXCL, 0644);
	if (fd < 0) {
	return errno;
	}

	snprintf(buf, sizeof(buf), "%*lld\n", LOCKSTRLEN - 1, (long long) mypid);
	rc = write(fd, buf, LOCKSTRLEN);
	close(fd);

	if (rc != LOCKSTRLEN) {
	crm_perror(LOG_ERR, "Incomplete write to %s", filename);
	return errno;
	}

	rc = pcmk__pidfile_matches(filename, mypid, name, NULL);
	if (rc != pcmk_rc_ok) {
	// Something is really wrong -- maybe I/O error on read back?
	unlink(filename);
	}
	return rc;
	}
	diff --git a/lib/common/procfs.c b/lib/common/procfs.c
	index e4b220e8ce..37ab62b428 100644
	--- a/lib/common/procfs.c
	+++ b/lib/common/procfs.c
	@@ -1,165 +1,227 @@
	/*
	- * Copyright 2015-2020 the Pacemaker project contributors
	+ * Copyright 2015-2022 the Pacemaker project contributors
	*
	* The version control history for this file may have further details.
	*
	* This source code is licensed under the GNU Lesser General Public License
	* version 2.1 or later (LGPLv2.1+) WITHOUT ANY WARRANTY.
	*/

	#include <crm_internal.h>

	#ifndef _GNU_SOURCE
	# define _GNU_SOURCE
	#endif

	#include <stdio.h>
	#include <stdlib.h>
	#include <string.h>
	#include <sys/stat.h>
	#include <sys/types.h>
	#include <dirent.h>
	#include <ctype.h>

	/*!
	* \internal
	* \brief Get process ID and name associated with a /proc directory entry
	*
	* \param[in] entry Directory entry (must be result of readdir() on /proc)
	* \param[out] name If not NULL, a char[16] to hold the process name
	* \param[out] pid If not NULL, will be set to process ID of entry
	*
	* \return Standard Pacemaker return code
	* \note This should be called only on Linux systems, as not all systems that
	* support /proc store process names and IDs in the same way. The kernel
	* limits the process name to the first 15 characters (plus terminator).
	* It would be nice if there were a public kernel API constant for that
	* limit, but there isn't.
	*/
	static int
	pcmk__procfs_process_info(struct dirent entry, char name, pid_t *pid)
	{
	int fd, local_pid;
	FILE *file;
	struct stat statbuf;
	char procpath[128] = { 0 };

	/* We're only interested in entries whose name is a PID,
	* so skip anything non-numeric or that is too long.
	*
	* 114 = 128 - strlen("/proc/") - strlen("/status") - 1
	*/
	local_pid = atoi(entry->d_name);
	if ((local_pid <= 0) \|\| (strlen(entry->d_name) > 114)) {
	return -1;
	}
	if (pid) {
	*pid = (pid_t) local_pid;
	}

	/* Get this entry's file information */
	strcpy(procpath, "/proc/");
	strcat(procpath, entry->d_name);
	fd = open(procpath, O_RDONLY);
	if (fd < 0 ) {
	return -1;
	}
	if (fstat(fd, &statbuf) < 0) {
	close(fd);
	return -1;
	}
	close(fd);

	/* We're only interested in subdirectories */
	if (!S_ISDIR(statbuf.st_mode)) {
	return -1;
	}

	/* Read the first entry ("Name:") from the process's status file.
	* We could handle the valgrind case if we parsed the cmdline file
	* instead, but that's more of a pain than it's worth.
	*/
	if (name != NULL) {
	strcat(procpath, "/status");
	file = fopen(procpath, "r");
	if (!file) {
	return -1;
	}
	if (fscanf(file, "Name:\t%15[^\n]", name) != 1) {
	fclose(file);
	return -1;
	}
	name[15] = 0;
	fclose(file);
	}

	return 0;
	}

	/*!
	* \internal
	* \brief Return process ID of a named process
	*
	* \param[in] name Process name (as used in /proc/.../status)
	*
	* \return Process ID of named process if running, 0 otherwise
	*
	* \note This will return 0 if the process is being run via valgrind.
	* This should be called only on Linux systems.
	*/
	pid_t
	pcmk__procfs_pid_of(const char *name)
	{
	DIR *dp;
	struct dirent *entry;
	pid_t pid = 0;
	char entry_name[64] = { 0 };

	dp = opendir("/proc");
	if (dp == NULL) {
	crm_notice("Can not read /proc directory to track existing components");
	return 0;
	}

	while ((entry = readdir(dp)) != NULL) {
	if ((pcmk__procfs_process_info(entry, entry_name, &pid) == pcmk_rc_ok)
	&& pcmk__str_eq(entry_name, name, pcmk__str_casei)
	&& (pcmk__pid_active(pid, NULL) == pcmk_rc_ok)) {

	crm_info("Found %s active as process %lld", name, (long long) pid);
	break;
	}
	pid = 0;
	}
	closedir(dp);
	return pid;
	}

	/*!
	* \internal
	* \brief Calculate number of logical CPU cores from procfs
	*
	* \return Number of cores (or 1 if unable to determine)
	*/
	unsigned int
	pcmk__procfs_num_cores(void)
	{
	int cores = 0;
	FILE *stream = NULL;

	/* Parse /proc/stat instead of /proc/cpuinfo because it's smaller */
	stream = fopen("/proc/stat", "r");
	if (stream == NULL) {
	crm_perror(LOG_INFO, "Could not open /proc/stat");
	} else {
	char buffer[2048];

	while (fgets(buffer, sizeof(buffer), stream)) {
	if (pcmk__starts_with(buffer, "cpu") && isdigit(buffer[3])) {
	++cores;
	}
	}
	fclose(stream);
	}
	return cores? cores : 1;
	}
	+
	+/*!
	+ * \internal
	+ * \brief Get the executable path corresponding to a process ID
	+ *
	+ * \param[in] pid Process ID to check
	+ * \param[out] path Where to store executable path
	+ * \param[in] path_size Size of \p path in characters (ideally PATH_MAX)
	+ *
	+ * \return Standard Pacemaker error code (as possible errno values from
	+ * readlink())
	+ */
	+int
	+pcmk__procfs_pid2path(pid_t pid, char path[], size_t path_size)
	+{
	+#if SUPPORT_PROCFS
	+ char procfs_exe_path[PATH_MAX];
	+ ssize_t link_rc;
	+
	+ if (snprintf(procfs_exe_path, path_size, "/proc/%lld/exe",
	+ (long long) pid) >= path_size) {
	+ return ENAMETOOLONG; // Truncated (shouldn't be possible in practice)
	+ }
	+
	+ link_rc = readlink(procfs_exe_path, path, path_size - 1);
	+ if (link_rc < 0) {
	+ return errno;
	+ } else if (link_rc >= (path_size - 1)) {
	+ return ENAMETOOLONG;
	+ }
	+
	+ path[link_rc] = '\0';
	+ return pcmk_rc_ok;
	+#else
	+ return EOPNOTSUPP;
	+#endif
	+}
	+
	+/*!
	+ * \internal
	+ * \brief Check whether process ID information is available from procfs
	+ *
	+ * \return true if process ID information is available, otherwise false
	+ */
	+bool
	+pcmk__procfs_has_pids(void)
	+{
	+#if SUPPORT_PROCFS
	+ static bool have_pids = false;
	+ static bool checked = false;
	+
	+ if (!checked) {
	+ char path[PATH_MAX];
	+
	+ have_pids = pcmk__procfs_pid2path(getpid(), path, sizeof(path)) == pcmk_rc_ok;
	+ checked = true;
	+ }
	+ return have_pids;
	+#else
	+ return false;
	+#endif
	+}
	diff --git a/lib/common/results.c b/lib/common/results.c
	index 543d1e0f31..0d4873991f 100644
	--- a/lib/common/results.c
	+++ b/lib/common/results.c
	@@ -1,935 +1,918 @@
	/*
	* Copyright 2004-2022 the Pacemaker project contributors
	*
	* The version control history for this file may have further details.
	*
	* This source code is licensed under the GNU Lesser General Public License
	* version 2.1 or later (LGPLv2.1+) WITHOUT ANY WARRANTY.
	*/

	#include <crm_internal.h>

	#ifndef _GNU_SOURCE
	# define _GNU_SOURCE
	#endif

	#include <bzlib.h>
	#include <errno.h>
	#include <stdlib.h>
	#include <string.h>
	#include <qb/qbdefs.h>

	#include <crm/common/mainloop.h>
	#include <crm/common/xml.h>

	G_DEFINE_QUARK(pcmk-rc-error-quark, pcmk__rc_error)
	G_DEFINE_QUARK(pcmk-exitc-error-quark, pcmk__exitc_error)

	// @COMPAT Legacy function return codes

	//! \deprecated Use standard return codes and pcmk_rc_name() instead
	const char *
	pcmk_errorname(int rc)
	{
	rc = abs(rc);
	switch (rc) {
	case pcmk_err_generic: return "pcmk_err_generic";
	case pcmk_err_no_quorum: return "pcmk_err_no_quorum";
	case pcmk_err_schema_validation: return "pcmk_err_schema_validation";
	case pcmk_err_transform_failed: return "pcmk_err_transform_failed";
	case pcmk_err_old_data: return "pcmk_err_old_data";
	case pcmk_err_diff_failed: return "pcmk_err_diff_failed";
	case pcmk_err_diff_resync: return "pcmk_err_diff_resync";
	case pcmk_err_cib_modified: return "pcmk_err_cib_modified";
	case pcmk_err_cib_backup: return "pcmk_err_cib_backup";
	case pcmk_err_cib_save: return "pcmk_err_cib_save";
	case pcmk_err_cib_corrupt: return "pcmk_err_cib_corrupt";
	case pcmk_err_multiple: return "pcmk_err_multiple";
	case pcmk_err_node_unknown: return "pcmk_err_node_unknown";
	case pcmk_err_already: return "pcmk_err_already";
	case pcmk_err_bad_nvpair: return "pcmk_err_bad_nvpair";
	case pcmk_err_unknown_format: return "pcmk_err_unknown_format";
	default: return pcmk_rc_name(rc); // system errno
	}
	}

	//! \deprecated Use standard return codes and pcmk_rc_str() instead
	const char *
	pcmk_strerror(int rc)
	{
	return pcmk_rc_str(pcmk_legacy2rc(rc));
	}

	// Standard Pacemaker API return codes

	/* This array is used only for nonzero values of pcmk_rc_e. Its values must be
	* kept in the exact reverse order of the enum value numbering (i.e. add new
	* values to the end of the array).
	*/
	static struct pcmk__rc_info {
	const char *name;
	const char *desc;
	int legacy_rc;
	} pcmk__rcs[] = {
	{ "pcmk_rc_error",
	"Error",
	-pcmk_err_generic,
	},
	{ "pcmk_rc_unknown_format",
	"Unknown output format",
	-pcmk_err_unknown_format,
	},
	{ "pcmk_rc_bad_nvpair",
	"Bad name/value pair given",
	-pcmk_err_bad_nvpair,
	},
	{ "pcmk_rc_already",
	"Already in requested state",
	-pcmk_err_already,
	},
	{ "pcmk_rc_node_unknown",
	"Node not found",
	-pcmk_err_node_unknown,
	},
	{ "pcmk_rc_multiple",
	"Resource active on multiple nodes",
	-pcmk_err_multiple,
	},
	{ "pcmk_rc_cib_corrupt",
	"Could not parse on-disk configuration",
	-pcmk_err_cib_corrupt,
	},
	{ "pcmk_rc_cib_save",
	"Could not save new configuration to disk",
	-pcmk_err_cib_save,
	},
	{ "pcmk_rc_cib_backup",
	"Could not archive previous configuration",
	-pcmk_err_cib_backup,
	},
	{ "pcmk_rc_cib_modified",
	"On-disk configuration was manually modified",
	-pcmk_err_cib_modified,
	},
	{ "pcmk_rc_diff_resync",
	"Application of update diff failed, requesting full refresh",
	-pcmk_err_diff_resync,
	},
	{ "pcmk_rc_diff_failed",
	"Application of update diff failed",
	-pcmk_err_diff_failed,
	},
	{ "pcmk_rc_old_data",
	"Update was older than existing configuration",
	-pcmk_err_old_data,
	},
	{ "pcmk_rc_transform_failed",
	"Schema transform failed",
	-pcmk_err_transform_failed,
	},
	{ "pcmk_rc_schema_unchanged",
	"Schema is already the latest available",
	-pcmk_err_schema_unchanged,
	},
	{ "pcmk_rc_schema_validation",
	"Update does not conform to the configured schema",
	-pcmk_err_schema_validation,
	},
	{ "pcmk_rc_no_quorum",
	"Operation requires quorum",
	-pcmk_err_no_quorum,
	},
	{ "pcmk_rc_ipc_pid_only",
	"IPC server process is active but not accepting connections",
	-pcmk_err_generic,
	},
	{ "pcmk_rc_ipc_unresponsive",
	"IPC server is unresponsive",
	-pcmk_err_generic,
	},
	{ "pcmk_rc_ipc_unauthorized",
	"IPC server is blocked by unauthorized process",
	-pcmk_err_generic,
	},
	{ "pcmk_rc_op_unsatisifed",
	"Not applicable under current conditions",
	-pcmk_err_generic,
	},
	{ "pcmk_rc_undetermined",
	"Result undetermined",
	-pcmk_err_generic,
	},
	{ "pcmk_rc_before_range",
	"Result occurs before given range",
	-pcmk_err_generic,
	},
	{ "pcmk_rc_within_range",
	"Result occurs within given range",
	-pcmk_err_generic,
	},
	{ "pcmk_rc_after_range",
	"Result occurs after given range",
	-pcmk_err_generic,
	},
	{ "pcmk_rc_no_output",
	"Output message produced no output",
	-pcmk_err_generic,
	},
	{ "pcmk_rc_no_input",
	"Input file not available",
	-pcmk_err_generic,
	},
	{ "pcmk_rc_underflow",
	"Value too small to be stored in data type",
	-pcmk_err_generic,
	},
	{ "pcmk_rc_dot_error",
	"Error writing dot(1) file",
	-pcmk_err_generic,
	},
	{ "pcmk_rc_graph_error",
	"Error writing graph file",
	-pcmk_err_generic,
	},
	{ "pcmk_rc_invalid_transition",
	"Cluster simulation produced invalid transition",
	-pcmk_err_generic,
	},
	};

	#define PCMK__N_RC (sizeof(pcmk__rcs) / sizeof(struct pcmk__rc_info))

	/*!
	* \brief Get a return code constant name as a string
	*
	* \param[in] rc Integer return code to convert
	*
	* \return String of constant name corresponding to rc
	*/
	const char *
	pcmk_rc_name(int rc)
	{
	if ((rc <= pcmk_rc_error) && ((pcmk_rc_error - rc) < PCMK__N_RC)) {
	return pcmk__rcs[pcmk_rc_error - rc].name;
	}
	switch (rc) {
	case pcmk_rc_ok: return "pcmk_rc_ok";
	case E2BIG: return "E2BIG";
	case EACCES: return "EACCES";
	case EADDRINUSE: return "EADDRINUSE";
	case EADDRNOTAVAIL: return "EADDRNOTAVAIL";
	case EAFNOSUPPORT: return "EAFNOSUPPORT";
	case EAGAIN: return "EAGAIN";
	case EALREADY: return "EALREADY";
	case EBADF: return "EBADF";
	case EBADMSG: return "EBADMSG";
	case EBUSY: return "EBUSY";
	case ECANCELED: return "ECANCELED";
	case ECHILD: return "ECHILD";
	case ECOMM: return "ECOMM";
	case ECONNABORTED: return "ECONNABORTED";
	case ECONNREFUSED: return "ECONNREFUSED";
	case ECONNRESET: return "ECONNRESET";
	/* case EDEADLK: return "EDEADLK"; */
	case EDESTADDRREQ: return "EDESTADDRREQ";
	case EDOM: return "EDOM";
	case EDQUOT: return "EDQUOT";
	case EEXIST: return "EEXIST";
	case EFAULT: return "EFAULT";
	case EFBIG: return "EFBIG";
	case EHOSTDOWN: return "EHOSTDOWN";
	case EHOSTUNREACH: return "EHOSTUNREACH";
	case EIDRM: return "EIDRM";
	case EILSEQ: return "EILSEQ";
	case EINPROGRESS: return "EINPROGRESS";
	case EINTR: return "EINTR";
	case EINVAL: return "EINVAL";
	case EIO: return "EIO";
	case EISCONN: return "EISCONN";
	case EISDIR: return "EISDIR";
	case ELIBACC: return "ELIBACC";
	case ELOOP: return "ELOOP";
	case EMFILE: return "EMFILE";
	case EMLINK: return "EMLINK";
	case EMSGSIZE: return "EMSGSIZE";
	#ifdef EMULTIHOP // Not available on OpenBSD
	case EMULTIHOP: return "EMULTIHOP";
	#endif
	case ENAMETOOLONG: return "ENAMETOOLONG";
	case ENETDOWN: return "ENETDOWN";
	case ENETRESET: return "ENETRESET";
	case ENETUNREACH: return "ENETUNREACH";
	case ENFILE: return "ENFILE";
	case ENOBUFS: return "ENOBUFS";
	case ENODATA: return "ENODATA";
	case ENODEV: return "ENODEV";
	case ENOENT: return "ENOENT";
	case ENOEXEC: return "ENOEXEC";
	case ENOKEY: return "ENOKEY";
	case ENOLCK: return "ENOLCK";
	#ifdef ENOLINK // Not available on OpenBSD
	case ENOLINK: return "ENOLINK";
	#endif
	case ENOMEM: return "ENOMEM";
	case ENOMSG: return "ENOMSG";
	case ENOPROTOOPT: return "ENOPROTOOPT";
	case ENOSPC: return "ENOSPC";
	#ifdef ENOSR
	case ENOSR: return "ENOSR";
	#endif
	#ifdef ENOSTR
	case ENOSTR: return "ENOSTR";
	#endif
	case ENOSYS: return "ENOSYS";
	case ENOTBLK: return "ENOTBLK";
	case ENOTCONN: return "ENOTCONN";
	case ENOTDIR: return "ENOTDIR";
	case ENOTEMPTY: return "ENOTEMPTY";
	case ENOTSOCK: return "ENOTSOCK";
	#if ENOTSUP != EOPNOTSUPP
	case ENOTSUP: return "ENOTSUP";
	#endif
	case ENOTTY: return "ENOTTY";
	case ENOTUNIQ: return "ENOTUNIQ";
	case ENXIO: return "ENXIO";
	case EOPNOTSUPP: return "EOPNOTSUPP";
	case EOVERFLOW: return "EOVERFLOW";
	case EPERM: return "EPERM";
	case EPFNOSUPPORT: return "EPFNOSUPPORT";
	case EPIPE: return "EPIPE";
	case EPROTO: return "EPROTO";
	case EPROTONOSUPPORT: return "EPROTONOSUPPORT";
	case EPROTOTYPE: return "EPROTOTYPE";
	case ERANGE: return "ERANGE";
	case EREMOTE: return "EREMOTE";
	case EREMOTEIO: return "EREMOTEIO";
	case EROFS: return "EROFS";
	case ESHUTDOWN: return "ESHUTDOWN";
	case ESPIPE: return "ESPIPE";
	case ESOCKTNOSUPPORT: return "ESOCKTNOSUPPORT";
	case ESRCH: return "ESRCH";
	case ESTALE: return "ESTALE";
	case ETIME: return "ETIME";
	case ETIMEDOUT: return "ETIMEDOUT";
	case ETXTBSY: return "ETXTBSY";
	#ifdef EUNATCH
	case EUNATCH: return "EUNATCH";
	#endif
	case EUSERS: return "EUSERS";
	/* case EWOULDBLOCK: return "EWOULDBLOCK"; */
	case EXDEV: return "EXDEV";

	#ifdef EBADE // Not available on OS X
	case EBADE: return "EBADE";
	case EBADFD: return "EBADFD";
	case EBADSLT: return "EBADSLT";
	case EDEADLOCK: return "EDEADLOCK";
	case EBADR: return "EBADR";
	case EBADRQC: return "EBADRQC";
	case ECHRNG: return "ECHRNG";
	#ifdef EISNAM // Not available on OS X, Illumos, Solaris
	case EISNAM: return "EISNAM";
	case EKEYEXPIRED: return "EKEYEXPIRED";
	case EKEYREVOKED: return "EKEYREVOKED";
	#endif
	case EKEYREJECTED: return "EKEYREJECTED";
	case EL2HLT: return "EL2HLT";
	case EL2NSYNC: return "EL2NSYNC";
	case EL3HLT: return "EL3HLT";
	case EL3RST: return "EL3RST";
	case ELIBBAD: return "ELIBBAD";
	case ELIBMAX: return "ELIBMAX";
	case ELIBSCN: return "ELIBSCN";
	case ELIBEXEC: return "ELIBEXEC";
	#ifdef ENOMEDIUM // Not available on OS X, Illumos, Solaris
	case ENOMEDIUM: return "ENOMEDIUM";
	case EMEDIUMTYPE: return "EMEDIUMTYPE";
	#endif
	case ENONET: return "ENONET";
	case ENOPKG: return "ENOPKG";
	case EREMCHG: return "EREMCHG";
	case ERESTART: return "ERESTART";
	case ESTRPIPE: return "ESTRPIPE";
	#ifdef EUCLEAN // Not available on OS X, Illumos, Solaris
	case EUCLEAN: return "EUCLEAN";
	#endif
	case EXFULL: return "EXFULL";
	#endif // EBADE
	default: return "Unknown";
	}
	}

	/*!
	* \brief Get a user-friendly description of a return code
	*
	* \param[in] rc Integer return code to convert
	*
	* \return String description of rc
	*/
	const char *
	pcmk_rc_str(int rc)
	{
	if (rc == pcmk_rc_ok) {
	return "OK";
	}
	if ((rc <= pcmk_rc_error) && ((pcmk_rc_error - rc) < PCMK__N_RC)) {
	return pcmk__rcs[pcmk_rc_error - rc].desc;
	}
	if (rc < 0) {
	return "Error";
	}

	// Handle values that could be defined by system or by portability.h
	switch (rc) {
	#ifdef PCMK__ENOTUNIQ
	case ENOTUNIQ: return "Name not unique on network";
	#endif
	#ifdef PCMK__ECOMM
	case ECOMM: return "Communication error on send";
	#endif
	#ifdef PCMK__ELIBACC
	case ELIBACC: return "Can not access a needed shared library";
	#endif
	#ifdef PCMK__EREMOTEIO
	case EREMOTEIO: return "Remote I/O error";
	#endif
	#ifdef PCMK__ENOKEY
	case ENOKEY: return "Required key not available";
	#endif
	#ifdef PCMK__ENODATA
	case ENODATA: return "No data available";
	#endif
	#ifdef PCMK__ETIME
	case ETIME: return "Timer expired";
	#endif
	#ifdef PCMK__EKEYREJECTED
	case EKEYREJECTED: return "Key was rejected by service";
	#endif
	default: return strerror(rc);
	}
	}

	// This returns negative values for errors
	//! \deprecated Use standard return codes instead
	int
	pcmk_rc2legacy(int rc)
	{
	if (rc >= 0) {
	return -rc; // OK or system errno
	}
	if ((rc <= pcmk_rc_error) && ((pcmk_rc_error - rc) < PCMK__N_RC)) {
	return pcmk__rcs[pcmk_rc_error - rc].legacy_rc;
	}
	return -pcmk_err_generic;
	}

	//! \deprecated Use standard return codes instead
	int
	pcmk_legacy2rc(int legacy_rc)
	{
	legacy_rc = abs(legacy_rc);
	switch (legacy_rc) {
	case pcmk_err_no_quorum: return pcmk_rc_no_quorum;
	case pcmk_err_schema_validation: return pcmk_rc_schema_validation;
	case pcmk_err_schema_unchanged: return pcmk_rc_schema_unchanged;
	case pcmk_err_transform_failed: return pcmk_rc_transform_failed;
	case pcmk_err_old_data: return pcmk_rc_old_data;
	case pcmk_err_diff_failed: return pcmk_rc_diff_failed;
	case pcmk_err_diff_resync: return pcmk_rc_diff_resync;
	case pcmk_err_cib_modified: return pcmk_rc_cib_modified;
	case pcmk_err_cib_backup: return pcmk_rc_cib_backup;
	case pcmk_err_cib_save: return pcmk_rc_cib_save;
	case pcmk_err_cib_corrupt: return pcmk_rc_cib_corrupt;
	case pcmk_err_multiple: return pcmk_rc_multiple;
	case pcmk_err_node_unknown: return pcmk_rc_node_unknown;
	case pcmk_err_already: return pcmk_rc_already;
	case pcmk_err_bad_nvpair: return pcmk_rc_bad_nvpair;
	case pcmk_err_unknown_format: return pcmk_rc_unknown_format;
	case pcmk_err_generic: return pcmk_rc_error;
	case pcmk_ok: return pcmk_rc_ok;
	default: return legacy_rc; // system errno
	}
	}

	// Exit status codes

	const char *
	crm_exit_name(crm_exit_t exit_code)
	{
	switch (exit_code) {
	case CRM_EX_OK: return "CRM_EX_OK";
	case CRM_EX_ERROR: return "CRM_EX_ERROR";
	case CRM_EX_INVALID_PARAM: return "CRM_EX_INVALID_PARAM";
	case CRM_EX_UNIMPLEMENT_FEATURE: return "CRM_EX_UNIMPLEMENT_FEATURE";
	case CRM_EX_INSUFFICIENT_PRIV: return "CRM_EX_INSUFFICIENT_PRIV";
	case CRM_EX_NOT_INSTALLED: return "CRM_EX_NOT_INSTALLED";
	case CRM_EX_NOT_CONFIGURED: return "CRM_EX_NOT_CONFIGURED";
	case CRM_EX_NOT_RUNNING: return "CRM_EX_NOT_RUNNING";
	+ case CRM_EX_PROMOTED: return "CRM_EX_PROMOTED";
	+ case CRM_EX_FAILED_PROMOTED: return "CRM_EX_FAILED_PROMOTED";
	case CRM_EX_USAGE: return "CRM_EX_USAGE";
	case CRM_EX_DATAERR: return "CRM_EX_DATAERR";
	case CRM_EX_NOINPUT: return "CRM_EX_NOINPUT";
	case CRM_EX_NOUSER: return "CRM_EX_NOUSER";
	case CRM_EX_NOHOST: return "CRM_EX_NOHOST";
	case CRM_EX_UNAVAILABLE: return "CRM_EX_UNAVAILABLE";
	case CRM_EX_SOFTWARE: return "CRM_EX_SOFTWARE";
	case CRM_EX_OSERR: return "CRM_EX_OSERR";
	case CRM_EX_OSFILE: return "CRM_EX_OSFILE";
	case CRM_EX_CANTCREAT: return "CRM_EX_CANTCREAT";
	case CRM_EX_IOERR: return "CRM_EX_IOERR";
	case CRM_EX_TEMPFAIL: return "CRM_EX_TEMPFAIL";
	case CRM_EX_PROTOCOL: return "CRM_EX_PROTOCOL";
	case CRM_EX_NOPERM: return "CRM_EX_NOPERM";
	case CRM_EX_CONFIG: return "CRM_EX_CONFIG";
	case CRM_EX_FATAL: return "CRM_EX_FATAL";
	case CRM_EX_PANIC: return "CRM_EX_PANIC";
	case CRM_EX_DISCONNECT: return "CRM_EX_DISCONNECT";
	case CRM_EX_DIGEST: return "CRM_EX_DIGEST";
	case CRM_EX_NOSUCH: return "CRM_EX_NOSUCH";
	case CRM_EX_QUORUM: return "CRM_EX_QUORUM";
	case CRM_EX_UNSAFE: return "CRM_EX_UNSAFE";
	case CRM_EX_EXISTS: return "CRM_EX_EXISTS";
	case CRM_EX_MULTIPLE: return "CRM_EX_MULTIPLE";
	case CRM_EX_EXPIRED: return "CRM_EX_EXPIRED";
	case CRM_EX_NOT_YET_IN_EFFECT: return "CRM_EX_NOT_YET_IN_EFFECT";
	case CRM_EX_INDETERMINATE: return "CRM_EX_INDETERMINATE";
	case CRM_EX_UNSATISFIED: return "CRM_EX_UNSATISFIED";
	case CRM_EX_OLD: return "CRM_EX_OLD";
	case CRM_EX_TIMEOUT: return "CRM_EX_TIMEOUT";
	case CRM_EX_DEGRADED: return "CRM_EX_DEGRADED";
	case CRM_EX_DEGRADED_PROMOTED: return "CRM_EX_DEGRADED_PROMOTED";
	+ case CRM_EX_NONE: return "CRM_EX_NONE";
	case CRM_EX_MAX: return "CRM_EX_UNKNOWN";
	}
	return "CRM_EX_UNKNOWN";
	}

	const char *
	crm_exit_str(crm_exit_t exit_code)
	{
	switch (exit_code) {
	case CRM_EX_OK: return "OK";
	case CRM_EX_ERROR: return "Error occurred";
	case CRM_EX_INVALID_PARAM: return "Invalid parameter";
	case CRM_EX_UNIMPLEMENT_FEATURE: return "Unimplemented";
	case CRM_EX_INSUFFICIENT_PRIV: return "Insufficient privileges";
	case CRM_EX_NOT_INSTALLED: return "Not installed";
	case CRM_EX_NOT_CONFIGURED: return "Not configured";
	case CRM_EX_NOT_RUNNING: return "Not running";
	+ case CRM_EX_PROMOTED: return "Promoted";
	+ case CRM_EX_FAILED_PROMOTED: return "Failed in promoted role";
	case CRM_EX_USAGE: return "Incorrect usage";
	case CRM_EX_DATAERR: return "Invalid data given";
	case CRM_EX_NOINPUT: return "Input file not available";
	case CRM_EX_NOUSER: return "User does not exist";
	case CRM_EX_NOHOST: return "Host does not exist";
	case CRM_EX_UNAVAILABLE: return "Necessary service unavailable";
	case CRM_EX_SOFTWARE: return "Internal software bug";
	case CRM_EX_OSERR: return "Operating system error occurred";
	case CRM_EX_OSFILE: return "System file not available";
	case CRM_EX_CANTCREAT: return "Cannot create output file";
	case CRM_EX_IOERR: return "I/O error occurred";
	case CRM_EX_TEMPFAIL: return "Temporary failure, try again";
	case CRM_EX_PROTOCOL: return "Protocol violated";
	case CRM_EX_NOPERM: return "Insufficient privileges";
	case CRM_EX_CONFIG: return "Invalid configuration";
	case CRM_EX_FATAL: return "Fatal error occurred, will not respawn";
	case CRM_EX_PANIC: return "System panic required";
	case CRM_EX_DISCONNECT: return "Not connected";
	case CRM_EX_DIGEST: return "Digest mismatch";
	case CRM_EX_NOSUCH: return "No such object";
	case CRM_EX_QUORUM: return "Quorum required";
	case CRM_EX_UNSAFE: return "Operation not safe";
	case CRM_EX_EXISTS: return "Requested item already exists";
	case CRM_EX_MULTIPLE: return "Multiple items match request";
	case CRM_EX_EXPIRED: return "Requested item has expired";
	case CRM_EX_NOT_YET_IN_EFFECT: return "Requested item is not yet in effect";
	case CRM_EX_INDETERMINATE: return "Could not determine status";
	case CRM_EX_UNSATISFIED: return "Not applicable under current conditions";
	case CRM_EX_OLD: return "Update was older than existing configuration";
	case CRM_EX_TIMEOUT: return "Timeout occurred";
	case CRM_EX_DEGRADED: return "Service is active but might fail soon";
	case CRM_EX_DEGRADED_PROMOTED: return "Service is promoted but might fail soon";
	+ case CRM_EX_NONE: return "No exit status available";
	case CRM_EX_MAX: return "Error occurred";
	}
	if ((exit_code > 128) && (exit_code < CRM_EX_MAX)) {
	return "Interrupted by signal";
	}
	return "Unknown exit status";
	}

	-//! \deprecated Use standard return codes and pcmk_rc2exitc() instead
	-crm_exit_t
	-crm_errno2exit(int rc)
	-{
	- rc = abs(rc); // Convenience for functions that return -errno
	- switch (rc) {
	- case pcmk_ok:
	- return CRM_EX_OK;
	-
	- case pcmk_err_no_quorum:
	- return CRM_EX_QUORUM;
	-
	- case pcmk_err_old_data:
	- return CRM_EX_OLD;
	-
	- case pcmk_err_schema_validation:
	- case pcmk_err_transform_failed:
	- return CRM_EX_CONFIG;
	-
	- case pcmk_err_bad_nvpair:
	- return CRM_EX_INVALID_PARAM;
	-
	- case pcmk_err_already:
	- return CRM_EX_EXISTS;
	-
	- case pcmk_err_multiple:
	- return CRM_EX_MULTIPLE;
	-
	- case pcmk_err_node_unknown:
	- case pcmk_err_unknown_format:
	- return CRM_EX_NOSUCH;
	-
	- default:
	- return pcmk_rc2exitc(rc); // system errno
	- }
	-}
	-
	/*!
	* \brief Map a function return code to the most similar exit code
	*
	* \param[in] rc Function return code
	*
	* \return Most similar exit code
	*/
	crm_exit_t
	pcmk_rc2exitc(int rc)
	{
	switch (rc) {
	case pcmk_rc_ok:
	return CRM_EX_OK;

	case pcmk_rc_no_quorum:
	return CRM_EX_QUORUM;

	case pcmk_rc_old_data:
	return CRM_EX_OLD;

	case pcmk_rc_schema_validation:
	case pcmk_rc_transform_failed:
	return CRM_EX_CONFIG;

	case pcmk_rc_bad_nvpair:
	return CRM_EX_INVALID_PARAM;

	case EACCES:
	return CRM_EX_INSUFFICIENT_PRIV;

	case EBADF:
	case EINVAL:
	case EFAULT:
	case ENOSYS:
	case EOVERFLOW:
	case pcmk_rc_underflow:
	return CRM_EX_SOFTWARE;

	case EBADMSG:
	case EMSGSIZE:
	case ENOMSG:
	case ENOPROTOOPT:
	case EPROTO:
	case EPROTONOSUPPORT:
	case EPROTOTYPE:
	return CRM_EX_PROTOCOL;

	case ECOMM:
	case ENOMEM:
	return CRM_EX_OSERR;

	case ECONNABORTED:
	case ECONNREFUSED:
	case ECONNRESET:
	case ENOTCONN:
	return CRM_EX_DISCONNECT;

	case EEXIST:
	case pcmk_rc_already:
	return CRM_EX_EXISTS;

	case EIO:
	case pcmk_rc_no_output:
	case pcmk_rc_dot_error:
	case pcmk_rc_graph_error:
	return CRM_EX_IOERR;

	case ENOTSUP:
	#if EOPNOTSUPP != ENOTSUP
	case EOPNOTSUPP:
	#endif
	return CRM_EX_UNIMPLEMENT_FEATURE;

	case ENOTUNIQ:
	case pcmk_rc_multiple:
	return CRM_EX_MULTIPLE;

	case ENXIO:
	case pcmk_rc_node_unknown:
	case pcmk_rc_unknown_format:
	return CRM_EX_NOSUCH;

	case ETIME:
	case ETIMEDOUT:
	return CRM_EX_TIMEOUT;

	case EAGAIN:
	case EBUSY:
	return CRM_EX_UNSATISFIED;

	case pcmk_rc_before_range:
	return CRM_EX_NOT_YET_IN_EFFECT;

	case pcmk_rc_after_range:
	return CRM_EX_EXPIRED;

	case pcmk_rc_undetermined:
	return CRM_EX_INDETERMINATE;

	case pcmk_rc_op_unsatisfied:
	return CRM_EX_UNSATISFIED;

	case pcmk_rc_within_range:
	return CRM_EX_OK;

	case pcmk_rc_no_input:
	return CRM_EX_NOINPUT;

	default:
	return CRM_EX_ERROR;
	}
	}

	/*!
	* \brief Map a function return code to the most similar OCF exit code
	*
	* \param[in] rc Function return code
	*
	* \return Most similar OCF exit code
	*/
	enum ocf_exitcode
	pcmk_rc2ocf(int rc)
	{
	switch (rc) {
	case pcmk_rc_ok:
	return PCMK_OCF_OK;

	case pcmk_rc_bad_nvpair:
	return PCMK_OCF_INVALID_PARAM;

	case EACCES:
	return PCMK_OCF_INSUFFICIENT_PRIV;

	case ENOTSUP:
	#if EOPNOTSUPP != ENOTSUP
	case EOPNOTSUPP:
	#endif
	return PCMK_OCF_UNIMPLEMENT_FEATURE;

	default:
	return PCMK_OCF_UNKNOWN_ERROR;
	}
	}


	// Other functions

	const char *
	bz2_strerror(int rc)
	{
	// See ftp://sources.redhat.com/pub/bzip2/docs/manual_3.html#SEC17
	switch (rc) {
	case BZ_OK:
	case BZ_RUN_OK:
	case BZ_FLUSH_OK:
	case BZ_FINISH_OK:
	case BZ_STREAM_END:
	return "Ok";
	case BZ_CONFIG_ERROR:
	return "libbz2 has been improperly compiled on your platform";
	case BZ_SEQUENCE_ERROR:
	return "library functions called in the wrong order";
	case BZ_PARAM_ERROR:
	return "parameter is out of range or otherwise incorrect";
	case BZ_MEM_ERROR:
	return "memory allocation failed";
	case BZ_DATA_ERROR:
	return "data integrity error is detected during decompression";
	case BZ_DATA_ERROR_MAGIC:
	return "the compressed stream does not start with the correct magic bytes";
	case BZ_IO_ERROR:
	return "error reading or writing in the compressed file";
	case BZ_UNEXPECTED_EOF:
	return "compressed file finishes before the logical end of stream is detected";
	case BZ_OUTBUFF_FULL:
	return "output data will not fit into the buffer provided";
	}
	return "Data compression error";
	}

	crm_exit_t
	crm_exit(crm_exit_t rc)
	{
	/* A compiler could theoretically use any type for crm_exit_t, but an int
	* should always hold it, so cast to int to keep static analysis happy.
	*/
	if ((((int) rc) < 0) \|\| (((int) rc) > CRM_EX_MAX)) {
	rc = CRM_EX_ERROR;
	}

	mainloop_cleanup();
	crm_xml_cleanup();

	pcmk__cli_option_cleanup();

	if (crm_system_name) {
	crm_info("Exiting %s " CRM_XS " with status %d", crm_system_name, rc);
	free(crm_system_name);
	} else {
	crm_trace("Exiting with status %d", rc);
	}
	qb_log_fini(); // Don't log anything after this point

	exit(rc);
	}

	/*
	* External action results
	*/

	/*!
	* \internal
	* \brief Set the result of an action
	*
	* \param[out] result Where to set action result
	* \param[in] exit_status OCF exit status to set
	* \param[in] exec_status Execution status to set
	* \param[in] exit_reason Human-friendly description of event to set
	*/
	void
	pcmk__set_result(pcmk__action_result_t *result, int exit_status,
	enum pcmk_exec_status exec_status, const char *exit_reason)
	{
	if (result == NULL) {
	return;
	}

	result->exit_status = exit_status;
	result->execution_status = exec_status;

	if (!pcmk__str_eq(result->exit_reason, exit_reason, pcmk__str_none)) {
	free(result->exit_reason);
	result->exit_reason = (exit_reason == NULL)? NULL : strdup(exit_reason);
	}
	}


	/*!
	* \internal
	* \brief Set the result of an action, with a formatted exit reason
	*
	* \param[out] result Where to set action result
	* \param[in] exit_status OCF exit status to set
	* \param[in] exec_status Execution status to set
	* \param[in] format printf-style format for a human-friendly
	* description of reason for result
	* \param[in] ... arguments for \p format
	*/
	G_GNUC_PRINTF(4, 5)
	void
	pcmk__format_result(pcmk__action_result_t *result, int exit_status,
	enum pcmk_exec_status exec_status,
	const char *format, ...)
	{
	va_list ap;
	int len = 0;
	char *reason = NULL;

	if (result == NULL) {
	return;
	}

	result->exit_status = exit_status;
	result->execution_status = exec_status;

	if (format != NULL) {
	va_start(ap, format);
	len = vasprintf(&reason, format, ap);
	CRM_ASSERT(len > 0);
	va_end(ap);
	}
	free(result->exit_reason);
	result->exit_reason = reason;
	}

	/*!
	* \internal
	* \brief Set the output of an action
	*
	* \param[out] result Action result to set output for
	* \param[in] out Action output to set (must be dynamically
	* allocated)
	* \param[in] err Action error output to set (must be dynamically
	* allocated)
	*
	* \note \p result will take ownership of \p out and \p err, so the caller
	* should not free them.
	*/
	void
	pcmk__set_result_output(pcmk__action_result_t result, char out, char *err)
	{
	if (result == NULL) {
	return;
	}

	free(result->action_stdout);
	result->action_stdout = out;

	free(result->action_stderr);
	result->action_stderr = err;
	}

	/*!
	* \internal
	* \brief Clear a result's exit reason, output, and error output
	*
	* \param[in] result Result to reset
	*/
	void
	pcmk__reset_result(pcmk__action_result_t *result)
	{
	if (result == NULL) {
	return;
	}

	free(result->exit_reason);
	result->exit_reason = NULL;

	free(result->action_stdout);
	result->action_stdout = NULL;

	free(result->action_stderr);
	result->action_stderr = NULL;
	}

	/*!
	* \internal
	* \brief Copy the result of an action
	*
	* \param[in] src Result to copy
	* \param[out] dst Where to copy \p src to
	*/
	void
	pcmk__copy_result(pcmk__action_result_t src, pcmk__action_result_t dst)
	{
	CRM_CHECK((src != NULL) && (dst != NULL), return);
	dst->exit_status = src->exit_status;
	dst->execution_status = src->execution_status;
	pcmk__str_update(&src->exit_reason, dst->exit_reason);
	pcmk__str_update(&src->action_stdout, dst->action_stdout);
	pcmk__str_update(&src->action_stderr, dst->action_stderr);
	}
	+
	+// Deprecated functions kept only for backward API compatibility
	+// LCOV_EXCL_START
	+
	+#include <crm/common/results_compat.h>
	+
	+crm_exit_t
	+crm_errno2exit(int rc)
	+{
	+ return pcmk_rc2exitc(pcmk_legacy2rc(rc));
	+}
	+
	+// LCOV_EXCL_STOP
	+// End deprecated API
	diff --git a/lib/lrmd/lrmd_alerts.c b/lib/lrmd/lrmd_alerts.c
	index 4372051858..b6b6852f2c 100644
	--- a/lib/lrmd/lrmd_alerts.c
	+++ b/lib/lrmd/lrmd_alerts.c
	@@ -1,399 +1,397 @@
	/*
	* Copyright 2015-2021 the Pacemaker project contributors
	*
	* The version control history for this file may have further details.
	*
	* This source code is licensed under the GNU Lesser General Public License
	* version 2.1 or later (LGPLv2.1+) WITHOUT ANY WARRANTY.
	*/

	#include <crm_internal.h>

	#include <glib.h>
	#include <unistd.h>

	#include <crm/crm.h>
	#include <crm/msg_xml.h>
	#include <crm/services.h>
	#include <crm/common/mainloop.h>
	#include <crm/common/alerts_internal.h>
	#include <crm/lrmd_internal.h>

	#include <crm/pengine/status.h>
	#include <crm/cib.h>
	#include <crm/lrmd.h>

	static lrmd_key_value_t *
	alert_key2param(lrmd_key_value_t *head, enum pcmk__alert_keys_e name,
	const char *value)
	{
	const char **key;

	if (value == NULL) {
	value = "";
	}
	for (key = pcmk__alert_keys[name]; *key; key++) {
	crm_trace("Setting alert key %s = '%s'", *key, value);
	head = lrmd_key_value_add(head, *key, value);
	}
	return head;
	}

	static lrmd_key_value_t *
	alert_key2param_int(lrmd_key_value_t *head, enum pcmk__alert_keys_e name,
	int value)
	{
	char *value_s = pcmk__itoa(value);

	head = alert_key2param(head, name, value_s);
	free(value_s);
	return head;
	}

	static lrmd_key_value_t *
	alert_key2param_ms(lrmd_key_value_t *head, enum pcmk__alert_keys_e name,
	guint value)
	{
	char *value_s = crm_strdup_printf("%u", value);

	head = alert_key2param(head, name, value_s);
	free(value_s);
	return head;
	}

	static void
	set_ev_kv(gpointer key, gpointer value, gpointer user_data)
	{
	lrmd_key_value_t head = (lrmd_key_value_t ) user_data;

	if (value) {
	crm_trace("Setting environment variable %s='%s'",
	(char)key, (char)value);
	head = lrmd_key_value_add(head, key, value);
	}
	}

	static lrmd_key_value_t *
	alert_envvar2params(lrmd_key_value_t head, pcmk__alert_t entry)
	{
	if (entry->envvars) {
	g_hash_table_foreach(entry->envvars, set_ev_kv, &head);
	}
	return head;
	}

	/*
	* We could use g_strv_contains() instead of this function,
	* but that has only been available since glib 2.43.2.
	*/
	static gboolean
	is_target_alert(char *list, const char value)
	{
	int target_list_num = 0;
	gboolean rc = FALSE;

	CRM_CHECK(value != NULL, return FALSE);

	if (list == NULL) {
	return TRUE;
	}

	target_list_num = g_strv_length(list);

	for (int cnt = 0; cnt < target_list_num; cnt++) {
	if (strcmp(list[cnt], value) == 0) {
	rc = TRUE;
	break;
	}
	}
	return rc;
	}

	/*!
	* \internal
	* \brief Execute alert agents for an event
	*
	* \param[in] lrmd Executor connection to use
	* \param[in] alert_list Alerts to execute
	* \param[in] kind Type of event that is being alerted for
	* \param[in] attr_name If pcmk__alert_attribute, the attribute name
	* \param[in,out] params Environment variables to pass to agents
	*
	* \retval pcmk_ok on success
	* \retval -1 if some alerts failed
	* \retval -2 if all alerts failed
	*/
	static int
	exec_alert_list(lrmd_t lrmd, GList alert_list, enum pcmk__alert_flags kind,
	const char attr_name, lrmd_key_value_t params)
	{
	bool any_success = FALSE, any_failure = FALSE;
	const char *kind_s = pcmk__alert_flag2text(kind);
	pcmk__time_hr_t *now = NULL;
	- struct timeval tv_now;
	char timestamp_epoch[20];
	char timestamp_usec[7];
	+ time_t epoch = 0;

	params = alert_key2param(params, PCMK__alert_key_kind, kind_s);
	params = alert_key2param(params, PCMK__alert_key_version,
	PACEMAKER_VERSION);

	for (GList *iter = g_list_first(alert_list); iter; iter = g_list_next(iter)) {
	pcmk__alert_t entry = (pcmk__alert_t )(iter->data);
	lrmd_key_value_t *copy_params = NULL;
	lrmd_key_value_t *head = NULL;
	int rc;

	if (!pcmk_is_set(entry->flags, kind)) {
	crm_trace("Filtering unwanted %s alert to %s via %s",
	kind_s, entry->recipient, entry->id);
	continue;
	}

	if ((kind == pcmk__alert_attribute)
	&& !is_target_alert(entry->select_attribute_name, attr_name)) {

	crm_trace("Filtering unwanted attribute '%s' alert to %s via %s",
	attr_name, entry->recipient, entry->id);
	continue;
	}

	if (now == NULL) {
	- if (gettimeofday(&tv_now, NULL) == 0) {
	- now = pcmk__time_timeval_hr_convert(NULL, &tv_now);
	- }
	+ now = pcmk__time_hr_now(&epoch);
	}
	crm_info("Sending %s alert via %s to %s",
	kind_s, entry->id, entry->recipient);

	/* Make a copy of the parameters, because each alert will be unique */
	for (head = params; head != NULL; head = head->next) {
	copy_params = lrmd_key_value_add(copy_params, head->key, head->value);
	}

	copy_params = alert_key2param(copy_params, PCMK__alert_key_recipient,
	entry->recipient);

	if (now) {
	char *timestamp = pcmk__time_format_hr(entry->tstamp_format, now);

	if (timestamp) {
	copy_params = alert_key2param(copy_params,
	PCMK__alert_key_timestamp,
	timestamp);
	free(timestamp);
	}

	snprintf(timestamp_epoch, sizeof(timestamp_epoch), "%lld",
	- (long long) tv_now.tv_sec);
	+ (long long) epoch);
	copy_params = alert_key2param(copy_params,
	PCMK__alert_key_timestamp_epoch,
	timestamp_epoch);
	snprintf(timestamp_usec, sizeof(timestamp_usec), "%06d", now->useconds);
	copy_params = alert_key2param(copy_params,
	PCMK__alert_key_timestamp_usec,
	timestamp_usec);
	}

	copy_params = alert_envvar2params(copy_params, entry);

	rc = lrmd->cmds->exec_alert(lrmd, entry->id, entry->path,
	entry->timeout, copy_params);
	if (rc < 0) {
	crm_err("Could not execute alert %s: %s " CRM_XS " rc=%d",
	entry->id, pcmk_strerror(rc), rc);
	any_failure = TRUE;
	} else {
	any_success = TRUE;
	}
	}

	if (now) {
	free(now);
	}

	if (any_failure) {
	return (any_success? -1 : -2);
	}
	return pcmk_ok;
	}

	/*!
	* \internal
	* \brief Send an alert for a node attribute change
	*
	* \param[in] lrmd Executor connection to use
	* \param[in] alert_list List of alert agents to execute
	* \param[in] node Name of node with attribute change
	* \param[in] nodeid Node ID of node with attribute change
	* \param[in] attr_name Name of attribute that changed
	* \param[in] attr_value New value of attribute that changed
	*
	* \retval pcmk_ok on success
	* \retval -1 if some alert agents failed
	* \retval -2 if all alert agents failed
	*/
	int
	lrmd_send_attribute_alert(lrmd_t lrmd, GList alert_list,
	const char *node, uint32_t nodeid,
	const char attr_name, const char attr_value)
	{
	int rc = pcmk_ok;
	lrmd_key_value_t *params = NULL;

	if (lrmd == NULL) {
	return -2;
	}

	params = alert_key2param(params, PCMK__alert_key_node, node);
	params = alert_key2param_int(params, PCMK__alert_key_nodeid, nodeid);
	params = alert_key2param(params, PCMK__alert_key_attribute_name, attr_name);
	params = alert_key2param(params, PCMK__alert_key_attribute_value,
	attr_value);

	rc = exec_alert_list(lrmd, alert_list, pcmk__alert_attribute, attr_name,
	params);
	lrmd_key_value_freeall(params);
	return rc;
	}

	/*!
	* \internal
	* \brief Send an alert for a node membership event
	*
	* \param[in] lrmd Executor connection to use
	* \param[in] alert_list List of alert agents to execute
	* \param[in] node Name of node with change
	* \param[in] nodeid Node ID of node with change
	* \param[in] state New state of node with change
	*
	* \retval pcmk_ok on success
	* \retval -1 if some alert agents failed
	* \retval -2 if all alert agents failed
	*/
	int
	lrmd_send_node_alert(lrmd_t lrmd, GList alert_list,
	const char node, uint32_t nodeid, const char state)
	{
	int rc = pcmk_ok;
	lrmd_key_value_t *params = NULL;

	if (lrmd == NULL) {
	return -2;
	}

	params = alert_key2param(params, PCMK__alert_key_node, node);
	params = alert_key2param(params, PCMK__alert_key_desc, state);
	params = alert_key2param_int(params, PCMK__alert_key_nodeid, nodeid);

	rc = exec_alert_list(lrmd, alert_list, pcmk__alert_node, NULL, params);
	lrmd_key_value_freeall(params);
	return rc;
	}

	/*!
	* \internal
	* \brief Send an alert for a fencing event
	*
	* \param[in] lrmd Executor connection to use
	* \param[in] alert_list List of alert agents to execute
	* \param[in] target Name of fence target node
	* \param[in] task Type of fencing event that occurred
	* \param[in] desc Readable description of event
	* \param[in] op_rc Result of fence action
	*
	* \retval pcmk_ok on success
	* \retval -1 if some alert agents failed
	* \retval -2 if all alert agents failed
	*/
	int
	lrmd_send_fencing_alert(lrmd_t lrmd, GList alert_list,
	const char target, const char task, const char *desc,
	int op_rc)
	{
	int rc = pcmk_ok;
	lrmd_key_value_t *params = NULL;

	if (lrmd == NULL) {
	return -2;
	}

	params = alert_key2param(params, PCMK__alert_key_node, target);
	params = alert_key2param(params, PCMK__alert_key_task, task);
	params = alert_key2param(params, PCMK__alert_key_desc, desc);
	params = alert_key2param_int(params, PCMK__alert_key_rc, op_rc);

	rc = exec_alert_list(lrmd, alert_list, pcmk__alert_fencing, NULL, params);
	lrmd_key_value_freeall(params);
	return rc;
	}

	/*!
	* \internal
	* \brief Send an alert for a resource operation
	*
	* \param[in] lrmd Executor connection to use
	* \param[in] alert_list List of alert agents to execute
	* \param[in] node Name of node that executed operation
	* \param[in] op Resource operation
	*
	* \retval pcmk_ok on success
	* \retval -1 if some alert agents failed
	* \retval -2 if all alert agents failed
	*/
	int
	lrmd_send_resource_alert(lrmd_t lrmd, GList alert_list,
	const char node, lrmd_event_data_t op)
	{
	int rc = pcmk_ok;
	int target_rc = pcmk_ok;
	lrmd_key_value_t *params = NULL;

	if (lrmd == NULL) {
	return -2;
	}

	target_rc = rsc_op_expected_rc(op);
	if ((op->interval_ms == 0) && (target_rc == op->rc)
	&& pcmk__str_eq(op->op_type, RSC_STATUS, pcmk__str_casei)) {

	/* Don't send alerts for probes with the expected result. Leave it up to
	* the agent whether to alert for 'failed' probes. (Even if we find a
	* resource running, it was probably because someone did a clean-up of
	* the status section.)
	*/
	return pcmk_ok;
	}

	params = alert_key2param(params, PCMK__alert_key_node, node);
	params = alert_key2param(params, PCMK__alert_key_rsc, op->rsc_id);
	params = alert_key2param(params, PCMK__alert_key_task, op->op_type);
	params = alert_key2param_ms(params, PCMK__alert_key_interval,
	op->interval_ms);
	params = alert_key2param_int(params, PCMK__alert_key_target_rc, target_rc);
	params = alert_key2param_int(params, PCMK__alert_key_status, op->op_status);
	params = alert_key2param_int(params, PCMK__alert_key_rc, op->rc);

	/* Reoccurring operations do not set exec_time, so on timeout, set it
	* to the operation timeout since that's closer to the actual value.
	*/
	if ((op->op_status == PCMK_EXEC_TIMEOUT) && (op->exec_time == 0)) {
	params = alert_key2param_int(params, PCMK__alert_key_exec_time,
	op->timeout);
	} else {
	params = alert_key2param_int(params, PCMK__alert_key_exec_time,
	op->exec_time);
	}

	if (op->op_status == PCMK_EXEC_DONE) {
	params = alert_key2param(params, PCMK__alert_key_desc,
	services_ocf_exitcode_str(op->rc));
	} else {
	params = alert_key2param(params, PCMK__alert_key_desc,
	pcmk_exec_status_str(op->op_status));
	}

	rc = exec_alert_list(lrmd, alert_list, pcmk__alert_resource, NULL, params);
	lrmd_key_value_freeall(params);
	return rc;
	}
	diff --git a/lib/pacemaker/Makefile.am b/lib/pacemaker/Makefile.am
	index 830ef97bb6..3164f44c85 100644
	--- a/lib/pacemaker/Makefile.am
	+++ b/lib/pacemaker/Makefile.am
	@@ -1,66 +1,65 @@
	#
	# Copyright 2004-2022 the Pacemaker project contributors
	#
	# The version control history for this file may have further details.
	#
	# This source code is licensed under the GNU General Public License version 2
	# or later (GPLv2+) WITHOUT ANY WARRANTY.
	#

	include $(top_srcdir)/mk/common.mk

	AM_CPPFLAGS += -I$(top_builddir) -I$(top_srcdir)

	noinst_HEADERS = libpacemaker_private.h

	## libraries
	lib_LTLIBRARIES = libpacemaker.la

	## SOURCES

	libpacemaker_la_LDFLAGS = -version-info 5:0:4

	libpacemaker_la_CFLAGS = $(CFLAGS_HARDENED_LIB)
	libpacemaker_la_LDFLAGS += $(LDFLAGS_HARDENED_LIB)

	libpacemaker_la_LIBADD = $(top_builddir)/lib/pengine/libpe_status.la \
	$(top_builddir)/lib/cib/libcib.la \
	$(top_builddir)/lib/lrmd/liblrmd.la \
	$(top_builddir)/lib/fencing/libstonithd.la \
	$(top_builddir)/lib/services/libcrmservice.la \
	$(top_builddir)/lib/common/libcrmcommon.la

	# -L$(top_builddir)/lib/pils -lpils -export-dynamic -module -avoid-version
	# Use += rather than backlashed continuation lines for parsing by bumplibs
	libpacemaker_la_SOURCES =
	libpacemaker_la_SOURCES += pcmk_acl.c
	libpacemaker_la_SOURCES += pcmk_cluster_queries.c
	libpacemaker_la_SOURCES += pcmk_fence.c
	libpacemaker_la_SOURCES += pcmk_graph_consumer.c
	libpacemaker_la_SOURCES += pcmk_graph_logging.c
	libpacemaker_la_SOURCES += pcmk_graph_producer.c
	libpacemaker_la_SOURCES += pcmk_injections.c
	libpacemaker_la_SOURCES += pcmk_output.c
	-libpacemaker_la_SOURCES += pcmk_output_utils.c
	libpacemaker_la_SOURCES += pcmk_resource.c
	libpacemaker_la_SOURCES += pcmk_sched_actions.c
	libpacemaker_la_SOURCES += pcmk_sched_allocate.c
	libpacemaker_la_SOURCES += pcmk_sched_bundle.c
	libpacemaker_la_SOURCES += pcmk_sched_clone.c
	libpacemaker_la_SOURCES += pcmk_sched_colocation.c
	libpacemaker_la_SOURCES += pcmk_sched_constraints.c
	libpacemaker_la_SOURCES += pcmk_sched_fencing.c
	libpacemaker_la_SOURCES += pcmk_sched_group.c
	libpacemaker_la_SOURCES += pcmk_sched_location.c
	libpacemaker_la_SOURCES += pcmk_sched_native.c
	libpacemaker_la_SOURCES += pcmk_sched_nodes.c
	libpacemaker_la_SOURCES += pcmk_sched_notif.c
	libpacemaker_la_SOURCES += pcmk_sched_ordering.c
	libpacemaker_la_SOURCES += pcmk_sched_probes.c
	libpacemaker_la_SOURCES += pcmk_sched_promotable.c
	libpacemaker_la_SOURCES += pcmk_sched_remote.c
	libpacemaker_la_SOURCES += pcmk_sched_resource.c
	libpacemaker_la_SOURCES += pcmk_sched_tickets.c
	libpacemaker_la_SOURCES += pcmk_sched_utilization.c
	libpacemaker_la_SOURCES += pcmk_simulate.c
	libpacemaker_la_SOURCES += pcmk_status.c
	diff --git a/lib/pacemaker/pcmk_cluster_queries.c b/lib/pacemaker/pcmk_cluster_queries.c
	index c30a9b889a..4f8be51406 100644
	--- a/lib/pacemaker/pcmk_cluster_queries.c
	+++ b/lib/pacemaker/pcmk_cluster_queries.c
	@@ -1,502 +1,502 @@
	/*
	- * Copyright 2020-2021 the Pacemaker project contributors
	+ * Copyright 2020-2022 the Pacemaker project contributors
	*
	* The version control history for this file may have further details.
	*
	* This source code is licensed under the GNU Lesser General Public License
	* version 2.1 or later (LGPLv2.1+) WITHOUT ANY WARRANTY.
	*/

	#include <crm_internal.h>

	#include <glib.h> // gboolean, GMainLoop, etc.
	#include <libxml/tree.h> // xmlNode

	#include <pacemaker.h>
	#include <pacemaker-internal.h>

	#include <crm/crm.h>
	#include <crm/cib.h>
	#include <crm/cib/internal.h>
	#include <crm/msg_xml.h>
	#include <crm/common/output_internal.h>
	#include <crm/common/xml.h>
	#include <crm/common/xml_internal.h>
	#include <crm/common/iso8601.h>
	#include <crm/common/ipc_controld.h>
	#include <crm/common/ipc_pacemakerd.h>
	#include <crm/common/mainloop.h>

	#define DEFAULT_MESSAGE_TIMEOUT_MS 30000


	typedef struct {
	pcmk__output_t *out;
	GMainLoop *mainloop;
	int rc;
	guint message_timer_id;
	guint message_timeout_ms;
	} data_t;

	static void
	quit_main_loop(data_t *data)
	{
	if (data->mainloop != NULL) {
	GMainLoop *mloop = data->mainloop;

	data->mainloop = NULL; // Don't re-enter this block
	pcmk_quit_main_loop(mloop, 10);
	g_main_loop_unref(mloop);
	}
	}

	static gboolean
	admin_message_timeout(gpointer user_data)
	{
	data_t *data = user_data;
	pcmk__output_t *out = data->out;

	out->err(out, "error: No reply received from controller before timeout (%dms)",
	data->message_timeout_ms);
	data->message_timer_id = 0;
	data->rc = ETIMEDOUT;
	quit_main_loop(data);
	return FALSE; // Tells glib to remove source
	}

	static void
	start_main_loop(data_t *data)
	{
	if (data->message_timeout_ms < 1) {
	data->message_timeout_ms = DEFAULT_MESSAGE_TIMEOUT_MS;
	}

	data->rc = ECONNRESET; // For unexpected disconnects
	data->mainloop = g_main_loop_new(NULL, FALSE);
	data->message_timer_id = g_timeout_add(data->message_timeout_ms,
	admin_message_timeout,
	data);
	g_main_loop_run(data->mainloop);
	}

	static void
	event_done(data_t data, pcmk_ipc_api_t api)
	{
	pcmk_disconnect_ipc(api);
	quit_main_loop(data);
	}

	static pcmk_controld_api_reply_t *
	controld_event_reply(data_t data, pcmk_ipc_api_t controld_api, enum pcmk_ipc_event event_type, crm_exit_t status, void *event_data)
	{
	pcmk__output_t *out = data->out;
	pcmk_controld_api_reply_t *reply = event_data;

	switch (event_type) {
	case pcmk_ipc_event_disconnect:
	if (data->rc == ECONNRESET) { // Unexpected
	out->err(out, "error: Lost connection to controller");
	}
	event_done(data, controld_api);
	return NULL;

	case pcmk_ipc_event_reply:
	break;

	default:
	return NULL;
	}

	if (data->message_timer_id != 0) {
	g_source_remove(data->message_timer_id);
	data->message_timer_id = 0;
	}

	if (status != CRM_EX_OK) {
	out->err(out, "error: Bad reply from controller: %s",
	crm_exit_str(status));
	data->rc = EBADMSG;
	event_done(data, controld_api);
	return NULL;
	}

	if (reply->reply_type != pcmk_controld_reply_ping) {
	out->err(out, "error: Unknown reply type %d from controller",
	reply->reply_type);
	data->rc = EBADMSG;
	event_done(data, controld_api);
	return NULL;
	}

	return reply;
	}

	static void
	controller_status_event_cb(pcmk_ipc_api_t *controld_api,
	enum pcmk_ipc_event event_type, crm_exit_t status,
	void event_data, void user_data)
	{
	data_t *data = user_data;
	pcmk__output_t *out = data->out;
	pcmk_controld_api_reply_t *reply = controld_event_reply(data, controld_api,
	event_type, status, event_data);

	if (reply != NULL) {
	out->message(out, "health",
	reply->data.ping.sys_from,
	reply->host_from,
	reply->data.ping.fsa_state,
	reply->data.ping.result);
	data->rc = pcmk_rc_ok;
	}

	event_done(data, controld_api);
	}

	static void
	designated_controller_event_cb(pcmk_ipc_api_t *controld_api,
	enum pcmk_ipc_event event_type, crm_exit_t status,
	void event_data, void user_data)
	{
	data_t *data = user_data;
	pcmk__output_t *out = data->out;
	pcmk_controld_api_reply_t *reply = controld_event_reply(data, controld_api,
	event_type, status, event_data);

	if (reply != NULL) {
	out->message(out, "dc", reply->host_from);
	data->rc = pcmk_rc_ok;
	}

	event_done(data, controld_api);
	}

	static void
	pacemakerd_event_cb(pcmk_ipc_api_t *pacemakerd_api,
	enum pcmk_ipc_event event_type, crm_exit_t status,
	void event_data, void user_data)
	{
	data_t *data = user_data;
	pcmk__output_t *out = data->out;
	pcmk_pacemakerd_api_reply_t *reply = event_data;

	crm_time_t *crm_when;
	char *pinged_buf = NULL;

	switch (event_type) {
	case pcmk_ipc_event_disconnect:
	if (data->rc == ECONNRESET) { // Unexpected
	out->err(out, "error: Lost connection to pacemakerd");
	}
	event_done(data, pacemakerd_api);
	return;

	case pcmk_ipc_event_reply:
	break;

	default:
	return;
	}

	if (data->message_timer_id != 0) {
	g_source_remove(data->message_timer_id);
	data->message_timer_id = 0;
	}

	if (status != CRM_EX_OK) {
	out->err(out, "error: Bad reply from pacemakerd: %s",
	crm_exit_str(status));
	event_done(data, pacemakerd_api);
	return;
	}

	if (reply->reply_type != pcmk_pacemakerd_reply_ping) {
	out->err(out, "error: Unknown reply type %d from pacemakerd",
	reply->reply_type);
	event_done(data, pacemakerd_api);
	return;
	}

	// Parse desired information from reply
	crm_when = crm_time_new(NULL);
	crm_time_set_timet(crm_when, &reply->data.ping.last_good);
	pinged_buf = crm_time_as_string(crm_when,
	crm_time_log_date \| crm_time_log_timeofday \|
	crm_time_log_with_timezone);

	out->message(out, "pacemakerd-health",
	reply->data.ping.sys_from,
	(reply->data.ping.status == pcmk_rc_ok)?
	pcmk_pacemakerd_api_daemon_state_enum2text(
	reply->data.ping.state):"query failed",
	(reply->data.ping.status == pcmk_rc_ok)?pinged_buf:"");
	data->rc = pcmk_rc_ok;
	crm_time_free(crm_when);
	free(pinged_buf);

	event_done(data, pacemakerd_api);
	}

	static pcmk_ipc_api_t *
	ipc_connect(data_t *data, enum pcmk_ipc_server server, pcmk_ipc_callback_t cb)
	{
	int rc;
	pcmk__output_t *out = data->out;
	pcmk_ipc_api_t *api = NULL;


	rc = pcmk_new_ipc_api(&api, server);
	if (api == NULL) {
	out->err(out, "error: Could not connect to %s: %s",
	pcmk_ipc_name(api, true),
	pcmk_rc_str(rc));
	data->rc = rc;
	return NULL;
	}
	if (cb != NULL) {
	pcmk_register_ipc_callback(api, cb, data);
	}
	rc = pcmk_connect_ipc(api, pcmk_ipc_dispatch_main);
	if (rc != pcmk_rc_ok) {
	out->err(out, "error: Could not connect to %s: %s",
	pcmk_ipc_name(api, true),
	pcmk_rc_str(rc));
	data->rc = rc;
	return NULL;
	}

	return api;
	}

	int
	pcmk__controller_status(pcmk__output_t out, char dest_node, guint message_timeout_ms)
	{
	data_t data = {
	.out = out,
	.mainloop = NULL,
	.rc = pcmk_rc_ok,
	.message_timer_id = 0,
	.message_timeout_ms = message_timeout_ms
	};
	pcmk_ipc_api_t *controld_api = ipc_connect(&data, pcmk_ipc_controld, controller_status_event_cb);

	if (controld_api != NULL) {
	int rc = pcmk_controld_api_ping(controld_api, dest_node);
	if (rc != pcmk_rc_ok) {
	out->err(out, "error: Command failed: %s", pcmk_rc_str(rc));
	data.rc = rc;
	}

	start_main_loop(&data);

	pcmk_free_ipc_api(controld_api);
	}

	return data.rc;
	}

	int
	pcmk_controller_status(xmlNodePtr xml, char dest_node, unsigned int message_timeout_ms)
	{
	pcmk__output_t *out = NULL;
	int rc = pcmk_rc_ok;

	- rc = pcmk__out_prologue(&out, xml);
	+ rc = pcmk__xml_output_new(&out, xml);
	if (rc != pcmk_rc_ok) {
	return rc;
	}

	pcmk__register_lib_messages(out);

	rc = pcmk__controller_status(out, dest_node, (guint) message_timeout_ms);
	- pcmk__out_epilogue(out, xml, rc);
	+ pcmk__xml_output_finish(out, xml);
	return rc;
	}

	int
	pcmk__designated_controller(pcmk__output_t *out, guint message_timeout_ms)
	{
	data_t data = {
	.out = out,
	.mainloop = NULL,
	.rc = pcmk_rc_ok,
	.message_timer_id = 0,
	.message_timeout_ms = message_timeout_ms
	};
	pcmk_ipc_api_t *controld_api = ipc_connect(&data, pcmk_ipc_controld, designated_controller_event_cb);

	if (controld_api != NULL) {
	int rc = pcmk_controld_api_ping(controld_api, NULL);
	if (rc != pcmk_rc_ok) {
	out->err(out, "error: Command failed: %s", pcmk_rc_str(rc));
	data.rc = rc;
	}

	start_main_loop(&data);

	pcmk_free_ipc_api(controld_api);
	}

	return data.rc;
	}

	int
	pcmk_designated_controller(xmlNodePtr *xml, unsigned int message_timeout_ms)
	{
	pcmk__output_t *out = NULL;
	int rc = pcmk_rc_ok;

	- rc = pcmk__out_prologue(&out, xml);
	+ rc = pcmk__xml_output_new(&out, xml);
	if (rc != pcmk_rc_ok) {
	return rc;
	}

	pcmk__register_lib_messages(out);

	rc = pcmk__designated_controller(out, (guint) message_timeout_ms);
	- pcmk__out_epilogue(out, xml, rc);
	+ pcmk__xml_output_finish(out, xml);
	return rc;
	}

	int
	pcmk__pacemakerd_status(pcmk__output_t out, char ipc_name, guint message_timeout_ms)
	{
	data_t data = {
	.out = out,
	.mainloop = NULL,
	.rc = pcmk_rc_ok,
	.message_timer_id = 0,
	.message_timeout_ms = message_timeout_ms
	};
	pcmk_ipc_api_t *pacemakerd_api = ipc_connect(&data, pcmk_ipc_pacemakerd, pacemakerd_event_cb);

	if (pacemakerd_api != NULL) {
	int rc = pcmk_pacemakerd_api_ping(pacemakerd_api, ipc_name);
	if (rc != pcmk_rc_ok) {
	out->err(out, "error: Command failed: %s", pcmk_rc_str(rc));
	data.rc = rc;
	}

	start_main_loop(&data);

	pcmk_free_ipc_api(pacemakerd_api);
	}

	return data.rc;
	}

	int
	pcmk_pacemakerd_status(xmlNodePtr xml, char ipc_name, unsigned int message_timeout_ms)
	{
	pcmk__output_t *out = NULL;
	int rc = pcmk_rc_ok;

	- rc = pcmk__out_prologue(&out, xml);
	+ rc = pcmk__xml_output_new(&out, xml);
	if (rc != pcmk_rc_ok) {
	return rc;
	}

	pcmk__register_lib_messages(out);

	rc = pcmk__pacemakerd_status(out, ipc_name, (guint) message_timeout_ms);
	- pcmk__out_epilogue(out, xml, rc);
	+ pcmk__xml_output_finish(out, xml);
	return rc;
	}

	/* user data for looping through remote node xpath searches */
	struct node_data {
	pcmk__output_t *out;
	int found;
	const char field; / XML attribute to check for node name */
	const char *type;
	gboolean BASH_EXPORT;
	};

	static void
	remote_node_print_helper(xmlNode result, void user_data)
	{
	struct node_data *data = user_data;
	pcmk__output_t *out = data->out;
	const char *name = crm_element_value(result, XML_ATTR_UNAME);
	const char *id = crm_element_value(result, data->field);

	// node name and node id are the same for remote/guest nodes
	out->message(out, "crmadmin-node", data->type,
	name ? name : id,
	id,
	data->BASH_EXPORT);
	data->found++;
	}

	// \return Standard Pacemaker return code
	int
	pcmk__list_nodes(pcmk__output_t out, char node_types, gboolean BASH_EXPORT)
	{
	xmlNode *xml_node = NULL;
	int rc;

	rc = cib__signon_query(NULL, &xml_node);

	if (rc == pcmk_rc_ok) {
	struct node_data data = {
	.out = out,
	.found = 0,
	.BASH_EXPORT = BASH_EXPORT
	};

	out->begin_list(out, NULL, NULL, "nodes");

	if (!pcmk__str_empty(node_types) && strstr(node_types, "all")) {
	node_types = NULL;
	}

	if (pcmk__str_empty(node_types) \|\| strstr(node_types, "cluster")) {
	data.field = "id";
	data.type = "cluster";
	crm_foreach_xpath_result(xml_node, PCMK__XP_MEMBER_NODE_CONFIG,
	remote_node_print_helper, &data);
	}

	if (pcmk__str_empty(node_types) \|\| strstr(node_types, "guest")) {
	data.field = "value";
	data.type = "guest";
	crm_foreach_xpath_result(xml_node, PCMK__XP_GUEST_NODE_CONFIG,
	remote_node_print_helper, &data);
	}

	if (pcmk__str_empty(node_types) \|\| !pcmk__strcmp(node_types, ",\|^remote", pcmk__str_regex)) {
	data.field = "id";
	data.type = "remote";
	crm_foreach_xpath_result(xml_node, PCMK__XP_REMOTE_NODE_CONFIG,
	remote_node_print_helper, &data);
	}

	out->end_list(out);

	if (data.found == 0) {
	out->info(out, "No nodes configured");
	}

	free_xml(xml_node);
	}

	return rc;
	}

	int
	pcmk_list_nodes(xmlNodePtr xml, char node_types)
	{
	pcmk__output_t *out = NULL;
	int rc = pcmk_rc_ok;

	- rc = pcmk__out_prologue(&out, xml);
	+ rc = pcmk__xml_output_new(&out, xml);
	if (rc != pcmk_rc_ok) {
	return rc;
	}

	pcmk__register_lib_messages(out);

	rc = pcmk__list_nodes(out, node_types, FALSE);
	- pcmk__out_epilogue(out, xml, rc);
	+ pcmk__xml_output_finish(out, xml);
	return rc;
	}
	diff --git a/lib/pacemaker/pcmk_fence.c b/lib/pacemaker/pcmk_fence.c
	index 35f2e45aec..70b6a501d4 100644
	--- a/lib/pacemaker/pcmk_fence.c
	+++ b/lib/pacemaker/pcmk_fence.c
	@@ -1,604 +1,604 @@
	/*
	* Copyright 2009-2022 the Pacemaker project contributors
	*
	* The version control history for this file may have further details.
	*
	* This source code is licensed under the GNU General Public License version 2
	* or later (GPLv2+) WITHOUT ANY WARRANTY.
	*/

	#include <crm_internal.h>
	#include <crm/common/mainloop.h>
	#include <crm/common/results.h>
	#include <crm/common/output.h>
	#include <crm/common/output_internal.h>
	#include <crm/stonith-ng.h>
	#include <crm/fencing/internal.h>

	#include <glib.h>
	#include <libxml/tree.h>
	#include <pacemaker.h>
	#include <pacemaker-internal.h>

	static const int st_opts = st_opt_sync_call \| st_opt_allow_suicide;

	static GMainLoop *mainloop = NULL;

	static struct {
	stonith_t *st;
	const char *target;
	const char *action;
	char *name;
	unsigned int timeout;
	unsigned int tolerance;
	int delay;
	pcmk__action_result_t result;
	} async_fence_data = { NULL, };

	static int
	handle_level(stonith_t st, char target, int fence_level,
	stonith_key_value_t *devices, bool added) {
	char *node = NULL;
	char *pattern = NULL;
	char *name = NULL;
	char *value = NULL;
	int rc = pcmk_rc_ok;

	if (target == NULL) {
	// Not really possible, but makes static analysis happy
	return EINVAL;
	}

	/* Determine if targeting by attribute, node name pattern or node name */
	value = strchr(target, '=');
	if (value != NULL) {
	name = target;
	*value++ = '\0';
	} else if (*target == '@') {
	pattern = target + 1;
	} else {
	node = target;
	}

	/* Register or unregister level as appropriate */
	if (added) {
	rc = st->cmds->register_level_full(st, st_opts, node, pattern,
	name, value, fence_level,
	devices);
	} else {
	rc = st->cmds->remove_level_full(st, st_opts, node, pattern,
	name, value, fence_level);
	}

	return pcmk_legacy2rc(rc);
	}

	static stonith_history_t *
	reduce_fence_history(stonith_history_t *history)
	{
	stonith_history_t new, hp, *np;

	if (!history) {
	return history;
	}

	new = history;
	hp = new->next;
	new->next = NULL;

	while (hp) {
	stonith_history_t *hp_next = hp->next;

	hp->next = NULL;

	for (np = new; ; np = np->next) {
	if ((hp->state == st_done) \|\| (hp->state == st_failed)) {
	/* action not in progress */
	if (pcmk__str_eq(hp->target, np->target, pcmk__str_casei) &&
	pcmk__str_eq(hp->action, np->action, pcmk__str_none) &&
	(hp->state == np->state) &&
	((hp->state == st_done) \|\|
	pcmk__str_eq(hp->delegate, np->delegate, pcmk__str_casei))) {
	/* purge older hp */
	stonith_history_free(hp);
	break;
	}
	}

	if (!np->next) {
	np->next = hp;
	break;
	}
	}
	hp = hp_next;
	}

	return new;
	}

	static void
	notify_callback(stonith_t * st, stonith_event_t * e)
	{
	if (pcmk__str_eq(async_fence_data.target, e->target, pcmk__str_casei)
	&& pcmk__str_eq(async_fence_data.action, e->action, pcmk__str_none)) {

	pcmk__set_result(&async_fence_data.result,
	stonith__event_exit_status(e),
	stonith__event_execution_status(e),
	stonith__event_exit_reason(e));
	g_main_loop_quit(mainloop);
	}
	}

	static void
	fence_callback(stonith_t * stonith, stonith_callback_data_t * data)
	{
	pcmk__set_result(&async_fence_data.result, stonith__exit_status(data),
	stonith__execution_status(data),
	stonith__exit_reason(data));
	g_main_loop_quit(mainloop);
	}

	static gboolean
	async_fence_helper(gpointer user_data)
	{
	stonith_t *st = async_fence_data.st;
	int call_id = 0;
	int rc = stonith_api_connect_retry(st, async_fence_data.name, 10);

	if (rc != pcmk_ok) {
	g_main_loop_quit(mainloop);
	pcmk__set_result(&async_fence_data.result, CRM_EX_ERROR,
	PCMK_EXEC_NOT_CONNECTED, pcmk_strerror(rc));
	return TRUE;
	}

	st->cmds->register_notification(st, T_STONITH_NOTIFY_FENCE, notify_callback);

	call_id = st->cmds->fence_with_delay(st,
	st_opt_allow_suicide,
	async_fence_data.target,
	async_fence_data.action,
	async_fence_data.timeout/1000,
	async_fence_data.tolerance/1000,
	async_fence_data.delay);

	if (call_id < 0) {
	g_main_loop_quit(mainloop);
	pcmk__set_result(&async_fence_data.result, CRM_EX_ERROR,
	PCMK_EXEC_ERROR, pcmk_strerror(call_id));
	return TRUE;
	}

	st->cmds->register_callback(st,
	call_id,
	async_fence_data.timeout/1000,
	st_opt_timeout_updates, NULL, "callback", fence_callback);

	return TRUE;
	}

	int
	pcmk__request_fencing(stonith_t st, const char target, const char *action,
	const char *name, unsigned int timeout,
	unsigned int tolerance, int delay, char **reason)
	{
	crm_trigger_t *trig;
	int rc = pcmk_rc_ok;

	async_fence_data.st = st;
	async_fence_data.name = strdup(name);
	async_fence_data.target = target;
	async_fence_data.action = action;
	async_fence_data.timeout = timeout;
	async_fence_data.tolerance = tolerance;
	async_fence_data.delay = delay;
	pcmk__set_result(&async_fence_data.result, CRM_EX_ERROR, PCMK_EXEC_UNKNOWN,
	NULL);

	trig = mainloop_add_trigger(G_PRIORITY_HIGH, async_fence_helper, NULL);
	mainloop_set_trigger(trig);

	mainloop = g_main_loop_new(NULL, FALSE);
	g_main_loop_run(mainloop);

	free(async_fence_data.name);

	if (reason != NULL) {
	// Give the caller ownership of the exit reason
	*reason = async_fence_data.result.exit_reason;
	async_fence_data.result.exit_reason = NULL;
	}
	rc = stonith__result2rc(&async_fence_data.result);
	pcmk__reset_result(&async_fence_data.result);
	return rc;
	}

	#ifdef BUILD_PUBLIC_LIBPACEMAKER
	int
	pcmk_request_fencing(stonith_t st, const char target, const char *action,
	const char *name, unsigned int timeout,
	unsigned int tolerance, int delay, char **reason)
	{
	return pcmk__request_fencing(st, target, action, name, timeout, tolerance,
	delay, reason);
	}
	#endif

	int
	pcmk__fence_history(pcmk__output_t out, stonith_t st, char *target,
	unsigned int timeout, int verbose, bool broadcast,
	bool cleanup) {
	stonith_history_t history = NULL, hp, *latest = NULL;
	int rc = pcmk_rc_ok;
	int opts = 0;

	if (cleanup) {
	out->info(out, "cleaning up fencing-history%s%s",
	target ? " for node " : "", target ? target : "");
	}
	if (broadcast) {
	out->info(out, "gather fencing-history from all nodes");
	}

	stonith__set_call_options(opts, target, st_opts);
	if (cleanup) {
	stonith__set_call_options(opts, target, st_opt_cleanup);
	}
	if (broadcast) {
	stonith__set_call_options(opts, target, st_opt_broadcast);
	}
	rc = st->cmds->history(st, opts,
	pcmk__str_eq(target, "*", pcmk__str_none)? NULL : target,
	&history, timeout/1000);

	if (cleanup) {
	// Cleanup doesn't return a history list
	stonith_history_free(history);
	return pcmk_legacy2rc(rc);
	}

	out->begin_list(out, "event", "events", "Fencing history");

	history = stonith__sort_history(history);
	for (hp = history; hp; hp = hp->next) {
	if (hp->state == st_done) {
	latest = hp;
	}

	if (out->is_quiet(out) \|\| !verbose) {
	continue;
	}

	out->message(out, "stonith-event", hp, true,
	stonith__later_succeeded(hp, history),
	(uint32_t) pcmk_show_failed_detail);
	out->increment_list(out);
	}

	if (latest) {
	if (out->is_quiet(out)) {
	pcmk__formatted_printf(out, "%lld\n", (long long) latest->completed);
	} else if (!verbose) { // already printed if verbose
	out->message(out, "stonith-event", latest, false, NULL,
	(uint32_t) pcmk_show_failed_detail);
	out->increment_list(out);
	}
	}

	out->end_list(out);

	stonith_history_free(history);
	return pcmk_legacy2rc(rc);
	}

	#ifdef BUILD_PUBLIC_LIBPACEMAKER
	int
	pcmk_fence_history(xmlNodePtr xml, stonith_t st, char *target, unsigned int timeout,
	bool quiet, int verbose, bool broadcast, bool cleanup) {
	pcmk__output_t *out = NULL;
	int rc = pcmk_rc_ok;

	- rc = pcmk__out_prologue(&out, xml);
	+ rc = pcmk__xml_output_new(&out, xml);
	if (rc != pcmk_rc_ok) {
	return rc;
	}

	stonith__register_messages(out);

	out->quiet = quiet;

	rc = pcmk__fence_history(out, st, target, timeout, verbose, broadcast, cleanup);
	- pcmk__out_epilogue(out, xml, rc);
	+ pcmk__xml_output_finish(out, xml);
	return rc;
	}
	#endif

	int
	pcmk__fence_installed(pcmk__output_t out, stonith_t st, unsigned int timeout) {
	stonith_key_value_t *devices = NULL;
	int rc = pcmk_rc_ok;

	rc = st->cmds->list_agents(st, st_opt_sync_call, NULL, &devices, timeout/1000);
	/* list_agents returns a negative error code or a positive number of agents. */
	if (rc < 0) {
	return pcmk_legacy2rc(rc);
	}

	out->begin_list(out, "fence device", "fence devices", "Installed fence devices");
	for (stonith_key_value_t *dIter = devices; dIter; dIter = dIter->next) {
	out->list_item(out, "device", "%s", dIter->value);
	}
	out->end_list(out);

	stonith_key_value_freeall(devices, 1, 1);
	return pcmk_rc_ok;
	}

	#ifdef BUILD_PUBLIC_LIBPACEMAKER
	int
	pcmk_fence_installed(xmlNodePtr xml, stonith_t st, unsigned int timeout) {
	pcmk__output_t *out = NULL;
	int rc = pcmk_rc_ok;

	- rc = pcmk__out_prologue(&out, xml);
	+ rc = pcmk__xml_output_new(&out, xml);
	if (rc != pcmk_rc_ok) {
	return rc;
	}

	stonith__register_messages(out);

	rc = pcmk__fence_installed(out, st, timeout);
	- pcmk__out_epilogue(out, xml, rc);
	+ pcmk__xml_output_finish(out, xml);
	return rc;
	}
	#endif

	int
	pcmk__fence_last(pcmk__output_t out, const char target, bool as_nodeid) {
	time_t when = 0;

	if (target == NULL) {
	return pcmk_rc_ok;
	}

	if (as_nodeid) {
	when = stonith_api_time(atol(target), NULL, FALSE);
	} else {
	when = stonith_api_time(0, target, FALSE);
	}

	return out->message(out, "last-fenced", target, when);
	}

	#ifdef BUILD_PUBLIC_LIBPACEMAKER
	int
	pcmk_fence_last(xmlNodePtr xml, const char target, bool as_nodeid) {
	pcmk__output_t *out = NULL;
	int rc = pcmk_rc_ok;

	- rc = pcmk__out_prologue(&out, xml);
	+ rc = pcmk__xml_output_new(&out, xml);
	if (rc != pcmk_rc_ok) {
	return rc;
	}

	stonith__register_messages(out);

	rc = pcmk__fence_last(out, target, as_nodeid);
	- pcmk__out_epilogue(out, xml, rc);
	+ pcmk__xml_output_finish(out, xml);
	return rc;
	}
	#endif

	int
	pcmk__fence_list_targets(pcmk__output_t out, stonith_t st,
	const char *device_id, unsigned int timeout) {
	GList *targets = NULL;
	char *lists = NULL;
	int rc = pcmk_rc_ok;

	rc = st->cmds->list(st, st_opts, device_id, &lists, timeout/1000);
	if (rc != pcmk_rc_ok) {
	return pcmk_legacy2rc(rc);
	}

	targets = stonith__parse_targets(lists);

	out->begin_list(out, "fence target", "fence targets", "Fence Targets");
	while (targets != NULL) {
	out->list_item(out, NULL, "%s", (const char *) targets->data);
	targets = targets->next;
	}
	out->end_list(out);

	free(lists);
	return rc;
	}

	#ifdef BUILD_PUBLIC_LIBPACEMAKER
	int
	pcmk_fence_list_targets(xmlNodePtr xml, stonith_t st, const char *device_id,
	unsigned int timeout) {
	pcmk__output_t *out = NULL;
	int rc = pcmk_rc_ok;

	- rc = pcmk__out_prologue(&out, xml);
	+ rc = pcmk__xml_output_new(&out, xml);
	if (rc != pcmk_rc_ok) {
	return rc;
	}

	stonith__register_messages(out);

	rc = pcmk__fence_list_targets(out, st, device_id, timeout);
	- pcmk__out_epilogue(out, xml, rc);
	+ pcmk__xml_output_finish(out, xml);
	return rc;
	}
	#endif

	int
	pcmk__fence_metadata(pcmk__output_t out, stonith_t st, char *agent,
	unsigned int timeout) {
	char *buffer = NULL;
	int rc = st->cmds->metadata(st, st_opt_sync_call, agent, NULL, &buffer,
	timeout/1000);

	if (rc != pcmk_rc_ok) {
	return pcmk_legacy2rc(rc);
	}

	out->output_xml(out, "metadata", buffer);
	free(buffer);
	return rc;
	}

	#ifdef BUILD_PUBLIC_LIBPACEMAKER
	int
	pcmk_fence_metadata(xmlNodePtr xml, stonith_t st, char *agent,
	unsigned int timeout) {
	pcmk__output_t *out = NULL;
	int rc = pcmk_rc_ok;

	- rc = pcmk__out_prologue(&out, xml);
	+ rc = pcmk__xml_output_new(&out, xml);
	if (rc != pcmk_rc_ok) {
	return rc;
	}

	stonith__register_messages(out);

	rc = pcmk__fence_metadata(out, st, agent, timeout);
	- pcmk__out_epilogue(out, xml, rc);
	+ pcmk__xml_output_finish(out, xml);
	return rc;
	}
	#endif

	int
	pcmk__fence_registered(pcmk__output_t out, stonith_t st, char *target,
	unsigned int timeout) {
	stonith_key_value_t *devices = NULL;
	int rc = pcmk_rc_ok;

	rc = st->cmds->query(st, st_opts, target, &devices, timeout/1000);
	/* query returns a negative error code or a positive number of results. */
	if (rc < 0) {
	return pcmk_legacy2rc(rc);
	}

	out->begin_list(out, "fence device", "fence devices", "Registered fence devices");
	for (stonith_key_value_t *dIter = devices; dIter; dIter = dIter->next) {
	out->list_item(out, "device", "%s", dIter->value);
	}
	out->end_list(out);

	stonith_key_value_freeall(devices, 1, 1);

	/* Return pcmk_rc_ok here, not the number of results. Callers probably
	* don't care.
	*/
	return pcmk_rc_ok;
	}

	#ifdef BUILD_PUBLIC_LIBPACEMAKER
	int
	pcmk_fence_registered(xmlNodePtr xml, stonith_t st, char *target,
	unsigned int timeout) {
	pcmk__output_t *out = NULL;
	int rc = pcmk_rc_ok;

	- rc = pcmk__out_prologue(&out, xml);
	+ rc = pcmk__xml_output_new(&out, xml);
	if (rc != pcmk_rc_ok) {
	return rc;
	}

	stonith__register_messages(out);

	rc = pcmk__fence_registered(out, st, target, timeout);
	- pcmk__out_epilogue(out, xml, rc);
	+ pcmk__xml_output_finish(out, xml);
	return rc;
	}
	#endif

	int
	pcmk__fence_register_level(stonith_t st, char target, int fence_level,
	stonith_key_value_t *devices) {
	return handle_level(st, target, fence_level, devices, true);
	}

	#ifdef BUILD_PUBLIC_LIBPACEMAKER
	int
	pcmk_fence_register_level(stonith_t st, char target, int fence_level,
	stonith_key_value_t *devices) {
	return pcmk__fence_register_level(st, target, fence_level, devices);
	}
	#endif

	int
	pcmk__fence_unregister_level(stonith_t st, char target, int fence_level) {
	return handle_level(st, target, fence_level, NULL, false);
	}

	#ifdef BUILD_PUBLIC_LIBPACEMAKER
	int
	pcmk_fence_unregister_level(stonith_t st, char target, int fence_level) {
	return pcmk__fence_unregister_level(st, target, fence_level);
	}
	#endif

	int
	pcmk__fence_validate(pcmk__output_t out, stonith_t st, const char *agent,
	const char id, stonith_key_value_t params,
	unsigned int timeout) {
	char *output = NULL;
	char *error_output = NULL;
	int rc;

	rc = st->cmds->validate(st, st_opt_sync_call, id, NULL, agent, params,
	timeout/1000, &output, &error_output);
	out->message(out, "validate", agent, id, output, error_output, rc);
	return pcmk_legacy2rc(rc);
	}

	#ifdef BUILD_PUBLIC_LIBPACEMAKER
	int
	pcmk_fence_validate(xmlNodePtr xml, stonith_t st, const char *agent,
	const char id, stonith_key_value_t params,
	unsigned int timeout) {
	pcmk__output_t *out = NULL;
	int rc = pcmk_rc_ok;

	- rc = pcmk__out_prologue(&out, xml);
	+ rc = pcmk__xml_output_new(&out, xml);
	if (rc != pcmk_rc_ok) {
	return rc;
	}

	stonith__register_messages(out);

	rc = pcmk__fence_validate(out, st, agent, id, params, timeout);
	- pcmk__out_epilogue(out, xml, rc);
	+ pcmk__xml_output_finish(out, xml);
	return rc;
	}
	#endif

	int
	pcmk__get_fencing_history(stonith_t st, stonith_history_t *stonith_history,
	enum pcmk__fence_history fence_history)
	{
	int rc = pcmk_rc_ok;

	if (st == NULL) {
	rc = ENOTCONN;
	} else if (fence_history != pcmk__fence_history_none) {
	rc = st->cmds->history(st, st_opt_sync_call, NULL, stonith_history, 120);

	rc = pcmk_legacy2rc(rc);
	if (rc != pcmk_rc_ok) {
	return rc;
	}

	stonith_history = stonith__sort_history(stonith_history);
	if (fence_history == pcmk__fence_history_reduced) {
	stonith_history = reduce_fence_history(stonith_history);
	}
	}

	return rc;
	}
	diff --git a/lib/pacemaker/pcmk_output_utils.c b/lib/pacemaker/pcmk_output_utils.c
	deleted file mode 100644
	index 52131825ed..0000000000
	--- a/lib/pacemaker/pcmk_output_utils.c
	+++ /dev/null
	@@ -1,79 +0,0 @@
	-/*
	- * Copyright 2019-2021 the Pacemaker project contributors
	- *
	- * The version control history for this file may have further details.
	- *
	- * This source code is licensed under the GNU Lesser General Public License
	- * version 2.1 or later (LGPLv2.1+) WITHOUT ANY WARRANTY.
	- */
	-
	-#include <crm_internal.h>
	-#include <crm/common/results.h>
	-#include <crm/common/output_internal.h>
	-#include <libxml/tree.h>
	-#include <pacemaker-internal.h>
	-
	-pcmk__supported_format_t pcmk__out_formats[] = {
	- PCMK__SUPPORTED_FORMAT_XML,
	- { NULL, NULL, NULL }
	-};
	-
	-int
	-pcmk__out_prologue(pcmk__output_t *out, xmlNodePtr xml) {
	- int rc = pcmk_rc_ok;
	-
	- if (*xml != NULL) {
	- xmlFreeNode(*xml);
	- }
	-
	- pcmk__register_formats(NULL, pcmk__out_formats);
	- rc = pcmk__output_new(out, "xml", NULL, NULL);
	- if (rc != pcmk_rc_ok) {
	- return rc;
	- }
	-
	- return rc;
	-}
	-
	-void
	-pcmk__out_epilogue(pcmk__output_t out, xmlNodePtr xml, int retval) {
	- if (retval == pcmk_rc_ok) {
	- out->finish(out, 0, FALSE, (void **) xml);
	- }
	-
	- pcmk__output_free(out);
	-}
	-
	-/*!
	- * \internal
	- * \brief Create a new output object using the "log" format
	- *
	- * Create a new output object using the "log" format, and register the
	- * libpe_status and libpacemaker messages.
	- *
	- * \return Newly created output object, or NULL on error
	- */
	-pcmk__output_t *
	-pcmk__new_logger(void)
	-{
	- int rc = pcmk_rc_ok;
	- pcmk__output_t *out = NULL;
	- const char* argv[] = { "", NULL };
	- pcmk__supported_format_t formats[] = {
	- PCMK__SUPPORTED_FORMAT_LOG,
	- { NULL, NULL, NULL }
	- };
	-
	- pcmk__register_formats(NULL, formats);
	- rc = pcmk__output_new(&out, "log", NULL, (char**)argv);
	- if ((rc != pcmk_rc_ok) \|\| (out == NULL)) {
	- crm_err("Can't log resource details due to internal error: %s",
	- pcmk_rc_str(rc));
	- return NULL;
	- }
	-
	- pe__register_messages(out);
	- pcmk__register_lib_messages(out);
	- return out;
	-}
	-
	diff --git a/lib/pacemaker/pcmk_resource.c b/lib/pacemaker/pcmk_resource.c
	index 197edf8e93..2898a696e3 100644
	--- a/lib/pacemaker/pcmk_resource.c
	+++ b/lib/pacemaker/pcmk_resource.c
	@@ -1,140 +1,140 @@
	/*
	- * Copyright 2021 the Pacemaker project contributors
	+ * Copyright 2021-2022 the Pacemaker project contributors
	*
	* The version control history for this file may have further details.
	*
	* This source code is licensed under the GNU General Public License version 2
	* or later (GPLv2+) WITHOUT ANY WARRANTY.
	*/

	#include <crm_internal.h>

	#include <errno.h>
	#include <glib.h>
	#include <libxml/tree.h>

	#include <crm/common/mainloop.h>
	#include <crm/common/results.h>
	#include <crm/common/output_internal.h>
	#include <crm/pengine/internal.h>

	#include <pacemaker.h>
	#include <pacemaker-internal.h>

	// Search path for resource operation history (takes node name and resource ID)
	#define XPATH_OP_HISTORY "//" XML_CIB_TAG_STATUS \
	"/" XML_CIB_TAG_STATE "[@" XML_ATTR_UNAME "='%s']" \
	"/" XML_CIB_TAG_LRM "/" XML_LRM_TAG_RESOURCES \
	"/" XML_LRM_TAG_RESOURCE "[@" XML_ATTR_ID "='%s']"

	static xmlNode *
	best_op(pe_resource_t rsc, pe_node_t node, pe_working_set_t *data_set)
	{
	char *xpath = NULL;
	xmlNode *history = NULL;
	xmlNode *best = NULL;

	// Find node's resource history
	xpath = crm_strdup_printf(XPATH_OP_HISTORY, node->details->uname, rsc->id);
	history = get_xpath_object(xpath, data_set->input, LOG_NEVER);
	free(xpath);

	// Examine each history entry
	for (xmlNode *lrm_rsc_op = first_named_child(history, XML_LRM_TAG_RSC_OP);
	lrm_rsc_op != NULL; lrm_rsc_op = crm_next_same_xml(lrm_rsc_op)) {

	const char *digest = crm_element_value(lrm_rsc_op,
	XML_LRM_ATTR_RESTART_DIGEST);
	guint interval_ms = 0;

	crm_element_value_ms(lrm_rsc_op, XML_LRM_ATTR_INTERVAL, &interval_ms);

	if (pcmk__ends_with(ID(lrm_rsc_op), "_last_failure_0")
	\|\| (interval_ms != 0)) {

	// Only use last failure or recurring op if nothing else available
	if (best == NULL) {
	best = lrm_rsc_op;
	}
	continue;
	}

	best = lrm_rsc_op;
	if (digest != NULL) {
	// Any non-recurring action with a restart digest is sufficient
	break;
	}
	}
	return best;
	}

	/*!
	* \internal
	* \brief Calculate and output resource operation digests
	*
	* \param[in] out Output object
	* \param[in] rsc Resource to calculate digests for
	* \param[in] node Node whose operation history should be used
	* \param[in] overrides Hash table of configuration parameters to override
	* \param[in] data_set Cluster working set (with status)
	*
	* \return Standard Pacemaker return code
	*/
	int
	pcmk__resource_digests(pcmk__output_t out, pe_resource_t rsc,
	pe_node_t node, GHashTable overrides,
	pe_working_set_t *data_set)
	{
	const char *task = NULL;
	xmlNode *xml_op = NULL;
	op_digest_cache_t *digests = NULL;
	guint interval_ms = 0;
	int rc = pcmk_rc_ok;

	if ((out == NULL) \|\| (rsc == NULL) \|\| (node == NULL) \|\| (data_set == NULL)) {
	return EINVAL;
	}
	if (rsc->variant != pe_native) {
	// Only primitives get operation digests
	return EOPNOTSUPP;
	}

	// Find XML of operation history to use
	xml_op = best_op(rsc, node, data_set);

	// Generate an operation key
	if (xml_op != NULL) {
	task = crm_element_value(xml_op, XML_LRM_ATTR_TASK);
	crm_element_value_ms(xml_op, XML_LRM_ATTR_INTERVAL_MS, &interval_ms);
	}
	if (task == NULL) { // Assume start if no history is available
	task = RSC_START;
	interval_ms = 0;
	}

	// Calculate and show digests
	digests = pe__calculate_digests(rsc, task, &interval_ms, node, xml_op,
	overrides, true, data_set);
	rc = out->message(out, "digests", rsc, node, task, interval_ms, digests);

	pe__free_digests(digests);
	return rc;
	}

	int
	pcmk_resource_digests(xmlNodePtr xml, pe_resource_t rsc,
	pe_node_t node, GHashTable overrides,
	pe_working_set_t *data_set)
	{
	pcmk__output_t *out = NULL;
	int rc = pcmk_rc_ok;

	- rc = pcmk__out_prologue(&out, xml);
	+ rc = pcmk__xml_output_new(&out, xml);
	if (rc != pcmk_rc_ok) {
	return rc;
	}
	pcmk__register_lib_messages(out);
	rc = pcmk__resource_digests(out, rsc, node, overrides, data_set);
	- pcmk__out_epilogue(out, xml, rc);
	+ pcmk__xml_output_finish(out, xml);
	return rc;
	}
	diff --git a/lib/pacemaker/pcmk_sched_allocate.c b/lib/pacemaker/pcmk_sched_allocate.c
	index 7f3ae4c6a1..4c76001d10 100644
	--- a/lib/pacemaker/pcmk_sched_allocate.c
	+++ b/lib/pacemaker/pcmk_sched_allocate.c
	@@ -1,795 +1,797 @@
	/*
	* Copyright 2004-2022 the Pacemaker project contributors
	*
	* The version control history for this file may have further details.
	*
	* This source code is licensed under the GNU General Public License version 2
	* or later (GPLv2+) WITHOUT ANY WARRANTY.
	*/

	#include <crm_internal.h>

	#include <crm/crm.h>
	#include <crm/cib.h>
	#include <crm/msg_xml.h>
	#include <crm/common/xml.h>
	#include <crm/common/xml_internal.h>

	#include <glib.h>

	#include <crm/pengine/status.h>
	#include <pacemaker-internal.h>
	#include "libpacemaker_private.h"

	CRM_TRACE_INIT_DATA(pacemaker);

	/*!
	* \internal
	* \brief Do deferred action checks after allocation
	*
	* When unpacking the resource history, the scheduler checks for resource
	* configurations that have changed since an action was run. However, at that
	* time, bundles using the REMOTE_CONTAINER_HACK don't have their final
	* parameter information, so instead they add a deferred check to a list. This
	* function processes one entry in that list.
	*
	* \param[in] rsc Resource that action history is for
	* \param[in] node Node that action history is for
	* \param[in] rsc_op Action history entry
	* \param[in] check Type of deferred check to do
	* \param[in] data_set Working set for cluster
	*/
	static void
	check_params(pe_resource_t rsc, pe_node_t node, xmlNode *rsc_op,
	enum pe_check_parameters check, pe_working_set_t *data_set)
	{
	const char *reason = NULL;
	op_digest_cache_t *digest_data = NULL;

	switch (check) {
	case pe_check_active:
	if (pcmk__check_action_config(rsc, node, rsc_op)
	&& pe_get_failcount(node, rsc, NULL, pe_fc_effective, NULL,
	data_set)) {
	reason = "action definition changed";
	}
	break;

	case pe_check_last_failure:
	digest_data = rsc_action_digest_cmp(rsc, rsc_op, node, data_set);
	switch (digest_data->rc) {
	case RSC_DIGEST_UNKNOWN:
	crm_trace("Resource %s history entry %s on %s has "
	"no digest to compare",
	rsc->id, ID(rsc_op), node->details->id);
	break;
	case RSC_DIGEST_MATCH:
	break;
	default:
	reason = "resource parameters have changed";
	break;
	}
	break;
	}
	if (reason != NULL) {
	pe__clear_failcount(rsc, node, reason, data_set);
	}
	}

	/*!
	* \internal
	* \brief Check whether a resource has failcount clearing scheduled on a node
	*
	* \param[in] node Node to check
	* \param[in] rsc Resource to check
	*
	* \return true if \p rsc has failcount clearing scheduled on \p node,
	* otherwise false
	*/
	static bool
	failcount_clear_action_exists(pe_node_t node, pe_resource_t rsc)
	{
	GList *list = pe__resource_actions(rsc, node, CRM_OP_CLEAR_FAILCOUNT, TRUE);

	if (list != NULL) {
	g_list_free(list);
	return true;
	}
	return false;
	}

	/*!
	* \internal
	* \brief Ban a resource from a node if it reached its failure threshold there
	*
	* \param[in] rsc Resource to check failure threshold for
	* \param[in] node Node to check \p rsc on
	*/
	static void
	check_failure_threshold(pe_resource_t rsc, pe_node_t node)
	{
	// If this is a collective resource, apply recursively to children instead
	if (rsc->children != NULL) {
	g_list_foreach(rsc->children, (GFunc) check_failure_threshold,
	node);
	return;

	} else if (failcount_clear_action_exists(node, rsc)) {
	/* Don't force the resource away from this node due to a failcount
	* that's going to be cleared.
	*
	* @TODO Failcount clearing can be scheduled in
	* pcmk__handle_rsc_config_changes() via process_rsc_history(), or in
	* schedule_resource_actions() via check_params(). This runs well before
	* then, so it cannot detect those, meaning we might check the migration
	* threshold when we shouldn't. Worst case, we stop or move the
	* resource, then move it back in the next transition.
	*/
	return;

	} else {
	pe_resource_t *failed = NULL;

	if (pcmk__threshold_reached(rsc, node, &failed)) {
	resource_location(failed, node, -INFINITY, "__fail_limit__",
	rsc->cluster);
	}
	}
	}

	/*!
	* \internal
	* \brief If resource has exclusive discovery, ban node if not allowed
	*
	* Location constraints have a resource-discovery option that allows users to
	* specify where probes are done for the affected resource. If this is set to
	* exclusive, probes will only be done on nodes listed in exclusive constraints.
	* This function bans the resource from the node if the node is not listed.
	*
	* \param[in] rsc Resource to check
	* \param[in] node Node to check \p rsc on
	*/
	static void
	apply_exclusive_discovery(pe_resource_t rsc, pe_node_t node)
	{
	if (rsc->exclusive_discover \|\| uber_parent(rsc)->exclusive_discover) {
	pe_node_t *match = NULL;

	// If this is a collective resource, apply recursively to children
	g_list_foreach(rsc->children, (GFunc) apply_exclusive_discovery, node);

	match = g_hash_table_lookup(rsc->allowed_nodes, node->details->id);
	if ((match != NULL)
	&& (match->rsc_discover_mode != pe_discover_exclusive)) {
	match->weight = -INFINITY;
	}
	}
	}

	/*!
	* \internal
	* \brief Apply stickiness to a resource if appropriate
	*
	* \param[in] rsc Resource to check for stickiness
	* \param[in] data_set Cluster working set
	*/
	static void
	apply_stickiness(pe_resource_t rsc, pe_working_set_t data_set)
	{
	pe_node_t *node = NULL;

	// If this is a collective resource, apply recursively to children instead
	if (rsc->children != NULL) {
	g_list_foreach(rsc->children, (GFunc) apply_stickiness, data_set);
	return;
	}

	/* A resource is sticky if it is managed, has stickiness configured, and is
	* active on a single node.
	*/
	if (!pcmk_is_set(rsc->flags, pe_rsc_managed)
	\|\| (rsc->stickiness < 1) \|\| !pcmk__list_of_1(rsc->running_on)) {
	return;
	}

	node = rsc->running_on->data;

	/* In a symmetric cluster, stickiness can always be used. In an
	* asymmetric cluster, we have to check whether the resource is still
	* allowed on the node, so we don't keep the resource somewhere it is no
	* longer explicitly enabled.
	*/
	if (!pcmk_is_set(rsc->cluster->flags, pe_flag_symmetric_cluster)
	&& (pe_hash_table_lookup(rsc->allowed_nodes,
	node->details->id) == NULL)) {
	pe_rsc_debug(rsc,
	"Ignoring %s stickiness because the cluster is "
	"asymmetric and node %s is not explicitly allowed",
	rsc->id, node->details->uname);
	return;
	}

	pe_rsc_debug(rsc, "Resource %s has %d stickiness on node %s",
	rsc->id, rsc->stickiness, node->details->uname);
	resource_location(rsc, node, rsc->stickiness, "stickiness",
	rsc->cluster);
	}

	/*!
	* \internal
	* \brief Apply shutdown locks for all resources as appropriate
	*
	* \param[in] data_set Cluster working set
	*/
	static void
	apply_shutdown_locks(pe_working_set_t *data_set)
	{
	if (!pcmk_is_set(data_set->flags, pe_flag_shutdown_lock)) {
	return;
	}
	for (GList *iter = data_set->resources; iter != NULL; iter = iter->next) {
	pe_resource_t rsc = (pe_resource_t ) iter->data;

	rsc->cmds->shutdown_lock(rsc);
	}
	}

	/*!
	* \internal
	* \brief Calculate the number of available nodes in the cluster
	*
	* \param[in] data_set Cluster working set
	*/
	static void
	count_available_nodes(pe_working_set_t *data_set)
	{
	if (pcmk_is_set(data_set->flags, pe_flag_no_compat)) {
	return;
	}

	// @COMPAT for API backward compatibility only (cluster does not use value)
	for (GList *iter = data_set->nodes; iter != NULL; iter = iter->next) {
	pe_node_t node = (pe_node_t ) iter->data;

	if ((node != NULL) && (node->weight >= 0) && node->details->online
	&& (node->details->type != node_ping)) {
	data_set->max_valid_nodes++;
	}
	}
	crm_trace("Online node count: %d", data_set->max_valid_nodes);
	}

	/*
	* \internal
	* \brief Apply node-specific scheduling criteria
	*
	* After the CIB has been unpacked, process node-specific scheduling criteria
	* including shutdown locks, location constraints, resource stickiness,
	* migration thresholds, and exclusive resource discovery.
	*/
	static void
	apply_node_criteria(pe_working_set_t *data_set)
	{
	crm_trace("Applying node-specific scheduling criteria");
	apply_shutdown_locks(data_set);
	count_available_nodes(data_set);
	pcmk__apply_locations(data_set);
	g_list_foreach(data_set->resources, (GFunc) apply_stickiness, data_set);

	for (GList *node_iter = data_set->nodes; node_iter != NULL;
	node_iter = node_iter->next) {
	for (GList *rsc_iter = data_set->resources; rsc_iter != NULL;
	rsc_iter = rsc_iter->next) {
	pe_node_t node = (pe_node_t ) node_iter->data;
	pe_resource_t rsc = (pe_resource_t ) rsc_iter->data;

	check_failure_threshold(rsc, node);
	apply_exclusive_discovery(rsc, node);
	}
	}
	}

	/*!
	* \internal
	* \brief Allocate resources to nodes
	*
	* \param[in] data_set Cluster working set
	*/
	static void
	allocate_resources(pe_working_set_t *data_set)
	{
	GList *iter = NULL;

	crm_trace("Allocating resources to nodes");

	if (!pcmk__str_eq(data_set->placement_strategy, "default", pcmk__str_casei)) {
	pcmk__sort_resources(data_set);
	}
	pcmk__show_node_capacities("Original", data_set);

	if (pcmk_is_set(data_set->flags, pe_flag_have_remote_nodes)) {
	/* Allocate remote connection resources first (which will also allocate
	* any colocation dependencies). If the connection is migrating, always
	* prefer the partial migration target.
	*/
	for (iter = data_set->resources; iter != NULL; iter = iter->next) {
	pe_resource_t rsc = (pe_resource_t ) iter->data;

	if (rsc->is_remote_node) {
	pe_rsc_trace(rsc, "Allocating remote connection resource '%s'",
	rsc->id);
	rsc->cmds->allocate(rsc, rsc->partial_migration_target,
	data_set);
	}
	}
	}

	/* now do the rest of the resources */
	for (iter = data_set->resources; iter != NULL; iter = iter->next) {
	pe_resource_t rsc = (pe_resource_t ) iter->data;

	if (!rsc->is_remote_node) {
	pe_rsc_trace(rsc, "Allocating %s resource '%s'",
	crm_element_name(rsc->xml), rsc->id);
	rsc->cmds->allocate(rsc, NULL, data_set);
	}
	}

	pcmk__show_node_capacities("Remaining", data_set);
	}

	/*!
	* \internal
	* \brief Schedule fail count clearing on online nodes if resource is orphaned
	*
	* \param[in] rsc Resource to check
	* \param[in] data_set Cluster working set
	*/
	static void
	clear_failcounts_if_orphaned(pe_resource_t rsc, pe_working_set_t data_set)
	{
	if (!pcmk_is_set(rsc->flags, pe_rsc_orphan)) {
	return;
	}
	crm_trace("Clear fail counts for orphaned resource %s", rsc->id);

	/* There's no need to recurse into rsc->children because those
	* should just be unallocated clone instances.
	*/

	for (GList *iter = data_set->nodes; iter != NULL; iter = iter->next) {
	pe_node_t node = (pe_node_t ) iter->data;
	pe_action_t *clear_op = NULL;

	if (!node->details->online) {
	continue;
	}
	if (pe_get_failcount(node, rsc, NULL, pe_fc_effective, NULL,
	data_set) == 0) {
	continue;
	}

	clear_op = pe__clear_failcount(rsc, node, "it is orphaned", data_set);

	/* We can't use order_action_then_stop() here because its
	* pe_order_preserve breaks things
	*/
	pcmk__new_ordering(clear_op->rsc, NULL, clear_op, rsc, stop_key(rsc),
	NULL, pe_order_optional, data_set);
	}
	}

	/*!
	* \internal
	* \brief Schedule any resource actions needed
	*
	* \param[in] data_set Cluster working set
	*/
	static void
	schedule_resource_actions(pe_working_set_t *data_set)
	{
	// Process deferred action checks
	pe__foreach_param_check(data_set, check_params);
	pe__free_param_checks(data_set);

	if (pcmk_is_set(data_set->flags, pe_flag_startup_probes)) {
	crm_trace("Scheduling probes");
	pcmk__schedule_probes(data_set);
	}

	if (pcmk_is_set(data_set->flags, pe_flag_stop_rsc_orphans)) {
	g_list_foreach(data_set->resources,
	(GFunc) clear_failcounts_if_orphaned, data_set);
	}

	crm_trace("Scheduling resource actions");
	for (GList *iter = data_set->resources; iter != NULL; iter = iter->next) {
	pe_resource_t rsc = (pe_resource_t ) iter->data;

	rsc->cmds->create_actions(rsc, data_set);
	}
	}

	/*!
	* \internal
	* \brief Check whether a resource or any of its descendants are managed
	*
	* \param[in] rsc Resource to check
	*
	* \return true if resource or any descendent is managed, otherwise false
	*/
	static bool
	is_managed(const pe_resource_t *rsc)
	{
	if (pcmk_is_set(rsc->flags, pe_rsc_managed)) {
	return true;
	}
	for (GList *iter = rsc->children; iter != NULL; iter = iter->next) {
	if (is_managed((pe_resource_t *) iter->data)) {
	return true;
	}
	}
	return false;
	}

	/*!
	* \internal
	* \brief Check whether any resources in the cluster are managed
	*
	* \param[in] data_set Cluster working set
	*
	* \return true if any resource is managed, otherwise false
	*/
	static bool
	any_managed_resources(pe_working_set_t *data_set)
	{
	for (GList *iter = data_set->resources; iter != NULL; iter = iter->next) {
	if (is_managed((pe_resource_t *) iter->data)) {
	return true;
	}
	}
	return false;
	}

	/*!
	* \internal
	* \brief Check whether a node requires fencing
	*
	* \param[in] node Node to check
	* \param[in] have_managed Whether any resource in cluster is managed
	* \param[in] data_set Cluster working set
	*
	* \return true if \p node should be fenced, otherwise false
	*/
	static bool
	needs_fencing(pe_node_t node, bool have_managed, pe_working_set_t data_set)
	{
	return have_managed && node->details->unclean
	&& pe_can_fence(data_set, node);
	}

	/*!
	* \internal
	* \brief Check whether a node requires shutdown
	*
	* \param[in] node Node to check
	*
	* \return true if \p node should be shut down, otherwise false
	*/
	static bool
	needs_shutdown(pe_node_t *node)
	{
	if (pe__is_guest_or_remote_node(node)) {
	/* Do not send shutdown actions for Pacemaker Remote nodes.
	* @TODO We might come up with a good use for this in the future.
	*/
	return false;
	}
	return node->details->online && node->details->shutdown;
	}

	/*!
	* \internal
	* \brief Track and order non-DC fencing
	*
	* \param[in] list List of existing non-DC fencing actions
	* \param[in] action Fencing action to prepend to \p list
	*
	* \return (Possibly new) head of \p list
	*/
	static GList *
	add_nondc_fencing(GList list, pe_action_t action, pe_working_set_t *data_set)
	{
	if (!pcmk_is_set(data_set->flags, pe_flag_concurrent_fencing)
	&& (list != NULL)) {
	/* Concurrent fencing is disabled, so order each non-DC
	* fencing in a chain. If there is any DC fencing or
	* shutdown, it will be ordered after the last action in the
	* chain later.
	*/
	order_actions((pe_action_t *) list->data, action, pe_order_optional);
	}
	return g_list_prepend(list, action);
	}

	/*!
	* \internal
	* \brief Schedule a node for fencing
	*
	* \param[in] node Node that requires fencing
	* \param[in] data_set Cluster working set
	*/
	static pe_action_t *
	schedule_fencing(pe_node_t node, pe_working_set_t data_set)
	{
	pe_action_t *fencing = pe_fence_op(node, NULL, FALSE, "node is unclean",
	FALSE, data_set);

	pe_warn("Scheduling node %s for fencing", node->details->uname);
	pcmk__order_vs_fence(fencing, data_set);
	return fencing;
	}

	/*!
	* \internal
	* \brief Create and order node fencing and shutdown actions
	*
	* \param[in] data_set Cluster working set
	*/
	static void
	schedule_fencing_and_shutdowns(pe_working_set_t *data_set)
	{
	pe_action_t *dc_down = NULL;
	bool integrity_lost = false;
	bool have_managed = any_managed_resources(data_set);
	GList *fencing_ops = NULL;
	GList *shutdown_ops = NULL;

	crm_trace("Scheduling fencing and shutdowns as needed");
	if (!have_managed) {
	crm_notice("No fencing will be done until there are resources to manage");
	}

	// Check each node for whether it needs fencing or shutdown
	for (GList *iter = data_set->nodes; iter != NULL; iter = iter->next) {
	pe_node_t node = (pe_node_t ) iter->data;
	pe_action_t *fencing = NULL;

	/* Guest nodes are "fenced" by recovering their container resource,
	* so handle them separately.
	*/
	if (pe__is_guest_node(node)) {
	if (node->details->remote_requires_reset && have_managed
	&& pe_can_fence(data_set, node)) {
	pcmk__fence_guest(node, data_set);
	}
	continue;
	}

	if (needs_fencing(node, have_managed, data_set)) {
	fencing = schedule_fencing(node, data_set);

	// Track DC and non-DC fence actions separately
	if (node->details->is_dc) {
	dc_down = fencing;
	} else {
	fencing_ops = add_nondc_fencing(fencing_ops, fencing, data_set);
	}

	} else if (needs_shutdown(node)) {
	pe_action_t *down_op = pcmk__new_shutdown_action(node, data_set);

	// Track DC and non-DC shutdown actions separately
	if (node->details->is_dc) {
	dc_down = down_op;
	} else {
	shutdown_ops = g_list_prepend(shutdown_ops, down_op);
	}
	}

	if ((fencing == NULL) && node->details->unclean) {
	integrity_lost = true;
	pe_warn("Node %s is unclean but cannot be fenced",
	node->details->uname);
	}
	}

	if (integrity_lost) {
	if (!pcmk_is_set(data_set->flags, pe_flag_stonith_enabled)) {
	pe_warn("Resource functionality and data integrity cannot be "
	"guaranteed (configure, enable, and test fencing to "
	"correct this)");

	} else if (!pcmk_is_set(data_set->flags, pe_flag_have_quorum)) {
	crm_notice("Unclean nodes will not be fenced until quorum is "
	"attained or no-quorum-policy is set to ignore");
	}
	}

	if (dc_down != NULL) {
	/* Order any non-DC shutdowns before any DC shutdown, to avoid repeated
	* DC elections. However, we don't want to order non-DC shutdowns before
	* a DC fencing, because even though we don't want a node that's
	* shutting down to become DC, the DC fencing could be ordered before a
	* clone stop that's also ordered before the shutdowns, thus leading to
	* a graph loop.
	*/
	if (pcmk__str_eq(dc_down->task, CRM_OP_SHUTDOWN, pcmk__str_none)) {
	pcmk__order_after_each(dc_down, shutdown_ops);
	}

	// Order any non-DC fencing before any DC fencing or shutdown

	if (pcmk_is_set(data_set->flags, pe_flag_concurrent_fencing)) {
	/* With concurrent fencing, order each non-DC fencing action
	* separately before any DC fencing or shutdown.
	*/
	pcmk__order_after_each(dc_down, fencing_ops);
	} else if (fencing_ops != NULL) {
	/* Without concurrent fencing, the non-DC fencing actions are
	* already ordered relative to each other, so we just need to order
	* the DC fencing after the last action in the chain (which is the
	* first item in the list).
	*/
	order_actions((pe_action_t *) fencing_ops->data, dc_down,
	pe_order_optional);
	}
	}
	g_list_free(fencing_ops);
	g_list_free(shutdown_ops);
	}

	static void
	log_resource_details(pe_working_set_t *data_set)
	{
	pcmk__output_t *out = data_set->priv;
	GList *all = NULL;

	/* We need a list of nodes that we are allowed to output information for.
	* This is necessary because out->message for all the resource-related
	* messages expects such a list, due to the `crm_mon --node=` feature. Here,
	* we just make it a list of all the nodes.
	*/
	all = g_list_prepend(all, (gpointer) "*");

	for (GList *item = data_set->resources; item != NULL; item = item->next) {
	pe_resource_t rsc = (pe_resource_t ) item->data;

	// Log all resources except inactive orphans
	if (!pcmk_is_set(rsc->flags, pe_rsc_orphan)
	\|\| (rsc->role != RSC_ROLE_STOPPED)) {
	out->message(out, crm_map_element_name(rsc->xml), 0, rsc, all, all);
	}
	}

	g_list_free(all);
	}

	static void
	log_all_actions(pe_working_set_t *data_set)
	{
	/* This only ever outputs to the log, so ignore whatever output object was
	* previously set and just log instead.
	*/
	pcmk__output_t *prev_out = data_set->priv;
	pcmk__output_t *out = pcmk__new_logger();

	if (out == NULL) {
	return;
	}

	+ pe__register_messages(out);
	+ pcmk__register_lib_messages(out);
	pcmk__output_set_log_level(out, LOG_NOTICE);
	data_set->priv = out;

	out->begin_list(out, NULL, NULL, "Actions");
	pcmk__output_actions(data_set);
	out->end_list(out);
	out->finish(out, CRM_EX_OK, true, NULL);
	pcmk__output_free(out);

	data_set->priv = prev_out;
	}

	/*!
	* \internal
	* \brief Log all required but unrunnable actions at trace level
	*
	* \param[in] data_set Cluster working set
	*/
	static void
	log_unrunnable_actions(pe_working_set_t *data_set)
	{
	const uint64_t flags = pe_action_optional\|pe_action_runnable\|pe_action_pseudo;

	crm_trace("Required but unrunnable actions:");
	for (GList *iter = data_set->actions; iter != NULL; iter = iter->next) {
	pe_action_t action = (pe_action_t ) iter->data;

	if (!pcmk_any_flags_set(action->flags, flags)) {
	pcmk__log_action("\t", action, true);
	}
	}
	}

	/*!
	* \internal
	* \brief Unpack the CIB for scheduling
	*
	* \param[in] cib CIB XML to unpack (may be NULL if previously unpacked)
	* \param[in] flags Working set flags to set in addition to defaults
	* \param[in] data_set Cluster working set
	*/
	static void
	unpack_cib(xmlNode cib, unsigned long long flags, pe_working_set_t data_set)
	{
	if (pcmk_is_set(data_set->flags, pe_flag_have_status)) {
	crm_trace("Reusing previously calculated cluster status");
	pe__set_working_set_flags(data_set, flags);
	return;
	}

	CRM_ASSERT(cib != NULL);
	crm_trace("Calculating cluster status");

	/* This will zero the entire struct without freeing anything first, so
	* callers should never call pcmk__schedule_actions() with a populated data
	* set unless pe_flag_have_status is set (i.e. cluster_status() was
	* previously called, whether directly or via pcmk__schedule_actions()).
	*/
	set_working_set_defaults(data_set);

	pe__set_working_set_flags(data_set, flags);
	data_set->input = cib;
	cluster_status(data_set); // Sets pe_flag_have_status
	}

	/*!
	* \internal
	* \brief Run the scheduler for a given CIB
	*
	* \param[in] cib CIB XML to use as scheduler input
	* \param[in] flags Working set flags to set in addition to defaults
	* \param[in,out] data_set Cluster working set
	*/
	void
	pcmk__schedule_actions(xmlNode *cib, unsigned long long flags,
	pe_working_set_t *data_set)
	{
	unpack_cib(cib, flags, data_set);
	pcmk__set_allocation_methods(data_set);
	pcmk__apply_node_health(data_set);
	pcmk__unpack_constraints(data_set);
	if (pcmk_is_set(data_set->flags, pe_flag_check_config)) {
	return;
	}

	if (!pcmk_is_set(data_set->flags, pe_flag_quick_location) &&
	pcmk__is_daemon) {
	log_resource_details(data_set);
	}

	apply_node_criteria(data_set);

	if (pcmk_is_set(data_set->flags, pe_flag_quick_location)) {
	return;
	}

	pcmk__create_internal_constraints(data_set);
	pcmk__handle_rsc_config_changes(data_set);
	allocate_resources(data_set);
	schedule_resource_actions(data_set);

	/* Remote ordering constraints need to happen prior to calculating fencing
	* because it is one more place we can mark nodes as needing fencing.
	*/
	pcmk__order_remote_connection_actions(data_set);

	schedule_fencing_and_shutdowns(data_set);
	pcmk__apply_orderings(data_set);
	log_all_actions(data_set);
	pcmk__create_graph(data_set);

	if (get_crm_log_level() == LOG_TRACE) {
	log_unrunnable_actions(data_set);
	}
	}
	diff --git a/lib/pacemaker/pcmk_simulate.c b/lib/pacemaker/pcmk_simulate.c
	index 81fe1059a4..2e50f6f536 100644
	--- a/lib/pacemaker/pcmk_simulate.c
	+++ b/lib/pacemaker/pcmk_simulate.c
	@@ -1,981 +1,983 @@
	/*
	* Copyright 2021-2022 the Pacemaker project contributors
	*
	* The version control history for this file may have further details.
	*
	* This source code is licensed under the GNU Lesser General Public License
	* version 2.1 or later (LGPLv2.1+) WITHOUT ANY WARRANTY.
	*/

	#include <crm_internal.h>
	#include <crm/cib/internal.h>
	#include <crm/common/output.h>
	#include <crm/common/results.h>
	#include <crm/pengine/pe_types.h>
	#include <pacemaker-internal.h>
	#include <pacemaker.h>

	#include <stdint.h>
	#include <sys/types.h>
	#include <sys/stat.h>
	#include <unistd.h>

	#include "libpacemaker_private.h"

	#define STATUS_PATH_MAX 512

	static pcmk__output_t *out = NULL;
	static cib_t *fake_cib = NULL;
	static GList *fake_resource_list = NULL;
	static GList *fake_op_fail_list = NULL;

	static void set_effective_date(pe_working_set_t *data_set, bool print_original,
	char *use_date);

	/*!
	* \internal
	* \brief Create an action name for use in a dot graph
	*
	* \param[in] action Action to create name for
	* \param[in] verbose If true, add action ID to name
	*
	* \return Newly allocated string with action name
	* \note It is the caller's responsibility to free the result.
	*/
	static char *
	create_action_name(pe_action_t *action, bool verbose)
	{
	char *action_name = NULL;
	const char *prefix = "";
	const char *action_host = NULL;
	const char *clone_name = NULL;
	const char *task = action->task;

	if (action->node != NULL) {
	action_host = action->node->details->uname;
	} else if (!pcmk_is_set(action->flags, pe_action_pseudo)) {
	action_host = "<none>";
	}

	if (pcmk__str_eq(action->task, RSC_CANCEL, pcmk__str_none)) {
	prefix = "Cancel ";
	task = action->cancel_task;
	}

	if (action->rsc != NULL) {
	clone_name = action->rsc->clone_name;
	}

	if (clone_name != NULL) {
	char *key = NULL;
	guint interval_ms = 0;

	if (pcmk__guint_from_hash(action->meta,
	XML_LRM_ATTR_INTERVAL_MS, 0,
	&interval_ms) != pcmk_rc_ok) {
	interval_ms = 0;
	}

	if (pcmk__strcase_any_of(action->task, RSC_NOTIFY, RSC_NOTIFIED,
	NULL)) {
	const char *n_type = g_hash_table_lookup(action->meta,
	"notify_key_type");
	const char *n_task = g_hash_table_lookup(action->meta,
	"notify_key_operation");

	CRM_ASSERT(n_type != NULL);
	CRM_ASSERT(n_task != NULL);
	key = pcmk__notify_key(clone_name, n_type, n_task);
	} else {
	key = pcmk__op_key(clone_name, task, interval_ms);
	}

	if (action_host != NULL) {
	action_name = crm_strdup_printf("%s%s %s",
	prefix, key, action_host);
	} else {
	action_name = crm_strdup_printf("%s%s", prefix, key);
	}
	free(key);

	} else if (pcmk__str_eq(action->task, CRM_OP_FENCE, pcmk__str_casei)) {
	const char *op = g_hash_table_lookup(action->meta, "stonith_action");

	action_name = crm_strdup_printf("%s%s '%s' %s",
	prefix, action->task, op, action_host);

	} else if (action->rsc && action_host) {
	action_name = crm_strdup_printf("%s%s %s",
	prefix, action->uuid, action_host);

	} else if (action_host) {
	action_name = crm_strdup_printf("%s%s %s",
	prefix, action->task, action_host);

	} else {
	action_name = crm_strdup_printf("%s", action->uuid);
	}

	if (verbose) {
	char *with_id = crm_strdup_printf("%s (%d)", action_name, action->id);

	free(action_name);
	action_name = with_id;
	}
	return action_name;
	}

	/*!
	* \internal
	* \brief Display the status of a cluster
	*
	* \param[in] data_set Cluster working set
	* \param[in] show_opts How to modify display (as pcmk_show_opt_e flags)
	* \param[in] section_opts Sections to display (as pcmk_section_e flags)
	* \param[in] title What to use as list title
	* \param[in] print_spacer Whether to display a spacer first
	*/
	static void
	print_cluster_status(pe_working_set_t *data_set, uint32_t show_opts,
	uint32_t section_opts, const char *title, bool print_spacer)
	{
	pcmk__output_t *out = data_set->priv;
	GList *all = NULL;
	crm_exit_t stonith_rc = 0;

	section_opts \|= pcmk_section_nodes \| pcmk_section_resources;
	show_opts \|= pcmk_show_inactive_rscs \| pcmk_show_failed_detail;

	all = g_list_prepend(all, (gpointer) "*");

	PCMK__OUTPUT_SPACER_IF(out, print_spacer);
	out->begin_list(out, NULL, NULL, "%s", title);
	out->message(out, "cluster-status", data_set, stonith_rc, NULL, FALSE,
	section_opts, show_opts, NULL, all, all);
	out->end_list(out);

	g_list_free(all);
	}

	/*!
	* \internal
	* \brief Display a summary of all actions scheduled in a transition
	*
	* \param[in] data_set Cluster working set (fully scheduled)
	* \param[in] print_spacer Whether to display a spacer first
	*/
	static void
	print_transition_summary(pe_working_set_t *data_set, bool print_spacer)
	{
	pcmk__output_t *out = data_set->priv;

	PCMK__OUTPUT_SPACER_IF(out, print_spacer);
	out->begin_list(out, NULL, NULL, "Transition Summary");
	pcmk__output_actions(data_set);
	out->end_list(out);
	}

	/*!
	* \internal
	* \brief Reset a cluster working set's input, output, date, and flags
	*
	* \param[in] data_set Cluster working set
	* \param[in] input What to set as cluster input
	* \param[in] out What to set as cluster output object
	* \param[in] use_date What to set as cluster's current timestamp
	* \param[in] flags Cluster flags to add (pe_flag_*)
	*/
	static void
	reset(pe_working_set_t data_set, xmlNodePtr input, pcmk__output_t out,
	char *use_date, unsigned int flags)
	{
	data_set->input = input;
	data_set->priv = out;
	set_effective_date(data_set, true, use_date);
	if (pcmk_is_set(flags, pcmk_sim_sanitized)) {
	pe__set_working_set_flags(data_set, pe_flag_sanitized);
	}
	if (pcmk_is_set(flags, pcmk_sim_show_scores)) {
	pe__set_working_set_flags(data_set, pe_flag_show_scores);
	}
	if (pcmk_is_set(flags, pcmk_sim_show_utilization)) {
	pe__set_working_set_flags(data_set, pe_flag_show_utilization);
	}
	}

	/*!
	* \brief Write out a file in dot(1) format describing the actions that will
	* be taken by the scheduler in response to an input CIB file.
	*
	* \param[in] data_set Working set for the cluster
	* \param[in] dot_file The filename to write
	* \param[in] all_actions Write all actions, even those that are optional or
	* are on unmanaged resources
	* \param[in] verbose Add extra information, such as action IDs, to the
	* output
	*
	* \return Standard Pacemaker return code
	*/
	static int
	write_sim_dotfile(pe_working_set_t data_set, const char dot_file,
	bool all_actions, bool verbose)
	{
	GList *gIter = NULL;
	FILE *dot_strm = fopen(dot_file, "w");

	if (dot_strm == NULL) {
	return errno;
	}

	fprintf(dot_strm, " digraph \"g\" {\n");
	for (gIter = data_set->actions; gIter != NULL; gIter = gIter->next) {
	pe_action_t action = (pe_action_t ) gIter->data;
	const char *style = "dashed";
	const char *font = "black";
	const char *color = "black";
	char *action_name = create_action_name(action, verbose);

	if (pcmk_is_set(action->flags, pe_action_pseudo)) {
	font = "orange";
	}

	if (pcmk_is_set(action->flags, pe_action_dumped)) {
	style = "bold";
	color = "green";

	} else if ((action->rsc != NULL)
	&& !pcmk_is_set(action->rsc->flags, pe_rsc_managed)) {
	color = "red";
	font = "purple";
	if (!all_actions) {
	goto do_not_write;
	}

	} else if (pcmk_is_set(action->flags, pe_action_optional)) {
	color = "blue";
	if (!all_actions) {
	goto do_not_write;
	}

	} else {
	color = "red";
	CRM_LOG_ASSERT(!pcmk_is_set(action->flags, pe_action_runnable));
	}

	pe__set_action_flags(action, pe_action_dumped);
	fprintf(dot_strm, "\"%s\" [ style=%s color=\"%s\" fontcolor=\"%s\"]\n",
	action_name, style, color, font);
	do_not_write:
	free(action_name);
	}

	for (gIter = data_set->actions; gIter != NULL; gIter = gIter->next) {
	pe_action_t action = (pe_action_t ) gIter->data;

	GList *gIter2 = NULL;

	for (gIter2 = action->actions_before; gIter2 != NULL; gIter2 = gIter2->next) {
	pe_action_wrapper_t before = (pe_action_wrapper_t ) gIter2->data;

	char *before_name = NULL;
	char *after_name = NULL;
	const char *style = "dashed";
	bool optional = true;

	if (before->state == pe_link_dumped) {
	optional = false;
	style = "bold";
	} else if (before->type == pe_order_none) {
	continue;
	} else if (pcmk_is_set(before->action->flags, pe_action_dumped)
	&& pcmk_is_set(action->flags, pe_action_dumped)
	&& before->type != pe_order_load) {
	optional = false;
	}

	if (all_actions \|\| !optional) {
	before_name = create_action_name(before->action, verbose);
	after_name = create_action_name(action, verbose);
	fprintf(dot_strm, "\"%s\" -> \"%s\" [ style = %s]\n",
	before_name, after_name, style);
	free(before_name);
	free(after_name);
	}
	}
	}

	fprintf(dot_strm, "}\n");
	fflush(dot_strm);
	fclose(dot_strm);
	return pcmk_rc_ok;
	}

	/*!
	* \brief Profile the configuration updates and scheduler actions in a single
	* CIB file, printing the profiling timings.
	*
	* \note \p data_set->priv must have been set to a valid \p pcmk__output_t
	* object before this function is called.
	*
	* \param[in] xml_file The CIB file to profile
	* \param[in] repeat Number of times to run
	* \param[in] data_set Working set for the cluster
	* \param[in] use_date The date to set the cluster's time to (may be NULL)
	*/
	static void
	profile_file(const char xml_file, long long repeat, pe_working_set_t data_set,
	char *use_date)
	{
	pcmk__output_t *out = data_set->priv;
	xmlNode *cib_object = NULL;
	clock_t start = 0;
	clock_t end;
	unsigned long long data_set_flags = pe_flag_no_compat;

	CRM_ASSERT(out != NULL);

	cib_object = filename2xml(xml_file);
	start = clock();

	if (pcmk_find_cib_element(cib_object, XML_CIB_TAG_STATUS) == NULL) {
	create_xml_node(cib_object, XML_CIB_TAG_STATUS);
	}

	if (cli_config_update(&cib_object, NULL, FALSE) == FALSE) {
	free_xml(cib_object);
	return;
	}

	if (validate_xml(cib_object, NULL, FALSE) != TRUE) {
	free_xml(cib_object);
	return;
	}

	if (pcmk_is_set(data_set->flags, pe_flag_show_scores)) {
	data_set_flags \|= pe_flag_show_scores;
	}
	if (pcmk_is_set(data_set->flags, pe_flag_show_utilization)) {
	data_set_flags \|= pe_flag_show_utilization;
	}

	for (int i = 0; i < repeat; ++i) {
	xmlNode *input = (repeat == 1)? cib_object : copy_xml(cib_object);

	data_set->input = input;
	set_effective_date(data_set, false, use_date);
	pcmk__schedule_actions(input, data_set_flags, data_set);
	pe_reset_working_set(data_set);
	}

	end = clock();
	out->message(out, "profile", xml_file, start, end);
	}

	void
	pcmk__profile_dir(const char dir, long long repeat, pe_working_set_t data_set, char *use_date)
	{
	pcmk__output_t *out = data_set->priv;
	struct dirent **namelist;

	int file_num = scandir(dir, &namelist, 0, alphasort);

	CRM_ASSERT(out != NULL);

	if (file_num > 0) {
	struct stat prop;
	char buffer[FILENAME_MAX];

	out->begin_list(out, NULL, NULL, "Timings");

	while (file_num--) {
	if ('.' == namelist[file_num]->d_name[0]) {
	free(namelist[file_num]);
	continue;

	} else if (!pcmk__ends_with_ext(namelist[file_num]->d_name,
	".xml")) {
	free(namelist[file_num]);
	continue;
	}
	snprintf(buffer, sizeof(buffer), "%s/%s", dir, namelist[file_num]->d_name);
	if (stat(buffer, &prop) == 0 && S_ISREG(prop.st_mode)) {
	profile_file(buffer, repeat, data_set, use_date);
	}
	free(namelist[file_num]);
	}
	free(namelist);

	out->end_list(out);
	}
	}

	/*!
	* \brief Set the date of the cluster, either to the value given by
	* \p use_date, or to the "execution-date" value in the CIB.
	*
	* \note \p data_set->priv must have been set to a valid \p pcmk__output_t
	* object before this function is called.
	*
	* \param[in,out] data_set Working set for the cluster
	* \param[in] print_original If \p true, the "execution-date" should
	* also be printed
	* \param[in] use_date The date to set the cluster's time to
	* (may be NULL)
	*/
	static void
	set_effective_date(pe_working_set_t *data_set, bool print_original,
	char *use_date)
	{
	pcmk__output_t *out = data_set->priv;
	time_t original_date = 0;

	CRM_ASSERT(out != NULL);

	crm_element_value_epoch(data_set->input, "execution-date", &original_date);

	if (use_date) {
	data_set->now = crm_time_new(use_date);
	out->info(out, "Setting effective cluster time: %s", use_date);
	crm_time_log(LOG_NOTICE, "Pretending 'now' is", data_set->now,
	crm_time_log_date \| crm_time_log_timeofday);

	} else if (original_date) {

	data_set->now = crm_time_new(NULL);
	crm_time_set_timet(data_set->now, &original_date);

	if (print_original) {
	char *when = crm_time_as_string(data_set->now,
	crm_time_log_date\|crm_time_log_timeofday);

	out->info(out, "Using the original execution date of: %s", when);
	free(when);
	}
	}
	}

	/*!
	* \internal
	* \brief Simulate successfully executing a pseudo-action in a graph
	*
	* \param[in] graph Graph to update with pseudo-action result
	* \param[in] action Pseudo-action to simulate executing
	*
	* \return TRUE
	*/
	static gboolean
	simulate_pseudo_action(crm_graph_t graph, crm_action_t action)
	{
	const char *node = crm_element_value(action->xml, XML_LRM_ATTR_TARGET);
	const char *task = crm_element_value(action->xml, XML_LRM_ATTR_TASK_KEY);

	crm__set_graph_action_flags(action, pcmk__graph_action_confirmed);
	out->message(out, "inject-pseudo-action", node, task);

	pcmk__update_graph(graph, action);
	return TRUE;
	}

	/*!
	* \internal
	* \brief Simulate executing a resource action in a graph
	*
	* \param[in] graph Graph to update with resource action result
	* \param[in] action Resource action to simulate executing
	*
	* \return TRUE if action is validly specified, otherwise FALSE
	*/
	static gboolean
	simulate_resource_action(crm_graph_t graph, crm_action_t action)
	{
	int rc;
	lrmd_event_data_t *op = NULL;
	int target_outcome = PCMK_OCF_OK;

	const char *rtype = NULL;
	const char *rclass = NULL;
	const char *resource = NULL;
	const char *rprovider = NULL;
	const char *resource_config_name = NULL;
	const char *operation = crm_element_value(action->xml, "operation");
	const char *target_rc_s = crm_meta_value(action->params,
	XML_ATTR_TE_TARGET_RC);

	xmlNode *cib_node = NULL;
	xmlNode *cib_resource = NULL;
	xmlNode *action_rsc = first_named_child(action->xml, XML_CIB_TAG_RESOURCE);

	char *node = crm_element_value_copy(action->xml, XML_LRM_ATTR_TARGET);
	char *uuid = NULL;
	const char *router_node = crm_element_value(action->xml,
	XML_LRM_ATTR_ROUTER_NODE);

	// Certain actions don't need to be displayed or history entries
	if (pcmk__str_eq(operation, CRM_OP_REPROBE, pcmk__str_none)) {
	crm_debug("No history injection for %s op on %s", operation, node);
	goto done; // Confirm action and update graph
	}

	if (action_rsc == NULL) { // Shouldn't be possible
	crm_log_xml_err(action->xml, "Bad");
	free(node);
	return FALSE;
	}

	/* A resource might be known by different names in the configuration and in
	* the action (for example, a clone instance). Grab the configuration name
	* (which is preferred when writing history), and if necessary, the instance
	* name.
	*/
	resource_config_name = crm_element_value(action_rsc, XML_ATTR_ID);
	if (resource_config_name == NULL) { // Shouldn't be possible
	crm_log_xml_err(action->xml, "No ID");
	free(node);
	return FALSE;
	}
	resource = resource_config_name;
	if (pe_find_resource(fake_resource_list, resource) == NULL) {
	const char *longname = crm_element_value(action_rsc, XML_ATTR_ID_LONG);

	if ((longname != NULL)
	&& (pe_find_resource(fake_resource_list, longname) != NULL)) {
	resource = longname;
	}
	}

	// Certain actions need to be displayed but don't need history entries
	if (pcmk__strcase_any_of(operation, "delete", RSC_METADATA, NULL)) {
	out->message(out, "inject-rsc-action", resource, operation, node,
	(guint) 0);
	goto done; // Confirm action and update graph
	}

	rclass = crm_element_value(action_rsc, XML_AGENT_ATTR_CLASS);
	rtype = crm_element_value(action_rsc, XML_ATTR_TYPE);
	rprovider = crm_element_value(action_rsc, XML_AGENT_ATTR_PROVIDER);

	pcmk__scan_min_int(target_rc_s, &target_outcome, 0);

	CRM_ASSERT(fake_cib->cmds->query(fake_cib, NULL, NULL,
	cib_sync_call\|cib_scope_local) == pcmk_ok);

	// Ensure the action node is in the CIB
	uuid = crm_element_value_copy(action->xml, XML_LRM_ATTR_TARGET_UUID);
	cib_node = pcmk__inject_node(fake_cib, node,
	((router_node == NULL)? uuid: node));
	free(uuid);
	CRM_ASSERT(cib_node != NULL);

	// Add a history entry for the action
	cib_resource = pcmk__inject_resource_history(out, cib_node, resource,
	resource_config_name,
	rclass, rtype, rprovider);
	if (cib_resource == NULL) {
	crm_err("Could not simulate action %d history for resource %s",
	action->id, resource);
	free(node);
	free_xml(cib_node);
	return FALSE;
	}

	// Simulate and display an executor event for the action result
	op = pcmk__event_from_graph_action(cib_resource, action, PCMK_EXEC_DONE,
	target_outcome, "User-injected result");
	out->message(out, "inject-rsc-action", resource, op->op_type, node,
	op->interval_ms);

	// Check whether action is in a list of desired simulated failures
	for (GList *iter = fake_op_fail_list; iter != NULL; iter = iter->next) {
	char spec = (char ) iter->data;
	char *key = NULL;
	const char *match_name = NULL;

	// Allow user to specify anonymous clone with or without instance number
	key = crm_strdup_printf(PCMK__OP_FMT "@%s=", resource, op->op_type,
	op->interval_ms, node);
	if (strncasecmp(key, spec, strlen(key)) == 0) {
	match_name = resource;
	}
	free(key);

	// If not found, try the resource's name in the configuration
	if ((match_name == NULL)
	&& (strcmp(resource, resource_config_name) != 0)) {

	key = crm_strdup_printf(PCMK__OP_FMT "@%s=", resource_config_name,
	op->op_type, op->interval_ms, node);
	if (strncasecmp(key, spec, strlen(key)) == 0) {
	match_name = resource_config_name;
	}
	free(key);
	}

	if (match_name == NULL) {
	continue; // This failed action entry doesn't match
	}

	// ${match_name}_${task}_${interval_in_ms}@${node}=${rc}
	rc = sscanf(spec, "%[^=]=%d", (int ) &op->rc);
	if (rc != 1) {
	out->err(out, "Invalid failed operation '%s' "
	"(result code must be integer)", spec);
	continue; // Keep checking other list entries
	}

	out->info(out, "Pretending action %d failed with rc=%d",
	action->id, op->rc);
	crm__set_graph_action_flags(action, pcmk__graph_action_failed);
	graph->abort_priority = INFINITY;
	pcmk__inject_failcount(out, cib_node, match_name, op->op_type,
	op->interval_ms, op->rc);
	break;
	}

	pcmk__inject_action_result(cib_resource, op, target_outcome);
	lrmd_free_event(op);
	rc = fake_cib->cmds->modify(fake_cib, XML_CIB_TAG_STATUS, cib_node,
	cib_sync_call\|cib_scope_local);
	CRM_ASSERT(rc == pcmk_ok);

	done:
	free(node);
	free_xml(cib_node);
	crm__set_graph_action_flags(action, pcmk__graph_action_confirmed);
	pcmk__update_graph(graph, action);
	return TRUE;
	}

	/*!
	* \internal
	* \brief Simulate successfully executing a cluster action
	*
	* \param[in] graph Graph to update with action result
	* \param[in] action Cluster action to simulate
	*
	* \return TRUE
	*/
	static gboolean
	simulate_cluster_action(crm_graph_t graph, crm_action_t action)
	{
	const char *node = crm_element_value(action->xml, XML_LRM_ATTR_TARGET);
	const char *task = crm_element_value(action->xml, XML_LRM_ATTR_TASK);
	xmlNode *rsc = first_named_child(action->xml, XML_CIB_TAG_RESOURCE);

	crm__set_graph_action_flags(action, pcmk__graph_action_confirmed);
	out->message(out, "inject-cluster-action", node, task, rsc);
	pcmk__update_graph(graph, action);
	return TRUE;
	}

	/*!
	* \internal
	* \brief Simulate successfully executing a fencing action
	*
	* \param[in] graph Graph to update with action result
	* \param[in] action Fencing action to simulate
	*
	* \return TRUE
	*/
	static gboolean
	simulate_fencing_action(crm_graph_t graph, crm_action_t action)
	{
	const char *op = crm_meta_value(action->params, "stonith_action");
	char *target = crm_element_value_copy(action->xml, XML_LRM_ATTR_TARGET);

	out->message(out, "inject-fencing-action", target, op);

	if (!pcmk__str_eq(op, "on", pcmk__str_casei)) {
	int rc = pcmk_ok;
	char xpath[STATUS_PATH_MAX];

	// Set node state to offline
	xmlNode *cib_node = pcmk__inject_node_state_change(fake_cib, target,
	false);

	CRM_ASSERT(cib_node != NULL);
	crm_xml_add(cib_node, XML_ATTR_ORIGIN, __func__);
	rc = fake_cib->cmds->replace(fake_cib, XML_CIB_TAG_STATUS, cib_node,
	cib_sync_call\|cib_scope_local);
	CRM_ASSERT(rc == pcmk_ok);

	// Simulate controller clearing node's resource history and attributes
	snprintf(xpath, STATUS_PATH_MAX, "//node_state[@uname='%s']/%s",
	target, XML_CIB_TAG_LRM);
	fake_cib->cmds->remove(fake_cib, xpath, NULL,
	cib_xpath\|cib_sync_call\|cib_scope_local);

	snprintf(xpath, STATUS_PATH_MAX, "//node_state[@uname='%s']/%s",
	target, XML_TAG_TRANSIENT_NODEATTRS);
	fake_cib->cmds->remove(fake_cib, xpath, NULL,
	cib_xpath\|cib_sync_call\|cib_scope_local);

	free_xml(cib_node);
	}

	crm__set_graph_action_flags(action, pcmk__graph_action_confirmed);
	pcmk__update_graph(graph, action);
	free(target);
	return TRUE;
	}

	enum transition_status
	pcmk__simulate_transition(pe_working_set_t data_set, cib_t cib,
	GList *op_fail_list)
	{
	crm_graph_t *transition = NULL;
	enum transition_status graph_rc;

	crm_graph_functions_t simulation_fns = {
	simulate_pseudo_action,
	simulate_resource_action,
	simulate_cluster_action,
	simulate_fencing_action,
	};

	out = data_set->priv;

	fake_cib = cib;
	fake_op_fail_list = op_fail_list;

	if (!out->is_quiet(out)) {
	out->begin_list(out, NULL, NULL, "Executing Cluster Transition");
	}

	pcmk__set_graph_functions(&simulation_fns);
	transition = pcmk__unpack_graph(data_set->graph, crm_system_name);
	pcmk__log_graph(LOG_DEBUG, transition);

	fake_resource_list = data_set->resources;
	do {
	graph_rc = pcmk__execute_graph(transition);
	} while (graph_rc == transition_active);
	fake_resource_list = NULL;

	if (graph_rc != transition_complete) {
	out->err(out, "Transition failed: %s",
	pcmk__graph_status2text(graph_rc));
	pcmk__log_graph(LOG_ERR, transition);
	out->err(out, "An invalid transition was produced");
	}
	pcmk__free_graph(transition);

	if (!out->is_quiet(out)) {
	// If not quiet, we'll need the resulting CIB for later display
	xmlNode *cib_object = NULL;
	int rc = fake_cib->cmds->query(fake_cib, NULL, &cib_object,
	cib_sync_call\|cib_scope_local);

	CRM_ASSERT(rc == pcmk_ok);
	pe_reset_working_set(data_set);
	data_set->input = cib_object;
	out->end_list(out);
	}
	return graph_rc;
	}

	int
	pcmk__simulate(pe_working_set_t data_set, pcmk__output_t out,
	pcmk_injections_t *injections, unsigned int flags,
	uint32_t section_opts, char use_date, char input_file,
	char graph_file, char dot_file)
	{
	int printed = pcmk_rc_no_output;
	int rc = pcmk_rc_ok;
	xmlNodePtr input = NULL;
	cib_t *cib = NULL;

	rc = cib__signon_query(&cib, &input);
	if (rc != pcmk_rc_ok) {
	goto simulate_done;
	}

	reset(data_set, input, out, use_date, flags);
	cluster_status(data_set);

	if (!out->is_quiet(out)) {
	if (pcmk_is_set(data_set->flags, pe_flag_maintenance_mode)) {
	printed = out->message(out, "maint-mode", data_set->flags);
	}

	if (data_set->disabled_resources \|\| data_set->blocked_resources) {
	PCMK__OUTPUT_SPACER_IF(out, printed == pcmk_rc_ok);
	printed = out->info(out,
	"%d of %d resource instances DISABLED and "
	"%d BLOCKED from further action due to failure",
	data_set->disabled_resources,
	data_set->ninstances,
	data_set->blocked_resources);
	}

	/* Most formatted output headers use caps for each word, but this one
	* only has the first word capitalized for compatibility with pcs.
	*/
	print_cluster_status(data_set,
	pcmk_is_set(flags, pcmk_sim_show_pending)? pcmk_show_pending : 0,
	section_opts, "Current cluster status",
	(printed == pcmk_rc_ok));
	printed = pcmk_rc_ok;
	}

	// If the user requested any injections, handle them
	if ((injections->node_down != NULL)
	\|\| (injections->node_fail != NULL)
	\|\| (injections->node_up != NULL)
	\|\| (injections->op_inject != NULL)
	\|\| (injections->ticket_activate != NULL)
	\|\| (injections->ticket_grant != NULL)
	\|\| (injections->ticket_revoke != NULL)
	\|\| (injections->ticket_standby != NULL)
	\|\| (injections->watchdog != NULL)) {

	PCMK__OUTPUT_SPACER_IF(out, printed == pcmk_rc_ok);
	pcmk__inject_scheduler_input(data_set, cib, injections);
	printed = pcmk_rc_ok;

	rc = cib->cmds->query(cib, NULL, &input, cib_sync_call);
	if (rc != pcmk_rc_ok) {
	rc = pcmk_legacy2rc(rc);
	goto simulate_done;
	}

	cleanup_calculations(data_set);
	reset(data_set, input, out, use_date, flags);
	cluster_status(data_set);
	}

	if (input_file != NULL) {
	rc = write_xml_file(input, input_file, FALSE);
	if (rc < 0) {
	rc = pcmk_legacy2rc(rc);
	goto simulate_done;
	}
	}

	if (pcmk_any_flags_set(flags, pcmk_sim_process \| pcmk_sim_simulate)) {
	pcmk__output_t *logger_out = NULL;
	unsigned long long data_set_flags = pe_flag_no_compat;

	if (pcmk_is_set(data_set->flags, pe_flag_show_scores)) {
	data_set_flags \|= pe_flag_show_scores;
	}
	if (pcmk_is_set(data_set->flags, pe_flag_show_utilization)) {
	data_set_flags \|= pe_flag_show_utilization;
	}

	if (pcmk_all_flags_set(data_set->flags,
	pe_flag_show_scores\|pe_flag_show_utilization)) {
	PCMK__OUTPUT_SPACER_IF(out, printed == pcmk_rc_ok);
	out->begin_list(out, NULL, NULL,
	"Allocation Scores and Utilization Information");
	printed = pcmk_rc_ok;

	} else if (pcmk_is_set(data_set->flags, pe_flag_show_scores)) {
	PCMK__OUTPUT_SPACER_IF(out, printed == pcmk_rc_ok);
	out->begin_list(out, NULL, NULL, "Allocation Scores");
	printed = pcmk_rc_ok;

	} else if (pcmk_is_set(data_set->flags, pe_flag_show_utilization)) {
	PCMK__OUTPUT_SPACER_IF(out, printed == pcmk_rc_ok);
	out->begin_list(out, NULL, NULL, "Utilization Information");
	printed = pcmk_rc_ok;

	} else {
	logger_out = pcmk__new_logger();
	if (logger_out == NULL) {
	rc = pcmk_rc_error;
	goto simulate_done;
	}
	+ pe__register_messages(logger_out);
	+ pcmk__register_lib_messages(logger_out);
	data_set->priv = logger_out;
	}

	pcmk__schedule_actions(input, data_set_flags, data_set);

	if (logger_out == NULL) {
	out->end_list(out);
	} else {
	logger_out->finish(logger_out, CRM_EX_OK, true, NULL);
	pcmk__output_free(logger_out);
	data_set->priv = out;
	}

	input = NULL; /* Don't try and free it twice */

	if (graph_file != NULL) {
	rc = write_xml_file(data_set->graph, graph_file, FALSE);
	if (rc < 0) {
	rc = pcmk_rc_graph_error;
	goto simulate_done;
	}
	}

	if (dot_file != NULL) {
	rc = write_sim_dotfile(data_set, dot_file,
	pcmk_is_set(flags, pcmk_sim_all_actions),
	pcmk_is_set(flags, pcmk_sim_verbose));
	if (rc != pcmk_rc_ok) {
	rc = pcmk_rc_dot_error;
	goto simulate_done;
	}
	}

	if (!out->is_quiet(out)) {
	print_transition_summary(data_set, printed == pcmk_rc_ok);
	}
	}

	rc = pcmk_rc_ok;

	if (!pcmk_is_set(flags, pcmk_sim_simulate)) {
	goto simulate_done;
	}

	PCMK__OUTPUT_SPACER_IF(out, printed == pcmk_rc_ok);
	if (pcmk__simulate_transition(data_set, cib,
	injections->op_fail) != transition_complete) {
	rc = pcmk_rc_invalid_transition;
	}

	if (out->is_quiet(out)) {
	goto simulate_done;
	}

	set_effective_date(data_set, true, use_date);

	if (pcmk_is_set(flags, pcmk_sim_show_scores)) {
	pe__set_working_set_flags(data_set, pe_flag_show_scores);
	}
	if (pcmk_is_set(flags, pcmk_sim_show_utilization)) {
	pe__set_working_set_flags(data_set, pe_flag_show_utilization);
	}

	cluster_status(data_set);
	print_cluster_status(data_set, 0, section_opts, "Revised Cluster Status",
	true);

	simulate_done:
	cib__clean_up_connection(&cib);
	return rc;
	}

	int
	pcmk_simulate(xmlNodePtr xml, pe_working_set_t data_set,
	pcmk_injections_t *injections, unsigned int flags,
	unsigned int section_opts, char use_date, char input_file,
	char graph_file, char dot_file)
	{
	pcmk__output_t *out = NULL;
	int rc = pcmk_rc_ok;

	- rc = pcmk__out_prologue(&out, xml);
	+ rc = pcmk__xml_output_new(&out, xml);
	if (rc != pcmk_rc_ok) {
	return rc;
	}

	pe__register_messages(out);
	pcmk__register_lib_messages(out);

	rc = pcmk__simulate(data_set, out, injections, flags, section_opts,
	use_date, input_file, graph_file, dot_file);
	- pcmk__out_epilogue(out, xml, rc);
	+ pcmk__xml_output_finish(out, xml);
	return rc;
	}
	diff --git a/lib/pacemaker/pcmk_status.c b/lib/pacemaker/pcmk_status.c
	index 12136eaf67..857797b064 100644
	--- a/lib/pacemaker/pcmk_status.c
	+++ b/lib/pacemaker/pcmk_status.c
	@@ -1,369 +1,369 @@
	/*
	* Copyright 2004-2022 the Pacemaker project contributors
	*
	* The version control history for this file may have further details.
	*
	* This source code is licensed under the GNU General Public License version 2
	* or later (GPLv2+) WITHOUT ANY WARRANTY.
	*/

	#include <crm_internal.h>

	#include <stdbool.h>
	#include <stddef.h>
	#include <stdint.h>

	#include <crm/cib/internal.h>
	#include <crm/common/output.h>
	#include <crm/common/results.h>
	#include <crm/fencing/internal.h>
	#include <crm/stonith-ng.h>
	#include <pacemaker.h>
	#include <pacemaker-internal.h>

	static int
	cib_connect(pcmk__output_t out, cib_t cib, xmlNode **current_cib)
	{
	int rc = pcmk_rc_ok;

	CRM_CHECK(cib != NULL, return EINVAL);

	if (cib->state == cib_connected_query \|\|
	cib->state == cib_connected_command) {
	return rc;
	}

	crm_trace("Connecting to the CIB");

	rc = cib->cmds->signon(cib, crm_system_name, cib_query);
	rc = pcmk_legacy2rc(rc);

	if (rc != pcmk_rc_ok) {
	out->err(out, "Could not connect to the CIB: %s",
	pcmk_rc_str(rc));
	return rc;
	}

	rc = cib->cmds->query(cib, NULL, current_cib,
	cib_scope_local \| cib_sync_call);
	rc = pcmk_legacy2rc(rc);

	return rc;
	}

	static stonith_t *
	fencing_connect(void)
	{
	stonith_t *st = stonith_api_new();
	int rc = pcmk_rc_ok;

	if (st == NULL) {
	return NULL;
	}

	rc = st->cmds->connect(st, crm_system_name, NULL);
	if (rc == pcmk_rc_ok) {
	return st;
	} else {
	stonith_api_delete(st);
	return NULL;
	}
	}

	static void
	pacemakerd_event_cb(pcmk_ipc_api_t *pacemakerd_api,
	enum pcmk_ipc_event event_type, crm_exit_t status,
	void event_data, void user_data)
	{
	pcmk_pacemakerd_api_reply_t *reply = event_data;
	enum pcmk_pacemakerd_state *state =
	(enum pcmk_pacemakerd_state *) user_data;

	/* we are just interested in the latest reply */
	*state = pcmk_pacemakerd_state_invalid;

	if (event_type != pcmk_ipc_event_reply \|\| status != CRM_EX_OK) {
	return;
	}

	if (reply->reply_type == pcmk_pacemakerd_reply_ping &&
	reply->data.ping.last_good != (time_t) 0 &&
	reply->data.ping.status == pcmk_rc_ok) {
	*state = reply->data.ping.state;
	}
	}

	static int
	pacemakerd_status(pcmk__output_t *out)
	{
	int rc = pcmk_rc_ok;
	pcmk_ipc_api_t *pacemakerd_api = NULL;
	enum pcmk_pacemakerd_state state = pcmk_pacemakerd_state_invalid;

	rc = pcmk_new_ipc_api(&pacemakerd_api, pcmk_ipc_pacemakerd);
	if (pacemakerd_api == NULL) {
	out->err(out, "Could not connect to pacemakerd: %s",
	pcmk_rc_str(rc));
	return rc;
	}

	pcmk_register_ipc_callback(pacemakerd_api, pacemakerd_event_cb, (void *) &state);

	rc = pcmk_connect_ipc(pacemakerd_api, pcmk_ipc_dispatch_sync);
	if (rc == EREMOTEIO) {
	return pcmk_rc_ok;
	} else if (rc != pcmk_rc_ok) {
	out->err(out, "Could not connect to pacemakerd: %s",
	pcmk_rc_str(rc));
	pcmk_free_ipc_api(pacemakerd_api);
	return rc;
	}

	rc = pcmk_pacemakerd_api_ping(pacemakerd_api, crm_system_name);

	if (rc != pcmk_rc_ok) {
	/* Got some error from pcmk_pacemakerd_api_ping, so return it. */
	} else if (state == pcmk_pacemakerd_state_running) {
	rc = pcmk_rc_ok;
	} else if (state == pcmk_pacemakerd_state_shutting_down) {
	rc = ENOTCONN;
	} else {
	rc = EAGAIN;
	}

	pcmk_free_ipc_api(pacemakerd_api);
	return rc;
	}

	int
	pcmk__output_cluster_status(pcmk__output_t out, stonith_t st, cib_t *cib,
	xmlNode *current_cib, enum pcmk__fence_history fence_history,
	uint32_t show, uint32_t show_opts, char *only_node,
	char only_rsc, char neg_location_prefix, bool simple_output)
	{
	xmlNode *cib_copy = copy_xml(current_cib);
	stonith_history_t *stonith_history = NULL;
	int history_rc = 0;
	pe_working_set_t *data_set = NULL;
	GList *unames = NULL;
	GList *resources = NULL;

	int rc = pcmk_rc_ok;

	if (cli_config_update(&cib_copy, NULL, FALSE) == FALSE) {
	cib__clean_up_connection(&cib);
	rc = pcmk_rc_schema_validation;
	out->err(out, "Upgrade failed: %s", pcmk_rc_str(rc));
	return rc;
	}

	/* get the stonith-history if there is evidence we need it */
	if (fence_history != pcmk__fence_history_none) {
	history_rc = pcmk__get_fencing_history(st, &stonith_history, fence_history);
	}

	data_set = pe_new_working_set();
	CRM_ASSERT(data_set != NULL);
	pe__set_working_set_flags(data_set, pe_flag_no_compat);

	data_set->input = cib_copy;
	data_set->priv = out;
	cluster_status(data_set);

	/* Unpack constraints if any section will need them
	* (tickets may be referenced in constraints but not granted yet,
	* and bans need negative location constraints) */
	if (pcmk_is_set(show, pcmk_section_bans) \|\| pcmk_is_set(show, pcmk_section_tickets)) {
	pcmk__unpack_constraints(data_set);
	}

	unames = pe__build_node_name_list(data_set, only_node);
	resources = pe__build_rsc_list(data_set, only_rsc);

	/* Always print DC if NULL. */
	if (data_set->dc_node == NULL) {
	show \|= pcmk_section_dc;
	}

	if (simple_output) {
	rc = pcmk__output_simple_status(out, data_set);
	} else {
	out->message(out, "cluster-status", data_set, pcmk_rc2exitc(history_rc),
	stonith_history, fence_history, show, show_opts,
	neg_location_prefix, unames, resources);
	}

	g_list_free_full(unames, free);
	g_list_free_full(resources, free);

	stonith_history_free(stonith_history);
	stonith_history = NULL;
	pe_reset_working_set(data_set);
	return rc;
	}

	int
	pcmk_status(xmlNodePtr *xml)
	{
	cib_t *cib = NULL;
	pcmk__output_t *out = NULL;
	int rc = pcmk_rc_ok;

	uint32_t show_opts = pcmk_show_pending \| pcmk_show_inactive_rscs \| pcmk_show_timing;

	cib = cib_new();

	if (cib == NULL) {
	return pcmk_rc_cib_corrupt;
	}

	- rc = pcmk__out_prologue(&out, xml);
	+ rc = pcmk__xml_output_new(&out, xml);
	if (rc != pcmk_rc_ok) {
	cib_delete(cib);
	return rc;
	}

	pcmk__register_lib_messages(out);
	pe__register_messages(out);
	stonith__register_messages(out);

	rc = pcmk__status(out, cib, pcmk__fence_history_full, pcmk_section_all,
	show_opts, NULL, NULL, NULL, false);
	- pcmk__out_epilogue(out, xml, rc);
	+ pcmk__xml_output_finish(out, xml);

	cib_delete(cib);
	return rc;
	}

	int
	pcmk__status(pcmk__output_t out, cib_t cib, enum pcmk__fence_history fence_history,
	uint32_t show, uint32_t show_opts, char only_node, char only_rsc,
	char *neg_location_prefix, bool simple_output)
	{
	xmlNode *current_cib = NULL;
	int rc = pcmk_rc_ok;
	stonith_t *st = NULL;

	if (cib == NULL) {
	return ENOTCONN;
	}

	if (cib->variant == cib_native) {
	if (cib->state == cib_connected_query \|\| cib->state == cib_connected_command) {
	rc = pcmk_rc_ok;
	} else {
	rc = pacemakerd_status(out);
	}
	}

	if (rc != pcmk_rc_ok) {
	return rc;
	}

	if (fence_history != pcmk__fence_history_none && cib->variant == cib_native) {
	st = fencing_connect();

	if (st == NULL) {
	return ENOTCONN;
	}
	}

	rc = cib_connect(out, cib, &current_cib);
	if (rc != pcmk_rc_ok) {
	goto done;
	}

	rc = pcmk__output_cluster_status(out, st, cib, current_cib, fence_history, show, show_opts,
	only_node, only_rsc, neg_location_prefix, simple_output);

	done:
	if (st != NULL) {
	if (st->state != stonith_disconnected) {
	st->cmds->remove_notification(st, NULL);
	st->cmds->disconnect(st);
	}

	stonith_api_delete(st);
	}

	return rc;
	}

	/* This is an internal-only function that is planned to be deprecated and removed.
	* It should only ever be called from crm_mon.
	*/
	int
	pcmk__output_simple_status(pcmk__output_t out, pe_working_set_t data_set)
	{
	int nodes_online = 0;
	int nodes_standby = 0;
	int nodes_maintenance = 0;
	char *offline_nodes = NULL;
	size_t offline_nodes_len = 0;
	bool no_dc = false;
	bool offline = false;
	bool has_warnings = false;

	if (data_set->dc_node == NULL) {
	has_warnings = true;
	no_dc = true;
	}

	for (GList *iter = data_set->nodes; iter != NULL; iter = iter->next) {
	pe_node_t node = (pe_node_t ) iter->data;

	if (node->details->standby && node->details->online) {
	nodes_standby++;
	} else if (node->details->maintenance && node->details->online) {
	nodes_maintenance++;
	} else if (node->details->online) {
	nodes_online++;
	} else {
	char *s = crm_strdup_printf("offline node: %s", node->details->uname);
	/* coverity[leaked_storage] False positive */
	pcmk__add_word(&offline_nodes, &offline_nodes_len, s);
	free(s);
	has_warnings = true;
	offline = true;
	}
	}

	if (has_warnings) {
	out->info(out, "CLUSTER WARN: %s%s%s",
	no_dc ? "No DC" : "",
	no_dc && offline ? ", " : "",
	(offline? offline_nodes : ""));
	free(offline_nodes);
	} else {
	char *nodes_standby_s = NULL;
	char *nodes_maint_s = NULL;

	if (nodes_standby > 0) {
	nodes_standby_s = crm_strdup_printf(", %d standby node%s", nodes_standby,
	pcmk__plural_s(nodes_standby));
	}

	if (nodes_maintenance > 0) {
	nodes_maint_s = crm_strdup_printf(", %d maintenance node%s",
	nodes_maintenance,
	pcmk__plural_s(nodes_maintenance));
	}

	out->info(out, "CLUSTER OK: %d node%s online%s%s, "
	"%d resource instance%s configured",
	nodes_online, pcmk__plural_s(nodes_online),
	nodes_standby_s != NULL ? nodes_standby_s : "",
	nodes_maint_s != NULL ? nodes_maint_s : "",
	data_set->ninstances, pcmk__plural_s(data_set->ninstances));

	free(nodes_standby_s);
	free(nodes_maint_s);
	}

	if (has_warnings) {
	return pcmk_rc_error;
	} else {
	return pcmk_rc_ok;
	}
	/* coverity[leaked_storage] False positive */
	}
	diff --git a/lib/pengine/complex.c b/lib/pengine/complex.c
	index fc9028e81e..0f1a28da40 100644
	--- a/lib/pengine/complex.c
	+++ b/lib/pengine/complex.c
	@@ -1,1134 +1,1141 @@
	/*
	* Copyright 2004-2022 the Pacemaker project contributors
	*
	* The version control history for this file may have further details.
	*
	* This source code is licensed under the GNU Lesser General Public License
	* version 2.1 or later (LGPLv2.1+) WITHOUT ANY WARRANTY.
	*/

	#include <crm_internal.h>

	#include <crm/pengine/rules.h>
	#include <crm/pengine/internal.h>
	#include <crm/msg_xml.h>
	#include <crm/common/xml_internal.h>

	void populate_hash(xmlNode * nvpair_list, GHashTable * hash, const char **attrs, int attrs_length);

	resource_object_functions_t resource_class_functions[] = {
	{
	native_unpack,
	native_find_rsc,
	native_parameter,
	native_print,
	native_active,
	native_resource_state,
	native_location,
	native_free,
	pe__count_common,
	pe__native_is_filtered,
	},
	{
	group_unpack,
	native_find_rsc,
	native_parameter,
	group_print,
	group_active,
	group_resource_state,
	native_location,
	group_free,
	pe__count_common,
	pe__group_is_filtered,
	},
	{
	clone_unpack,
	native_find_rsc,
	native_parameter,
	clone_print,
	clone_active,
	clone_resource_state,
	native_location,
	clone_free,
	pe__count_common,
	pe__clone_is_filtered,
	},
	{
	pe__unpack_bundle,
	native_find_rsc,
	native_parameter,
	pe__print_bundle,
	pe__bundle_active,
	pe__bundle_resource_state,
	native_location,
	pe__free_bundle,
	pe__count_bundle,
	pe__bundle_is_filtered,
	}
	};

	static enum pe_obj_types
	get_resource_type(const char *name)
	{
	if (pcmk__str_eq(name, XML_CIB_TAG_RESOURCE, pcmk__str_casei)) {
	return pe_native;

	} else if (pcmk__str_eq(name, XML_CIB_TAG_GROUP, pcmk__str_casei)) {
	return pe_group;

	} else if (pcmk__str_eq(name, XML_CIB_TAG_INCARNATION, pcmk__str_casei)) {
	return pe_clone;

	} else if (pcmk__str_eq(name, PCMK_XE_PROMOTABLE_LEGACY, pcmk__str_casei)) {
	// @COMPAT deprecated since 2.0.0
	return pe_clone;

	} else if (pcmk__str_eq(name, XML_CIB_TAG_CONTAINER, pcmk__str_casei)) {
	return pe_container;
	}

	return pe_unknown;
	}

	static void
	dup_attr(gpointer key, gpointer value, gpointer user_data)
	{
	add_hash_param(user_data, key, value);
	}

	static void
	expand_parents_fixed_nvpairs(pe_resource_t * rsc, pe_rule_eval_data_t * rule_data, GHashTable * meta_hash, pe_working_set_t * data_set)
	{
	GHashTable *parent_orig_meta = pcmk__strkey_table(free, free);
	pe_resource_t *p = rsc->parent;

	if (p == NULL) {
	return ;
	}

	/* Search all parent resources, get the fixed value of "meta_attributes" set only in the original xml, and stack it in the hash table. */
	/* The fixed value of the lower parent resource takes precedence and is not overwritten. */
	while(p != NULL) {
	/* A hash table for comparison is generated, including the id-ref. */
	pe__unpack_dataset_nvpairs(p->xml, XML_TAG_META_SETS,
	rule_data, parent_orig_meta, NULL, FALSE, data_set);
	p = p->parent;
	}

	/* If there is a fixed value of "meta_attributes" of the parent resource, it will be processed. */
	if (parent_orig_meta != NULL) {
	GHashTableIter iter;
	char *key = NULL;
	char *value = NULL;

	g_hash_table_iter_init(&iter, parent_orig_meta);
	while (g_hash_table_iter_next(&iter, (gpointer ) &key, (gpointer ) &value)) {
	/* Parameters set in the original xml of the parent resource will also try to overwrite the child resource. */
	/* Attributes that already exist in the child lease are not updated. */
	dup_attr(key, value, meta_hash);
	}
	}

	if (parent_orig_meta != NULL) {
	g_hash_table_destroy(parent_orig_meta);
	}

	return ;

	}
	void
	get_meta_attributes(GHashTable * meta_hash, pe_resource_t * rsc,
	pe_node_t * node, pe_working_set_t * data_set)
	{
	pe_rsc_eval_data_t rsc_rule_data = {
	.standard = crm_element_value(rsc->xml, XML_AGENT_ATTR_CLASS),
	.provider = crm_element_value(rsc->xml, XML_AGENT_ATTR_PROVIDER),
	.agent = crm_element_value(rsc->xml, XML_EXPR_ATTR_TYPE)
	};

	pe_rule_eval_data_t rule_data = {
	.node_hash = NULL,
	.role = RSC_ROLE_UNKNOWN,
	.now = data_set->now,
	.match_data = NULL,
	.rsc_data = &rsc_rule_data,
	.op_data = NULL
	};

	if (node) {
	rule_data.node_hash = node->details->attrs;
	}

	for (xmlAttrPtr a = pcmk__xe_first_attr(rsc->xml); a != NULL; a = a->next) {
	const char prop_name = (const char ) a->name;
	const char *prop_value = crm_element_value(rsc->xml, prop_name);

	add_hash_param(meta_hash, prop_name, prop_value);
	}

	pe__unpack_dataset_nvpairs(rsc->xml, XML_TAG_META_SETS, &rule_data,
	meta_hash, NULL, FALSE, data_set);

	/* Set the "meta_attributes" explicitly set in the parent resource to the hash table of the child resource. */
	/* If it is already explicitly set as a child, it will not be overwritten. */
	if (rsc->parent != NULL) {
	expand_parents_fixed_nvpairs(rsc, &rule_data, meta_hash, data_set);
	}

	/* check the defaults */
	pe__unpack_dataset_nvpairs(data_set->rsc_defaults, XML_TAG_META_SETS,
	&rule_data, meta_hash, NULL, FALSE, data_set);

	/* If there is "meta_attributes" that the parent resource has not explicitly set, set a value that is not set from rsc_default either. */
	/* The values already set up to this point will not be overwritten. */
	if (rsc->parent) {
	g_hash_table_foreach(rsc->parent->meta, dup_attr, meta_hash);
	}
	}

	void
	get_rsc_attributes(GHashTable * meta_hash, pe_resource_t * rsc,
	pe_node_t * node, pe_working_set_t * data_set)
	{
	pe_rule_eval_data_t rule_data = {
	.node_hash = NULL,
	.role = RSC_ROLE_UNKNOWN,
	.now = data_set->now,
	.match_data = NULL,
	.rsc_data = NULL,
	.op_data = NULL
	};

	if (node) {
	rule_data.node_hash = node->details->attrs;
	}

	pe__unpack_dataset_nvpairs(rsc->xml, XML_TAG_ATTR_SETS, &rule_data,
	meta_hash, NULL, FALSE, data_set);

	/* set anything else based on the parent */
	if (rsc->parent != NULL) {
	get_rsc_attributes(meta_hash, rsc->parent, node, data_set);

	} else {
	/* and finally check the defaults */
	pe__unpack_dataset_nvpairs(data_set->rsc_defaults, XML_TAG_ATTR_SETS,
	&rule_data, meta_hash, NULL, FALSE, data_set);
	}
	}

	#if ENABLE_VERSIONED_ATTRS
	void
	pe_get_versioned_attributes(xmlNode * meta_hash, pe_resource_t * rsc,
	pe_node_t * node, pe_working_set_t * data_set)
	{
	pe_rule_eval_data_t rule_data = {
	.node_hash = (node == NULL)? NULL : node->details->attrs,
	.role = RSC_ROLE_UNKNOWN,
	.now = data_set->now,
	.match_data = NULL,
	.rsc_data = NULL,
	.op_data = NULL
	};

	pe_eval_versioned_attributes(data_set->input, rsc->xml, XML_TAG_ATTR_SETS,
	&rule_data, meta_hash, NULL);

	/* set anything else based on the parent */
	if (rsc->parent != NULL) {
	pe_get_versioned_attributes(meta_hash, rsc->parent, node, data_set);

	} else {
	/* and finally check the defaults */
	pe_eval_versioned_attributes(data_set->input, data_set->rsc_defaults,
	XML_TAG_ATTR_SETS, &rule_data, meta_hash,
	NULL);
	}
	}
	#endif

	static char *
	template_op_key(xmlNode * op)
	{
	const char *name = crm_element_value(op, "name");
	const char *role = crm_element_value(op, "role");
	char *key = NULL;

	if ((role == NULL)
	\|\| pcmk__strcase_any_of(role, RSC_ROLE_STARTED_S, RSC_ROLE_UNPROMOTED_S,
	RSC_ROLE_UNPROMOTED_LEGACY_S, NULL)) {
	role = RSC_ROLE_UNKNOWN_S;
	}

	key = crm_strdup_printf("%s-%s", name, role);
	return key;
	}

	static gboolean
	unpack_template(xmlNode * xml_obj, xmlNode ** expanded_xml, pe_working_set_t * data_set)
	{
	xmlNode *cib_resources = NULL;
	xmlNode *template = NULL;
	xmlNode *new_xml = NULL;
	xmlNode *child_xml = NULL;
	xmlNode *rsc_ops = NULL;
	xmlNode *template_ops = NULL;
	const char *template_ref = NULL;
	const char *clone = NULL;
	const char *id = NULL;

	if (xml_obj == NULL) {
	pe_err("No resource object for template unpacking");
	return FALSE;
	}

	template_ref = crm_element_value(xml_obj, XML_CIB_TAG_RSC_TEMPLATE);
	if (template_ref == NULL) {
	return TRUE;
	}

	id = ID(xml_obj);
	if (id == NULL) {
	pe_err("'%s' object must have a id", crm_element_name(xml_obj));
	return FALSE;
	}

	if (pcmk__str_eq(template_ref, id, pcmk__str_none)) {
	pe_err("The resource object '%s' should not reference itself", id);
	return FALSE;
	}

	cib_resources = get_xpath_object("//"XML_CIB_TAG_RESOURCES, data_set->input, LOG_TRACE);
	if (cib_resources == NULL) {
	pe_err("No resources configured");
	return FALSE;
	}

	template = pcmk__xe_match(cib_resources, XML_CIB_TAG_RSC_TEMPLATE,
	XML_ATTR_ID, template_ref);
	if (template == NULL) {
	pe_err("No template named '%s'", template_ref);
	return FALSE;
	}

	new_xml = copy_xml(template);
	xmlNodeSetName(new_xml, xml_obj->name);
	crm_xml_replace(new_xml, XML_ATTR_ID, id);

	clone = crm_element_value(xml_obj, XML_RSC_ATTR_INCARNATION);
	if(clone) {
	crm_xml_add(new_xml, XML_RSC_ATTR_INCARNATION, clone);
	}

	template_ops = find_xml_node(new_xml, "operations", FALSE);

	for (child_xml = pcmk__xe_first_child(xml_obj); child_xml != NULL;
	child_xml = pcmk__xe_next(child_xml)) {
	xmlNode *new_child = NULL;

	new_child = add_node_copy(new_xml, child_xml);

	if (pcmk__str_eq((const char *)new_child->name, "operations", pcmk__str_none)) {
	rsc_ops = new_child;
	}
	}

	if (template_ops && rsc_ops) {
	xmlNode *op = NULL;
	GHashTable *rsc_ops_hash = pcmk__strkey_table(free, NULL);

	for (op = pcmk__xe_first_child(rsc_ops); op != NULL;
	op = pcmk__xe_next(op)) {

	char *key = template_op_key(op);

	g_hash_table_insert(rsc_ops_hash, key, op);
	}

	for (op = pcmk__xe_first_child(template_ops); op != NULL;
	op = pcmk__xe_next(op)) {

	char *key = template_op_key(op);

	if (g_hash_table_lookup(rsc_ops_hash, key) == NULL) {
	add_node_copy(rsc_ops, op);
	}

	free(key);
	}

	if (rsc_ops_hash) {
	g_hash_table_destroy(rsc_ops_hash);
	}

	free_xml(template_ops);
	}

	/free_xml(expanded_xml); */
	*expanded_xml = new_xml;

	/* Disable multi-level templates for now */
	/*if(unpack_template(new_xml, expanded_xml, data_set) == FALSE) {
	free_xml(*expanded_xml);
	*expanded_xml = NULL;

	return FALSE;
	} */

	return TRUE;
	}

	static gboolean
	add_template_rsc(xmlNode * xml_obj, pe_working_set_t * data_set)
	{
	const char *template_ref = NULL;
	const char *id = NULL;

	if (xml_obj == NULL) {
	pe_err("No resource object for processing resource list of template");
	return FALSE;
	}

	template_ref = crm_element_value(xml_obj, XML_CIB_TAG_RSC_TEMPLATE);
	if (template_ref == NULL) {
	return TRUE;
	}

	id = ID(xml_obj);
	if (id == NULL) {
	pe_err("'%s' object must have a id", crm_element_name(xml_obj));
	return FALSE;
	}

	if (pcmk__str_eq(template_ref, id, pcmk__str_none)) {
	pe_err("The resource object '%s' should not reference itself", id);
	return FALSE;
	}

	if (add_tag_ref(data_set->template_rsc_sets, template_ref, id) == FALSE) {
	return FALSE;
	}

	return TRUE;
	}

	static bool
	detect_promotable(pe_resource_t *rsc)
	{
	const char *promotable = g_hash_table_lookup(rsc->meta,
	XML_RSC_ATTR_PROMOTABLE);

	if (crm_is_true(promotable)) {
	return TRUE;
	}

	// @COMPAT deprecated since 2.0.0
	if (pcmk__str_eq(crm_element_name(rsc->xml), PCMK_XE_PROMOTABLE_LEGACY,
	pcmk__str_casei)) {
	/* @TODO in some future version, pe_warn_once() here,
	* then drop support in even later version
	*/
	g_hash_table_insert(rsc->meta, strdup(XML_RSC_ATTR_PROMOTABLE),
	strdup(XML_BOOLEAN_TRUE));
	return TRUE;
	}
	return FALSE;
	}

	static void
	free_params_table(gpointer data)
	{
	g_hash_table_destroy((GHashTable *) data);
	}

	/*!
	* \brief Get a table of resource parameters
	*
	* \param[in] rsc Resource to query
	* \param[in] node Node for evaluating rules (NULL for defaults)
	* \param[in] data_set Cluster working set
	*
	* \return Hash table containing resource parameter names and values
	* (or NULL if \p rsc or \p data_set is NULL)
	* \note The returned table will be destroyed when the resource is freed, so
	* callers should not destroy it.
	*/
	GHashTable *
	pe_rsc_params(pe_resource_t rsc, pe_node_t node, pe_working_set_t *data_set)
	{
	GHashTable *params_on_node = NULL;

	/* A NULL node is used to request the resource's default parameters
	* (not evaluated for node), but we always want something non-NULL
	* as a hash table key.
	*/
	const char *node_name = "";

	// Sanity check
	if ((rsc == NULL) \|\| (data_set == NULL)) {
	return NULL;
	}
	if ((node != NULL) && (node->details->uname != NULL)) {
	node_name = node->details->uname;
	}

	// Find the parameter table for given node
	if (rsc->parameter_cache == NULL) {
	rsc->parameter_cache = pcmk__strikey_table(free, free_params_table);
	} else {
	params_on_node = g_hash_table_lookup(rsc->parameter_cache, node_name);
	}

	// If none exists yet, create one with parameters evaluated for node
	if (params_on_node == NULL) {
	params_on_node = pcmk__strkey_table(free, free);
	get_rsc_attributes(params_on_node, rsc, node, data_set);
	g_hash_table_insert(rsc->parameter_cache, strdup(node_name),
	params_on_node);
	}
	return params_on_node;
	}

	+/*!
	+ * \internal
	+ * \brief Unpack a resource's "requires" meta-attribute
	+ *
	+ * \param[in] rsc Resource being unpacked
	+ * \param[in] value Value of "requires" meta-attribute
	+ * \param[in] is_default Whether \p value was selected by default
	+ */
	+static void
	+unpack_requires(pe_resource_t rsc, const char value, bool is_default)
	+{
	+ if (pcmk__str_eq(value, PCMK__VALUE_NOTHING, pcmk__str_casei)) {
	+
	+ } else if (pcmk__str_eq(value, PCMK__VALUE_QUORUM, pcmk__str_casei)) {
	+ pe__set_resource_flags(rsc, pe_rsc_needs_quorum);
	+
	+ } else if (pcmk__str_eq(value, PCMK__VALUE_FENCING, pcmk__str_casei)) {
	+ pe__set_resource_flags(rsc, pe_rsc_needs_fencing);
	+ if (!pcmk_is_set(rsc->cluster->flags, pe_flag_stonith_enabled)) {
	+ pcmk__config_warn("%s requires fencing but fencing is disabled",
	+ rsc->id);
	+ }
	+
	+ } else if (pcmk__str_eq(value, PCMK__VALUE_UNFENCING, pcmk__str_casei)) {
	+ if (pcmk_is_set(rsc->flags, pe_rsc_fence_device)) {
	+ pcmk__config_warn("Resetting \"" XML_RSC_ATTR_REQUIRES "\" for %s "
	+ "to \"" PCMK__VALUE_QUORUM "\" because fencing "
	+ "devices cannot require unfencing", rsc->id);
	+ unpack_requires(rsc, PCMK__VALUE_QUORUM, true);
	+ return;
	+
	+ } else if (!pcmk_is_set(rsc->cluster->flags, pe_flag_stonith_enabled)) {
	+ pcmk__config_warn("Resetting \"" XML_RSC_ATTR_REQUIRES "\" for %s "
	+ "to \"" PCMK__VALUE_QUORUM "\" because fencing "
	+ "is disabled", rsc->id);
	+ unpack_requires(rsc, PCMK__VALUE_QUORUM, true);
	+ return;
	+
	+ } else {
	+ pe__set_resource_flags(rsc,
	+ pe_rsc_needs_fencing\|pe_rsc_needs_unfencing);
	+ }
	+
	+ } else {
	+ const char *orig_value = value;
	+
	+ if (pcmk_is_set(rsc->flags, pe_rsc_fence_device)) {
	+ value = PCMK__VALUE_QUORUM;
	+
	+ } else if ((rsc->variant == pe_native)
	+ && xml_contains_remote_node(rsc->xml)) {
	+ value = PCMK__VALUE_QUORUM;
	+
	+ } else if (pcmk_is_set(rsc->cluster->flags, pe_flag_enable_unfencing)) {
	+ value = PCMK__VALUE_UNFENCING;
	+
	+ } else if (pcmk_is_set(rsc->cluster->flags, pe_flag_stonith_enabled)) {
	+ value = PCMK__VALUE_FENCING;
	+
	+ } else if (rsc->cluster->no_quorum_policy == no_quorum_ignore) {
	+ value = PCMK__VALUE_NOTHING;
	+
	+ } else {
	+ value = PCMK__VALUE_QUORUM;
	+ }
	+
	+ if (orig_value != NULL) {
	+ pcmk__config_err("Resetting '" XML_RSC_ATTR_REQUIRES "' for %s "
	+ "to '%s' because '%s' is not valid",
	+ rsc->id, value, orig_value);
	+ }
	+ unpack_requires(rsc, value, true);
	+ return;
	+ }
	+
	+ pe_rsc_trace(rsc, "\tRequired to start: %s%s", value,
	+ (is_default? " (default)" : ""));
	+}
	+
	gboolean
	common_unpack(xmlNode * xml_obj, pe_resource_t ** rsc,
	pe_resource_t * parent, pe_working_set_t * data_set)
	{
	- bool isdefault = FALSE;
	xmlNode *expanded_xml = NULL;
	xmlNode *ops = NULL;
	const char *value = NULL;
	const char rclass = NULL; / Look for this after any templates have been expanded */
	const char *id = crm_element_value(xml_obj, XML_ATTR_ID);
	bool guest_node = FALSE;
	bool remote_node = FALSE;
	bool has_versioned_params = FALSE;

	pe_rule_eval_data_t rule_data = {
	.node_hash = NULL,
	.role = RSC_ROLE_UNKNOWN,
	.now = data_set->now,
	.match_data = NULL,
	.rsc_data = NULL,
	.op_data = NULL
	};

	crm_log_xml_trace(xml_obj, "Processing resource input...");

	if (id == NULL) {
	pe_err("Must specify id tag in <resource>");
	return FALSE;

	} else if (rsc == NULL) {
	pe_err("Nowhere to unpack resource into");
	return FALSE;

	}

	if (unpack_template(xml_obj, &expanded_xml, data_set) == FALSE) {
	return FALSE;
	}

	*rsc = calloc(1, sizeof(pe_resource_t));
	(*rsc)->cluster = data_set;

	if (expanded_xml) {
	crm_log_xml_trace(expanded_xml, "Expanded resource...");
	(*rsc)->xml = expanded_xml;
	(*rsc)->orig_xml = xml_obj;

	} else {
	(*rsc)->xml = xml_obj;
	(*rsc)->orig_xml = NULL;
	}

	/* Do not use xml_obj from here on, use (rsc)->xml in case templates are involved /
	rclass = crm_element_value((*rsc)->xml, XML_AGENT_ATTR_CLASS);
	(*rsc)->parent = parent;

	ops = find_xml_node((*rsc)->xml, "operations", FALSE);
	(*rsc)->ops_xml = expand_idref(ops, data_set->input);

	(rsc)->variant = get_resource_type(crm_element_name((rsc)->xml));
	if ((*rsc)->variant == pe_unknown) {
	pe_err("Unknown resource type: %s", crm_element_name((*rsc)->xml));
	free(*rsc);
	return FALSE;
	}

	#if ENABLE_VERSIONED_ATTRS
	(*rsc)->versioned_parameters = create_xml_node(NULL, XML_TAG_RSC_VER_ATTRS);
	#endif

	(*rsc)->meta = pcmk__strkey_table(free, free);
	(*rsc)->allowed_nodes = pcmk__strkey_table(NULL, free);
	(*rsc)->known_on = pcmk__strkey_table(NULL, free);

	value = crm_element_value((*rsc)->xml, XML_RSC_ATTR_INCARNATION);
	if (value) {
	(*rsc)->id = crm_strdup_printf("%s:%s", id, value);
	add_hash_param((*rsc)->meta, XML_RSC_ATTR_INCARNATION, value);

	} else {
	(*rsc)->id = strdup(id);
	}

	(rsc)->fns = &resource_class_functions[(rsc)->variant];
	pe_rsc_trace((*rsc), "Unpacking resource...");

	get_meta_attributes((rsc)->meta, rsc, NULL, data_set);
	(rsc)->parameters = pe_rsc_params(rsc, NULL, data_set); // \deprecated
	#if ENABLE_VERSIONED_ATTRS
	pe_get_versioned_attributes((rsc)->versioned_parameters, rsc, NULL, data_set);
	#endif

	(*rsc)->flags = 0;
	pe__set_resource_flags(*rsc, pe_rsc_runnable\|pe_rsc_provisional);

	if (!pcmk_is_set(data_set->flags, pe_flag_maintenance_mode)) {
	pe__set_resource_flags(*rsc, pe_rsc_managed);
	}

	(*rsc)->rsc_cons = NULL;
	(*rsc)->rsc_tickets = NULL;
	(*rsc)->actions = NULL;
	(*rsc)->role = RSC_ROLE_STOPPED;
	(*rsc)->next_role = RSC_ROLE_UNKNOWN;

	(*rsc)->recovery_type = recovery_stop_start;
	(*rsc)->stickiness = 0;
	(*rsc)->migration_threshold = INFINITY;
	(*rsc)->failure_timeout = 0;

	value = g_hash_table_lookup((*rsc)->meta, XML_CIB_ATTR_PRIORITY);
	(*rsc)->priority = char2score(value);

	value = g_hash_table_lookup((*rsc)->meta, XML_RSC_ATTR_CRITICAL);
	if ((value == NULL) \|\| crm_is_true(value)) {
	pe__set_resource_flags(*rsc, pe_rsc_critical);
	}

	value = g_hash_table_lookup((*rsc)->meta, XML_RSC_ATTR_NOTIFY);
	if (crm_is_true(value)) {
	pe__set_resource_flags(*rsc, pe_rsc_notify);
	}

	if (xml_contains_remote_node((*rsc)->xml)) {
	(*rsc)->is_remote_node = TRUE;
	if (g_hash_table_lookup((*rsc)->meta, XML_RSC_ATTR_CONTAINER)) {
	guest_node = TRUE;
	} else {
	remote_node = TRUE;
	}
	}

	value = g_hash_table_lookup((*rsc)->meta, XML_OP_ATTR_ALLOW_MIGRATE);
	#if ENABLE_VERSIONED_ATTRS
	has_versioned_params = xml_has_children((*rsc)->versioned_parameters);
	#endif
	if (crm_is_true(value) && has_versioned_params) {
	pe_rsc_trace((*rsc), "Migration is disabled for resources with versioned parameters");
	} else if (crm_is_true(value)) {
	pe__set_resource_flags(*rsc, pe_rsc_allow_migrate);
	} else if ((value == NULL) && remote_node && !has_versioned_params) {
	/* By default, we want remote nodes to be able
	* to float around the cluster without having to stop all the
	* resources within the remote-node before moving. Allowing
	* migration support enables this feature. If this ever causes
	* problems, migration support can be explicitly turned off with
	* allow-migrate=false.
	* We don't support migration for versioned resources, though. */
	pe__set_resource_flags(*rsc, pe_rsc_allow_migrate);
	}

	value = g_hash_table_lookup((*rsc)->meta, XML_RSC_ATTR_MANAGED);
	if (value != NULL && !pcmk__str_eq("default", value, pcmk__str_casei)) {
	if (crm_is_true(value)) {
	pe__set_resource_flags(*rsc, pe_rsc_managed);
	} else {
	pe__clear_resource_flags(*rsc, pe_rsc_managed);
	}
	}

	value = g_hash_table_lookup((*rsc)->meta, XML_RSC_ATTR_MAINTENANCE);
	if (crm_is_true(value)) {
	pe__clear_resource_flags(*rsc, pe_rsc_managed);
	pe__set_resource_flags(*rsc, pe_rsc_maintenance);
	}
	if (pcmk_is_set(data_set->flags, pe_flag_maintenance_mode)) {
	pe__clear_resource_flags(*rsc, pe_rsc_managed);
	pe__set_resource_flags(*rsc, pe_rsc_maintenance);
	}

	if (pe_rsc_is_clone(uber_parent(*rsc))) {
	value = g_hash_table_lookup((*rsc)->meta, XML_RSC_ATTR_UNIQUE);
	if (crm_is_true(value)) {
	pe__set_resource_flags(*rsc, pe_rsc_unique);
	}
	if (detect_promotable(*rsc)) {
	pe__set_resource_flags(*rsc, pe_rsc_promotable);
	}
	} else {
	pe__set_resource_flags(*rsc, pe_rsc_unique);
	}

	pe_rsc_trace((rsc), "Options for %s", (rsc)->id);

	value = g_hash_table_lookup((*rsc)->meta, XML_RSC_ATTR_RESTART);
	if (pcmk__str_eq(value, "restart", pcmk__str_casei)) {
	(*rsc)->restart_type = pe_restart_restart;
	pe_rsc_trace((*rsc), "\tDependency restart handling: restart");
	pe_warn_once(pe_wo_restart_type,
	"Support for restart-type is deprecated and will be removed in a future release");

	} else {
	(*rsc)->restart_type = pe_restart_ignore;
	pe_rsc_trace((*rsc), "\tDependency restart handling: ignore");
	}

	value = g_hash_table_lookup((*rsc)->meta, XML_RSC_ATTR_MULTIPLE);
	if (pcmk__str_eq(value, "stop_only", pcmk__str_casei)) {
	(*rsc)->recovery_type = recovery_stop_only;
	pe_rsc_trace((*rsc), "\tMultiple running resource recovery: stop only");

	} else if (pcmk__str_eq(value, "block", pcmk__str_casei)) {
	(*rsc)->recovery_type = recovery_block;
	pe_rsc_trace((*rsc), "\tMultiple running resource recovery: block");

	} else if (pcmk__str_eq(value, "stop_unexpected", pcmk__str_casei)) {
	(*rsc)->recovery_type = recovery_stop_unexpected;
	pe_rsc_trace((*rsc), "\tMultiple running resource recovery: "
	"stop unexpected instances");

	} else { // "stop_start"
	if (!pcmk__str_eq(value, "stop_start",
	pcmk__str_casei\|pcmk__str_null_matches)) {
	pe_warn("%s is not a valid value for " XML_RSC_ATTR_MULTIPLE
	", using default of \"stop_start\"", value);
	}
	(*rsc)->recovery_type = recovery_stop_start;
	pe_rsc_trace((*rsc), "\tMultiple running resource recovery: stop/start");
	}

	value = g_hash_table_lookup((*rsc)->meta, XML_RSC_ATTR_STICKINESS);
	if (value != NULL && !pcmk__str_eq("default", value, pcmk__str_casei)) {
	(*rsc)->stickiness = char2score(value);
	}

	value = g_hash_table_lookup((*rsc)->meta, XML_RSC_ATTR_FAIL_STICKINESS);
	if (value != NULL && !pcmk__str_eq("default", value, pcmk__str_casei)) {
	(*rsc)->migration_threshold = char2score(value);
	if ((*rsc)->migration_threshold < 0) {
	/* @TODO We use 1 here to preserve previous behavior, but this
	* should probably use the default (INFINITY) or 0 (to disable)
	* instead.
	*/
	pe_warn_once(pe_wo_neg_threshold,
	XML_RSC_ATTR_FAIL_STICKINESS
	" must be non-negative, using 1 instead");
	(*rsc)->migration_threshold = 1;
	}
	}

	if (pcmk__str_eq(rclass, PCMK_RESOURCE_CLASS_STONITH, pcmk__str_casei)) {
	pe__set_working_set_flags(data_set, pe_flag_have_stonith_resource);
	pe__set_resource_flags(*rsc, pe_rsc_fence_device);
	}

	value = g_hash_table_lookup((*rsc)->meta, XML_RSC_ATTR_REQUIRES);
	+ unpack_requires(*rsc, value, false);

	- handle_requires_pref:
	- if (pcmk__str_eq(value, "nothing", pcmk__str_casei)) {
	-
	- } else if (pcmk__str_eq(value, "quorum", pcmk__str_casei)) {
	- pe__set_resource_flags(*rsc, pe_rsc_needs_quorum);
	-
	- } else if (pcmk__str_eq(value, "unfencing", pcmk__str_casei)) {
	- if (pcmk_is_set((*rsc)->flags, pe_rsc_fence_device)) {
	- pcmk__config_warn("Resetting '" XML_RSC_ATTR_REQUIRES "' for %s "
	- "to 'quorum' because fencing devices cannot "
	- "require unfencing", (*rsc)->id);
	- value = "quorum";
	- isdefault = TRUE;
	- goto handle_requires_pref;
	-
	- } else if (!pcmk_is_set(data_set->flags, pe_flag_stonith_enabled)) {
	- pcmk__config_warn("Resetting '" XML_RSC_ATTR_REQUIRES "' for %s "
	- "to 'quorum' because fencing is disabled",
	- (*rsc)->id);
	- value = "quorum";
	- isdefault = TRUE;
	- goto handle_requires_pref;
	-
	- } else {
	- pe__set_resource_flags(*rsc, pe_rsc_needs_fencing
	- \|pe_rsc_needs_unfencing);
	- }
	-
	- } else if (pcmk__str_eq(value, "fencing", pcmk__str_casei)) {
	- pe__set_resource_flags(*rsc, pe_rsc_needs_fencing);
	- if (!pcmk_is_set(data_set->flags, pe_flag_stonith_enabled)) {
	- pcmk__config_warn("%s requires fencing but fencing is disabled",
	- (*rsc)->id);
	- }
	-
	- } else {
	- const char *orig_value = value;
	-
	- isdefault = TRUE;
	- if (pcmk_is_set((*rsc)->flags, pe_rsc_fence_device)) {
	- value = "quorum";
	-
	- } else if (((*rsc)->variant == pe_native)
	- && pcmk__str_eq(crm_element_value((*rsc)->xml, XML_AGENT_ATTR_CLASS), PCMK_RESOURCE_CLASS_OCF, pcmk__str_casei)
	- && pcmk__str_eq(crm_element_value((*rsc)->xml, XML_AGENT_ATTR_PROVIDER), "pacemaker", pcmk__str_casei)
	- && pcmk__str_eq(crm_element_value((*rsc)->xml, XML_ATTR_TYPE), "remote", pcmk__str_casei)
	- ) {
	- value = "quorum";
	-
	- } else if (pcmk_is_set(data_set->flags, pe_flag_enable_unfencing)) {
	- value = "unfencing";
	-
	- } else if (pcmk_is_set(data_set->flags, pe_flag_stonith_enabled)) {
	- value = "fencing";
	-
	- } else if (data_set->no_quorum_policy == no_quorum_ignore) {
	- value = "nothing";
	-
	- } else {
	- value = "quorum";
	- }
	-
	- if (orig_value != NULL) {
	- pcmk__config_err("Resetting '" XML_RSC_ATTR_REQUIRES "' for %s "
	- "to '%s' because '%s' is not valid",
	- (*rsc)->id, value, orig_value);
	- }
	-
	- goto handle_requires_pref;
	- }
	-
	- pe_rsc_trace((*rsc), "\tRequired to start: %s%s", value, isdefault?" (default)":"");
	value = g_hash_table_lookup((*rsc)->meta, XML_RSC_ATTR_FAIL_TIMEOUT);
	if (value != NULL) {
	// Stored as seconds
	(*rsc)->failure_timeout = (int) (crm_parse_interval_spec(value) / 1000);
	}

	if (remote_node) {
	GHashTable params = pe_rsc_params(rsc, NULL, data_set);

	/* Grabbing the value now means that any rules based on node attributes
	* will evaluate to false, so such rules should not be used with
	* reconnect_interval.
	*
	* @TODO Evaluate per node before using
	*/
	value = g_hash_table_lookup(params, XML_REMOTE_ATTR_RECONNECT_INTERVAL);
	if (value) {
	/* reconnect delay works by setting failure_timeout and preventing the
	* connection from starting until the failure is cleared. */
	(*rsc)->remote_reconnect_ms = crm_parse_interval_spec(value);
	/* we want to override any default failure_timeout in use when remote
	* reconnect_interval is in use. */
	(rsc)->failure_timeout = (rsc)->remote_reconnect_ms / 1000;
	}
	}

	get_target_role(rsc, &((rsc)->next_role));
	pe_rsc_trace((*rsc), "\tDesired next state: %s",
	(rsc)->next_role != RSC_ROLE_UNKNOWN ? role2text((rsc)->next_role) : "default");

	if ((rsc)->fns->unpack(rsc, data_set) == FALSE) {
	return FALSE;
	}

	if (pcmk_is_set(data_set->flags, pe_flag_symmetric_cluster)) {
	// This tag must stay exactly the same because it is tested elsewhere
	resource_location(*rsc, NULL, 0, "symmetric_default", data_set);
	} else if (guest_node) {
	/* remote resources tied to a container resource must always be allowed
	* to opt-in to the cluster. Whether the connection resource is actually
	* allowed to be placed on a node is dependent on the container resource */
	resource_location(*rsc, NULL, 0, "remote_connection_default", data_set);
	}

	pe_rsc_trace((*rsc), "\tAction notification: %s",
	pcmk_is_set((*rsc)->flags, pe_rsc_notify)? "required" : "not required");

	(*rsc)->utilization = pcmk__strkey_table(free, free);

	pe__unpack_dataset_nvpairs((*rsc)->xml, XML_TAG_UTILIZATION, &rule_data,
	(*rsc)->utilization, NULL, FALSE, data_set);

	/* data_set->resources = g_list_append(data_set->resources, (rsc)); /

	if (expanded_xml) {
	if (add_template_rsc(xml_obj, data_set) == FALSE) {
	return FALSE;
	}
	}
	return TRUE;
	}

	void
	common_update_score(pe_resource_t * rsc, const char *id, int score)
	{
	pe_node_t *node = NULL;

	node = pe_hash_table_lookup(rsc->allowed_nodes, id);
	if (node != NULL) {
	pe_rsc_trace(rsc, "Updating score for %s on %s: %d + %d", rsc->id, id, node->weight, score);
	node->weight = pcmk__add_scores(node->weight, score);
	}

	if (rsc->children) {
	GList *gIter = rsc->children;

	for (; gIter != NULL; gIter = gIter->next) {
	pe_resource_t child_rsc = (pe_resource_t ) gIter->data;

	common_update_score(child_rsc, id, score);
	}
	}
	}

	gboolean
	is_parent(pe_resource_t child, pe_resource_t rsc)
	{
	pe_resource_t *parent = child;

	if (parent == NULL \|\| rsc == NULL) {
	return FALSE;
	}
	while (parent->parent != NULL) {
	if (parent->parent == rsc) {
	return TRUE;
	}
	parent = parent->parent;
	}
	return FALSE;
	}

	pe_resource_t *
	uber_parent(pe_resource_t * rsc)
	{
	pe_resource_t *parent = rsc;

	if (parent == NULL) {
	return NULL;
	}
	while (parent->parent != NULL && parent->parent->variant != pe_container) {
	parent = parent->parent;
	}
	return parent;
	}

	void
	common_free(pe_resource_t * rsc)
	{
	if (rsc == NULL) {
	return;
	}

	pe_rsc_trace(rsc, "Freeing %s %d", rsc->id, rsc->variant);

	g_list_free(rsc->rsc_cons);
	g_list_free(rsc->rsc_cons_lhs);
	g_list_free(rsc->rsc_tickets);
	g_list_free(rsc->dangling_migrations);

	if (rsc->parameter_cache != NULL) {
	g_hash_table_destroy(rsc->parameter_cache);
	}
	#if ENABLE_VERSIONED_ATTRS
	if (rsc->versioned_parameters != NULL) {
	free_xml(rsc->versioned_parameters);
	}
	#endif
	if (rsc->meta != NULL) {
	g_hash_table_destroy(rsc->meta);
	}
	if (rsc->utilization != NULL) {
	g_hash_table_destroy(rsc->utilization);
	}

	if ((rsc->parent == NULL) && pcmk_is_set(rsc->flags, pe_rsc_orphan)) {
	free_xml(rsc->xml);
	rsc->xml = NULL;
	free_xml(rsc->orig_xml);
	rsc->orig_xml = NULL;

	/* if rsc->orig_xml, then rsc->xml is an expanded xml from a template */
	} else if (rsc->orig_xml) {
	free_xml(rsc->xml);
	rsc->xml = NULL;
	}
	if (rsc->running_on) {
	g_list_free(rsc->running_on);
	rsc->running_on = NULL;
	}
	if (rsc->known_on) {
	g_hash_table_destroy(rsc->known_on);
	rsc->known_on = NULL;
	}
	if (rsc->actions) {
	g_list_free(rsc->actions);
	rsc->actions = NULL;
	}
	if (rsc->allowed_nodes) {
	g_hash_table_destroy(rsc->allowed_nodes);
	rsc->allowed_nodes = NULL;
	}
	g_list_free(rsc->fillers);
	g_list_free(rsc->rsc_location);
	pe_rsc_trace(rsc, "Resource freed");
	free(rsc->id);
	free(rsc->clone_name);
	free(rsc->allocated_to);
	free(rsc->variant_opaque);
	free(rsc->pending_task);
	free(rsc);
	}

	/*!
	* \brief
	* \internal Find a node (and optionally count all) where resource is active
	*
	* \param[in] rsc Resource to check
	* \param[out] count_all If not NULL, will be set to count of active nodes
	* \param[out] count_clean If not NULL, will be set to count of clean nodes
	*
	* \return An active node (or NULL if resource is not active anywhere)
	*
	* \note The order of preference is: an active node that is the resource's
	* partial migration source; if the resource's "requires" is "quorum" or
	* "nothing", the first active node in the list that is clean and online;
	* the first active node in the list.
	*/
	pe_node_t *
	pe__find_active_on(const pe_resource_t rsc, unsigned int count_all,
	unsigned int *count_clean)
	{
	pe_node_t *active = NULL;
	pe_node_t *node = NULL;
	bool keep_looking = FALSE;
	bool is_happy = FALSE;

	if (count_all) {
	*count_all = 0;
	}
	if (count_clean) {
	*count_clean = 0;
	}
	if (rsc == NULL) {
	return NULL;
	}

	for (GList *node_iter = rsc->running_on; node_iter != NULL;
	node_iter = node_iter->next) {

	node = node_iter->data;
	keep_looking = FALSE;

	is_happy = node->details->online && !node->details->unclean;

	if (count_all) {
	++*count_all;
	}
	if (count_clean && is_happy) {
	++*count_clean;
	}
	if (count_all \|\| count_clean) {
	// If we're counting, we need to go through entire list
	keep_looking = TRUE;
	}

	if (rsc->partial_migration_source != NULL) {
	if (node->details == rsc->partial_migration_source->details) {
	// This is the migration source
	active = node;
	} else {
	keep_looking = TRUE;
	}
	} else if (!pcmk_is_set(rsc->flags, pe_rsc_needs_fencing)) {
	if (is_happy && (!active \|\| !active->details->online
	\|\| active->details->unclean)) {
	// This is the first clean node
	active = node;
	} else {
	keep_looking = TRUE;
	}
	}
	if (active == NULL) {
	// This is first node in list
	active = node;
	}

	if (keep_looking == FALSE) {
	// Don't waste time iterating if we don't have to
	break;
	}
	}
	return active;
	}

	/*!
	* \brief
	* \internal Find and count active nodes according to "requires"
	*
	* \param[in] rsc Resource to check
	* \param[out] count If not NULL, will be set to count of active nodes
	*
	* \return An active node (or NULL if resource is not active anywhere)
	*
	* \note This is a convenience wrapper for pe__find_active_on() where the count
	* of all active nodes or only clean active nodes is desired according to
	* the "requires" meta-attribute.
	*/
	pe_node_t *
	pe__find_active_requires(const pe_resource_t rsc, unsigned int count)
	{
	if (rsc && !pcmk_is_set(rsc->flags, pe_rsc_needs_fencing)) {
	return pe__find_active_on(rsc, NULL, count);
	}
	return pe__find_active_on(rsc, count, NULL);
	}

	void
	pe__count_common(pe_resource_t *rsc)
	{
	if (rsc->children != NULL) {
	for (GList *item = rsc->children; item != NULL; item = item->next) {
	((pe_resource_t *) item->data)->fns->count(item->data);
	}

	} else if (!pcmk_is_set(rsc->flags, pe_rsc_orphan)
	\|\| (rsc->role > RSC_ROLE_STOPPED)) {
	rsc->cluster->ninstances++;
	if (pe__resource_is_disabled(rsc)) {
	rsc->cluster->disabled_resources++;
	}
	if (pcmk_is_set(rsc->flags, pe_rsc_block)) {
	rsc->cluster->blocked_resources++;
	}
	}
	}

	/*!
	* \internal
	* \brief Update a resource's next role
	*
	* \param[in,out] rsc Resource to be updated
	* \param[in] role Resource's new next role
	* \param[in] why Human-friendly reason why role is changing (for logs)
	*/
	void
	pe__set_next_role(pe_resource_t rsc, enum rsc_role_e role, const char why)
	{
	CRM_ASSERT((rsc != NULL) && (why != NULL));
	if (rsc->next_role != role) {
	pe_rsc_trace(rsc, "Resetting next role for %s from %s to %s (%s)",
	rsc->id, role2text(rsc->next_role), role2text(role), why);
	rsc->next_role = role;
	}
	}
	diff --git a/lib/pengine/unpack.c b/lib/pengine/unpack.c
	index 2204493f27..094469e521 100644
	--- a/lib/pengine/unpack.c
	+++ b/lib/pengine/unpack.c
	@@ -1,4219 +1,4219 @@
	/*
	* Copyright 2004-2022 the Pacemaker project contributors
	*
	* The version control history for this file may have further details.
	*
	* This source code is licensed under the GNU Lesser General Public License
	* version 2.1 or later (LGPLv2.1+) WITHOUT ANY WARRANTY.
	*/

	#include <crm_internal.h>

	#include <stdio.h>
	#include <string.h>
	#include <glib.h>
	#include <time.h>

	#include <crm/crm.h>
	#include <crm/services.h>
	#include <crm/msg_xml.h>
	#include <crm/common/xml.h>
	#include <crm/common/xml_internal.h>

	#include <crm/common/util.h>
	#include <crm/pengine/rules.h>
	#include <crm/pengine/internal.h>
	#include <pe_status_private.h>

	CRM_TRACE_INIT_DATA(pe_status);

	/* This uses pcmk__set_flags_as()/pcmk__clear_flags_as() directly rather than
	* use pe__set_working_set_flags()/pe__clear_working_set_flags() so that the
	* flag is stringified more readably in log messages.
	*/
	#define set_config_flag(data_set, option, flag) do { \
	const char *scf_value = pe_pref((data_set)->config_hash, (option)); \
	if (scf_value != NULL) { \
	if (crm_is_true(scf_value)) { \
	(data_set)->flags = pcmk__set_flags_as(__func__, __LINE__, \
	LOG_TRACE, "Working set", \
	crm_system_name, (data_set)->flags, \
	(flag), #flag); \
	} else { \
	(data_set)->flags = pcmk__clear_flags_as(__func__, __LINE__,\
	LOG_TRACE, "Working set", \
	crm_system_name, (data_set)->flags, \
	(flag), #flag); \
	} \
	} \
	} while(0)

	static void unpack_rsc_op(pe_resource_t rsc, pe_node_t node, xmlNode *xml_op,
	xmlNode **last_failure,
	enum action_fail_response *failed,
	pe_working_set_t *data_set);
	static void determine_remote_online_status(pe_working_set_t *data_set,
	pe_node_t *this_node);
	static void add_node_attrs(xmlNode attrs, pe_node_t node, bool overwrite,
	pe_working_set_t *data_set);
	static void determine_online_status(xmlNode node_state, pe_node_t this_node,
	pe_working_set_t *data_set);

	static void unpack_node_lrm(pe_node_t node, xmlNode xml,
	pe_working_set_t *data_set);


	// Bitmask for warnings we only want to print once
	uint32_t pe_wo = 0;

	static gboolean
	is_dangling_guest_node(pe_node_t *node)
	{
	/* we are looking for a remote-node that was supposed to be mapped to a
	* container resource, but all traces of that container have disappeared
	* from both the config and the status section. */
	if (pe__is_guest_or_remote_node(node) &&
	node->details->remote_rsc &&
	node->details->remote_rsc->container == NULL &&
	pcmk_is_set(node->details->remote_rsc->flags,
	pe_rsc_orphan_container_filler)) {
	return TRUE;
	}

	return FALSE;
	}

	/*!
	* \brief Schedule a fence action for a node
	*
	* \param[in,out] data_set Current working set of cluster
	* \param[in,out] node Node to fence
	* \param[in] reason Text description of why fencing is needed
	* \param[in] priority_delay Whether to consider `priority-fencing-delay`
	*/
	void
	pe_fence_node(pe_working_set_t * data_set, pe_node_t * node,
	const char *reason, bool priority_delay)
	{
	CRM_CHECK(node, return);

	/* A guest node is fenced by marking its container as failed */
	if (pe__is_guest_node(node)) {
	pe_resource_t *rsc = node->details->remote_rsc->container;

	if (!pcmk_is_set(rsc->flags, pe_rsc_failed)) {
	if (!pcmk_is_set(rsc->flags, pe_rsc_managed)) {
	crm_notice("Not fencing guest node %s "
	"(otherwise would because %s): "
	"its guest resource %s is unmanaged",
	node->details->uname, reason, rsc->id);
	} else {
	crm_warn("Guest node %s will be fenced "
	"(by recovering its guest resource %s): %s",
	node->details->uname, rsc->id, reason);

	/* We don't mark the node as unclean because that would prevent the
	* node from running resources. We want to allow it to run resources
	* in this transition if the recovery succeeds.
	*/
	node->details->remote_requires_reset = TRUE;
	pe__set_resource_flags(rsc, pe_rsc_failed\|pe_rsc_stop);
	}
	}

	} else if (is_dangling_guest_node(node)) {
	crm_info("Cleaning up dangling connection for guest node %s: "
	"fencing was already done because %s, "
	"and guest resource no longer exists",
	node->details->uname, reason);
	pe__set_resource_flags(node->details->remote_rsc,
	pe_rsc_failed\|pe_rsc_stop);

	} else if (pe__is_remote_node(node)) {
	pe_resource_t *rsc = node->details->remote_rsc;

	if ((rsc != NULL) && !pcmk_is_set(rsc->flags, pe_rsc_managed)) {
	crm_notice("Not fencing remote node %s "
	"(otherwise would because %s): connection is unmanaged",
	node->details->uname, reason);
	} else if(node->details->remote_requires_reset == FALSE) {
	node->details->remote_requires_reset = TRUE;
	crm_warn("Remote node %s %s: %s",
	node->details->uname,
	pe_can_fence(data_set, node)? "will be fenced" : "is unclean",
	reason);
	}
	node->details->unclean = TRUE;
	// No need to apply `priority-fencing-delay` for remote nodes
	pe_fence_op(node, NULL, TRUE, reason, FALSE, data_set);

	} else if (node->details->unclean) {
	crm_trace("Cluster node %s %s because %s",
	node->details->uname,
	pe_can_fence(data_set, node)? "would also be fenced" : "also is unclean",
	reason);

	} else {
	crm_warn("Cluster node %s %s: %s",
	node->details->uname,
	pe_can_fence(data_set, node)? "will be fenced" : "is unclean",
	reason);
	node->details->unclean = TRUE;
	pe_fence_op(node, NULL, TRUE, reason, priority_delay, data_set);
	}
	}

	// @TODO xpaths can't handle templates, rules, or id-refs

	// nvpair with provides or requires set to unfencing
	#define XPATH_UNFENCING_NVPAIR XML_CIB_TAG_NVPAIR \
	"[(@" XML_NVPAIR_ATTR_NAME "='" PCMK_STONITH_PROVIDES "'" \
	"or @" XML_NVPAIR_ATTR_NAME "='" XML_RSC_ATTR_REQUIRES "') " \
	- "and @" XML_NVPAIR_ATTR_VALUE "='unfencing']"
	+ "and @" XML_NVPAIR_ATTR_VALUE "='" PCMK__VALUE_UNFENCING "']"

	// unfencing in rsc_defaults or any resource
	#define XPATH_ENABLE_UNFENCING \
	"/" XML_TAG_CIB "/" XML_CIB_TAG_CONFIGURATION "/" XML_CIB_TAG_RESOURCES \
	"//" XML_TAG_META_SETS "/" XPATH_UNFENCING_NVPAIR \
	"\|/" XML_TAG_CIB "/" XML_CIB_TAG_CONFIGURATION "/" XML_CIB_TAG_RSCCONFIG \
	"/" XML_TAG_META_SETS "/" XPATH_UNFENCING_NVPAIR

	static void
	set_if_xpath(uint64_t flag, const char xpath, pe_working_set_t data_set)
	{
	xmlXPathObjectPtr result = NULL;

	if (!pcmk_is_set(data_set->flags, flag)) {
	result = xpath_search(data_set->input, xpath);
	if (result && (numXpathResults(result) > 0)) {
	pe__set_working_set_flags(data_set, flag);
	}
	freeXpathObject(result);
	}
	}

	gboolean
	unpack_config(xmlNode * config, pe_working_set_t * data_set)
	{
	const char *value = NULL;
	GHashTable *config_hash = pcmk__strkey_table(free, free);

	pe_rule_eval_data_t rule_data = {
	.node_hash = NULL,
	.role = RSC_ROLE_UNKNOWN,
	.now = data_set->now,
	.match_data = NULL,
	.rsc_data = NULL,
	.op_data = NULL
	};

	data_set->config_hash = config_hash;

	pe__unpack_dataset_nvpairs(config, XML_CIB_TAG_PROPSET, &rule_data, config_hash,
	CIB_OPTIONS_FIRST, FALSE, data_set);

	verify_pe_options(data_set->config_hash);

	set_config_flag(data_set, "enable-startup-probes", pe_flag_startup_probes);
	if (!pcmk_is_set(data_set->flags, pe_flag_startup_probes)) {
	crm_info("Startup probes: disabled (dangerous)");
	}

	value = pe_pref(data_set->config_hash, XML_ATTR_HAVE_WATCHDOG);
	if (value && crm_is_true(value)) {
	crm_info("Watchdog-based self-fencing will be performed via SBD if "
	"fencing is required and stonith-watchdog-timeout is nonzero");
	pe__set_working_set_flags(data_set, pe_flag_have_stonith_resource);
	}

	/* Set certain flags via xpath here, so they can be used before the relevant
	* configuration sections are unpacked.
	*/
	set_if_xpath(pe_flag_enable_unfencing, XPATH_ENABLE_UNFENCING, data_set);

	value = pe_pref(data_set->config_hash, "stonith-timeout");
	data_set->stonith_timeout = (int) crm_parse_interval_spec(value);
	crm_debug("STONITH timeout: %d", data_set->stonith_timeout);

	set_config_flag(data_set, "stonith-enabled", pe_flag_stonith_enabled);
	crm_debug("STONITH of failed nodes is %s",
	pcmk_is_set(data_set->flags, pe_flag_stonith_enabled)? "enabled" : "disabled");

	data_set->stonith_action = pe_pref(data_set->config_hash, "stonith-action");
	if (!strcmp(data_set->stonith_action, "poweroff")) {
	pe_warn_once(pe_wo_poweroff,
	"Support for stonith-action of 'poweroff' is deprecated "
	"and will be removed in a future release (use 'off' instead)");
	data_set->stonith_action = "off";
	}
	crm_trace("STONITH will %s nodes", data_set->stonith_action);

	set_config_flag(data_set, "concurrent-fencing", pe_flag_concurrent_fencing);
	crm_debug("Concurrent fencing is %s",
	pcmk_is_set(data_set->flags, pe_flag_concurrent_fencing)? "enabled" : "disabled");

	value = pe_pref(data_set->config_hash,
	XML_CONFIG_ATTR_PRIORITY_FENCING_DELAY);
	if (value) {
	data_set->priority_fencing_delay = crm_parse_interval_spec(value) / 1000;
	crm_trace("Priority fencing delay is %ds", data_set->priority_fencing_delay);
	}

	set_config_flag(data_set, "stop-all-resources", pe_flag_stop_everything);
	crm_debug("Stop all active resources: %s",
	pcmk__btoa(pcmk_is_set(data_set->flags, pe_flag_stop_everything)));

	set_config_flag(data_set, "symmetric-cluster", pe_flag_symmetric_cluster);
	if (pcmk_is_set(data_set->flags, pe_flag_symmetric_cluster)) {
	crm_debug("Cluster is symmetric" " - resources can run anywhere by default");
	}

	value = pe_pref(data_set->config_hash, "no-quorum-policy");

	if (pcmk__str_eq(value, "ignore", pcmk__str_casei)) {
	data_set->no_quorum_policy = no_quorum_ignore;

	} else if (pcmk__str_eq(value, "freeze", pcmk__str_casei)) {
	data_set->no_quorum_policy = no_quorum_freeze;

	} else if (pcmk__str_eq(value, "demote", pcmk__str_casei)) {
	data_set->no_quorum_policy = no_quorum_demote;

	} else if (pcmk__str_eq(value, "suicide", pcmk__str_casei)) {
	if (pcmk_is_set(data_set->flags, pe_flag_stonith_enabled)) {
	int do_panic = 0;

	crm_element_value_int(data_set->input, XML_ATTR_QUORUM_PANIC,
	&do_panic);
	if (do_panic \|\| pcmk_is_set(data_set->flags, pe_flag_have_quorum)) {
	data_set->no_quorum_policy = no_quorum_suicide;
	} else {
	crm_notice("Resetting no-quorum-policy to 'stop': cluster has never had quorum");
	data_set->no_quorum_policy = no_quorum_stop;
	}
	} else {
	pcmk__config_err("Resetting no-quorum-policy to 'stop' because "
	"fencing is disabled");
	data_set->no_quorum_policy = no_quorum_stop;
	}

	} else {
	data_set->no_quorum_policy = no_quorum_stop;
	}

	switch (data_set->no_quorum_policy) {
	case no_quorum_freeze:
	crm_debug("On loss of quorum: Freeze resources");
	break;
	case no_quorum_stop:
	crm_debug("On loss of quorum: Stop ALL resources");
	break;
	case no_quorum_demote:
	crm_debug("On loss of quorum: "
	"Demote promotable resources and stop other resources");
	break;
	case no_quorum_suicide:
	crm_notice("On loss of quorum: Fence all remaining nodes");
	break;
	case no_quorum_ignore:
	crm_notice("On loss of quorum: Ignore");
	break;
	}

	set_config_flag(data_set, "stop-orphan-resources", pe_flag_stop_rsc_orphans);
	crm_trace("Orphan resources are %s",
	pcmk_is_set(data_set->flags, pe_flag_stop_rsc_orphans)? "stopped" : "ignored");

	set_config_flag(data_set, "stop-orphan-actions", pe_flag_stop_action_orphans);
	crm_trace("Orphan resource actions are %s",
	pcmk_is_set(data_set->flags, pe_flag_stop_action_orphans)? "stopped" : "ignored");

	value = pe_pref(data_set->config_hash, "remove-after-stop");
	if (value != NULL) {
	if (crm_is_true(value)) {
	pe__set_working_set_flags(data_set, pe_flag_remove_after_stop);
	#ifndef PCMK__COMPAT_2_0
	pe_warn_once(pe_wo_remove_after,
	"Support for the remove-after-stop cluster property is"
	" deprecated and will be removed in a future release");
	#endif
	} else {
	pe__clear_working_set_flags(data_set, pe_flag_remove_after_stop);
	}
	}

	set_config_flag(data_set, "maintenance-mode", pe_flag_maintenance_mode);
	crm_trace("Maintenance mode: %s",
	pcmk__btoa(pcmk_is_set(data_set->flags, pe_flag_maintenance_mode)));

	set_config_flag(data_set, "start-failure-is-fatal", pe_flag_start_failure_fatal);
	crm_trace("Start failures are %s",
	pcmk_is_set(data_set->flags, pe_flag_start_failure_fatal)? "always fatal" : "handled by failcount");

	if (pcmk_is_set(data_set->flags, pe_flag_stonith_enabled)) {
	set_config_flag(data_set, "startup-fencing", pe_flag_startup_fencing);
	}
	if (pcmk_is_set(data_set->flags, pe_flag_startup_fencing)) {
	crm_trace("Unseen nodes will be fenced");
	} else {
	pe_warn_once(pe_wo_blind, "Blind faith: not fencing unseen nodes");
	}

	pe__unpack_node_health_scores(data_set);

	data_set->placement_strategy = pe_pref(data_set->config_hash, "placement-strategy");
	crm_trace("Placement strategy: %s", data_set->placement_strategy);

	set_config_flag(data_set, "shutdown-lock", pe_flag_shutdown_lock);
	crm_trace("Resources will%s be locked to cleanly shut down nodes",
	(pcmk_is_set(data_set->flags, pe_flag_shutdown_lock)? "" : " not"));
	if (pcmk_is_set(data_set->flags, pe_flag_shutdown_lock)) {
	value = pe_pref(data_set->config_hash,
	XML_CONFIG_ATTR_SHUTDOWN_LOCK_LIMIT);
	data_set->shutdown_lock = crm_parse_interval_spec(value) / 1000;
	crm_trace("Shutdown locks expire after %us", data_set->shutdown_lock);
	}

	return TRUE;
	}

	pe_node_t *
	pe_create_node(const char id, const char uname, const char *type,
	const char score, pe_working_set_t data_set)
	{
	pe_node_t *new_node = NULL;

	if (pe_find_node(data_set->nodes, uname) != NULL) {
	pcmk__config_warn("More than one node entry has name '%s'", uname);
	}

	new_node = calloc(1, sizeof(pe_node_t));
	if (new_node == NULL) {
	return NULL;
	}

	new_node->weight = char2score(score);
	new_node->fixed = FALSE;
	new_node->details = calloc(1, sizeof(struct pe_node_shared_s));

	if (new_node->details == NULL) {
	free(new_node);
	return NULL;
	}

	crm_trace("Creating node for entry %s/%s", uname, id);
	new_node->details->id = id;
	new_node->details->uname = uname;
	new_node->details->online = FALSE;
	new_node->details->shutdown = FALSE;
	new_node->details->rsc_discovery_enabled = TRUE;
	new_node->details->running_rsc = NULL;
	new_node->details->data_set = data_set;

	if (pcmk__str_eq(type, "member", pcmk__str_null_matches \| pcmk__str_casei)) {
	new_node->details->type = node_member;

	} else if (pcmk__str_eq(type, "remote", pcmk__str_casei)) {
	new_node->details->type = node_remote;
	pe__set_working_set_flags(data_set, pe_flag_have_remote_nodes);

	} else {
	/* @COMPAT 'ping' is the default for backward compatibility, but it
	* should be changed to 'member' at a compatibility break
	*/
	if (!pcmk__str_eq(type, "ping", pcmk__str_casei)) {
	pcmk__config_warn("Node %s has unrecognized type '%s', "
	"assuming 'ping'", pcmk__s(uname, "without name"),
	type);
	}
	pe_warn_once(pe_wo_ping_node,
	"Support for nodes of type 'ping' (such as %s) is "
	"deprecated and will be removed in a future release",
	pcmk__s(uname, "unnamed node"));
	new_node->details->type = node_ping;
	}

	new_node->details->attrs = pcmk__strkey_table(free, free);

	if (pe__is_guest_or_remote_node(new_node)) {
	g_hash_table_insert(new_node->details->attrs, strdup(CRM_ATTR_KIND),
	strdup("remote"));
	} else {
	g_hash_table_insert(new_node->details->attrs, strdup(CRM_ATTR_KIND),
	strdup("cluster"));
	}

	new_node->details->utilization = pcmk__strkey_table(free, free);
	new_node->details->digest_cache = pcmk__strkey_table(free,
	pe__free_digests);

	data_set->nodes = g_list_insert_sorted(data_set->nodes, new_node, sort_node_uname);
	return new_node;
	}

	static const char *
	expand_remote_rsc_meta(xmlNode xml_obj, xmlNode parent, pe_working_set_t *data)
	{
	xmlNode *attr_set = NULL;
	xmlNode *attr = NULL;

	const char *container_id = ID(xml_obj);
	const char *remote_name = NULL;
	const char *remote_server = NULL;
	const char *remote_port = NULL;
	const char *connect_timeout = "60s";
	const char *remote_allow_migrate=NULL;
	const char *is_managed = NULL;

	for (attr_set = pcmk__xe_first_child(xml_obj); attr_set != NULL;
	attr_set = pcmk__xe_next(attr_set)) {

	if (!pcmk__str_eq((const char *)attr_set->name, XML_TAG_META_SETS,
	pcmk__str_casei)) {
	continue;
	}

	for (attr = pcmk__xe_first_child(attr_set); attr != NULL;
	attr = pcmk__xe_next(attr)) {
	const char *value = crm_element_value(attr, XML_NVPAIR_ATTR_VALUE);
	const char *name = crm_element_value(attr, XML_NVPAIR_ATTR_NAME);

	if (pcmk__str_eq(name, XML_RSC_ATTR_REMOTE_NODE, pcmk__str_casei)) {
	remote_name = value;
	} else if (pcmk__str_eq(name, "remote-addr", pcmk__str_casei)) {
	remote_server = value;
	} else if (pcmk__str_eq(name, "remote-port", pcmk__str_casei)) {
	remote_port = value;
	} else if (pcmk__str_eq(name, "remote-connect-timeout", pcmk__str_casei)) {
	connect_timeout = value;
	} else if (pcmk__str_eq(name, "remote-allow-migrate", pcmk__str_casei)) {
	remote_allow_migrate=value;
	} else if (pcmk__str_eq(name, XML_RSC_ATTR_MANAGED, pcmk__str_casei)) {
	is_managed = value;
	}
	}
	}

	if (remote_name == NULL) {
	return NULL;
	}

	if (pe_find_resource(data->resources, remote_name) != NULL) {
	return NULL;
	}

	pe_create_remote_xml(parent, remote_name, container_id,
	remote_allow_migrate, is_managed,
	connect_timeout, remote_server, remote_port);
	return remote_name;
	}

	static void
	handle_startup_fencing(pe_working_set_t data_set, pe_node_t new_node)
	{
	if ((new_node->details->type == node_remote) && (new_node->details->remote_rsc == NULL)) {
	/* Ignore fencing for remote nodes that don't have a connection resource
	* associated with them. This happens when remote node entries get left
	* in the nodes section after the connection resource is removed.
	*/
	return;
	}

	if (pcmk_is_set(data_set->flags, pe_flag_startup_fencing)) {
	// All nodes are unclean until we've seen their status entry
	new_node->details->unclean = TRUE;

	} else {
	// Blind faith ...
	new_node->details->unclean = FALSE;
	}

	/* We need to be able to determine if a node's status section
	* exists or not separate from whether the node is unclean. */
	new_node->details->unseen = TRUE;
	}

	gboolean
	unpack_nodes(xmlNode * xml_nodes, pe_working_set_t * data_set)
	{
	xmlNode *xml_obj = NULL;
	pe_node_t *new_node = NULL;
	const char *id = NULL;
	const char *uname = NULL;
	const char *type = NULL;
	const char *score = NULL;

	pe_rule_eval_data_t rule_data = {
	.node_hash = NULL,
	.role = RSC_ROLE_UNKNOWN,
	.now = data_set->now,
	.match_data = NULL,
	.rsc_data = NULL,
	.op_data = NULL
	};

	for (xml_obj = pcmk__xe_first_child(xml_nodes); xml_obj != NULL;
	xml_obj = pcmk__xe_next(xml_obj)) {

	if (pcmk__str_eq((const char *)xml_obj->name, XML_CIB_TAG_NODE, pcmk__str_none)) {
	new_node = NULL;

	id = crm_element_value(xml_obj, XML_ATTR_ID);
	uname = crm_element_value(xml_obj, XML_ATTR_UNAME);
	type = crm_element_value(xml_obj, XML_ATTR_TYPE);
	score = crm_element_value(xml_obj, XML_RULE_ATTR_SCORE);
	crm_trace("Processing node %s/%s", uname, id);

	if (id == NULL) {
	pcmk__config_err("Ignoring <" XML_CIB_TAG_NODE
	"> entry in configuration without id");
	continue;
	}
	new_node = pe_create_node(id, uname, type, score, data_set);

	if (new_node == NULL) {
	return FALSE;
	}

	/* if(data_set->have_quorum == FALSE */
	/* && data_set->no_quorum_policy == no_quorum_stop) { */
	/* /\* start shutting resources down \/ /
	/* new_node->weight = -INFINITY; */
	/* } */

	handle_startup_fencing(data_set, new_node);

	add_node_attrs(xml_obj, new_node, FALSE, data_set);
	pe__unpack_dataset_nvpairs(xml_obj, XML_TAG_UTILIZATION, &rule_data,
	new_node->details->utilization, NULL,
	FALSE, data_set);

	crm_trace("Done with node %s", crm_element_value(xml_obj, XML_ATTR_UNAME));
	}
	}

	if (data_set->localhost && pe_find_node(data_set->nodes, data_set->localhost) == NULL) {
	crm_info("Creating a fake local node");
	pe_create_node(data_set->localhost, data_set->localhost, NULL, 0,
	data_set);
	}

	return TRUE;
	}

	static void
	setup_container(pe_resource_t * rsc, pe_working_set_t * data_set)
	{
	const char *container_id = NULL;

	if (rsc->children) {
	g_list_foreach(rsc->children, (GFunc) setup_container, data_set);
	return;
	}

	container_id = g_hash_table_lookup(rsc->meta, XML_RSC_ATTR_CONTAINER);
	if (container_id && !pcmk__str_eq(container_id, rsc->id, pcmk__str_casei)) {
	pe_resource_t *container = pe_find_resource(data_set->resources, container_id);

	if (container) {
	rsc->container = container;
	pe__set_resource_flags(container, pe_rsc_is_container);
	container->fillers = g_list_append(container->fillers, rsc);
	pe_rsc_trace(rsc, "Resource %s's container is %s", rsc->id, container_id);
	} else {
	pe_err("Resource %s: Unknown resource container (%s)", rsc->id, container_id);
	}
	}
	}

	gboolean
	unpack_remote_nodes(xmlNode * xml_resources, pe_working_set_t * data_set)
	{
	xmlNode *xml_obj = NULL;

	/* Create remote nodes and guest nodes from the resource configuration
	* before unpacking resources.
	*/
	for (xml_obj = pcmk__xe_first_child(xml_resources); xml_obj != NULL;
	xml_obj = pcmk__xe_next(xml_obj)) {

	const char *new_node_id = NULL;

	/* Check for remote nodes, which are defined by ocf:pacemaker:remote
	* primitives.
	*/
	if (xml_contains_remote_node(xml_obj)) {
	new_node_id = ID(xml_obj);
	/* The "pe_find_node" check is here to make sure we don't iterate over
	* an expanded node that has already been added to the node list. */
	if (new_node_id && pe_find_node(data_set->nodes, new_node_id) == NULL) {
	crm_trace("Found remote node %s defined by resource %s",
	new_node_id, ID(xml_obj));
	pe_create_node(new_node_id, new_node_id, "remote", NULL,
	data_set);
	}
	continue;
	}

	/* Check for guest nodes, which are defined by special meta-attributes
	* of a primitive of any type (for example, VirtualDomain or Xen).
	*/
	if (pcmk__str_eq((const char *)xml_obj->name, XML_CIB_TAG_RESOURCE, pcmk__str_none)) {
	/* This will add an ocf:pacemaker:remote primitive to the
	* configuration for the guest node's connection, to be unpacked
	* later.
	*/
	new_node_id = expand_remote_rsc_meta(xml_obj, xml_resources, data_set);
	if (new_node_id && pe_find_node(data_set->nodes, new_node_id) == NULL) {
	crm_trace("Found guest node %s in resource %s",
	new_node_id, ID(xml_obj));
	pe_create_node(new_node_id, new_node_id, "remote", NULL,
	data_set);
	}
	continue;
	}

	/* Check for guest nodes inside a group. Clones are currently not
	* supported as guest nodes.
	*/
	if (pcmk__str_eq((const char *)xml_obj->name, XML_CIB_TAG_GROUP, pcmk__str_none)) {
	xmlNode *xml_obj2 = NULL;
	for (xml_obj2 = pcmk__xe_first_child(xml_obj); xml_obj2 != NULL;
	xml_obj2 = pcmk__xe_next(xml_obj2)) {

	new_node_id = expand_remote_rsc_meta(xml_obj2, xml_resources, data_set);

	if (new_node_id && pe_find_node(data_set->nodes, new_node_id) == NULL) {
	crm_trace("Found guest node %s in resource %s inside group %s",
	new_node_id, ID(xml_obj2), ID(xml_obj));
	pe_create_node(new_node_id, new_node_id, "remote", NULL,
	data_set);
	}
	}
	}
	}
	return TRUE;
	}

	/* Call this after all the nodes and resources have been
	* unpacked, but before the status section is read.
	*
	* A remote node's online status is reflected by the state
	* of the remote node's connection resource. We need to link
	* the remote node to this connection resource so we can have
	* easy access to the connection resource during the scheduler calculations.
	*/
	static void
	link_rsc2remotenode(pe_working_set_t data_set, pe_resource_t new_rsc)
	{
	pe_node_t *remote_node = NULL;

	if (new_rsc->is_remote_node == FALSE) {
	return;
	}

	if (pcmk_is_set(data_set->flags, pe_flag_quick_location)) {
	/* remote_nodes and remote_resources are not linked in quick location calculations */
	return;
	}

	remote_node = pe_find_node(data_set->nodes, new_rsc->id);
	CRM_CHECK(remote_node != NULL, return);

	pe_rsc_trace(new_rsc, "Linking remote connection resource %s to node %s",
	new_rsc->id, remote_node->details->uname);
	remote_node->details->remote_rsc = new_rsc;

	if (new_rsc->container == NULL) {
	/* Handle start-up fencing for remote nodes (as opposed to guest nodes)
	* the same as is done for cluster nodes.
	*/
	handle_startup_fencing(data_set, remote_node);

	} else {
	/* pe_create_node() marks the new node as "remote" or "cluster"; now
	* that we know the node is a guest node, update it correctly.
	*/
	g_hash_table_replace(remote_node->details->attrs, strdup(CRM_ATTR_KIND),
	strdup("container"));
	}
	}

	static void
	destroy_tag(gpointer data)
	{
	pe_tag_t *tag = data;

	if (tag) {
	free(tag->id);
	g_list_free_full(tag->refs, free);
	free(tag);
	}
	}

	/*!
	* \internal
	* \brief Parse configuration XML for resource information
	*
	* \param[in] xml_resources Top of resource configuration XML
	* \param[in,out] data_set Where to put resource information
	*
	* \return TRUE
	*
	* \note unpack_remote_nodes() MUST be called before this, so that the nodes can
	* be used when common_unpack() calls resource_location()
	*/
	gboolean
	unpack_resources(xmlNode * xml_resources, pe_working_set_t * data_set)
	{
	xmlNode *xml_obj = NULL;
	GList *gIter = NULL;

	data_set->template_rsc_sets = pcmk__strkey_table(free, destroy_tag);

	for (xml_obj = pcmk__xe_first_child(xml_resources); xml_obj != NULL;
	xml_obj = pcmk__xe_next(xml_obj)) {

	pe_resource_t *new_rsc = NULL;

	if (pcmk__str_eq((const char *)xml_obj->name, XML_CIB_TAG_RSC_TEMPLATE, pcmk__str_none)) {
	const char *template_id = ID(xml_obj);

	if (template_id && g_hash_table_lookup_extended(data_set->template_rsc_sets,
	template_id, NULL, NULL) == FALSE) {
	/* Record the template's ID for the knowledge of its existence anyway. */
	g_hash_table_insert(data_set->template_rsc_sets, strdup(template_id), NULL);
	}
	continue;
	}

	crm_trace("Beginning unpack... <%s id=%s... >", crm_element_name(xml_obj), ID(xml_obj));
	if (common_unpack(xml_obj, &new_rsc, NULL, data_set) && (new_rsc != NULL)) {
	data_set->resources = g_list_append(data_set->resources, new_rsc);
	pe_rsc_trace(new_rsc, "Added resource %s", new_rsc->id);

	} else {
	pcmk__config_err("Ignoring <%s> resource '%s' "
	"because configuration is invalid",
	crm_element_name(xml_obj),
	pcmk__s(ID(xml_obj), "(unnamed)"));
	if (new_rsc != NULL && new_rsc->fns != NULL) {
	new_rsc->fns->free(new_rsc);
	}
	}
	}

	for (gIter = data_set->resources; gIter != NULL; gIter = gIter->next) {
	pe_resource_t rsc = (pe_resource_t ) gIter->data;

	setup_container(rsc, data_set);
	link_rsc2remotenode(data_set, rsc);
	}

	data_set->resources = g_list_sort(data_set->resources, sort_rsc_priority);
	if (pcmk_is_set(data_set->flags, pe_flag_quick_location)) {
	/* Ignore */

	} else if (pcmk_is_set(data_set->flags, pe_flag_stonith_enabled)
	&& !pcmk_is_set(data_set->flags, pe_flag_have_stonith_resource)) {

	pcmk__config_err("Resource start-up disabled since no STONITH resources have been defined");
	pcmk__config_err("Either configure some or disable STONITH with the stonith-enabled option");
	pcmk__config_err("NOTE: Clusters with shared data need STONITH to ensure data integrity");
	}

	return TRUE;
	}

	gboolean
	unpack_tags(xmlNode * xml_tags, pe_working_set_t * data_set)
	{
	xmlNode *xml_tag = NULL;

	data_set->tags = pcmk__strkey_table(free, destroy_tag);

	for (xml_tag = pcmk__xe_first_child(xml_tags); xml_tag != NULL;
	xml_tag = pcmk__xe_next(xml_tag)) {

	xmlNode *xml_obj_ref = NULL;
	const char *tag_id = ID(xml_tag);

	if (!pcmk__str_eq((const char *)xml_tag->name, XML_CIB_TAG_TAG, pcmk__str_none)) {
	continue;
	}

	if (tag_id == NULL) {
	pcmk__config_err("Ignoring <%s> without " XML_ATTR_ID,
	crm_element_name(xml_tag));
	continue;
	}

	for (xml_obj_ref = pcmk__xe_first_child(xml_tag); xml_obj_ref != NULL;
	xml_obj_ref = pcmk__xe_next(xml_obj_ref)) {

	const char *obj_ref = ID(xml_obj_ref);

	if (!pcmk__str_eq((const char *)xml_obj_ref->name, XML_CIB_TAG_OBJ_REF, pcmk__str_none)) {
	continue;
	}

	if (obj_ref == NULL) {
	pcmk__config_err("Ignoring <%s> for tag '%s' without " XML_ATTR_ID,
	crm_element_name(xml_obj_ref), tag_id);
	continue;
	}

	if (add_tag_ref(data_set->tags, tag_id, obj_ref) == FALSE) {
	return FALSE;
	}
	}
	}

	return TRUE;
	}

	/* The ticket state section:
	* "/cib/status/tickets/ticket_state" */
	static gboolean
	unpack_ticket_state(xmlNode * xml_ticket, pe_working_set_t * data_set)
	{
	const char *ticket_id = NULL;
	const char *granted = NULL;
	const char *last_granted = NULL;
	const char *standby = NULL;
	xmlAttrPtr xIter = NULL;

	pe_ticket_t *ticket = NULL;

	ticket_id = ID(xml_ticket);
	if (pcmk__str_empty(ticket_id)) {
	return FALSE;
	}

	crm_trace("Processing ticket state for %s", ticket_id);

	ticket = g_hash_table_lookup(data_set->tickets, ticket_id);
	if (ticket == NULL) {
	ticket = ticket_new(ticket_id, data_set);
	if (ticket == NULL) {
	return FALSE;
	}
	}

	for (xIter = xml_ticket->properties; xIter; xIter = xIter->next) {
	const char prop_name = (const char )xIter->name;
	const char *prop_value = crm_element_value(xml_ticket, prop_name);

	if (pcmk__str_eq(prop_name, XML_ATTR_ID, pcmk__str_none)) {
	continue;
	}
	g_hash_table_replace(ticket->state, strdup(prop_name), strdup(prop_value));
	}

	granted = g_hash_table_lookup(ticket->state, "granted");
	if (granted && crm_is_true(granted)) {
	ticket->granted = TRUE;
	crm_info("We have ticket '%s'", ticket->id);
	} else {
	ticket->granted = FALSE;
	crm_info("We do not have ticket '%s'", ticket->id);
	}

	last_granted = g_hash_table_lookup(ticket->state, "last-granted");
	if (last_granted) {
	long long last_granted_ll;

	pcmk__scan_ll(last_granted, &last_granted_ll, 0LL);
	ticket->last_granted = (time_t) last_granted_ll;
	}

	standby = g_hash_table_lookup(ticket->state, "standby");
	if (standby && crm_is_true(standby)) {
	ticket->standby = TRUE;
	if (ticket->granted) {
	crm_info("Granted ticket '%s' is in standby-mode", ticket->id);
	}
	} else {
	ticket->standby = FALSE;
	}

	crm_trace("Done with ticket state for %s", ticket_id);

	return TRUE;
	}

	static gboolean
	unpack_tickets_state(xmlNode * xml_tickets, pe_working_set_t * data_set)
	{
	xmlNode *xml_obj = NULL;

	for (xml_obj = pcmk__xe_first_child(xml_tickets); xml_obj != NULL;
	xml_obj = pcmk__xe_next(xml_obj)) {

	if (!pcmk__str_eq((const char *)xml_obj->name, XML_CIB_TAG_TICKET_STATE, pcmk__str_none)) {
	continue;
	}
	unpack_ticket_state(xml_obj, data_set);
	}

	return TRUE;
	}

	static void
	unpack_handle_remote_attrs(pe_node_t this_node, xmlNode state, pe_working_set_t * data_set)
	{
	const char *resource_discovery_enabled = NULL;
	xmlNode *attrs = NULL;
	pe_resource_t *rsc = NULL;

	if (!pcmk__str_eq((const char *)state->name, XML_CIB_TAG_STATE, pcmk__str_none)) {
	return;
	}

	if ((this_node == NULL) \|\| !pe__is_guest_or_remote_node(this_node)) {
	return;
	}
	crm_trace("Processing remote node id=%s, uname=%s", this_node->details->id, this_node->details->uname);

	pcmk__scan_min_int(crm_element_value(state, XML_NODE_IS_MAINTENANCE),
	&(this_node->details->remote_maintenance), 0);

	rsc = this_node->details->remote_rsc;
	if (this_node->details->remote_requires_reset == FALSE) {
	this_node->details->unclean = FALSE;
	this_node->details->unseen = FALSE;
	}
	attrs = find_xml_node(state, XML_TAG_TRANSIENT_NODEATTRS, FALSE);
	add_node_attrs(attrs, this_node, TRUE, data_set);

	if (pe__shutdown_requested(this_node)) {
	crm_info("Node %s is shutting down", this_node->details->uname);
	this_node->details->shutdown = TRUE;
	}

	if (crm_is_true(pe_node_attribute_raw(this_node, "standby"))) {
	crm_info("Node %s is in standby-mode", this_node->details->uname);
	this_node->details->standby = TRUE;
	}

	if (crm_is_true(pe_node_attribute_raw(this_node, "maintenance")) \|\|
	((rsc != NULL) && !pcmk_is_set(rsc->flags, pe_rsc_managed))) {
	crm_info("Node %s is in maintenance-mode", this_node->details->uname);
	this_node->details->maintenance = TRUE;
	}

	resource_discovery_enabled = pe_node_attribute_raw(this_node, XML_NODE_ATTR_RSC_DISCOVERY);
	if (resource_discovery_enabled && !crm_is_true(resource_discovery_enabled)) {
	if (pe__is_remote_node(this_node)
	&& !pcmk_is_set(data_set->flags, pe_flag_stonith_enabled)) {
	crm_warn("Ignoring %s attribute on remote node %s because stonith is disabled",
	XML_NODE_ATTR_RSC_DISCOVERY, this_node->details->uname);
	} else {
	/* This is either a remote node with fencing enabled, or a guest
	* node. We don't care whether fencing is enabled when fencing guest
	* nodes, because they are "fenced" by recovering their containing
	* resource.
	*/
	crm_info("Node %s has resource discovery disabled", this_node->details->uname);
	this_node->details->rsc_discovery_enabled = FALSE;
	}
	}
	}

	/*!
	* \internal
	* \brief Unpack a cluster node's transient attributes
	*
	* \param[in] state CIB node state XML
	* \param[in] node Cluster node whose attributes are being unpacked
	* \param[in] data_set Cluster working set
	*/
	static void
	unpack_transient_attributes(xmlNode state, pe_node_t node,
	pe_working_set_t *data_set)
	{
	const char *discovery = NULL;
	xmlNode *attrs = find_xml_node(state, XML_TAG_TRANSIENT_NODEATTRS, FALSE);

	add_node_attrs(attrs, node, TRUE, data_set);

	if (crm_is_true(pe_node_attribute_raw(node, "standby"))) {
	crm_info("Node %s is in standby-mode", node->details->uname);
	node->details->standby = TRUE;
	}

	if (crm_is_true(pe_node_attribute_raw(node, "maintenance"))) {
	crm_info("Node %s is in maintenance-mode", node->details->uname);
	node->details->maintenance = TRUE;
	}

	discovery = pe_node_attribute_raw(node, XML_NODE_ATTR_RSC_DISCOVERY);
	if ((discovery != NULL) && !crm_is_true(discovery)) {
	crm_warn("Ignoring %s attribute for node %s because disabling "
	"resource discovery is not allowed for cluster nodes",
	XML_NODE_ATTR_RSC_DISCOVERY, node->details->uname);
	}
	}

	/*!
	* \internal
	* \brief Unpack a node state entry (first pass)
	*
	* Unpack one node state entry from status. This unpacks information from the
	* node_state element itself and node attributes inside it, but not the
	* resource history inside it. Multiple passes through the status are needed to
	* fully unpack everything.
	*
	* \param[in] state CIB node state XML
	* \param[in] data_set Cluster working set
	*/
	static void
	unpack_node_state(xmlNode state, pe_working_set_t data_set)
	{
	const char *id = NULL;
	const char *uname = NULL;
	pe_node_t *this_node = NULL;

	id = crm_element_value(state, XML_ATTR_ID);
	if (id == NULL) {
	crm_warn("Ignoring malformed " XML_CIB_TAG_STATE " entry without "
	XML_ATTR_ID);
	return;
	}

	uname = crm_element_value(state, XML_ATTR_UNAME);
	if (uname == NULL) {
	crm_warn("Ignoring malformed " XML_CIB_TAG_STATE " entry without "
	XML_ATTR_UNAME);
	return;
	}

	this_node = pe_find_node_any(data_set->nodes, id, uname);
	if (this_node == NULL) {
	pcmk__config_warn("Ignoring recorded node state for '%s' because "
	"it is no longer in the configuration", uname);
	return;
	}

	if (pe__is_guest_or_remote_node(this_node)) {
	/* We can't determine the online status of Pacemaker Remote nodes until
	* after all resource history has been unpacked. In this first pass, we
	* do need to mark whether the node has been fenced, as this plays a
	* role during unpacking cluster node resource state.
	*/
	pcmk__scan_min_int(crm_element_value(state, XML_NODE_IS_FENCED),
	&(this_node->details->remote_was_fenced), 0);
	return;
	}

	unpack_transient_attributes(state, this_node, data_set);

	/* Provisionally mark this cluster node as clean. We have at least seen it
	* in the current cluster's lifetime.
	*/
	this_node->details->unclean = FALSE;
	this_node->details->unseen = FALSE;

	crm_trace("Determining online status of cluster node %s (id %s)",
	this_node->details->uname, id);
	determine_online_status(state, this_node, data_set);

	if (!pcmk_is_set(data_set->flags, pe_flag_have_quorum)
	&& this_node->details->online
	&& (data_set->no_quorum_policy == no_quorum_suicide)) {
	/* Everything else should flow from this automatically
	* (at least until the scheduler becomes able to migrate off
	* healthy resources)
	*/
	pe_fence_node(data_set, this_node, "cluster does not have quorum",
	FALSE);
	}
	}

	/*!
	* \internal
	* \brief Unpack nodes' resource history as much as possible
	*
	* Unpack as many nodes' resource history as possible in one pass through the
	* status. We need to process Pacemaker Remote nodes' connections/containers
	* before unpacking their history; the connection/container history will be
	* in another node's history, so it might take multiple passes to unpack
	* everything.
	*
	* \param[in] status CIB XML status section
	* \param[in] fence If true, treat any not-yet-unpacked nodes as unseen
	* \param[in] data_set Cluster working set
	*
	* \return Standard Pacemaker return code (specifically pcmk_rc_ok if done,
	* or EAGAIN if more unpacking remains to be done)
	*/
	static int
	unpack_node_history(xmlNode status, bool fence, pe_working_set_t data_set)
	{
	int rc = pcmk_rc_ok;

	// Loop through all node_state entries in CIB status
	for (xmlNode *state = first_named_child(status, XML_CIB_TAG_STATE);
	state != NULL; state = crm_next_same_xml(state)) {

	const char *id = ID(state);
	const char *uname = crm_element_value(state, XML_ATTR_UNAME);
	pe_node_t *this_node = NULL;

	if ((id == NULL) \|\| (uname == NULL)) {
	// Warning already logged in first pass through status section
	crm_trace("Not unpacking resource history from malformed "
	XML_CIB_TAG_STATE " without id and/or uname");
	continue;
	}

	this_node = pe_find_node_any(data_set->nodes, id, uname);
	if (this_node == NULL) {
	// Warning already logged in first pass through status section
	crm_trace("Not unpacking resource history for node %s because "
	"no longer in configuration", id);
	continue;
	}

	if (this_node->details->unpacked) {
	crm_trace("Not unpacking resource history for node %s because "
	"already unpacked", id);
	continue;
	}

	if (fence) {
	// We're processing all remaining nodes

	} else if (pe__is_guest_node(this_node)) {
	/* We can unpack a guest node's history only after we've unpacked
	* other resource history to the point that we know that the node's
	* connection and containing resource are both up.
	*/
	pe_resource_t *rsc = this_node->details->remote_rsc;

	if ((rsc == NULL) \|\| (rsc->role != RSC_ROLE_STARTED)
	\|\| (rsc->container->role != RSC_ROLE_STARTED)) {
	crm_trace("Not unpacking resource history for guest node %s "
	"because container and connection are not known to "
	"be up", id);
	continue;
	}

	} else if (pe__is_remote_node(this_node)) {
	/* We can unpack a remote node's history only after we've unpacked
	* other resource history to the point that we know that the node's
	* connection is up, with the exception of when shutdown locks are
	* in use.
	*/
	pe_resource_t *rsc = this_node->details->remote_rsc;

	if ((rsc == NULL)
	\|\| (!pcmk_is_set(data_set->flags, pe_flag_shutdown_lock)
	&& (rsc->role != RSC_ROLE_STARTED))) {
	crm_trace("Not unpacking resource history for remote node %s "
	"because connection is not known to be up", id);
	continue;
	}

	/* If fencing and shutdown locks are disabled and we're not processing
	* unseen nodes, then we don't want to unpack offline nodes until online
	* nodes have been unpacked. This allows us to number active clone
	* instances first.
	*/
	} else if (!pcmk_any_flags_set(data_set->flags, pe_flag_stonith_enabled
	\|pe_flag_shutdown_lock)
	&& !this_node->details->online) {
	crm_trace("Not unpacking resource history for offline "
	"cluster node %s", id);
	continue;
	}

	if (pe__is_guest_or_remote_node(this_node)) {
	determine_remote_online_status(data_set, this_node);
	unpack_handle_remote_attrs(this_node, state, data_set);
	}

	crm_trace("Unpacking resource history for %snode %s",
	(fence? "unseen " : ""), id);

	this_node->details->unpacked = TRUE;
	unpack_node_lrm(this_node, state, data_set);

	rc = EAGAIN; // Other node histories might depend on this one
	}
	return rc;
	}

	/* remove nodes that are down, stopping */
	/* create positive rsc_to_node constraints between resources and the nodes they are running on */
	/* anything else? */
	gboolean
	unpack_status(xmlNode * status, pe_working_set_t * data_set)
	{
	xmlNode *state = NULL;

	crm_trace("Beginning unpack");

	if (data_set->tickets == NULL) {
	data_set->tickets = pcmk__strkey_table(free, destroy_ticket);
	}

	for (state = pcmk__xe_first_child(status); state != NULL;
	state = pcmk__xe_next(state)) {

	if (pcmk__str_eq((const char *)state->name, XML_CIB_TAG_TICKETS, pcmk__str_none)) {
	unpack_tickets_state((xmlNode *) state, data_set);

	} else if (pcmk__str_eq((const char *)state->name, XML_CIB_TAG_STATE, pcmk__str_none)) {
	unpack_node_state(state, data_set);
	}
	}

	while (unpack_node_history(status, FALSE, data_set) == EAGAIN) {
	crm_trace("Another pass through node resource histories is needed");
	}

	// Now catch any nodes we didn't see
	unpack_node_history(status,
	pcmk_is_set(data_set->flags, pe_flag_stonith_enabled),
	data_set);

	/* Now that we know where resources are, we can schedule stops of containers
	* with failed bundle connections
	*/
	if (data_set->stop_needed != NULL) {
	for (GList *item = data_set->stop_needed; item; item = item->next) {
	pe_resource_t *container = item->data;
	pe_node_t *node = pe__current_node(container);

	if (node) {
	stop_action(container, node, FALSE);
	}
	}
	g_list_free(data_set->stop_needed);
	data_set->stop_needed = NULL;
	}

	/* Now that we know status of all Pacemaker Remote connections and nodes,
	* we can stop connections for node shutdowns, and check the online status
	* of remote/guest nodes that didn't have any node history to unpack.
	*/
	for (GList *gIter = data_set->nodes; gIter != NULL; gIter = gIter->next) {
	pe_node_t *this_node = gIter->data;

	if (!pe__is_guest_or_remote_node(this_node)) {
	continue;
	}
	if (this_node->details->shutdown
	&& (this_node->details->remote_rsc != NULL)) {
	pe__set_next_role(this_node->details->remote_rsc, RSC_ROLE_STOPPED,
	"remote shutdown");
	}
	if (!this_node->details->unpacked) {
	determine_remote_online_status(data_set, this_node);
	}
	}

	return TRUE;
	}

	static gboolean
	determine_online_status_no_fencing(pe_working_set_t * data_set, xmlNode * node_state,
	pe_node_t * this_node)
	{
	gboolean online = FALSE;
	const char *join = crm_element_value(node_state, XML_NODE_JOIN_STATE);
	const char *is_peer = crm_element_value(node_state, XML_NODE_IS_PEER);
	const char *in_cluster = crm_element_value(node_state, XML_NODE_IN_CLUSTER);
	const char *exp_state = crm_element_value(node_state, XML_NODE_EXPECTED);

	if (!crm_is_true(in_cluster)) {
	crm_trace("Node is down: in_cluster=%s",
	pcmk__s(in_cluster, "<null>"));

	} else if (pcmk__str_eq(is_peer, ONLINESTATUS, pcmk__str_casei)) {
	if (pcmk__str_eq(join, CRMD_JOINSTATE_MEMBER, pcmk__str_casei)) {
	online = TRUE;
	} else {
	crm_debug("Node is not ready to run resources: %s", join);
	}

	} else if (this_node->details->expected_up == FALSE) {
	crm_trace("Controller is down: "
	"in_cluster=%s is_peer=%s join=%s expected=%s",
	pcmk__s(in_cluster, "<null>"), pcmk__s(is_peer, "<null>"),
	pcmk__s(join, "<null>"), pcmk__s(exp_state, "<null>"));

	} else {
	/* mark it unclean */
	pe_fence_node(data_set, this_node, "peer is unexpectedly down", FALSE);
	crm_info("in_cluster=%s is_peer=%s join=%s expected=%s",
	pcmk__s(in_cluster, "<null>"), pcmk__s(is_peer, "<null>"),
	pcmk__s(join, "<null>"), pcmk__s(exp_state, "<null>"));
	}
	return online;
	}

	static gboolean
	determine_online_status_fencing(pe_working_set_t * data_set, xmlNode * node_state,
	pe_node_t * this_node)
	{
	gboolean online = FALSE;
	gboolean do_terminate = FALSE;
	bool crmd_online = FALSE;
	const char *join = crm_element_value(node_state, XML_NODE_JOIN_STATE);
	const char *is_peer = crm_element_value(node_state, XML_NODE_IS_PEER);
	const char *in_cluster = crm_element_value(node_state, XML_NODE_IN_CLUSTER);
	const char *exp_state = crm_element_value(node_state, XML_NODE_EXPECTED);
	const char *terminate = pe_node_attribute_raw(this_node, "terminate");

	/*
	- XML_NODE_IN_CLUSTER ::= true\|false
	- XML_NODE_IS_PEER ::= online\|offline
	- XML_NODE_JOIN_STATE ::= member\|down\|pending\|banned
	- XML_NODE_EXPECTED ::= member\|down
	*/

	if (crm_is_true(terminate)) {
	do_terminate = TRUE;

	} else if (terminate != NULL && strlen(terminate) > 0) {
	/* could be a time() value */
	char t = terminate[0];

	if (t != '0' && isdigit(t)) {
	do_terminate = TRUE;
	}
	}

	crm_trace("%s: in_cluster=%s is_peer=%s join=%s expected=%s term=%d",
	this_node->details->uname, pcmk__s(in_cluster, "<null>"),
	pcmk__s(is_peer, "<null>"), pcmk__s(join, "<null>"),
	pcmk__s(exp_state, "<null>"), do_terminate);

	online = crm_is_true(in_cluster);
	crmd_online = pcmk__str_eq(is_peer, ONLINESTATUS, pcmk__str_casei);
	if (exp_state == NULL) {
	exp_state = CRMD_JOINSTATE_DOWN;
	}

	if (this_node->details->shutdown) {
	crm_debug("%s is shutting down", this_node->details->uname);

	/* Slightly different criteria since we can't shut down a dead peer */
	online = crmd_online;

	} else if (in_cluster == NULL) {
	pe_fence_node(data_set, this_node, "peer has not been seen by the cluster", FALSE);

	} else if (pcmk__str_eq(join, CRMD_JOINSTATE_NACK, pcmk__str_casei)) {
	pe_fence_node(data_set, this_node,
	"peer failed Pacemaker membership criteria", FALSE);

	} else if (do_terminate == FALSE && pcmk__str_eq(exp_state, CRMD_JOINSTATE_DOWN, pcmk__str_casei)) {

	if (crm_is_true(in_cluster) \|\| crmd_online) {
	crm_info("- Node %s is not ready to run resources", this_node->details->uname);
	this_node->details->standby = TRUE;
	this_node->details->pending = TRUE;

	} else {
	crm_trace("%s is down or still coming up", this_node->details->uname);
	}

	} else if (do_terminate && pcmk__str_eq(join, CRMD_JOINSTATE_DOWN, pcmk__str_casei)
	&& crm_is_true(in_cluster) == FALSE && !crmd_online) {
	crm_info("Node %s was just shot", this_node->details->uname);
	online = FALSE;

	} else if (crm_is_true(in_cluster) == FALSE) {
	// Consider `priority-fencing-delay` for lost nodes
	pe_fence_node(data_set, this_node, "peer is no longer part of the cluster", TRUE);

	} else if (!crmd_online) {
	pe_fence_node(data_set, this_node, "peer process is no longer available", FALSE);

	/* Everything is running at this point, now check join state */
	} else if (do_terminate) {
	pe_fence_node(data_set, this_node, "termination was requested", FALSE);

	} else if (pcmk__str_eq(join, CRMD_JOINSTATE_MEMBER, pcmk__str_casei)) {
	crm_info("Node %s is active", this_node->details->uname);

	} else if (pcmk__strcase_any_of(join, CRMD_JOINSTATE_PENDING, CRMD_JOINSTATE_DOWN, NULL)) {
	crm_info("Node %s is not ready to run resources", this_node->details->uname);
	this_node->details->standby = TRUE;
	this_node->details->pending = TRUE;

	} else {
	pe_fence_node(data_set, this_node, "peer was in an unknown state", FALSE);
	crm_warn("%s: in-cluster=%s is-peer=%s join=%s expected=%s term=%d shutdown=%d",
	this_node->details->uname, pcmk__s(in_cluster, "<null>"),
	pcmk__s(is_peer, "<null>"), pcmk__s(join, "<null>"),
	pcmk__s(exp_state, "<null>"), do_terminate,
	this_node->details->shutdown);
	}

	return online;
	}

	static void
	determine_remote_online_status(pe_working_set_t * data_set, pe_node_t * this_node)
	{
	pe_resource_t *rsc = this_node->details->remote_rsc;
	pe_resource_t *container = NULL;
	pe_node_t *host = NULL;

	/* If there is a node state entry for a (former) Pacemaker Remote node
	* but no resource creating that node, the node's connection resource will
	* be NULL. Consider it an offline remote node in that case.
	*/
	if (rsc == NULL) {
	this_node->details->online = FALSE;
	goto remote_online_done;
	}

	container = rsc->container;

	if (container && pcmk__list_of_1(rsc->running_on)) {
	host = rsc->running_on->data;
	}

	/* If the resource is currently started, mark it online. */
	if (rsc->role == RSC_ROLE_STARTED) {
	crm_trace("%s node %s presumed ONLINE because connection resource is started",
	(container? "Guest" : "Remote"), this_node->details->id);
	this_node->details->online = TRUE;
	}

	/* consider this node shutting down if transitioning start->stop */
	if (rsc->role == RSC_ROLE_STARTED && rsc->next_role == RSC_ROLE_STOPPED) {
	crm_trace("%s node %s shutting down because connection resource is stopping",
	(container? "Guest" : "Remote"), this_node->details->id);
	this_node->details->shutdown = TRUE;
	}

	/* Now check all the failure conditions. */
	if(container && pcmk_is_set(container->flags, pe_rsc_failed)) {
	crm_trace("Guest node %s UNCLEAN because guest resource failed",
	this_node->details->id);
	this_node->details->online = FALSE;
	this_node->details->remote_requires_reset = TRUE;

	} else if (pcmk_is_set(rsc->flags, pe_rsc_failed)) {
	crm_trace("%s node %s OFFLINE because connection resource failed",
	(container? "Guest" : "Remote"), this_node->details->id);
	this_node->details->online = FALSE;

	} else if (rsc->role == RSC_ROLE_STOPPED
	\|\| (container && container->role == RSC_ROLE_STOPPED)) {

	crm_trace("%s node %s OFFLINE because its resource is stopped",
	(container? "Guest" : "Remote"), this_node->details->id);
	this_node->details->online = FALSE;
	this_node->details->remote_requires_reset = FALSE;

	} else if (host && (host->details->online == FALSE)
	&& host->details->unclean) {
	crm_trace("Guest node %s UNCLEAN because host is unclean",
	this_node->details->id);
	this_node->details->online = FALSE;
	this_node->details->remote_requires_reset = TRUE;
	}

	remote_online_done:
	crm_trace("Remote node %s online=%s",
	this_node->details->id, this_node->details->online ? "TRUE" : "FALSE");
	}

	static void
	determine_online_status(xmlNode * node_state, pe_node_t * this_node, pe_working_set_t * data_set)
	{
	gboolean online = FALSE;
	const char *exp_state = crm_element_value(node_state, XML_NODE_EXPECTED);

	CRM_CHECK(this_node != NULL, return);

	this_node->details->shutdown = FALSE;
	this_node->details->expected_up = FALSE;

	if (pe__shutdown_requested(this_node)) {
	this_node->details->shutdown = TRUE;

	} else if (pcmk__str_eq(exp_state, CRMD_JOINSTATE_MEMBER, pcmk__str_casei)) {
	this_node->details->expected_up = TRUE;
	}

	if (this_node->details->type == node_ping) {
	this_node->details->unclean = FALSE;
	online = FALSE; /* As far as resource management is concerned,
	* the node is safely offline.
	* Anyone caught abusing this logic will be shot
	*/

	} else if (!pcmk_is_set(data_set->flags, pe_flag_stonith_enabled)) {
	online = determine_online_status_no_fencing(data_set, node_state, this_node);

	} else {
	online = determine_online_status_fencing(data_set, node_state, this_node);
	}

	if (online) {
	this_node->details->online = TRUE;

	} else {
	/* remove node from contention */
	this_node->fixed = TRUE;
	this_node->weight = -INFINITY;
	}

	if (online && this_node->details->shutdown) {
	/* don't run resources here */
	this_node->fixed = TRUE;
	this_node->weight = -INFINITY;
	}

	if (this_node->details->type == node_ping) {
	crm_info("Node %s is not a Pacemaker node", this_node->details->uname);

	} else if (this_node->details->unclean) {
	pe_proc_warn("Node %s is unclean", this_node->details->uname);

	} else if (this_node->details->online) {
	crm_info("Node %s is %s", this_node->details->uname,
	this_node->details->shutdown ? "shutting down" :
	this_node->details->pending ? "pending" :
	this_node->details->standby ? "standby" :
	this_node->details->maintenance ? "maintenance" : "online");

	} else {
	crm_trace("Node %s is offline", this_node->details->uname);
	}
	}

	/*!
	* \internal
	* \brief Find the end of a resource's name, excluding any clone suffix
	*
	* \param[in] id Resource ID to check
	*
	* \return Pointer to last character of resource's base name
	*/
	const char *
	pe_base_name_end(const char *id)
	{
	if (!pcmk__str_empty(id)) {
	const char *end = id + strlen(id) - 1;

	for (const char *s = end; s > id; --s) {
	switch (*s) {
	case '0':
	case '1':
	case '2':
	case '3':
	case '4':
	case '5':
	case '6':
	case '7':
	case '8':
	case '9':
	break;
	case ':':
	return (s == end)? s : (s - 1);
	default:
	return end;
	}
	}
	return end;
	}
	return NULL;
	}

	/*!
	* \internal
	* \brief Get a resource name excluding any clone suffix
	*
	* \param[in] last_rsc_id Resource ID to check
	*
	* \return Pointer to newly allocated string with resource's base name
	* \note It is the caller's responsibility to free() the result.
	* This asserts on error, so callers can assume result is not NULL.
	*/
	char *
	clone_strip(const char *last_rsc_id)
	{
	const char *end = pe_base_name_end(last_rsc_id);
	char *basename = NULL;

	CRM_ASSERT(end);
	basename = strndup(last_rsc_id, end - last_rsc_id + 1);
	CRM_ASSERT(basename);
	return basename;
	}

	/*!
	* \internal
	* \brief Get the name of the first instance of a cloned resource
	*
	* \param[in] last_rsc_id Resource ID to check
	*
	* \return Pointer to newly allocated string with resource's base name plus :0
	* \note It is the caller's responsibility to free() the result.
	* This asserts on error, so callers can assume result is not NULL.
	*/
	char *
	clone_zero(const char *last_rsc_id)
	{
	const char *end = pe_base_name_end(last_rsc_id);
	size_t base_name_len = end - last_rsc_id + 1;
	char *zero = NULL;

	CRM_ASSERT(end);
	zero = calloc(base_name_len + 3, sizeof(char));
	CRM_ASSERT(zero);
	memcpy(zero, last_rsc_id, base_name_len);
	zero[base_name_len] = ':';
	zero[base_name_len + 1] = '0';
	return zero;
	}

	static pe_resource_t *
	create_fake_resource(const char rsc_id, xmlNode rsc_entry, pe_working_set_t * data_set)
	{
	pe_resource_t *rsc = NULL;
	xmlNode *xml_rsc = create_xml_node(NULL, XML_CIB_TAG_RESOURCE);

	copy_in_properties(xml_rsc, rsc_entry);
	crm_xml_add(xml_rsc, XML_ATTR_ID, rsc_id);
	crm_log_xml_debug(xml_rsc, "Orphan resource");

	if (!common_unpack(xml_rsc, &rsc, NULL, data_set)) {
	return NULL;
	}

	if (xml_contains_remote_node(xml_rsc)) {
	pe_node_t *node;

	crm_debug("Detected orphaned remote node %s", rsc_id);
	node = pe_find_node(data_set->nodes, rsc_id);
	if (node == NULL) {
	node = pe_create_node(rsc_id, rsc_id, "remote", NULL, data_set);
	}
	link_rsc2remotenode(data_set, rsc);

	if (node) {
	crm_trace("Setting node %s as shutting down due to orphaned connection resource", rsc_id);
	node->details->shutdown = TRUE;
	}
	}

	if (crm_element_value(rsc_entry, XML_RSC_ATTR_CONTAINER)) {
	/* This orphaned rsc needs to be mapped to a container. */
	crm_trace("Detected orphaned container filler %s", rsc_id);
	pe__set_resource_flags(rsc, pe_rsc_orphan_container_filler);
	}
	pe__set_resource_flags(rsc, pe_rsc_orphan);
	data_set->resources = g_list_append(data_set->resources, rsc);
	return rsc;
	}

	/*!
	* \internal
	* \brief Create orphan instance for anonymous clone resource history
	*/
	static pe_resource_t *
	create_anonymous_orphan(pe_resource_t parent, const char rsc_id,
	pe_node_t node, pe_working_set_t data_set)
	{
	pe_resource_t *top = pe__create_clone_child(parent, data_set);

	// find_rsc() because we might be a cloned group
	pe_resource_t *orphan = top->fns->find_rsc(top, rsc_id, NULL, pe_find_clone);

	pe_rsc_debug(parent, "Created orphan %s for %s: %s on %s",
	top->id, parent->id, rsc_id, node->details->uname);
	return orphan;
	}

	/*!
	* \internal
	* \brief Check a node for an instance of an anonymous clone
	*
	* Return a child instance of the specified anonymous clone, in order of
	* preference: (1) the instance running on the specified node, if any;
	* (2) an inactive instance (i.e. within the total of clone-max instances);
	* (3) a newly created orphan (i.e. clone-max instances are already active).
	*
	* \param[in] data_set Cluster information
	* \param[in] node Node on which to check for instance
	* \param[in] parent Clone to check
	* \param[in] rsc_id Name of cloned resource in history (without instance)
	*/
	static pe_resource_t *
	find_anonymous_clone(pe_working_set_t * data_set, pe_node_t * node, pe_resource_t * parent,
	const char *rsc_id)
	{
	GList *rIter = NULL;
	pe_resource_t *rsc = NULL;
	pe_resource_t *inactive_instance = NULL;
	gboolean skip_inactive = FALSE;

	CRM_ASSERT(parent != NULL);
	CRM_ASSERT(pe_rsc_is_clone(parent));
	CRM_ASSERT(!pcmk_is_set(parent->flags, pe_rsc_unique));

	// Check for active (or partially active, for cloned groups) instance
	pe_rsc_trace(parent, "Looking for %s on %s in %s", rsc_id, node->details->uname, parent->id);
	for (rIter = parent->children; rsc == NULL && rIter; rIter = rIter->next) {
	GList *locations = NULL;
	pe_resource_t *child = rIter->data;

	/* Check whether this instance is already known to be active or pending
	* anywhere, at this stage of unpacking. Because this function is called
	* for a resource before the resource's individual operation history
	* entries are unpacked, locations will generally not contain the
	* desired node.
	*
	* However, there are three exceptions:
	* (1) when child is a cloned group and we have already unpacked the
	* history of another member of the group on the same node;
	* (2) when we've already unpacked the history of another numbered
	* instance on the same node (which can happen if globally-unique
	* was flipped from true to false); and
	* (3) when we re-run calculations on the same data set as part of a
	* simulation.
	*/
	child->fns->location(child, &locations, 2);
	if (locations) {
	/* We should never associate the same numbered anonymous clone
	* instance with multiple nodes, and clone instances can't migrate,
	* so there must be only one location, regardless of history.
	*/
	CRM_LOG_ASSERT(locations->next == NULL);

	if (((pe_node_t *)locations->data)->details == node->details) {
	/* This child instance is active on the requested node, so check
	* for a corresponding configured resource. We use find_rsc()
	* instead of child because child may be a cloned group, and we
	* need the particular member corresponding to rsc_id.
	*
	* If the history entry is orphaned, rsc will be NULL.
	*/
	rsc = parent->fns->find_rsc(child, rsc_id, NULL, pe_find_clone);
	if (rsc) {
	/* If there are multiple instance history entries for an
	* anonymous clone in a single node's history (which can
	* happen if globally-unique is switched from true to
	* false), we want to consider the instances beyond the
	* first as orphans, even if there are inactive instance
	* numbers available.
	*/
	if (rsc->running_on) {
	crm_notice("Active (now-)anonymous clone %s has "
	"multiple (orphan) instance histories on %s",
	parent->id, node->details->uname);
	skip_inactive = TRUE;
	rsc = NULL;
	} else {
	pe_rsc_trace(parent, "Resource %s, active", rsc->id);
	}
	}
	}
	g_list_free(locations);

	} else {
	pe_rsc_trace(parent, "Resource %s, skip inactive", child->id);
	if (!skip_inactive && !inactive_instance
	&& !pcmk_is_set(child->flags, pe_rsc_block)) {
	// Remember one inactive instance in case we don't find active
	inactive_instance = parent->fns->find_rsc(child, rsc_id, NULL,
	pe_find_clone);

	/* ... but don't use it if it was already associated with a
	* pending action on another node
	*/
	if (inactive_instance && inactive_instance->pending_node
	&& (inactive_instance->pending_node->details != node->details)) {
	inactive_instance = NULL;
	}
	}
	}
	}

	if ((rsc == NULL) && !skip_inactive && (inactive_instance != NULL)) {
	pe_rsc_trace(parent, "Resource %s, empty slot", inactive_instance->id);
	rsc = inactive_instance;
	}

	/* If the resource has "requires" set to "quorum" or "nothing", and we don't
	* have a clone instance for every node, we don't want to consume a valid
	* instance number for unclean nodes. Such instances may appear to be active
	* according to the history, but should be considered inactive, so we can
	* start an instance elsewhere. Treat such instances as orphans.
	*
	* An exception is instances running on guest nodes -- since guest node
	* "fencing" is actually just a resource stop, requires shouldn't apply.
	*
	* @TODO Ideally, we'd use an inactive instance number if it is not needed
	* for any clean instances. However, we don't know that at this point.
	*/
	if ((rsc != NULL) && !pcmk_is_set(rsc->flags, pe_rsc_needs_fencing)
	&& (!node->details->online \|\| node->details->unclean)
	&& !pe__is_guest_node(node)
	&& !pe__is_universal_clone(parent, data_set)) {

	rsc = NULL;
	}

	if (rsc == NULL) {
	rsc = create_anonymous_orphan(parent, rsc_id, node, data_set);
	pe_rsc_trace(parent, "Resource %s, orphan", rsc->id);
	}
	return rsc;
	}

	static pe_resource_t *
	unpack_find_resource(pe_working_set_t * data_set, pe_node_t * node, const char *rsc_id,
	xmlNode * rsc_entry)
	{
	pe_resource_t *rsc = NULL;
	pe_resource_t *parent = NULL;

	crm_trace("looking for %s", rsc_id);
	rsc = pe_find_resource(data_set->resources, rsc_id);

	if (rsc == NULL) {
	/* If we didn't find the resource by its name in the operation history,
	* check it again as a clone instance. Even when clone-max=0, we create
	* a single :0 orphan to match against here.
	*/
	char *clone0_id = clone_zero(rsc_id);
	pe_resource_t *clone0 = pe_find_resource(data_set->resources, clone0_id);

	if (clone0 && !pcmk_is_set(clone0->flags, pe_rsc_unique)) {
	rsc = clone0;
	parent = uber_parent(clone0);
	crm_trace("%s found as %s (%s)", rsc_id, clone0_id, parent->id);
	} else {
	crm_trace("%s is not known as %s either (orphan)",
	rsc_id, clone0_id);
	}
	free(clone0_id);

	} else if (rsc->variant > pe_native) {
	crm_trace("Resource history for %s is orphaned because it is no longer primitive",
	rsc_id);
	return NULL;

	} else {
	parent = uber_parent(rsc);
	}

	if (pe_rsc_is_anon_clone(parent)) {

	if (pe_rsc_is_bundled(parent)) {
	rsc = pe__find_bundle_replica(parent->parent, node);
	} else {
	char *base = clone_strip(rsc_id);

	rsc = find_anonymous_clone(data_set, node, parent, base);
	free(base);
	CRM_ASSERT(rsc != NULL);
	}
	}

	if (rsc && !pcmk__str_eq(rsc_id, rsc->id, pcmk__str_casei)
	&& !pcmk__str_eq(rsc_id, rsc->clone_name, pcmk__str_casei)) {

	pcmk__str_update(&rsc->clone_name, rsc_id);
	pe_rsc_debug(rsc, "Internally renamed %s on %s to %s%s",
	rsc_id, node->details->uname, rsc->id,
	(pcmk_is_set(rsc->flags, pe_rsc_orphan)? " (ORPHAN)" : ""));
	}
	return rsc;
	}

	static pe_resource_t *
	process_orphan_resource(xmlNode * rsc_entry, pe_node_t * node, pe_working_set_t * data_set)
	{
	pe_resource_t *rsc = NULL;
	const char *rsc_id = crm_element_value(rsc_entry, XML_ATTR_ID);

	crm_debug("Detected orphan resource %s on %s", rsc_id, node->details->uname);
	rsc = create_fake_resource(rsc_id, rsc_entry, data_set);
	if (rsc == NULL) {
	return NULL;
	}

	if (!pcmk_is_set(data_set->flags, pe_flag_stop_rsc_orphans)) {
	pe__clear_resource_flags(rsc, pe_rsc_managed);

	} else {
	CRM_CHECK(rsc != NULL, return NULL);
	pe_rsc_trace(rsc, "Added orphan %s", rsc->id);
	resource_location(rsc, NULL, -INFINITY, "__orphan_do_not_run__", data_set);
	}
	return rsc;
	}

	static void
	process_rsc_state(pe_resource_t * rsc, pe_node_t * node,
	enum action_fail_response on_fail,
	xmlNode * migrate_op, pe_working_set_t * data_set)
	{
	pe_node_t *tmpnode = NULL;
	char *reason = NULL;
	enum action_fail_response save_on_fail = action_fail_ignore;

	CRM_ASSERT(rsc);
	pe_rsc_trace(rsc, "Resource %s is %s on %s: on_fail=%s",
	rsc->id, role2text(rsc->role), node->details->uname, fail2text(on_fail));

	/* process current state */
	if (rsc->role != RSC_ROLE_UNKNOWN) {
	pe_resource_t *iter = rsc;

	while (iter) {
	if (g_hash_table_lookup(iter->known_on, node->details->id) == NULL) {
	pe_node_t *n = pe__copy_node(node);

	pe_rsc_trace(rsc, "%s%s%s known on %s",
	rsc->id,
	((rsc->clone_name == NULL)? "" : " also known as "),
	((rsc->clone_name == NULL)? "" : rsc->clone_name),
	n->details->uname);
	g_hash_table_insert(iter->known_on, (gpointer) n->details->id, n);
	}
	if (pcmk_is_set(iter->flags, pe_rsc_unique)) {
	break;
	}
	iter = iter->parent;
	}
	}

	/* If a managed resource is believed to be running, but node is down ... */
	if (rsc->role > RSC_ROLE_STOPPED
	&& node->details->online == FALSE
	&& node->details->maintenance == FALSE
	&& pcmk_is_set(rsc->flags, pe_rsc_managed)) {

	gboolean should_fence = FALSE;

	/* If this is a guest node, fence it (regardless of whether fencing is
	* enabled, because guest node fencing is done by recovery of the
	* container resource rather than by the fencer). Mark the resource
	* we're processing as failed. When the guest comes back up, its
	* operation history in the CIB will be cleared, freeing the affected
	* resource to run again once we are sure we know its state.
	*/
	if (pe__is_guest_node(node)) {
	pe__set_resource_flags(rsc, pe_rsc_failed\|pe_rsc_stop);
	should_fence = TRUE;

	} else if (pcmk_is_set(data_set->flags, pe_flag_stonith_enabled)) {
	if (pe__is_remote_node(node) && node->details->remote_rsc
	&& !pcmk_is_set(node->details->remote_rsc->flags, pe_rsc_failed)) {

	/* Setting unseen means that fencing of the remote node will
	* occur only if the connection resource is not going to start
	* somewhere. This allows connection resources on a failed
	* cluster node to move to another node without requiring the
	* remote nodes to be fenced as well.
	*/
	node->details->unseen = TRUE;
	reason = crm_strdup_printf("%s is active there (fencing will be"
	" revoked if remote connection can "
	"be re-established elsewhere)",
	rsc->id);
	}
	should_fence = TRUE;
	}

	if (should_fence) {
	if (reason == NULL) {
	reason = crm_strdup_printf("%s is thought to be active there", rsc->id);
	}
	pe_fence_node(data_set, node, reason, FALSE);
	}
	free(reason);
	}

	/* In order to calculate priority_fencing_delay correctly, save the failure information and pass it to native_add_running(). */
	save_on_fail = on_fail;

	if (node->details->unclean) {
	/* No extra processing needed
	* Also allows resources to be started again after a node is shot
	*/
	on_fail = action_fail_ignore;
	}

	switch (on_fail) {
	case action_fail_ignore:
	/* nothing to do */
	break;

	case action_fail_demote:
	pe__set_resource_flags(rsc, pe_rsc_failed);
	demote_action(rsc, node, FALSE);
	break;

	case action_fail_fence:
	/* treat it as if it is still running
	* but also mark the node as unclean
	*/
	reason = crm_strdup_printf("%s failed there", rsc->id);
	pe_fence_node(data_set, node, reason, FALSE);
	free(reason);
	break;

	case action_fail_standby:
	node->details->standby = TRUE;
	node->details->standby_onfail = TRUE;
	break;

	case action_fail_block:
	/* is_managed == FALSE will prevent any
	* actions being sent for the resource
	*/
	pe__clear_resource_flags(rsc, pe_rsc_managed);
	pe__set_resource_flags(rsc, pe_rsc_block);
	break;

	case action_fail_migrate:
	/* make sure it comes up somewhere else
	* or not at all
	*/
	resource_location(rsc, node, -INFINITY, "__action_migration_auto__", data_set);
	break;

	case action_fail_stop:
	pe__set_next_role(rsc, RSC_ROLE_STOPPED, "on-fail=stop");
	break;

	case action_fail_recover:
	if (rsc->role != RSC_ROLE_STOPPED && rsc->role != RSC_ROLE_UNKNOWN) {
	pe__set_resource_flags(rsc, pe_rsc_failed\|pe_rsc_stop);
	stop_action(rsc, node, FALSE);
	}
	break;

	case action_fail_restart_container:
	pe__set_resource_flags(rsc, pe_rsc_failed\|pe_rsc_stop);
	if (rsc->container && pe_rsc_is_bundled(rsc)) {
	/* A bundle's remote connection can run on a different node than
	* the bundle's container. We don't necessarily know where the
	* container is running yet, so remember it and add a stop
	* action for it later.
	*/
	data_set->stop_needed = g_list_prepend(data_set->stop_needed,
	rsc->container);
	} else if (rsc->container) {
	stop_action(rsc->container, node, FALSE);
	} else if (rsc->role != RSC_ROLE_STOPPED && rsc->role != RSC_ROLE_UNKNOWN) {
	stop_action(rsc, node, FALSE);
	}
	break;

	case action_fail_reset_remote:
	pe__set_resource_flags(rsc, pe_rsc_failed\|pe_rsc_stop);
	if (pcmk_is_set(data_set->flags, pe_flag_stonith_enabled)) {
	tmpnode = NULL;
	if (rsc->is_remote_node) {
	tmpnode = pe_find_node(data_set->nodes, rsc->id);
	}
	if (tmpnode &&
	pe__is_remote_node(tmpnode) &&
	tmpnode->details->remote_was_fenced == 0) {

	/* The remote connection resource failed in a way that
	* should result in fencing the remote node.
	*/
	pe_fence_node(data_set, tmpnode,
	"remote connection is unrecoverable", FALSE);
	}
	}

	/* require the stop action regardless if fencing is occurring or not. */
	if (rsc->role > RSC_ROLE_STOPPED) {
	stop_action(rsc, node, FALSE);
	}

	/* if reconnect delay is in use, prevent the connection from exiting the
	* "STOPPED" role until the failure is cleared by the delay timeout. */
	if (rsc->remote_reconnect_ms) {
	pe__set_next_role(rsc, RSC_ROLE_STOPPED, "remote reset");
	}
	break;
	}

	/* ensure a remote-node connection failure forces an unclean remote-node
	* to be fenced. By setting unseen = FALSE, the remote-node failure will
	* result in a fencing operation regardless if we're going to attempt to
	* reconnect to the remote-node in this transition or not. */
	if (pcmk_is_set(rsc->flags, pe_rsc_failed) && rsc->is_remote_node) {
	tmpnode = pe_find_node(data_set->nodes, rsc->id);
	if (tmpnode && tmpnode->details->unclean) {
	tmpnode->details->unseen = FALSE;
	}
	}

	if (rsc->role != RSC_ROLE_STOPPED && rsc->role != RSC_ROLE_UNKNOWN) {
	if (pcmk_is_set(rsc->flags, pe_rsc_orphan)) {
	if (pcmk_is_set(rsc->flags, pe_rsc_managed)) {
	pcmk__config_warn("Detected active orphan %s running on %s",
	rsc->id, node->details->uname);
	} else {
	pcmk__config_warn("Resource '%s' must be stopped manually on "
	"%s because cluster is configured not to "
	"stop active orphans",
	rsc->id, node->details->uname);
	}
	}

	native_add_running(rsc, node, data_set, (save_on_fail != action_fail_ignore));
	switch (on_fail) {
	case action_fail_ignore:
	break;
	case action_fail_demote:
	case action_fail_block:
	pe__set_resource_flags(rsc, pe_rsc_failed);
	break;
	default:
	pe__set_resource_flags(rsc, pe_rsc_failed\|pe_rsc_stop);
	break;
	}

	} else if (rsc->clone_name && strchr(rsc->clone_name, ':') != NULL) {
	/* Only do this for older status sections that included instance numbers
	* Otherwise stopped instances will appear as orphans
	*/
	pe_rsc_trace(rsc, "Resetting clone_name %s for %s (stopped)", rsc->clone_name, rsc->id);
	free(rsc->clone_name);
	rsc->clone_name = NULL;

	} else {
	GList *possible_matches = pe__resource_actions(rsc, node, RSC_STOP,
	FALSE);
	GList *gIter = possible_matches;

	for (; gIter != NULL; gIter = gIter->next) {
	pe_action_t stop = (pe_action_t ) gIter->data;

	pe__set_action_flags(stop, pe_action_optional);
	}

	g_list_free(possible_matches);
	}
	}

	/* create active recurring operations as optional */
	static void
	process_recurring(pe_node_t * node, pe_resource_t * rsc,
	int start_index, int stop_index,
	GList sorted_op_list, pe_working_set_t data_set)
	{
	int counter = -1;
	const char *task = NULL;
	const char *status = NULL;
	GList *gIter = sorted_op_list;

	CRM_ASSERT(rsc);
	pe_rsc_trace(rsc, "%s: Start index %d, stop index = %d", rsc->id, start_index, stop_index);

	for (; gIter != NULL; gIter = gIter->next) {
	xmlNode rsc_op = (xmlNode ) gIter->data;

	guint interval_ms = 0;
	char *key = NULL;
	const char *id = ID(rsc_op);

	counter++;

	if (node->details->online == FALSE) {
	pe_rsc_trace(rsc, "Skipping %s/%s: node is offline", rsc->id, node->details->uname);
	break;

	/* Need to check if there's a monitor for role="Stopped" */
	} else if (start_index < stop_index && counter <= stop_index) {
	pe_rsc_trace(rsc, "Skipping %s/%s: resource is not active", id, node->details->uname);
	continue;

	} else if (counter < start_index) {
	pe_rsc_trace(rsc, "Skipping %s/%s: old %d", id, node->details->uname, counter);
	continue;
	}

	crm_element_value_ms(rsc_op, XML_LRM_ATTR_INTERVAL_MS, &interval_ms);
	if (interval_ms == 0) {
	pe_rsc_trace(rsc, "Skipping %s/%s: non-recurring", id, node->details->uname);
	continue;
	}

	status = crm_element_value(rsc_op, XML_LRM_ATTR_OPSTATUS);
	if (pcmk__str_eq(status, "-1", pcmk__str_casei)) {
	pe_rsc_trace(rsc, "Skipping %s/%s: status", id, node->details->uname);
	continue;
	}
	task = crm_element_value(rsc_op, XML_LRM_ATTR_TASK);
	/* create the action */
	key = pcmk__op_key(rsc->id, task, interval_ms);
	pe_rsc_trace(rsc, "Creating %s/%s", key, node->details->uname);
	custom_action(rsc, key, task, node, TRUE, TRUE, data_set);
	}
	}

	void
	calculate_active_ops(GList sorted_op_list, int start_index, int *stop_index)
	{
	int counter = -1;
	int implied_monitor_start = -1;
	int implied_clone_start = -1;
	const char *task = NULL;
	const char *status = NULL;
	GList *gIter = sorted_op_list;

	*stop_index = -1;
	*start_index = -1;

	for (; gIter != NULL; gIter = gIter->next) {
	xmlNode rsc_op = (xmlNode ) gIter->data;

	counter++;

	task = crm_element_value(rsc_op, XML_LRM_ATTR_TASK);
	status = crm_element_value(rsc_op, XML_LRM_ATTR_OPSTATUS);

	if (pcmk__str_eq(task, CRMD_ACTION_STOP, pcmk__str_casei)
	&& pcmk__str_eq(status, "0", pcmk__str_casei)) {
	*stop_index = counter;

	} else if (pcmk__strcase_any_of(task, CRMD_ACTION_START, CRMD_ACTION_MIGRATED, NULL)) {
	*start_index = counter;

	} else if ((implied_monitor_start <= *stop_index) && pcmk__str_eq(task, CRMD_ACTION_STATUS, pcmk__str_casei)) {
	const char *rc = crm_element_value(rsc_op, XML_LRM_ATTR_RC);

	if (pcmk__strcase_any_of(rc, "0", "8", NULL)) {
	implied_monitor_start = counter;
	}
	} else if (pcmk__strcase_any_of(task, CRMD_ACTION_PROMOTE, CRMD_ACTION_DEMOTE, NULL)) {
	implied_clone_start = counter;
	}
	}

	if (*start_index == -1) {
	if (implied_clone_start != -1) {
	*start_index = implied_clone_start;
	} else if (implied_monitor_start != -1) {
	*start_index = implied_monitor_start;
	}
	}
	}

	// If resource history entry has shutdown lock, remember lock node and time
	static void
	unpack_shutdown_lock(xmlNode rsc_entry, pe_resource_t rsc, pe_node_t *node,
	pe_working_set_t *data_set)
	{
	time_t lock_time = 0; // When lock started (i.e. node shutdown time)

	if ((crm_element_value_epoch(rsc_entry, XML_CONFIG_ATTR_SHUTDOWN_LOCK,
	&lock_time) == pcmk_ok) && (lock_time != 0)) {

	if ((data_set->shutdown_lock > 0)
	&& (get_effective_time(data_set)
	> (lock_time + data_set->shutdown_lock))) {
	pe_rsc_info(rsc, "Shutdown lock for %s on %s expired",
	rsc->id, node->details->uname);
	pe__clear_resource_history(rsc, node, data_set);
	} else {
	rsc->lock_node = node;
	rsc->lock_time = lock_time;
	}
	}
	}

	/*!
	* \internal
	* \brief Unpack one lrm_resource entry from a node's CIB status
	*
	* \param[in] node Node whose status is being unpacked
	* \param[in] rsc_entry lrm_resource XML being unpacked
	* \param[in] data_set Cluster working set
	*
	* \return Resource corresponding to the entry, or NULL if no operation history
	*/
	static pe_resource_t *
	unpack_lrm_resource(pe_node_t node, xmlNode lrm_resource,
	pe_working_set_t *data_set)
	{
	GList *gIter = NULL;
	int stop_index = -1;
	int start_index = -1;
	enum rsc_role_e req_role = RSC_ROLE_UNKNOWN;

	const char *task = NULL;
	const char *rsc_id = ID(lrm_resource);

	pe_resource_t *rsc = NULL;
	GList *op_list = NULL;
	GList *sorted_op_list = NULL;

	xmlNode *migrate_op = NULL;
	xmlNode *rsc_op = NULL;
	xmlNode *last_failure = NULL;

	enum action_fail_response on_fail = action_fail_ignore;
	enum rsc_role_e saved_role = RSC_ROLE_UNKNOWN;

	if (rsc_id == NULL) {
	crm_warn("Ignoring malformed " XML_LRM_TAG_RESOURCE
	" entry without id");
	return NULL;
	}
	crm_trace("Unpacking " XML_LRM_TAG_RESOURCE " for %s on %s",
	rsc_id, node->details->uname);

	// Build a list of individual lrm_rsc_op entries, so we can sort them
	for (rsc_op = first_named_child(lrm_resource, XML_LRM_TAG_RSC_OP);
	rsc_op != NULL; rsc_op = crm_next_same_xml(rsc_op)) {

	op_list = g_list_prepend(op_list, rsc_op);
	}

	if (!pcmk_is_set(data_set->flags, pe_flag_shutdown_lock)) {
	if (op_list == NULL) {
	// If there are no operations, there is nothing to do
	return NULL;
	}
	}

	/* find the resource */
	rsc = unpack_find_resource(data_set, node, rsc_id, lrm_resource);
	if (rsc == NULL) {
	if (op_list == NULL) {
	// If there are no operations, there is nothing to do
	return NULL;
	} else {
	rsc = process_orphan_resource(lrm_resource, node, data_set);
	}
	}
	CRM_ASSERT(rsc != NULL);

	// Check whether the resource is "shutdown-locked" to this node
	if (pcmk_is_set(data_set->flags, pe_flag_shutdown_lock)) {
	unpack_shutdown_lock(lrm_resource, rsc, node, data_set);
	}

	/* process operations */
	saved_role = rsc->role;
	rsc->role = RSC_ROLE_UNKNOWN;
	sorted_op_list = g_list_sort(op_list, sort_op_by_callid);

	for (gIter = sorted_op_list; gIter != NULL; gIter = gIter->next) {
	xmlNode rsc_op = (xmlNode ) gIter->data;

	task = crm_element_value(rsc_op, XML_LRM_ATTR_TASK);
	if (pcmk__str_eq(task, CRMD_ACTION_MIGRATED, pcmk__str_casei)) {
	migrate_op = rsc_op;
	}

	unpack_rsc_op(rsc, node, rsc_op, &last_failure, &on_fail, data_set);
	}

	/* create active recurring operations as optional */
	calculate_active_ops(sorted_op_list, &start_index, &stop_index);
	process_recurring(node, rsc, start_index, stop_index, sorted_op_list, data_set);

	/* no need to free the contents */
	g_list_free(sorted_op_list);

	process_rsc_state(rsc, node, on_fail, migrate_op, data_set);

	if (get_target_role(rsc, &req_role)) {
	if (rsc->next_role == RSC_ROLE_UNKNOWN \|\| req_role < rsc->next_role) {
	pe__set_next_role(rsc, req_role, XML_RSC_ATTR_TARGET_ROLE);

	} else if (req_role > rsc->next_role) {
	pe_rsc_info(rsc, "%s: Not overwriting calculated next role %s"
	" with requested next role %s",
	rsc->id, role2text(rsc->next_role), role2text(req_role));
	}
	}

	if (saved_role > rsc->role) {
	rsc->role = saved_role;
	}

	return rsc;
	}

	static void
	handle_orphaned_container_fillers(xmlNode * lrm_rsc_list, pe_working_set_t * data_set)
	{
	xmlNode *rsc_entry = NULL;
	for (rsc_entry = pcmk__xe_first_child(lrm_rsc_list); rsc_entry != NULL;
	rsc_entry = pcmk__xe_next(rsc_entry)) {

	pe_resource_t *rsc;
	pe_resource_t *container;
	const char *rsc_id;
	const char *container_id;

	if (!pcmk__str_eq((const char *)rsc_entry->name, XML_LRM_TAG_RESOURCE, pcmk__str_casei)) {
	continue;
	}

	container_id = crm_element_value(rsc_entry, XML_RSC_ATTR_CONTAINER);
	rsc_id = crm_element_value(rsc_entry, XML_ATTR_ID);
	if (container_id == NULL \|\| rsc_id == NULL) {
	continue;
	}

	container = pe_find_resource(data_set->resources, container_id);
	if (container == NULL) {
	continue;
	}

	rsc = pe_find_resource(data_set->resources, rsc_id);
	if (rsc == NULL \|\|
	!pcmk_is_set(rsc->flags, pe_rsc_orphan_container_filler) \|\|
	rsc->container != NULL) {
	continue;
	}

	pe_rsc_trace(rsc, "Mapped container of orphaned resource %s to %s",
	rsc->id, container_id);
	rsc->container = container;
	container->fillers = g_list_append(container->fillers, rsc);
	}
	}

	/*!
	* \internal
	* \brief Unpack one node's lrm status section
	*
	* \param[in] node Node whose status is being unpacked
	* \param[in] xml CIB node state XML
	* \param[in] data_set Cluster working set
	*/
	static void
	unpack_node_lrm(pe_node_t node, xmlNode xml, pe_working_set_t *data_set)
	{
	bool found_orphaned_container_filler = false;

	// Drill down to lrm_resources section
	xml = find_xml_node(xml, XML_CIB_TAG_LRM, FALSE);
	if (xml == NULL) {
	return;
	}
	xml = find_xml_node(xml, XML_LRM_TAG_RESOURCES, FALSE);
	if (xml == NULL) {
	return;
	}

	// Unpack each lrm_resource entry
	for (xmlNode *rsc_entry = first_named_child(xml, XML_LRM_TAG_RESOURCE);
	rsc_entry != NULL; rsc_entry = crm_next_same_xml(rsc_entry)) {

	pe_resource_t *rsc = unpack_lrm_resource(node, rsc_entry, data_set);

	if ((rsc != NULL)
	&& pcmk_is_set(rsc->flags, pe_rsc_orphan_container_filler)) {
	found_orphaned_container_filler = true;
	}
	}

	/* Now that all resource state has been unpacked for this node, map any
	* orphaned container fillers to their container resource.
	*/
	if (found_orphaned_container_filler) {
	handle_orphaned_container_fillers(xml, data_set);
	}
	}

	static void
	set_active(pe_resource_t * rsc)
	{
	pe_resource_t *top = uber_parent(rsc);

	if (top && pcmk_is_set(top->flags, pe_rsc_promotable)) {
	rsc->role = RSC_ROLE_UNPROMOTED;
	} else {
	rsc->role = RSC_ROLE_STARTED;
	}
	}

	static void
	set_node_score(gpointer key, gpointer value, gpointer user_data)
	{
	pe_node_t *node = value;
	int *score = user_data;

	node->weight = *score;
	}

	#define STATUS_PATH_MAX 1024
	static xmlNode *
	find_lrm_op(const char resource, const char op, const char node, const char source,
	int target_rc, pe_working_set_t *data_set)
	{
	int offset = 0;
	char xpath[STATUS_PATH_MAX];
	xmlNode *xml = NULL;

	offset += snprintf(xpath + offset, STATUS_PATH_MAX - offset, "//node_state[@uname='%s']", node);
	offset +=
	snprintf(xpath + offset, STATUS_PATH_MAX - offset, "//" XML_LRM_TAG_RESOURCE "[@id='%s']",
	resource);

	/* Need to check against transition_magic too? */
	if (source && pcmk__str_eq(op, CRMD_ACTION_MIGRATE, pcmk__str_casei)) {
	offset +=
	snprintf(xpath + offset, STATUS_PATH_MAX - offset,
	"/" XML_LRM_TAG_RSC_OP "[@operation='%s' and @migrate_target='%s']", op,
	source);
	} else if (source && pcmk__str_eq(op, CRMD_ACTION_MIGRATED, pcmk__str_casei)) {
	offset +=
	snprintf(xpath + offset, STATUS_PATH_MAX - offset,
	"/" XML_LRM_TAG_RSC_OP "[@operation='%s' and @migrate_source='%s']", op,
	source);
	} else {
	offset +=
	snprintf(xpath + offset, STATUS_PATH_MAX - offset,
	"/" XML_LRM_TAG_RSC_OP "[@operation='%s']", op);
	}

	CRM_LOG_ASSERT(offset > 0);
	xml = get_xpath_object(xpath, data_set->input, LOG_DEBUG);

	if (xml && target_rc >= 0) {
	int rc = PCMK_OCF_UNKNOWN_ERROR;
	int status = PCMK_EXEC_ERROR;

	crm_element_value_int(xml, XML_LRM_ATTR_RC, &rc);
	crm_element_value_int(xml, XML_LRM_ATTR_OPSTATUS, &status);
	if ((rc != target_rc) \|\| (status != PCMK_EXEC_DONE)) {
	return NULL;
	}
	}
	return xml;
	}

	static xmlNode *
	find_lrm_resource(const char rsc_id, const char node_name,
	pe_working_set_t *data_set)
	{
	int offset = 0;
	char xpath[STATUS_PATH_MAX];
	xmlNode *xml = NULL;

	offset += snprintf(xpath + offset, STATUS_PATH_MAX - offset,
	"//node_state[@uname='%s']", node_name);
	offset +=
	snprintf(xpath + offset, STATUS_PATH_MAX - offset,
	"//" XML_LRM_TAG_RESOURCE "[@id='%s']", rsc_id);

	CRM_LOG_ASSERT(offset > 0);
	xml = get_xpath_object(xpath, data_set->input, LOG_DEBUG);

	return xml;
	}

	static bool
	unknown_on_node(const char rsc_id, const char node_name,
	pe_working_set_t *data_set)
	{
	xmlNode *lrm_resource = NULL;

	lrm_resource = find_lrm_resource(rsc_id, node_name, data_set);

	/* If the resource has no lrm_rsc_op history on the node, that means its
	* state is unknown there.
	*/
	return (lrm_resource == NULL
	\|\| first_named_child(lrm_resource, XML_LRM_TAG_RSC_OP) == NULL);
	}

	/*!
	* \brief Check whether a probe/monitor indicating the resource was not running
	* on a node happened after some event
	*
	* \param[in] rsc_id Resource being checked
	* \param[in] node_name Node being checked
	* \param[in] xml_op Event that monitor is being compared to
	* \param[in] data_set Cluster working set
	*
	* \return true if such a monitor happened after event, false otherwise
	*/
	static bool
	monitor_not_running_after(const char rsc_id, const char node_name,
	xmlNode xml_op, pe_working_set_t data_set)
	{
	/* Any probe/monitor operation on the node indicating it was not running
	* there
	*/
	xmlNode *monitor = find_lrm_op(rsc_id, CRMD_ACTION_STATUS, node_name,
	NULL, PCMK_OCF_NOT_RUNNING, data_set);

	return (monitor && pe__is_newer_op(monitor, xml_op) > 0);
	}

	static int
	pe__call_id(xmlNode *op_xml)
	{
	int id = 0;

	if (op_xml) {
	crm_element_value_int(op_xml, XML_LRM_ATTR_CALLID, &id);
	}
	return id;
	}

	/*!
	* \brief Check whether a stop happened on the same node after some event
	*
	* \param[in] rsc Resource being checked
	* \param[in] node Node being checked
	* \param[in] xml_op Event that stop is being compared to
	* \param[in] data_set Cluster working set
	*
	* \return TRUE if stop happened after event, FALSE otherwise
	*
	* \note This is really unnecessary, but kept as a safety mechanism. We
	* currently don't save more than one successful event in history, so this
	* only matters when processing really old CIB files that we don't
	* technically support anymore, or as preparation for logging an extended
	* history in the future.
	*/
	static bool
	stop_happened_after(pe_resource_t rsc, pe_node_t node, xmlNode *xml_op,
	pe_working_set_t *data_set)
	{
	xmlNode *stop_op = find_lrm_op(rsc->id, CRMD_ACTION_STOP,
	node->details->uname, NULL, PCMK_OCF_OK, data_set);

	return (stop_op && (pe__call_id(stop_op) > pe__call_id(xml_op)));
	}

	static void
	unpack_migrate_to_success(pe_resource_t rsc, pe_node_t node, xmlNode *xml_op,
	pe_working_set_t *data_set)
	{
	/* A successful migration sequence is:
	* migrate_to on source node
	* migrate_from on target node
	* stop on source node
	*
	* If a migrate_to is followed by a stop, the entire migration (successful
	* or failed) is complete, and we don't care what happened on the target.
	*
	* If no migrate_from has happened, the migration is considered to be
	* "partial". If the migrate_from failed, make sure the resource gets
	* stopped on both source and target (if up).
	*
	* If the migrate_to and migrate_from both succeeded (which also implies the
	* resource is no longer running on the source), but there is no stop, the
	* migration is considered to be "dangling". Schedule a stop on the source
	* in this case.
	*/
	int from_rc = 0;
	int from_status = 0;
	pe_node_t *target_node = NULL;
	pe_node_t *source_node = NULL;
	xmlNode *migrate_from = NULL;
	const char *source = crm_element_value(xml_op, XML_LRM_ATTR_MIGRATE_SOURCE);
	const char *target = crm_element_value(xml_op, XML_LRM_ATTR_MIGRATE_TARGET);

	// Sanity check
	CRM_CHECK(source && target && !strcmp(source, node->details->uname), return);

	if (stop_happened_after(rsc, node, xml_op, data_set)) {
	return;
	}

	// Clones are not allowed to migrate, so role can't be promoted
	rsc->role = RSC_ROLE_STARTED;

	target_node = pe_find_node(data_set->nodes, target);
	source_node = pe_find_node(data_set->nodes, source);

	// Check whether there was a migrate_from action on the target
	migrate_from = find_lrm_op(rsc->id, CRMD_ACTION_MIGRATED, target,
	source, -1, data_set);
	if (migrate_from) {
	crm_element_value_int(migrate_from, XML_LRM_ATTR_RC, &from_rc);
	crm_element_value_int(migrate_from, XML_LRM_ATTR_OPSTATUS, &from_status);
	pe_rsc_trace(rsc, "%s op on %s exited with status=%d, rc=%d",
	ID(migrate_from), target, from_status, from_rc);
	}

	if (migrate_from && from_rc == PCMK_OCF_OK
	&& (from_status == PCMK_EXEC_DONE)) {
	/* The migrate_to and migrate_from both succeeded, so mark the migration
	* as "dangling". This will be used to schedule a stop action on the
	* source without affecting the target.
	*/
	pe_rsc_trace(rsc, "Detected dangling migration op: %s on %s", ID(xml_op),
	source);
	rsc->role = RSC_ROLE_STOPPED;
	rsc->dangling_migrations = g_list_prepend(rsc->dangling_migrations, node);

	} else if (migrate_from && (from_status != PCMK_EXEC_PENDING)) { // Failed
	if (target_node && target_node->details->online) {
	pe_rsc_trace(rsc, "Marking active on %s %p %d", target, target_node,
	target_node->details->online);
	native_add_running(rsc, target_node, data_set, TRUE);
	}

	} else { // Pending, or complete but erased
	if (target_node && target_node->details->online) {
	pe_rsc_trace(rsc, "Marking active on %s %p %d", target, target_node,
	target_node->details->online);

	native_add_running(rsc, target_node, data_set, FALSE);
	if (source_node && source_node->details->online) {
	/* This is a partial migration: the migrate_to completed
	* successfully on the source, but the migrate_from has not
	* completed. Remember the source and target; if the newly
	* chosen target remains the same when we schedule actions
	* later, we may continue with the migration.
	*/
	rsc->partial_migration_target = target_node;
	rsc->partial_migration_source = source_node;
	}
	} else {
	/* Consider it failed here - forces a restart, prevents migration */
	pe__set_resource_flags(rsc, pe_rsc_failed\|pe_rsc_stop);
	pe__clear_resource_flags(rsc, pe_rsc_allow_migrate);
	}
	}
	}

	// Is there an action_name in node_name's rsc history newer than call_id?
	static bool
	newer_op(pe_resource_t rsc, const char action_name, const char *node_name,
	int call_id, pe_working_set_t *data_set)
	{
	xmlNode *action = find_lrm_op(rsc->id, action_name, node_name, NULL, PCMK_OCF_OK,
	data_set);

	return pe__call_id(action) > call_id;
	}

	static void
	unpack_migrate_to_failure(pe_resource_t rsc, pe_node_t node, xmlNode *xml_op,
	pe_working_set_t *data_set)
	{
	int target_stop_id = 0;
	int target_migrate_from_id = 0;
	xmlNode *target_stop = NULL;
	xmlNode *target_migrate_from = NULL;
	const char *source = crm_element_value(xml_op, XML_LRM_ATTR_MIGRATE_SOURCE);
	const char *target = crm_element_value(xml_op, XML_LRM_ATTR_MIGRATE_TARGET);

	// Sanity check
	CRM_CHECK(source && target && !strcmp(source, node->details->uname), return);

	/* If a migration failed, we have to assume the resource is active. Clones
	* are not allowed to migrate, so role can't be promoted.
	*/
	rsc->role = RSC_ROLE_STARTED;

	// Check for stop on the target
	target_stop = find_lrm_op(rsc->id, CRMD_ACTION_STOP, target, NULL,
	PCMK_OCF_OK, data_set);
	target_stop_id = pe__call_id(target_stop);

	// Check for migrate_from on the target
	target_migrate_from = find_lrm_op(rsc->id, CRMD_ACTION_MIGRATED, target,
	source, PCMK_OCF_OK, data_set);
	target_migrate_from_id = pe__call_id(target_migrate_from);

	if (/* If the resource state is unknown on the target, it will likely be
	* probed there.
	* Don't just consider it running there. We will get back here anyway in
	* case the probe detects it's running there.
	*/
	!unknown_on_node(rsc->id, target, data_set)
	/* If there's any probe/monitor operation on the target newer than this
	* failed migrate_to indicating it was not running there, this migrate_to
	* failure no longer matters for the target.
	*/
	&& !monitor_not_running_after(rsc->id, target, xml_op, data_set)
	&& ((target_stop == NULL) \|\| (target_stop_id < target_migrate_from_id))) {
	/* There was no stop on the target, or a stop that happened before a
	* migrate_from, so assume the resource is still active on the target
	* (if it is up).
	*/
	pe_node_t *target_node = pe_find_node(data_set->nodes, target);

	pe_rsc_trace(rsc, "stop (%d) + migrate_from (%d)",
	target_stop_id, target_migrate_from_id);
	if (target_node && target_node->details->online) {
	native_add_running(rsc, target_node, data_set, FALSE);
	}

	} else if (target_migrate_from == NULL) {
	/* We know there was a stop on the target, but there may not have been a
	* migrate_from (the stop could have happened before migrate_from was
	* scheduled or attempted).
	*
	* That means this could be a "dangling" migration. But first, check
	* whether there is a newer successful stop, start, or migrate_from on
	* the source node -- it's possible the failed migration was followed by
	* a successful stop, full restart, or migration in the reverse
	* direction, in which case we don't want to force a stop.
	*/
	int source_migrate_to_id = pe__call_id(xml_op);

	if (newer_op(rsc, CRMD_ACTION_MIGRATED, source, source_migrate_to_id,
	data_set)
	\|\| newer_op(rsc, CRMD_ACTION_START, source, source_migrate_to_id,
	data_set)
	\|\| newer_op(rsc, CRMD_ACTION_STOP, source, source_migrate_to_id,
	data_set)) {
	return;
	}

	// Mark node as having dangling migration so we can force a stop later
	rsc->dangling_migrations = g_list_prepend(rsc->dangling_migrations, node);
	}
	}

	static void
	unpack_migrate_from_failure(pe_resource_t rsc, pe_node_t node,
	xmlNode xml_op, pe_working_set_t data_set)
	{
	xmlNode *source_stop = NULL;
	xmlNode *source_migrate_to = NULL;
	const char *source = crm_element_value(xml_op, XML_LRM_ATTR_MIGRATE_SOURCE);
	const char *target = crm_element_value(xml_op, XML_LRM_ATTR_MIGRATE_TARGET);

	// Sanity check
	CRM_CHECK(source && target && !strcmp(target, node->details->uname), return);

	/* If a migration failed, we have to assume the resource is active. Clones
	* are not allowed to migrate, so role can't be promoted.
	*/
	rsc->role = RSC_ROLE_STARTED;

	// Check for a stop on the source
	source_stop = find_lrm_op(rsc->id, CRMD_ACTION_STOP, source, NULL,
	PCMK_OCF_OK, data_set);

	// Check for a migrate_to on the source
	source_migrate_to = find_lrm_op(rsc->id, CRMD_ACTION_MIGRATE,
	source, target, PCMK_OCF_OK, data_set);

	if ((source_stop == NULL)
	\|\| (pe__call_id(source_stop) < pe__call_id(source_migrate_to))) {
	/* There was no stop on the source, or a stop that happened before
	* migrate_to, so assume the resource is still active on the source (if
	* it is up).
	*/
	pe_node_t *source_node = pe_find_node(data_set->nodes, source);

	if (source_node && source_node->details->online) {
	native_add_running(rsc, source_node, data_set, TRUE);
	}
	}
	}

	static void
	record_failed_op(xmlNode op, const pe_node_t node,
	const pe_resource_t rsc, pe_working_set_t data_set)
	{
	xmlNode *xIter = NULL;
	const char *op_key = crm_element_value(op, XML_LRM_ATTR_TASK_KEY);

	if (node->details->online == FALSE) {
	return;
	}

	for (xIter = data_set->failed->children; xIter; xIter = xIter->next) {
	const char *key = crm_element_value(xIter, XML_LRM_ATTR_TASK_KEY);
	const char *uname = crm_element_value(xIter, XML_ATTR_UNAME);

	if(pcmk__str_eq(op_key, key, pcmk__str_casei) && pcmk__str_eq(uname, node->details->uname, pcmk__str_casei)) {
	crm_trace("Skipping duplicate entry %s on %s", op_key, node->details->uname);
	return;
	}
	}

	crm_trace("Adding entry %s on %s", op_key, node->details->uname);
	crm_xml_add(op, XML_ATTR_UNAME, node->details->uname);
	crm_xml_add(op, XML_LRM_ATTR_RSCID, rsc->id);
	add_node_copy(data_set->failed, op);
	}

	static const char get_op_key(xmlNode xml_op)
	{
	const char *key = crm_element_value(xml_op, XML_LRM_ATTR_TASK_KEY);
	if(key == NULL) {
	key = ID(xml_op);
	}
	return key;
	}

	static const char *
	last_change_str(xmlNode *xml_op)
	{
	time_t when;
	const char *when_s = NULL;

	if (crm_element_value_epoch(xml_op, XML_RSC_OP_LAST_CHANGE,
	&when) == pcmk_ok) {
	when_s = pcmk__epoch2str(&when);
	if (when_s) {
	// Skip day of week to make message shorter
	when_s = strchr(when_s, ' ');
	if (when_s) {
	++when_s;
	}
	}
	}
	return ((when_s && *when_s)? when_s : "unknown time");
	}

	/*!
	* \internal
	* \brief Compare two on-fail values
	*
	* \param[in] first One on-fail value to compare
	* \param[in] second The other on-fail value to compare
	*
	* \return A negative number if second is more severe than first, zero if they
	* are equal, or a positive number if first is more severe than second.
	* \note This is only needed until the action_fail_response values can be
	* renumbered at the next API compatibility break.
	*/
	static int
	cmp_on_fail(enum action_fail_response first, enum action_fail_response second)
	{
	switch (first) {
	case action_fail_demote:
	switch (second) {
	case action_fail_ignore:
	return 1;
	case action_fail_demote:
	return 0;
	default:
	return -1;
	}
	break;

	case action_fail_reset_remote:
	switch (second) {
	case action_fail_ignore:
	case action_fail_demote:
	case action_fail_recover:
	return 1;
	case action_fail_reset_remote:
	return 0;
	default:
	return -1;
	}
	break;

	case action_fail_restart_container:
	switch (second) {
	case action_fail_ignore:
	case action_fail_demote:
	case action_fail_recover:
	case action_fail_reset_remote:
	return 1;
	case action_fail_restart_container:
	return 0;
	default:
	return -1;
	}
	break;

	default:
	break;
	}
	switch (second) {
	case action_fail_demote:
	return (first == action_fail_ignore)? -1 : 1;

	case action_fail_reset_remote:
	switch (first) {
	case action_fail_ignore:
	case action_fail_demote:
	case action_fail_recover:
	return -1;
	default:
	return 1;
	}
	break;

	case action_fail_restart_container:
	switch (first) {
	case action_fail_ignore:
	case action_fail_demote:
	case action_fail_recover:
	case action_fail_reset_remote:
	return -1;
	default:
	return 1;
	}
	break;

	default:
	break;
	}
	return first - second;
	}

	static void
	unpack_rsc_op_failure(pe_resource_t * rsc, pe_node_t * node, int rc, xmlNode * xml_op, xmlNode ** last_failure,
	enum action_fail_response * on_fail, pe_working_set_t * data_set)
	{
	bool is_probe = false;
	pe_action_t *action = NULL;

	const char *key = get_op_key(xml_op);
	const char *task = crm_element_value(xml_op, XML_LRM_ATTR_TASK);
	const char *exit_reason = crm_element_value(xml_op,
	XML_LRM_ATTR_EXIT_REASON);

	CRM_ASSERT(rsc);
	CRM_CHECK(task != NULL, return);

	*last_failure = xml_op;

	is_probe = pcmk_xe_is_probe(xml_op);

	if (exit_reason == NULL) {
	exit_reason = "";
	}

	if (!pcmk_is_set(data_set->flags, pe_flag_symmetric_cluster)
	&& (rc == PCMK_OCF_NOT_INSTALLED)) {
	crm_trace("Unexpected result (%s%s%s) was recorded for "
	"%s of %s on %s at %s " CRM_XS " rc=%d id=%s",
	services_ocf_exitcode_str(rc),
	(*exit_reason? ": " : ""), exit_reason,
	(is_probe? "probe" : task), rsc->id, node->details->uname,
	last_change_str(xml_op), rc, ID(xml_op));
	} else {
	crm_warn("Unexpected result (%s%s%s) was recorded for "
	"%s of %s on %s at %s " CRM_XS " rc=%d id=%s",
	services_ocf_exitcode_str(rc),
	(*exit_reason? ": " : ""), exit_reason,
	(is_probe? "probe" : task), rsc->id, node->details->uname,
	last_change_str(xml_op), rc, ID(xml_op));

	if (is_probe && (rc != PCMK_OCF_OK)
	&& (rc != PCMK_OCF_NOT_RUNNING)
	&& (rc != PCMK_OCF_RUNNING_PROMOTED)) {

	/* A failed (not just unexpected) probe result could mean the user
	* didn't know resources will be probed even where they can't run.
	*/
	crm_notice("If it is not possible for %s to run on %s, see "
	"the resource-discovery option for location constraints",
	rsc->id, node->details->uname);
	}

	record_failed_op(xml_op, node, rsc, data_set);
	}

	action = custom_action(rsc, strdup(key), task, NULL, TRUE, FALSE, data_set);
	if (cmp_on_fail(*on_fail, action->on_fail) < 0) {
	pe_rsc_trace(rsc, "on-fail %s -> %s for %s (%s)", fail2text(*on_fail),
	fail2text(action->on_fail), action->uuid, key);
	*on_fail = action->on_fail;
	}

	if (!strcmp(task, CRMD_ACTION_STOP)) {
	resource_location(rsc, node, -INFINITY, "__stop_fail__", data_set);

	} else if (!strcmp(task, CRMD_ACTION_MIGRATE)) {
	unpack_migrate_to_failure(rsc, node, xml_op, data_set);

	} else if (!strcmp(task, CRMD_ACTION_MIGRATED)) {
	unpack_migrate_from_failure(rsc, node, xml_op, data_set);

	} else if (!strcmp(task, CRMD_ACTION_PROMOTE)) {
	rsc->role = RSC_ROLE_PROMOTED;

	} else if (!strcmp(task, CRMD_ACTION_DEMOTE)) {
	if (action->on_fail == action_fail_block) {
	rsc->role = RSC_ROLE_PROMOTED;
	pe__set_next_role(rsc, RSC_ROLE_STOPPED,
	"demote with on-fail=block");

	} else if(rc == PCMK_OCF_NOT_RUNNING) {
	rsc->role = RSC_ROLE_STOPPED;

	} else {
	/* Staying in the promoted role would put the scheduler and
	* controller into a loop. Setting the role to unpromoted is not
	* dangerous because the resource will be stopped as part of
	* recovery, and any promotion will be ordered after that stop.
	*/
	rsc->role = RSC_ROLE_UNPROMOTED;
	}
	}

	if(is_probe && rc == PCMK_OCF_NOT_INSTALLED) {
	/* leave stopped */
	pe_rsc_trace(rsc, "Leaving %s stopped", rsc->id);
	rsc->role = RSC_ROLE_STOPPED;

	} else if (rsc->role < RSC_ROLE_STARTED) {
	pe_rsc_trace(rsc, "Setting %s active", rsc->id);
	set_active(rsc);
	}

	pe_rsc_trace(rsc, "Resource %s: role=%s, unclean=%s, on_fail=%s, fail_role=%s",
	rsc->id, role2text(rsc->role),
	pcmk__btoa(node->details->unclean),
	fail2text(action->on_fail), role2text(action->fail_role));

	if (action->fail_role != RSC_ROLE_STARTED && rsc->next_role < action->fail_role) {
	pe__set_next_role(rsc, action->fail_role, "failure");
	}

	if (action->fail_role == RSC_ROLE_STOPPED) {
	int score = -INFINITY;

	pe_resource_t *fail_rsc = rsc;

	if (fail_rsc->parent) {
	pe_resource_t *parent = uber_parent(fail_rsc);

	if (pe_rsc_is_clone(parent)
	&& !pcmk_is_set(parent->flags, pe_rsc_unique)) {
	/* For clone resources, if a child fails on an operation
	* with on-fail = stop, all the resources fail. Do this by preventing
	* the parent from coming up again. */
	fail_rsc = parent;
	}
	}
	crm_notice("%s will not be started under current conditions",
	fail_rsc->id);
	/* make sure it doesn't come up again */
	if (fail_rsc->allowed_nodes != NULL) {
	g_hash_table_destroy(fail_rsc->allowed_nodes);
	}
	fail_rsc->allowed_nodes = pe__node_list2table(data_set->nodes);
	g_hash_table_foreach(fail_rsc->allowed_nodes, set_node_score, &score);
	}

	pe_free_action(action);
	}

	/*!
	* \internal
	* \brief Remap informational monitor results and operation status
	*
	* For the monitor results, certain OCF codes are for providing extended information
	* to the user about services that aren't yet failed but not entirely healthy either.
	* These must be treated as the "normal" result by Pacemaker.
	*
	* For operation status, the action result can be used to determine an appropriate
	* status for the purposes of responding to the action. The status provided by the
	* executor is not directly usable since the executor does not know what was expected.
	*
	* \param[in] xml_op Operation history entry XML from CIB status
	* \param[in,out] rsc Resource that operation history entry is for
	* \param[in] node Node where operation was executed
	* \param[in] data_set Current cluster working set
	* \param[in,out] on_fail What should be done about the result
	* \param[in] target_rc Expected return code of operation
	* \param[in,out] rc Actual return code of operation
	* \param[in,out] status Operation execution status
	*
	* \note If the result is remapped and the node is not shutting down or failed,
	* the operation will be recorded in the data set's list of failed operations
	* to highlight it for the user.
	*
	* \note This may update the resource's current and next role.
	*/
	static void
	remap_operation(xmlNode xml_op, pe_resource_t rsc, pe_node_t *node,
	pe_working_set_t data_set, enum action_fail_response on_fail,
	int target_rc, int rc, int status) {
	bool is_probe = false;
	const char *task = crm_element_value(xml_op, XML_LRM_ATTR_TASK);
	const char *key = get_op_key(xml_op);
	const char *exit_reason = crm_element_value(xml_op,
	XML_LRM_ATTR_EXIT_REASON);

	if (pcmk__str_eq(task, CRMD_ACTION_STATUS, pcmk__str_none)) {
	int remapped_rc = pcmk__effective_rc(*rc);

	if (*rc != remapped_rc) {
	crm_trace("Remapping monitor result %d to %d", *rc, remapped_rc);
	if (!node->details->shutdown \|\| node->details->online) {
	record_failed_op(xml_op, node, rsc, data_set);
	}

	*rc = remapped_rc;
	}
	}

	if (!pe_rsc_is_bundled(rsc) && pcmk_xe_mask_probe_failure(xml_op)) {
	*status = PCMK_EXEC_DONE;
	*rc = PCMK_OCF_NOT_RUNNING;
	}

	/* If the executor reported an operation status of anything but done or
	* error, consider that final. But for done or error, we know better whether
	* it should be treated as a failure or not, because we know the expected
	* result.
	*/
	if (status != PCMK_EXEC_DONE && status != PCMK_EXEC_ERROR) {
	return;
	}

	CRM_ASSERT(rsc);
	CRM_CHECK(task != NULL,
	*status = PCMK_EXEC_ERROR; return);

	*status = PCMK_EXEC_DONE;

	if (exit_reason == NULL) {
	exit_reason = "";
	}

	is_probe = pcmk_xe_is_probe(xml_op);

	if (is_probe) {
	task = "probe";
	}

	if (target_rc < 0) {
	/* Pre-1.0 Pacemaker versions, and Pacemaker 1.1.6 or earlier with
	* Heartbeat 2.0.7 or earlier as the cluster layer, did not include the
	* target_rc in the transition key, which (along with the similar case
	* of a corrupted transition key in the CIB) will be reported to this
	* function as -1. Pacemaker 2.0+ does not support rolling upgrades from
	* those versions or processing of saved CIB files from those versions,
	* so we do not need to care much about this case.
	*/
	*status = PCMK_EXEC_ERROR;
	crm_warn("Expected result not found for %s on %s (corrupt or obsolete CIB?)",
	key, node->details->uname);

	} else if (target_rc != *rc) {
	*status = PCMK_EXEC_ERROR;
	pe_rsc_debug(rsc, "%s on %s: expected %d (%s), got %d (%s%s%s)",
	key, node->details->uname,
	target_rc, services_ocf_exitcode_str(target_rc),
	rc, services_ocf_exitcode_str(rc),
	(*exit_reason? ": " : ""), exit_reason);
	}

	switch (*rc) {
	case PCMK_OCF_OK:
	if (is_probe && (target_rc == PCMK_OCF_NOT_RUNNING)) {
	*status = PCMK_EXEC_DONE;
	pe_rsc_info(rsc, "Probe found %s active on %s at %s",
	rsc->id, node->details->uname,
	last_change_str(xml_op));
	}
	break;

	case PCMK_OCF_NOT_RUNNING:
	if (is_probe \|\| (target_rc == *rc)
	\|\| !pcmk_is_set(rsc->flags, pe_rsc_managed)) {

	*status = PCMK_EXEC_DONE;
	rsc->role = RSC_ROLE_STOPPED;

	/* clear any previous failure actions */
	*on_fail = action_fail_ignore;
	pe__set_next_role(rsc, RSC_ROLE_UNKNOWN, "not running");
	}
	break;

	case PCMK_OCF_RUNNING_PROMOTED:
	if (is_probe && (*rc != target_rc)) {
	*status = PCMK_EXEC_DONE;
	pe_rsc_info(rsc,
	"Probe found %s active and promoted on %s at %s",
	rsc->id, node->details->uname,
	last_change_str(xml_op));
	}
	rsc->role = RSC_ROLE_PROMOTED;
	break;

	case PCMK_OCF_DEGRADED_PROMOTED:
	case PCMK_OCF_FAILED_PROMOTED:
	rsc->role = RSC_ROLE_PROMOTED;
	*status = PCMK_EXEC_ERROR;
	break;

	case PCMK_OCF_NOT_CONFIGURED:
	*status = PCMK_EXEC_ERROR_FATAL;
	break;

	case PCMK_OCF_UNIMPLEMENT_FEATURE: {
	guint interval_ms = 0;
	crm_element_value_ms(xml_op, XML_LRM_ATTR_INTERVAL_MS, &interval_ms);

	if (interval_ms > 0) {
	*status = PCMK_EXEC_NOT_SUPPORTED;
	break;
	}
	// fall through
	}

	case PCMK_OCF_NOT_INSTALLED:
	case PCMK_OCF_INVALID_PARAM:
	case PCMK_OCF_INSUFFICIENT_PRIV:
	if (!pe_can_fence(data_set, node)
	&& !strcmp(task, CRMD_ACTION_STOP)) {
	/* If a stop fails and we can't fence, there's nothing else we can do */
	pe_proc_err("No further recovery can be attempted for %s "
	"because %s on %s failed (%s%s%s) at %s "
	CRM_XS " rc=%d id=%s", rsc->id, task,
	node->details->uname, services_ocf_exitcode_str(*rc),
	(*exit_reason? ": " : ""), exit_reason,
	last_change_str(xml_op), *rc, ID(xml_op));
	pe__clear_resource_flags(rsc, pe_rsc_managed);
	pe__set_resource_flags(rsc, pe_rsc_block);
	}
	*status = PCMK_EXEC_ERROR_HARD;
	break;

	default:
	if (*status == PCMK_EXEC_DONE) {
	crm_info("Treating unknown exit status %d from %s of %s "
	"on %s at %s as failure",
	*rc, task, rsc->id, node->details->uname,
	last_change_str(xml_op));
	*status = PCMK_EXEC_ERROR;
	}
	break;
	}

	pe_rsc_trace(rsc, "Remapped %s status to '%s'",
	key, pcmk_exec_status_str(*status));
	}

	// return TRUE if start or monitor last failure but parameters changed
	static bool
	should_clear_for_param_change(xmlNode xml_op, const char task,
	pe_resource_t rsc, pe_node_t node,
	pe_working_set_t *data_set)
	{
	if (!strcmp(task, "start") \|\| !strcmp(task, "monitor")) {

	if (pe__bundle_needs_remote_name(rsc, data_set)) {
	/* We haven't allocated resources yet, so we can't reliably
	* substitute addr parameters for the REMOTE_CONTAINER_HACK.
	* When that's needed, defer the check until later.
	*/
	pe__add_param_check(xml_op, rsc, node, pe_check_last_failure,
	data_set);

	} else {
	op_digest_cache_t *digest_data = NULL;

	digest_data = rsc_action_digest_cmp(rsc, xml_op, node, data_set);
	switch (digest_data->rc) {
	case RSC_DIGEST_UNKNOWN:
	crm_trace("Resource %s history entry %s on %s"
	" has no digest to compare",
	rsc->id, get_op_key(xml_op), node->details->id);
	break;
	case RSC_DIGEST_MATCH:
	break;
	default:
	return TRUE;
	}
	}
	}
	return FALSE;
	}

	// Order action after fencing of remote node, given connection rsc
	static void
	order_after_remote_fencing(pe_action_t action, pe_resource_t remote_conn,
	pe_working_set_t *data_set)
	{
	pe_node_t *remote_node = pe_find_node(data_set->nodes, remote_conn->id);

	if (remote_node) {
	pe_action_t *fence = pe_fence_op(remote_node, NULL, TRUE, NULL,
	FALSE, data_set);

	order_actions(fence, action, pe_order_implies_then);
	}
	}

	static bool
	should_ignore_failure_timeout(pe_resource_t rsc, xmlNode xml_op,
	const char *task, guint interval_ms,
	bool is_last_failure, pe_working_set_t *data_set)
	{
	/* Clearing failures of recurring monitors has special concerns. The
	* executor reports only changes in the monitor result, so if the
	* monitor is still active and still getting the same failure result,
	* that will go undetected after the failure is cleared.
	*
	* Also, the operation history will have the time when the recurring
	* monitor result changed to the given code, not the time when the
	* result last happened.
	*
	* @TODO We probably should clear such failures only when the failure
	* timeout has passed since the last occurrence of the failed result.
	* However we don't record that information. We could maybe approximate
	* that by clearing only if there is a more recent successful monitor or
	* stop result, but we don't even have that information at this point
	* since we are still unpacking the resource's operation history.
	*
	* This is especially important for remote connection resources with a
	* reconnect interval, so in that case, we skip clearing failures
	* if the remote node hasn't been fenced.
	*/
	if (rsc->remote_reconnect_ms
	&& pcmk_is_set(data_set->flags, pe_flag_stonith_enabled)
	&& (interval_ms != 0) && pcmk__str_eq(task, CRMD_ACTION_STATUS, pcmk__str_casei)) {

	pe_node_t *remote_node = pe_find_node(data_set->nodes, rsc->id);

	if (remote_node && !remote_node->details->remote_was_fenced) {
	if (is_last_failure) {
	crm_info("Waiting to clear monitor failure for remote node %s"
	" until fencing has occurred", rsc->id);
	}
	return TRUE;
	}
	}
	return FALSE;
	}

	/*!
	* \internal
	* \brief Check operation age and schedule failure clearing when appropriate
	*
	* This function has two distinct purposes. The first is to check whether an
	* operation history entry is expired (i.e. the resource has a failure timeout,
	* the entry is older than the timeout, and the resource either has no fail
	* count or its fail count is entirely older than the timeout). The second is to
	* schedule fail count clearing when appropriate (i.e. the operation is expired
	* and either the resource has an expired fail count or the operation is a
	* last_failure for a remote connection resource with a reconnect interval,
	* or the operation is a last_failure for a start or monitor operation and the
	* resource's parameters have changed since the operation).
	*
	* \param[in] rsc Resource that operation happened to
	* \param[in] node Node that operation happened on
	* \param[in] rc Actual result of operation
	* \param[in] xml_op Operation history entry XML
	* \param[in] data_set Current working set
	*
	* \return TRUE if operation history entry is expired, FALSE otherwise
	*/
	static bool
	check_operation_expiry(pe_resource_t rsc, pe_node_t node, int rc,
	xmlNode xml_op, pe_working_set_t data_set)
	{
	bool expired = FALSE;
	bool is_last_failure = pcmk__ends_with(ID(xml_op), "_last_failure_0");
	time_t last_run = 0;
	guint interval_ms = 0;
	int unexpired_fail_count = 0;
	const char *task = crm_element_value(xml_op, XML_LRM_ATTR_TASK);
	const char *clear_reason = NULL;

	crm_element_value_ms(xml_op, XML_LRM_ATTR_INTERVAL_MS, &interval_ms);

	if ((rsc->failure_timeout > 0)
	&& (crm_element_value_epoch(xml_op, XML_RSC_OP_LAST_CHANGE,
	&last_run) == 0)) {

	// Resource has a failure-timeout, and history entry has a timestamp

	time_t now = get_effective_time(data_set);
	time_t last_failure = 0;

	// Is this particular operation history older than the failure timeout?
	if ((now >= (last_run + rsc->failure_timeout))
	&& !should_ignore_failure_timeout(rsc, xml_op, task, interval_ms,
	is_last_failure, data_set)) {
	expired = TRUE;
	}

	// Does the resource as a whole have an unexpired fail count?
	unexpired_fail_count = pe_get_failcount(node, rsc, &last_failure,
	pe_fc_effective, xml_op,
	data_set);

	// Update scheduler recheck time according to last failure
	crm_trace("%s@%lld is %sexpired @%lld with unexpired_failures=%d timeout=%ds"
	" last-failure@%lld",
	ID(xml_op), (long long) last_run, (expired? "" : "not "),
	(long long) now, unexpired_fail_count, rsc->failure_timeout,
	(long long) last_failure);
	last_failure += rsc->failure_timeout + 1;
	if (unexpired_fail_count && (now < last_failure)) {
	pe__update_recheck_time(last_failure, data_set);
	}
	}

	if (expired) {
	if (pe_get_failcount(node, rsc, NULL, pe_fc_default, xml_op, data_set)) {

	// There is a fail count ignoring timeout

	if (unexpired_fail_count == 0) {
	// There is no fail count considering timeout
	clear_reason = "it expired";

	} else {
	/* This operation is old, but there is an unexpired fail count.
	* In a properly functioning cluster, this should only be
	* possible if this operation is not a failure (otherwise the
	* fail count should be expired too), so this is really just a
	* failsafe.
	*/
	expired = FALSE;
	}

	} else if (is_last_failure && rsc->remote_reconnect_ms) {
	/* Clear any expired last failure when reconnect interval is set,
	* even if there is no fail count.
	*/
	clear_reason = "reconnect interval is set";
	}
	}

	if (!expired && is_last_failure
	&& should_clear_for_param_change(xml_op, task, rsc, node, data_set)) {
	clear_reason = "resource parameters have changed";
	}

	if (clear_reason != NULL) {
	// Schedule clearing of the fail count
	pe_action_t *clear_op = pe__clear_failcount(rsc, node, clear_reason,
	data_set);

	if (pcmk_is_set(data_set->flags, pe_flag_stonith_enabled)
	&& rsc->remote_reconnect_ms) {
	/* If we're clearing a remote connection due to a reconnect
	* interval, we want to wait until any scheduled fencing
	* completes.
	*
	* We could limit this to remote_node->details->unclean, but at
	* this point, that's always true (it won't be reliable until
	* after unpack_node_history() is done).
	*/
	crm_info("Clearing %s failure will wait until any scheduled "
	"fencing of %s completes", task, rsc->id);
	order_after_remote_fencing(clear_op, rsc, data_set);
	}
	}

	if (expired && (interval_ms == 0) && pcmk__str_eq(task, CRMD_ACTION_STATUS, pcmk__str_casei)) {
	switch(rc) {
	case PCMK_OCF_OK:
	case PCMK_OCF_NOT_RUNNING:
	case PCMK_OCF_RUNNING_PROMOTED:
	case PCMK_OCF_DEGRADED:
	case PCMK_OCF_DEGRADED_PROMOTED:
	// Don't expire probes that return these values
	expired = FALSE;
	break;
	}
	}

	return expired;
	}

	int pe__target_rc_from_xml(xmlNode *xml_op)
	{
	int target_rc = 0;
	const char *key = crm_element_value(xml_op, XML_ATTR_TRANSITION_KEY);

	if (key == NULL) {
	return -1;
	}
	decode_transition_key(key, NULL, NULL, NULL, &target_rc);
	return target_rc;
	}

	static enum action_fail_response
	get_action_on_fail(pe_resource_t rsc, const char key, const char task, pe_working_set_t data_set)
	{
	enum action_fail_response result = action_fail_recover;
	pe_action_t *action = custom_action(rsc, strdup(key), task, NULL, TRUE, FALSE, data_set);

	result = action->on_fail;
	pe_free_action(action);

	return result;
	}

	static void
	update_resource_state(pe_resource_t * rsc, pe_node_t * node, xmlNode * xml_op, const char * task, int rc,
	xmlNode * last_failure, enum action_fail_response * on_fail, pe_working_set_t * data_set)
	{
	gboolean clear_past_failure = FALSE;

	CRM_ASSERT(rsc);
	CRM_ASSERT(xml_op);

	if (rc == PCMK_OCF_NOT_INSTALLED \|\| (!pe_rsc_is_bundled(rsc) && pcmk_xe_mask_probe_failure(xml_op))) {
	rsc->role = RSC_ROLE_STOPPED;

	} else if (rc == PCMK_OCF_NOT_RUNNING) {
	clear_past_failure = TRUE;

	} else if (pcmk__str_eq(task, CRMD_ACTION_STATUS, pcmk__str_casei)) {
	if (last_failure) {
	const char *op_key = get_op_key(xml_op);
	const char *last_failure_key = get_op_key(last_failure);

	if (pcmk__str_eq(op_key, last_failure_key, pcmk__str_casei)) {
	clear_past_failure = TRUE;
	}
	}

	if (rsc->role < RSC_ROLE_STARTED) {
	set_active(rsc);
	}

	} else if (pcmk__str_eq(task, CRMD_ACTION_START, pcmk__str_casei)) {
	rsc->role = RSC_ROLE_STARTED;
	clear_past_failure = TRUE;

	} else if (pcmk__str_eq(task, CRMD_ACTION_STOP, pcmk__str_casei)) {
	rsc->role = RSC_ROLE_STOPPED;
	clear_past_failure = TRUE;

	} else if (pcmk__str_eq(task, CRMD_ACTION_PROMOTE, pcmk__str_casei)) {
	rsc->role = RSC_ROLE_PROMOTED;
	clear_past_failure = TRUE;

	} else if (pcmk__str_eq(task, CRMD_ACTION_DEMOTE, pcmk__str_casei)) {

	if (*on_fail == action_fail_demote) {
	// Demote clears an error only if on-fail=demote
	clear_past_failure = TRUE;
	}
	rsc->role = RSC_ROLE_UNPROMOTED;

	} else if (pcmk__str_eq(task, CRMD_ACTION_MIGRATED, pcmk__str_casei)) {
	rsc->role = RSC_ROLE_STARTED;
	clear_past_failure = TRUE;

	} else if (pcmk__str_eq(task, CRMD_ACTION_MIGRATE, pcmk__str_casei)) {
	unpack_migrate_to_success(rsc, node, xml_op, data_set);

	} else if (rsc->role < RSC_ROLE_STARTED) {
	pe_rsc_trace(rsc, "%s active on %s", rsc->id, node->details->uname);
	set_active(rsc);
	}

	/* clear any previous failure actions */
	if (clear_past_failure) {
	switch (*on_fail) {
	case action_fail_stop:
	case action_fail_fence:
	case action_fail_migrate:
	case action_fail_standby:
	pe_rsc_trace(rsc, "%s.%s is not cleared by a completed stop",
	rsc->id, fail2text(*on_fail));
	break;

	case action_fail_block:
	case action_fail_ignore:
	case action_fail_demote:
	case action_fail_recover:
	case action_fail_restart_container:
	*on_fail = action_fail_ignore;
	pe__set_next_role(rsc, RSC_ROLE_UNKNOWN, "clear past failures");
	break;
	case action_fail_reset_remote:
	if (rsc->remote_reconnect_ms == 0) {
	/* With no reconnect interval, the connection is allowed to
	* start again after the remote node is fenced and
	* completely stopped. (With a reconnect interval, we wait
	* for the failure to be cleared entirely before attempting
	* to reconnect.)
	*/
	*on_fail = action_fail_ignore;
	pe__set_next_role(rsc, RSC_ROLE_UNKNOWN,
	"clear past failures and reset remote");
	}
	break;
	}
	}
	}

	static void
	unpack_rsc_op(pe_resource_t rsc, pe_node_t node, xmlNode *xml_op,
	xmlNode *last_failure, enum action_fail_response on_fail,
	pe_working_set_t *data_set)
	{
	int rc = 0;
	int old_rc = 0;
	int task_id = 0;
	int target_rc = 0;
	int old_target_rc = 0;
	int status = PCMK_EXEC_UNKNOWN;
	guint interval_ms = 0;
	const char *task = NULL;
	const char *task_key = NULL;
	const char *exit_reason = NULL;
	bool expired = false;
	pe_resource_t *parent = rsc;
	enum action_fail_response failure_strategy = action_fail_recover;
	bool maskable_probe_failure = false;

	CRM_CHECK(rsc && node && xml_op, return);

	target_rc = pe__target_rc_from_xml(xml_op);
	task_key = get_op_key(xml_op);
	task = crm_element_value(xml_op, XML_LRM_ATTR_TASK);
	exit_reason = crm_element_value(xml_op, XML_LRM_ATTR_EXIT_REASON);
	if (exit_reason == NULL) {
	exit_reason = "";
	}

	crm_element_value_int(xml_op, XML_LRM_ATTR_RC, &rc);
	crm_element_value_int(xml_op, XML_LRM_ATTR_CALLID, &task_id);
	crm_element_value_int(xml_op, XML_LRM_ATTR_OPSTATUS, &status);
	crm_element_value_ms(xml_op, XML_LRM_ATTR_INTERVAL_MS, &interval_ms);

	CRM_CHECK(task != NULL, return);
	CRM_CHECK((status >= PCMK_EXEC_PENDING) && (status <= PCMK_EXEC_MAX),
	return);

	if (!strcmp(task, CRMD_ACTION_NOTIFY) \|\|
	!strcmp(task, CRMD_ACTION_METADATA)) {
	/* safe to ignore these */
	return;
	}

	if (!pcmk_is_set(rsc->flags, pe_rsc_unique)) {
	parent = uber_parent(rsc);
	}

	pe_rsc_trace(rsc, "Unpacking task %s/%s (call_id=%d, status=%d, rc=%d) on %s (role=%s)",
	task_key, task, task_id, status, rc, node->details->uname, role2text(rsc->role));

	if (node->details->unclean) {
	pe_rsc_trace(rsc, "Node %s (where %s is running) is unclean."
	" Further action depends on the value of the stop's on-fail attribute",
	node->details->uname, rsc->id);
	}

	/* It should be possible to call remap_operation() first then call
	* check_operation_expiry() only if rc != target_rc, because there should
	* never be a fail count without at least one unexpected result in the
	* resource history. That would be more efficient by avoiding having to call
	* check_operation_expiry() for expected results.
	*
	* However, we do have such configurations in the scheduler regression
	* tests, even if it shouldn't be possible with the current code. It's
	* probably a good idea anyway, but that would require updating the test
	* inputs to something currently possible.
	*/

	if ((status != PCMK_EXEC_NOT_INSTALLED)
	&& check_operation_expiry(rsc, node, rc, xml_op, data_set)) {
	expired = true;
	}

	old_rc = rc;
	old_target_rc = target_rc;

	remap_operation(xml_op, rsc, node, data_set, on_fail, target_rc,
	&rc, &status);

	maskable_probe_failure = !pe_rsc_is_bundled(rsc) && pcmk_xe_mask_probe_failure(xml_op);

	if (expired && maskable_probe_failure && old_rc != old_target_rc) {
	if (rsc->role <= RSC_ROLE_STOPPED) {
	rsc->role = RSC_ROLE_UNKNOWN;
	}

	goto done;

	} else if (expired && (rc != target_rc)) {
	const char *magic = crm_element_value(xml_op, XML_ATTR_TRANSITION_MAGIC);

	if (interval_ms == 0) {
	crm_notice("Ignoring expired %s failure on %s "
	CRM_XS " actual=%d expected=%d magic=%s",
	task_key, node->details->uname, rc, target_rc, magic);
	goto done;

	} else if(node->details->online && node->details->unclean == FALSE) {
	/* Reschedule the recurring monitor. schedule_cancel() won't work at
	* this stage, so as a hacky workaround, forcibly change the restart
	* digest so pcmk__check_action_config() does what we want later.
	*
	* @TODO We should skip this if there is a newer successful monitor.
	* Also, this causes rescheduling only if the history entry
	* has an op-digest (which the expire-non-blocked-failure
	* scheduler regression test doesn't, but that may not be a
	* realistic scenario in production).
	*/
	crm_notice("Rescheduling %s after failure expired on %s "
	CRM_XS " actual=%d expected=%d magic=%s",
	task_key, node->details->uname, rc, target_rc, magic);
	crm_xml_add(xml_op, XML_LRM_ATTR_RESTART_DIGEST, "calculated-failure-timeout");
	goto done;
	}
	}

	if (maskable_probe_failure) {
	crm_notice("Treating probe result '%s' for %s on %s as 'not running'",
	services_ocf_exitcode_str(old_rc), rsc->id, node->details->uname);
	update_resource_state(rsc, node, xml_op, task, target_rc, *last_failure,
	on_fail, data_set);
	crm_xml_add(xml_op, XML_ATTR_UNAME, node->details->uname);

	record_failed_op(xml_op, node, rsc, data_set);
	resource_location(parent, node, -INFINITY, "masked-probe-failure", data_set);
	goto done;
	}

	switch (status) {
	case PCMK_EXEC_CANCELLED:
	// Should never happen
	pe_err("Resource history contains cancellation '%s' "
	"(%s of %s on %s at %s)",
	ID(xml_op), task, rsc->id, node->details->uname,
	last_change_str(xml_op));
	goto done;

	case PCMK_EXEC_PENDING:
	if (!strcmp(task, CRMD_ACTION_START)) {
	pe__set_resource_flags(rsc, pe_rsc_start_pending);
	set_active(rsc);

	} else if (!strcmp(task, CRMD_ACTION_PROMOTE)) {
	rsc->role = RSC_ROLE_PROMOTED;

	} else if (!strcmp(task, CRMD_ACTION_MIGRATE) && node->details->unclean) {
	/* If a pending migrate_to action is out on a unclean node,
	* we have to force the stop action on the target. */
	const char *migrate_target = crm_element_value(xml_op, XML_LRM_ATTR_MIGRATE_TARGET);
	pe_node_t *target = pe_find_node(data_set->nodes, migrate_target);
	if (target) {
	stop_action(rsc, target, FALSE);
	}
	}

	if (rsc->pending_task == NULL) {
	if ((interval_ms != 0) \|\| strcmp(task, CRMD_ACTION_STATUS)) {
	rsc->pending_task = strdup(task);
	rsc->pending_node = node;
	} else {
	/* Pending probes are not printed, even if pending
	* operations are requested. If someone ever requests that
	* behavior, enable the below and the corresponding part of
	* native.c:native_pending_task().
	*/
	#if 0
	rsc->pending_task = strdup("probe");
	rsc->pending_node = node;
	#endif
	}
	}
	goto done;

	case PCMK_EXEC_DONE:
	pe_rsc_trace(rsc, "%s of %s on %s completed at %s " CRM_XS " id=%s",
	task, rsc->id, node->details->uname,
	last_change_str(xml_op), ID(xml_op));
	update_resource_state(rsc, node, xml_op, task, rc, *last_failure, on_fail, data_set);
	goto done;

	case PCMK_EXEC_NOT_INSTALLED:
	failure_strategy = get_action_on_fail(rsc, task_key, task, data_set);
	if (failure_strategy == action_fail_ignore) {
	crm_warn("Cannot ignore failed %s of %s on %s: "
	"Resource agent doesn't exist "
	CRM_XS " status=%d rc=%d id=%s",
	task, rsc->id, node->details->uname, status, rc,
	ID(xml_op));
	/* Also for printing it as "FAILED" by marking it as pe_rsc_failed later */
	*on_fail = action_fail_migrate;
	}
	resource_location(parent, node, -INFINITY, "hard-error", data_set);
	unpack_rsc_op_failure(rsc, node, rc, xml_op, last_failure, on_fail, data_set);
	goto done;

	case PCMK_EXEC_NOT_CONNECTED:
	if (pe__is_guest_or_remote_node(node)
	&& pcmk_is_set(node->details->remote_rsc->flags, pe_rsc_managed)) {
	/* We should never get into a situation where a managed remote
	* connection resource is considered OK but a resource action
	* behind the connection gets a "not connected" status. But as a
	* fail-safe in case a bug or unusual circumstances do lead to
	* that, ensure the remote connection is considered failed.
	*/
	pe__set_resource_flags(node->details->remote_rsc,
	pe_rsc_failed\|pe_rsc_stop);
	}
	break; // Not done, do error handling

	case PCMK_EXEC_ERROR:
	case PCMK_EXEC_ERROR_HARD:
	case PCMK_EXEC_ERROR_FATAL:
	case PCMK_EXEC_TIMEOUT:
	case PCMK_EXEC_NOT_SUPPORTED:
	case PCMK_EXEC_INVALID:
	break; // Not done, do error handling

	case PCMK_EXEC_NO_FENCE_DEVICE:
	case PCMK_EXEC_NO_SECRETS:
	status = PCMK_EXEC_ERROR_HARD;
	break; // Not done, do error handling
	}

	failure_strategy = get_action_on_fail(rsc, task_key, task, data_set);
	if ((failure_strategy == action_fail_ignore)
	\|\| (failure_strategy == action_fail_restart_container
	&& !strcmp(task, CRMD_ACTION_STOP))) {

	crm_warn("Pretending failed %s (%s%s%s) of %s on %s at %s "
	"succeeded " CRM_XS " rc=%d id=%s",
	task, services_ocf_exitcode_str(rc),
	(*exit_reason? ": " : ""), exit_reason, rsc->id,
	node->details->uname, last_change_str(xml_op), rc,
	ID(xml_op));

	update_resource_state(rsc, node, xml_op, task, target_rc, *last_failure,
	on_fail, data_set);
	crm_xml_add(xml_op, XML_ATTR_UNAME, node->details->uname);
	pe__set_resource_flags(rsc, pe_rsc_failure_ignored);

	record_failed_op(xml_op, node, rsc, data_set);

	if ((failure_strategy == action_fail_restart_container)
	&& cmp_on_fail(*on_fail, action_fail_recover) <= 0) {
	*on_fail = failure_strategy;
	}

	} else {
	unpack_rsc_op_failure(rsc, node, rc, xml_op, last_failure, on_fail,
	data_set);

	if (status == PCMK_EXEC_ERROR_HARD) {
	do_crm_log(rc != PCMK_OCF_NOT_INSTALLED?LOG_ERR:LOG_NOTICE,
	"Preventing %s from restarting on %s because "
	"of hard failure (%s%s%s)" CRM_XS " rc=%d id=%s",
	parent->id, node->details->uname,
	services_ocf_exitcode_str(rc),
	(*exit_reason? ": " : ""), exit_reason,
	rc, ID(xml_op));
	resource_location(parent, node, -INFINITY, "hard-error", data_set);

	} else if (status == PCMK_EXEC_ERROR_FATAL) {
	crm_err("Preventing %s from restarting anywhere because "
	"of fatal failure (%s%s%s) " CRM_XS " rc=%d id=%s",
	parent->id, services_ocf_exitcode_str(rc),
	(*exit_reason? ": " : ""), exit_reason,
	rc, ID(xml_op));
	resource_location(parent, NULL, -INFINITY, "fatal-error", data_set);
	}
	}

	done:
	pe_rsc_trace(rsc, "Resource %s after %s: role=%s, next=%s",
	rsc->id, task, role2text(rsc->role),
	role2text(rsc->next_role));
	}

	static void
	add_node_attrs(xmlNode xml_obj, pe_node_t node, bool overwrite,
	pe_working_set_t *data_set)
	{
	const char *cluster_name = NULL;

	pe_rule_eval_data_t rule_data = {
	.node_hash = NULL,
	.role = RSC_ROLE_UNKNOWN,
	.now = data_set->now,
	.match_data = NULL,
	.rsc_data = NULL,
	.op_data = NULL
	};

	g_hash_table_insert(node->details->attrs,
	strdup(CRM_ATTR_UNAME), strdup(node->details->uname));

	g_hash_table_insert(node->details->attrs, strdup(CRM_ATTR_ID),
	strdup(node->details->id));
	if (pcmk__str_eq(node->details->id, data_set->dc_uuid, pcmk__str_casei)) {
	data_set->dc_node = node;
	node->details->is_dc = TRUE;
	g_hash_table_insert(node->details->attrs,
	strdup(CRM_ATTR_IS_DC), strdup(XML_BOOLEAN_TRUE));
	} else {
	g_hash_table_insert(node->details->attrs,
	strdup(CRM_ATTR_IS_DC), strdup(XML_BOOLEAN_FALSE));
	}

	cluster_name = g_hash_table_lookup(data_set->config_hash, "cluster-name");
	if (cluster_name) {
	g_hash_table_insert(node->details->attrs, strdup(CRM_ATTR_CLUSTER_NAME),
	strdup(cluster_name));
	}

	pe__unpack_dataset_nvpairs(xml_obj, XML_TAG_ATTR_SETS, &rule_data,
	node->details->attrs, NULL, overwrite, data_set);

	if (pe_node_attribute_raw(node, CRM_ATTR_SITE_NAME) == NULL) {
	const char *site_name = pe_node_attribute_raw(node, "site-name");

	if (site_name) {
	g_hash_table_insert(node->details->attrs,
	strdup(CRM_ATTR_SITE_NAME),
	strdup(site_name));

	} else if (cluster_name) {
	/* Default to cluster-name if unset */
	g_hash_table_insert(node->details->attrs,
	strdup(CRM_ATTR_SITE_NAME),
	strdup(cluster_name));
	}
	}
	}

	static GList *
	extract_operations(const char node, const char rsc, xmlNode * rsc_entry, gboolean active_filter)
	{
	int counter = -1;
	int stop_index = -1;
	int start_index = -1;

	xmlNode *rsc_op = NULL;

	GList *gIter = NULL;
	GList *op_list = NULL;
	GList *sorted_op_list = NULL;

	/* extract operations */
	op_list = NULL;
	sorted_op_list = NULL;

	for (rsc_op = pcmk__xe_first_child(rsc_entry);
	rsc_op != NULL; rsc_op = pcmk__xe_next(rsc_op)) {

	if (pcmk__str_eq((const char *)rsc_op->name, XML_LRM_TAG_RSC_OP,
	pcmk__str_none)) {
	crm_xml_add(rsc_op, "resource", rsc);
	crm_xml_add(rsc_op, XML_ATTR_UNAME, node);
	op_list = g_list_prepend(op_list, rsc_op);
	}
	}

	if (op_list == NULL) {
	/* if there are no operations, there is nothing to do */
	return NULL;
	}

	sorted_op_list = g_list_sort(op_list, sort_op_by_callid);

	/* create active recurring operations as optional */
	if (active_filter == FALSE) {
	return sorted_op_list;
	}

	op_list = NULL;

	calculate_active_ops(sorted_op_list, &start_index, &stop_index);

	for (gIter = sorted_op_list; gIter != NULL; gIter = gIter->next) {
	xmlNode rsc_op = (xmlNode ) gIter->data;

	counter++;

	if (start_index < stop_index) {
	crm_trace("Skipping %s: not active", ID(rsc_entry));
	break;

	} else if (counter < start_index) {
	crm_trace("Skipping %s: old", ID(rsc_op));
	continue;
	}
	op_list = g_list_append(op_list, rsc_op);
	}

	g_list_free(sorted_op_list);
	return op_list;
	}

	GList *
	find_operations(const char rsc, const char node, gboolean active_filter,
	pe_working_set_t * data_set)
	{
	GList *output = NULL;
	GList *intermediate = NULL;

	xmlNode *tmp = NULL;
	xmlNode *status = find_xml_node(data_set->input, XML_CIB_TAG_STATUS, TRUE);

	pe_node_t *this_node = NULL;

	xmlNode *node_state = NULL;

	for (node_state = pcmk__xe_first_child(status); node_state != NULL;
	node_state = pcmk__xe_next(node_state)) {

	if (pcmk__str_eq((const char *)node_state->name, XML_CIB_TAG_STATE, pcmk__str_none)) {
	const char *uname = crm_element_value(node_state, XML_ATTR_UNAME);

	if (node != NULL && !pcmk__str_eq(uname, node, pcmk__str_casei)) {
	continue;
	}

	this_node = pe_find_node(data_set->nodes, uname);
	if(this_node == NULL) {
	CRM_LOG_ASSERT(this_node != NULL);
	continue;

	} else if (pe__is_guest_or_remote_node(this_node)) {
	determine_remote_online_status(data_set, this_node);

	} else {
	determine_online_status(node_state, this_node, data_set);
	}

	if (this_node->details->online
	\|\| pcmk_is_set(data_set->flags, pe_flag_stonith_enabled)) {
	/* offline nodes run no resources...
	* unless stonith is enabled in which case we need to
	* make sure rsc start events happen after the stonith
	*/
	xmlNode *lrm_rsc = NULL;

	tmp = find_xml_node(node_state, XML_CIB_TAG_LRM, FALSE);
	tmp = find_xml_node(tmp, XML_LRM_TAG_RESOURCES, FALSE);

	for (lrm_rsc = pcmk__xe_first_child(tmp); lrm_rsc != NULL;
	lrm_rsc = pcmk__xe_next(lrm_rsc)) {

	if (pcmk__str_eq((const char *)lrm_rsc->name,
	XML_LRM_TAG_RESOURCE, pcmk__str_none)) {

	const char *rsc_id = crm_element_value(lrm_rsc, XML_ATTR_ID);

	if (rsc != NULL && !pcmk__str_eq(rsc_id, rsc, pcmk__str_casei)) {
	continue;
	}

	intermediate = extract_operations(uname, rsc_id, lrm_rsc, active_filter);
	output = g_list_concat(output, intermediate);
	}
	}
	}
	}
	}

	return output;
	}
	diff --git a/lib/pengine/utils.c b/lib/pengine/utils.c
	index c7be84a775..777e4e110f 100644
	--- a/lib/pengine/utils.c
	+++ b/lib/pengine/utils.c
	@@ -1,2626 +1,2631 @@
	/*
	* Copyright 2004-2022 the Pacemaker project contributors
	*
	* The version control history for this file may have further details.
	*
	* This source code is licensed under the GNU Lesser General Public License
	* version 2.1 or later (LGPLv2.1+) WITHOUT ANY WARRANTY.
	*/

	#include <crm_internal.h>
	#include <crm/crm.h>
	#include <crm/msg_xml.h>
	#include <crm/common/xml.h>
	#include <crm/common/xml_internal.h>
	#include <crm/common/util.h>

	#include <glib.h>
	#include <stdbool.h>

	#include <crm/pengine/rules.h>
	#include <crm/pengine/internal.h>
	#include "pe_status_private.h"

	extern bool pcmk__is_daemon;

	void print_str_str(gpointer key, gpointer value, gpointer user_data);
	gboolean ghash_free_str_str(gpointer key, gpointer value, gpointer user_data);
	static void unpack_operation(pe_action_t * action, xmlNode * xml_obj, pe_resource_t * container,
	pe_working_set_t * data_set, guint interval_ms);
	static xmlNode find_rsc_op_entry_helper(pe_resource_t rsc, const char *key,
	gboolean include_disabled);

	#if ENABLE_VERSIONED_ATTRS
	pe_rsc_action_details_t *
	pe_rsc_action_details(pe_action_t *action)
	{
	pe_rsc_action_details_t *details;

	CRM_CHECK(action != NULL, return NULL);

	if (action->action_details == NULL) {
	action->action_details = calloc(1, sizeof(pe_rsc_action_details_t));
	CRM_CHECK(action->action_details != NULL, return NULL);
	}

	details = (pe_rsc_action_details_t *) action->action_details;
	if (details->versioned_parameters == NULL) {
	details->versioned_parameters = create_xml_node(NULL,
	XML_TAG_OP_VER_ATTRS);
	}
	if (details->versioned_meta == NULL) {
	details->versioned_meta = create_xml_node(NULL, XML_TAG_OP_VER_META);
	}
	return details;
	}

	static void
	pe_free_rsc_action_details(pe_action_t *action)
	{
	pe_rsc_action_details_t *details;

	if ((action == NULL) \|\| (action->action_details == NULL)) {
	return;
	}

	details = (pe_rsc_action_details_t *) action->action_details;

	if (details->versioned_parameters) {
	free_xml(details->versioned_parameters);
	}
	if (details->versioned_meta) {
	free_xml(details->versioned_meta);
	}

	action->action_details = NULL;
	}
	#endif

	/*!
	* \internal
	* \brief Check whether we can fence a particular node
	*
	* \param[in] data_set Working set for cluster
	* \param[in] node Name of node to check
	*
	* \return true if node can be fenced, false otherwise
	*/
	bool
	pe_can_fence(pe_working_set_t data_set, pe_node_t node)
	{
	if (pe__is_guest_node(node)) {
	/* Guest nodes are fenced by stopping their container resource. We can
	* do that if the container's host is either online or fenceable.
	*/
	pe_resource_t *rsc = node->details->remote_rsc->container;

	for (GList *n = rsc->running_on; n != NULL; n = n->next) {
	pe_node_t *container_node = n->data;

	if (!container_node->details->online
	&& !pe_can_fence(data_set, container_node)) {
	return false;
	}
	}
	return true;

	} else if (!pcmk_is_set(data_set->flags, pe_flag_stonith_enabled)) {
	return false; /* Turned off */

	} else if (!pcmk_is_set(data_set->flags, pe_flag_have_stonith_resource)) {
	return false; /* No devices */

	} else if (pcmk_is_set(data_set->flags, pe_flag_have_quorum)) {
	return true;

	} else if (data_set->no_quorum_policy == no_quorum_ignore) {
	return true;

	} else if(node == NULL) {
	return false;

	} else if(node->details->online) {
	crm_notice("We can fence %s without quorum because they're in our membership", node->details->uname);
	return true;
	}

	crm_trace("Cannot fence %s", node->details->uname);
	return false;
	}

	/*!
	* \internal
	* \brief Copy a node object
	*
	* \param[in] this_node Node object to copy
	*
	* \return Newly allocated shallow copy of this_node
	* \note This function asserts on errors and is guaranteed to return non-NULL.
	*/
	pe_node_t *
	pe__copy_node(const pe_node_t *this_node)
	{
	pe_node_t *new_node = NULL;

	CRM_ASSERT(this_node != NULL);

	new_node = calloc(1, sizeof(pe_node_t));
	CRM_ASSERT(new_node != NULL);

	new_node->rsc_discover_mode = this_node->rsc_discover_mode;
	new_node->weight = this_node->weight;
	new_node->fixed = this_node->fixed;
	new_node->details = this_node->details;

	return new_node;
	}

	/* any node in list1 or list2 and not in the other gets a score of -INFINITY */
	void
	node_list_exclude(GHashTable * hash, GList *list, gboolean merge_scores)
	{
	GHashTable *result = hash;
	pe_node_t *other_node = NULL;
	GList *gIter = list;

	GHashTableIter iter;
	pe_node_t *node = NULL;

	g_hash_table_iter_init(&iter, hash);
	while (g_hash_table_iter_next(&iter, NULL, (void **)&node)) {

	other_node = pe_find_node_id(list, node->details->id);
	if (other_node == NULL) {
	node->weight = -INFINITY;
	} else if (merge_scores) {
	node->weight = pcmk__add_scores(node->weight, other_node->weight);
	}
	}

	for (; gIter != NULL; gIter = gIter->next) {
	pe_node_t node = (pe_node_t ) gIter->data;

	other_node = pe_hash_table_lookup(result, node->details->id);

	if (other_node == NULL) {
	pe_node_t *new_node = pe__copy_node(node);

	new_node->weight = -INFINITY;
	g_hash_table_insert(result, (gpointer) new_node->details->id, new_node);
	}
	}
	}

	/*!
	* \internal
	* \brief Create a node hash table from a node list
	*
	* \param[in] list Node list
	*
	* \return Hash table equivalent of node list
	*/
	GHashTable *
	pe__node_list2table(GList *list)
	{
	GHashTable *result = NULL;

	result = pcmk__strkey_table(NULL, free);
	for (GList *gIter = list; gIter != NULL; gIter = gIter->next) {
	pe_node_t new_node = pe__copy_node((pe_node_t ) gIter->data);

	g_hash_table_insert(result, (gpointer) new_node->details->id, new_node);
	}
	return result;
	}

	gint
	sort_node_uname(gconstpointer a, gconstpointer b)
	{
	return pcmk__numeric_strcasecmp(((const pe_node_t *) a)->details->uname,
	((const pe_node_t *) b)->details->uname);
	}

	/*!
	* \internal
	* \brief Output node weights to stdout
	*
	* \param[in] rsc Use allowed nodes for this resource
	* \param[in] comment Text description to prefix lines with
	* \param[in] nodes If rsc is not specified, use these nodes
	*/
	static void
	pe__output_node_weights(pe_resource_t rsc, const char comment,
	GHashTable nodes, pe_working_set_t data_set)
	{
	pcmk__output_t *out = data_set->priv;
	char score[128]; // Stack-allocated since this is called frequently

	// Sort the nodes so the output is consistent for regression tests
	GList *list = g_list_sort(g_hash_table_get_values(nodes), sort_node_uname);

	for (GList *gIter = list; gIter != NULL; gIter = gIter->next) {
	pe_node_t node = (pe_node_t ) gIter->data;

	score2char_stack(node->weight, score, sizeof(score));
	out->message(out, "node-weight", rsc, comment, node->details->uname, score);
	}
	g_list_free(list);
	}

	/*!
	* \internal
	* \brief Log node weights at trace level
	*
	* \param[in] file Caller's filename
	* \param[in] function Caller's function name
	* \param[in] line Caller's line number
	* \param[in] rsc Use allowed nodes for this resource
	* \param[in] comment Text description to prefix lines with
	* \param[in] nodes If rsc is not specified, use these nodes
	*/
	static void
	pe__log_node_weights(const char file, const char function, int line,
	pe_resource_t rsc, const char comment, GHashTable *nodes)
	{
	GHashTableIter iter;
	pe_node_t *node = NULL;
	char score[128]; // Stack-allocated since this is called frequently

	// Don't waste time if we're not tracing at this point
	pcmk__log_else(LOG_TRACE, return);

	g_hash_table_iter_init(&iter, nodes);
	while (g_hash_table_iter_next(&iter, NULL, (void **) &node)) {
	score2char_stack(node->weight, score, sizeof(score));
	if (rsc) {
	qb_log_from_external_source(function, file,
	"%s: %s allocation score on %s: %s",
	LOG_TRACE, line, 0,
	comment, rsc->id,
	node->details->uname, score);
	} else {
	qb_log_from_external_source(function, file, "%s: %s = %s",
	LOG_TRACE, line, 0,
	comment, node->details->uname,
	score);
	}
	}
	}

	/*!
	* \internal
	* \brief Log or output node weights
	*
	* \param[in] file Caller's filename
	* \param[in] function Caller's function name
	* \param[in] line Caller's line number
	* \param[in] to_log Log if true, otherwise output
	* \param[in] rsc Use allowed nodes for this resource
	* \param[in] comment Text description to prefix lines with
	* \param[in] nodes Use these nodes
	*/
	void
	pe__show_node_weights_as(const char file, const char function, int line,
	bool to_log, pe_resource_t rsc, const char comment,
	GHashTable nodes, pe_working_set_t data_set)
	{
	if (rsc != NULL && pcmk_is_set(rsc->flags, pe_rsc_orphan)) {
	// Don't show allocation scores for orphans
	return;
	}
	if (nodes == NULL) {
	// Nothing to show
	return;
	}

	if (to_log) {
	pe__log_node_weights(file, function, line, rsc, comment, nodes);
	} else {
	pe__output_node_weights(rsc, comment, nodes, data_set);
	}

	// If this resource has children, repeat recursively for each
	if (rsc && rsc->children) {
	for (GList *gIter = rsc->children; gIter != NULL; gIter = gIter->next) {
	pe_resource_t child = (pe_resource_t ) gIter->data;

	pe__show_node_weights_as(file, function, line, to_log, child,
	comment, child->allowed_nodes, data_set);
	}
	}
	}

	gint
	sort_rsc_index(gconstpointer a, gconstpointer b)
	{
	const pe_resource_t resource1 = (const pe_resource_t )a;
	const pe_resource_t resource2 = (const pe_resource_t )b;

	if (a == NULL && b == NULL) {
	return 0;
	}
	if (a == NULL) {
	return 1;
	}
	if (b == NULL) {
	return -1;
	}

	if (resource1->sort_index > resource2->sort_index) {
	return -1;
	}

	if (resource1->sort_index < resource2->sort_index) {
	return 1;
	}

	return 0;
	}

	gint
	sort_rsc_priority(gconstpointer a, gconstpointer b)
	{
	const pe_resource_t resource1 = (const pe_resource_t )a;
	const pe_resource_t resource2 = (const pe_resource_t )b;

	if (a == NULL && b == NULL) {
	return 0;
	}
	if (a == NULL) {
	return 1;
	}
	if (b == NULL) {
	return -1;
	}

	if (resource1->priority > resource2->priority) {
	return -1;
	}

	if (resource1->priority < resource2->priority) {
	return 1;
	}

	return 0;
	}

	static enum pe_quorum_policy
	effective_quorum_policy(pe_resource_t rsc, pe_working_set_t data_set)
	{
	enum pe_quorum_policy policy = data_set->no_quorum_policy;

	if (pcmk_is_set(data_set->flags, pe_flag_have_quorum)) {
	policy = no_quorum_ignore;

	} else if (data_set->no_quorum_policy == no_quorum_demote) {
	switch (rsc->role) {
	case RSC_ROLE_PROMOTED:
	case RSC_ROLE_UNPROMOTED:
	if (rsc->next_role > RSC_ROLE_UNPROMOTED) {
	pe__set_next_role(rsc, RSC_ROLE_UNPROMOTED,
	"no-quorum-policy=demote");
	}
	policy = no_quorum_ignore;
	break;
	default:
	policy = no_quorum_stop;
	break;
	}
	}
	return policy;
	}

	static void
	add_singleton(pe_working_set_t data_set, pe_action_t action)
	{
	if (data_set->singletons == NULL) {
	data_set->singletons = pcmk__strkey_table(NULL, NULL);
	}
	g_hash_table_insert(data_set->singletons, action->uuid, action);
	}

	static pe_action_t *
	lookup_singleton(pe_working_set_t data_set, const char action_uuid)
	{
	if (data_set->singletons == NULL) {
	return NULL;
	}
	return g_hash_table_lookup(data_set->singletons, action_uuid);
	}

	/*!
	* \internal
	* \brief Find an existing action that matches arguments
	*
	* \param[in] key Action key to match
	* \param[in] rsc Resource to match (if any)
	* \param[in] node Node to match (if any)
	* \param[in] data_set Cluster working set
	*
	* \return Existing action that matches arguments (or NULL if none)
	*/
	static pe_action_t *
	find_existing_action(const char key, pe_resource_t rsc, pe_node_t *node,
	pe_working_set_t *data_set)
	{
	GList *matches = NULL;
	pe_action_t *action = NULL;

	/* When rsc is NULL, it would be quicker to check data_set->singletons,
	* but checking all data_set->actions takes the node into account.
	*/
	matches = find_actions(((rsc == NULL)? data_set->actions : rsc->actions),
	key, node);
	if (matches == NULL) {
	return NULL;
	}
	CRM_LOG_ASSERT(!pcmk__list_of_multiple(matches));

	action = matches->data;
	g_list_free(matches);
	return action;
	}

	/*!
	* \internal
	* \brief Create a new action object
	*
	* \param[in] key Action key
	* \param[in] task Action name
	* \param[in] rsc Resource that action is for (if any)
	* \param[in] node Node that action is on (if any)
	* \param[in] optional Whether action should be considered optional
	* \param[in] for_graph Whether action should be recorded in transition graph
	* \param[in] data_set Cluster working set
	*
	* \return Newly allocated action
	* \note This function takes ownership of \p key. It is the caller's
	* responsibility to free the return value with pe_free_action().
	*/
	static pe_action_t *
	new_action(char key, const char task, pe_resource_t rsc, pe_node_t node,
	bool optional, bool for_graph, pe_working_set_t *data_set)
	{
	pe_action_t *action = calloc(1, sizeof(pe_action_t));

	CRM_ASSERT(action != NULL);

	action->rsc = rsc;
	action->task = strdup(task); CRM_ASSERT(action->task != NULL);
	action->uuid = key;
	action->extra = pcmk__strkey_table(free, free);
	action->meta = pcmk__strkey_table(free, free);

	if (node) {
	action->node = pe__copy_node(node);
	}

	if (pcmk__str_eq(task, CRM_OP_LRM_DELETE, pcmk__str_casei)) {
	// Resource history deletion for a node can be done on the DC
	pe__set_action_flags(action, pe_action_dc);
	}

	pe__set_action_flags(action, pe_action_runnable);
	if (optional) {
	pe__set_action_flags(action, pe_action_optional);
	} else {
	pe__clear_action_flags(action, pe_action_optional);
	}

	if (rsc != NULL) {
	guint interval_ms = 0;

	action->op_entry = find_rsc_op_entry_helper(rsc, key, TRUE);
	parse_op_key(key, NULL, NULL, &interval_ms);
	unpack_operation(action, action->op_entry, rsc->container, data_set,
	interval_ms);
	}

	if (for_graph) {
	pe_rsc_trace(rsc, "Created %s action %d (%s): %s for %s on %s",
	(optional? "optional" : "required"),
	data_set->action_id, key, task,
	((rsc == NULL)? "no resource" : rsc->id),
	((node == NULL)? "no node" : node->details->uname));
	action->id = data_set->action_id++;

	data_set->actions = g_list_prepend(data_set->actions, action);
	if (rsc == NULL) {
	add_singleton(data_set, action);
	} else {
	rsc->actions = g_list_prepend(rsc->actions, action);
	}
	}
	return action;
	}

	/*!
	* \internal
	* \brief Evaluate node attribute values for an action
	*
	* \param[in] action Action to unpack attributes for
	* \param[in] data_set Cluster working set
	*/
	static void
	unpack_action_node_attributes(pe_action_t action, pe_working_set_t data_set)
	{
	if (!pcmk_is_set(action->flags, pe_action_have_node_attrs)
	&& (action->op_entry != NULL)) {

	pe_rule_eval_data_t rule_data = {
	.node_hash = action->node->details->attrs,
	.role = RSC_ROLE_UNKNOWN,
	.now = data_set->now,
	.match_data = NULL,
	.rsc_data = NULL,
	.op_data = NULL
	};

	pe__set_action_flags(action, pe_action_have_node_attrs);
	pe__unpack_dataset_nvpairs(action->op_entry, XML_TAG_ATTR_SETS,
	&rule_data, action->extra, NULL,
	FALSE, data_set);
	}
	}

	/*!
	* \internal
	* \brief Update an action's optional flag
	*
	* \param[in] action Action to update
	* \param[in] optional Requested optional status
	*/
	static void
	update_action_optional(pe_action_t *action, gboolean optional)
	{
	// Force a non-recurring action to be optional if its resource is unmanaged
	if ((action->rsc != NULL) && (action->node != NULL)
	&& !pcmk_is_set(action->flags, pe_action_pseudo)
	&& !pcmk_is_set(action->rsc->flags, pe_rsc_managed)
	&& (g_hash_table_lookup(action->meta,
	XML_LRM_ATTR_INTERVAL_MS) == NULL)) {
	pe_rsc_debug(action->rsc, "%s on %s is optional (%s is unmanaged)",
	action->uuid, action->node->details->uname,
	action->rsc->id);
	pe__set_action_flags(action, pe_action_optional);
	// We shouldn't clear runnable here because ... something

	// Otherwise require the action if requested
	} else if (!optional) {
	pe__clear_action_flags(action, pe_action_optional);
	}
	}

	/*!
	* \internal
	* \brief Update a resource action's runnable flag
	*
	* \param[in] action Action to update
	* \param[in] for_graph Whether action should be recorded in transition graph
	* \param[in] data_set Cluster working set
	*
	* \note This may also schedule fencing if a stop is unrunnable.
	*/
	static void
	update_resource_action_runnable(pe_action_t *action, bool for_graph,
	pe_working_set_t *data_set)
	{
	if (pcmk_is_set(action->flags, pe_action_pseudo)) {
	return;
	}

	if (action->node == NULL) {
	pe_rsc_trace(action->rsc, "%s is unrunnable (unallocated)",
	action->uuid);
	pe__clear_action_flags(action, pe_action_runnable);

	} else if (!pcmk_is_set(action->flags, pe_action_dc)
	&& !(action->node->details->online)
	&& (!pe__is_guest_node(action->node)
	\|\| action->node->details->remote_requires_reset)) {
	pe__clear_action_flags(action, pe_action_runnable);
	do_crm_log((for_graph? LOG_WARNING: LOG_TRACE),
	"%s on %s is unrunnable (node is offline)",
	action->uuid, action->node->details->uname);
	if (pcmk_is_set(action->rsc->flags, pe_rsc_managed)
	&& for_graph
	&& pcmk__str_eq(action->task, CRMD_ACTION_STOP, pcmk__str_casei)
	&& !(action->node->details->unclean)) {
	pe_fence_node(data_set, action->node, "stop is unrunnable", false);
	}

	} else if (!pcmk_is_set(action->flags, pe_action_dc)
	&& action->node->details->pending) {
	pe__clear_action_flags(action, pe_action_runnable);
	do_crm_log((for_graph? LOG_WARNING: LOG_TRACE),
	"Action %s on %s is unrunnable (node is pending)",
	action->uuid, action->node->details->uname);

	} else if (action->needs == rsc_req_nothing) {
	pe_action_set_reason(action, NULL, TRUE);
	if (pe__is_guest_node(action->node)
	&& !pe_can_fence(data_set, action->node)) {
	/* An action that requires nothing usually does not require any
	* fencing in order to be runnable. However, there is an exception:
	* such an action cannot be completed if it is on a guest node whose
	* host is unclean and cannot be fenced.
	*/
	pe_rsc_debug(action->rsc, "%s on %s is unrunnable "
	"(node's host cannot be fenced)",
	action->uuid, action->node->details->uname);
	pe__clear_action_flags(action, pe_action_runnable);
	} else {
	pe_rsc_trace(action->rsc,
	"%s on %s does not require fencing or quorum",
	action->uuid, action->node->details->uname);
	pe__set_action_flags(action, pe_action_runnable);
	}

	} else {
	switch (effective_quorum_policy(action->rsc, data_set)) {
	case no_quorum_stop:
	pe_rsc_debug(action->rsc, "%s on %s is unrunnable (no quorum)",
	action->uuid, action->node->details->uname);
	pe__clear_action_flags(action, pe_action_runnable);
	pe_action_set_reason(action, "no quorum", true);
	break;

	case no_quorum_freeze:
	if (!action->rsc->fns->active(action->rsc, TRUE)
	\|\| (action->rsc->next_role > action->rsc->role)) {
	pe_rsc_debug(action->rsc,
	"%s on %s is unrunnable (no quorum)",
	action->uuid, action->node->details->uname);
	pe__clear_action_flags(action, pe_action_runnable);
	pe_action_set_reason(action, "quorum freeze", true);
	}
	break;

	default:
	//pe_action_set_reason(action, NULL, TRUE);
	pe__set_action_flags(action, pe_action_runnable);
	break;
	}
	}
	}

	/*!
	* \internal
	* \brief Update a resource object's flags for a new action on it
	*
	* \param[in] rsc Resource that action is for (if any)
	* \param[in] action New action
	*/
	static void
	update_resource_flags_for_action(pe_resource_t rsc, pe_action_t action)
	{
	/* @COMPAT pe_rsc_starting and pe_rsc_stopping are not actually used
	* within Pacemaker, and should be deprecated and eventually removed
	*/
	if (pcmk__str_eq(action->task, CRMD_ACTION_STOP, pcmk__str_casei)) {
	pe__set_resource_flags(rsc, pe_rsc_stopping);

	} else if (pcmk__str_eq(action->task, CRMD_ACTION_START, pcmk__str_casei)) {
	if (pcmk_is_set(action->flags, pe_action_runnable)) {
	pe__set_resource_flags(rsc, pe_rsc_starting);
	} else {
	pe__clear_resource_flags(rsc, pe_rsc_starting);
	}
	}
	}

	/*!
	* \brief Create or update an action object
	*
	* \param[in] rsc Resource that action is for (if any)
	* \param[in] key Action key (must be non-NULL)
	* \param[in] task Action name (must be non-NULL)
	* \param[in] on_node Node that action is on (if any)
	* \param[in] optional Whether action should be considered optional
	* \param[in] save_action Whether action should be recorded in transition graph
	* \param[in] data_set Cluster working set
	*
	* \return Action object corresponding to arguments
	* \note This function takes ownership of (and might free) \p key. If
	* \p save_action is true, \p data_set will own the returned action,
	* otherwise it is the caller's responsibility to free the return value
	* with pe_free_action().
	*/
	pe_action_t *
	custom_action(pe_resource_t rsc, char key, const char *task,
	pe_node_t *on_node, gboolean optional, gboolean save_action,
	pe_working_set_t *data_set)
	{
	pe_action_t *action = NULL;

	CRM_ASSERT((key != NULL) && (task != NULL) && (data_set != NULL));

	if (save_action) {
	action = find_existing_action(key, rsc, on_node, data_set);
	}

	if (action == NULL) {
	action = new_action(key, task, rsc, on_node, optional, save_action,
	data_set);
	} else {
	free(key);
	}

	update_action_optional(action, optional);

	if (rsc != NULL) {
	if (action->node != NULL) {
	unpack_action_node_attributes(action, data_set);
	}

	update_resource_action_runnable(action, save_action, data_set);

	if (save_action) {
	update_resource_flags_for_action(rsc, action);
	}
	}

	return action;
	}

	static bool
	valid_stop_on_fail(const char *value)
	{
	return !pcmk__strcase_any_of(value, "standby", "demote", "stop", NULL);
	}

	static const char *
	unpack_operation_on_fail(pe_action_t * action)
	{

	const char *name = NULL;
	const char *role = NULL;
	const char *on_fail = NULL;
	const char *interval_spec = NULL;
	const char *value = g_hash_table_lookup(action->meta, XML_OP_ATTR_ON_FAIL);

	if (pcmk__str_eq(action->task, CRMD_ACTION_STOP, pcmk__str_casei)
	&& !valid_stop_on_fail(value)) {

	pcmk__config_err("Resetting '" XML_OP_ATTR_ON_FAIL "' for %s stop "
	"action to default value because '%s' is not "
	"allowed for stop", action->rsc->id, value);
	return NULL;

	} else if (pcmk__str_eq(action->task, CRMD_ACTION_DEMOTE, pcmk__str_casei) && !value) {
	// demote on_fail defaults to monitor value for promoted role if present
	xmlNode *operation = NULL;

	CRM_CHECK(action->rsc != NULL, return NULL);

	for (operation = pcmk__xe_first_child(action->rsc->ops_xml);
	(operation != NULL) && (value == NULL);
	operation = pcmk__xe_next(operation)) {
	bool enabled = false;

	if (!pcmk__str_eq((const char *)operation->name, "op", pcmk__str_none)) {
	continue;
	}
	name = crm_element_value(operation, "name");
	role = crm_element_value(operation, "role");
	on_fail = crm_element_value(operation, XML_OP_ATTR_ON_FAIL);
	interval_spec = crm_element_value(operation, XML_LRM_ATTR_INTERVAL);
	if (!on_fail) {
	continue;
	} else if (pcmk__xe_get_bool_attr(operation, "enabled", &enabled) == pcmk_rc_ok && !enabled) {
	continue;
	} else if (!pcmk__str_eq(name, "monitor", pcmk__str_casei)
	\|\| !pcmk__strcase_any_of(role, RSC_ROLE_PROMOTED_S,
	RSC_ROLE_PROMOTED_LEGACY_S,
	NULL)) {
	continue;
	} else if (crm_parse_interval_spec(interval_spec) == 0) {
	continue;
	} else if (pcmk__str_eq(on_fail, "demote", pcmk__str_casei)) {
	continue;
	}

	value = on_fail;
	}
	} else if (pcmk__str_eq(action->task, CRM_OP_LRM_DELETE, pcmk__str_casei)) {
	value = "ignore";

	} else if (pcmk__str_eq(value, "demote", pcmk__str_casei)) {
	name = crm_element_value(action->op_entry, "name");
	role = crm_element_value(action->op_entry, "role");
	interval_spec = crm_element_value(action->op_entry,
	XML_LRM_ATTR_INTERVAL);

	if (!pcmk__str_eq(name, CRMD_ACTION_PROMOTE, pcmk__str_casei)
	&& (!pcmk__str_eq(name, CRMD_ACTION_STATUS, pcmk__str_casei)
	\|\| !pcmk__strcase_any_of(role, RSC_ROLE_PROMOTED_S,
	RSC_ROLE_PROMOTED_LEGACY_S, NULL)
	\|\| (crm_parse_interval_spec(interval_spec) == 0))) {
	pcmk__config_err("Resetting '" XML_OP_ATTR_ON_FAIL "' for %s %s "
	"action to default value because 'demote' is not "
	"allowed for it", action->rsc->id, name);
	return NULL;
	}
	}

	return value;
	}

	static xmlNode *
	find_min_interval_mon(pe_resource_t * rsc, gboolean include_disabled)
	{
	guint interval_ms = 0;
	guint min_interval_ms = G_MAXUINT;
	const char *name = NULL;
	const char *interval_spec = NULL;
	xmlNode *op = NULL;
	xmlNode *operation = NULL;

	for (operation = pcmk__xe_first_child(rsc->ops_xml);
	operation != NULL;
	operation = pcmk__xe_next(operation)) {

	if (pcmk__str_eq((const char *)operation->name, "op", pcmk__str_none)) {
	bool enabled = false;

	name = crm_element_value(operation, "name");
	interval_spec = crm_element_value(operation, XML_LRM_ATTR_INTERVAL);
	if (!include_disabled && pcmk__xe_get_bool_attr(operation, "enabled", &enabled) == pcmk_rc_ok &&
	!enabled) {
	continue;
	}

	if (!pcmk__str_eq(name, RSC_STATUS, pcmk__str_casei)) {
	continue;
	}

	interval_ms = crm_parse_interval_spec(interval_spec);

	if (interval_ms && (interval_ms < min_interval_ms)) {
	min_interval_ms = interval_ms;
	op = operation;
	}
	}
	}

	return op;
	}

	static int
	unpack_start_delay(const char value, GHashTable meta)
	{
	int start_delay = 0;

	if (value != NULL) {
	start_delay = crm_get_msec(value);

	if (start_delay < 0) {
	start_delay = 0;
	}

	if (meta) {
	g_hash_table_replace(meta, strdup(XML_OP_ATTR_START_DELAY),
	pcmk__itoa(start_delay));
	}
	}

	return start_delay;
	}

	// true if value contains valid, non-NULL interval origin for recurring op
	static bool
	unpack_interval_origin(const char value, xmlNode xml_obj, guint interval_ms,
	crm_time_t now, long long start_delay)
	{
	long long result = 0;
	guint interval_sec = interval_ms / 1000;
	crm_time_t *origin = NULL;

	// Ignore unspecified values and non-recurring operations
	if ((value == NULL) \|\| (interval_ms == 0) \|\| (now == NULL)) {
	return false;
	}

	// Parse interval origin from text
	origin = crm_time_new(value);
	if (origin == NULL) {
	pcmk__config_err("Ignoring '" XML_OP_ATTR_ORIGIN "' for operation "
	"'%s' because '%s' is not valid",
	(ID(xml_obj)? ID(xml_obj) : "(missing ID)"), value);
	return false;
	}

	// Get seconds since origin (negative if origin is in the future)
	result = crm_time_get_seconds(now) - crm_time_get_seconds(origin);
	crm_time_free(origin);

	// Calculate seconds from closest interval to now
	result = result % interval_sec;

	// Calculate seconds remaining until next interval
	result = ((result <= 0)? 0 : interval_sec) - result;
	crm_info("Calculated a start delay of %llds for operation '%s'",
	result,
	(ID(xml_obj)? ID(xml_obj) : "(unspecified)"));

	if (start_delay != NULL) {
	start_delay = result 1000; // milliseconds
	}
	return true;
	}

	static int
	unpack_timeout(const char *value)
	{
	int timeout_ms = crm_get_msec(value);

	if (timeout_ms < 0) {
	timeout_ms = crm_get_msec(CRM_DEFAULT_OP_TIMEOUT_S);
	}
	return timeout_ms;
	}

	int
	pe_get_configured_timeout(pe_resource_t rsc, const char action, pe_working_set_t *data_set)
	{
	xmlNode *child = NULL;
	GHashTable *action_meta = NULL;
	const char *timeout_spec = NULL;
	int timeout_ms = 0;

	pe_rule_eval_data_t rule_data = {
	.node_hash = NULL,
	.role = RSC_ROLE_UNKNOWN,
	.now = data_set->now,
	.match_data = NULL,
	.rsc_data = NULL,
	.op_data = NULL
	};

	for (child = first_named_child(rsc->ops_xml, XML_ATTR_OP);
	child != NULL; child = crm_next_same_xml(child)) {
	if (pcmk__str_eq(action, crm_element_value(child, XML_NVPAIR_ATTR_NAME),
	pcmk__str_casei)) {
	timeout_spec = crm_element_value(child, XML_ATTR_TIMEOUT);
	break;
	}
	}

	if (timeout_spec == NULL && data_set->op_defaults) {
	action_meta = pcmk__strkey_table(free, free);
	pe__unpack_dataset_nvpairs(data_set->op_defaults, XML_TAG_META_SETS,
	&rule_data, action_meta, NULL, FALSE, data_set);
	timeout_spec = g_hash_table_lookup(action_meta, XML_ATTR_TIMEOUT);
	}

	// @TODO check meta-attributes (including versioned meta-attributes)
	// @TODO maybe use min-interval monitor timeout as default for monitors

	timeout_ms = crm_get_msec(timeout_spec);
	if (timeout_ms < 0) {
	timeout_ms = crm_get_msec(CRM_DEFAULT_OP_TIMEOUT_S);
	}

	if (action_meta != NULL) {
	g_hash_table_destroy(action_meta);
	}
	return timeout_ms;
	}

	#if ENABLE_VERSIONED_ATTRS
	static void
	unpack_versioned_meta(xmlNode versioned_meta, xmlNode xml_obj,
	guint interval_ms, crm_time_t *now)
	{
	xmlNode *attrs = NULL;
	xmlNode *attr = NULL;

	for (attrs = pcmk__xe_first_child(versioned_meta); attrs != NULL;
	attrs = pcmk__xe_next(attrs)) {

	for (attr = pcmk__xe_first_child(attrs); attr != NULL;
	attr = pcmk__xe_next(attr)) {

	const char *name = crm_element_value(attr, XML_NVPAIR_ATTR_NAME);
	const char *value = crm_element_value(attr, XML_NVPAIR_ATTR_VALUE);

	if (pcmk__str_eq(name, XML_OP_ATTR_START_DELAY, pcmk__str_casei)) {
	int start_delay = unpack_start_delay(value, NULL);

	crm_xml_add_int(attr, XML_NVPAIR_ATTR_VALUE, start_delay);
	} else if (pcmk__str_eq(name, XML_OP_ATTR_ORIGIN, pcmk__str_casei)) {
	long long start_delay = 0;

	if (unpack_interval_origin(value, xml_obj, interval_ms, now,
	&start_delay)) {
	crm_xml_add(attr, XML_NVPAIR_ATTR_NAME,
	XML_OP_ATTR_START_DELAY);
	crm_xml_add_ll(attr, XML_NVPAIR_ATTR_VALUE, start_delay);
	}
	} else if (pcmk__str_eq(name, XML_ATTR_TIMEOUT, pcmk__str_casei)) {
	int timeout_ms = unpack_timeout(value);

	crm_xml_add_int(attr, XML_NVPAIR_ATTR_VALUE, timeout_ms);
	}
	}
	}
	}
	#endif

	/*!
	* \brief Unpack operation XML into an action structure
	*
	* Unpack an operation's meta-attributes (normalizing the interval, timeout,
	* and start delay values as integer milliseconds), requirements, and
	* failure policy.
	*
	* \param[in,out] action Action to unpack into
	* \param[in] xml_obj Operation XML (or NULL if all defaults)
	* \param[in] container Resource that contains affected resource, if any
	* \param[in] data_set Cluster state
	* \param[in] interval_ms How frequently to perform the operation
	*/
	static void
	unpack_operation(pe_action_t * action, xmlNode * xml_obj, pe_resource_t * container,
	pe_working_set_t * data_set, guint interval_ms)
	{
	int timeout_ms = 0;
	const char *value = NULL;
	bool is_probe = false;
	#if ENABLE_VERSIONED_ATTRS
	pe_rsc_action_details_t *rsc_details = NULL;
	#endif

	pe_rsc_eval_data_t rsc_rule_data = {
	.standard = crm_element_value(action->rsc->xml, XML_AGENT_ATTR_CLASS),
	.provider = crm_element_value(action->rsc->xml, XML_AGENT_ATTR_PROVIDER),
	.agent = crm_element_value(action->rsc->xml, XML_EXPR_ATTR_TYPE)
	};

	pe_op_eval_data_t op_rule_data = {
	.op_name = action->task,
	.interval = interval_ms
	};

	pe_rule_eval_data_t rule_data = {
	.node_hash = NULL,
	.role = RSC_ROLE_UNKNOWN,
	.now = data_set->now,
	.match_data = NULL,
	.rsc_data = &rsc_rule_data,
	.op_data = &op_rule_data
	};

	CRM_CHECK(action && action->rsc, return);

	is_probe = pcmk_is_probe(action->task, interval_ms);

	// Cluster-wide <op_defaults> <meta_attributes>
	pe__unpack_dataset_nvpairs(data_set->op_defaults, XML_TAG_META_SETS, &rule_data,
	action->meta, NULL, FALSE, data_set);

	// Determine probe default timeout differently
	if (is_probe) {
	xmlNode *min_interval_mon = find_min_interval_mon(action->rsc, FALSE);

	if (min_interval_mon) {
	value = crm_element_value(min_interval_mon, XML_ATTR_TIMEOUT);
	if (value) {
	crm_trace("\t%s: Setting default timeout to minimum-interval "
	"monitor's timeout '%s'", action->uuid, value);
	g_hash_table_replace(action->meta, strdup(XML_ATTR_TIMEOUT),
	strdup(value));
	}
	}
	}

	if (xml_obj) {
	xmlAttrPtr xIter = NULL;

	// <op> <meta_attributes> take precedence over defaults
	pe__unpack_dataset_nvpairs(xml_obj, XML_TAG_META_SETS, &rule_data,
	action->meta, NULL, TRUE, data_set);

	#if ENABLE_VERSIONED_ATTRS
	rsc_details = pe_rsc_action_details(action);

	/* Non-versioned attributes also unpack XML_TAG_ATTR_SETS, but that
	* capability is deprecated, so we don't need to extend that support to
	* versioned attributes.
	*/
	pe_eval_versioned_attributes(data_set->input, xml_obj,
	XML_TAG_META_SETS, &rule_data,
	rsc_details->versioned_meta,
	NULL);
	#endif

	/* Anything set as an <op> XML property has highest precedence.
	* This ensures we use the name and interval from the <op> tag.
	*/
	for (xIter = xml_obj->properties; xIter; xIter = xIter->next) {
	const char prop_name = (const char )xIter->name;
	const char *prop_value = crm_element_value(xml_obj, prop_name);

	g_hash_table_replace(action->meta, strdup(prop_name), strdup(prop_value));
	}
	}

	g_hash_table_remove(action->meta, "id");

	// Normalize interval to milliseconds
	if (interval_ms > 0) {
	g_hash_table_replace(action->meta, strdup(XML_LRM_ATTR_INTERVAL),
	crm_strdup_printf("%u", interval_ms));
	} else {
	g_hash_table_remove(action->meta, XML_LRM_ATTR_INTERVAL);
	}

	/*
	* Timeout order of precedence:
	* 1. pcmk_monitor_timeout (if rsc has pcmk_ra_cap_fence_params
	* and task is start or a probe; pcmk_monitor_timeout works
	* by default for a recurring monitor)
	* 2. explicit op timeout on the primitive
	* 3. default op timeout
	* a. if probe, then min-interval monitor's timeout
	* b. else, in XML_CIB_TAG_OPCONFIG
	* 4. CRM_DEFAULT_OP_TIMEOUT_S
	*
	* #1 overrides general rule of <op> XML property having highest
	* precedence.
	*/
	if (pcmk_is_set(pcmk_get_ra_caps(rsc_rule_data.standard),
	pcmk_ra_cap_fence_params)
	&& (pcmk__str_eq(action->task, RSC_START, pcmk__str_casei)
	\|\| is_probe)) {

	GHashTable *params = pe_rsc_params(action->rsc, action->node, data_set);

	value = g_hash_table_lookup(params, "pcmk_monitor_timeout");

	if (value) {
	crm_trace("\t%s: Setting timeout to pcmk_monitor_timeout '%s', "
	"overriding default", action->uuid, value);
	g_hash_table_replace(action->meta, strdup(XML_ATTR_TIMEOUT),
	strdup(value));
	}
	}

	// Normalize timeout to positive milliseconds
	value = g_hash_table_lookup(action->meta, XML_ATTR_TIMEOUT);
	timeout_ms = unpack_timeout(value);
	g_hash_table_replace(action->meta, strdup(XML_ATTR_TIMEOUT),
	pcmk__itoa(timeout_ms));

	if (!pcmk__strcase_any_of(action->task, RSC_START, RSC_PROMOTE, NULL)) {
	action->needs = rsc_req_nothing;
	value = "nothing (not start or promote)";

	} else if (pcmk_is_set(action->rsc->flags, pe_rsc_needs_fencing)) {
	action->needs = rsc_req_stonith;
	value = "fencing";

	} else if (pcmk_is_set(action->rsc->flags, pe_rsc_needs_quorum)) {
	action->needs = rsc_req_quorum;
	value = "quorum";

	} else {
	action->needs = rsc_req_nothing;
	value = "nothing";
	}
	pe_rsc_trace(action->rsc, "%s requires %s", action->uuid, value);

	value = unpack_operation_on_fail(action);

	if (value == NULL) {

	} else if (pcmk__str_eq(value, "block", pcmk__str_casei)) {
	action->on_fail = action_fail_block;
	g_hash_table_insert(action->meta, strdup(XML_OP_ATTR_ON_FAIL), strdup("block"));
	value = "block"; // The above could destroy the original string

	} else if (pcmk__str_eq(value, "fence", pcmk__str_casei)) {
	action->on_fail = action_fail_fence;
	value = "node fencing";

	if (!pcmk_is_set(data_set->flags, pe_flag_stonith_enabled)) {
	pcmk__config_err("Resetting '" XML_OP_ATTR_ON_FAIL "' for "
	"operation '%s' to 'stop' because 'fence' is not "
	"valid when fencing is disabled", action->uuid);
	action->on_fail = action_fail_stop;
	action->fail_role = RSC_ROLE_STOPPED;
	value = "stop resource";
	}

	} else if (pcmk__str_eq(value, "standby", pcmk__str_casei)) {
	action->on_fail = action_fail_standby;
	value = "node standby";

	- } else if (pcmk__strcase_any_of(value, "ignore", "nothing", NULL)) {
	+ } else if (pcmk__strcase_any_of(value, "ignore", PCMK__VALUE_NOTHING,
	+ NULL)) {
	action->on_fail = action_fail_ignore;
	value = "ignore";

	} else if (pcmk__str_eq(value, "migrate", pcmk__str_casei)) {
	action->on_fail = action_fail_migrate;
	value = "force migration";

	} else if (pcmk__str_eq(value, "stop", pcmk__str_casei)) {
	action->on_fail = action_fail_stop;
	action->fail_role = RSC_ROLE_STOPPED;
	value = "stop resource";

	} else if (pcmk__str_eq(value, "restart", pcmk__str_casei)) {
	action->on_fail = action_fail_recover;
	value = "restart (and possibly migrate)";

	} else if (pcmk__str_eq(value, "restart-container", pcmk__str_casei)) {
	if (container) {
	action->on_fail = action_fail_restart_container;
	value = "restart container (and possibly migrate)";

	} else {
	value = NULL;
	}

	} else if (pcmk__str_eq(value, "demote", pcmk__str_casei)) {
	action->on_fail = action_fail_demote;
	value = "demote instance";

	} else {
	pe_err("Resource %s: Unknown failure type (%s)", action->rsc->id, value);
	value = NULL;
	}

	/* defaults */
	if (value == NULL && container) {
	action->on_fail = action_fail_restart_container;
	value = "restart container (and possibly migrate) (default)";

	/* For remote nodes, ensure that any failure that results in dropping an
	* active connection to the node results in fencing of the node.
	*
	* There are only two action failures that don't result in fencing.
	* 1. probes - probe failures are expected.
	* 2. start - a start failure indicates that an active connection does not already
	* exist. The user can set op on-fail=fence if they really want to fence start
	* failures. */
	} else if (((value == NULL) \|\| !pcmk_is_set(action->rsc->flags, pe_rsc_managed))
	&& pe__resource_is_remote_conn(action->rsc, data_set)
	&& !(pcmk__str_eq(action->task, CRMD_ACTION_STATUS, pcmk__str_casei)
	&& (interval_ms == 0))
	&& !pcmk__str_eq(action->task, CRMD_ACTION_START, pcmk__str_casei)) {

	if (!pcmk_is_set(action->rsc->flags, pe_rsc_managed)) {
	action->on_fail = action_fail_stop;
	action->fail_role = RSC_ROLE_STOPPED;
	value = "stop unmanaged remote node (enforcing default)";

	} else {
	if (pcmk_is_set(data_set->flags, pe_flag_stonith_enabled)) {
	value = "fence remote node (default)";
	} else {
	value = "recover remote node connection (default)";
	}

	if (action->rsc->remote_reconnect_ms) {
	action->fail_role = RSC_ROLE_STOPPED;
	}
	action->on_fail = action_fail_reset_remote;
	}

	} else if (value == NULL && pcmk__str_eq(action->task, CRMD_ACTION_STOP, pcmk__str_casei)) {
	if (pcmk_is_set(data_set->flags, pe_flag_stonith_enabled)) {
	action->on_fail = action_fail_fence;
	value = "resource fence (default)";

	} else {
	action->on_fail = action_fail_block;
	value = "resource block (default)";
	}

	} else if (value == NULL) {
	action->on_fail = action_fail_recover;
	value = "restart (and possibly migrate) (default)";
	}

	pe_rsc_trace(action->rsc, "%s failure handling: %s",
	action->uuid, value);

	value = NULL;
	if (xml_obj != NULL) {
	value = g_hash_table_lookup(action->meta, "role_after_failure");
	if (value) {
	pe_warn_once(pe_wo_role_after,
	"Support for role_after_failure is deprecated and will be removed in a future release");
	}
	}
	if (value != NULL && action->fail_role == RSC_ROLE_UNKNOWN) {
	action->fail_role = text2role(value);
	}
	/* defaults */
	if (action->fail_role == RSC_ROLE_UNKNOWN) {
	if (pcmk__str_eq(action->task, CRMD_ACTION_PROMOTE, pcmk__str_casei)) {
	action->fail_role = RSC_ROLE_UNPROMOTED;
	} else {
	action->fail_role = RSC_ROLE_STARTED;
	}
	}
	pe_rsc_trace(action->rsc, "%s failure results in: %s",
	action->uuid, role2text(action->fail_role));

	value = g_hash_table_lookup(action->meta, XML_OP_ATTR_START_DELAY);
	if (value) {
	unpack_start_delay(value, action->meta);
	} else {
	long long start_delay = 0;

	value = g_hash_table_lookup(action->meta, XML_OP_ATTR_ORIGIN);
	if (unpack_interval_origin(value, xml_obj, interval_ms, data_set->now,
	&start_delay)) {
	g_hash_table_replace(action->meta, strdup(XML_OP_ATTR_START_DELAY),
	crm_strdup_printf("%lld", start_delay));
	}
	}

	#if ENABLE_VERSIONED_ATTRS
	unpack_versioned_meta(rsc_details->versioned_meta, xml_obj, interval_ms,
	data_set->now);
	#endif
	}

	static xmlNode *
	find_rsc_op_entry_helper(pe_resource_t * rsc, const char *key, gboolean include_disabled)
	{
	guint interval_ms = 0;
	gboolean do_retry = TRUE;
	char *local_key = NULL;
	const char *name = NULL;
	const char *interval_spec = NULL;
	char *match_key = NULL;
	xmlNode *op = NULL;
	xmlNode *operation = NULL;

	retry:
	for (operation = pcmk__xe_first_child(rsc->ops_xml); operation != NULL;
	operation = pcmk__xe_next(operation)) {

	if (pcmk__str_eq((const char *)operation->name, "op", pcmk__str_none)) {
	bool enabled = false;

	name = crm_element_value(operation, "name");
	interval_spec = crm_element_value(operation, XML_LRM_ATTR_INTERVAL);
	if (!include_disabled && pcmk__xe_get_bool_attr(operation, "enabled", &enabled) == pcmk_rc_ok &&
	!enabled) {
	continue;
	}

	interval_ms = crm_parse_interval_spec(interval_spec);
	match_key = pcmk__op_key(rsc->id, name, interval_ms);
	if (pcmk__str_eq(key, match_key, pcmk__str_casei)) {
	op = operation;
	}
	free(match_key);

	if (rsc->clone_name) {
	match_key = pcmk__op_key(rsc->clone_name, name, interval_ms);
	if (pcmk__str_eq(key, match_key, pcmk__str_casei)) {
	op = operation;
	}
	free(match_key);
	}

	if (op != NULL) {
	free(local_key);
	return op;
	}
	}
	}

	free(local_key);
	if (do_retry == FALSE) {
	return NULL;
	}

	do_retry = FALSE;
	if (strstr(key, CRMD_ACTION_MIGRATE) \|\| strstr(key, CRMD_ACTION_MIGRATED)) {
	local_key = pcmk__op_key(rsc->id, "migrate", 0);
	key = local_key;
	goto retry;

	} else if (strstr(key, "_notify_")) {
	local_key = pcmk__op_key(rsc->id, "notify", 0);
	key = local_key;
	goto retry;
	}

	return NULL;
	}

	xmlNode *
	find_rsc_op_entry(pe_resource_t * rsc, const char *key)
	{
	return find_rsc_op_entry_helper(rsc, key, FALSE);
	}

	/*
	* Used by the HashTable for-loop
	*/
	void
	print_str_str(gpointer key, gpointer value, gpointer user_data)
	{
	crm_trace("%s%s %s ==> %s",
	user_data == NULL ? "" : (char *)user_data,
	user_data == NULL ? "" : ": ", (char )key, (char )value);
	}

	void
	pe_free_action(pe_action_t * action)
	{
	if (action == NULL) {
	return;
	}
	g_list_free_full(action->actions_before, free); /* pe_action_wrapper_t* */
	g_list_free_full(action->actions_after, free); /* pe_action_wrapper_t* */
	if (action->extra) {
	g_hash_table_destroy(action->extra);
	}
	if (action->meta) {
	g_hash_table_destroy(action->meta);
	}
	#if ENABLE_VERSIONED_ATTRS
	if (action->rsc) {
	pe_free_rsc_action_details(action);
	}
	#endif
	free(action->cancel_task);
	free(action->reason);
	free(action->task);
	free(action->uuid);
	free(action->node);
	free(action);
	}

	GList *
	find_recurring_actions(GList input, pe_node_t not_on_node)
	{
	const char *value = NULL;
	GList *result = NULL;
	GList *gIter = input;

	CRM_CHECK(input != NULL, return NULL);

	for (; gIter != NULL; gIter = gIter->next) {
	pe_action_t action = (pe_action_t ) gIter->data;

	value = g_hash_table_lookup(action->meta, XML_LRM_ATTR_INTERVAL_MS);
	if (value == NULL) {
	/* skip */
	} else if (pcmk__str_eq(value, "0", pcmk__str_casei)) {
	/* skip */
	} else if (pcmk__str_eq(CRMD_ACTION_CANCEL, action->task, pcmk__str_casei)) {
	/* skip */
	} else if (not_on_node == NULL) {
	crm_trace("(null) Found: %s", action->uuid);
	result = g_list_prepend(result, action);

	} else if (action->node == NULL) {
	/* skip */
	} else if (action->node->details != not_on_node->details) {
	crm_trace("Found: %s", action->uuid);
	result = g_list_prepend(result, action);
	}
	}

	return result;
	}

	enum action_tasks
	get_complex_task(pe_resource_t * rsc, const char *name, gboolean allow_non_atomic)
	{
	enum action_tasks task = text2task(name);

	if (rsc == NULL) {
	return task;

	} else if (allow_non_atomic == FALSE \|\| rsc->variant == pe_native) {
	switch (task) {
	case stopped_rsc:
	case started_rsc:
	case action_demoted:
	case action_promoted:
	crm_trace("Folding %s back into its atomic counterpart for %s", name, rsc->id);
	return task - 1;
	default:
	break;
	}
	}
	return task;
	}

	pe_action_t *
	find_first_action(GList input, const char uuid, const char task, pe_node_t on_node)
	{
	GList *gIter = NULL;

	CRM_CHECK(uuid \|\| task, return NULL);

	for (gIter = input; gIter != NULL; gIter = gIter->next) {
	pe_action_t action = (pe_action_t ) gIter->data;

	if (uuid != NULL && !pcmk__str_eq(uuid, action->uuid, pcmk__str_casei)) {
	continue;

	} else if (task != NULL && !pcmk__str_eq(task, action->task, pcmk__str_casei)) {
	continue;

	} else if (on_node == NULL) {
	return action;

	} else if (action->node == NULL) {
	continue;

	} else if (on_node->details == action->node->details) {
	return action;
	}
	}

	return NULL;
	}

	GList *
	find_actions(GList input, const char key, const pe_node_t *on_node)
	{
	GList *gIter = input;
	GList *result = NULL;

	CRM_CHECK(key != NULL, return NULL);

	for (; gIter != NULL; gIter = gIter->next) {
	pe_action_t action = (pe_action_t ) gIter->data;

	if (!pcmk__str_eq(key, action->uuid, pcmk__str_casei)) {
	continue;

	} else if (on_node == NULL) {
	crm_trace("Action %s matches (ignoring node)", key);
	result = g_list_prepend(result, action);

	} else if (action->node == NULL) {
	crm_trace("Action %s matches (unallocated, assigning to %s)",
	key, on_node->details->uname);

	action->node = pe__copy_node(on_node);
	result = g_list_prepend(result, action);

	} else if (on_node->details == action->node->details) {
	crm_trace("Action %s on %s matches", key, on_node->details->uname);
	result = g_list_prepend(result, action);
	}
	}

	return result;
	}

	GList *
	find_actions_exact(GList input, const char key, const pe_node_t *on_node)
	{
	GList *result = NULL;

	CRM_CHECK(key != NULL, return NULL);

	if (on_node == NULL) {
	return NULL;
	}

	for (GList *gIter = input; gIter != NULL; gIter = gIter->next) {
	pe_action_t action = (pe_action_t ) gIter->data;

	if ((action->node != NULL)
	&& pcmk__str_eq(key, action->uuid, pcmk__str_casei)
	&& pcmk__str_eq(on_node->details->id, action->node->details->id,
	pcmk__str_casei)) {

	crm_trace("Action %s on %s matches", key, on_node->details->uname);
	result = g_list_prepend(result, action);
	}
	}

	return result;
	}

	/*!
	* \brief Find all actions of given type for a resource
	*
	* \param[in] rsc Resource to search
	* \param[in] node Find only actions scheduled on this node
	* \param[in] task Action name to search for
	* \param[in] require_node If TRUE, NULL node or action node will not match
	*
	* \return List of actions found (or NULL if none)
	* \note If node is not NULL and require_node is FALSE, matching actions
	* without a node will be assigned to node.
	*/
	GList *
	pe__resource_actions(const pe_resource_t rsc, const pe_node_t node,
	const char *task, bool require_node)
	{
	GList *result = NULL;
	char *key = pcmk__op_key(rsc->id, task, 0);

	if (require_node) {
	result = find_actions_exact(rsc->actions, key, node);
	} else {
	result = find_actions(rsc->actions, key, node);
	}
	free(key);
	return result;
	}

	static void
	resource_node_score(pe_resource_t * rsc, pe_node_t * node, int score, const char *tag)
	{
	pe_node_t *match = NULL;

	if ((rsc->exclusive_discover \|\| (node->rsc_discover_mode == pe_discover_never))
	&& pcmk__str_eq(tag, "symmetric_default", pcmk__str_casei)) {
	/* This string comparision may be fragile, but exclusive resources and
	* exclusive nodes should not have the symmetric_default constraint
	* applied to them.
	*/
	return;

	} else if (rsc->children) {
	GList *gIter = rsc->children;

	for (; gIter != NULL; gIter = gIter->next) {
	pe_resource_t child_rsc = (pe_resource_t ) gIter->data;

	resource_node_score(child_rsc, node, score, tag);
	}
	}

	pe_rsc_trace(rsc, "Setting %s for %s on %s: %d", tag, rsc->id, node->details->uname, score);
	match = pe_hash_table_lookup(rsc->allowed_nodes, node->details->id);
	if (match == NULL) {
	match = pe__copy_node(node);
	g_hash_table_insert(rsc->allowed_nodes, (gpointer) match->details->id, match);
	}
	match->weight = pcmk__add_scores(match->weight, score);
	}

	void
	resource_location(pe_resource_t * rsc, pe_node_t * node, int score, const char *tag,
	pe_working_set_t * data_set)
	{
	if (node != NULL) {
	resource_node_score(rsc, node, score, tag);

	} else if (data_set != NULL) {
	GList *gIter = data_set->nodes;

	for (; gIter != NULL; gIter = gIter->next) {
	pe_node_t node_iter = (pe_node_t ) gIter->data;

	resource_node_score(rsc, node_iter, score, tag);
	}

	} else {
	GHashTableIter iter;
	pe_node_t *node_iter = NULL;

	g_hash_table_iter_init(&iter, rsc->allowed_nodes);
	while (g_hash_table_iter_next(&iter, NULL, (void **)&node_iter)) {
	resource_node_score(rsc, node_iter, score, tag);
	}
	}

	if (node == NULL && score == -INFINITY) {
	if (rsc->allocated_to) {
	crm_info("Deallocating %s from %s", rsc->id, rsc->allocated_to->details->uname);
	free(rsc->allocated_to);
	rsc->allocated_to = NULL;
	}
	}
	}

	#define sort_return(an_int, why) do { \
	free(a_uuid); \
	free(b_uuid); \
	crm_trace("%s (%d) %c %s (%d) : %s", \
	a_xml_id, a_call_id, an_int>0?'>':an_int<0?'<':'=', \
	b_xml_id, b_call_id, why); \
	return an_int; \
	} while(0)

	int
	pe__is_newer_op(const xmlNode xml_a, const xmlNode xml_b)
	{
	int a_call_id = -1;
	int b_call_id = -1;

	char *a_uuid = NULL;
	char *b_uuid = NULL;

	const char *a_xml_id = crm_element_value(xml_a, XML_ATTR_ID);
	const char *b_xml_id = crm_element_value(xml_b, XML_ATTR_ID);

	const char *a_node = crm_element_value(xml_a, XML_LRM_ATTR_TARGET);
	const char *b_node = crm_element_value(xml_b, XML_LRM_ATTR_TARGET);
	bool same_node = pcmk__str_eq(a_node, b_node, pcmk__str_casei);

	if (same_node && pcmk__str_eq(a_xml_id, b_xml_id, pcmk__str_none)) {
	/* We have duplicate lrm_rsc_op entries in the status
	* section which is unlikely to be a good thing
	* - we can handle it easily enough, but we need to get
	* to the bottom of why it's happening.
	*/
	pe_err("Duplicate lrm_rsc_op entries named %s", a_xml_id);
	sort_return(0, "duplicate");
	}

	crm_element_value_int(xml_a, XML_LRM_ATTR_CALLID, &a_call_id);
	crm_element_value_int(xml_b, XML_LRM_ATTR_CALLID, &b_call_id);

	if (a_call_id == -1 && b_call_id == -1) {
	/* both are pending ops so it doesn't matter since
	* stops are never pending
	*/
	sort_return(0, "pending");

	} else if (same_node && a_call_id >= 0 && a_call_id < b_call_id) {
	sort_return(-1, "call id");

	} else if (same_node && b_call_id >= 0 && a_call_id > b_call_id) {
	sort_return(1, "call id");

	} else if (a_call_id >= 0 && b_call_id >= 0
	&& (!same_node \|\| a_call_id == b_call_id)) {
	/*
	* The op and last_failed_op are the same
	* Order on last-rc-change
	*/
	time_t last_a = -1;
	time_t last_b = -1;

	crm_element_value_epoch(xml_a, XML_RSC_OP_LAST_CHANGE, &last_a);
	crm_element_value_epoch(xml_b, XML_RSC_OP_LAST_CHANGE, &last_b);

	crm_trace("rc-change: %lld vs %lld",
	(long long) last_a, (long long) last_b);
	if (last_a >= 0 && last_a < last_b) {
	sort_return(-1, "rc-change");

	} else if (last_b >= 0 && last_a > last_b) {
	sort_return(1, "rc-change");
	}
	sort_return(0, "rc-change");

	} else {
	/* One of the inputs is a pending operation
	* Attempt to use XML_ATTR_TRANSITION_MAGIC to determine its age relative to the other
	*/

	int a_id = -1;
	int b_id = -1;

	const char *a_magic = crm_element_value(xml_a, XML_ATTR_TRANSITION_MAGIC);
	const char *b_magic = crm_element_value(xml_b, XML_ATTR_TRANSITION_MAGIC);

	CRM_CHECK(a_magic != NULL && b_magic != NULL, sort_return(0, "No magic"));
	if (!decode_transition_magic(a_magic, &a_uuid, &a_id, NULL, NULL, NULL,
	NULL)) {
	sort_return(0, "bad magic a");
	}
	if (!decode_transition_magic(b_magic, &b_uuid, &b_id, NULL, NULL, NULL,
	NULL)) {
	sort_return(0, "bad magic b");
	}
	/* try to determine the relative age of the operation...
	* some pending operations (e.g. a start) may have been superseded
	* by a subsequent stop
	*
	* [a\|b]_id == -1 means it's a shutdown operation and _always_ comes last
	*/
	if (!pcmk__str_eq(a_uuid, b_uuid, pcmk__str_casei) \|\| a_id == b_id) {
	/*
	* some of the logic in here may be redundant...
	*
	* if the UUID from the TE doesn't match then one better
	* be a pending operation.
	* pending operations don't survive between elections and joins
	* because we query the LRM directly
	*/

	if (b_call_id == -1) {
	sort_return(-1, "transition + call");

	} else if (a_call_id == -1) {
	sort_return(1, "transition + call");
	}

	} else if ((a_id >= 0 && a_id < b_id) \|\| b_id == -1) {
	sort_return(-1, "transition");

	} else if ((b_id >= 0 && a_id > b_id) \|\| a_id == -1) {
	sort_return(1, "transition");
	}
	}

	/* we should never end up here */
	CRM_CHECK(FALSE, sort_return(0, "default"));
	}

	gint
	sort_op_by_callid(gconstpointer a, gconstpointer b)
	{
	const xmlNode *xml_a = a;
	const xmlNode *xml_b = b;

	return pe__is_newer_op(xml_a, xml_b);
	}

	time_t
	get_effective_time(pe_working_set_t * data_set)
	{
	if(data_set) {
	if (data_set->now == NULL) {
	crm_trace("Recording a new 'now'");
	data_set->now = crm_time_new(NULL);
	}
	return crm_time_get_seconds_since_epoch(data_set->now);
	}

	crm_trace("Defaulting to 'now'");
	return time(NULL);
	}

	gboolean
	get_target_role(pe_resource_t * rsc, enum rsc_role_e * role)
	{
	enum rsc_role_e local_role = RSC_ROLE_UNKNOWN;
	const char *value = g_hash_table_lookup(rsc->meta, XML_RSC_ATTR_TARGET_ROLE);

	CRM_CHECK(role != NULL, return FALSE);

	if (pcmk__str_eq(value, "started", pcmk__str_null_matches \| pcmk__str_casei)
	\|\| pcmk__str_eq("default", value, pcmk__str_casei)) {
	return FALSE;
	}

	local_role = text2role(value);
	if (local_role == RSC_ROLE_UNKNOWN) {
	pcmk__config_err("Ignoring '" XML_RSC_ATTR_TARGET_ROLE "' for %s "
	"because '%s' is not valid", rsc->id, value);
	return FALSE;

	} else if (local_role > RSC_ROLE_STARTED) {
	if (pcmk_is_set(uber_parent(rsc)->flags, pe_rsc_promotable)) {
	if (local_role > RSC_ROLE_UNPROMOTED) {
	/* This is what we'd do anyway, just leave the default to avoid messing up the placement algorithm */
	return FALSE;
	}

	} else {
	pcmk__config_err("Ignoring '" XML_RSC_ATTR_TARGET_ROLE "' for %s "
	"because '%s' only makes sense for promotable "
	"clones", rsc->id, value);
	return FALSE;
	}
	}

	*role = local_role;
	return TRUE;
	}

	gboolean
	order_actions(pe_action_t * lh_action, pe_action_t * rh_action, enum pe_ordering order)
	{
	GList *gIter = NULL;
	pe_action_wrapper_t *wrapper = NULL;
	GList *list = NULL;

	if (order == pe_order_none) {
	return FALSE;
	}

	if (lh_action == NULL \|\| rh_action == NULL) {
	return FALSE;
	}

	crm_trace("Creating action wrappers for ordering: %s then %s",
	lh_action->uuid, rh_action->uuid);

	/* Ensure we never create a dependency on ourselves... it's happened */
	CRM_ASSERT(lh_action != rh_action);

	/* Filter dups, otherwise update_action_states() has too much work to do */
	gIter = lh_action->actions_after;
	for (; gIter != NULL; gIter = gIter->next) {
	pe_action_wrapper_t after = (pe_action_wrapper_t ) gIter->data;

	if (after->action == rh_action && (after->type & order)) {
	return FALSE;
	}
	}

	wrapper = calloc(1, sizeof(pe_action_wrapper_t));
	wrapper->action = rh_action;
	wrapper->type = order;
	list = lh_action->actions_after;
	list = g_list_prepend(list, wrapper);
	lh_action->actions_after = list;

	wrapper = calloc(1, sizeof(pe_action_wrapper_t));
	wrapper->action = lh_action;
	wrapper->type = order;
	list = rh_action->actions_before;
	list = g_list_prepend(list, wrapper);
	rh_action->actions_before = list;
	return TRUE;
	}

	pe_action_t *
	get_pseudo_op(const char name, pe_working_set_t data_set)
	{
	pe_action_t *op = lookup_singleton(data_set, name);

	if (op == NULL) {
	op = custom_action(NULL, strdup(name), name, NULL, TRUE, TRUE, data_set);
	pe__set_action_flags(op, pe_action_pseudo\|pe_action_runnable);
	}
	return op;
	}

	void
	destroy_ticket(gpointer data)
	{
	pe_ticket_t *ticket = data;

	if (ticket->state) {
	g_hash_table_destroy(ticket->state);
	}
	free(ticket->id);
	free(ticket);
	}

	pe_ticket_t *
	ticket_new(const char ticket_id, pe_working_set_t data_set)
	{
	pe_ticket_t *ticket = NULL;

	if (pcmk__str_empty(ticket_id)) {
	return NULL;
	}

	if (data_set->tickets == NULL) {
	data_set->tickets = pcmk__strkey_table(free, destroy_ticket);
	}

	ticket = g_hash_table_lookup(data_set->tickets, ticket_id);
	if (ticket == NULL) {

	ticket = calloc(1, sizeof(pe_ticket_t));
	if (ticket == NULL) {
	crm_err("Cannot allocate ticket '%s'", ticket_id);
	return NULL;
	}

	crm_trace("Creaing ticket entry for %s", ticket_id);

	ticket->id = strdup(ticket_id);
	ticket->granted = FALSE;
	ticket->last_granted = -1;
	ticket->standby = FALSE;
	ticket->state = pcmk__strkey_table(free, free);

	g_hash_table_insert(data_set->tickets, strdup(ticket->id), ticket);
	}

	return ticket;
	}

	const char rsc_printable_id(pe_resource_t rsc)
	{
	if (!pcmk_is_set(rsc->flags, pe_rsc_unique)) {
	return ID(rsc->xml);
	}
	return rsc->id;
	}

	void
	pe__clear_resource_flags_recursive(pe_resource_t *rsc, uint64_t flags)
	{
	pe__clear_resource_flags(rsc, flags);
	for (GList *gIter = rsc->children; gIter != NULL; gIter = gIter->next) {
	pe__clear_resource_flags_recursive((pe_resource_t *) gIter->data, flags);
	}
	}

	void
	pe__clear_resource_flags_on_all(pe_working_set_t *data_set, uint64_t flag)
	{
	for (GList *lpc = data_set->resources; lpc != NULL; lpc = lpc->next) {
	pe_resource_t r = (pe_resource_t ) lpc->data;
	pe__clear_resource_flags_recursive(r, flag);
	}
	}

	void
	pe__set_resource_flags_recursive(pe_resource_t *rsc, uint64_t flags)
	{
	pe__set_resource_flags(rsc, flags);
	for (GList *gIter = rsc->children; gIter != NULL; gIter = gIter->next) {
	pe__set_resource_flags_recursive((pe_resource_t *) gIter->data, flags);
	}
	}

	static GList *
	find_unfencing_devices(GList candidates, GList matches)
	{
	for (GList *gIter = candidates; gIter != NULL; gIter = gIter->next) {
	pe_resource_t *candidate = gIter->data;
	- const char *provides = g_hash_table_lookup(candidate->meta,
	- PCMK_STONITH_PROVIDES);
	- const char *requires = g_hash_table_lookup(candidate->meta, XML_RSC_ATTR_REQUIRES);

	- if(candidate->children) {
	+ if (candidate->children != NULL) {
	matches = find_unfencing_devices(candidate->children, matches);
	+
	} else if (!pcmk_is_set(candidate->flags, pe_rsc_fence_device)) {
	continue;

	- } else if (pcmk__str_eq(provides, "unfencing", pcmk__str_casei) \|\| pcmk__str_eq(requires, "unfencing", pcmk__str_casei)) {
	+ } else if (pcmk_is_set(candidate->flags, pe_rsc_needs_unfencing)) {
	+ matches = g_list_prepend(matches, candidate);
	+
	+ } else if (pcmk__str_eq(g_hash_table_lookup(candidate->meta,
	+ PCMK_STONITH_PROVIDES),
	+ PCMK__VALUE_UNFENCING,
	+ pcmk__str_casei)) {
	matches = g_list_prepend(matches, candidate);
	}
	}
	return matches;
	}

	static int
	node_priority_fencing_delay(pe_node_t * node, pe_working_set_t * data_set)
	{
	int member_count = 0;
	int online_count = 0;
	int top_priority = 0;
	int lowest_priority = 0;
	GList *gIter = NULL;

	// `priority-fencing-delay` is disabled
	if (data_set->priority_fencing_delay <= 0) {
	return 0;
	}

	/* No need to request a delay if the fencing target is not a normal cluster
	* member, for example if it's a remote node or a guest node. */
	if (node->details->type != node_member) {
	return 0;
	}

	// No need to request a delay if the fencing target is in our partition
	if (node->details->online) {
	return 0;
	}

	for (gIter = data_set->nodes; gIter != NULL; gIter = gIter->next) {
	pe_node_t *n = gIter->data;

	if (n->details->type != node_member) {
	continue;
	}

	member_count ++;

	if (n->details->online) {
	online_count++;
	}

	if (member_count == 1
	\|\| n->details->priority > top_priority) {
	top_priority = n->details->priority;
	}

	if (member_count == 1
	\|\| n->details->priority < lowest_priority) {
	lowest_priority = n->details->priority;
	}
	}

	// No need to delay if we have more than half of the cluster members
	if (online_count > member_count / 2) {
	return 0;
	}

	/* All the nodes have equal priority.
	* Any configured corresponding `pcmk_delay_base/max` will be applied. */
	if (lowest_priority == top_priority) {
	return 0;
	}

	if (node->details->priority < top_priority) {
	return 0;
	}

	return data_set->priority_fencing_delay;
	}

	pe_action_t *
	pe_fence_op(pe_node_t * node, const char op, bool optional, const char reason,
	bool priority_delay, pe_working_set_t * data_set)
	{
	char *op_key = NULL;
	pe_action_t *stonith_op = NULL;

	if(op == NULL) {
	op = data_set->stonith_action;
	}

	op_key = crm_strdup_printf("%s-%s-%s", CRM_OP_FENCE, node->details->uname, op);

	stonith_op = lookup_singleton(data_set, op_key);
	if(stonith_op == NULL) {
	stonith_op = custom_action(NULL, op_key, CRM_OP_FENCE, node, TRUE, TRUE, data_set);

	add_hash_param(stonith_op->meta, XML_LRM_ATTR_TARGET, node->details->uname);
	add_hash_param(stonith_op->meta, XML_LRM_ATTR_TARGET_UUID, node->details->id);
	add_hash_param(stonith_op->meta, "stonith_action", op);

	if (pe__is_guest_or_remote_node(node)
	&& pcmk_is_set(data_set->flags, pe_flag_enable_unfencing)) {
	/* Extra work to detect device changes on remotes
	*
	* We may do this for all nodes in the future, but for now
	* the pcmk__check_action_config() based stuff works fine.
	*/
	long max = 1024;
	long digests_all_offset = 0;
	long digests_secure_offset = 0;

	char *digests_all = calloc(max, sizeof(char));
	char *digests_secure = calloc(max, sizeof(char));
	GList *matches = find_unfencing_devices(data_set->resources, NULL);

	for (GList *gIter = matches; gIter != NULL; gIter = gIter->next) {
	pe_resource_t *match = gIter->data;
	const char *agent = g_hash_table_lookup(match->meta,
	XML_ATTR_TYPE);
	op_digest_cache_t *data = NULL;

	data = pe__compare_fencing_digest(match, agent, node, data_set);
	if(data->rc == RSC_DIGEST_ALL) {
	optional = FALSE;
	crm_notice("Unfencing %s (remote): because the definition of %s changed", node->details->uname, match->id);
	if (!pcmk__is_daemon && data_set->priv != NULL) {
	pcmk__output_t *out = data_set->priv;
	out->info(out, "notice: Unfencing %s (remote): because the definition of %s changed",
	node->details->uname, match->id);
	}
	}

	digests_all_offset += snprintf(
	digests_all+digests_all_offset, max-digests_all_offset,
	"%s:%s:%s,", match->id, agent, data->digest_all_calc);

	digests_secure_offset += snprintf(
	digests_secure+digests_secure_offset, max-digests_secure_offset,
	"%s:%s:%s,", match->id, agent, data->digest_secure_calc);
	}
	g_hash_table_insert(stonith_op->meta,
	strdup(XML_OP_ATTR_DIGESTS_ALL),
	digests_all);
	g_hash_table_insert(stonith_op->meta,
	strdup(XML_OP_ATTR_DIGESTS_SECURE),
	digests_secure);
	}

	} else {
	free(op_key);
	}

	if (data_set->priority_fencing_delay > 0

	/* It's a suitable case where `priority-fencing-delay` applies.
	* At least add `priority-fencing-delay` field as an indicator. */
	&& (priority_delay

	/* The priority delay needs to be recalculated if this function has
	* been called by schedule_fencing_and_shutdowns() after node
	* priority has already been calculated by native_add_running().
	*/
	\|\| g_hash_table_lookup(stonith_op->meta,
	XML_CONFIG_ATTR_PRIORITY_FENCING_DELAY) != NULL)) {

	/* Add `priority-fencing-delay` to the fencing op even if it's 0 for
	* the targeting node. So that it takes precedence over any possible
	* `pcmk_delay_base/max`.
	*/
	char *delay_s = pcmk__itoa(node_priority_fencing_delay(node, data_set));

	g_hash_table_insert(stonith_op->meta,
	strdup(XML_CONFIG_ATTR_PRIORITY_FENCING_DELAY),
	delay_s);
	}

	if(optional == FALSE && pe_can_fence(data_set, node)) {
	pe__clear_action_flags(stonith_op, pe_action_optional);
	pe_action_set_reason(stonith_op, reason, false);

	} else if(reason && stonith_op->reason == NULL) {
	stonith_op->reason = strdup(reason);
	}

	return stonith_op;
	}

	void
	trigger_unfencing(
	pe_resource_t * rsc, pe_node_t node, const char reason, pe_action_t dependency, pe_working_set_t data_set)
	{
	if (!pcmk_is_set(data_set->flags, pe_flag_enable_unfencing)) {
	/* No resources require it */
	return;

	} else if ((rsc != NULL)
	&& !pcmk_is_set(rsc->flags, pe_rsc_fence_device)) {
	/* Wasn't a stonith device */
	return;

	} else if(node
	&& node->details->online
	&& node->details->unclean == FALSE
	&& node->details->shutdown == FALSE) {
	pe_action_t *unfence = pe_fence_op(node, "on", FALSE, reason, FALSE, data_set);

	if(dependency) {
	order_actions(unfence, dependency, pe_order_optional);
	}

	} else if(rsc) {
	GHashTableIter iter;

	g_hash_table_iter_init(&iter, rsc->allowed_nodes);
	while (g_hash_table_iter_next(&iter, NULL, (void **)&node)) {
	if(node->details->online && node->details->unclean == FALSE && node->details->shutdown == FALSE) {
	trigger_unfencing(rsc, node, reason, dependency, data_set);
	}
	}
	}
	}

	gboolean
	add_tag_ref(GHashTable * tags, const char * tag_name, const char * obj_ref)
	{
	pe_tag_t *tag = NULL;
	GList *gIter = NULL;
	gboolean is_existing = FALSE;

	CRM_CHECK(tags && tag_name && obj_ref, return FALSE);

	tag = g_hash_table_lookup(tags, tag_name);
	if (tag == NULL) {
	tag = calloc(1, sizeof(pe_tag_t));
	if (tag == NULL) {
	return FALSE;
	}
	tag->id = strdup(tag_name);
	tag->refs = NULL;
	g_hash_table_insert(tags, strdup(tag_name), tag);
	}

	for (gIter = tag->refs; gIter != NULL; gIter = gIter->next) {
	const char existing_ref = (const char ) gIter->data;

	if (pcmk__str_eq(existing_ref, obj_ref, pcmk__str_none)){
	is_existing = TRUE;
	break;
	}
	}

	if (is_existing == FALSE) {
	tag->refs = g_list_append(tag->refs, strdup(obj_ref));
	crm_trace("Added: tag=%s ref=%s", tag->id, obj_ref);
	}

	return TRUE;
	}

	/*!
	* \internal
	* \brief Create an action reason string based on the action itself
	*
	* \param[in] action Action to create reason string for
	* \param[in] flag Action flag that was cleared
	*
	* \return Newly allocated string suitable for use as action reason
	* \note It is the caller's responsibility to free() the result.
	*/
	char *
	pe__action2reason(pe_action_t *action, enum pe_action_flags flag)
	{
	const char *change = NULL;

	switch (flag) {
	case pe_action_runnable:
	case pe_action_migrate_runnable:
	change = "unrunnable";
	break;
	case pe_action_optional:
	change = "required";
	break;
	default:
	// Bug: caller passed unsupported flag
	CRM_CHECK(change != NULL, change = "");
	break;
	}
	return crm_strdup_printf("%s%s%s %s", change,
	(action->rsc == NULL)? "" : " ",
	(action->rsc == NULL)? "" : action->rsc->id,
	action->task);
	}

	void pe_action_set_reason(pe_action_t action, const char reason, bool overwrite)
	{
	if (action->reason != NULL && overwrite) {
	pe_rsc_trace(action->rsc, "Changing %s reason from '%s' to '%s'",
	action->uuid, action->reason, pcmk__s(reason, "(none)"));
	} else if (action->reason == NULL) {
	pe_rsc_trace(action->rsc, "Set %s reason to '%s'",
	action->uuid, pcmk__s(reason, "(none)"));
	} else {
	// crm_assert(action->reason != NULL && !overwrite);
	return;
	}

	pcmk__str_update(&action->reason, reason);
	}

	/*!
	* \internal
	* \brief Check whether shutdown has been requested for a node
	*
	* \param[in] node Node to check
	*
	* \return TRUE if node has shutdown attribute set and nonzero, FALSE otherwise
	* \note This differs from simply using node->details->shutdown in that it can
	* be used before that has been determined (and in fact to determine it),
	* and it can also be used to distinguish requested shutdown from implicit
	* shutdown of remote nodes by virtue of their connection stopping.
	*/
	bool
	pe__shutdown_requested(pe_node_t *node)
	{
	const char *shutdown = pe_node_attribute_raw(node, XML_CIB_ATTR_SHUTDOWN);

	return !pcmk__str_eq(shutdown, "0", pcmk__str_null_matches);
	}

	/*!
	* \internal
	* \brief Update a data set's "recheck by" time
	*
	* \param[in] recheck Epoch time when recheck should happen
	* \param[in,out] data_set Current working set
	*/
	void
	pe__update_recheck_time(time_t recheck, pe_working_set_t *data_set)
	{
	if ((recheck > get_effective_time(data_set))
	&& ((data_set->recheck_by == 0)
	\|\| (data_set->recheck_by > recheck))) {
	data_set->recheck_by = recheck;
	}
	}

	/*!
	* \internal
	* \brief Wrapper for pe_unpack_nvpairs() using a cluster working set
	*/
	void
	pe__unpack_dataset_nvpairs(xmlNode xml_obj, const char set_name,
	pe_rule_eval_data_t rule_data, GHashTable hash,
	const char *always_first, gboolean overwrite,
	pe_working_set_t *data_set)
	{
	crm_time_t *next_change = crm_time_new_undefined();

	pe_eval_nvpairs(data_set->input, xml_obj, set_name, rule_data, hash,
	always_first, overwrite, next_change);
	if (crm_time_is_defined(next_change)) {
	time_t recheck = (time_t) crm_time_get_seconds_since_epoch(next_change);

	pe__update_recheck_time(recheck, data_set);
	}
	crm_time_free(next_change);
	}

	bool
	pe__resource_is_disabled(pe_resource_t *rsc)
	{
	const char *target_role = NULL;

	CRM_CHECK(rsc != NULL, return false);
	target_role = g_hash_table_lookup(rsc->meta, XML_RSC_ATTR_TARGET_ROLE);
	if (target_role) {
	enum rsc_role_e target_role_e = text2role(target_role);

	if ((target_role_e == RSC_ROLE_STOPPED)
	\|\| ((target_role_e == RSC_ROLE_UNPROMOTED)
	&& pcmk_is_set(uber_parent(rsc)->flags, pe_rsc_promotable))) {
	return true;
	}
	}
	return false;
	}

	/*!
	* \internal
	* \brief Create an action to clear a resource's history from CIB
	*
	* \param[in] rsc Resource to clear
	* \param[in] node Node to clear history on
	*
	* \return New action to clear resource history
	*/
	pe_action_t *
	pe__clear_resource_history(pe_resource_t rsc, pe_node_t node,
	pe_working_set_t *data_set)
	{
	char *key = NULL;

	CRM_ASSERT(rsc && node);
	key = pcmk__op_key(rsc->id, CRM_OP_LRM_DELETE, 0);
	return custom_action(rsc, key, CRM_OP_LRM_DELETE, node, FALSE, TRUE,
	data_set);
	}

	bool
	pe__rsc_running_on_any(pe_resource_t rsc, GList node_list)
	{
	for (GList *ele = rsc->running_on; ele; ele = ele->next) {
	pe_node_t node = (pe_node_t ) ele->data;
	if (pcmk__str_in_list(node->details->uname, node_list,
	pcmk__str_star_matches\|pcmk__str_casei)) {
	return true;
	}
	}

	return false;
	}

	bool
	pcmk__rsc_filtered_by_node(pe_resource_t rsc, GList only_node)
	{
	return (rsc->fns->active(rsc, FALSE) && !pe__rsc_running_on_any(rsc, only_node));
	}

	GList *
	pe__filter_rsc_list(GList rscs, GList filter)
	{
	GList *retval = NULL;

	for (GList *gIter = rscs; gIter; gIter = gIter->next) {
	pe_resource_t rsc = (pe_resource_t ) gIter->data;

	/* I think the second condition is safe here for all callers of this
	* function. If not, it needs to move into pe__node_text.
	*/
	if (pcmk__str_in_list(rsc_printable_id(rsc), filter, pcmk__str_star_matches) \|\|
	(rsc->parent && pcmk__str_in_list(rsc_printable_id(rsc->parent), filter, pcmk__str_star_matches))) {
	retval = g_list_prepend(retval, rsc);
	}
	}

	return retval;
	}

	GList *
	pe__build_node_name_list(pe_working_set_t data_set, const char s) {
	GList *nodes = NULL;

	if (pcmk__str_eq(s, "*", pcmk__str_null_matches)) {
	/* Nothing was given so return a list of all node names. Or, '*' was
	* given. This would normally fall into the pe__unames_with_tag branch
	* where it will return an empty list. Catch it here instead.
	*/
	nodes = g_list_prepend(nodes, strdup("*"));
	} else {
	pe_node_t *node = pe_find_node(data_set->nodes, s);

	if (node) {
	/* The given string was a valid uname for a node. Return a
	* singleton list containing just that uname.
	*/
	nodes = g_list_prepend(nodes, strdup(s));
	} else {
	/* The given string was not a valid uname. It's either a tag or
	* it's a typo or something. In the first case, we'll return a
	* list of all the unames of the nodes with the given tag. In the
	* second case, we'll return a NULL pointer and nothing will
	* get displayed.
	*/
	nodes = pe__unames_with_tag(data_set, s);
	}
	}

	return nodes;
	}

	GList *
	pe__build_rsc_list(pe_working_set_t data_set, const char s) {
	GList *resources = NULL;

	if (pcmk__str_eq(s, "*", pcmk__str_null_matches)) {
	resources = g_list_prepend(resources, strdup("*"));
	} else {
	pe_resource_t *rsc = pe_find_resource_with_flags(data_set->resources, s,
	pe_find_renamed\|pe_find_any);

	if (rsc) {
	/* A colon in the name we were given means we're being asked to filter
	* on a specific instance of a cloned resource. Put that exact string
	* into the filter list. Otherwise, use the printable ID of whatever
	* resource was found that matches what was asked for.
	*/
	if (strstr(s, ":") != NULL) {
	resources = g_list_prepend(resources, strdup(rsc->id));
	} else {
	resources = g_list_prepend(resources, strdup(rsc_printable_id(rsc)));
	}
	} else {
	/* The given string was not a valid resource name. It's either
	* a tag or it's a typo or something. See build_uname_list for
	* more detail.
	*/
	resources = pe__rscs_with_tag(data_set, s);
	}
	}

	return resources;
	}

	xmlNode *
	pe__failed_probe_for_rsc(pe_resource_t rsc, const char name)
	{
	pe_resource_t *parent = uber_parent(rsc);
	const char *rsc_id = rsc->id;

	if (rsc->variant == pe_clone) {
	rsc_id = pe__clone_child_id(rsc);
	} else if (parent->variant == pe_clone) {
	rsc_id = pe__clone_child_id(parent);
	}

	for (xmlNode *xml_op = pcmk__xml_first_child(rsc->cluster->failed); xml_op != NULL;
	xml_op = pcmk__xml_next(xml_op)) {
	const char *value = NULL;
	char *op_id = NULL;

	/* This resource operation is not a failed probe. */
	if (!pcmk_xe_mask_probe_failure(xml_op)) {
	continue;
	}

	/* This resource operation was not run on the given node. Note that if name is
	* NULL, this will always succeed.
	*/
	value = crm_element_value(xml_op, XML_LRM_ATTR_TARGET);
	if (value == NULL \|\| !pcmk__str_eq(value, name, pcmk__str_casei\|pcmk__str_null_matches)) {
	continue;
	}

	/* This resource operation has no operation_key. */
	value = crm_element_value(xml_op, XML_LRM_ATTR_TASK_KEY);
	if (!parse_op_key(value ? value : ID(xml_op), &op_id, NULL, NULL)) {
	continue;
	}

	/* This resource operation's ID does not match the rsc_id we are looking for. */
	if (!pcmk__str_eq(op_id, rsc_id, pcmk__str_none)) {
	free(op_id);
	continue;
	}

	free(op_id);
	return xml_op;
	}

	return NULL;
	}
	diff --git a/tools/cibadmin.c b/tools/cibadmin.c
	index 994cf2b1fc..5429e794fd 100644
	--- a/tools/cibadmin.c
	+++ b/tools/cibadmin.c
	@@ -1,914 +1,917 @@
	/*
	* Copyright 2004-2022 the Pacemaker project contributors
	*
	* The version control history for this file may have further details.
	*
	* This source code is licensed under the GNU General Public License version 2
	* or later (GPLv2+) WITHOUT ANY WARRANTY.
	*/

	#include <crm_internal.h>
	#include <stdio.h>
	#include <crm/crm.h>
	#include <crm/msg_xml.h>
	#include <crm/common/xml.h>
	#include <crm/common/ipc.h>
	#include <crm/cib/internal.h>

	#include <pacemaker-internal.h>

	static int message_timeout_ms = 30;
	static int command_options = 0;
	static int request_id = 0;
	static int bump_log_num = 0;

	static char *host = NULL;
	static const char *cib_user = NULL;
	static const char *cib_action = NULL;
	static const char *obj_type = NULL;

	static cib_t *the_cib = NULL;
	static GMainLoop *mainloop = NULL;
	static gboolean force_flag = FALSE;
	static crm_exit_t exit_code = CRM_EX_OK;

	int do_init(void);
	int do_work(xmlNode input, int command_options, xmlNode *output);
	void cibadmin_op_callback(xmlNode msg, int call_id, int rc, xmlNode output,
	void *user_data);

	static pcmk__cli_option_t long_options[] = {
	// long option, argument type, storage, short option, description, flags
	{
	"help", no_argument, NULL, '?',
	"\tThis text", pcmk__option_default
	},
	{
	"version", no_argument, NULL, '$',
	"\tVersion information", pcmk__option_default
	},
	{
	"verbose", no_argument, NULL, 'V',
	"\tIncrease debug output\n", pcmk__option_default
	},

	{
	"-spacer-", no_argument, NULL, '-',
	"Commands:", pcmk__option_default
	},
	{
	"upgrade", no_argument, NULL, 'u',
	"\tUpgrade the configuration to the latest syntax", pcmk__option_default
	},
	{
	"query", no_argument, NULL, 'Q',
	"\tQuery the contents of the CIB", pcmk__option_default
	},
	{
	"erase", no_argument, NULL, 'E',
	"\tErase the contents of the whole CIB", pcmk__option_default
	},
	{
	"bump", no_argument, NULL, 'B',
	"\tIncrease the CIB's epoch value by 1", pcmk__option_default
	},
	{
	"create", no_argument, NULL, 'C',
	"\tCreate an object in the CIB (will fail if object already exists)",
	pcmk__option_default
	},
	{
	"modify", no_argument, NULL, 'M',
	"\tFind object somewhere in CIB's XML tree and update it "
	"(fails if object does not exist unless -c is also specified)",
	pcmk__option_default
	},
	{
	"patch", no_argument, NULL, 'P',
	"\tSupply an update in the form of an XML diff (see crm_diff(8))",
	pcmk__option_default
	},
	{
	"replace", no_argument, NULL, 'R',
	"\tRecursively replace an object in the CIB", pcmk__option_default
	},
	{
	"delete", no_argument, NULL, 'D',
	"\tDelete first object matching supplied criteria "
	"(for example, <op id=\"rsc1_op1\" name=\"monitor\"/>)",
	pcmk__option_default
	},
	{
	"-spacer-", no_argument, NULL, '-',
	"\n\tThe XML element name and all attributes must match "
	"in order for the element to be deleted.\n",
	pcmk__option_default
	},
	{
	"delete-all", no_argument, NULL, 'd',
	"When used with --xpath, remove all matching objects in the "
	"configuration instead of just the first one",
	pcmk__option_default
	},
	{
	"empty", no_argument, NULL, 'a',
	"\tOutput an empty CIB", pcmk__option_default
	},
	{
	"md5-sum", no_argument, NULL, '5',
	"\tCalculate the on-disk CIB digest", pcmk__option_default
	},
	{
	"md5-sum-versioned", no_argument, NULL, '6',
	"Calculate an on-the-wire versioned CIB digest", pcmk__option_default
	},
	{
	"show-access", optional_argument, NULL, 'S',
	"Whether to use syntax highlighting for ACLs "
	"(with -Q/--query and -U/--user)",
	pcmk__option_default
	},
	{
	"-spacer-", no_argument, NULL, '-',
	"\n\tThat amounts to one of \"color\" (default for terminal),"
	" \"text\" (otherwise), \"namespace\", or \"auto\""
	" (per former defaults).",
	pcmk__option_default
	},
	{
	"blank", no_argument, NULL, '-',
	NULL, pcmk__option_hidden
	},

	{
	"-spacer-", required_argument, NULL, '-',
	"\nAdditional options:", pcmk__option_default
	},
	{
	"force", no_argument, NULL, 'f',
	NULL, pcmk__option_default
	},
	{
	"timeout", required_argument, NULL, 't',
	"Time (in seconds) to wait before declaring the operation failed",
	pcmk__option_default
	},
	{
	"user", required_argument, NULL, 'U',
	"Run the command with permissions of the named user (valid only for "
	"the root and " CRM_DAEMON_USER " accounts)",
	pcmk__option_default
	},
	{
	"sync-call", no_argument, NULL, 's',
	"Wait for call to complete before returning", pcmk__option_default
	},
	{
	"local", no_argument, NULL, 'l',
	"\tCommand takes effect locally (should be used only for queries)",
	pcmk__option_default
	},
	{
	"allow-create", no_argument, NULL, 'c',
	"(Advanced) Allow target of --modify/-M to be created "
	"if it does not exist",
	pcmk__option_default
	},
	{
	"no-children", no_argument, NULL, 'n',
	"(Advanced) When querying an object, do not include its children "
	"in the result",
	pcmk__option_default
	},
	{
	"no-bcast", no_argument, NULL, 'b',
	NULL, pcmk__option_hidden
	},

	{
	"-spacer-", no_argument, NULL, '-',
	"\nData:", pcmk__option_default
	},
	{
	"xml-text", required_argument, NULL, 'X',
	"Retrieve XML from the supplied string", pcmk__option_default
	},
	{
	"xml-file", required_argument, NULL, 'x',
	"Retrieve XML from the named file", pcmk__option_default
	},
	{
	"xml-pipe", no_argument, NULL, 'p',
	"Retrieve XML from stdin\n", pcmk__option_default
	},

	{
	"scope", required_argument, NULL, 'o',
	"Limit scope of operation to specific section of CIB",
	pcmk__option_default
	},
	{
	"-spacer-", no_argument, NULL, '-',
	"\tValid values: configuration, nodes, resources, constraints, "
	"crm_config, rsc_defaults, op_defaults, acls, fencing-topology, "
	"tags, alerts",
	pcmk__option_default
	},

	{
	"xpath", required_argument, NULL, 'A',
	"A valid XPath to use instead of --scope/-o", pcmk__option_default
	},
	{
	"node-path", no_argument, NULL, 'e',
	"When performing XPath queries, return path of any matches found",
	pcmk__option_default
	},
	{
	"-spacer-", no_argument, NULL, '-',
	"\t(for example, \"/cib/configuration/resources/clone[@id='ms_RH1_SCS']"
	"/primitive[@id='prm_RH1_SCS']\")",
	pcmk__option_paragraph
	},
	{
	"node", required_argument, NULL, 'N',
	"(Advanced) Send command to the specified host", pcmk__option_default
	},
	{
	"-spacer-", no_argument, NULL, '!',
	NULL, pcmk__option_hidden
	},
	{
	"-spacer-", no_argument, NULL, '-',
	"\n\nExamples:\n", pcmk__option_default
	},
	{
	"-spacer-", no_argument, NULL, '-',
	"Query the configuration from the local node:", pcmk__option_paragraph
	},
	{
	"-spacer-", no_argument, NULL, '-',
	" cibadmin --query --local", pcmk__option_example
	},

	{
	"-spacer-", no_argument, NULL, '-',
	"Query just the cluster options configuration:", pcmk__option_paragraph
	},
	{
	"-spacer-", no_argument, NULL, '-',
	" cibadmin --query --scope crm_config", pcmk__option_example
	},

	{
	"-spacer-", no_argument, NULL, '-',
	"Query all 'target-role' settings:", pcmk__option_paragraph
	},
	{
	"-spacer-", no_argument, NULL, '-',
	" cibadmin --query --xpath \"//nvpair[@name='target-role']\"",
	pcmk__option_example
	},

	{
	"-spacer-", no_argument, NULL, '-',
	"Remove all 'is-managed' settings:", pcmk__option_paragraph
	},
	{
	"-spacer-", no_argument, NULL, '-',
	" cibadmin --delete-all --xpath \"//nvpair[@name='is-managed']\"",
	pcmk__option_example
	},

	{
	"-spacer-", no_argument, NULL, '-',
	"Remove the resource named 'old':", pcmk__option_paragraph
	},
	{
	"-spacer-", no_argument, NULL, '-',
	" cibadmin --delete --xml-text '<primitive id=\"old\"/>'",
	pcmk__option_example
	},
	{
	"-spacer-", no_argument, NULL, '-',
	"Remove all resources from the configuration:", pcmk__option_paragraph
	},
	{
	"-spacer-", no_argument, NULL, '-',
	" cibadmin --replace --scope resources --xml-text '<resources/>'",
	pcmk__option_example
	},
	{
	"-spacer-", no_argument, NULL, '-',
	"Replace complete configuration with contents of $HOME/pacemaker.xml:",
	pcmk__option_paragraph
	},
	{
	"-spacer-", no_argument, NULL, '-',
	" cibadmin --replace --xml-file $HOME/pacemaker.xml",
	pcmk__option_example
	},
	{
	"-spacer-", no_argument, NULL, '-',
	"Replace constraints section of configuration with contents of "
	"$HOME/constraints.xml:",
	pcmk__option_paragraph
	},
	{
	"-spacer-", no_argument, NULL, '-',
	" cibadmin --replace --scope constraints --xml-file "
	"$HOME/constraints.xml",
	pcmk__option_example
	},
	{
	"-spacer-", no_argument, NULL, '-',
	"Increase configuration version to prevent old configurations from "
	"being loaded accidentally:",
	pcmk__option_paragraph
	},
	{
	"-spacer-", no_argument, NULL, '-',
	" cibadmin --modify --xml-text '<cib admin_epoch=\"admin_epoch++\"/>'",
	pcmk__option_example
	},
	{
	"-spacer-", no_argument, NULL, '-',
	"Edit the configuration with your favorite $EDITOR:",
	pcmk__option_paragraph
	},
	{
	"-spacer-", no_argument, NULL, '-',
	" cibadmin --query > $HOME/local.xml", pcmk__option_example
	},
	{
	"-spacer-", no_argument, NULL, '-',
	" $EDITOR $HOME/local.xml", pcmk__option_example
	},
	{
	"-spacer-", no_argument, NULL, '-',
	" cibadmin --replace --xml-file $HOME/local.xml", pcmk__option_example
	},
	{
	"-spacer-", no_argument, NULL, '-',
	"Assuming terminal, render configuration in color (green for writable, blue for readable, red for denied) to visualize permissions for user tony:",
	pcmk__option_paragraph
	},
	{
	"-spacer-", no_argument, NULL, '-',
	" cibadmin --show-access=color --query --user tony \| less -r",
	pcmk__option_example
	},
	{
	"-spacer-", no_argument, NULL, '-',
	"SEE ALSO:", pcmk__option_default
	},
	{
	"-spacer-", no_argument, NULL, '-',
	" crm(8), pcs(8), crm_shadow(8), crm_diff(8)", pcmk__option_default
	},
	{
	"host", required_argument, NULL, 'h',
	"deprecated", pcmk__option_hidden
	},
	{ 0, 0, 0, 0 }
	};

	static void
	print_xml_output(xmlNode * xml)
	{
	char *buffer;

	if (!xml) {
	return;
	} else if (xml->type != XML_ELEMENT_NODE) {
	return;
	}

	if (command_options & cib_xpath_address) {
	const char *id = crm_element_value(xml, XML_ATTR_ID);

	if (pcmk__str_eq((const char *)xml->name, "xpath-query", pcmk__str_casei)) {
	xmlNode *child = NULL;

	for (child = xml->children; child; child = child->next) {
	print_xml_output(child);
	}

	} else if (id) {
	printf("%s\n", id);
	}

	} else {
	buffer = dump_xml_formatted(xml);
	fprintf(stdout, "%s", pcmk__s(buffer, "<null>\n"));
	free(buffer);
	}
	}

	// Upgrade requested but already at latest schema
	static void
	report_schema_unchanged(void)
	{
	const char *err = pcmk_rc_str(pcmk_rc_schema_unchanged);

	crm_info("Upgrade unnecessary: %s\n", err);
	printf("Upgrade unnecessary: %s\n", err);
	exit_code = CRM_EX_OK;
	}

	int
	main(int argc, char **argv)
	{
	int argerr = 0;
	int rc = pcmk_ok;
	int flag;
	const char *source = NULL;
	const char *admin_input_xml = NULL;
	const char *admin_input_file = NULL;
	gboolean dangerous_cmd = FALSE;
	gboolean admin_input_stdin = FALSE;
	xmlNode *output = NULL;
	xmlNode *input = NULL;
	char *username = NULL;
	const char *acl_cred = NULL;
	enum acl_eval_how {
	acl_eval_unused,
	acl_eval_auto,
	acl_eval_namespace,
	acl_eval_text,
	acl_eval_color,
	} acl_eval_how = acl_eval_unused;

	int option_index = 0;

	pcmk__cli_init_logging("cibadmin", 0);
	set_crm_log_level(LOG_CRIT);
	pcmk__set_cli_options(NULL, "<command> [options]", long_options,
	"query and edit the Pacemaker configuration");

	if (argc < 2) {
	pcmk__cli_help('?', CRM_EX_USAGE);
	}

	while (1) {
	flag = pcmk__next_cli_option(argc, argv, &option_index, NULL);
	if (flag == -1)
	break;

	switch (flag) {
	case 't':
	message_timeout_ms = atoi(optarg);
	if (message_timeout_ms < 1) {
	message_timeout_ms = 30;
	}
	break;
	case 'A':
	obj_type = optarg;
	cib__set_call_options(command_options, crm_system_name,
	cib_xpath);
	break;
	case 'e':
	cib__set_call_options(command_options, crm_system_name,
	cib_xpath_address);
	break;
	case 'u':
	cib_action = CIB_OP_UPGRADE;
	dangerous_cmd = TRUE;
	break;
	case 'E':
	cib_action = CIB_OP_ERASE;
	dangerous_cmd = TRUE;
	break;
	case 'S':
	if (optarg != NULL) {
	if (!strcmp(optarg, "auto")) {
	acl_eval_how = acl_eval_auto;
	} else if (!strcmp(optarg, "namespace")) {
	acl_eval_how = acl_eval_namespace;
	} else if (!strcmp(optarg, "text")) {
	acl_eval_how = acl_eval_text;
	} else if (!strcmp(optarg, "color")) {
	acl_eval_how = acl_eval_color;
	} else {
	fprintf(stderr, "Unrecognized value for --show-access: \"%s\"\n",
	optarg);
	++argerr;
	}
	} else {
	acl_eval_how = acl_eval_auto;
	}
	/* XXX this is a workaround until we unify happy paths for
	both a/sync handling; the respective extra code is
	only in sync path now, but does it matter at all for
	query-like request wrt. what blackbox users observe? */
	command_options \|= cib_sync_call;
	break;
	case 'Q':
	cib_action = CIB_OP_QUERY;
	break;
	case 'P':
	cib_action = CIB_OP_APPLY_DIFF;
	break;
	case 'U':
	cib_user = optarg;
	break;
	case 'M':
	cib_action = CIB_OP_MODIFY;
	break;
	case 'R':
	cib_action = CIB_OP_REPLACE;
	break;
	case 'C':
	cib_action = CIB_OP_CREATE;
	break;
	case 'D':
	cib_action = CIB_OP_DELETE;
	break;
	case '5':
	cib_action = "md5-sum";
	break;
	case '6':
	cib_action = "md5-sum-versioned";
	break;
	case 'c':
	cib__set_call_options(command_options, crm_system_name,
	cib_can_create);
	break;
	case 'n':
	cib__set_call_options(command_options, crm_system_name,
	cib_no_children);
	break;
	case 'B':
	cib_action = CIB_OP_BUMP;
	crm_log_args(argc, argv);
	break;
	case 'V':
	cib__set_call_options(command_options, crm_system_name,
	cib_verbose);
	bump_log_num++;
	break;
	case '?':
	case '$':
	case '!':
	pcmk__cli_help(flag, CRM_EX_OK);
	break;
	case 'o':
	crm_trace("Option %c => %s", flag, optarg);
	obj_type = optarg;
	break;
	case 'X':
	crm_trace("Option %c => %s", flag, optarg);
	admin_input_xml = optarg;
	crm_log_args(argc, argv);
	break;
	case 'x':
	crm_trace("Option %c => %s", flag, optarg);
	admin_input_file = optarg;
	crm_log_args(argc, argv);
	break;
	case 'p':
	admin_input_stdin = TRUE;
	crm_log_args(argc, argv);
	break;
	case 'N':
	case 'h':
	pcmk__str_update(&host, optarg);
	break;
	case 'l':
	cib__set_call_options(command_options, crm_system_name,
	cib_scope_local);
	break;
	case 'd':
	cib_action = CIB_OP_DELETE;
	cib__set_call_options(command_options, crm_system_name,
	cib_multiple);
	dangerous_cmd = TRUE;
	break;
	case 'b':
	dangerous_cmd = TRUE;
	cib__set_call_options(command_options, crm_system_name,
	cib_inhibit_bcast\|cib_scope_local);
	break;
	case 's':
	cib__set_call_options(command_options, crm_system_name,
	cib_sync_call);
	break;
	case 'f':
	force_flag = TRUE;
	cib__set_call_options(command_options, crm_system_name,
	cib_quorum_override);
	crm_log_args(argc, argv);
	break;
	case 'a':
	output = createEmptyCib(1);
	if (optind < argc) {
	crm_xml_add(output, XML_ATTR_VALIDATION, argv[optind]);
	}
	admin_input_xml = dump_xml_formatted(output);
	fprintf(stdout, "%s", pcmk__s(admin_input_xml, "<null>\n"));
	crm_exit(CRM_EX_OK);
	break;
	default:
	printf("Argument code 0%o (%c)" " is not (?yet?) supported\n", flag, flag);
	++argerr;
	break;
	}
	}

	while (bump_log_num > 0) {
	crm_bump_log_level(argc, argv);
	bump_log_num--;
	}

	if (optind < argc) {
	printf("non-option ARGV-elements: ");
	while (optind < argc)
	printf("%s ", argv[optind++]);
	printf("\n");
	pcmk__cli_help('?', CRM_EX_USAGE);
	}

	if (optind > argc \|\| cib_action == NULL) {
	++argerr;
	}

	if (argerr) {
	pcmk__cli_help('?', CRM_EX_USAGE);
	}

	if (dangerous_cmd && force_flag == FALSE) {
	fprintf(stderr, "The supplied command is considered dangerous."
	" To prevent accidental destruction of the cluster,"
	" the --force flag is required in order to proceed.\n");
	fflush(stderr);
	crm_exit(CRM_EX_UNSAFE);
	}

	if (admin_input_file != NULL) {
	input = filename2xml(admin_input_file);
	source = admin_input_file;

	} else if (admin_input_xml != NULL) {
	source = "input string";
	input = string2xml(admin_input_xml);

	} else if (admin_input_stdin) {
	source = "STDIN";
	input = stdin2xml();

	} else if (acl_eval_how != acl_eval_unused) {
	username = pcmk__uid2username(geteuid());
	if (pcmk_acl_required(username)) {
	if (force_flag) {
	fprintf(stderr, "The supplied command can provide skewed"
	" result since it is run under user that also"
	" gets guarded per ACLs on their own right."
	" Continuing since --force flag was"
	" provided.\n");

	} else {
	fprintf(stderr, "The supplied command can provide skewed"
	" result since it is run under user that also"
	" gets guarded per ACLs in their own right."
	" To accept the risk of such a possible"
	" distortion (without even knowing it at this"
	" time), use the --force flag.\n");
	crm_exit(CRM_EX_UNSAFE);
	}

	}
	free(username);
	username = NULL;

	if (cib_user == NULL) {
	fprintf(stderr, "The supplied command requires -U user specified.\n");
	crm_exit(CRM_EX_USAGE);
	}

	/* we already stopped/warned ACL-controlled users about consequences */
	acl_cred = cib_user;
	cib_user = NULL;
	}

	if (input != NULL) {
	crm_log_xml_debug(input, "[admin input]");

	} else if (source) {
	fprintf(stderr, "Couldn't parse input from %s.\n", source);
	crm_exit(CRM_EX_CONFIG);
	}

	if (pcmk__str_eq(cib_action, "md5-sum", pcmk__str_casei)) {
	char *digest = NULL;

	if (input == NULL) {
	fprintf(stderr, "Please supply XML to process with -X, -x or -p\n");
	crm_exit(CRM_EX_USAGE);
	}

	digest = calculate_on_disk_digest(input);
	fprintf(stderr, "Digest: ");
	fprintf(stdout, "%s\n", pcmk__s(digest, "<null>"));
	free(digest);
	free_xml(input);
	crm_exit(CRM_EX_OK);

	} else if (pcmk__str_eq(cib_action, "md5-sum-versioned", pcmk__str_casei)) {
	char *digest = NULL;
	const char *version = NULL;

	if (input == NULL) {
	fprintf(stderr, "Please supply XML to process with -X, -x or -p\n");
	crm_exit(CRM_EX_USAGE);
	}

	version = crm_element_value(input, XML_ATTR_CRM_VERSION);
	digest = calculate_xml_versioned_digest(input, FALSE, TRUE, version);
	fprintf(stderr, "Versioned (%s) digest: ", version);
	fprintf(stdout, "%s\n", pcmk__s(digest, "<null>"));
	free(digest);
	free_xml(input);
	crm_exit(CRM_EX_OK);
	}

	rc = do_init();
	if (rc != pcmk_ok) {
	crm_err("Init failed, could not perform requested operations");
	fprintf(stderr, "Init failed, could not perform requested operations\n");
	free_xml(input);
	- crm_exit(crm_errno2exit(rc));
	+ crm_exit(pcmk_rc2exitc(pcmk_legacy2rc(rc)));
	}

	rc = do_work(input, command_options, &output);
	if (rc > 0) {
	/* wait for the reply by creating a mainloop and running it until
	* the callbacks are invoked...
	*/
	request_id = rc;

	the_cib->cmds->register_callback(the_cib, request_id, message_timeout_ms, FALSE, NULL,
	"cibadmin_op_callback", cibadmin_op_callback);

	mainloop = g_main_loop_new(NULL, FALSE);

	crm_trace("%s waiting for reply from the local CIB", crm_system_name);

	crm_info("Starting mainloop");
	g_main_loop_run(mainloop);

	} else if ((rc == -pcmk_err_schema_unchanged)
	&& pcmk__str_eq(cib_action, CIB_OP_UPGRADE, pcmk__str_none)) {
	report_schema_unchanged();

	} else if (rc < 0) {
	- crm_err("Call failed: %s", pcmk_strerror(rc));
	- fprintf(stderr, "Call failed: %s\n", pcmk_strerror(rc));
	+ rc = pcmk_legacy2rc(rc);
	+ crm_err("Call failed: %s", pcmk_rc_str(rc));
	+ fprintf(stderr, "Call failed: %s\n", pcmk_rc_str(rc));

	- if (rc == -pcmk_err_schema_validation) {
	+ if (rc == pcmk_rc_schema_validation) {
	if (pcmk__str_eq(cib_action, CIB_OP_UPGRADE, pcmk__str_none)) {
	xmlNode *obj = NULL;
	- int version = 0, rc = 0;
	+ int version = 0;

	- rc = the_cib->cmds->query(the_cib, NULL, &obj, command_options);
	- if (rc == pcmk_ok) {
	+ if (the_cib->cmds->query(the_cib, NULL, &obj,
	+ command_options) == pcmk_ok) {
	update_validation(&obj, &version, 0, TRUE, FALSE);
	}

	} else if (output) {
	validate_xml_verbose(output);
	}
	}
	- exit_code = crm_errno2exit(rc);
	+ exit_code = pcmk_rc2exitc(rc);
	}

	if (output != NULL && acl_eval_how != acl_eval_unused) {
	xmlDoc *acl_evaled_doc;
	rc = pcmk__acl_annotate_permissions(acl_cred, output->doc, &acl_evaled_doc);
	if (rc == pcmk_rc_ok) {
	enum pcmk__acl_render_how how;
	xmlChar *rendered = NULL;
	free_xml(output);
	switch(acl_eval_how) {
	case acl_eval_text:
	how = pcmk__acl_render_text;
	break;
	case acl_eval_color:
	how = pcmk__acl_render_color;
	break;
	case acl_eval_namespace:
	how = pcmk__acl_render_namespace;
	break;
	default:
	if (/acl_eval_auto/ isatty(STDOUT_FILENO)) {
	how = pcmk__acl_render_color;
	} else {
	how = pcmk__acl_render_text;
	}
	break;
	}

	if (!pcmk__acl_evaled_render(acl_evaled_doc, how,
	&rendered)) {
	printf("%s\n", (char *) rendered);
	free(rendered);
	} else {
	fprintf(stderr, "Could not render evaluated access\n");
	crm_exit(CRM_EX_CONFIG);
	}
	output = NULL;
	} else {
	fprintf(stderr, "Could not evaluate access per request (%s, error: %s)\n", acl_cred, pcmk_rc_str(rc));
	crm_exit(CRM_EX_CONFIG);
	}
	}

	if (output != NULL) {
	print_xml_output(output);
	free_xml(output);
	}

	crm_trace("%s exiting normally", crm_system_name);

	free_xml(input);
	rc = cib__clean_up_connection(&the_cib);
	if (exit_code == CRM_EX_OK) {
	exit_code = pcmk_rc2exitc(rc);
	}

	free(host);
	crm_exit(exit_code);
	}

	int
	do_work(xmlNode * input, int call_options, xmlNode ** output)
	{
	/* construct the request */
	the_cib->call_timeout = message_timeout_ms;
	if (strcasecmp(CIB_OP_REPLACE, cib_action) == 0
	&& pcmk__str_eq(crm_element_name(input), XML_TAG_CIB, pcmk__str_casei)) {
	xmlNode *status = pcmk_find_cib_element(input, XML_CIB_TAG_STATUS);

	if (status == NULL) {
	create_xml_node(input, XML_CIB_TAG_STATUS);
	}
	}

	if (cib_action != NULL) {
	crm_trace("Passing \"%s\" to variant_op...", cib_action);
	return cib_internal_op(the_cib, cib_action, host, obj_type, input, output, call_options, cib_user);

	} else {
	crm_err("You must specify an operation");
	}
	return -EINVAL;
	}

	int
	do_init(void)
	{
	int rc = pcmk_ok;

	the_cib = cib_new();
	rc = the_cib->cmds->signon(the_cib, crm_system_name, cib_command);
	if (rc != pcmk_ok) {
	crm_err("Could not connect to the CIB: %s", pcmk_strerror(rc));
	fprintf(stderr, "Could not connect to the CIB: %s\n",
	pcmk_strerror(rc));
	}

	return rc;
	}

	void
	cibadmin_op_callback(xmlNode * msg, int call_id, int rc, xmlNode * output, void *user_data)
	{
	- exit_code = crm_errno2exit(rc);
	+ rc = pcmk_legacy2rc(rc);
	+ exit_code = pcmk_rc2exitc(rc);

	- if (rc == -pcmk_err_schema_unchanged) {
	+ if (rc == pcmk_rc_schema_unchanged) {
	report_schema_unchanged();

	- } else if (rc != pcmk_ok) {
	- crm_warn("Call %s failed (%d): %s", cib_action, rc, pcmk_strerror(rc));
	- fprintf(stderr, "Call %s failed (%d): %s\n", cib_action, rc, pcmk_strerror(rc));
	+ } else if (rc != pcmk_rc_ok) {
	+ crm_warn("Call %s failed: %s " CRM_XS " rc=%d",
	+ cib_action, pcmk_rc_str(rc), rc);
	+ fprintf(stderr, "Call %s failed: %s\n", cib_action, pcmk_rc_str(rc));
	print_xml_output(output);

	} else if (pcmk__str_eq(cib_action, CIB_OP_QUERY, pcmk__str_casei) && output == NULL) {
	crm_err("Query returned no output");
	crm_log_xml_err(msg, "no output");

	} else if (output == NULL) {
	crm_info("Call passed");

	} else {
	crm_info("Call passed");
	print_xml_output(output);
	}

	if (call_id == request_id) {
	g_main_loop_quit(mainloop);

	} else {
	crm_info("Message was not the response we were looking for (%d vs. %d)",
	call_id, request_id);
	}
	}
	diff --git a/tools/crm_diff.c b/tools/crm_diff.c
	index 1db9227257..c0d5aae050 100644
	--- a/tools/crm_diff.c
	+++ b/tools/crm_diff.c
	@@ -1,372 +1,373 @@
	/*
	* Copyright 2005-2022 the Pacemaker project contributors
	*
	* The version control history for this file may have further details.
	*
	* This source code is licensed under the GNU General Public License version 2
	* or later (GPLv2+) WITHOUT ANY WARRANTY.
	*/

	#include <crm_internal.h>

	#include <stdio.h>
	#include <unistd.h>
	#include <stdlib.h>
	#include <errno.h>
	#include <fcntl.h>
	#include <sys/param.h>
	#include <sys/types.h>

	#include <crm/crm.h>
	#include <crm/msg_xml.h>
	#include <crm/common/cmdline_internal.h>
	#include <crm/common/output_internal.h>
	#include <crm/common/xml.h>
	#include <crm/common/ipc.h>
	#include <crm/cib.h>

	#define SUMMARY "Compare two Pacemaker configurations (in XML format) to produce a custom diff-like output, " \
	"or apply such an output as a patch"

	struct {
	gboolean apply;
	gboolean as_cib;
	gboolean no_version;
	gboolean raw_1;
	gboolean raw_2;
	gboolean use_stdin;
	char *xml_file_1;
	char *xml_file_2;
	} options;

	gboolean new_string_cb(const gchar option_name, const gchar optarg, gpointer data, GError **error);
	gboolean original_string_cb(const gchar option_name, const gchar optarg, gpointer data, GError **error);
	gboolean patch_cb(const gchar option_name, const gchar optarg, gpointer data, GError **error);

	static GOptionEntry original_xml_entries[] = {
	{ "original", 'o', 0, G_OPTION_ARG_STRING, &options.xml_file_1,
	"XML is contained in the named file",
	"FILE" },
	{ "original-string", 'O', 0, G_OPTION_ARG_CALLBACK, original_string_cb,
	"XML is contained in the supplied string",
	"STRING" },

	{ NULL }
	};

	static GOptionEntry operation_entries[] = {
	{ "new", 'n', 0, G_OPTION_ARG_STRING, &options.xml_file_2,
	"Compare the original XML to the contents of the named file",
	"FILE" },
	{ "new-string", 'N', 0, G_OPTION_ARG_CALLBACK, new_string_cb,
	"Compare the original XML with the contents of the supplied string",
	"STRING" },
	{ "patch", 'p', 0, G_OPTION_ARG_CALLBACK, patch_cb,
	"Patch the original XML with the contents of the named file",
	"FILE" },

	{ NULL }
	};

	static GOptionEntry addl_entries[] = {
	{ "cib", 'c', 0, G_OPTION_ARG_NONE, &options.as_cib,
	"Compare/patch the inputs as a CIB (includes versions details)",
	NULL },
	{ "stdin", 's', 0, G_OPTION_ARG_NONE, &options.use_stdin,
	"",
	NULL },
	{ "no-version", 'u', 0, G_OPTION_ARG_NONE, &options.no_version,
	"Generate the difference without versions details",
	NULL },

	{ NULL }
	};

	gboolean
	new_string_cb(const gchar option_name, const gchar optarg, gpointer data, GError **error) {
	options.raw_2 = TRUE;
	pcmk__str_update(&options.xml_file_2, optarg);
	return TRUE;
	}

	gboolean
	original_string_cb(const gchar option_name, const gchar optarg, gpointer data, GError **error) {
	options.raw_1 = TRUE;
	pcmk__str_update(&options.xml_file_1, optarg);
	return TRUE;
	}

	gboolean
	patch_cb(const gchar option_name, const gchar optarg, gpointer data, GError **error) {
	options.apply = TRUE;
	pcmk__str_update(&options.xml_file_2, optarg);
	return TRUE;
	}

	static void
	print_patch(xmlNode *patch)
	{
	char *buffer = dump_xml_formatted(patch);

	printf("%s", pcmk__s(buffer, "<null>\n"));
	free(buffer);
	fflush(stdout);
	}

	static int
	apply_patch(xmlNode input, xmlNode patch, gboolean as_cib)
	{
	int rc;
	xmlNode *output = copy_xml(input);

	rc = xml_apply_patchset(output, patch, as_cib);
	if (rc != pcmk_ok) {
	fprintf(stderr, "Could not apply patch: %s\n", pcmk_strerror(rc));
	free_xml(output);
	return rc;
	}

	if (output != NULL) {
	const char *version;
	char *buffer;

	print_patch(output);

	version = crm_element_value(output, XML_ATTR_CRM_VERSION);
	buffer = calculate_xml_versioned_digest(output, FALSE, TRUE, version);
	crm_trace("Digest: %s", pcmk__s(buffer, "<null>\n"));
	free(buffer);
	free_xml(output);
	}
	return pcmk_ok;
	}

	static void
	log_patch_cib_versions(xmlNode *patch)
	{
	int add[] = { 0, 0, 0 };
	int del[] = { 0, 0, 0 };

	const char *fmt = NULL;
	const char *digest = NULL;

	xml_patch_versions(patch, add, del);
	fmt = crm_element_value(patch, "format");
	digest = crm_element_value(patch, XML_ATTR_DIGEST);

	if (add[2] != del[2] \|\| add[1] != del[1] \|\| add[0] != del[0]) {
	crm_info("Patch: --- %d.%d.%d %s", del[0], del[1], del[2], fmt);
	crm_info("Patch: +++ %d.%d.%d %s", add[0], add[1], add[2], digest);
	}
	}

	static void
	strip_patch_cib_version(xmlNode patch, const char *vfields, size_t nvfields)
	{
	int format = 1;

	crm_element_value_int(patch, "format", &format);
	if (format == 2) {
	xmlNode *version_xml = find_xml_node(patch, "version", FALSE);

	if (version_xml) {
	free_xml(version_xml);
	}

	} else {
	int i = 0;

	const char *tags[] = {
	XML_TAG_DIFF_REMOVED,
	XML_TAG_DIFF_ADDED,
	};

	for (i = 0; i < PCMK__NELEM(tags); i++) {
	xmlNode *tmp = NULL;
	int lpc;

	tmp = find_xml_node(patch, tags[i], FALSE);
	if (tmp) {
	for (lpc = 0; lpc < nvfields; lpc++) {
	xml_remove_prop(tmp, vfields[lpc]);
	}

	tmp = find_xml_node(tmp, XML_TAG_CIB, FALSE);
	if (tmp) {
	for (lpc = 0; lpc < nvfields; lpc++) {
	xml_remove_prop(tmp, vfields[lpc]);
	}
	}
	}
	}
	}
	}

	static int
	generate_patch(xmlNode object_1, xmlNode object_2, const char *xml_file_2,
	gboolean as_cib, gboolean no_version)
	{
	xmlNode *output = NULL;

	const char *vfields[] = {
	XML_ATTR_GENERATION_ADMIN,
	XML_ATTR_GENERATION,
	XML_ATTR_NUMUPDATES,
	};

	/* If we're ignoring the version, make the version information
	* identical, so it isn't detected as a change. */
	if (no_version) {
	int lpc;

	for (lpc = 0; lpc < PCMK__NELEM(vfields); lpc++) {
	crm_copy_xml_element(object_1, object_2, vfields[lpc]);
	}
	}

	xml_track_changes(object_2, NULL, object_2, FALSE);
	if(as_cib) {
	xml_calculate_significant_changes(object_1, object_2);
	} else {
	xml_calculate_changes(object_1, object_2);
	}
	crm_log_xml_debug(object_2, (xml_file_2? xml_file_2: "target"));

	output = xml_create_patchset(0, object_1, object_2, NULL, FALSE);

	xml_log_changes(LOG_INFO, __func__, object_2);
	xml_accept_changes(object_2);

	if (output == NULL) {
	return pcmk_ok;
	}

	patchset_process_digest(output, object_1, object_2, as_cib);

	if (as_cib) {
	log_patch_cib_versions(output);

	} else if (no_version) {
	strip_patch_cib_version(output, vfields, PCMK__NELEM(vfields));
	}

	xml_log_patchset(LOG_NOTICE, __func__, output);
	print_patch(output);
	free_xml(output);
	return -pcmk_err_generic;
	}

	static GOptionContext *
	build_arg_context(pcmk__common_args_t *args) {
	GOptionContext *context = NULL;

	const char *description = "Examples:\n\n"
	"Obtain the two different configuration files by running cibadmin on the two cluster setups to compare:\n\n"
	"\t# cibadmin --query > cib-old.xml\n\n"
	"\t# cibadmin --query > cib-new.xml\n\n"
	"Calculate and save the difference between the two files:\n\n"
	"\t# crm_diff --original cib-old.xml --new cib-new.xml > patch.xml\n\n"
	"Apply the patch to the original file:\n\n"
	"\t# crm_diff --original cib-old.xml --patch patch.xml > updated.xml\n\n"
	"Apply the patch to the running cluster:\n\n"
	"\t# cibadmin --patch -x patch.xml\n";

	context = pcmk__build_arg_context(args, NULL, NULL, NULL);
	g_option_context_set_description(context, description);

	pcmk__add_arg_group(context, "xml", "Original XML:",
	"Show original XML options", original_xml_entries);
	pcmk__add_arg_group(context, "operation", "Operation:",
	"Show operation options", operation_entries);
	pcmk__add_arg_group(context, "additional", "Additional Options:",
	"Show additional options", addl_entries);
	return context;
	}

	int
	main(int argc, char **argv)
	{
	xmlNode *object_1 = NULL;
	xmlNode *object_2 = NULL;

	crm_exit_t exit_code = CRM_EX_OK;
	GError *error = NULL;

	pcmk__common_args_t *args = pcmk__new_common_args(SUMMARY);
	gchar **processed_args = pcmk__cmdline_preproc(argv, "nopNO");
	GOptionContext *context = build_arg_context(args);

	+ int rc = 0;
	+
	if (!g_option_context_parse_strv(context, &processed_args, &error)) {
	exit_code = CRM_EX_USAGE;
	goto done;
	}

	pcmk__cli_init_logging("crm_diff", args->verbosity);

	if (args->version) {
	g_strfreev(processed_args);
	pcmk__free_arg_context(context);
	/* FIXME: When crm_diff is converted to use formatted output, this can go. */
	pcmk__cli_help('v', CRM_EX_OK);
	}

	if (options.apply && options.no_version) {
	fprintf(stderr, "warning: -u/--no-version ignored with -p/--patch\n");
	} else if (options.as_cib && options.no_version) {
	fprintf(stderr, "error: -u/--no-version incompatible with -c/--cib\n");
	exit_code = CRM_EX_USAGE;
	goto done;
	}

	if (options.raw_1) {
	object_1 = string2xml(options.xml_file_1);

	} else if (options.use_stdin) {
	fprintf(stderr, "Input first XML fragment:");
	object_1 = stdin2xml();

	} else if (options.xml_file_1 != NULL) {
	object_1 = filename2xml(options.xml_file_1);
	}

	if (options.raw_2) {
	object_2 = string2xml(options.xml_file_2);

	} else if (options.use_stdin) {
	fprintf(stderr, "Input second XML fragment:");
	object_2 = stdin2xml();

	} else if (options.xml_file_2 != NULL) {
	object_2 = filename2xml(options.xml_file_2);
	}

	if (object_1 == NULL) {
	fprintf(stderr, "Could not parse the first XML fragment\n");
	exit_code = CRM_EX_DATAERR;
	goto done;
	}
	if (object_2 == NULL) {
	fprintf(stderr, "Could not parse the second XML fragment\n");
	exit_code = CRM_EX_DATAERR;
	goto done;
	}

	if (options.apply) {
	- int ret = apply_patch(object_1, object_2, options.as_cib);
	- exit_code = crm_errno2exit(ret);
	+ rc = apply_patch(object_1, object_2, options.as_cib);
	} else {
	- int ret = generate_patch(object_1, object_2, options.xml_file_2, options.as_cib, options.no_version);
	- exit_code = crm_errno2exit(ret);
	+ rc = generate_patch(object_1, object_2, options.xml_file_2, options.as_cib, options.no_version);
	}
	+ exit_code = pcmk_rc2exitc(pcmk_legacy2rc(rc));

	done:
	g_strfreev(processed_args);
	pcmk__free_arg_context(context);
	free(options.xml_file_1);
	free(options.xml_file_2);
	free_xml(object_1);
	free_xml(object_2);

	pcmk__output_and_clear_error(error, NULL);
	crm_exit(exit_code);
	}
	diff --git a/tools/crm_mon.c b/tools/crm_mon.c
	index eaf79bd99f..134e76b260 100644
	--- a/tools/crm_mon.c
	+++ b/tools/crm_mon.c
	@@ -1,2202 +1,2205 @@
	/*
	* Copyright 2004-2022 the Pacemaker project contributors
	*
	* The version control history for this file may have further details.
	*
	* This source code is licensed under the GNU General Public License version 2
	* or later (GPLv2+) WITHOUT ANY WARRANTY.
	*/

	#include <crm_internal.h>

	#include <sys/param.h>

	#include <crm/crm.h>

	#include <stdint.h>
	#include <stdio.h>
	#include <sys/types.h>
	#include <sys/stat.h>
	#include <unistd.h>

	#include <stdlib.h>
	#include <errno.h>
	#include <fcntl.h>
	#include <libgen.h>
	#include <signal.h>
	#include <sys/utsname.h>

	#include <crm/msg_xml.h>
	#include <crm/services.h>
	#include <crm/lrmd.h>
	#include <crm/common/cmdline_internal.h>
	#include <crm/common/internal.h> // pcmk__ends_with_ext()
	#include <crm/common/ipc.h>
	#include <crm/common/mainloop.h>
	#include <crm/common/output.h>
	#include <crm/common/output_internal.h>
	#include <crm/common/results.h>
	#include <crm/common/util.h>
	#include <crm/common/xml.h>
	#include <crm/common/xml_internal.h>

	#include <crm/cib/internal.h>
	#include <crm/pengine/status.h>
	#include <crm/pengine/internal.h>
	#include <pacemaker-internal.h>
	#include <crm/stonith-ng.h>
	#include <crm/fencing/internal.h>

	#include "crm_mon.h"

	#define SUMMARY "Provides a summary of cluster's current state.\n\n" \
	"Outputs varying levels of detail in a number of different formats."

	/*
	* Definitions indicating which items to print
	*/

	static uint32_t show;
	static uint32_t show_opts = pcmk_show_pending;

	/*
	* Definitions indicating how to output
	*/

	static mon_output_format_t output_format = mon_output_unset;

	/* other globals */
	static GIOChannel *io_channel = NULL;
	static GMainLoop *mainloop = NULL;
	static guint reconnect_timer = 0;
	static mainloop_timer_t *refresh_timer = NULL;

	static cib_t *cib = NULL;
	static stonith_t *st = NULL;
	static xmlNode *current_cib = NULL;

	static GError *error = NULL;
	static pcmk__common_args_t *args = NULL;
	static pcmk__output_t *out = NULL;
	static GOptionContext *context = NULL;
	static gchar **processed_args = NULL;

	static time_t last_refresh = 0;
	volatile crm_trigger_t *refresh_trigger = NULL;

	static enum pcmk__fence_history fence_history = pcmk__fence_history_none;
	static gboolean on_remote_node = FALSE;
	static gboolean use_cib_native = FALSE;

	int interactive_fence_level = 0;

	static pcmk__supported_format_t formats[] = {
	#if CURSES_ENABLED
	CRM_MON_SUPPORTED_FORMAT_CURSES,
	#endif
	PCMK__SUPPORTED_FORMAT_HTML,
	PCMK__SUPPORTED_FORMAT_NONE,
	PCMK__SUPPORTED_FORMAT_TEXT,
	PCMK__SUPPORTED_FORMAT_XML,
	{ NULL, NULL, NULL }
	};

	/* Define exit codes for monitoring-compatible output
	* For nagios plugins, the possibilities are
	* OK=0, WARN=1, CRIT=2, and UNKNOWN=3
	*/
	#define MON_STATUS_WARN CRM_EX_ERROR
	#define MON_STATUS_CRIT CRM_EX_INVALID_PARAM
	#define MON_STATUS_UNKNOWN CRM_EX_UNIMPLEMENT_FEATURE

	#define RECONNECT_MSECS 5000

	struct {
	guint reconnect_ms;
	gboolean daemonize;
	gboolean fence_connect;
	gboolean one_shot;
	gboolean print_pending;
	gboolean show_bans;
	gboolean watch_fencing;
	char *pid_file;
	char *external_agent;
	char *external_recipient;
	char *neg_location_prefix;
	char *only_node;
	char *only_rsc;
	GSList *user_includes_excludes;
	GSList *includes_excludes;
	} options = {
	.fence_connect = TRUE,
	.reconnect_ms = RECONNECT_MSECS
	};

	static void clean_up_fencing_connection(void);
	static crm_exit_t clean_up(crm_exit_t exit_code);
	static void crm_diff_update(const char event, xmlNode msg);
	static void clean_up_on_connection_failure(int rc);
	static int mon_refresh_display(gpointer user_data);
	static int cib_connect(void);
	static int fencing_connect(void);
	static int pacemakerd_status(void);
	static void mon_st_callback_event(stonith_t * st, stonith_event_t * e);
	static void mon_st_callback_display(stonith_t * st, stonith_event_t * e);
	static void refresh_after_event(gboolean data_updated, gboolean enforce);

	static uint32_t
	all_includes(mon_output_format_t fmt) {
	if (fmt == mon_output_monitor \|\| fmt == mon_output_plain \|\| fmt == mon_output_console) {
	return ~pcmk_section_options;
	} else {
	return pcmk_section_all;
	}
	}

	static uint32_t
	default_includes(mon_output_format_t fmt) {
	switch (fmt) {
	case mon_output_monitor:
	case mon_output_plain:
	case mon_output_console:
	return pcmk_section_summary \| pcmk_section_nodes \| pcmk_section_resources \|
	pcmk_section_failures;

	case mon_output_xml:
	case mon_output_legacy_xml:
	return all_includes(fmt);

	case mon_output_html:
	case mon_output_cgi:
	return pcmk_section_summary \| pcmk_section_nodes \| pcmk_section_resources \|
	pcmk_section_failures;

	default:
	return 0;
	}
	}

	struct {
	const char *name;
	uint32_t bit;
	} sections[] = {
	{ "attributes", pcmk_section_attributes },
	{ "bans", pcmk_section_bans },
	{ "counts", pcmk_section_counts },
	{ "dc", pcmk_section_dc },
	{ "failcounts", pcmk_section_failcounts },
	{ "failures", pcmk_section_failures },
	- { "fencing", pcmk_section_fencing_all },
	+ { PCMK__VALUE_FENCING, pcmk_section_fencing_all },
	{ "fencing-failed", pcmk_section_fence_failed },
	{ "fencing-pending", pcmk_section_fence_pending },
	{ "fencing-succeeded", pcmk_section_fence_worked },
	{ "maint-mode", pcmk_section_maint_mode },
	{ "nodes", pcmk_section_nodes },
	{ "operations", pcmk_section_operations },
	{ "options", pcmk_section_options },
	{ "resources", pcmk_section_resources },
	{ "stack", pcmk_section_stack },
	{ "summary", pcmk_section_summary },
	{ "tickets", pcmk_section_tickets },
	{ "times", pcmk_section_times },
	{ NULL }
	};

	static uint32_t
	find_section_bit(const char *name) {
	for (int i = 0; sections[i].name != NULL; i++) {
	if (pcmk__str_eq(sections[i].name, name, pcmk__str_casei)) {
	return sections[i].bit;
	}
	}

	return 0;
	}

	static gboolean
	apply_exclude(const gchar excludes, GError *error) {
	char **parts = NULL;
	gboolean result = TRUE;

	parts = g_strsplit(excludes, ",", 0);
	for (char *s = parts; s != NULL; s++) {
	uint32_t bit = find_section_bit(*s);

	if (pcmk__str_eq(*s, "all", pcmk__str_none)) {
	show = 0;
	} else if (pcmk__str_eq(*s, PCMK__VALUE_NONE, pcmk__str_none)) {
	show = all_includes(output_format);
	} else if (bit != 0) {
	show &= ~bit;
	} else {
	g_set_error(error, PCMK__EXITC_ERROR, CRM_EX_USAGE,
	"--exclude options: all, attributes, bans, counts, dc, "
	"failcounts, failures, fencing, fencing-failed, "
	"fencing-pending, fencing-succeeded, maint-mode, nodes, "
	PCMK__VALUE_NONE ", operations, options, resources, "
	"stack, summary, tickets, times");
	result = FALSE;
	break;
	}
	}
	g_strfreev(parts);
	return result;
	}

	static gboolean
	apply_include(const gchar includes, GError *error) {
	char **parts = NULL;
	gboolean result = TRUE;

	parts = g_strsplit(includes, ",", 0);
	for (char *s = parts; s != NULL; s++) {
	uint32_t bit = find_section_bit(*s);

	if (pcmk__str_eq(*s, "all", pcmk__str_none)) {
	show = all_includes(output_format);
	} else if (pcmk__starts_with(*s, "bans")) {
	show \|= pcmk_section_bans;
	if (options.neg_location_prefix != NULL) {
	free(options.neg_location_prefix);
	options.neg_location_prefix = NULL;
	}

	if (strlen(s) > 4 && (s)[4] == ':') {
	options.neg_location_prefix = strdup(*s+5);
	}
	} else if (pcmk__str_any_of(*s, "default", "defaults", NULL)) {
	show \|= default_includes(output_format);
	} else if (pcmk__str_eq(*s, PCMK__VALUE_NONE, pcmk__str_none)) {
	show = 0;
	} else if (bit != 0) {
	show \|= bit;
	} else {
	g_set_error(error, PCMK__EXITC_ERROR, CRM_EX_USAGE,
	"--include options: all, attributes, bans[:PREFIX], counts, dc, "
	"default, failcounts, failures, fencing, fencing-failed, "
	"fencing-pending, fencing-succeeded, maint-mode, nodes, "
	PCMK__VALUE_NONE ", operations, options, resources, "
	"stack, summary, tickets, times");
	result = FALSE;
	break;
	}
	}
	g_strfreev(parts);
	return result;
	}

	static gboolean
	apply_include_exclude(GSList lst, GError *error) {
	gboolean rc = TRUE;
	GSList *node = lst;

	while (node != NULL) {
	char *s = node->data;

	if (pcmk__starts_with(s, "--include=")) {
	rc = apply_include(s+10, error);
	} else if (pcmk__starts_with(s, "-I=")) {
	rc = apply_include(s+3, error);
	} else if (pcmk__starts_with(s, "--exclude=")) {
	rc = apply_exclude(s+10, error);
	} else if (pcmk__starts_with(s, "-U=")) {
	rc = apply_exclude(s+3, error);
	}

	if (rc != TRUE) {
	break;
	}

	node = node->next;
	}

	return rc;
	}

	static gboolean
	user_include_exclude_cb(const gchar option_name, const gchar optarg, gpointer data, GError **err) {
	char *s = crm_strdup_printf("%s=%s", option_name, optarg);

	options.user_includes_excludes = g_slist_append(options.user_includes_excludes, s);
	return TRUE;
	}

	static gboolean
	include_exclude_cb(const gchar option_name, const gchar optarg, gpointer data, GError **err) {
	char *s = crm_strdup_printf("%s=%s", option_name, optarg);

	options.includes_excludes = g_slist_append(options.includes_excludes, s);
	return TRUE;
	}

	static gboolean
	as_cgi_cb(const gchar option_name, const gchar optarg, gpointer data, GError **err) {
	pcmk__str_update(&args->output_ty, "html");
	output_format = mon_output_cgi;
	options.one_shot = TRUE;
	return TRUE;
	}

	static gboolean
	as_html_cb(const gchar option_name, const gchar optarg, gpointer data, GError **err) {
	pcmk__str_update(&args->output_dest, optarg);
	pcmk__str_update(&args->output_ty, "html");
	output_format = mon_output_html;
	umask(S_IWGRP \| S_IWOTH);
	return TRUE;
	}

	static gboolean
	as_simple_cb(const gchar option_name, const gchar optarg, gpointer data, GError **err) {
	pcmk__str_update(&args->output_ty, "text");
	output_format = mon_output_monitor;
	options.one_shot = TRUE;
	return TRUE;
	}

	static gboolean
	as_xml_cb(const gchar option_name, const gchar optarg, gpointer data, GError **err) {
	pcmk__str_update(&args->output_ty, "xml");
	output_format = mon_output_legacy_xml;
	return TRUE;
	}

	static gboolean
	fence_history_cb(const gchar option_name, const gchar optarg, gpointer data, GError **err) {
	if (optarg == NULL) {
	interactive_fence_level = 2;
	} else {
	pcmk__scan_min_int(optarg, &interactive_fence_level, 0);
	}

	switch (interactive_fence_level) {
	case 3:
	options.fence_connect = TRUE;
	fence_history = pcmk__fence_history_full;
	- return include_exclude_cb("--include", "fencing", data, err);
	+ return include_exclude_cb("--include", PCMK__VALUE_FENCING, data,
	+ err);

	case 2:
	options.fence_connect = TRUE;
	fence_history = pcmk__fence_history_full;
	- return include_exclude_cb("--include", "fencing", data, err);
	+ return include_exclude_cb("--include", PCMK__VALUE_FENCING, data,
	+ err);

	case 1:
	options.fence_connect = TRUE;
	fence_history = pcmk__fence_history_full;
	return include_exclude_cb("--include", "fencing-failed,fencing-pending", data, err);

	case 0:
	options.fence_connect = FALSE;
	fence_history = pcmk__fence_history_none;
	- return include_exclude_cb("--exclude", "fencing", data, err);
	+ return include_exclude_cb("--exclude", PCMK__VALUE_FENCING, data,
	+ err);

	default:
	g_set_error(err, PCMK__EXITC_ERROR, CRM_EX_INVALID_PARAM, "Fence history must be 0-3");
	return FALSE;
	}
	}

	static gboolean
	group_by_node_cb(const gchar option_name, const gchar optarg, gpointer data, GError **err) {
	show_opts \|= pcmk_show_rscs_by_node;
	return TRUE;
	}

	static gboolean
	hide_headers_cb(const gchar option_name, const gchar optarg, gpointer data, GError **err) {
	return user_include_exclude_cb("--exclude", "summary", data, err);
	}

	static gboolean
	inactive_resources_cb(const gchar option_name, const gchar optarg, gpointer data, GError **err) {
	show_opts \|= pcmk_show_inactive_rscs;
	return TRUE;
	}

	static gboolean
	no_curses_cb(const gchar option_name, const gchar optarg, gpointer data, GError **err) {
	output_format = mon_output_plain;
	return TRUE;
	}

	static gboolean
	print_brief_cb(const gchar option_name, const gchar optarg, gpointer data, GError **err) {
	show_opts \|= pcmk_show_brief;
	return TRUE;
	}

	static gboolean
	print_detail_cb(const gchar option_name, const gchar optarg, gpointer data, GError **err) {
	show_opts \|= pcmk_show_details;
	return TRUE;
	}

	static gboolean
	print_timing_cb(const gchar option_name, const gchar optarg, gpointer data, GError **err) {
	show_opts \|= pcmk_show_timing;
	return user_include_exclude_cb("--include", "operations", data, err);
	}

	static gboolean
	reconnect_cb(const gchar option_name, const gchar optarg, gpointer data, GError **err) {
	int rc = crm_get_msec(optarg);

	if (rc == -1) {
	g_set_error(err, PCMK__EXITC_ERROR, CRM_EX_INVALID_PARAM, "Invalid value for -i: %s", optarg);
	return FALSE;
	} else {
	options.reconnect_ms = crm_parse_interval_spec(optarg);
	}

	return TRUE;
	}

	static gboolean
	show_attributes_cb(const gchar option_name, const gchar optarg, gpointer data, GError **err) {
	return user_include_exclude_cb("--include", "attributes", data, err);
	}

	static gboolean
	show_bans_cb(const gchar option_name, const gchar optarg, gpointer data, GError **err) {
	if (optarg != NULL) {
	char *s = crm_strdup_printf("bans:%s", optarg);
	gboolean rc = user_include_exclude_cb("--include", s, data, err);
	free(s);
	return rc;
	} else {
	return user_include_exclude_cb("--include", "bans", data, err);
	}
	}

	static gboolean
	show_failcounts_cb(const gchar option_name, const gchar optarg, gpointer data, GError **err) {
	return user_include_exclude_cb("--include", "failcounts", data, err);
	}

	static gboolean
	show_operations_cb(const gchar option_name, const gchar optarg, gpointer data, GError **err) {
	return user_include_exclude_cb("--include", "failcounts,operations", data, err);
	}

	static gboolean
	show_tickets_cb(const gchar option_name, const gchar optarg, gpointer data, GError **err) {
	return user_include_exclude_cb("--include", "tickets", data, err);
	}

	static gboolean
	use_cib_file_cb(const gchar option_name, const gchar optarg, gpointer data, GError **err) {
	setenv("CIB_file", optarg, 1);
	options.one_shot = TRUE;
	return TRUE;
	}

	#define INDENT " "

	/* INDENT-OFF */
	static GOptionEntry addl_entries[] = {
	{ "interval", 'i', 0, G_OPTION_ARG_CALLBACK, reconnect_cb,
	"Update frequency (default is 5 seconds)",
	"TIMESPEC" },

	{ "one-shot", '1', 0, G_OPTION_ARG_NONE, &options.one_shot,
	"Display the cluster status once on the console and exit",
	NULL },

	{ "daemonize", 'd', 0, G_OPTION_ARG_NONE, &options.daemonize,
	"Run in the background as a daemon.\n"
	INDENT "Requires at least one of --output-to and --external-agent.",
	NULL },

	{ "pid-file", 'p', 0, G_OPTION_ARG_FILENAME, &options.pid_file,
	"(Advanced) Daemon pid file location",
	"FILE" },

	{ "external-agent", 'E', 0, G_OPTION_ARG_FILENAME, &options.external_agent,
	"A program to run when resource operations take place",
	"FILE" },

	{ "external-recipient", 'e', 0, G_OPTION_ARG_STRING, &options.external_recipient,
	"A recipient for your program (assuming you want the program to send something to someone).",
	"RCPT" },

	{ "watch-fencing", 'W', 0, G_OPTION_ARG_NONE, &options.watch_fencing,
	"Listen for fencing events. For use with --external-agent.",
	NULL },

	{ "xml-file", 'x', G_OPTION_FLAG_HIDDEN, G_OPTION_ARG_CALLBACK, use_cib_file_cb,
	NULL,
	NULL },

	{ NULL }
	};

	static GOptionEntry display_entries[] = {
	{ "include", 'I', 0, G_OPTION_ARG_CALLBACK, user_include_exclude_cb,
	"A list of sections to include in the output.\n"
	INDENT "See `Output Control` help for more information.",
	"SECTION(s)" },

	{ "exclude", 'U', 0, G_OPTION_ARG_CALLBACK, user_include_exclude_cb,
	"A list of sections to exclude from the output.\n"
	INDENT "See `Output Control` help for more information.",
	"SECTION(s)" },

	{ "node", 0, 0, G_OPTION_ARG_STRING, &options.only_node,
	"When displaying information about nodes, show only what's related to the given\n"
	INDENT "node, or to all nodes tagged with the given tag",
	"NODE" },

	{ "resource", 0, 0, G_OPTION_ARG_STRING, &options.only_rsc,
	"When displaying information about resources, show only what's related to the given\n"
	INDENT "resource, or to all resources tagged with the given tag",
	"RSC" },

	{ "group-by-node", 'n', G_OPTION_FLAG_NO_ARG, G_OPTION_ARG_CALLBACK, group_by_node_cb,
	"Group resources by node",
	NULL },

	{ "inactive", 'r', G_OPTION_FLAG_NO_ARG, G_OPTION_ARG_CALLBACK, inactive_resources_cb,
	"Display inactive resources",
	NULL },

	{ "failcounts", 'f', G_OPTION_FLAG_NO_ARG, G_OPTION_ARG_CALLBACK, show_failcounts_cb,
	"Display resource fail counts",
	NULL },

	{ "operations", 'o', G_OPTION_FLAG_NO_ARG, G_OPTION_ARG_CALLBACK, show_operations_cb,
	"Display resource operation history",
	NULL },

	{ "timing-details", 't', G_OPTION_FLAG_NO_ARG, G_OPTION_ARG_CALLBACK, print_timing_cb,
	"Display resource operation history with timing details",
	NULL },

	{ "tickets", 'c', G_OPTION_FLAG_NO_ARG, G_OPTION_ARG_CALLBACK, show_tickets_cb,
	"Display cluster tickets",
	NULL },

	{ "fence-history", 'm', G_OPTION_FLAG_OPTIONAL_ARG, G_OPTION_ARG_CALLBACK, fence_history_cb,
	"Show fence history:\n"
	INDENT "0=off, 1=failures and pending (default without option),\n"
	INDENT "2=add successes (default without value for option),\n"
	INDENT "3=show full history without reduction to most recent of each flavor",
	"LEVEL" },

	{ "neg-locations", 'L', G_OPTION_FLAG_OPTIONAL_ARG, G_OPTION_ARG_CALLBACK, show_bans_cb,
	"Display negative location constraints [optionally filtered by id prefix]",
	NULL },

	{ "show-node-attributes", 'A', G_OPTION_FLAG_NO_ARG, G_OPTION_ARG_CALLBACK, show_attributes_cb,
	"Display node attributes",
	NULL },

	{ "hide-headers", 'D', G_OPTION_FLAG_NO_ARG, G_OPTION_ARG_CALLBACK, hide_headers_cb,
	"Hide all headers",
	NULL },

	{ "show-detail", 'R', G_OPTION_FLAG_NO_ARG, G_OPTION_ARG_CALLBACK, print_detail_cb,
	"Show more details (node IDs, individual clone instances)",
	NULL },

	{ "brief", 'b', G_OPTION_FLAG_NO_ARG, G_OPTION_ARG_CALLBACK, print_brief_cb,
	"Brief output",
	NULL },

	{ "pending", 'j', G_OPTION_FLAG_HIDDEN, G_OPTION_ARG_NONE, &options.print_pending,
	"Display pending state if 'record-pending' is enabled",
	NULL },

	{ "simple-status", 's', G_OPTION_FLAG_NO_ARG, G_OPTION_ARG_CALLBACK, as_simple_cb,
	"Display the cluster status once as a simple one line output (suitable for nagios)",
	NULL },

	{ NULL }
	};

	static GOptionEntry deprecated_entries[] = {
	{ "as-html", 'h', G_OPTION_FLAG_FILENAME, G_OPTION_ARG_CALLBACK, as_html_cb,
	"Write cluster status to the named HTML file.\n"
	INDENT "Use --output-as=html --output-to=FILE instead.",
	"FILE" },

	{ "as-xml", 'X', G_OPTION_FLAG_NO_ARG, G_OPTION_ARG_CALLBACK, as_xml_cb,
	"Write cluster status as XML to stdout. This will enable one-shot mode.\n"
	INDENT "Use --output-as=xml instead.",
	NULL },

	{ "disable-ncurses", 'N', G_OPTION_FLAG_NO_ARG, G_OPTION_ARG_CALLBACK, no_curses_cb,
	"Disable the use of ncurses.\n"
	INDENT "Use --output-as=text instead.",
	NULL },

	{ "web-cgi", 'w', G_OPTION_FLAG_NO_ARG, G_OPTION_ARG_CALLBACK, as_cgi_cb,
	"Web mode with output suitable for CGI (preselected when run as *.cgi).\n"
	INDENT "Use --output-as=html --html-cgi instead.",
	NULL },

	{ NULL }
	};
	/* INDENT-ON */

	/* Reconnect to the CIB and fencing agent after reconnect_ms has passed. This sounds
	* like it would be more broadly useful, but only ever happens after a disconnect via
	* mon_cib_connection_destroy.
	*/
	static gboolean
	reconnect_after_timeout(gpointer data)
	{
	#if CURSES_ENABLED
	if (output_format == mon_output_console) {
	clear();
	refresh();
	}
	#endif

	out->info(out, "Reconnecting...");
	if (pacemakerd_status() == pcmk_rc_ok) {
	fencing_connect();
	if (cib_connect() == pcmk_rc_ok) {
	/* trigger redrawing the screen (needs reconnect_timer == 0) */
	reconnect_timer = 0;
	refresh_after_event(FALSE, TRUE);
	return G_SOURCE_REMOVE;
	}
	}

	reconnect_timer = g_timeout_add(options.reconnect_ms,
	reconnect_after_timeout, NULL);
	return G_SOURCE_REMOVE;
	}

	/* Called from various places when we are disconnected from the CIB or from the
	* fencing agent. If the CIB connection is still valid, this function will also
	* attempt to sign off and reconnect.
	*/
	static void
	mon_cib_connection_destroy(gpointer user_data)
	{
	out->info(out, "Connection to the cluster-daemons terminated");

	if (refresh_timer != NULL) {
	/* we'll trigger a refresh after reconnect */
	mainloop_timer_stop(refresh_timer);
	}
	if (reconnect_timer) {
	/* we'll trigger a new reconnect-timeout at the end */
	g_source_remove(reconnect_timer);
	reconnect_timer = 0;
	}
	if (st) {
	/* the client API won't properly reconnect notifications
	* if they are still in the table - so remove them
	*/
	clean_up_fencing_connection();
	}
	if (cib) {
	cib->cmds->signoff(cib);
	reconnect_timer = g_timeout_add(options.reconnect_ms,
	reconnect_after_timeout, NULL);
	}
	return;
	}

	/* Signal handler installed into the mainloop for normal program shutdown */
	static void
	mon_shutdown(int nsig)
	{
	clean_up(CRM_EX_OK);
	}

	#if CURSES_ENABLED
	static volatile sighandler_t ncurses_winch_handler;

	/* Signal handler installed the regular way (not into the main loop) for when
	* the screen is resized. Commonly, this happens when running in an xterm and
	* the user changes its size.
	*/
	static void
	mon_winresize(int nsig)
	{
	static int not_done;
	int lines = 0, cols = 0;

	if (!not_done++) {
	if (ncurses_winch_handler)
	/* the original ncurses WINCH signal handler does the
	* magic of retrieving the new window size;
	* otherwise, we'd have to use ioctl or tgetent */
	(*ncurses_winch_handler) (SIGWINCH);
	getmaxyx(stdscr, lines, cols);
	resizeterm(lines, cols);
	/* Alert the mainloop code we'd like the refresh_trigger to run next
	* time the mainloop gets around to checking.
	*/
	mainloop_set_trigger((crm_trigger_t *) refresh_trigger);
	}
	not_done--;
	}
	#endif

	static int
	fencing_connect(void)
	{
	int rc = pcmk_ok;

	if (options.fence_connect && st == NULL) {
	st = stonith_api_new();
	}

	if (!options.fence_connect \|\| st == NULL \|\| st->state != stonith_disconnected) {
	return rc;
	}

	rc = st->cmds->connect(st, crm_system_name, NULL);
	if (rc == pcmk_ok) {
	crm_trace("Setting up stonith callbacks");
	if (options.watch_fencing) {
	st->cmds->register_notification(st, T_STONITH_NOTIFY_DISCONNECT,
	mon_st_callback_event);
	st->cmds->register_notification(st, T_STONITH_NOTIFY_FENCE, mon_st_callback_event);
	} else {
	st->cmds->register_notification(st, T_STONITH_NOTIFY_DISCONNECT,
	mon_st_callback_display);
	st->cmds->register_notification(st, T_STONITH_NOTIFY_HISTORY, mon_st_callback_display);
	}
	} else {
	clean_up_fencing_connection();
	}

	return rc;
	}

	static int
	cib_connect(void)
	{
	int rc = pcmk_rc_ok;

	CRM_CHECK(cib != NULL, return EINVAL);

	if (cib->state == cib_connected_query \|\|
	cib->state == cib_connected_command) {
	return rc;
	}

	crm_trace("Connecting to the CIB");

	rc = pcmk_legacy2rc(cib->cmds->signon(cib, crm_system_name, cib_query));
	if (rc != pcmk_rc_ok) {
	out->err(out, "Could not connect to the CIB: %s",
	pcmk_rc_str(rc));
	return rc;
	}

	/* just show this if refresh is gonna remove all traces */
	if (output_format == mon_output_console) {
	out->info(out,"Waiting for CIB ...");
	}

	rc = pcmk_legacy2rc(cib->cmds->query(cib, NULL, &current_cib,
	cib_scope_local \| cib_sync_call));

	if (rc == pcmk_rc_ok) {
	rc = pcmk_legacy2rc(cib->cmds->set_connection_dnotify(cib,
	mon_cib_connection_destroy));
	if (rc == EPROTONOSUPPORT) {
	out->err(out,
	"Notification setup not supported, won't be "
	"able to reconnect after failure");
	if (output_format == mon_output_console) {
	sleep(2);
	}
	rc = pcmk_rc_ok;
	}

	if (rc == pcmk_rc_ok) {
	cib->cmds->del_notify_callback(cib, T_CIB_DIFF_NOTIFY,
	crm_diff_update);
	rc = pcmk_legacy2rc(cib->cmds->add_notify_callback(cib,
	T_CIB_DIFF_NOTIFY, crm_diff_update));
	}

	if (rc != pcmk_rc_ok) {
	out->err(out, "Notification setup failed, could not monitor CIB actions");
	cib__clean_up_connection(&cib);
	clean_up_fencing_connection();
	}
	}
	return rc;
	}

	/* This is used to set up the fencing options after the interactive UI has been stared.
	* fence_history_cb can't be used because it builds up a list of includes/excludes that
	* then have to be processed with apply_include_exclude and that could affect other
	* things.
	*/
	static void
	set_fencing_options(int level)
	{
	switch (level) {
	case 3:
	options.fence_connect = TRUE;
	fence_history = pcmk__fence_history_full;
	show \|= pcmk_section_fencing_all;
	break;

	case 2:
	options.fence_connect = TRUE;
	fence_history = pcmk__fence_history_full;
	show \|= pcmk_section_fencing_all;
	break;

	case 1:
	options.fence_connect = TRUE;
	fence_history = pcmk__fence_history_full;
	show \|= pcmk_section_fence_failed \| pcmk_section_fence_pending;
	break;

	default:
	interactive_fence_level = 0;
	options.fence_connect = FALSE;
	fence_history = pcmk__fence_history_none;
	show &= ~pcmk_section_fencing_all;
	break;
	}
	}

	/* Before trying to connect to fencer or cib check for state of
	pacemakerd - just no sense in trying till pacemakerd has
	taken care of starting all the sub-processes

	Only noteworthy thing to show here is when pacemakerd is
	waiting for startup-trigger from SBD.
	*/
	static void
	pacemakerd_event_cb(pcmk_ipc_api_t *pacemakerd_api,
	enum pcmk_ipc_event event_type, crm_exit_t status,
	void event_data, void user_data)
	{
	pcmk_pacemakerd_api_reply_t *reply = event_data;
	enum pcmk_pacemakerd_state *state =
	(enum pcmk_pacemakerd_state *) user_data;

	/* we are just interested in the latest reply */
	*state = pcmk_pacemakerd_state_invalid;

	switch (event_type) {
	case pcmk_ipc_event_reply:
	break;

	default:
	return;
	}

	if (status != CRM_EX_OK) {
	out->err(out, "Bad reply from pacemakerd: %s",
	crm_exit_str(status));
	return;
	}

	if (reply->reply_type != pcmk_pacemakerd_reply_ping) {
	out->err(out, "Unknown reply type %d from pacemakerd",
	reply->reply_type);
	} else {
	if ((reply->data.ping.last_good != (time_t) 0) &&
	(reply->data.ping.status == pcmk_rc_ok)) {
	*state = reply->data.ping.state;
	}
	}
	}

	static int
	pacemakerd_status(void)
	{
	int rc = pcmk_rc_ok;
	pcmk_ipc_api_t *pacemakerd_api = NULL;
	enum pcmk_pacemakerd_state state = pcmk_pacemakerd_state_invalid;

	if (!use_cib_native) {
	/* we don't need fully functional pacemakerd otherwise */
	return rc;
	}
	if (cib != NULL &&
	(cib->state == cib_connected_query \|\|
	cib->state == cib_connected_command)) {
	/* As long as we have a cib-connection let's go with
	* that to fetch further cluster-status and avoid
	* unnecessary pings to pacemakerd.
	* If cluster is going down and fencer is down already
	* this will lead to a silently failing fencer reconnect.
	* On cluster startup we shouldn't see this situation
	* as first we do is wait for pacemakerd to report all
	* daemons running.
	*/
	return rc;
	}
	rc = pcmk_new_ipc_api(&pacemakerd_api, pcmk_ipc_pacemakerd);
	if (pacemakerd_api == NULL) {
	out->err(out, "Could not connect to pacemakerd: %s",
	pcmk_rc_str(rc));
	/* this is unrecoverable so return with rc we have */
	return rc;
	}
	pcmk_register_ipc_callback(pacemakerd_api, pacemakerd_event_cb, (void *) &state);
	rc = pcmk_connect_ipc(pacemakerd_api, pcmk_ipc_dispatch_poll);
	switch (rc) {
	case pcmk_rc_ok:
	rc = pcmk_pacemakerd_api_ping(pacemakerd_api, crm_system_name);
	if (rc == pcmk_rc_ok) {
	rc = pcmk_poll_ipc(pacemakerd_api, options.reconnect_ms/2);
	if (rc == pcmk_rc_ok) {
	pcmk_dispatch_ipc(pacemakerd_api);
	rc = ENOTCONN;
	if ((output_format == mon_output_console) \|\|
	(output_format == mon_output_plain)) {
	switch (state) {
	case pcmk_pacemakerd_state_running:
	rc = pcmk_rc_ok;
	break;
	case pcmk_pacemakerd_state_starting_daemons:
	out->info(out,"Pacemaker daemons starting ...");
	break;
	case pcmk_pacemakerd_state_wait_for_ping:
	out->info(out,"Waiting for startup-trigger from SBD ...");
	break;
	case pcmk_pacemakerd_state_shutting_down:
	out->info(out,"Pacemaker daemons shutting down ...");
	/* try our luck maybe CIB is still accessible */
	rc = pcmk_rc_ok;
	break;
	case pcmk_pacemakerd_state_shutdown_complete:
	/* assuming pacemakerd doesn't dispatch any pings after entering
	* that state unless it is waiting for SBD
	*/
	out->info(out,"Pacemaker daemons shut down - reporting to SBD ...");
	break;
	default:
	break;
	}
	} else {
	switch (state) {
	case pcmk_pacemakerd_state_running:
	rc = pcmk_rc_ok;
	break;
	case pcmk_pacemakerd_state_shutting_down:
	/* try our luck maybe CIB is still accessible */
	rc = pcmk_rc_ok;
	break;
	default:
	break;
	}
	}
	}
	}
	break;
	case EREMOTEIO:
	rc = pcmk_rc_ok;
	on_remote_node = TRUE;
	/* just show this if refresh is gonna remove all traces */
	if (output_format == mon_output_console) {
	out->info(out,
	"Running on remote-node waiting to be connected by cluster ...");
	}
	break;
	default:
	break;
	}
	pcmk_free_ipc_api(pacemakerd_api);
	/* returning with ENOTCONN triggers a retry */
	return (rc == pcmk_rc_ok)?rc:ENOTCONN;
	}

	#if CURSES_ENABLED
	static const char *
	get_option_desc(char c)
	{
	const char *desc = "No help available";

	for (GOptionEntry *entry = display_entries; entry != NULL; entry++) {
	if (entry->short_name == c) {
	desc = entry->description;
	break;
	}
	}
	return desc;
	}

	#define print_option_help(out, option, condition) \
	curses_formatted_printf(out, "%c %c: \t%s\n", ((condition)? '*': ' '), option, get_option_desc(option));

	/* This function is called from the main loop when there is something to be read
	* on stdin, like an interactive user's keystroke. All it does is read the keystroke,
	* set flags (or show the page showing which keystrokes are valid), and redraw the
	* screen. It does not do anything with connections to the CIB or fencing agent
	* agent what would happen in mon_refresh_display.
	*/
	static gboolean
	detect_user_input(GIOChannel *channel, GIOCondition condition, gpointer user_data)
	{
	int c;
	gboolean config_mode = FALSE;

	while (1) {

	/* Get user input */
	c = getchar();

	switch (c) {
	case 'm':
	interactive_fence_level++;
	if (interactive_fence_level > 3) {
	interactive_fence_level = 0;
	}

	set_fencing_options(interactive_fence_level);
	break;
	case 'c':
	show ^= pcmk_section_tickets;
	break;
	case 'f':
	show ^= pcmk_section_failcounts;
	break;
	case 'n':
	show_opts ^= pcmk_show_rscs_by_node;
	break;
	case 'o':
	show ^= pcmk_section_operations;
	if (!pcmk_is_set(show, pcmk_section_operations)) {
	show_opts &= ~pcmk_show_timing;
	}
	break;
	case 'r':
	show_opts ^= pcmk_show_inactive_rscs;
	break;
	case 'R':
	show_opts ^= pcmk_show_details;
	#ifdef PCMK__COMPAT_2_0
	// Keep failed action output the same as 2.0.x
	show_opts \|= pcmk_show_failed_detail;
	#endif
	break;
	case 't':
	show_opts ^= pcmk_show_timing;
	if (pcmk_is_set(show_opts, pcmk_show_timing)) {
	show \|= pcmk_section_operations;
	}
	break;
	case 'A':
	show ^= pcmk_section_attributes;
	break;
	case 'L':
	show ^= pcmk_section_bans;
	break;
	case 'D':
	/* If any header is shown, clear them all, otherwise set them all */
	if (pcmk_any_flags_set(show, pcmk_section_summary)) {
	show &= ~pcmk_section_summary;
	} else {
	show \|= pcmk_section_summary;
	}
	/* Regardless, we don't show options in console mode. */
	show &= ~pcmk_section_options;
	break;
	case 'b':
	show_opts ^= pcmk_show_brief;
	break;
	case 'j':
	show_opts ^= pcmk_show_pending;
	break;
	case '?':
	config_mode = TRUE;
	break;
	default:
	/* All other keys just redraw the screen. */
	goto refresh;
	}

	if (!config_mode)
	goto refresh;

	blank_screen();

	curses_formatted_printf(out, "%s", "Display option change mode\n");
	print_option_help(out, 'c', pcmk_is_set(show, pcmk_section_tickets));
	print_option_help(out, 'f', pcmk_is_set(show, pcmk_section_failcounts));
	print_option_help(out, 'n', pcmk_is_set(show_opts, pcmk_show_rscs_by_node));
	print_option_help(out, 'o', pcmk_is_set(show, pcmk_section_operations));
	print_option_help(out, 'r', pcmk_is_set(show_opts, pcmk_show_inactive_rscs));
	print_option_help(out, 't', pcmk_is_set(show_opts, pcmk_show_timing));
	print_option_help(out, 'A', pcmk_is_set(show, pcmk_section_attributes));
	print_option_help(out, 'L', pcmk_is_set(show, pcmk_section_bans));
	print_option_help(out, 'D', !pcmk_is_set(show, pcmk_section_summary));
	#ifdef PCMK__COMPAT_2_0
	print_option_help(out, 'R', pcmk_any_flags_set(show_opts, pcmk_show_details & ~pcmk_show_failed_detail));
	#else
	print_option_help(out, 'R', pcmk_any_flags_set(show_opts, pcmk_show_details));
	#endif
	print_option_help(out, 'b', pcmk_is_set(show_opts, pcmk_show_brief));
	print_option_help(out, 'j', pcmk_is_set(show_opts, pcmk_show_pending));
	curses_formatted_printf(out, "%d m: \t%s\n", interactive_fence_level, get_option_desc('m'));
	curses_formatted_printf(out, "%s", "\nToggle fields via field letter, type any other key to return\n");
	}

	refresh:
	refresh_after_event(FALSE, TRUE);

	return TRUE;
	}
	#endif

	// Basically crm_signal_handler(SIGCHLD, SIG_IGN) plus the SA_NOCLDWAIT flag
	static void
	avoid_zombies(void)
	{
	struct sigaction sa;

	memset(&sa, 0, sizeof(struct sigaction));
	if (sigemptyset(&sa.sa_mask) < 0) {
	crm_warn("Cannot avoid zombies: %s", pcmk_rc_str(errno));
	return;
	}
	sa.sa_handler = SIG_IGN;
	sa.sa_flags = SA_RESTART\|SA_NOCLDWAIT;
	if (sigaction(SIGCHLD, &sa, NULL) < 0) {
	crm_warn("Cannot avoid zombies: %s", pcmk_rc_str(errno));
	}
	}

	static GOptionContext *
	build_arg_context(pcmk__common_args_t args, GOptionGroup *group) {
	GOptionContext *context = NULL;

	GOptionEntry extra_prog_entries[] = {
	{ "quiet", 'Q', 0, G_OPTION_ARG_NONE, &(args->quiet),
	"Be less descriptive in output.",
	NULL },

	{ NULL }
	};

	const char *description = "Notes:\n\n"
	"If this program is called as crm_mon.cgi, --output-as=html --html-cgi will\n"
	"automatically be added to the command line arguments.\n\n"
	"Time Specification:\n\n"
	"The TIMESPEC in any command line option can be specified in many different\n"
	"formats. It can be just an integer number of seconds, a number plus units\n"
	"(ms/msec/us/usec/s/sec/m/min/h/hr), or an ISO 8601 period specification.\n\n"
	"Output Control:\n\n"
	"By default, a certain list of sections are written to the output destination.\n"
	"The default varies based on the output format - XML includes everything, while\n"
	"other output formats will display less. This list can be modified with the\n"
	"--include and --exclude command line options. Each option may be given multiple\n"
	"times on the command line, and each can give a comma-separated list of sections.\n"
	"The options are applied to the default set, from left to right as seen on the\n"
	"command line. For a list of valid sections, pass --include=list or --exclude=list.\n\n"
	"Interactive Use:\n\n"
	"When run interactively, crm_mon can be told to hide and display various sections\n"
	"of output. To see a help screen explaining the options, hit '?'. Any key stroke\n"
	"aside from those listed will cause the screen to refresh.\n\n"
	"Examples:\n\n"
	"Display the cluster status on the console with updates as they occur:\n\n"
	"\tcrm_mon\n\n"
	"Display the cluster status on the console just once then exit:\n\n"
	"\tcrm_mon -1\n\n"
	"Display your cluster status, group resources by node, and include inactive resources in the list:\n\n"
	"\tcrm_mon --group-by-node --inactive\n\n"
	"Start crm_mon as a background daemon and have it write the cluster status to an HTML file:\n\n"
	"\tcrm_mon --daemonize --output-as html --output-to /path/to/docroot/filename.html\n\n"
	"Start crm_mon and export the current cluster status as XML to stdout, then exit:\n\n"
	"\tcrm_mon --output-as xml\n\n";

	#if CURSES_ENABLED
	context = pcmk__build_arg_context(args, "console (default), html, text, xml", group, NULL);
	#else
	context = pcmk__build_arg_context(args, "text (default), html, xml", group, NULL);
	#endif
	pcmk__add_main_args(context, extra_prog_entries);
	g_option_context_set_description(context, description);

	pcmk__add_arg_group(context, "display", "Display Options:",
	"Show display options", display_entries);
	pcmk__add_arg_group(context, "additional", "Additional Options:",
	"Show additional options", addl_entries);
	pcmk__add_arg_group(context, "deprecated", "Deprecated Options:",
	"Show deprecated options", deprecated_entries);

	return context;
	}

	/* If certain format options were specified, we want to set some extra
	* options. We can just process these like they were given on the
	* command line.
	*/
	static void
	add_output_args(void) {
	GError *err = NULL;

	if (output_format == mon_output_plain) {
	if (!pcmk__force_args(context, &err, "%s --text-fancy", g_get_prgname())) {
	g_propagate_error(&error, err);
	clean_up(CRM_EX_USAGE);
	}
	} else if (output_format == mon_output_cgi) {
	if (!pcmk__force_args(context, &err, "%s --html-cgi", g_get_prgname())) {
	g_propagate_error(&error, err);
	clean_up(CRM_EX_USAGE);
	}
	} else if (output_format == mon_output_xml) {
	if (!pcmk__force_args(context, &err, "%s --xml-simple-list --xml-substitute", g_get_prgname())) {
	g_propagate_error(&error, err);
	clean_up(CRM_EX_USAGE);
	}
	} else if (output_format == mon_output_legacy_xml) {
	output_format = mon_output_xml;
	if (!pcmk__force_args(context, &err, "%s --xml-legacy --xml-substitute", g_get_prgname())) {
	g_propagate_error(&error, err);
	clean_up(CRM_EX_USAGE);
	}
	}
	}

	/* Which output format to use could come from two places: The --as-xml
	* style arguments we gave in deprecated_entries above, or the formatted output
	* arguments added by pcmk__register_formats. If the latter were used,
	* output_format will be mon_output_unset.
	*
	* Call the callbacks as if those older style arguments were provided so
	* the various things they do get done.
	*/
	static void
	reconcile_output_format(pcmk__common_args_t *args) {
	gboolean retval = TRUE;
	GError *err = NULL;

	if (output_format != mon_output_unset) {
	return;
	}

	if (pcmk__str_eq(args->output_ty, "html", pcmk__str_casei)) {
	char *dest = NULL;

	pcmk__str_update(&dest, args->output_dest);
	retval = as_html_cb("h", dest, NULL, &err);
	free(dest);
	} else if (pcmk__str_eq(args->output_ty, "text", pcmk__str_casei)) {
	retval = no_curses_cb("N", NULL, NULL, &err);
	} else if (pcmk__str_eq(args->output_ty, "xml", pcmk__str_casei)) {
	pcmk__str_update(&args->output_ty, "xml");
	output_format = mon_output_xml;
	} else if (options.one_shot) {
	pcmk__str_update(&args->output_ty, "text");
	output_format = mon_output_plain;
	} else if (!options.daemonize && args->output_dest != NULL) {
	options.one_shot = TRUE;
	pcmk__str_update(&args->output_ty, "text");
	output_format = mon_output_plain;
	} else {
	/* Neither old nor new arguments were given, so set the default. */
	pcmk__str_update(&args->output_ty, "console");
	output_format = mon_output_console;
	}

	if (!retval) {
	g_propagate_error(&error, err);
	clean_up(CRM_EX_USAGE);
	}
	}

	static void
	clean_up_on_connection_failure(int rc)
	{
	if (output_format == mon_output_monitor) {
	g_set_error(&error, PCMK__EXITC_ERROR, CRM_EX_ERROR, "CLUSTER CRIT: Connection to cluster failed: %s",
	pcmk_rc_str(rc));
	clean_up(MON_STATUS_CRIT);
	} else if (rc == ENOTCONN) {
	if (on_remote_node) {
	g_set_error(&error, PCMK__EXITC_ERROR, CRM_EX_ERROR, "Error: remote-node not connected to cluster");
	} else {
	g_set_error(&error, PCMK__EXITC_ERROR, CRM_EX_ERROR, "Error: cluster is not available on this node");
	}
	} else {
	g_set_error(&error, PCMK__EXITC_ERROR, CRM_EX_ERROR, "Connection to cluster failed: %s", pcmk_rc_str(rc));
	}

	clean_up(pcmk_rc2exitc(rc));
	}

	static void
	one_shot(void)
	{
	int rc = pcmk__status(out, cib, fence_history, show, show_opts,
	options.only_node, options.only_rsc,
	options.neg_location_prefix,
	output_format == mon_output_monitor);

	if (rc == pcmk_rc_ok) {
	clean_up(pcmk_rc2exitc(rc));
	} else {
	clean_up_on_connection_failure(rc);
	}
	}

	static void
	exit_on_invalid_cib(void)
	{
	if (cib != NULL) {
	return;
	}

	// Shouldn't really be possible
	g_set_error(&error, PCMK__EXITC_ERROR, CRM_EX_ERROR, "Invalid CIB source");
	clean_up(CRM_EX_ERROR);
	}

	int
	main(int argc, char **argv)
	{
	int rc = pcmk_rc_ok;
	GOptionGroup *output_group = NULL;

	args = pcmk__new_common_args(SUMMARY);
	context = build_arg_context(args, &output_group);
	pcmk__register_formats(output_group, formats);

	options.pid_file = strdup("/tmp/ClusterMon.pid");
	pcmk__cli_init_logging("crm_mon", 0);

	// Avoid needing to wait for subprocesses forked for -E/--external-agent
	avoid_zombies();

	if (pcmk__ends_with_ext(argv[0], ".cgi")) {
	output_format = mon_output_cgi;
	options.one_shot = TRUE;
	}

	processed_args = pcmk__cmdline_preproc(argv, "ehimpxEILU");

	fence_history_cb("--fence-history", "1", NULL, NULL);

	/* Set an HTML title regardless of what format we will eventually use. This can't
	* be done in add_output_args. That function is called after command line
	* arguments are processed in the next block, which means it'll override whatever
	* title the user provides. Doing this here means the user can give their own
	* title on the command line.
	*/
	if (!pcmk__force_args(context, &error, "%s --html-title \"Cluster Status\"",
	g_get_prgname())) {
	return clean_up(CRM_EX_USAGE);
	}

	if (!g_option_context_parse_strv(context, &processed_args, &error)) {
	return clean_up(CRM_EX_USAGE);
	}

	for (int i = 0; i < args->verbosity; i++) {
	crm_bump_log_level(argc, argv);
	}

	if (!args->version) {
	if (args->quiet) {
	include_exclude_cb("--exclude", "times", NULL, NULL);
	}

	if (options.watch_fencing) {
	fence_history_cb("--fence-history", "0", NULL, NULL);
	options.fence_connect = TRUE;
	}

	/* create the cib-object early to be able to do further
	* decisions based on the cib-source
	*/
	cib = cib_new();

	exit_on_invalid_cib();

	switch (cib->variant) {
	case cib_native:
	/* cib & fencing - everything available */
	use_cib_native = TRUE;
	break;

	case cib_file:
	/* Don't try to connect to fencing as we
	* either don't have a running cluster or
	* the fencing-information would possibly
	* not match the cib data from a file.
	* As we don't expect cib-updates coming
	* in enforce one-shot. */
	fence_history_cb("--fence-history", "0", NULL, NULL);
	options.one_shot = TRUE;
	break;

	case cib_remote:
	/* updates coming in but no fencing */
	fence_history_cb("--fence-history", "0", NULL, NULL);
	break;

	case cib_undefined:
	case cib_database:
	default:
	/* something is odd */
	exit_on_invalid_cib();
	break;
	}

	if (options.one_shot) {
	if (output_format == mon_output_console) {
	output_format = mon_output_plain;
	}

	} else if (options.daemonize) {
	if (pcmk__str_eq(args->output_dest, "-", pcmk__str_null_matches\|pcmk__str_casei) &&
	!options.external_agent) {
	g_set_error(&error, PCMK__EXITC_ERROR, CRM_EX_USAGE,
	"--daemonize requires at least one of --output-to and --external-agent");
	return clean_up(CRM_EX_USAGE);
	}

	} else if (output_format == mon_output_console) {
	#if CURSES_ENABLED
	crm_enable_stderr(FALSE);
	#else
	options.one_shot = TRUE;
	output_format = mon_output_plain;
	printf("Defaulting to one-shot mode\n");
	printf("You need to have curses available at compile time to enable console mode\n");
	#endif
	}
	}

	reconcile_output_format(args);
	add_output_args();

	/* output_format MUST NOT BE CHANGED AFTER THIS POINT. */

	if (args->version && output_format == mon_output_console) {
	/* Use the text output format here if we are in curses mode but were given
	* --version. Displaying version information uses printf, and then we
	* immediately exit. We don't want to initialize curses for that.
	*/
	rc = pcmk__output_new(&out, "text", args->output_dest, argv);
	} else {
	rc = pcmk__output_new(&out, args->output_ty, args->output_dest, argv);
	}

	if (rc != pcmk_rc_ok) {
	g_set_error(&error, PCMK__EXITC_ERROR, CRM_EX_ERROR, "Error creating output format %s: %s",
	args->output_ty, pcmk_rc_str(rc));
	return clean_up(CRM_EX_ERROR);
	}

	if (options.daemonize) {
	if (!options.external_agent && (output_format == mon_output_console \|\|
	output_format == mon_output_unset \|\|
	output_format == mon_output_none)) {
	g_set_error(&error, PCMK__EXITC_ERROR, CRM_EX_USAGE,
	"--daemonize requires --output-as=[html\|text\|xml]");
	return clean_up(CRM_EX_USAGE);
	}

	crm_enable_stderr(FALSE);

	cib_delete(cib);
	cib = NULL;
	pcmk__daemonize(crm_system_name, options.pid_file);
	cib = cib_new();
	exit_on_invalid_cib();
	}

	show = default_includes(output_format);

	/* Apply --include/--exclude flags we used internally. There's no error reporting
	* here because this would be a programming error.
	*/
	apply_include_exclude(options.includes_excludes, &error);

	/* And now apply any --include/--exclude flags the user gave on the command line.
	* These are done in a separate pass from the internal ones because we want to
	* make sure whatever the user specifies overrides whatever we do.
	*/
	if (!apply_include_exclude(options.user_includes_excludes, &error)) {
	return clean_up(CRM_EX_USAGE);
	}

	/* Sync up the initial value of interactive_fence_level with whatever was set with
	* --include/--exclude= options.
	*/
	if (pcmk_all_flags_set(show, pcmk_section_fencing_all)) {
	interactive_fence_level = 3;
	} else if (pcmk_is_set(show, pcmk_section_fence_worked)) {
	interactive_fence_level = 2;
	} else if (pcmk_any_flags_set(show, pcmk_section_fence_failed \| pcmk_section_fence_pending)) {
	interactive_fence_level = 1;
	} else {
	interactive_fence_level = 0;
	}

	pcmk__register_lib_messages(out);
	crm_mon_register_messages(out);
	pe__register_messages(out);
	stonith__register_messages(out);

	if (args->version) {
	out->version(out, false);
	return clean_up(CRM_EX_OK);
	}

	/* Extra sanity checks when in CGI mode */
	if (output_format == mon_output_cgi) {
	if (cib->variant == cib_file) {
	g_set_error(&error, PCMK__EXITC_ERROR, CRM_EX_USAGE, "CGI mode used with CIB file");
	return clean_up(CRM_EX_USAGE);
	} else if (options.external_agent != NULL) {
	g_set_error(&error, PCMK__EXITC_ERROR, CRM_EX_USAGE, "CGI mode cannot be used with --external-agent");
	return clean_up(CRM_EX_USAGE);
	} else if (options.daemonize == TRUE) {
	g_set_error(&error, PCMK__EXITC_ERROR, CRM_EX_USAGE, "CGI mode cannot be used with -d");
	return clean_up(CRM_EX_USAGE);
	}
	}

	if (output_format == mon_output_xml \|\| output_format == mon_output_legacy_xml) {
	show_opts \|= pcmk_show_inactive_rscs \| pcmk_show_timing;

	if (!options.daemonize) {
	options.one_shot = TRUE;
	}
	}

	if ((output_format == mon_output_html \|\| output_format == mon_output_cgi) &&
	out->dest != stdout) {
	pcmk__html_add_header("meta", "http-equiv", "refresh", "content",
	pcmk__itoa(options.reconnect_ms / 1000), NULL);
	}

	#ifdef PCMK__COMPAT_2_0
	// Keep failed action output the same as 2.0.x
	show_opts \|= pcmk_show_failed_detail;
	#endif

	crm_info("Starting %s", crm_system_name);

	cib__set_output(cib, out);

	if (options.one_shot) {
	one_shot();
	}

	do {
	out->info(out,"Waiting until cluster is available on this node ...");

	rc = pacemakerd_status();
	if (rc == pcmk_rc_ok) {
	fencing_connect();
	rc = cib_connect();
	}

	if (rc != pcmk_rc_ok) {
	pcmk__sleep_ms(options.reconnect_ms);
	#if CURSES_ENABLED
	if (output_format == mon_output_console) {
	clear();
	refresh();
	}
	#endif
	} else if (output_format == mon_output_html && out->dest != stdout) {
	printf("Writing html to %s ...\n", args->output_dest);
	}

	} while (rc == ENOTCONN);

	if (rc != pcmk_rc_ok) {
	clean_up_on_connection_failure(rc);
	}

	set_fencing_options(interactive_fence_level);
	mon_refresh_display(NULL);

	mainloop = g_main_loop_new(NULL, FALSE);

	mainloop_add_signal(SIGTERM, mon_shutdown);
	mainloop_add_signal(SIGINT, mon_shutdown);
	#if CURSES_ENABLED
	if (output_format == mon_output_console) {
	ncurses_winch_handler = crm_signal_handler(SIGWINCH, mon_winresize);
	if (ncurses_winch_handler == SIG_DFL \|\|
	ncurses_winch_handler == SIG_IGN \|\| ncurses_winch_handler == SIG_ERR)
	ncurses_winch_handler = NULL;

	io_channel = g_io_channel_unix_new(STDIN_FILENO);
	g_io_add_watch(io_channel, G_IO_IN, detect_user_input, NULL);
	}
	#endif

	/* When refresh_trigger->trigger is set to TRUE, call mon_refresh_display. In
	* this file, that is anywhere mainloop_set_trigger is called.
	*/
	refresh_trigger = mainloop_add_trigger(G_PRIORITY_LOW, mon_refresh_display, NULL);

	g_main_loop_run(mainloop);
	g_main_loop_unref(mainloop);

	if (io_channel != NULL) {
	g_io_channel_shutdown(io_channel, TRUE, NULL);
	}

	crm_info("Exiting %s", crm_system_name);

	return clean_up(CRM_EX_OK);
	}

	static int
	send_custom_trap(const char node, const char rsc, const char *task, int target_rc, int rc,
	int status, const char *desc)
	{
	pid_t pid;

	/setenv needs chars, these are ints /
	char *rc_s = pcmk__itoa(rc);
	char *status_s = pcmk__itoa(status);
	char *target_rc_s = pcmk__itoa(target_rc);

	crm_debug("Sending external notification to '%s' via '%s'", options.external_recipient, options.external_agent);

	if(rsc) {
	setenv("CRM_notify_rsc", rsc, 1);
	}
	if (options.external_recipient) {
	setenv("CRM_notify_recipient", options.external_recipient, 1);
	}
	setenv("CRM_notify_node", node, 1);
	setenv("CRM_notify_task", task, 1);
	setenv("CRM_notify_desc", desc, 1);
	setenv("CRM_notify_rc", rc_s, 1);
	setenv("CRM_notify_target_rc", target_rc_s, 1);
	setenv("CRM_notify_status", status_s, 1);

	pid = fork();
	if (pid == -1) {
	crm_perror(LOG_ERR, "notification fork() failed.");
	}
	if (pid == 0) {
	/* crm_debug("notification: I am the child. Executing the nofitication program."); */
	execl(options.external_agent, options.external_agent, NULL);
	exit(CRM_EX_ERROR);
	}

	crm_trace("Finished running custom notification program '%s'.", options.external_agent);
	free(target_rc_s);
	free(status_s);
	free(rc_s);
	return 0;
	}

	static void
	handle_rsc_op(xmlNode * xml, const char *node_id)
	{
	int rc = -1;
	int status = -1;
	int target_rc = -1;
	gboolean notify = TRUE;

	char *rsc = NULL;
	char *task = NULL;
	const char *desc = NULL;
	const char *magic = NULL;
	const char *id = NULL;
	const char *node = NULL;

	xmlNode *n = xml;
	xmlNode * rsc_op = xml;

	if(strcmp((const char*)xml->name, XML_LRM_TAG_RSC_OP) != 0) {
	xmlNode *cIter;

	for(cIter = xml->children; cIter; cIter = cIter->next) {
	handle_rsc_op(cIter, node_id);
	}

	return;
	}

	id = crm_element_value(rsc_op, XML_LRM_ATTR_TASK_KEY);
	if (id == NULL) {
	/* Compatibility with <= 1.1.5 */
	id = ID(rsc_op);
	}

	magic = crm_element_value(rsc_op, XML_ATTR_TRANSITION_MAGIC);
	if (magic == NULL) {
	/* non-change */
	return;
	}

	if (!decode_transition_magic(magic, NULL, NULL, NULL, &status, &rc,
	&target_rc)) {
	crm_err("Invalid event %s detected for %s", magic, id);
	return;
	}

	if (parse_op_key(id, &rsc, &task, NULL) == FALSE) {
	crm_err("Invalid event detected for %s", id);
	goto bail;
	}

	node = crm_element_value(rsc_op, XML_LRM_ATTR_TARGET);

	while (n != NULL && !pcmk__str_eq(XML_CIB_TAG_STATE, TYPE(n), pcmk__str_casei)) {
	n = n->parent;
	}

	if(node == NULL && n) {
	node = crm_element_value(n, XML_ATTR_UNAME);
	}

	if (node == NULL && n) {
	node = ID(n);
	}

	if (node == NULL) {
	node = node_id;
	}

	if (node == NULL) {
	crm_err("No node detected for event %s (%s)", magic, id);
	goto bail;
	}

	/* look up where we expected it to be? */
	desc = pcmk_rc_str(pcmk_rc_ok);
	if ((status == PCMK_EXEC_DONE) && (target_rc == rc)) {
	crm_notice("%s of %s on %s completed: %s", task, rsc, node, desc);
	if (rc == PCMK_OCF_NOT_RUNNING) {
	notify = FALSE;
	}

	} else if (status == PCMK_EXEC_DONE) {
	desc = services_ocf_exitcode_str(rc);
	crm_warn("%s of %s on %s failed: %s", task, rsc, node, desc);

	} else {
	desc = pcmk_exec_status_str(status);
	crm_warn("%s of %s on %s failed: %s", task, rsc, node, desc);
	}

	if (notify && options.external_agent) {
	send_custom_trap(node, rsc, task, target_rc, rc, status, desc);
	}
	bail:
	free(rsc);
	free(task);
	}

	/* This function is just a wrapper around mainloop_set_trigger so that it can be
	* called from a mainloop directly. It's simply another way of ensuring the screen
	* gets redrawn.
	*/
	static gboolean
	mon_trigger_refresh(gpointer user_data)
	{
	mainloop_set_trigger((crm_trigger_t *) refresh_trigger);
	return FALSE;
	}

	static void
	crm_diff_update_v2(const char event, xmlNode msg)
	{
	xmlNode *change = NULL;
	xmlNode *diff = get_message_xml(msg, F_CIB_UPDATE_RESULT);

	for (change = pcmk__xml_first_child(diff); change != NULL;
	change = pcmk__xml_next(change)) {
	const char *name = NULL;
	const char *op = crm_element_value(change, XML_DIFF_OP);
	const char *xpath = crm_element_value(change, XML_DIFF_PATH);
	xmlNode *match = NULL;
	const char *node = NULL;

	if(op == NULL) {
	continue;

	} else if(strcmp(op, "create") == 0) {
	match = change->children;

	} else if(strcmp(op, "move") == 0) {
	continue;

	} else if(strcmp(op, "delete") == 0) {
	continue;

	} else if(strcmp(op, "modify") == 0) {
	match = first_named_child(change, XML_DIFF_RESULT);
	if(match) {
	match = match->children;
	}
	}

	if(match) {
	name = (const char *)match->name;
	}

	crm_trace("Handling %s operation for %s %p, %s", op, xpath, match, name);
	if(xpath == NULL) {
	/* Version field, ignore */

	} else if(name == NULL) {
	crm_debug("No result for %s operation to %s", op, xpath);
	CRM_ASSERT(strcmp(op, "delete") == 0 \|\| strcmp(op, "move") == 0);

	} else if(strcmp(name, XML_TAG_CIB) == 0) {
	xmlNode *state = NULL;
	xmlNode *status = first_named_child(match, XML_CIB_TAG_STATUS);

	for (state = pcmk__xe_first_child(status); state != NULL;
	state = pcmk__xe_next(state)) {

	node = crm_element_value(state, XML_ATTR_UNAME);
	if (node == NULL) {
	node = ID(state);
	}
	handle_rsc_op(state, node);
	}

	} else if(strcmp(name, XML_CIB_TAG_STATUS) == 0) {
	xmlNode *state = NULL;

	for (state = pcmk__xe_first_child(match); state != NULL;
	state = pcmk__xe_next(state)) {

	node = crm_element_value(state, XML_ATTR_UNAME);
	if (node == NULL) {
	node = ID(state);
	}
	handle_rsc_op(state, node);
	}

	} else if(strcmp(name, XML_CIB_TAG_STATE) == 0) {
	node = crm_element_value(match, XML_ATTR_UNAME);
	if (node == NULL) {
	node = ID(match);
	}
	handle_rsc_op(match, node);

	} else if(strcmp(name, XML_CIB_TAG_LRM) == 0) {
	node = ID(match);
	handle_rsc_op(match, node);

	} else if(strcmp(name, XML_LRM_TAG_RESOURCES) == 0) {
	char *local_node = pcmk__xpath_node_id(xpath, "lrm");

	handle_rsc_op(match, local_node);
	free(local_node);

	} else if(strcmp(name, XML_LRM_TAG_RESOURCE) == 0) {
	char *local_node = pcmk__xpath_node_id(xpath, "lrm");

	handle_rsc_op(match, local_node);
	free(local_node);

	} else if(strcmp(name, XML_LRM_TAG_RSC_OP) == 0) {
	char *local_node = pcmk__xpath_node_id(xpath, "lrm");

	handle_rsc_op(match, local_node);
	free(local_node);

	} else {
	crm_trace("Ignoring %s operation for %s %p, %s", op, xpath, match, name);
	}
	}
	}

	static void
	crm_diff_update_v1(const char event, xmlNode msg)
	{
	/* Process operation updates */
	xmlXPathObject *xpathObj = xpath_search(msg,
	"//" F_CIB_UPDATE_RESULT "//" XML_TAG_DIFF_ADDED
	"//" XML_LRM_TAG_RSC_OP);
	int lpc = 0, max = numXpathResults(xpathObj);

	for (lpc = 0; lpc < max; lpc++) {
	xmlNode *rsc_op = getXpathResult(xpathObj, lpc);

	handle_rsc_op(rsc_op, NULL);
	}
	freeXpathObject(xpathObj);
	}

	static void
	crm_diff_update(const char event, xmlNode msg)
	{
	int rc = -1;
	static bool stale = FALSE;
	gboolean cib_updated = FALSE;
	xmlNode *diff = get_message_xml(msg, F_CIB_UPDATE_RESULT);

	out->progress(out, false);

	if (current_cib != NULL) {
	rc = xml_apply_patchset(current_cib, diff, TRUE);

	switch (rc) {
	case -pcmk_err_diff_resync:
	case -pcmk_err_diff_failed:
	crm_notice("[%s] Patch aborted: %s (%d)", event, pcmk_strerror(rc), rc);
	free_xml(current_cib); current_cib = NULL;
	break;
	case pcmk_ok:
	cib_updated = TRUE;
	break;
	default:
	crm_notice("[%s] ABORTED: %s (%d)", event, pcmk_strerror(rc), rc);
	free_xml(current_cib); current_cib = NULL;
	}
	}

	if (current_cib == NULL) {
	crm_trace("Re-requesting the full cib");
	cib->cmds->query(cib, NULL, &current_cib, cib_scope_local \| cib_sync_call);
	}

	if (options.external_agent) {
	int format = 0;
	crm_element_value_int(diff, "format", &format);
	switch(format) {
	case 1:
	crm_diff_update_v1(event, msg);
	break;
	case 2:
	crm_diff_update_v2(event, msg);
	break;
	default:
	crm_err("Unknown patch format: %d", format);
	}
	}

	if (current_cib == NULL) {
	if(!stale) {
	out->info(out, "--- Stale data ---");
	}
	stale = TRUE;
	return;
	}

	stale = FALSE;
	refresh_after_event(cib_updated, FALSE);
	}

	static int
	mon_refresh_display(gpointer user_data)
	{
	int rc = pcmk_rc_ok;

	last_refresh = time(NULL);

	if (output_format == mon_output_none \|\| output_format == mon_output_unset) {
	return G_SOURCE_REMOVE;
	}

	if (fence_history == pcmk__fence_history_full &&
	!pcmk_all_flags_set(show, pcmk_section_fencing_all) &&
	output_format != mon_output_xml) {
	fence_history = pcmk__fence_history_reduced;
	}

	if (out->dest != stdout) {
	out->reset(out);
	}

	rc = pcmk__output_cluster_status(out, st, cib, current_cib, fence_history,
	show, show_opts, options.only_node,
	options.only_rsc, options.neg_location_prefix,
	output_format == mon_output_monitor);

	if (output_format == mon_output_monitor && rc != pcmk_rc_ok) {
	clean_up(MON_STATUS_WARN);
	return G_SOURCE_REMOVE;
	} else if (rc == pcmk_rc_schema_validation) {
	clean_up(CRM_EX_CONFIG);
	return G_SOURCE_REMOVE;
	}

	if (out->dest != stdout) {
	out->finish(out, CRM_EX_OK, true, NULL);
	}

	return G_SOURCE_CONTINUE;
	}

	/* This function is called for fencing events (see fencing_connect for which ones) when
	* --watch-fencing is used on the command line.
	*/
	static void
	mon_st_callback_event(stonith_t * st, stonith_event_t * e)
	{
	if (st->state == stonith_disconnected) {
	/* disconnect cib as well and have everything reconnect */
	mon_cib_connection_destroy(NULL);
	} else if (options.external_agent) {
	char *desc = stonith__event_description(e);

	send_custom_trap(e->target, NULL, e->operation, pcmk_ok, e->result, 0, desc);
	free(desc);
	}
	}

	/* Cause the screen to be redrawn (via mainloop_set_trigger) when various conditions are met:
	*
	* - If the last update occurred more than reconnect_ms ago (defaults to 5s, but
	* can be changed via the -i command line option), or
	* - After every 10 CIB updates, or
	* - If it's been 2s since the last update
	*
	* This function sounds like it would be more broadly useful, but it is only called when a
	* fencing event is received or a CIB diff occurrs.
	*/
	static void
	refresh_after_event(gboolean data_updated, gboolean enforce)
	{
	static int updates = 0;
	time_t now = time(NULL);

	if (data_updated) {
	updates++;
	}

	if(refresh_timer == NULL) {
	refresh_timer = mainloop_timer_add("refresh", 2000, FALSE, mon_trigger_refresh, NULL);
	}

	if (reconnect_timer > 0) {
	/* we will receive a refresh request after successful reconnect */
	mainloop_timer_stop(refresh_timer);
	return;
	}

	/* as we're not handling initial failure of fencer-connection as
	* fatal give it a retry here
	* not getting here if cib-reconnection is already on the way
	*/
	fencing_connect();

	if (enforce \|\|
	((now - last_refresh) > (options.reconnect_ms / 1000)) \|\|
	updates >= 10) {
	mainloop_set_trigger((crm_trigger_t *) refresh_trigger);
	mainloop_timer_stop(refresh_timer);
	updates = 0;

	} else {
	mainloop_timer_start(refresh_timer);
	}
	}

	/* This function is called for fencing events (see fencing_connect for which ones) when
	* --watch-fencing is NOT used on the command line.
	*/
	static void
	mon_st_callback_display(stonith_t * st, stonith_event_t * e)
	{
	if (st->state == stonith_disconnected) {
	/* disconnect cib as well and have everything reconnect */
	mon_cib_connection_destroy(NULL);
	} else {
	out->progress(out, false);
	refresh_after_event(TRUE, FALSE);
	}
	}

	static void
	clean_up_fencing_connection(void)
	{
	if (st == NULL) {
	return;
	}

	if (st->state != stonith_disconnected) {
	st->cmds->remove_notification(st, NULL);
	st->cmds->disconnect(st);
	}

	stonith_api_delete(st);
	st = NULL;
	}

	/*
	* De-init ncurses, disconnect from the CIB manager, disconnect fencing,
	* deallocate memory and show usage-message if requested.
	*
	* We don't actually return, but nominally returning crm_exit_t allows a usage
	* like "return clean_up(exit_code);" which helps static analysis understand the
	* code flow.
	*/
	static crm_exit_t
	clean_up(crm_exit_t exit_code)
	{
	/* Quitting crm_mon is much more complicated than it ought to be. */

	/* (1) Close connections, free things, etc. */
	cib__clean_up_connection(&cib);
	clean_up_fencing_connection();
	free(options.neg_location_prefix);
	free(options.only_node);
	free(options.only_rsc);
	free(options.pid_file);
	g_slist_free_full(options.includes_excludes, free);

	g_strfreev(processed_args);

	/* (2) If this is abnormal termination and we're in curses mode, shut down
	* curses first. Any messages displayed to the screen before curses is shut
	* down will be lost because doing the shut down will also restore the
	* screen to whatever it looked like before crm_mon was started.
	*/
	if ((error != NULL \|\| exit_code == CRM_EX_USAGE) && output_format == mon_output_console) {
	out->finish(out, exit_code, false, NULL);
	pcmk__output_free(out);
	out = NULL;
	}

	/* (3) If this is a command line usage related failure, print the usage
	* message.
	*/
	if (exit_code == CRM_EX_USAGE && (output_format == mon_output_console \|\| output_format == mon_output_plain)) {
	char *help = g_option_context_get_help(context, TRUE, NULL);

	fprintf(stderr, "%s", help);
	g_free(help);
	}

	pcmk__free_arg_context(context);

	/* (4) If this is any kind of error, print the error out and exit. Make
	* sure to handle situations both before and after formatted output is
	* set up. We want errors to appear formatted if at all possible.
	*/
	if (error != NULL) {
	if (out != NULL) {
	out->err(out, "%s: %s", g_get_prgname(), error->message);
	out->finish(out, exit_code, true, NULL);
	pcmk__output_free(out);
	} else {
	fprintf(stderr, "%s: %s\n", g_get_prgname(), error->message);
	}

	g_clear_error(&error);
	crm_exit(exit_code);
	}

	/* (5) Print formatted output to the screen if we made it far enough in
	* crm_mon to be able to do so.
	*/
	if (out != NULL) {
	if (!options.daemonize) {
	out->finish(out, exit_code, true, NULL);
	}

	pcmk__output_free(out);
	pcmk__unregister_formats();
	}

	crm_exit(exit_code);
	}
	diff --git a/tools/crm_rule.c b/tools/crm_rule.c
	index 309e2bad86..1d117b88b5 100644
	--- a/tools/crm_rule.c
	+++ b/tools/crm_rule.c
	@@ -1,423 +1,423 @@
	/*
	* Copyright 2019-2022 the Pacemaker project contributors
	*
	* The version control history for this file may have further details.
	*
	* This source code is licensed under the GNU General Public License version 2
	* or later (GPLv2+) WITHOUT ANY WARRANTY.
	*/

	#include <crm_internal.h>

	#include <crm/cib.h>
	#include <crm/cib/internal.h>
	#include <crm/common/cmdline_internal.h>
	#include <crm/common/output_internal.h>
	#include <crm/common/iso8601.h>
	#include <crm/msg_xml.h>
	#include <crm/pengine/rules_internal.h>
	#include <crm/pengine/status.h>
	#include <pacemaker-internal.h>

	#include <sys/stat.h>

	#define SUMMARY "evaluate rules from the Pacemaker configuration"

	GError *error = NULL;

	static pcmk__supported_format_t formats[] = {
	PCMK__SUPPORTED_FORMAT_NONE,
	PCMK__SUPPORTED_FORMAT_TEXT,
	PCMK__SUPPORTED_FORMAT_XML,
	{ NULL, NULL, NULL }
	};

	enum crm_rule_mode {
	crm_rule_mode_none,
	crm_rule_mode_check
	};

	struct {
	char *date;
	char *input_xml;
	enum crm_rule_mode mode;
	gchar **rules;
	} options = {
	.mode = crm_rule_mode_none
	};

	static int crm_rule_check(pcmk__output_t out, pe_working_set_t data_set,
	const char rule_id, crm_time_t effective_date);

	static gboolean mode_cb(const gchar option_name, const gchar optarg, gpointer data, GError **error);

	static GOptionEntry mode_entries[] = {
	{ "check", 'c', G_OPTION_FLAG_NO_ARG, G_OPTION_ARG_CALLBACK, mode_cb,
	"Check whether a rule is in effect",
	NULL },

	{ NULL }
	};

	static GOptionEntry data_entries[] = {
	{ "xml-text", 'X', 0, G_OPTION_ARG_STRING, &options.input_xml,
	"Use argument for XML (or stdin if '-')",
	NULL },

	{ NULL }
	};

	static GOptionEntry addl_entries[] = {
	{ "date", 'd', 0, G_OPTION_ARG_STRING, &options.date,
	"Whether the rule is in effect on a given date",
	NULL },
	{ "rule", 'r', 0, G_OPTION_ARG_STRING_ARRAY, &options.rules,
	"The ID of the rule to check (may be specified multiple times)",
	NULL },

	{ NULL }
	};

	static gboolean
	mode_cb(const gchar option_name, const gchar optarg, gpointer data, GError **error) {
	if (strcmp(option_name, "c")) {
	options.mode = crm_rule_mode_check;
	}

	return TRUE;
	}

	/*!
	* \internal
	* \brief Evaluate a date expression for a specific time
	*
	* \param[in] time_expr date_expression XML
	* \param[in] now Time for which to evaluate expression
	* \param[out] next_change If not NULL, set to when evaluation will change
	*
	* \return Standard Pacemaker return code
	*/
	static int
	eval_date_expression(xmlNode expr, crm_time_t now, crm_time_t *next_change)
	{
	pe_rule_eval_data_t rule_data = {
	.node_hash = NULL,
	.role = RSC_ROLE_UNKNOWN,
	.now = now,
	.match_data = NULL,
	.rsc_data = NULL,
	.op_data = NULL
	};

	return pe__eval_date_expr(expr, &rule_data, next_change);
	}

	PCMK__OUTPUT_ARGS("rule-check", "const char *", "int")
	static int
	rule_check_default(pcmk__output_t *out, va_list args)
	{
	const char rule_id = va_arg(args, const char );
	int result = va_arg(args, int);

	if (result == pcmk_rc_within_range) {
	out->info(out, "Rule %s is still in effect", rule_id);
	} else if (result == pcmk_rc_ok) {
	out->info(out, "Rule %s satisfies conditions", rule_id);
	} else if (result == pcmk_rc_after_range) {
	out->info(out, "Rule %s is expired", rule_id);
	} else if (result == pcmk_rc_before_range) {
	out->info(out, "Rule %s has not yet taken effect", rule_id);
	} else if (result == pcmk_rc_op_unsatisfied) {
	out->info(out, "Rule %s does not satisfy conditions", rule_id);
	} else {
	out->info(out, "Could not determine whether rule %s is expired", rule_id);
	}

	return pcmk_rc_ok;
	}

	PCMK__OUTPUT_ARGS("rule-check", "const char *", "int")
	static int
	rule_check_xml(pcmk__output_t *out, va_list args)
	{
	const char rule_id = va_arg(args, const char );
	int result = va_arg(args, int);

	char *rc_str = pcmk__itoa(pcmk_rc2exitc(result));

	pcmk__output_create_xml_node(out, "rule-check",
	"rule-id", rule_id,
	"rc", rc_str,
	NULL);

	free(rc_str);

	return pcmk_rc_ok;
	}

	static pcmk__message_entry_t fmt_functions[] = {
	{ "rule-check", "default", rule_check_default },
	{ "rule-check", "xml", rule_check_xml },

	{ NULL, NULL, NULL }
	};

	static int
	crm_rule_check(pcmk__output_t out, pe_working_set_t data_set, const char *rule_id,
	crm_time_t *effective_date)
	{
	xmlNode *cib_constraints = NULL;
	xmlNode *match = NULL;
	xmlXPathObjectPtr xpathObj = NULL;
	char *xpath = NULL;
	int rc = pcmk_rc_ok;
	int max = 0;

	/* Rules are under the constraints node in the XML, so first find that. */
	cib_constraints = pcmk_find_cib_element(data_set->input,
	XML_CIB_TAG_CONSTRAINTS);

	/* Get all rules matching the given ID which are also simple enough for us to check.
	* For the moment, these rules must only have a single date_expression child and:
	* - Do not have a date_spec operation, or
	* - Have a date_spec operation that contains years= but does not contain moon=.
	*
	* We do this in steps to provide better error messages. First, check that there's
	* any rule with the given ID.
	*/
	xpath = crm_strdup_printf("//rule[@id='%s']", rule_id);
	xpathObj = xpath_search(cib_constraints, xpath);
	max = numXpathResults(xpathObj);

	if (max == 0) {
	rc = ENXIO;
	g_set_error(&error, PCMK__RC_ERROR, rc, "No rule found with ID=%s", rule_id);
	goto done;
	} else if (max > 1) {
	rc = ENXIO;
	g_set_error(&error, PCMK__RC_ERROR, rc, "More than one rule with ID=%s found", rule_id);
	goto done;
	}

	free(xpath);
	freeXpathObject(xpathObj);

	/* Next, make sure it has exactly one date_expression. */
	xpath = crm_strdup_printf("//rule[@id='%s']//date_expression", rule_id);
	xpathObj = xpath_search(cib_constraints, xpath);
	max = numXpathResults(xpathObj);

	if (max != 1) {
	rc = EOPNOTSUPP;
	g_set_error(&error, PCMK__RC_ERROR, rc,
	"Can't check rule %s because it does not have exactly one date_expression", rule_id);
	goto done;
	}

	free(xpath);
	freeXpathObject(xpathObj);

	/* Then, check that it's something we actually support. */
	xpath = crm_strdup_printf("//rule[@id='%s']//date_expression[@operation!='date_spec']", rule_id);
	xpathObj = xpath_search(cib_constraints, xpath);
	max = numXpathResults(xpathObj);

	if (max == 0) {
	free(xpath);
	freeXpathObject(xpathObj);

	xpath = crm_strdup_printf("//rule[@id='%s']//date_expression[@operation='date_spec' and date_spec/@years and not(date_spec/@moon)]",
	rule_id);
	xpathObj = xpath_search(cib_constraints, xpath);
	max = numXpathResults(xpathObj);

	if (max == 0) {
	rc = ENXIO;
	g_set_error(&error, PCMK__RC_ERROR, rc,
	"Rule either must not use date_spec, or use date_spec with years= but not moon=");
	goto done;
	}
	}

	match = getXpathResult(xpathObj, 0);

	/* We should have ensured both of these pass with the xpath query above, but
	* double checking can't hurt.
	*/
	CRM_ASSERT(match != NULL);
	CRM_ASSERT(find_expression_type(match) == time_expr);

	rc = eval_date_expression(match, effective_date, NULL);
	out->message(out, "rule-check", rule_id, rc);

	done:
	free(xpath);
	freeXpathObject(xpathObj);
	return rc;
	}

	static GOptionContext *
	build_arg_context(pcmk__common_args_t args, GOptionGroup *group) {
	GOptionContext *context = NULL;

	context = pcmk__build_arg_context(args, "text (default), xml", group, NULL);

	pcmk__add_arg_group(context, "modes", "Modes (mutually exclusive):",
	"Show modes of operation", mode_entries);
	pcmk__add_arg_group(context, "data", "Data:",
	"Show data options", data_entries);
	pcmk__add_arg_group(context, "additional", "Additional Options:",
	"Show additional options", addl_entries);
	return context;
	}

	int
	main(int argc, char **argv)
	{
	pe_working_set_t *data_set = NULL;

	crm_time_t *rule_date = NULL;
	xmlNode *input = NULL;

	int rc = pcmk_rc_ok;
	crm_exit_t exit_code = CRM_EX_OK;

	pcmk__output_t *out = NULL;

	GOptionGroup *output_group = NULL;
	pcmk__common_args_t *args = pcmk__new_common_args(SUMMARY);
	GOptionContext *context = build_arg_context(args, &output_group);
	gchar **processed_args = pcmk__cmdline_preproc(argv, "drX");

	pcmk__register_formats(output_group, formats);
	if (!g_option_context_parse_strv(context, &processed_args, &error)) {
	exit_code = CRM_EX_USAGE;
	goto done;
	}

	pcmk__cli_init_logging("crm_rule", args->verbosity);

	rc = pcmk__output_new(&out, args->output_ty, args->output_dest, argv);
	if (rc != pcmk_rc_ok) {
	exit_code = CRM_EX_ERROR;
	g_set_error(&error, PCMK__EXITC_ERROR, exit_code, "Error creating output format %s: %s",
	args->output_ty, pcmk_rc_str(rc));
	goto done;
	}

	pcmk__register_messages(out, fmt_functions);

	if (args->version) {
	out->version(out, false);
	goto done;
	}

	/* Check command line arguments before opening a connection to
	* the CIB manager or doing anything else important.
	*/
	switch(options.mode) {
	case crm_rule_mode_check:
	if (options.rules == NULL) {
	exit_code = CRM_EX_USAGE;
	g_set_error(&error, PCMK__EXITC_ERROR, exit_code, "--check requires use of --rule=");
	goto done;
	}

	break;

	default:
	exit_code = CRM_EX_USAGE;
	g_set_error(&error, PCMK__EXITC_ERROR, exit_code, "No mode operation given");
	goto done;
	break;
	}

	/* Set up some defaults. */
	rule_date = crm_time_new(options.date);
	if (rule_date == NULL) {
	exit_code = CRM_EX_DATAERR;
	g_set_error(&error, PCMK__EXITC_ERROR, exit_code,
	"No --date given and can't determine current date");
	goto done;
	}

	/* Where does the XML come from? If one of various command line options were
	* given, use those. Otherwise, connect to the CIB and use that.
	*/
	if (pcmk__str_eq(options.input_xml, "-", pcmk__str_casei)) {
	input = stdin2xml();

	if (input == NULL) {
	exit_code = CRM_EX_DATAERR;
	g_set_error(&error, PCMK__EXITC_ERROR, exit_code, "Couldn't parse input from STDIN\n");
	goto done;
	}
	} else if (options.input_xml != NULL) {
	input = string2xml(options.input_xml);

	if (input == NULL) {
	exit_code = CRM_EX_DATAERR;
	g_set_error(&error, PCMK__EXITC_ERROR, exit_code,
	"Couldn't parse input string: %s\n", options.input_xml);
	goto done;
	}
	} else {
	rc = cib__signon_query(NULL, &input);

	if (rc != pcmk_rc_ok) {
	exit_code = pcmk_rc2exitc(rc);
	g_set_error(&error, PCMK__EXITC_ERROR, exit_code,
	"CIB query failed: %s", pcmk_rc_str(rc));
	goto done;
	}
	}

	/* Populate the working set instance */
	data_set = pe_new_working_set();
	if (data_set == NULL) {
	- exit_code = crm_errno2exit(ENOMEM);
	+ exit_code = pcmk_rc2exitc(ENOMEM);
	goto done;
	}
	pe__set_working_set_flags(data_set, pe_flag_no_counts\|pe_flag_no_compat);

	data_set->input = input;
	data_set->now = rule_date;

	/* Unpack everything. */
	cluster_status(data_set);

	/* Now do whichever operation mode was asked for. There's only one at the
	* moment so this looks a little silly, but I expect there will be more
	* modes in the future.
	*/
	switch(options.mode) {
	case crm_rule_mode_check:
	for (char *s = options.rules; s != NULL; s++) {
	int last_rc = crm_rule_check(out, data_set, *s, rule_date);

	if (last_rc != pcmk_rc_ok) {
	rc = last_rc;
	}
	}

	exit_code = pcmk_rc2exitc(rc);
	break;

	default:
	break;
	}

	done:
	g_strfreev(processed_args);
	pcmk__free_arg_context(context);
	pe_free_working_set(data_set);

	pcmk__output_and_clear_error(error, out);

	if (out != NULL) {
	out->finish(out, exit_code, true, NULL);
	pcmk__output_free(out);
	}

	return crm_exit(exit_code);
	}
	diff --git a/tools/crm_shadow.c b/tools/crm_shadow.c
	index f2bc6e4997..dfc1373009 100644
	--- a/tools/crm_shadow.c
	+++ b/tools/crm_shadow.c
	@@ -1,556 +1,560 @@
	/*
	* Copyright 2004-2022 the Pacemaker project contributors
	*
	* The version control history for this file may have further details.
	*
	* This source code is licensed under the GNU General Public License version 2
	* or later (GPLv2+) WITHOUT ANY WARRANTY.
	*/

	#include <crm_internal.h>

	#include <stdio.h>
	#include <unistd.h>

	#include <sys/param.h>
	#include <crm/crm.h>
	#include <sys/stat.h>
	#include <sys/types.h>

	#include <stdlib.h>
	#include <errno.h>
	#include <fcntl.h>
	#include <crm/msg_xml.h>
	#include <crm/common/xml.h>

	#include <crm/common/ipc.h>

	#include <crm/cib.h>
	#include <crm/cib/internal.h>

	static int command_options = cib_sync_call;
	static cib_t *real_cib = NULL;
	static int force_flag = 0;
	static int batch_flag = 0;

	static char *
	get_shadow_prompt(const char *name)
	{
	return crm_strdup_printf("shadow[%.40s] # ", name);
	}

	static void
	shadow_setup(char *name, gboolean do_switch)
	{
	const char *prompt = getenv("PS1");
	const char *shell = getenv("SHELL");
	char *new_prompt = get_shadow_prompt(name);

	printf("Setting up shadow instance\n");

	if (pcmk__str_eq(new_prompt, prompt, pcmk__str_casei)) {
	/* nothing to do */
	goto done;

	} else if (batch_flag == FALSE && shell != NULL) {
	setenv("PS1", new_prompt, 1);
	setenv("CIB_shadow", name, 1);
	printf("Type Ctrl-D to exit the crm_shadow shell\n");

	if (strstr(shell, "bash")) {
	execl(shell, shell, "--norc", "--noprofile", NULL);
	} else {
	execl(shell, shell, NULL);
	}

	} else if (do_switch) {
	printf("To switch to the named shadow instance, paste the following into your shell:\n");

	} else {
	printf
	("A new shadow instance was created. To begin using it paste the following into your shell:\n");
	}
	printf(" CIB_shadow=%s ; export CIB_shadow\n", name);

	done:
	free(new_prompt);
	}

	static void
	shadow_teardown(char *name)
	{
	const char *prompt = getenv("PS1");
	char *our_prompt = get_shadow_prompt(name);

	if (prompt != NULL && strstr(prompt, our_prompt)) {
	printf("Now type Ctrl-D to exit the crm_shadow shell\n");

	} else {
	printf
	("Please remember to unset the CIB_shadow variable by pasting the following into your shell:\n");
	printf(" unset CIB_shadow\n");
	}
	free(our_prompt);
	}

	static pcmk__cli_option_t long_options[] = {
	// long option, argument type, storage, short option, description, flags
	{
	"help", no_argument, NULL, '?',
	"\t\tThis text", pcmk__option_default
	},
	{
	"version", no_argument, NULL, '$',
	"\t\tVersion information", pcmk__option_default
	},
	{
	"verbose", no_argument, NULL, 'V',
	"\t\tIncrease debug output", pcmk__option_default
	},
	{
	"-spacer-", no_argument, NULL, '-',
	"\nQueries:", pcmk__option_default
	},
	{
	"which", no_argument, NULL, 'w',
	"\t\tIndicate the active shadow copy", pcmk__option_default
	},
	{
	"display", no_argument, NULL, 'p',
	"\t\tDisplay the contents of the active shadow copy",
	pcmk__option_default
	},
	{
	"edit", no_argument, NULL, 'E',
	"\t\tEdit the contents of the active shadow copy with your "
	"favorite $EDITOR",
	pcmk__option_default
	},
	{
	"diff", no_argument, NULL, 'd',
	"\t\tDisplay the changes in the active shadow copy\n",
	pcmk__option_default
	},
	{
	"file", no_argument, NULL, 'F',
	"\t\tDisplay the location of the active shadow copy file\n",
	pcmk__option_default
	},
	{
	"-spacer-", no_argument, NULL, '-',
	"\nCommands:", pcmk__option_default
	},
	{
	"create", required_argument, NULL, 'c',
	"\tCreate the named shadow copy of the active cluster configuration",
	pcmk__option_default
	},
	{
	"create-empty", required_argument, NULL, 'e',
	"Create the named shadow copy with an empty cluster configuration. "
	"Optional: --validate-with",
	pcmk__option_default
	},
	{
	"commit", required_argument, NULL, 'C',
	"\tUpload the contents of the named shadow copy to the cluster",
	pcmk__option_default
	},
	{
	"delete", required_argument, NULL, 'D',
	"\tDelete the contents of the named shadow copy", pcmk__option_default
	},
	{
	"reset", required_argument, NULL, 'r',
	"\tRecreate named shadow copy from the active cluster configuration",
	pcmk__option_default
	},
	{
	"switch", required_argument, NULL, 's',
	"\t(Advanced) Switch to the named shadow copy", pcmk__option_default
	},
	{
	"-spacer-", no_argument, NULL, '-',
	"\nAdditional Options:", pcmk__option_default
	},
	{
	"force", no_argument, NULL, 'f',
	"\t\t(Advanced) Force the action to be performed", pcmk__option_default
	},
	{
	"batch", no_argument, NULL, 'b',
	"\t\t(Advanced) Don't spawn a new shell", pcmk__option_default
	},
	{
	"all", no_argument, NULL, 'a',
	"\t\t(Advanced) Upload entire CIB, including status, with --commit",
	pcmk__option_default
	},
	{
	"validate-with", required_argument, NULL, 'v',
	"(Advanced) Create an older configuration version", pcmk__option_default
	},
	{
	"-spacer-", no_argument, NULL, '-',
	"\nExamples:", pcmk__option_paragraph
	},
	{
	"-spacer-", no_argument, NULL, '-',
	"Create a blank shadow configuration:", pcmk__option_paragraph
	},
	{
	"-spacer-", no_argument, NULL, '-',
	" crm_shadow --create-empty myShadow", pcmk__option_example
	},
	{
	"-spacer-", no_argument, NULL, '-',
	"Create a shadow configuration from the running cluster:",
	pcmk__option_paragraph
	},
	{
	"-spacer-", no_argument, NULL, '-',
	" crm_shadow --create myShadow", pcmk__option_example
	},
	{
	"-spacer-", no_argument, NULL, '-',
	"Display the current shadow configuration:", pcmk__option_paragraph
	},
	{
	"-spacer-", no_argument, NULL, '-',
	" crm_shadow --display", pcmk__option_example
	},
	{
	"-spacer-", no_argument, NULL, '-',
	"Discard the current shadow configuration (named myShadow):",
	pcmk__option_paragraph
	},
	{
	"-spacer-", no_argument, NULL, '-',
	" crm_shadow --delete myShadow --force", pcmk__option_example
	},
	{
	"-spacer-", no_argument, NULL, '-',
	"Upload current shadow configuration (named myShadow) "
	"to running cluster:",
	pcmk__option_paragraph
	},
	{
	"-spacer-", no_argument, NULL, '-',
	" crm_shadow --commit myShadow", pcmk__option_example
	},
	{ 0, 0, 0, 0 }
	};

	int
	main(int argc, char **argv)
	{
	int rc = pcmk_ok;
	int flag;
	int argerr = 0;
	crm_exit_t exit_code = CRM_EX_OK;
	static int command = '?';
	const char *validation = NULL;
	char *shadow = NULL;
	char *shadow_file = NULL;
	gboolean full_upload = FALSE;
	gboolean dangerous_cmd = FALSE;
	struct stat buf;
	int option_index = 0;

	pcmk__cli_init_logging("crm_shadow", 0);
	pcmk__set_cli_options(NULL, "<query>\|<command> [options]", long_options,
	"perform Pacemaker configuration changes in a sandbox"
	"\n\nThis command sets up an environment in which "
	"configuration tools (cibadmin,\ncrm_resource, "
	"etc.) work offline instead of against a live "
	"cluster, allowing\nchanges to be previewed and "
	"tested for side-effects.\n");

	if (argc < 2) {
	pcmk__cli_help('?', CRM_EX_USAGE);
	}

	while (1) {
	flag = pcmk__next_cli_option(argc, argv, &option_index, NULL);
	if (flag == -1 \|\| flag == 0)
	break;

	switch (flag) {
	case 'a':
	full_upload = TRUE;
	break;
	case 'd':
	case 'E':
	case 'p':
	case 'w':
	case 'F':
	command = flag;
	free(shadow);
	shadow = NULL;
	{
	const char *env = getenv("CIB_shadow");
	if(env) {
	shadow = strdup(env);
	} else {
	fprintf(stderr, "No active shadow configuration defined\n");
	crm_exit(CRM_EX_NOSUCH);
	}
	}
	break;
	case 'v':
	validation = optarg;
	break;
	case 'e':
	case 'c':
	case 's':
	case 'r':
	command = flag;
	pcmk__str_update(&shadow, optarg);
	break;
	case 'C':
	case 'D':
	command = flag;
	dangerous_cmd = TRUE;
	pcmk__str_update(&shadow, optarg);
	break;
	case 'V':
	command_options = command_options \| cib_verbose;
	crm_bump_log_level(argc, argv);
	break;
	case '$':
	case '?':
	pcmk__cli_help(flag, CRM_EX_OK);
	break;
	case 'f':
	cib__set_call_options(command_options, crm_system_name,
	cib_quorum_override);
	force_flag = 1;
	break;
	case 'b':
	batch_flag = 1;
	break;
	default:
	printf("Argument code 0%o (%c)" " is not (?yet?) supported\n", flag, flag);
	++argerr;
	break;
	}
	}

	if (optind < argc) {
	printf("non-option ARGV-elements: ");
	while (optind < argc)
	printf("%s ", argv[optind++]);
	printf("\n");
	pcmk__cli_help('?', CRM_EX_USAGE);
	}

	if (optind > argc) {
	++argerr;
	}

	if (argerr) {
	pcmk__cli_help('?', CRM_EX_USAGE);
	}

	if (command == 'w') {
	/* which shadow instance is active? */
	const char *local = getenv("CIB_shadow");

	if (local == NULL) {
	fprintf(stderr, "No shadow instance provided\n");
	exit_code = CRM_EX_NOSUCH;
	} else {
	fprintf(stdout, "%s\n", local);
	}
	goto done;
	}

	if (shadow == NULL) {
	fprintf(stderr, "No shadow instance provided\n");
	fflush(stderr);
	exit_code = CRM_EX_NOSUCH;
	goto done;

	} else if (command != 's' && command != 'c') {
	const char *local = getenv("CIB_shadow");

	if (local != NULL && !pcmk__str_eq(local, shadow, pcmk__str_casei) && force_flag == FALSE) {
	fprintf(stderr,
	"The supplied shadow instance (%s) is not the same as the active one (%s).\n"
	" To prevent accidental destruction of the cluster,"
	" the --force flag is required in order to proceed.\n", shadow, local);
	fflush(stderr);
	exit_code = CRM_EX_USAGE;
	goto done;
	}
	}

	if (dangerous_cmd && force_flag == FALSE) {
	fprintf(stderr, "The supplied command is considered dangerous."
	" To prevent accidental destruction of the cluster,"
	" the --force flag is required in order to proceed.\n");
	fflush(stderr);
	exit_code = CRM_EX_USAGE;
	goto done;
	}

	shadow_file = get_shadow_file(shadow);
	if (command == 'D') {
	/* delete the file */
	if ((unlink(shadow_file) < 0) && (errno != ENOENT)) {
	- exit_code = crm_errno2exit(errno);
	+ exit_code = pcmk_rc2exitc(errno);
	fprintf(stderr, "Could not remove shadow instance '%s': %s\n",
	shadow, strerror(errno));
	}
	shadow_teardown(shadow);
	goto done;

	} else if (command == 'F') {
	printf("%s\n", shadow_file);
	goto done;
	}

	if (command == 'd' \|\| command == 'r' \|\| command == 'c' \|\| command == 'C') {
	real_cib = cib_new_no_shadow();
	rc = real_cib->cmds->signon(real_cib, crm_system_name, cib_command);
	if (rc != pcmk_ok) {
	- fprintf(stderr, "Could not connect to CIB: %s\n",
	- pcmk_strerror(rc));
	- exit_code = crm_errno2exit(rc);
	+ rc = pcmk_legacy2rc(rc);
	+ fprintf(stderr, "Could not connect to CIB: %s\n", pcmk_rc_str(rc));
	+ exit_code = pcmk_rc2exitc(rc);
	goto done;
	}
	}

	// File existence check
	rc = stat(shadow_file, &buf);
	if (command == 'e' \|\| command == 'c') {
	if (rc == 0 && force_flag == FALSE) {
	fprintf(stderr, "A shadow instance '%s' already exists.\n"
	" To prevent accidental destruction of the cluster,"
	" the --force flag is required in order to proceed.\n", shadow);
	exit_code = CRM_EX_CANTCREAT;
	goto done;
	}
	} else if (rc < 0) {
	fprintf(stderr, "Could not access shadow instance '%s': %s\n", shadow, strerror(errno));
	exit_code = CRM_EX_NOSUCH;
	goto done;
	}

	if (command == 'c' \|\| command == 'e' \|\| command == 'r') {
	xmlNode *output = NULL;

	/* create a shadow instance based on the current cluster config */
	if (command == 'c' \|\| command == 'r') {
	rc = real_cib->cmds->query(real_cib, NULL, &output, command_options);
	if (rc != pcmk_ok) {
	+ rc = pcmk_legacy2rc(rc);
	fprintf(stderr, "Could not connect to the CIB manager: %s\n",
	- pcmk_strerror(rc));
	- exit_code = crm_errno2exit(rc);
	+ pcmk_rc_str(rc));
	+ exit_code = pcmk_rc2exitc(rc);
	goto done;
	}

	} else {
	output = createEmptyCib(0);
	if(validation) {
	crm_xml_add(output, XML_ATTR_VALIDATION, validation);
	}
	printf("Created new %s configuration\n",
	crm_element_value(output, XML_ATTR_VALIDATION));
	}

	rc = write_xml_file(output, shadow_file, FALSE);
	free_xml(output);

	if (rc < 0) {
	+ rc = pcmk_legacy2rc(rc);
	fprintf(stderr, "Could not %s the shadow instance '%s': %s\n",
	command == 'r' ? "reset" : "create",
	- shadow, pcmk_strerror(rc));
	- exit_code = crm_errno2exit(rc);
	+ shadow, pcmk_rc_str(rc));
	+ exit_code = pcmk_rc2exitc(rc);
	goto done;
	}
	shadow_setup(shadow, FALSE);

	} else if (command == 'E') {
	char *editor = getenv("EDITOR");

	if (editor == NULL) {
	fprintf(stderr, "No value for EDITOR defined\n");
	exit_code = CRM_EX_NOT_CONFIGURED;
	goto done;
	}

	execlp(editor, "--", shadow_file, NULL);
	fprintf(stderr, "Could not invoke EDITOR (%s %s): %s\n",
	editor, shadow_file, strerror(errno));
	exit_code = CRM_EX_OSFILE;
	goto done;

	} else if (command == 's') {
	shadow_setup(shadow, TRUE);
	goto done;

	} else if (command == 'p') {
	/* display the current contents */
	char *output_s = NULL;
	xmlNode *output = filename2xml(shadow_file);

	output_s = dump_xml_formatted(output);
	printf("%s", output_s);

	free(output_s);
	free_xml(output);

	} else if (command == 'd') {
	/* diff against cluster */
	xmlNode *diff = NULL;
	xmlNode *old_config = NULL;
	xmlNode *new_config = filename2xml(shadow_file);

	rc = real_cib->cmds->query(real_cib, NULL, &old_config, command_options);

	if (rc != pcmk_ok) {
	- fprintf(stderr, "Could not query the CIB: %s\n", pcmk_strerror(rc));
	- exit_code = crm_errno2exit(rc);
	+ rc = pcmk_legacy2rc(rc);
	+ fprintf(stderr, "Could not query the CIB: %s\n", pcmk_rc_str(rc));
	+ exit_code = pcmk_rc2exitc(rc);
	goto done;
	}

	xml_track_changes(new_config, NULL, new_config, FALSE);
	xml_calculate_changes(old_config, new_config);

	diff = xml_create_patchset(0, old_config, new_config, NULL, FALSE);

	xml_log_changes(LOG_INFO, __func__, new_config);
	xml_accept_changes(new_config);

	if (diff != NULL) {
	xml_log_patchset(LOG_STDOUT, " ", diff);
	exit_code = CRM_EX_ERROR;
	}
	goto done;

	} else if (command == 'C') {
	/* commit to the cluster */
	xmlNode *input = filename2xml(shadow_file);
	xmlNode *section_xml = input;
	const char *section = NULL;

	if (!full_upload) {
	section = XML_CIB_TAG_CONFIGURATION;
	section_xml = first_named_child(input, section);
	}
	rc = real_cib->cmds->replace(real_cib, section, section_xml,
	command_options);
	if (rc != pcmk_ok) {
	+ rc = pcmk_legacy2rc(rc);
	fprintf(stderr, "Could not commit shadow instance '%s' to the CIB: %s\n",
	- shadow, pcmk_strerror(rc));
	- exit_code = crm_errno2exit(rc);
	+ shadow, pcmk_rc_str(rc));
	+ exit_code = pcmk_rc2exitc(rc);
	}
	shadow_teardown(shadow);
	free_xml(input);
	}
	done:
	free(shadow_file);
	free(shadow);
	crm_exit(exit_code);
	}

File Metadata

Mime Type: text/x-diff
Expires: Thu, Jul 10, 2:03 AM (1 d, 9 h)
Storage Engine: blob
Storage Format: Raw Data
Storage Handle: 2009659
Default Alt Text: (980 KB)

No OneTemporaryActions

View Options

File Metadata

Event Timeline

No OneTemporary
Actions