mmp.c 9.9 KB

123456789101112131415161718192021222324252627282930313233343536373839404142434445464748495051525354555657585960616263646566676869707172737475767778798081828384858687888990919293949596979899100101102103104105106107108109110111112113114115116117118119120121122123124125126127128129130131132133134135136137138139140141142143144145146147148149150151152153154155156157158159160161162163164165166167168169170171172173174175176177178179180181182183184185186187188189190191192193194195196197198199200201202203204205206207208209210211212213214215216217218219220221222223224225226227228229230231232233234235236237238239240241242243244245246247248249250251252253254255256257258259260261262263264265266267268269270271272273274275276277278279280281282283284285286287288289290291292293294295296297298299300301302303304305306307308309310311312313314315316317318319320321322323324325326327328329330331332333334335336337338339340341342343344345346347348349350351352353354355356357358359360361362363364365366367368369370371372373374375376377378379380381382383384385386387388389390391392393394395396397398
  1. #include <linux/fs.h>
  2. #include <linux/random.h>
  3. #include <linux/buffer_head.h>
  4. #include <linux/utsname.h>
  5. #include <linux/kthread.h>
  6. #include "ext4.h"
  7. /* Checksumming functions */
  8. static __le32 ext4_mmp_csum(struct super_block *sb, struct mmp_struct *mmp)
  9. {
  10. struct ext4_sb_info *sbi = EXT4_SB(sb);
  11. int offset = offsetof(struct mmp_struct, mmp_checksum);
  12. __u32 csum;
  13. csum = ext4_chksum(sbi, sbi->s_csum_seed, (char *)mmp, offset);
  14. return cpu_to_le32(csum);
  15. }
  16. static int ext4_mmp_csum_verify(struct super_block *sb, struct mmp_struct *mmp)
  17. {
  18. if (!ext4_has_metadata_csum(sb))
  19. return 1;
  20. return mmp->mmp_checksum == ext4_mmp_csum(sb, mmp);
  21. }
  22. static void ext4_mmp_csum_set(struct super_block *sb, struct mmp_struct *mmp)
  23. {
  24. if (!ext4_has_metadata_csum(sb))
  25. return;
  26. mmp->mmp_checksum = ext4_mmp_csum(sb, mmp);
  27. }
  28. /*
  29. * Write the MMP block using WRITE_SYNC to try to get the block on-disk
  30. * faster.
  31. */
  32. static int write_mmp_block(struct super_block *sb, struct buffer_head *bh)
  33. {
  34. struct mmp_struct *mmp = (struct mmp_struct *)(bh->b_data);
  35. /*
  36. * We protect against freezing so that we don't create dirty buffers
  37. * on frozen filesystem.
  38. */
  39. sb_start_write(sb);
  40. ext4_mmp_csum_set(sb, mmp);
  41. lock_buffer(bh);
  42. bh->b_end_io = end_buffer_write_sync;
  43. get_bh(bh);
  44. submit_bh(WRITE_SYNC | REQ_META | REQ_PRIO, bh);
  45. wait_on_buffer(bh);
  46. sb_end_write(sb);
  47. if (unlikely(!buffer_uptodate(bh)))
  48. return 1;
  49. return 0;
  50. }
  51. /*
  52. * Read the MMP block. It _must_ be read from disk and hence we clear the
  53. * uptodate flag on the buffer.
  54. */
  55. static int read_mmp_block(struct super_block *sb, struct buffer_head **bh,
  56. ext4_fsblk_t mmp_block)
  57. {
  58. struct mmp_struct *mmp;
  59. int ret;
  60. if (*bh)
  61. clear_buffer_uptodate(*bh);
  62. /* This would be sb_bread(sb, mmp_block), except we need to be sure
  63. * that the MD RAID device cache has been bypassed, and that the read
  64. * is not blocked in the elevator. */
  65. if (!*bh) {
  66. *bh = sb_getblk(sb, mmp_block);
  67. if (!*bh) {
  68. ret = -ENOMEM;
  69. goto warn_exit;
  70. }
  71. }
  72. get_bh(*bh);
  73. lock_buffer(*bh);
  74. (*bh)->b_end_io = end_buffer_read_sync;
  75. submit_bh(READ_SYNC | REQ_META | REQ_PRIO, *bh);
  76. wait_on_buffer(*bh);
  77. if (!buffer_uptodate(*bh)) {
  78. brelse(*bh);
  79. *bh = NULL;
  80. ret = -EIO;
  81. goto warn_exit;
  82. }
  83. mmp = (struct mmp_struct *)((*bh)->b_data);
  84. if (le32_to_cpu(mmp->mmp_magic) != EXT4_MMP_MAGIC)
  85. ret = -EFSCORRUPTED;
  86. else if (!ext4_mmp_csum_verify(sb, mmp))
  87. ret = -EFSBADCRC;
  88. else
  89. return 0;
  90. warn_exit:
  91. ext4_warning(sb, "Error %d while reading MMP block %llu",
  92. ret, mmp_block);
  93. return ret;
  94. }
  95. /*
  96. * Dump as much information as possible to help the admin.
  97. */
  98. void __dump_mmp_msg(struct super_block *sb, struct mmp_struct *mmp,
  99. const char *function, unsigned int line, const char *msg)
  100. {
  101. __ext4_warning(sb, function, line, "%s", msg);
  102. __ext4_warning(sb, function, line,
  103. "MMP failure info: last update time: %llu, last update "
  104. "node: %s, last update device: %s\n",
  105. (long long unsigned int) le64_to_cpu(mmp->mmp_time),
  106. mmp->mmp_nodename, mmp->mmp_bdevname);
  107. }
  108. /*
  109. * kmmpd will update the MMP sequence every s_mmp_update_interval seconds
  110. */
  111. static int kmmpd(void *data)
  112. {
  113. struct super_block *sb = ((struct mmpd_data *) data)->sb;
  114. struct buffer_head *bh = ((struct mmpd_data *) data)->bh;
  115. struct ext4_super_block *es = EXT4_SB(sb)->s_es;
  116. struct mmp_struct *mmp;
  117. ext4_fsblk_t mmp_block;
  118. u32 seq = 0;
  119. unsigned long failed_writes = 0;
  120. int mmp_update_interval = le16_to_cpu(es->s_mmp_update_interval);
  121. unsigned mmp_check_interval;
  122. unsigned long last_update_time;
  123. unsigned long diff;
  124. int retval;
  125. mmp_block = le64_to_cpu(es->s_mmp_block);
  126. mmp = (struct mmp_struct *)(bh->b_data);
  127. mmp->mmp_time = cpu_to_le64(get_seconds());
  128. /*
  129. * Start with the higher mmp_check_interval and reduce it if
  130. * the MMP block is being updated on time.
  131. */
  132. mmp_check_interval = max(EXT4_MMP_CHECK_MULT * mmp_update_interval,
  133. EXT4_MMP_MIN_CHECK_INTERVAL);
  134. mmp->mmp_check_interval = cpu_to_le16(mmp_check_interval);
  135. bdevname(bh->b_bdev, mmp->mmp_bdevname);
  136. memcpy(mmp->mmp_nodename, init_utsname()->nodename,
  137. sizeof(mmp->mmp_nodename));
  138. while (!kthread_should_stop()) {
  139. if (++seq > EXT4_MMP_SEQ_MAX)
  140. seq = 1;
  141. mmp->mmp_seq = cpu_to_le32(seq);
  142. mmp->mmp_time = cpu_to_le64(get_seconds());
  143. last_update_time = jiffies;
  144. retval = write_mmp_block(sb, bh);
  145. /*
  146. * Don't spew too many error messages. Print one every
  147. * (s_mmp_update_interval * 60) seconds.
  148. */
  149. if (retval) {
  150. if ((failed_writes % 60) == 0)
  151. ext4_error(sb, "Error writing to MMP block");
  152. failed_writes++;
  153. }
  154. if (!(le32_to_cpu(es->s_feature_incompat) &
  155. EXT4_FEATURE_INCOMPAT_MMP)) {
  156. ext4_warning(sb, "kmmpd being stopped since MMP feature"
  157. " has been disabled.");
  158. EXT4_SB(sb)->s_mmp_tsk = NULL;
  159. goto failed;
  160. }
  161. if (sb->s_flags & MS_RDONLY) {
  162. ext4_warning(sb, "kmmpd being stopped since filesystem "
  163. "has been remounted as readonly.");
  164. EXT4_SB(sb)->s_mmp_tsk = NULL;
  165. goto failed;
  166. }
  167. diff = jiffies - last_update_time;
  168. if (diff < mmp_update_interval * HZ)
  169. schedule_timeout_interruptible(mmp_update_interval *
  170. HZ - diff);
  171. /*
  172. * We need to make sure that more than mmp_check_interval
  173. * seconds have not passed since writing. If that has happened
  174. * we need to check if the MMP block is as we left it.
  175. */
  176. diff = jiffies - last_update_time;
  177. if (diff > mmp_check_interval * HZ) {
  178. struct buffer_head *bh_check = NULL;
  179. struct mmp_struct *mmp_check;
  180. retval = read_mmp_block(sb, &bh_check, mmp_block);
  181. if (retval) {
  182. ext4_error(sb, "error reading MMP data: %d",
  183. retval);
  184. EXT4_SB(sb)->s_mmp_tsk = NULL;
  185. goto failed;
  186. }
  187. mmp_check = (struct mmp_struct *)(bh_check->b_data);
  188. if (mmp->mmp_seq != mmp_check->mmp_seq ||
  189. memcmp(mmp->mmp_nodename, mmp_check->mmp_nodename,
  190. sizeof(mmp->mmp_nodename))) {
  191. dump_mmp_msg(sb, mmp_check,
  192. "Error while updating MMP info. "
  193. "The filesystem seems to have been"
  194. " multiply mounted.");
  195. ext4_error(sb, "abort");
  196. goto failed;
  197. }
  198. put_bh(bh_check);
  199. }
  200. /*
  201. * Adjust the mmp_check_interval depending on how much time
  202. * it took for the MMP block to be written.
  203. */
  204. mmp_check_interval = max(min(EXT4_MMP_CHECK_MULT * diff / HZ,
  205. EXT4_MMP_MAX_CHECK_INTERVAL),
  206. EXT4_MMP_MIN_CHECK_INTERVAL);
  207. mmp->mmp_check_interval = cpu_to_le16(mmp_check_interval);
  208. }
  209. /*
  210. * Unmount seems to be clean.
  211. */
  212. mmp->mmp_seq = cpu_to_le32(EXT4_MMP_SEQ_CLEAN);
  213. mmp->mmp_time = cpu_to_le64(get_seconds());
  214. retval = write_mmp_block(sb, bh);
  215. failed:
  216. kfree(data);
  217. brelse(bh);
  218. return retval;
  219. }
  220. /*
  221. * Get a random new sequence number but make sure it is not greater than
  222. * EXT4_MMP_SEQ_MAX.
  223. */
  224. static unsigned int mmp_new_seq(void)
  225. {
  226. u32 new_seq;
  227. do {
  228. new_seq = prandom_u32();
  229. } while (new_seq > EXT4_MMP_SEQ_MAX);
  230. return new_seq;
  231. }
  232. /*
  233. * Protect the filesystem from being mounted more than once.
  234. */
  235. int ext4_multi_mount_protect(struct super_block *sb,
  236. ext4_fsblk_t mmp_block)
  237. {
  238. struct ext4_super_block *es = EXT4_SB(sb)->s_es;
  239. struct buffer_head *bh = NULL;
  240. struct mmp_struct *mmp = NULL;
  241. struct mmpd_data *mmpd_data;
  242. u32 seq;
  243. unsigned int mmp_check_interval = le16_to_cpu(es->s_mmp_update_interval);
  244. unsigned int wait_time = 0;
  245. int retval;
  246. if (mmp_block < le32_to_cpu(es->s_first_data_block) ||
  247. mmp_block >= ext4_blocks_count(es)) {
  248. ext4_warning(sb, "Invalid MMP block in superblock");
  249. goto failed;
  250. }
  251. retval = read_mmp_block(sb, &bh, mmp_block);
  252. if (retval)
  253. goto failed;
  254. mmp = (struct mmp_struct *)(bh->b_data);
  255. if (mmp_check_interval < EXT4_MMP_MIN_CHECK_INTERVAL)
  256. mmp_check_interval = EXT4_MMP_MIN_CHECK_INTERVAL;
  257. /*
  258. * If check_interval in MMP block is larger, use that instead of
  259. * update_interval from the superblock.
  260. */
  261. if (le16_to_cpu(mmp->mmp_check_interval) > mmp_check_interval)
  262. mmp_check_interval = le16_to_cpu(mmp->mmp_check_interval);
  263. seq = le32_to_cpu(mmp->mmp_seq);
  264. if (seq == EXT4_MMP_SEQ_CLEAN)
  265. goto skip;
  266. if (seq == EXT4_MMP_SEQ_FSCK) {
  267. dump_mmp_msg(sb, mmp, "fsck is running on the filesystem");
  268. goto failed;
  269. }
  270. wait_time = min(mmp_check_interval * 2 + 1,
  271. mmp_check_interval + 60);
  272. /* Print MMP interval if more than 20 secs. */
  273. if (wait_time > EXT4_MMP_MIN_CHECK_INTERVAL * 4)
  274. ext4_warning(sb, "MMP interval %u higher than expected, please"
  275. " wait.\n", wait_time * 2);
  276. if (schedule_timeout_interruptible(HZ * wait_time) != 0) {
  277. ext4_warning(sb, "MMP startup interrupted, failing mount\n");
  278. goto failed;
  279. }
  280. retval = read_mmp_block(sb, &bh, mmp_block);
  281. if (retval)
  282. goto failed;
  283. mmp = (struct mmp_struct *)(bh->b_data);
  284. if (seq != le32_to_cpu(mmp->mmp_seq)) {
  285. dump_mmp_msg(sb, mmp,
  286. "Device is already active on another node.");
  287. goto failed;
  288. }
  289. skip:
  290. /*
  291. * write a new random sequence number.
  292. */
  293. seq = mmp_new_seq();
  294. mmp->mmp_seq = cpu_to_le32(seq);
  295. retval = write_mmp_block(sb, bh);
  296. if (retval)
  297. goto failed;
  298. /*
  299. * wait for MMP interval and check mmp_seq.
  300. */
  301. if (schedule_timeout_interruptible(HZ * wait_time) != 0) {
  302. ext4_warning(sb, "MMP startup interrupted, failing mount\n");
  303. goto failed;
  304. }
  305. retval = read_mmp_block(sb, &bh, mmp_block);
  306. if (retval)
  307. goto failed;
  308. mmp = (struct mmp_struct *)(bh->b_data);
  309. if (seq != le32_to_cpu(mmp->mmp_seq)) {
  310. dump_mmp_msg(sb, mmp,
  311. "Device is already active on another node.");
  312. goto failed;
  313. }
  314. mmpd_data = kmalloc(sizeof(struct mmpd_data), GFP_KERNEL);
  315. if (!mmpd_data) {
  316. ext4_warning(sb, "not enough memory for mmpd_data");
  317. goto failed;
  318. }
  319. mmpd_data->sb = sb;
  320. mmpd_data->bh = bh;
  321. /*
  322. * Start a kernel thread to update the MMP block periodically.
  323. */
  324. EXT4_SB(sb)->s_mmp_tsk = kthread_run(kmmpd, mmpd_data, "kmmpd-%s",
  325. bdevname(bh->b_bdev,
  326. mmp->mmp_bdevname));
  327. if (IS_ERR(EXT4_SB(sb)->s_mmp_tsk)) {
  328. EXT4_SB(sb)->s_mmp_tsk = NULL;
  329. kfree(mmpd_data);
  330. ext4_warning(sb, "Unable to create kmmpd thread for %s.",
  331. sb->s_id);
  332. goto failed;
  333. }
  334. return 0;
  335. failed:
  336. brelse(bh);
  337. return 1;
  338. }