2011-01-26 23:03:58 +03:00
|
|
|
/*
|
|
|
|
* CDDL HEADER START
|
|
|
|
*
|
|
|
|
* The contents of this file are subject to the terms of the
|
|
|
|
* Common Development and Distribution License (the "License").
|
|
|
|
* You may not use this file except in compliance with the License.
|
|
|
|
*
|
|
|
|
* You can obtain a copy of the license at usr/src/OPENSOLARIS.LICENSE
|
|
|
|
* or http://www.opensolaris.org/os/licensing.
|
|
|
|
* See the License for the specific language governing permissions
|
|
|
|
* and limitations under the License.
|
|
|
|
*
|
|
|
|
* When distributing Covered Code, include this CDDL HEADER in each
|
|
|
|
* file and include the License file at usr/src/OPENSOLARIS.LICENSE.
|
|
|
|
* If applicable, add the following below this CDDL HEADER, with the
|
|
|
|
* fields enclosed by brackets "[]" replaced with your own identifying
|
|
|
|
* information: Portions Copyright [yyyy] [name of copyright owner]
|
|
|
|
*
|
|
|
|
* CDDL HEADER END
|
|
|
|
*/
|
|
|
|
/*
|
|
|
|
* Copyright (c) 2011, Lawrence Livermore National Security, LLC.
|
2015-07-30 17:24:36 +03:00
|
|
|
* Copyright (c) 2015 by Chunwei Chen. All rights reserved.
|
2011-01-26 23:03:58 +03:00
|
|
|
*/
|
|
|
|
|
|
|
|
|
2016-03-31 01:00:23 +03:00
|
|
|
#ifdef CONFIG_COMPAT
|
|
|
|
#include <linux/compat.h>
|
|
|
|
#endif
|
2018-02-16 04:53:18 +03:00
|
|
|
#include <sys/file.h>
|
Only commit the ZIL once in zpl_writepages() (msync() case).
Currently, using msync() results in the following code path:
sys_msync -> zpl_fsync -> filemap_write_and_wait_range -> zpl_writepages -> write_cache_pages -> zpl_putpage
In such a code path, zil_commit() is called as part of zpl_putpage().
This means that for each page, the write is handed to the DMU, the ZIL
is committed, and only then do we move on to the next page. As one might
imagine, this results in atrocious performance where there is a large
number of pages to write: instead of committing a batch of N writes,
we do N commits containing one page each. In some extreme cases this
can result in msync() being ~700 times slower than it should be, as well
as very inefficient use of ZIL resources.
This patch fixes this issue by making sure that the requested writes
are batched and then committed only once. Unfortunately, the
implementation is somewhat non-trivial because there is no way to run
write_cache_pages in SYNC mode (so that we get all pages) without
making it wait on the writeback tag for each page.
The solution implemented here is composed of two parts:
- I added a new callback system to the ZIL, which allows the caller to
be notified when its ITX gets written to stable storage. One nice
thing is that the callback is called not only in zil_commit() but
in zil_sync() as well, which means that the caller doesn't have to
care whether the write ended up in the ZIL or the DMU: it will get
notified as soon as it's safe, period. This is an improvement over
dmu_tx_callback_register() that was used previously, which only
supports DMU writes. The rationale for this change is to allow
zpl_putpage() to be notified when a ZIL commit is completed without
having to block on zil_commit() itself.
- zpl_writepages() now calls write_cache_pages in non-SYNC mode, which
will prevent (1) write_cache_pages from blocking, and (2) zpl_putpage
from issuing ZIL commits. zpl_writepages() will issue the commit
itself instead of relying on zpl_putpage() to do it, thus nicely
batching the writes. Note, however, that we still have to call
write_cache_pages() again in SYNC mode because there is an edge case
documented in the implementation of write_cache_pages() whereas it
will not give us all dirty pages when running in non-SYNC mode. Thus
we need to run it at least once in SYNC mode to make sure we honor
persistency guarantees. This only happens when the pages are
modified at the same time msync() is running, which should be rare.
In most cases there won't be any additional pages and this second
call will do nothing.
Note that this change also fixes a bug related to #907 whereas calling
msync() on pages that were already handed over to the DMU in a previous
writepages() call would make msync() block until the next TXG sync
instead of returning as soon as the ZIL commit is complete. The new
callback system fixes that problem.
Signed-off-by: Richard Yao <ryao@gentoo.org>
Signed-off-by: Brian Behlendorf <behlendorf1@llnl.gov>
Closes #1849
Closes #907
2013-11-10 19:00:11 +04:00
|
|
|
#include <sys/dmu_objset.h>
|
2019-12-11 22:53:57 +03:00
|
|
|
#include <sys/zfs_znode.h>
|
2011-01-26 23:03:58 +03:00
|
|
|
#include <sys/zfs_vfsops.h>
|
|
|
|
#include <sys/zfs_vnops.h>
|
2018-02-14 01:54:54 +03:00
|
|
|
#include <sys/zfs_project.h>
|
2022-04-27 22:54:17 +03:00
|
|
|
#if defined(HAVE_VFS_SET_PAGE_DIRTY_NOBUFFERS) || \
|
|
|
|
defined(HAVE_VFS_FILEMAP_DIRTY_FOLIO)
|
2021-07-26 20:55:55 +03:00
|
|
|
#include <linux/pagemap.h>
|
|
|
|
#endif
|
2022-04-27 22:54:17 +03:00
|
|
|
#ifdef HAVE_VFS_FILEMAP_DIRTY_FOLIO
|
|
|
|
#include <linux/writeback.h>
|
|
|
|
#endif
|
2011-01-26 23:03:58 +03:00
|
|
|
|
linux: add basic fallocate(mode=0/2) compatibility
Implement semi-compatible functionality for mode=0 (preallocation)
and mode=FALLOC_FL_KEEP_SIZE (preallocation beyond EOF) for ZPL.
Since ZFS does COW and snapshots, preallocating blocks for a file
cannot guarantee that writes to the file will not run out of space.
Even if the first overwrite was guaranteed, it would not handle any
later overwrite of blocks due to COW, so strict compliance is futile.
Instead, make a best-effort check that at least enough free space is
currently available in the pool (with a bit of margin), then create
a sparse file of the requested size and continue on with life.
This does not handle all cases (e.g. several fallocate() calls before
writing into the files when the filesystem is nearly full), which
would require a more complex mechanism to be implemented, probably
based on a modified version of dmu_prealloc(), but is usable as-is.
A new module option zfs_fallocate_reserve_percent is used to control
the reserve margin for any single fallocate call. By default, this
is 110% of the requested preallocation size, so an additional 10% of
available space is reserved for overhead to allow the application a
good chance of finishing the write when the fallocate() succeeds.
If the heuristics of this basic fallocate implementation are not
desirable, the old non-functional behavior of returning EOPNOTSUPP
for calls can be restored by setting zfs_fallocate_reserve_percent=0.
The parameter of zfs_statvfs() is changed to take an inode instead
of a dentry, since no dentry is available in zfs_fallocate_common().
A few tests from @behlendorf cover basic fallocate functionality.
Reviewed-by: Richard Laager <rlaager@wiktel.com>
Reviewed-by: Arshad Hussain <arshad.super@gmail.com>
Reviewed-by: Matthew Ahrens <mahrens@delphix.com>
Co-authored-by: Brian Behlendorf <behlendorf1@llnl.gov>
Signed-off-by: Andreas Dilger <adilger@dilger.ca>
Issue #326
Closes #10408
2020-06-18 21:22:11 +03:00
|
|
|
/*
|
|
|
|
* When using fallocate(2) to preallocate space, inflate the requested
|
|
|
|
* capacity check by 10% to account for the required metadata blocks.
|
|
|
|
*/
|
2022-01-15 02:37:55 +03:00
|
|
|
static unsigned int zfs_fallocate_reserve_percent = 110;
|
2011-01-26 23:03:58 +03:00
|
|
|
|
2011-03-08 22:04:51 +03:00
|
|
|
static int
|
|
|
|
zpl_open(struct inode *ip, struct file *filp)
|
|
|
|
{
|
2011-03-22 21:13:41 +03:00
|
|
|
cred_t *cr = CRED();
|
2011-03-08 22:04:51 +03:00
|
|
|
int error;
|
2015-03-31 06:43:29 +03:00
|
|
|
fstrans_cookie_t cookie;
|
2011-03-08 22:04:51 +03:00
|
|
|
|
2013-12-17 22:18:25 +04:00
|
|
|
error = generic_file_open(ip, filp);
|
|
|
|
if (error)
|
|
|
|
return (error);
|
|
|
|
|
2011-03-22 21:13:41 +03:00
|
|
|
crhold(cr);
|
2015-03-31 06:43:29 +03:00
|
|
|
cookie = spl_fstrans_mark();
|
2011-03-08 22:04:51 +03:00
|
|
|
error = -zfs_open(ip, filp->f_mode, filp->f_flags, cr);
|
2015-03-31 06:43:29 +03:00
|
|
|
spl_fstrans_unmark(cookie);
|
2011-03-22 21:13:41 +03:00
|
|
|
crfree(cr);
|
2011-03-08 22:04:51 +03:00
|
|
|
ASSERT3S(error, <=, 0);
|
|
|
|
|
2013-12-17 22:18:25 +04:00
|
|
|
return (error);
|
2011-03-08 22:04:51 +03:00
|
|
|
}
|
|
|
|
|
|
|
|
static int
|
|
|
|
zpl_release(struct inode *ip, struct file *filp)
|
|
|
|
{
|
2011-03-22 21:13:41 +03:00
|
|
|
cred_t *cr = CRED();
|
2011-03-08 22:04:51 +03:00
|
|
|
int error;
|
2015-03-31 06:43:29 +03:00
|
|
|
fstrans_cookie_t cookie;
|
2011-03-08 22:04:51 +03:00
|
|
|
|
2015-03-31 06:43:29 +03:00
|
|
|
cookie = spl_fstrans_mark();
|
2013-07-26 21:38:49 +04:00
|
|
|
if (ITOZ(ip)->z_atime_dirty)
|
2014-07-16 00:29:57 +04:00
|
|
|
zfs_mark_inode_dirty(ip);
|
2013-07-26 21:38:49 +04:00
|
|
|
|
2011-03-22 21:13:41 +03:00
|
|
|
crhold(cr);
|
2011-03-08 22:04:51 +03:00
|
|
|
error = -zfs_close(ip, filp->f_flags, cr);
|
2015-03-31 06:43:29 +03:00
|
|
|
spl_fstrans_unmark(cookie);
|
2011-03-22 21:13:41 +03:00
|
|
|
crfree(cr);
|
2011-03-08 22:04:51 +03:00
|
|
|
ASSERT3S(error, <=, 0);
|
|
|
|
|
|
|
|
return (error);
|
|
|
|
}
|
|
|
|
|
2011-01-26 23:03:58 +03:00
|
|
|
static int
|
2018-05-03 01:01:24 +03:00
|
|
|
zpl_iterate(struct file *filp, zpl_dir_context_t *ctx)
|
2011-01-26 23:03:58 +03:00
|
|
|
{
|
2011-03-22 21:13:41 +03:00
|
|
|
cred_t *cr = CRED();
|
2011-01-26 23:03:58 +03:00
|
|
|
int error;
|
2015-03-31 06:43:29 +03:00
|
|
|
fstrans_cookie_t cookie;
|
2011-01-26 23:03:58 +03:00
|
|
|
|
2011-03-22 21:13:41 +03:00
|
|
|
crhold(cr);
|
2015-03-31 06:43:29 +03:00
|
|
|
cookie = spl_fstrans_mark();
|
2016-08-04 18:57:35 +03:00
|
|
|
error = -zfs_readdir(file_inode(filp), ctx, cr);
|
2015-03-31 06:43:29 +03:00
|
|
|
spl_fstrans_unmark(cookie);
|
2011-03-22 21:13:41 +03:00
|
|
|
crfree(cr);
|
2011-01-26 23:03:58 +03:00
|
|
|
ASSERT3S(error, <=, 0);
|
|
|
|
|
|
|
|
return (error);
|
|
|
|
}
|
|
|
|
|
2016-05-19 00:30:20 +03:00
|
|
|
#if !defined(HAVE_VFS_ITERATE) && !defined(HAVE_VFS_ITERATE_SHARED)
|
2013-08-07 16:53:45 +04:00
|
|
|
static int
|
|
|
|
zpl_readdir(struct file *filp, void *dirent, filldir_t filldir)
|
|
|
|
{
|
2018-05-03 01:01:24 +03:00
|
|
|
zpl_dir_context_t ctx =
|
|
|
|
ZPL_DIR_CONTEXT_INIT(dirent, filldir, filp->f_pos);
|
2013-08-07 16:53:45 +04:00
|
|
|
int error;
|
|
|
|
|
|
|
|
error = zpl_iterate(filp, &ctx);
|
|
|
|
filp->f_pos = ctx.pos;
|
|
|
|
|
|
|
|
return (error);
|
|
|
|
}
|
2018-05-03 01:01:24 +03:00
|
|
|
#endif /* !HAVE_VFS_ITERATE && !HAVE_VFS_ITERATE_SHARED */
|
2013-08-07 16:53:45 +04:00
|
|
|
|
2019-11-12 19:59:06 +03:00
|
|
|
#if defined(HAVE_FSYNC_WITHOUT_DENTRY)
|
2011-11-10 08:47:59 +04:00
|
|
|
/*
|
|
|
|
* Linux 2.6.35 - 3.0 API,
|
|
|
|
* As of 2.6.35 the dentry argument to the fops->fsync() hook was deemed
|
2011-05-06 23:23:34 +04:00
|
|
|
* redundant. The dentry is still accessible via filp->f_path.dentry,
|
|
|
|
* and we are guaranteed that filp will never be NULL.
|
|
|
|
*/
|
|
|
|
static int
|
|
|
|
zpl_fsync(struct file *filp, int datasync)
|
|
|
|
{
|
2011-11-10 08:47:59 +04:00
|
|
|
struct inode *inode = filp->f_mapping->host;
|
|
|
|
cred_t *cr = CRED();
|
|
|
|
int error;
|
2015-03-31 06:43:29 +03:00
|
|
|
fstrans_cookie_t cookie;
|
2011-11-10 08:47:59 +04:00
|
|
|
|
|
|
|
crhold(cr);
|
2015-03-31 06:43:29 +03:00
|
|
|
cookie = spl_fstrans_mark();
|
2019-12-11 22:53:57 +03:00
|
|
|
error = -zfs_fsync(ITOZ(inode), datasync, cr);
|
2015-03-31 06:43:29 +03:00
|
|
|
spl_fstrans_unmark(cookie);
|
2011-11-10 08:47:59 +04:00
|
|
|
crfree(cr);
|
|
|
|
ASSERT3S(error, <=, 0);
|
|
|
|
|
|
|
|
return (error);
|
|
|
|
}
|
|
|
|
|
2016-11-15 20:20:46 +03:00
|
|
|
#ifdef HAVE_FILE_AIO_FSYNC
|
Linux AIO Support
nfsd uses do_readv_writev() to implement fops->read and fops->write.
do_readv_writev() will attempt to read/write using fops->aio_read and
fops->aio_write, but it will fallback to fops->read and fops->write when
AIO is not available. However, the fallback will perform a call for each
individual data page. Since our default recordsize is 128KB, sequential
operations on NFS will generate 32 DMU transactions where only 1
transaction was needed. That was unnecessary overhead and we implement
fops->aio_read and fops->aio_write to eliminate it.
ZFS originated in OpenSolaris, where the AIO API is entirely implemented
in userland's libc by intelligently mapping them to VOP_WRITE, VOP_READ
and VOP_FSYNC. Linux implements AIO inside the kernel itself. Linux
filesystems therefore must implement their own AIO logic and nearly all
of them implement fops->aio_write synchronously. Consequently, they do
not implement aio_fsync(). However, since the ZPL works by mapping
Linux's VFS calls to the functions implementing Illumos' VFS operations,
we instead implement AIO in the kernel by mapping the operations to the
VOP_READ, VOP_WRITE and VOP_FSYNC equivalents. We therefore implement
fops->aio_fsync.
One might be inclined to make our fops->aio_write implementation
synchronous to make software that expects this behavior safe. However,
there are several reasons not to do this:
1. Other platforms do not implement aio_write() synchronously and since
the majority of userland software using AIO should be cross platform,
expectations of synchronous behavior should not be a problem.
2. We would hurt the performance of programs that use POSIX interfaces
properly while simultaneously encouraging the creation of more
non-compliant software.
3. The broader community concluded that userland software should be
patched to properly use POSIX interfaces instead of implementing hacks
in filesystems to cater to broken software. This concept is best
described as the O_PONIES debate.
4. Making an asynchronous write synchronous is non sequitur.
Any software dependent on synchronous aio_write behavior will suffer
data loss on ZFSOnLinux in a kernel panic / system failure of at most
zfs_txg_timeout seconds, which by default is 5 seconds. This seems like
a reasonable consequence of using non-compliant software.
It should be noted that this is also a problem in the kernel itself
where nfsd does not pass O_SYNC on files opened with it and instead
relies on a open()/write()/close() to enforce synchronous behavior when
the flush is only guarenteed on last close.
Exporting any filesystem that does not implement AIO via NFS risks data
loss in the event of a kernel panic / system failure when something else
is also accessing the file. Exporting any file system that implements
AIO the way this patch does bears similar risk. However, it seems
reasonable to forgo crippling our AIO implementation in favor of
developing patches to fix this problem in Linux's nfsd for the reasons
stated earlier. In the interim, the risk will remain. Failing to
implement AIO will not change the problem that nfsd created, so there is
no reason for nfsd's mistake to block our implementation of AIO.
It also should be noted that `aio_cancel()` will always return
`AIO_NOTCANCELED` under this implementation. It is possible to implement
aio_cancel by deferring work to taskqs and use `kiocb_set_cancel_fn()`
to set a callback function for cancelling work sent to taskqs, but the
simpler approach is allowed by the specification:
```
Which operations are cancelable is implementation-defined.
```
http://pubs.opengroup.org/onlinepubs/009695399/functions/aio_cancel.html
The only programs on my system that are capable of using `aio_cancel()`
are QEMU, beecrypt and fio use it according to a recursive grep of my
system's `/usr/src/debug`. That suggests that `aio_cancel()` users are
rare. Implementing aio_cancel() is left to a future date when it is
clear that there are consumers that benefit from its implementation to
justify the work.
Lastly, it is important to know that handling of the iovec updates differs
between Illumos and Linux in the implementation of read/write. On Linux,
it is the VFS' responsibility whle on Illumos, it is the filesystem's
responsibility. We take the intermediate solution of copying the iovec
so that the ZFS code can update it like on Solaris while leaving the
originals alone. This imposes some overhead. We could always revisit
this should profiling show that the allocations are a problem.
Signed-off-by: Richard Yao <ryao@gentoo.org>
Signed-off-by: Brian Behlendorf <behlendorf1@llnl.gov>
Closes #223
Closes #2373
2014-08-04 15:09:32 +04:00
|
|
|
static int
|
|
|
|
zpl_aio_fsync(struct kiocb *kiocb, int datasync)
|
|
|
|
{
|
|
|
|
return (zpl_fsync(kiocb->ki_filp, datasync));
|
|
|
|
}
|
2016-11-15 20:20:46 +03:00
|
|
|
#endif
|
|
|
|
|
2011-11-10 08:47:59 +04:00
|
|
|
#elif defined(HAVE_FSYNC_RANGE)
|
|
|
|
/*
|
2021-05-22 03:38:17 +03:00
|
|
|
* Linux 3.1 API,
|
2011-11-10 08:47:59 +04:00
|
|
|
* As of 3.1 the responsibility to call filemap_write_and_wait_range() has
|
|
|
|
* been pushed down in to the .fsync() vfs hook. Additionally, the i_mutex
|
|
|
|
* lock is no longer held by the caller, for zfs we don't require the lock
|
|
|
|
* to be held so we don't acquire it.
|
|
|
|
*/
|
2011-05-06 23:23:34 +04:00
|
|
|
static int
|
2011-11-10 08:47:59 +04:00
|
|
|
zpl_fsync(struct file *filp, loff_t start, loff_t end, int datasync)
|
2011-01-26 23:03:58 +03:00
|
|
|
{
|
2011-11-10 08:47:59 +04:00
|
|
|
struct inode *inode = filp->f_mapping->host;
|
2022-05-03 23:23:26 +03:00
|
|
|
znode_t *zp = ITOZ(inode);
|
|
|
|
zfsvfs_t *zfsvfs = ITOZSB(inode);
|
2011-03-22 21:13:41 +03:00
|
|
|
cred_t *cr = CRED();
|
2011-01-26 23:03:58 +03:00
|
|
|
int error;
|
2015-03-31 06:43:29 +03:00
|
|
|
fstrans_cookie_t cookie;
|
2011-01-26 23:03:58 +03:00
|
|
|
|
2022-05-03 23:23:26 +03:00
|
|
|
/*
|
|
|
|
* The variables z_sync_writes_cnt and z_async_writes_cnt work in
|
|
|
|
* tandem so that sync writes can detect if there are any non-sync
|
|
|
|
* writes going on and vice-versa. The "vice-versa" part to this logic
|
|
|
|
* is located in zfs_putpage() where non-sync writes check if there are
|
|
|
|
* any ongoing sync writes. If any sync and non-sync writes overlap,
|
|
|
|
* we do a commit to complete the non-sync writes since the latter can
|
|
|
|
* potentially take several seconds to complete and thus block sync
|
|
|
|
* writes in the upcoming call to filemap_write_and_wait_range().
|
|
|
|
*/
|
|
|
|
atomic_inc_32(&zp->z_sync_writes_cnt);
|
|
|
|
/*
|
|
|
|
* If the following check does not detect an overlapping non-sync write
|
|
|
|
* (say because it's just about to start), then it is guaranteed that
|
|
|
|
* the non-sync write will detect this sync write. This is because we
|
|
|
|
* always increment z_sync_writes_cnt / z_async_writes_cnt before doing
|
|
|
|
* the check on z_async_writes_cnt / z_sync_writes_cnt here and in
|
|
|
|
* zfs_putpage() respectively.
|
|
|
|
*/
|
|
|
|
if (atomic_load_32(&zp->z_async_writes_cnt) > 0) {
|
|
|
|
ZPL_ENTER(zfsvfs);
|
|
|
|
zil_commit(zfsvfs->z_log, zp->z_id);
|
|
|
|
ZPL_EXIT(zfsvfs);
|
|
|
|
}
|
|
|
|
|
2011-11-10 08:47:59 +04:00
|
|
|
error = filemap_write_and_wait_range(inode->i_mapping, start, end);
|
2022-05-03 23:23:26 +03:00
|
|
|
|
|
|
|
/*
|
|
|
|
* The sync write is not complete yet but we decrement
|
|
|
|
* z_sync_writes_cnt since zfs_fsync() increments and decrements
|
|
|
|
* it internally. If a non-sync write starts just after the decrement
|
|
|
|
* operation but before we call zfs_fsync(), it may not detect this
|
|
|
|
* overlapping sync write but it does not matter since we have already
|
|
|
|
* gone past filemap_write_and_wait_range() and we won't block due to
|
|
|
|
* the non-sync write.
|
|
|
|
*/
|
|
|
|
atomic_dec_32(&zp->z_sync_writes_cnt);
|
|
|
|
|
2011-11-10 08:47:59 +04:00
|
|
|
if (error)
|
|
|
|
return (error);
|
|
|
|
|
2011-03-22 21:13:41 +03:00
|
|
|
crhold(cr);
|
2015-03-31 06:43:29 +03:00
|
|
|
cookie = spl_fstrans_mark();
|
2022-05-03 23:23:26 +03:00
|
|
|
error = -zfs_fsync(zp, datasync, cr);
|
2015-03-31 06:43:29 +03:00
|
|
|
spl_fstrans_unmark(cookie);
|
2011-03-22 21:13:41 +03:00
|
|
|
crfree(cr);
|
2011-01-26 23:03:58 +03:00
|
|
|
ASSERT3S(error, <=, 0);
|
|
|
|
|
|
|
|
return (error);
|
|
|
|
}
|
Linux AIO Support
nfsd uses do_readv_writev() to implement fops->read and fops->write.
do_readv_writev() will attempt to read/write using fops->aio_read and
fops->aio_write, but it will fallback to fops->read and fops->write when
AIO is not available. However, the fallback will perform a call for each
individual data page. Since our default recordsize is 128KB, sequential
operations on NFS will generate 32 DMU transactions where only 1
transaction was needed. That was unnecessary overhead and we implement
fops->aio_read and fops->aio_write to eliminate it.
ZFS originated in OpenSolaris, where the AIO API is entirely implemented
in userland's libc by intelligently mapping them to VOP_WRITE, VOP_READ
and VOP_FSYNC. Linux implements AIO inside the kernel itself. Linux
filesystems therefore must implement their own AIO logic and nearly all
of them implement fops->aio_write synchronously. Consequently, they do
not implement aio_fsync(). However, since the ZPL works by mapping
Linux's VFS calls to the functions implementing Illumos' VFS operations,
we instead implement AIO in the kernel by mapping the operations to the
VOP_READ, VOP_WRITE and VOP_FSYNC equivalents. We therefore implement
fops->aio_fsync.
One might be inclined to make our fops->aio_write implementation
synchronous to make software that expects this behavior safe. However,
there are several reasons not to do this:
1. Other platforms do not implement aio_write() synchronously and since
the majority of userland software using AIO should be cross platform,
expectations of synchronous behavior should not be a problem.
2. We would hurt the performance of programs that use POSIX interfaces
properly while simultaneously encouraging the creation of more
non-compliant software.
3. The broader community concluded that userland software should be
patched to properly use POSIX interfaces instead of implementing hacks
in filesystems to cater to broken software. This concept is best
described as the O_PONIES debate.
4. Making an asynchronous write synchronous is non sequitur.
Any software dependent on synchronous aio_write behavior will suffer
data loss on ZFSOnLinux in a kernel panic / system failure of at most
zfs_txg_timeout seconds, which by default is 5 seconds. This seems like
a reasonable consequence of using non-compliant software.
It should be noted that this is also a problem in the kernel itself
where nfsd does not pass O_SYNC on files opened with it and instead
relies on a open()/write()/close() to enforce synchronous behavior when
the flush is only guarenteed on last close.
Exporting any filesystem that does not implement AIO via NFS risks data
loss in the event of a kernel panic / system failure when something else
is also accessing the file. Exporting any file system that implements
AIO the way this patch does bears similar risk. However, it seems
reasonable to forgo crippling our AIO implementation in favor of
developing patches to fix this problem in Linux's nfsd for the reasons
stated earlier. In the interim, the risk will remain. Failing to
implement AIO will not change the problem that nfsd created, so there is
no reason for nfsd's mistake to block our implementation of AIO.
It also should be noted that `aio_cancel()` will always return
`AIO_NOTCANCELED` under this implementation. It is possible to implement
aio_cancel by deferring work to taskqs and use `kiocb_set_cancel_fn()`
to set a callback function for cancelling work sent to taskqs, but the
simpler approach is allowed by the specification:
```
Which operations are cancelable is implementation-defined.
```
http://pubs.opengroup.org/onlinepubs/009695399/functions/aio_cancel.html
The only programs on my system that are capable of using `aio_cancel()`
are QEMU, beecrypt and fio use it according to a recursive grep of my
system's `/usr/src/debug`. That suggests that `aio_cancel()` users are
rare. Implementing aio_cancel() is left to a future date when it is
clear that there are consumers that benefit from its implementation to
justify the work.
Lastly, it is important to know that handling of the iovec updates differs
between Illumos and Linux in the implementation of read/write. On Linux,
it is the VFS' responsibility whle on Illumos, it is the filesystem's
responsibility. We take the intermediate solution of copying the iovec
so that the ZFS code can update it like on Solaris while leaving the
originals alone. This imposes some overhead. We could always revisit
this should profiling show that the allocations are a problem.
Signed-off-by: Richard Yao <ryao@gentoo.org>
Signed-off-by: Brian Behlendorf <behlendorf1@llnl.gov>
Closes #223
Closes #2373
2014-08-04 15:09:32 +04:00
|
|
|
|
2016-11-15 20:20:46 +03:00
|
|
|
#ifdef HAVE_FILE_AIO_FSYNC
|
Linux AIO Support
nfsd uses do_readv_writev() to implement fops->read and fops->write.
do_readv_writev() will attempt to read/write using fops->aio_read and
fops->aio_write, but it will fallback to fops->read and fops->write when
AIO is not available. However, the fallback will perform a call for each
individual data page. Since our default recordsize is 128KB, sequential
operations on NFS will generate 32 DMU transactions where only 1
transaction was needed. That was unnecessary overhead and we implement
fops->aio_read and fops->aio_write to eliminate it.
ZFS originated in OpenSolaris, where the AIO API is entirely implemented
in userland's libc by intelligently mapping them to VOP_WRITE, VOP_READ
and VOP_FSYNC. Linux implements AIO inside the kernel itself. Linux
filesystems therefore must implement their own AIO logic and nearly all
of them implement fops->aio_write synchronously. Consequently, they do
not implement aio_fsync(). However, since the ZPL works by mapping
Linux's VFS calls to the functions implementing Illumos' VFS operations,
we instead implement AIO in the kernel by mapping the operations to the
VOP_READ, VOP_WRITE and VOP_FSYNC equivalents. We therefore implement
fops->aio_fsync.
One might be inclined to make our fops->aio_write implementation
synchronous to make software that expects this behavior safe. However,
there are several reasons not to do this:
1. Other platforms do not implement aio_write() synchronously and since
the majority of userland software using AIO should be cross platform,
expectations of synchronous behavior should not be a problem.
2. We would hurt the performance of programs that use POSIX interfaces
properly while simultaneously encouraging the creation of more
non-compliant software.
3. The broader community concluded that userland software should be
patched to properly use POSIX interfaces instead of implementing hacks
in filesystems to cater to broken software. This concept is best
described as the O_PONIES debate.
4. Making an asynchronous write synchronous is non sequitur.
Any software dependent on synchronous aio_write behavior will suffer
data loss on ZFSOnLinux in a kernel panic / system failure of at most
zfs_txg_timeout seconds, which by default is 5 seconds. This seems like
a reasonable consequence of using non-compliant software.
It should be noted that this is also a problem in the kernel itself
where nfsd does not pass O_SYNC on files opened with it and instead
relies on a open()/write()/close() to enforce synchronous behavior when
the flush is only guarenteed on last close.
Exporting any filesystem that does not implement AIO via NFS risks data
loss in the event of a kernel panic / system failure when something else
is also accessing the file. Exporting any file system that implements
AIO the way this patch does bears similar risk. However, it seems
reasonable to forgo crippling our AIO implementation in favor of
developing patches to fix this problem in Linux's nfsd for the reasons
stated earlier. In the interim, the risk will remain. Failing to
implement AIO will not change the problem that nfsd created, so there is
no reason for nfsd's mistake to block our implementation of AIO.
It also should be noted that `aio_cancel()` will always return
`AIO_NOTCANCELED` under this implementation. It is possible to implement
aio_cancel by deferring work to taskqs and use `kiocb_set_cancel_fn()`
to set a callback function for cancelling work sent to taskqs, but the
simpler approach is allowed by the specification:
```
Which operations are cancelable is implementation-defined.
```
http://pubs.opengroup.org/onlinepubs/009695399/functions/aio_cancel.html
The only programs on my system that are capable of using `aio_cancel()`
are QEMU, beecrypt and fio use it according to a recursive grep of my
system's `/usr/src/debug`. That suggests that `aio_cancel()` users are
rare. Implementing aio_cancel() is left to a future date when it is
clear that there are consumers that benefit from its implementation to
justify the work.
Lastly, it is important to know that handling of the iovec updates differs
between Illumos and Linux in the implementation of read/write. On Linux,
it is the VFS' responsibility whle on Illumos, it is the filesystem's
responsibility. We take the intermediate solution of copying the iovec
so that the ZFS code can update it like on Solaris while leaving the
originals alone. This imposes some overhead. We could always revisit
this should profiling show that the allocations are a problem.
Signed-off-by: Richard Yao <ryao@gentoo.org>
Signed-off-by: Brian Behlendorf <behlendorf1@llnl.gov>
Closes #223
Closes #2373
2014-08-04 15:09:32 +04:00
|
|
|
static int
|
|
|
|
zpl_aio_fsync(struct kiocb *kiocb, int datasync)
|
|
|
|
{
|
2015-05-12 02:26:18 +03:00
|
|
|
return (zpl_fsync(kiocb->ki_filp, kiocb->ki_pos, -1, datasync));
|
Linux AIO Support
nfsd uses do_readv_writev() to implement fops->read and fops->write.
do_readv_writev() will attempt to read/write using fops->aio_read and
fops->aio_write, but it will fallback to fops->read and fops->write when
AIO is not available. However, the fallback will perform a call for each
individual data page. Since our default recordsize is 128KB, sequential
operations on NFS will generate 32 DMU transactions where only 1
transaction was needed. That was unnecessary overhead and we implement
fops->aio_read and fops->aio_write to eliminate it.
ZFS originated in OpenSolaris, where the AIO API is entirely implemented
in userland's libc by intelligently mapping them to VOP_WRITE, VOP_READ
and VOP_FSYNC. Linux implements AIO inside the kernel itself. Linux
filesystems therefore must implement their own AIO logic and nearly all
of them implement fops->aio_write synchronously. Consequently, they do
not implement aio_fsync(). However, since the ZPL works by mapping
Linux's VFS calls to the functions implementing Illumos' VFS operations,
we instead implement AIO in the kernel by mapping the operations to the
VOP_READ, VOP_WRITE and VOP_FSYNC equivalents. We therefore implement
fops->aio_fsync.
One might be inclined to make our fops->aio_write implementation
synchronous to make software that expects this behavior safe. However,
there are several reasons not to do this:
1. Other platforms do not implement aio_write() synchronously and since
the majority of userland software using AIO should be cross platform,
expectations of synchronous behavior should not be a problem.
2. We would hurt the performance of programs that use POSIX interfaces
properly while simultaneously encouraging the creation of more
non-compliant software.
3. The broader community concluded that userland software should be
patched to properly use POSIX interfaces instead of implementing hacks
in filesystems to cater to broken software. This concept is best
described as the O_PONIES debate.
4. Making an asynchronous write synchronous is non sequitur.
Any software dependent on synchronous aio_write behavior will suffer
data loss on ZFSOnLinux in a kernel panic / system failure of at most
zfs_txg_timeout seconds, which by default is 5 seconds. This seems like
a reasonable consequence of using non-compliant software.
It should be noted that this is also a problem in the kernel itself
where nfsd does not pass O_SYNC on files opened with it and instead
relies on a open()/write()/close() to enforce synchronous behavior when
the flush is only guarenteed on last close.
Exporting any filesystem that does not implement AIO via NFS risks data
loss in the event of a kernel panic / system failure when something else
is also accessing the file. Exporting any file system that implements
AIO the way this patch does bears similar risk. However, it seems
reasonable to forgo crippling our AIO implementation in favor of
developing patches to fix this problem in Linux's nfsd for the reasons
stated earlier. In the interim, the risk will remain. Failing to
implement AIO will not change the problem that nfsd created, so there is
no reason for nfsd's mistake to block our implementation of AIO.
It also should be noted that `aio_cancel()` will always return
`AIO_NOTCANCELED` under this implementation. It is possible to implement
aio_cancel by deferring work to taskqs and use `kiocb_set_cancel_fn()`
to set a callback function for cancelling work sent to taskqs, but the
simpler approach is allowed by the specification:
```
Which operations are cancelable is implementation-defined.
```
http://pubs.opengroup.org/onlinepubs/009695399/functions/aio_cancel.html
The only programs on my system that are capable of using `aio_cancel()`
are QEMU, beecrypt and fio use it according to a recursive grep of my
system's `/usr/src/debug`. That suggests that `aio_cancel()` users are
rare. Implementing aio_cancel() is left to a future date when it is
clear that there are consumers that benefit from its implementation to
justify the work.
Lastly, it is important to know that handling of the iovec updates differs
between Illumos and Linux in the implementation of read/write. On Linux,
it is the VFS' responsibility whle on Illumos, it is the filesystem's
responsibility. We take the intermediate solution of copying the iovec
so that the ZFS code can update it like on Solaris while leaving the
originals alone. This imposes some overhead. We could always revisit
this should profiling show that the allocations are a problem.
Signed-off-by: Richard Yao <ryao@gentoo.org>
Signed-off-by: Brian Behlendorf <behlendorf1@llnl.gov>
Closes #223
Closes #2373
2014-08-04 15:09:32 +04:00
|
|
|
}
|
2016-11-15 20:20:46 +03:00
|
|
|
#endif
|
|
|
|
|
2011-11-10 08:47:59 +04:00
|
|
|
#else
|
|
|
|
#error "Unsupported fops->fsync() implementation"
|
|
|
|
#endif
|
2011-01-26 23:03:58 +03:00
|
|
|
|
2019-03-11 19:13:37 +03:00
|
|
|
static inline int
|
|
|
|
zfs_io_flags(struct kiocb *kiocb)
|
|
|
|
{
|
|
|
|
int flags = 0;
|
|
|
|
|
|
|
|
#if defined(IOCB_DSYNC)
|
|
|
|
if (kiocb->ki_flags & IOCB_DSYNC)
|
2019-11-21 20:32:57 +03:00
|
|
|
flags |= O_DSYNC;
|
2019-03-11 19:13:37 +03:00
|
|
|
#endif
|
|
|
|
#if defined(IOCB_SYNC)
|
|
|
|
if (kiocb->ki_flags & IOCB_SYNC)
|
2019-11-21 20:32:57 +03:00
|
|
|
flags |= O_SYNC;
|
2019-03-11 19:13:37 +03:00
|
|
|
#endif
|
|
|
|
#if defined(IOCB_APPEND)
|
|
|
|
if (kiocb->ki_flags & IOCB_APPEND)
|
2019-11-21 20:32:57 +03:00
|
|
|
flags |= O_APPEND;
|
2019-03-11 19:13:37 +03:00
|
|
|
#endif
|
|
|
|
#if defined(IOCB_DIRECT)
|
|
|
|
if (kiocb->ki_flags & IOCB_DIRECT)
|
2019-11-21 20:32:57 +03:00
|
|
|
flags |= O_DIRECT;
|
2019-03-11 19:13:37 +03:00
|
|
|
#endif
|
|
|
|
return (flags);
|
|
|
|
}
|
|
|
|
|
2020-12-18 19:48:26 +03:00
|
|
|
/*
|
|
|
|
* If relatime is enabled, call file_accessed() if zfs_relatime_need_update()
|
|
|
|
* is true. This is needed since datasets with inherited "relatime" property
|
|
|
|
* aren't necessarily mounted with the MNT_RELATIME flag (e.g. after
|
|
|
|
* `zfs set relatime=...`), which is what relatime test in VFS by
|
|
|
|
* relatime_need_update() is based on.
|
|
|
|
*/
|
|
|
|
static inline void
|
|
|
|
zpl_file_accessed(struct file *filp)
|
2011-01-26 23:03:58 +03:00
|
|
|
{
|
2020-12-18 19:48:26 +03:00
|
|
|
struct inode *ip = filp->f_mapping->host;
|
2013-11-15 21:59:09 +04:00
|
|
|
|
2020-12-18 19:48:26 +03:00
|
|
|
if (!IS_NOATIME(ip) && ITOZSB(ip)->z_relatime) {
|
|
|
|
if (zfs_relatime_need_update(ip))
|
|
|
|
file_accessed(filp);
|
|
|
|
} else {
|
|
|
|
file_accessed(filp);
|
|
|
|
}
|
2011-01-26 23:03:58 +03:00
|
|
|
}
|
|
|
|
|
2020-12-18 19:48:26 +03:00
|
|
|
#if defined(HAVE_VFS_RW_ITERATE)
|
Linux AIO Support
nfsd uses do_readv_writev() to implement fops->read and fops->write.
do_readv_writev() will attempt to read/write using fops->aio_read and
fops->aio_write, but it will fallback to fops->read and fops->write when
AIO is not available. However, the fallback will perform a call for each
individual data page. Since our default recordsize is 128KB, sequential
operations on NFS will generate 32 DMU transactions where only 1
transaction was needed. That was unnecessary overhead and we implement
fops->aio_read and fops->aio_write to eliminate it.
ZFS originated in OpenSolaris, where the AIO API is entirely implemented
in userland's libc by intelligently mapping them to VOP_WRITE, VOP_READ
and VOP_FSYNC. Linux implements AIO inside the kernel itself. Linux
filesystems therefore must implement their own AIO logic and nearly all
of them implement fops->aio_write synchronously. Consequently, they do
not implement aio_fsync(). However, since the ZPL works by mapping
Linux's VFS calls to the functions implementing Illumos' VFS operations,
we instead implement AIO in the kernel by mapping the operations to the
VOP_READ, VOP_WRITE and VOP_FSYNC equivalents. We therefore implement
fops->aio_fsync.
One might be inclined to make our fops->aio_write implementation
synchronous to make software that expects this behavior safe. However,
there are several reasons not to do this:
1. Other platforms do not implement aio_write() synchronously and since
the majority of userland software using AIO should be cross platform,
expectations of synchronous behavior should not be a problem.
2. We would hurt the performance of programs that use POSIX interfaces
properly while simultaneously encouraging the creation of more
non-compliant software.
3. The broader community concluded that userland software should be
patched to properly use POSIX interfaces instead of implementing hacks
in filesystems to cater to broken software. This concept is best
described as the O_PONIES debate.
4. Making an asynchronous write synchronous is non sequitur.
Any software dependent on synchronous aio_write behavior will suffer
data loss on ZFSOnLinux in a kernel panic / system failure of at most
zfs_txg_timeout seconds, which by default is 5 seconds. This seems like
a reasonable consequence of using non-compliant software.
It should be noted that this is also a problem in the kernel itself
where nfsd does not pass O_SYNC on files opened with it and instead
relies on a open()/write()/close() to enforce synchronous behavior when
the flush is only guarenteed on last close.
Exporting any filesystem that does not implement AIO via NFS risks data
loss in the event of a kernel panic / system failure when something else
is also accessing the file. Exporting any file system that implements
AIO the way this patch does bears similar risk. However, it seems
reasonable to forgo crippling our AIO implementation in favor of
developing patches to fix this problem in Linux's nfsd for the reasons
stated earlier. In the interim, the risk will remain. Failing to
implement AIO will not change the problem that nfsd created, so there is
no reason for nfsd's mistake to block our implementation of AIO.
It also should be noted that `aio_cancel()` will always return
`AIO_NOTCANCELED` under this implementation. It is possible to implement
aio_cancel by deferring work to taskqs and use `kiocb_set_cancel_fn()`
to set a callback function for cancelling work sent to taskqs, but the
simpler approach is allowed by the specification:
```
Which operations are cancelable is implementation-defined.
```
http://pubs.opengroup.org/onlinepubs/009695399/functions/aio_cancel.html
The only programs on my system that are capable of using `aio_cancel()`
are QEMU, beecrypt and fio use it according to a recursive grep of my
system's `/usr/src/debug`. That suggests that `aio_cancel()` users are
rare. Implementing aio_cancel() is left to a future date when it is
clear that there are consumers that benefit from its implementation to
justify the work.
Lastly, it is important to know that handling of the iovec updates differs
between Illumos and Linux in the implementation of read/write. On Linux,
it is the VFS' responsibility whle on Illumos, it is the filesystem's
responsibility. We take the intermediate solution of copying the iovec
so that the ZFS code can update it like on Solaris while leaving the
originals alone. This imposes some overhead. We could always revisit
this should profiling show that the allocations are a problem.
Signed-off-by: Richard Yao <ryao@gentoo.org>
Signed-off-by: Brian Behlendorf <behlendorf1@llnl.gov>
Closes #223
Closes #2373
2014-08-04 15:09:32 +04:00
|
|
|
|
2020-12-18 19:48:26 +03:00
|
|
|
/*
|
|
|
|
* When HAVE_VFS_IOV_ITER is defined the iov_iter structure supports
|
|
|
|
* iovecs, kvevs, bvecs and pipes, plus all the required interfaces to
|
|
|
|
* manipulate the iov_iter are available. In which case the full iov_iter
|
|
|
|
* can be attached to the uio and correctly handled in the lower layers.
|
|
|
|
* Otherwise, for older kernels extract the iovec and pass it instead.
|
|
|
|
*/
|
|
|
|
static void
|
2021-01-21 08:27:30 +03:00
|
|
|
zpl_uio_init(zfs_uio_t *uio, struct kiocb *kiocb, struct iov_iter *to,
|
2020-12-18 19:48:26 +03:00
|
|
|
loff_t pos, ssize_t count, size_t skip)
|
|
|
|
{
|
|
|
|
#if defined(HAVE_VFS_IOV_ITER)
|
2021-01-21 08:27:30 +03:00
|
|
|
zfs_uio_iov_iter_init(uio, to, pos, count, skip);
|
2021-12-03 07:25:08 +03:00
|
|
|
#else
|
|
|
|
#ifdef HAVE_IOV_ITER_TYPE
|
|
|
|
zfs_uio_iovec_init(uio, to->iov, to->nr_segs, pos,
|
|
|
|
iov_iter_type(to) & ITER_KVEC ? UIO_SYSSPACE : UIO_USERSPACE,
|
|
|
|
count, skip);
|
2020-12-18 19:48:26 +03:00
|
|
|
#else
|
2021-01-21 08:27:30 +03:00
|
|
|
zfs_uio_iovec_init(uio, to->iov, to->nr_segs, pos,
|
2020-12-18 19:48:26 +03:00
|
|
|
to->type & ITER_KVEC ? UIO_SYSSPACE : UIO_USERSPACE,
|
|
|
|
count, skip);
|
|
|
|
#endif
|
2021-12-03 07:25:08 +03:00
|
|
|
#endif
|
Linux AIO Support
nfsd uses do_readv_writev() to implement fops->read and fops->write.
do_readv_writev() will attempt to read/write using fops->aio_read and
fops->aio_write, but it will fallback to fops->read and fops->write when
AIO is not available. However, the fallback will perform a call for each
individual data page. Since our default recordsize is 128KB, sequential
operations on NFS will generate 32 DMU transactions where only 1
transaction was needed. That was unnecessary overhead and we implement
fops->aio_read and fops->aio_write to eliminate it.
ZFS originated in OpenSolaris, where the AIO API is entirely implemented
in userland's libc by intelligently mapping them to VOP_WRITE, VOP_READ
and VOP_FSYNC. Linux implements AIO inside the kernel itself. Linux
filesystems therefore must implement their own AIO logic and nearly all
of them implement fops->aio_write synchronously. Consequently, they do
not implement aio_fsync(). However, since the ZPL works by mapping
Linux's VFS calls to the functions implementing Illumos' VFS operations,
we instead implement AIO in the kernel by mapping the operations to the
VOP_READ, VOP_WRITE and VOP_FSYNC equivalents. We therefore implement
fops->aio_fsync.
One might be inclined to make our fops->aio_write implementation
synchronous to make software that expects this behavior safe. However,
there are several reasons not to do this:
1. Other platforms do not implement aio_write() synchronously and since
the majority of userland software using AIO should be cross platform,
expectations of synchronous behavior should not be a problem.
2. We would hurt the performance of programs that use POSIX interfaces
properly while simultaneously encouraging the creation of more
non-compliant software.
3. The broader community concluded that userland software should be
patched to properly use POSIX interfaces instead of implementing hacks
in filesystems to cater to broken software. This concept is best
described as the O_PONIES debate.
4. Making an asynchronous write synchronous is non sequitur.
Any software dependent on synchronous aio_write behavior will suffer
data loss on ZFSOnLinux in a kernel panic / system failure of at most
zfs_txg_timeout seconds, which by default is 5 seconds. This seems like
a reasonable consequence of using non-compliant software.
It should be noted that this is also a problem in the kernel itself
where nfsd does not pass O_SYNC on files opened with it and instead
relies on a open()/write()/close() to enforce synchronous behavior when
the flush is only guarenteed on last close.
Exporting any filesystem that does not implement AIO via NFS risks data
loss in the event of a kernel panic / system failure when something else
is also accessing the file. Exporting any file system that implements
AIO the way this patch does bears similar risk. However, it seems
reasonable to forgo crippling our AIO implementation in favor of
developing patches to fix this problem in Linux's nfsd for the reasons
stated earlier. In the interim, the risk will remain. Failing to
implement AIO will not change the problem that nfsd created, so there is
no reason for nfsd's mistake to block our implementation of AIO.
It also should be noted that `aio_cancel()` will always return
`AIO_NOTCANCELED` under this implementation. It is possible to implement
aio_cancel by deferring work to taskqs and use `kiocb_set_cancel_fn()`
to set a callback function for cancelling work sent to taskqs, but the
simpler approach is allowed by the specification:
```
Which operations are cancelable is implementation-defined.
```
http://pubs.opengroup.org/onlinepubs/009695399/functions/aio_cancel.html
The only programs on my system that are capable of using `aio_cancel()`
are QEMU, beecrypt and fio use it according to a recursive grep of my
system's `/usr/src/debug`. That suggests that `aio_cancel()` users are
rare. Implementing aio_cancel() is left to a future date when it is
clear that there are consumers that benefit from its implementation to
justify the work.
Lastly, it is important to know that handling of the iovec updates differs
between Illumos and Linux in the implementation of read/write. On Linux,
it is the VFS' responsibility whle on Illumos, it is the filesystem's
responsibility. We take the intermediate solution of copying the iovec
so that the ZFS code can update it like on Solaris while leaving the
originals alone. This imposes some overhead. We could always revisit
this should profiling show that the allocations are a problem.
Signed-off-by: Richard Yao <ryao@gentoo.org>
Signed-off-by: Brian Behlendorf <behlendorf1@llnl.gov>
Closes #223
Closes #2373
2014-08-04 15:09:32 +04:00
|
|
|
}
|
|
|
|
|
|
|
|
static ssize_t
|
2020-12-18 19:48:26 +03:00
|
|
|
zpl_iter_read(struct kiocb *kiocb, struct iov_iter *to)
|
Linux AIO Support
nfsd uses do_readv_writev() to implement fops->read and fops->write.
do_readv_writev() will attempt to read/write using fops->aio_read and
fops->aio_write, but it will fallback to fops->read and fops->write when
AIO is not available. However, the fallback will perform a call for each
individual data page. Since our default recordsize is 128KB, sequential
operations on NFS will generate 32 DMU transactions where only 1
transaction was needed. That was unnecessary overhead and we implement
fops->aio_read and fops->aio_write to eliminate it.
ZFS originated in OpenSolaris, where the AIO API is entirely implemented
in userland's libc by intelligently mapping them to VOP_WRITE, VOP_READ
and VOP_FSYNC. Linux implements AIO inside the kernel itself. Linux
filesystems therefore must implement their own AIO logic and nearly all
of them implement fops->aio_write synchronously. Consequently, they do
not implement aio_fsync(). However, since the ZPL works by mapping
Linux's VFS calls to the functions implementing Illumos' VFS operations,
we instead implement AIO in the kernel by mapping the operations to the
VOP_READ, VOP_WRITE and VOP_FSYNC equivalents. We therefore implement
fops->aio_fsync.
One might be inclined to make our fops->aio_write implementation
synchronous to make software that expects this behavior safe. However,
there are several reasons not to do this:
1. Other platforms do not implement aio_write() synchronously and since
the majority of userland software using AIO should be cross platform,
expectations of synchronous behavior should not be a problem.
2. We would hurt the performance of programs that use POSIX interfaces
properly while simultaneously encouraging the creation of more
non-compliant software.
3. The broader community concluded that userland software should be
patched to properly use POSIX interfaces instead of implementing hacks
in filesystems to cater to broken software. This concept is best
described as the O_PONIES debate.
4. Making an asynchronous write synchronous is non sequitur.
Any software dependent on synchronous aio_write behavior will suffer
data loss on ZFSOnLinux in a kernel panic / system failure of at most
zfs_txg_timeout seconds, which by default is 5 seconds. This seems like
a reasonable consequence of using non-compliant software.
It should be noted that this is also a problem in the kernel itself
where nfsd does not pass O_SYNC on files opened with it and instead
relies on a open()/write()/close() to enforce synchronous behavior when
the flush is only guarenteed on last close.
Exporting any filesystem that does not implement AIO via NFS risks data
loss in the event of a kernel panic / system failure when something else
is also accessing the file. Exporting any file system that implements
AIO the way this patch does bears similar risk. However, it seems
reasonable to forgo crippling our AIO implementation in favor of
developing patches to fix this problem in Linux's nfsd for the reasons
stated earlier. In the interim, the risk will remain. Failing to
implement AIO will not change the problem that nfsd created, so there is
no reason for nfsd's mistake to block our implementation of AIO.
It also should be noted that `aio_cancel()` will always return
`AIO_NOTCANCELED` under this implementation. It is possible to implement
aio_cancel by deferring work to taskqs and use `kiocb_set_cancel_fn()`
to set a callback function for cancelling work sent to taskqs, but the
simpler approach is allowed by the specification:
```
Which operations are cancelable is implementation-defined.
```
http://pubs.opengroup.org/onlinepubs/009695399/functions/aio_cancel.html
The only programs on my system that are capable of using `aio_cancel()`
are QEMU, beecrypt and fio use it according to a recursive grep of my
system's `/usr/src/debug`. That suggests that `aio_cancel()` users are
rare. Implementing aio_cancel() is left to a future date when it is
clear that there are consumers that benefit from its implementation to
justify the work.
Lastly, it is important to know that handling of the iovec updates differs
between Illumos and Linux in the implementation of read/write. On Linux,
it is the VFS' responsibility whle on Illumos, it is the filesystem's
responsibility. We take the intermediate solution of copying the iovec
so that the ZFS code can update it like on Solaris while leaving the
originals alone. This imposes some overhead. We could always revisit
this should profiling show that the allocations are a problem.
Signed-off-by: Richard Yao <ryao@gentoo.org>
Signed-off-by: Brian Behlendorf <behlendorf1@llnl.gov>
Closes #223
Closes #2373
2014-08-04 15:09:32 +04:00
|
|
|
{
|
|
|
|
cred_t *cr = CRED();
|
2020-12-18 19:48:26 +03:00
|
|
|
fstrans_cookie_t cookie;
|
Linux AIO Support
nfsd uses do_readv_writev() to implement fops->read and fops->write.
do_readv_writev() will attempt to read/write using fops->aio_read and
fops->aio_write, but it will fallback to fops->read and fops->write when
AIO is not available. However, the fallback will perform a call for each
individual data page. Since our default recordsize is 128KB, sequential
operations on NFS will generate 32 DMU transactions where only 1
transaction was needed. That was unnecessary overhead and we implement
fops->aio_read and fops->aio_write to eliminate it.
ZFS originated in OpenSolaris, where the AIO API is entirely implemented
in userland's libc by intelligently mapping them to VOP_WRITE, VOP_READ
and VOP_FSYNC. Linux implements AIO inside the kernel itself. Linux
filesystems therefore must implement their own AIO logic and nearly all
of them implement fops->aio_write synchronously. Consequently, they do
not implement aio_fsync(). However, since the ZPL works by mapping
Linux's VFS calls to the functions implementing Illumos' VFS operations,
we instead implement AIO in the kernel by mapping the operations to the
VOP_READ, VOP_WRITE and VOP_FSYNC equivalents. We therefore implement
fops->aio_fsync.
One might be inclined to make our fops->aio_write implementation
synchronous to make software that expects this behavior safe. However,
there are several reasons not to do this:
1. Other platforms do not implement aio_write() synchronously and since
the majority of userland software using AIO should be cross platform,
expectations of synchronous behavior should not be a problem.
2. We would hurt the performance of programs that use POSIX interfaces
properly while simultaneously encouraging the creation of more
non-compliant software.
3. The broader community concluded that userland software should be
patched to properly use POSIX interfaces instead of implementing hacks
in filesystems to cater to broken software. This concept is best
described as the O_PONIES debate.
4. Making an asynchronous write synchronous is non sequitur.
Any software dependent on synchronous aio_write behavior will suffer
data loss on ZFSOnLinux in a kernel panic / system failure of at most
zfs_txg_timeout seconds, which by default is 5 seconds. This seems like
a reasonable consequence of using non-compliant software.
It should be noted that this is also a problem in the kernel itself
where nfsd does not pass O_SYNC on files opened with it and instead
relies on a open()/write()/close() to enforce synchronous behavior when
the flush is only guarenteed on last close.
Exporting any filesystem that does not implement AIO via NFS risks data
loss in the event of a kernel panic / system failure when something else
is also accessing the file. Exporting any file system that implements
AIO the way this patch does bears similar risk. However, it seems
reasonable to forgo crippling our AIO implementation in favor of
developing patches to fix this problem in Linux's nfsd for the reasons
stated earlier. In the interim, the risk will remain. Failing to
implement AIO will not change the problem that nfsd created, so there is
no reason for nfsd's mistake to block our implementation of AIO.
It also should be noted that `aio_cancel()` will always return
`AIO_NOTCANCELED` under this implementation. It is possible to implement
aio_cancel by deferring work to taskqs and use `kiocb_set_cancel_fn()`
to set a callback function for cancelling work sent to taskqs, but the
simpler approach is allowed by the specification:
```
Which operations are cancelable is implementation-defined.
```
http://pubs.opengroup.org/onlinepubs/009695399/functions/aio_cancel.html
The only programs on my system that are capable of using `aio_cancel()`
are QEMU, beecrypt and fio use it according to a recursive grep of my
system's `/usr/src/debug`. That suggests that `aio_cancel()` users are
rare. Implementing aio_cancel() is left to a future date when it is
clear that there are consumers that benefit from its implementation to
justify the work.
Lastly, it is important to know that handling of the iovec updates differs
between Illumos and Linux in the implementation of read/write. On Linux,
it is the VFS' responsibility whle on Illumos, it is the filesystem's
responsibility. We take the intermediate solution of copying the iovec
so that the ZFS code can update it like on Solaris while leaving the
originals alone. This imposes some overhead. We could always revisit
this should profiling show that the allocations are a problem.
Signed-off-by: Richard Yao <ryao@gentoo.org>
Signed-off-by: Brian Behlendorf <behlendorf1@llnl.gov>
Closes #223
Closes #2373
2014-08-04 15:09:32 +04:00
|
|
|
struct file *filp = kiocb->ki_filp;
|
2020-12-18 19:48:26 +03:00
|
|
|
ssize_t count = iov_iter_count(to);
|
2021-01-21 08:27:30 +03:00
|
|
|
zfs_uio_t uio;
|
2020-12-18 19:48:26 +03:00
|
|
|
|
|
|
|
zpl_uio_init(&uio, kiocb, to, kiocb->ki_pos, count, 0);
|
Linux AIO Support
nfsd uses do_readv_writev() to implement fops->read and fops->write.
do_readv_writev() will attempt to read/write using fops->aio_read and
fops->aio_write, but it will fallback to fops->read and fops->write when
AIO is not available. However, the fallback will perform a call for each
individual data page. Since our default recordsize is 128KB, sequential
operations on NFS will generate 32 DMU transactions where only 1
transaction was needed. That was unnecessary overhead and we implement
fops->aio_read and fops->aio_write to eliminate it.
ZFS originated in OpenSolaris, where the AIO API is entirely implemented
in userland's libc by intelligently mapping them to VOP_WRITE, VOP_READ
and VOP_FSYNC. Linux implements AIO inside the kernel itself. Linux
filesystems therefore must implement their own AIO logic and nearly all
of them implement fops->aio_write synchronously. Consequently, they do
not implement aio_fsync(). However, since the ZPL works by mapping
Linux's VFS calls to the functions implementing Illumos' VFS operations,
we instead implement AIO in the kernel by mapping the operations to the
VOP_READ, VOP_WRITE and VOP_FSYNC equivalents. We therefore implement
fops->aio_fsync.
One might be inclined to make our fops->aio_write implementation
synchronous to make software that expects this behavior safe. However,
there are several reasons not to do this:
1. Other platforms do not implement aio_write() synchronously and since
the majority of userland software using AIO should be cross platform,
expectations of synchronous behavior should not be a problem.
2. We would hurt the performance of programs that use POSIX interfaces
properly while simultaneously encouraging the creation of more
non-compliant software.
3. The broader community concluded that userland software should be
patched to properly use POSIX interfaces instead of implementing hacks
in filesystems to cater to broken software. This concept is best
described as the O_PONIES debate.
4. Making an asynchronous write synchronous is non sequitur.
Any software dependent on synchronous aio_write behavior will suffer
data loss on ZFSOnLinux in a kernel panic / system failure of at most
zfs_txg_timeout seconds, which by default is 5 seconds. This seems like
a reasonable consequence of using non-compliant software.
It should be noted that this is also a problem in the kernel itself
where nfsd does not pass O_SYNC on files opened with it and instead
relies on a open()/write()/close() to enforce synchronous behavior when
the flush is only guarenteed on last close.
Exporting any filesystem that does not implement AIO via NFS risks data
loss in the event of a kernel panic / system failure when something else
is also accessing the file. Exporting any file system that implements
AIO the way this patch does bears similar risk. However, it seems
reasonable to forgo crippling our AIO implementation in favor of
developing patches to fix this problem in Linux's nfsd for the reasons
stated earlier. In the interim, the risk will remain. Failing to
implement AIO will not change the problem that nfsd created, so there is
no reason for nfsd's mistake to block our implementation of AIO.
It also should be noted that `aio_cancel()` will always return
`AIO_NOTCANCELED` under this implementation. It is possible to implement
aio_cancel by deferring work to taskqs and use `kiocb_set_cancel_fn()`
to set a callback function for cancelling work sent to taskqs, but the
simpler approach is allowed by the specification:
```
Which operations are cancelable is implementation-defined.
```
http://pubs.opengroup.org/onlinepubs/009695399/functions/aio_cancel.html
The only programs on my system that are capable of using `aio_cancel()`
are QEMU, beecrypt and fio use it according to a recursive grep of my
system's `/usr/src/debug`. That suggests that `aio_cancel()` users are
rare. Implementing aio_cancel() is left to a future date when it is
clear that there are consumers that benefit from its implementation to
justify the work.
Lastly, it is important to know that handling of the iovec updates differs
between Illumos and Linux in the implementation of read/write. On Linux,
it is the VFS' responsibility whle on Illumos, it is the filesystem's
responsibility. We take the intermediate solution of copying the iovec
so that the ZFS code can update it like on Solaris while leaving the
originals alone. This imposes some overhead. We could always revisit
this should profiling show that the allocations are a problem.
Signed-off-by: Richard Yao <ryao@gentoo.org>
Signed-off-by: Brian Behlendorf <behlendorf1@llnl.gov>
Closes #223
Closes #2373
2014-08-04 15:09:32 +04:00
|
|
|
|
|
|
|
crhold(cr);
|
2020-12-18 19:48:26 +03:00
|
|
|
cookie = spl_fstrans_mark();
|
|
|
|
|
|
|
|
int error = -zfs_read(ITOZ(filp->f_mapping->host), &uio,
|
|
|
|
filp->f_flags | zfs_io_flags(kiocb), cr);
|
|
|
|
|
|
|
|
spl_fstrans_unmark(cookie);
|
Linux AIO Support
nfsd uses do_readv_writev() to implement fops->read and fops->write.
do_readv_writev() will attempt to read/write using fops->aio_read and
fops->aio_write, but it will fallback to fops->read and fops->write when
AIO is not available. However, the fallback will perform a call for each
individual data page. Since our default recordsize is 128KB, sequential
operations on NFS will generate 32 DMU transactions where only 1
transaction was needed. That was unnecessary overhead and we implement
fops->aio_read and fops->aio_write to eliminate it.
ZFS originated in OpenSolaris, where the AIO API is entirely implemented
in userland's libc by intelligently mapping them to VOP_WRITE, VOP_READ
and VOP_FSYNC. Linux implements AIO inside the kernel itself. Linux
filesystems therefore must implement their own AIO logic and nearly all
of them implement fops->aio_write synchronously. Consequently, they do
not implement aio_fsync(). However, since the ZPL works by mapping
Linux's VFS calls to the functions implementing Illumos' VFS operations,
we instead implement AIO in the kernel by mapping the operations to the
VOP_READ, VOP_WRITE and VOP_FSYNC equivalents. We therefore implement
fops->aio_fsync.
One might be inclined to make our fops->aio_write implementation
synchronous to make software that expects this behavior safe. However,
there are several reasons not to do this:
1. Other platforms do not implement aio_write() synchronously and since
the majority of userland software using AIO should be cross platform,
expectations of synchronous behavior should not be a problem.
2. We would hurt the performance of programs that use POSIX interfaces
properly while simultaneously encouraging the creation of more
non-compliant software.
3. The broader community concluded that userland software should be
patched to properly use POSIX interfaces instead of implementing hacks
in filesystems to cater to broken software. This concept is best
described as the O_PONIES debate.
4. Making an asynchronous write synchronous is non sequitur.
Any software dependent on synchronous aio_write behavior will suffer
data loss on ZFSOnLinux in a kernel panic / system failure of at most
zfs_txg_timeout seconds, which by default is 5 seconds. This seems like
a reasonable consequence of using non-compliant software.
It should be noted that this is also a problem in the kernel itself
where nfsd does not pass O_SYNC on files opened with it and instead
relies on a open()/write()/close() to enforce synchronous behavior when
the flush is only guarenteed on last close.
Exporting any filesystem that does not implement AIO via NFS risks data
loss in the event of a kernel panic / system failure when something else
is also accessing the file. Exporting any file system that implements
AIO the way this patch does bears similar risk. However, it seems
reasonable to forgo crippling our AIO implementation in favor of
developing patches to fix this problem in Linux's nfsd for the reasons
stated earlier. In the interim, the risk will remain. Failing to
implement AIO will not change the problem that nfsd created, so there is
no reason for nfsd's mistake to block our implementation of AIO.
It also should be noted that `aio_cancel()` will always return
`AIO_NOTCANCELED` under this implementation. It is possible to implement
aio_cancel by deferring work to taskqs and use `kiocb_set_cancel_fn()`
to set a callback function for cancelling work sent to taskqs, but the
simpler approach is allowed by the specification:
```
Which operations are cancelable is implementation-defined.
```
http://pubs.opengroup.org/onlinepubs/009695399/functions/aio_cancel.html
The only programs on my system that are capable of using `aio_cancel()`
are QEMU, beecrypt and fio use it according to a recursive grep of my
system's `/usr/src/debug`. That suggests that `aio_cancel()` users are
rare. Implementing aio_cancel() is left to a future date when it is
clear that there are consumers that benefit from its implementation to
justify the work.
Lastly, it is important to know that handling of the iovec updates differs
between Illumos and Linux in the implementation of read/write. On Linux,
it is the VFS' responsibility whle on Illumos, it is the filesystem's
responsibility. We take the intermediate solution of copying the iovec
so that the ZFS code can update it like on Solaris while leaving the
originals alone. This imposes some overhead. We could always revisit
this should profiling show that the allocations are a problem.
Signed-off-by: Richard Yao <ryao@gentoo.org>
Signed-off-by: Brian Behlendorf <behlendorf1@llnl.gov>
Closes #223
Closes #2373
2014-08-04 15:09:32 +04:00
|
|
|
crfree(cr);
|
|
|
|
|
2020-12-18 19:48:26 +03:00
|
|
|
if (error < 0)
|
|
|
|
return (error);
|
|
|
|
|
|
|
|
ssize_t read = count - uio.uio_resid;
|
|
|
|
kiocb->ki_pos += read;
|
|
|
|
|
|
|
|
zpl_file_accessed(filp);
|
|
|
|
|
2011-01-26 23:03:58 +03:00
|
|
|
return (read);
|
|
|
|
}
|
|
|
|
|
2020-12-18 19:48:26 +03:00
|
|
|
static inline ssize_t
|
|
|
|
zpl_generic_write_checks(struct kiocb *kiocb, struct iov_iter *from,
|
|
|
|
size_t *countp)
|
2015-05-12 02:26:18 +03:00
|
|
|
{
|
2020-12-18 19:48:26 +03:00
|
|
|
#ifdef HAVE_GENERIC_WRITE_CHECKS_KIOCB
|
|
|
|
ssize_t ret = generic_write_checks(kiocb, from);
|
|
|
|
if (ret <= 0)
|
|
|
|
return (ret);
|
|
|
|
|
|
|
|
*countp = ret;
|
2015-05-12 02:26:18 +03:00
|
|
|
#else
|
2020-12-18 19:48:26 +03:00
|
|
|
struct file *file = kiocb->ki_filp;
|
|
|
|
struct address_space *mapping = file->f_mapping;
|
|
|
|
struct inode *ip = mapping->host;
|
|
|
|
int isblk = S_ISBLK(ip->i_mode);
|
2017-01-27 21:43:39 +03:00
|
|
|
|
2020-12-18 19:48:26 +03:00
|
|
|
*countp = iov_iter_count(from);
|
|
|
|
ssize_t ret = generic_write_checks(file, &kiocb->ki_pos, countp, isblk);
|
2017-01-27 21:43:39 +03:00
|
|
|
if (ret)
|
|
|
|
return (ret);
|
2020-12-18 19:48:26 +03:00
|
|
|
#endif
|
2017-01-27 21:43:39 +03:00
|
|
|
|
2020-12-18 19:48:26 +03:00
|
|
|
return (0);
|
2015-05-12 02:26:18 +03:00
|
|
|
}
|
|
|
|
|
2015-07-30 17:24:36 +03:00
|
|
|
static ssize_t
|
2020-12-18 19:48:26 +03:00
|
|
|
zpl_iter_write(struct kiocb *kiocb, struct iov_iter *from)
|
2011-01-26 23:03:58 +03:00
|
|
|
{
|
2020-12-18 19:48:26 +03:00
|
|
|
cred_t *cr = CRED();
|
2015-03-31 06:43:29 +03:00
|
|
|
fstrans_cookie_t cookie;
|
2020-12-18 19:48:26 +03:00
|
|
|
struct file *filp = kiocb->ki_filp;
|
|
|
|
struct inode *ip = filp->f_mapping->host;
|
2021-01-21 08:27:30 +03:00
|
|
|
zfs_uio_t uio;
|
2020-12-20 20:50:13 +03:00
|
|
|
size_t count = 0;
|
2020-12-18 19:48:26 +03:00
|
|
|
ssize_t ret;
|
2011-01-26 23:03:58 +03:00
|
|
|
|
2020-12-18 19:48:26 +03:00
|
|
|
ret = zpl_generic_write_checks(kiocb, from, &count);
|
|
|
|
if (ret)
|
|
|
|
return (ret);
|
2015-02-20 21:28:25 +03:00
|
|
|
|
2020-12-18 19:48:26 +03:00
|
|
|
zpl_uio_init(&uio, kiocb, from, kiocb->ki_pos, count, from->iov_offset);
|
2011-01-26 23:03:58 +03:00
|
|
|
|
2020-12-18 19:48:26 +03:00
|
|
|
crhold(cr);
|
2015-03-31 06:43:29 +03:00
|
|
|
cookie = spl_fstrans_mark();
|
2020-12-18 19:48:26 +03:00
|
|
|
|
|
|
|
int error = -zfs_write(ITOZ(ip), &uio,
|
|
|
|
filp->f_flags | zfs_io_flags(kiocb), cr);
|
|
|
|
|
2015-03-31 06:43:29 +03:00
|
|
|
spl_fstrans_unmark(cookie);
|
2020-12-18 19:48:26 +03:00
|
|
|
crfree(cr);
|
|
|
|
|
2011-01-26 23:03:58 +03:00
|
|
|
if (error < 0)
|
|
|
|
return (error);
|
|
|
|
|
2020-12-18 19:48:26 +03:00
|
|
|
ssize_t wrote = count - uio.uio_resid;
|
|
|
|
kiocb->ki_pos += wrote;
|
|
|
|
|
2013-11-15 21:59:09 +04:00
|
|
|
return (wrote);
|
2011-01-26 23:03:58 +03:00
|
|
|
}
|
2017-01-27 21:43:39 +03:00
|
|
|
|
2020-12-18 19:48:26 +03:00
|
|
|
#else /* !HAVE_VFS_RW_ITERATE */
|
2011-01-26 23:03:58 +03:00
|
|
|
|
Linux AIO Support
nfsd uses do_readv_writev() to implement fops->read and fops->write.
do_readv_writev() will attempt to read/write using fops->aio_read and
fops->aio_write, but it will fallback to fops->read and fops->write when
AIO is not available. However, the fallback will perform a call for each
individual data page. Since our default recordsize is 128KB, sequential
operations on NFS will generate 32 DMU transactions where only 1
transaction was needed. That was unnecessary overhead and we implement
fops->aio_read and fops->aio_write to eliminate it.
ZFS originated in OpenSolaris, where the AIO API is entirely implemented
in userland's libc by intelligently mapping them to VOP_WRITE, VOP_READ
and VOP_FSYNC. Linux implements AIO inside the kernel itself. Linux
filesystems therefore must implement their own AIO logic and nearly all
of them implement fops->aio_write synchronously. Consequently, they do
not implement aio_fsync(). However, since the ZPL works by mapping
Linux's VFS calls to the functions implementing Illumos' VFS operations,
we instead implement AIO in the kernel by mapping the operations to the
VOP_READ, VOP_WRITE and VOP_FSYNC equivalents. We therefore implement
fops->aio_fsync.
One might be inclined to make our fops->aio_write implementation
synchronous to make software that expects this behavior safe. However,
there are several reasons not to do this:
1. Other platforms do not implement aio_write() synchronously and since
the majority of userland software using AIO should be cross platform,
expectations of synchronous behavior should not be a problem.
2. We would hurt the performance of programs that use POSIX interfaces
properly while simultaneously encouraging the creation of more
non-compliant software.
3. The broader community concluded that userland software should be
patched to properly use POSIX interfaces instead of implementing hacks
in filesystems to cater to broken software. This concept is best
described as the O_PONIES debate.
4. Making an asynchronous write synchronous is non sequitur.
Any software dependent on synchronous aio_write behavior will suffer
data loss on ZFSOnLinux in a kernel panic / system failure of at most
zfs_txg_timeout seconds, which by default is 5 seconds. This seems like
a reasonable consequence of using non-compliant software.
It should be noted that this is also a problem in the kernel itself
where nfsd does not pass O_SYNC on files opened with it and instead
relies on a open()/write()/close() to enforce synchronous behavior when
the flush is only guarenteed on last close.
Exporting any filesystem that does not implement AIO via NFS risks data
loss in the event of a kernel panic / system failure when something else
is also accessing the file. Exporting any file system that implements
AIO the way this patch does bears similar risk. However, it seems
reasonable to forgo crippling our AIO implementation in favor of
developing patches to fix this problem in Linux's nfsd for the reasons
stated earlier. In the interim, the risk will remain. Failing to
implement AIO will not change the problem that nfsd created, so there is
no reason for nfsd's mistake to block our implementation of AIO.
It also should be noted that `aio_cancel()` will always return
`AIO_NOTCANCELED` under this implementation. It is possible to implement
aio_cancel by deferring work to taskqs and use `kiocb_set_cancel_fn()`
to set a callback function for cancelling work sent to taskqs, but the
simpler approach is allowed by the specification:
```
Which operations are cancelable is implementation-defined.
```
http://pubs.opengroup.org/onlinepubs/009695399/functions/aio_cancel.html
The only programs on my system that are capable of using `aio_cancel()`
are QEMU, beecrypt and fio use it according to a recursive grep of my
system's `/usr/src/debug`. That suggests that `aio_cancel()` users are
rare. Implementing aio_cancel() is left to a future date when it is
clear that there are consumers that benefit from its implementation to
justify the work.
Lastly, it is important to know that handling of the iovec updates differs
between Illumos and Linux in the implementation of read/write. On Linux,
it is the VFS' responsibility whle on Illumos, it is the filesystem's
responsibility. We take the intermediate solution of copying the iovec
so that the ZFS code can update it like on Solaris while leaving the
originals alone. This imposes some overhead. We could always revisit
this should profiling show that the allocations are a problem.
Signed-off-by: Richard Yao <ryao@gentoo.org>
Signed-off-by: Brian Behlendorf <behlendorf1@llnl.gov>
Closes #223
Closes #2373
2014-08-04 15:09:32 +04:00
|
|
|
static ssize_t
|
2020-12-18 19:48:26 +03:00
|
|
|
zpl_aio_read(struct kiocb *kiocb, const struct iovec *iov,
|
|
|
|
unsigned long nr_segs, loff_t pos)
|
Linux AIO Support
nfsd uses do_readv_writev() to implement fops->read and fops->write.
do_readv_writev() will attempt to read/write using fops->aio_read and
fops->aio_write, but it will fallback to fops->read and fops->write when
AIO is not available. However, the fallback will perform a call for each
individual data page. Since our default recordsize is 128KB, sequential
operations on NFS will generate 32 DMU transactions where only 1
transaction was needed. That was unnecessary overhead and we implement
fops->aio_read and fops->aio_write to eliminate it.
ZFS originated in OpenSolaris, where the AIO API is entirely implemented
in userland's libc by intelligently mapping them to VOP_WRITE, VOP_READ
and VOP_FSYNC. Linux implements AIO inside the kernel itself. Linux
filesystems therefore must implement their own AIO logic and nearly all
of them implement fops->aio_write synchronously. Consequently, they do
not implement aio_fsync(). However, since the ZPL works by mapping
Linux's VFS calls to the functions implementing Illumos' VFS operations,
we instead implement AIO in the kernel by mapping the operations to the
VOP_READ, VOP_WRITE and VOP_FSYNC equivalents. We therefore implement
fops->aio_fsync.
One might be inclined to make our fops->aio_write implementation
synchronous to make software that expects this behavior safe. However,
there are several reasons not to do this:
1. Other platforms do not implement aio_write() synchronously and since
the majority of userland software using AIO should be cross platform,
expectations of synchronous behavior should not be a problem.
2. We would hurt the performance of programs that use POSIX interfaces
properly while simultaneously encouraging the creation of more
non-compliant software.
3. The broader community concluded that userland software should be
patched to properly use POSIX interfaces instead of implementing hacks
in filesystems to cater to broken software. This concept is best
described as the O_PONIES debate.
4. Making an asynchronous write synchronous is non sequitur.
Any software dependent on synchronous aio_write behavior will suffer
data loss on ZFSOnLinux in a kernel panic / system failure of at most
zfs_txg_timeout seconds, which by default is 5 seconds. This seems like
a reasonable consequence of using non-compliant software.
It should be noted that this is also a problem in the kernel itself
where nfsd does not pass O_SYNC on files opened with it and instead
relies on a open()/write()/close() to enforce synchronous behavior when
the flush is only guarenteed on last close.
Exporting any filesystem that does not implement AIO via NFS risks data
loss in the event of a kernel panic / system failure when something else
is also accessing the file. Exporting any file system that implements
AIO the way this patch does bears similar risk. However, it seems
reasonable to forgo crippling our AIO implementation in favor of
developing patches to fix this problem in Linux's nfsd for the reasons
stated earlier. In the interim, the risk will remain. Failing to
implement AIO will not change the problem that nfsd created, so there is
no reason for nfsd's mistake to block our implementation of AIO.
It also should be noted that `aio_cancel()` will always return
`AIO_NOTCANCELED` under this implementation. It is possible to implement
aio_cancel by deferring work to taskqs and use `kiocb_set_cancel_fn()`
to set a callback function for cancelling work sent to taskqs, but the
simpler approach is allowed by the specification:
```
Which operations are cancelable is implementation-defined.
```
http://pubs.opengroup.org/onlinepubs/009695399/functions/aio_cancel.html
The only programs on my system that are capable of using `aio_cancel()`
are QEMU, beecrypt and fio use it according to a recursive grep of my
system's `/usr/src/debug`. That suggests that `aio_cancel()` users are
rare. Implementing aio_cancel() is left to a future date when it is
clear that there are consumers that benefit from its implementation to
justify the work.
Lastly, it is important to know that handling of the iovec updates differs
between Illumos and Linux in the implementation of read/write. On Linux,
it is the VFS' responsibility whle on Illumos, it is the filesystem's
responsibility. We take the intermediate solution of copying the iovec
so that the ZFS code can update it like on Solaris while leaving the
originals alone. This imposes some overhead. We could always revisit
this should profiling show that the allocations are a problem.
Signed-off-by: Richard Yao <ryao@gentoo.org>
Signed-off-by: Brian Behlendorf <behlendorf1@llnl.gov>
Closes #223
Closes #2373
2014-08-04 15:09:32 +04:00
|
|
|
{
|
|
|
|
cred_t *cr = CRED();
|
2020-12-18 19:48:26 +03:00
|
|
|
fstrans_cookie_t cookie;
|
Linux AIO Support
nfsd uses do_readv_writev() to implement fops->read and fops->write.
do_readv_writev() will attempt to read/write using fops->aio_read and
fops->aio_write, but it will fallback to fops->read and fops->write when
AIO is not available. However, the fallback will perform a call for each
individual data page. Since our default recordsize is 128KB, sequential
operations on NFS will generate 32 DMU transactions where only 1
transaction was needed. That was unnecessary overhead and we implement
fops->aio_read and fops->aio_write to eliminate it.
ZFS originated in OpenSolaris, where the AIO API is entirely implemented
in userland's libc by intelligently mapping them to VOP_WRITE, VOP_READ
and VOP_FSYNC. Linux implements AIO inside the kernel itself. Linux
filesystems therefore must implement their own AIO logic and nearly all
of them implement fops->aio_write synchronously. Consequently, they do
not implement aio_fsync(). However, since the ZPL works by mapping
Linux's VFS calls to the functions implementing Illumos' VFS operations,
we instead implement AIO in the kernel by mapping the operations to the
VOP_READ, VOP_WRITE and VOP_FSYNC equivalents. We therefore implement
fops->aio_fsync.
One might be inclined to make our fops->aio_write implementation
synchronous to make software that expects this behavior safe. However,
there are several reasons not to do this:
1. Other platforms do not implement aio_write() synchronously and since
the majority of userland software using AIO should be cross platform,
expectations of synchronous behavior should not be a problem.
2. We would hurt the performance of programs that use POSIX interfaces
properly while simultaneously encouraging the creation of more
non-compliant software.
3. The broader community concluded that userland software should be
patched to properly use POSIX interfaces instead of implementing hacks
in filesystems to cater to broken software. This concept is best
described as the O_PONIES debate.
4. Making an asynchronous write synchronous is non sequitur.
Any software dependent on synchronous aio_write behavior will suffer
data loss on ZFSOnLinux in a kernel panic / system failure of at most
zfs_txg_timeout seconds, which by default is 5 seconds. This seems like
a reasonable consequence of using non-compliant software.
It should be noted that this is also a problem in the kernel itself
where nfsd does not pass O_SYNC on files opened with it and instead
relies on a open()/write()/close() to enforce synchronous behavior when
the flush is only guarenteed on last close.
Exporting any filesystem that does not implement AIO via NFS risks data
loss in the event of a kernel panic / system failure when something else
is also accessing the file. Exporting any file system that implements
AIO the way this patch does bears similar risk. However, it seems
reasonable to forgo crippling our AIO implementation in favor of
developing patches to fix this problem in Linux's nfsd for the reasons
stated earlier. In the interim, the risk will remain. Failing to
implement AIO will not change the problem that nfsd created, so there is
no reason for nfsd's mistake to block our implementation of AIO.
It also should be noted that `aio_cancel()` will always return
`AIO_NOTCANCELED` under this implementation. It is possible to implement
aio_cancel by deferring work to taskqs and use `kiocb_set_cancel_fn()`
to set a callback function for cancelling work sent to taskqs, but the
simpler approach is allowed by the specification:
```
Which operations are cancelable is implementation-defined.
```
http://pubs.opengroup.org/onlinepubs/009695399/functions/aio_cancel.html
The only programs on my system that are capable of using `aio_cancel()`
are QEMU, beecrypt and fio use it according to a recursive grep of my
system's `/usr/src/debug`. That suggests that `aio_cancel()` users are
rare. Implementing aio_cancel() is left to a future date when it is
clear that there are consumers that benefit from its implementation to
justify the work.
Lastly, it is important to know that handling of the iovec updates differs
between Illumos and Linux in the implementation of read/write. On Linux,
it is the VFS' responsibility whle on Illumos, it is the filesystem's
responsibility. We take the intermediate solution of copying the iovec
so that the ZFS code can update it like on Solaris while leaving the
originals alone. This imposes some overhead. We could always revisit
this should profiling show that the allocations are a problem.
Signed-off-by: Richard Yao <ryao@gentoo.org>
Signed-off-by: Brian Behlendorf <behlendorf1@llnl.gov>
Closes #223
Closes #2373
2014-08-04 15:09:32 +04:00
|
|
|
struct file *filp = kiocb->ki_filp;
|
2017-01-27 21:43:39 +03:00
|
|
|
size_t count;
|
2015-07-30 17:24:36 +03:00
|
|
|
ssize_t ret;
|
2017-01-27 21:43:39 +03:00
|
|
|
|
2020-12-18 19:48:26 +03:00
|
|
|
ret = generic_segment_checks(iov, &nr_segs, &count, VERIFY_WRITE);
|
2017-02-02 20:43:42 +03:00
|
|
|
if (ret)
|
|
|
|
return (ret);
|
2017-01-27 21:43:39 +03:00
|
|
|
|
2021-01-21 08:27:30 +03:00
|
|
|
zfs_uio_t uio;
|
|
|
|
zfs_uio_iovec_init(&uio, iov, nr_segs, kiocb->ki_pos, UIO_USERSPACE,
|
2020-12-18 19:48:26 +03:00
|
|
|
count, 0);
|
2017-01-27 21:43:39 +03:00
|
|
|
|
2020-12-18 19:48:26 +03:00
|
|
|
crhold(cr);
|
|
|
|
cookie = spl_fstrans_mark();
|
|
|
|
|
|
|
|
int error = -zfs_read(ITOZ(filp->f_mapping->host), &uio,
|
|
|
|
filp->f_flags | zfs_io_flags(kiocb), cr);
|
|
|
|
|
|
|
|
spl_fstrans_unmark(cookie);
|
|
|
|
crfree(cr);
|
|
|
|
|
|
|
|
if (error < 0)
|
|
|
|
return (error);
|
|
|
|
|
|
|
|
ssize_t read = count - uio.uio_resid;
|
|
|
|
kiocb->ki_pos += read;
|
2017-01-27 21:43:39 +03:00
|
|
|
|
2020-12-18 19:48:26 +03:00
|
|
|
zpl_file_accessed(filp);
|
|
|
|
|
|
|
|
return (read);
|
2015-05-12 02:26:18 +03:00
|
|
|
}
|
2020-12-18 19:48:26 +03:00
|
|
|
|
2015-05-12 02:26:18 +03:00
|
|
|
static ssize_t
|
2020-12-18 19:48:26 +03:00
|
|
|
zpl_aio_write(struct kiocb *kiocb, const struct iovec *iov,
|
2015-05-12 02:26:18 +03:00
|
|
|
unsigned long nr_segs, loff_t pos)
|
|
|
|
{
|
2020-12-18 19:48:26 +03:00
|
|
|
cred_t *cr = CRED();
|
|
|
|
fstrans_cookie_t cookie;
|
|
|
|
struct file *filp = kiocb->ki_filp;
|
|
|
|
struct inode *ip = filp->f_mapping->host;
|
2017-01-27 21:43:39 +03:00
|
|
|
size_t count;
|
|
|
|
ssize_t ret;
|
|
|
|
|
2020-12-18 19:48:26 +03:00
|
|
|
ret = generic_segment_checks(iov, &nr_segs, &count, VERIFY_READ);
|
2017-01-27 21:43:39 +03:00
|
|
|
if (ret)
|
|
|
|
return (ret);
|
|
|
|
|
2020-12-18 19:48:26 +03:00
|
|
|
ret = generic_write_checks(filp, &pos, &count, S_ISBLK(ip->i_mode));
|
2017-01-27 21:43:39 +03:00
|
|
|
if (ret)
|
|
|
|
return (ret);
|
|
|
|
|
2022-04-27 22:56:17 +03:00
|
|
|
kiocb->ki_pos = pos;
|
|
|
|
|
2021-01-21 08:27:30 +03:00
|
|
|
zfs_uio_t uio;
|
|
|
|
zfs_uio_iovec_init(&uio, iov, nr_segs, kiocb->ki_pos, UIO_USERSPACE,
|
2020-12-18 19:48:26 +03:00
|
|
|
count, 0);
|
|
|
|
|
|
|
|
crhold(cr);
|
|
|
|
cookie = spl_fstrans_mark();
|
|
|
|
|
|
|
|
int error = -zfs_write(ITOZ(ip), &uio,
|
|
|
|
filp->f_flags | zfs_io_flags(kiocb), cr);
|
|
|
|
|
|
|
|
spl_fstrans_unmark(cookie);
|
|
|
|
crfree(cr);
|
|
|
|
|
|
|
|
if (error < 0)
|
|
|
|
return (error);
|
|
|
|
|
|
|
|
ssize_t wrote = count - uio.uio_resid;
|
|
|
|
kiocb->ki_pos += wrote;
|
|
|
|
|
|
|
|
return (wrote);
|
2015-05-12 02:26:18 +03:00
|
|
|
}
|
|
|
|
#endif /* HAVE_VFS_RW_ITERATE */
|
|
|
|
|
2018-08-27 20:04:21 +03:00
|
|
|
#if defined(HAVE_VFS_RW_ITERATE)
|
|
|
|
static ssize_t
|
|
|
|
zpl_direct_IO_impl(int rw, struct kiocb *kiocb, struct iov_iter *iter)
|
|
|
|
{
|
|
|
|
if (rw == WRITE)
|
|
|
|
return (zpl_iter_write(kiocb, iter));
|
|
|
|
else
|
|
|
|
return (zpl_iter_read(kiocb, iter));
|
|
|
|
}
|
|
|
|
#if defined(HAVE_VFS_DIRECT_IO_ITER)
|
|
|
|
static ssize_t
|
|
|
|
zpl_direct_IO(struct kiocb *kiocb, struct iov_iter *iter)
|
|
|
|
{
|
|
|
|
return (zpl_direct_IO_impl(iov_iter_rw(iter), kiocb, iter));
|
|
|
|
}
|
|
|
|
#elif defined(HAVE_VFS_DIRECT_IO_ITER_OFFSET)
|
|
|
|
static ssize_t
|
|
|
|
zpl_direct_IO(struct kiocb *kiocb, struct iov_iter *iter, loff_t pos)
|
|
|
|
{
|
|
|
|
ASSERT3S(pos, ==, kiocb->ki_pos);
|
|
|
|
return (zpl_direct_IO_impl(iov_iter_rw(iter), kiocb, iter));
|
|
|
|
}
|
|
|
|
#elif defined(HAVE_VFS_DIRECT_IO_ITER_RW_OFFSET)
|
|
|
|
static ssize_t
|
|
|
|
zpl_direct_IO(int rw, struct kiocb *kiocb, struct iov_iter *iter, loff_t pos)
|
|
|
|
{
|
|
|
|
ASSERT3S(pos, ==, kiocb->ki_pos);
|
|
|
|
return (zpl_direct_IO_impl(rw, kiocb, iter));
|
|
|
|
}
|
|
|
|
#else
|
|
|
|
#error "Unknown direct IO interface"
|
|
|
|
#endif
|
|
|
|
|
2020-12-31 01:18:29 +03:00
|
|
|
#else /* HAVE_VFS_RW_ITERATE */
|
2018-08-27 20:04:21 +03:00
|
|
|
|
|
|
|
#if defined(HAVE_VFS_DIRECT_IO_IOVEC)
|
|
|
|
static ssize_t
|
2020-12-18 19:48:26 +03:00
|
|
|
zpl_direct_IO(int rw, struct kiocb *kiocb, const struct iovec *iov,
|
2018-08-27 20:04:21 +03:00
|
|
|
loff_t pos, unsigned long nr_segs)
|
|
|
|
{
|
|
|
|
if (rw == WRITE)
|
2020-12-18 19:48:26 +03:00
|
|
|
return (zpl_aio_write(kiocb, iov, nr_segs, pos));
|
2018-08-27 20:04:21 +03:00
|
|
|
else
|
2020-12-18 19:48:26 +03:00
|
|
|
return (zpl_aio_read(kiocb, iov, nr_segs, pos));
|
2018-08-27 20:04:21 +03:00
|
|
|
}
|
2020-12-31 01:18:29 +03:00
|
|
|
#elif defined(HAVE_VFS_DIRECT_IO_ITER_RW_OFFSET)
|
|
|
|
static ssize_t
|
|
|
|
zpl_direct_IO(int rw, struct kiocb *kiocb, struct iov_iter *iter, loff_t pos)
|
|
|
|
{
|
|
|
|
const struct iovec *iovp = iov_iter_iovec(iter);
|
|
|
|
unsigned long nr_segs = iter->nr_segs;
|
|
|
|
|
|
|
|
ASSERT3S(pos, ==, kiocb->ki_pos);
|
|
|
|
if (rw == WRITE)
|
|
|
|
return (zpl_aio_write(kiocb, iovp, nr_segs, pos));
|
|
|
|
else
|
|
|
|
return (zpl_aio_read(kiocb, iovp, nr_segs, pos));
|
|
|
|
}
|
2018-08-27 20:04:21 +03:00
|
|
|
#else
|
|
|
|
#error "Unknown direct IO interface"
|
|
|
|
#endif
|
|
|
|
|
|
|
|
#endif /* HAVE_VFS_RW_ITERATE */
|
|
|
|
|
2013-06-13 21:51:09 +04:00
|
|
|
static loff_t
|
|
|
|
zpl_llseek(struct file *filp, loff_t offset, int whence)
|
|
|
|
{
|
|
|
|
#if defined(SEEK_HOLE) && defined(SEEK_DATA)
|
2015-03-31 06:43:29 +03:00
|
|
|
fstrans_cookie_t cookie;
|
|
|
|
|
2013-06-13 21:51:09 +04:00
|
|
|
if (whence == SEEK_DATA || whence == SEEK_HOLE) {
|
|
|
|
struct inode *ip = filp->f_mapping->host;
|
|
|
|
loff_t maxbytes = ip->i_sb->s_maxbytes;
|
|
|
|
loff_t error;
|
|
|
|
|
2016-05-19 00:30:20 +03:00
|
|
|
spl_inode_lock_shared(ip);
|
2015-03-31 06:43:29 +03:00
|
|
|
cookie = spl_fstrans_mark();
|
2020-10-31 19:40:08 +03:00
|
|
|
error = -zfs_holey(ITOZ(ip), whence, &offset);
|
2015-03-31 06:43:29 +03:00
|
|
|
spl_fstrans_unmark(cookie);
|
2013-06-13 21:51:09 +04:00
|
|
|
if (error == 0)
|
|
|
|
error = lseek_execute(filp, ip, offset, maxbytes);
|
2016-05-19 00:30:20 +03:00
|
|
|
spl_inode_unlock_shared(ip);
|
2013-06-13 21:51:09 +04:00
|
|
|
|
|
|
|
return (error);
|
|
|
|
}
|
|
|
|
#endif /* SEEK_HOLE && SEEK_DATA */
|
|
|
|
|
2013-11-01 23:26:11 +04:00
|
|
|
return (generic_file_llseek(filp, offset, whence));
|
2013-06-13 21:51:09 +04:00
|
|
|
}
|
|
|
|
|
2011-02-03 21:34:05 +03:00
|
|
|
/*
|
|
|
|
* It's worth taking a moment to describe how mmap is implemented
|
|
|
|
* for zfs because it differs considerably from other Linux filesystems.
|
|
|
|
* However, this issue is handled the same way under OpenSolaris.
|
|
|
|
*
|
|
|
|
* The issue is that by design zfs bypasses the Linux page cache and
|
|
|
|
* leaves all caching up to the ARC. This has been shown to work
|
|
|
|
* well for the common read(2)/write(2) case. However, mmap(2)
|
|
|
|
* is problem because it relies on being tightly integrated with the
|
|
|
|
* page cache. To handle this we cache mmap'ed files twice, once in
|
|
|
|
* the ARC and a second time in the page cache. The code is careful
|
|
|
|
* to keep both copies synchronized.
|
|
|
|
*
|
|
|
|
* When a file with an mmap'ed region is written to using write(2)
|
|
|
|
* both the data in the ARC and existing pages in the page cache
|
|
|
|
* are updated. For a read(2) data will be read first from the page
|
|
|
|
* cache then the ARC if needed. Neither a write(2) or read(2) will
|
|
|
|
* will ever result in new pages being added to the page cache.
|
|
|
|
*
|
|
|
|
* New pages are added to the page cache only via .readpage() which
|
|
|
|
* is called when the vfs needs to read a page off disk to back the
|
|
|
|
* virtual memory region. These pages may be modified without
|
|
|
|
* notifying the ARC and will be written out periodically via
|
|
|
|
* .writepage(). This will occur due to either a sync or the usual
|
|
|
|
* page aging behavior. Note because a read(2) of a mmap'ed file
|
|
|
|
* will always check the page cache first even when the ARC is out
|
|
|
|
* of date correct data will still be returned.
|
|
|
|
*
|
|
|
|
* While this implementation ensures correct behavior it does have
|
|
|
|
* have some drawbacks. The most obvious of which is that it
|
|
|
|
* increases the required memory footprint when access mmap'ed
|
|
|
|
* files. It also adds additional complexity to the code keeping
|
|
|
|
* both caches synchronized.
|
|
|
|
*
|
|
|
|
* Longer term it may be possible to cleanly resolve this wart by
|
|
|
|
* mapping page cache pages directly on to the ARC buffers. The
|
|
|
|
* Linux address space operations are flexible enough to allow
|
|
|
|
* selection of which pages back a particular index. The trick
|
|
|
|
* would be working out the details of which subsystem is in
|
|
|
|
* charge, the ARC, the page cache, or both. It may also prove
|
|
|
|
* helpful to move the ARC buffers to a scatter-gather lists
|
|
|
|
* rather than a vmalloc'ed region.
|
|
|
|
*/
|
|
|
|
static int
|
|
|
|
zpl_mmap(struct file *filp, struct vm_area_struct *vma)
|
|
|
|
{
|
2011-07-01 22:25:07 +04:00
|
|
|
struct inode *ip = filp->f_mapping->host;
|
|
|
|
znode_t *zp = ITOZ(ip);
|
2011-02-03 21:34:05 +03:00
|
|
|
int error;
|
2015-03-31 06:43:29 +03:00
|
|
|
fstrans_cookie_t cookie;
|
2011-02-03 21:34:05 +03:00
|
|
|
|
2015-03-31 06:43:29 +03:00
|
|
|
cookie = spl_fstrans_mark();
|
2011-07-01 22:25:07 +04:00
|
|
|
error = -zfs_map(ip, vma->vm_pgoff, (caddr_t *)vma->vm_start,
|
|
|
|
(size_t)(vma->vm_end - vma->vm_start), vma->vm_flags);
|
2015-03-31 06:43:29 +03:00
|
|
|
spl_fstrans_unmark(cookie);
|
2011-07-01 22:25:07 +04:00
|
|
|
if (error)
|
|
|
|
return (error);
|
|
|
|
|
2011-02-03 21:34:05 +03:00
|
|
|
error = generic_file_mmap(filp, vma);
|
|
|
|
if (error)
|
|
|
|
return (error);
|
|
|
|
|
|
|
|
mutex_enter(&zp->z_lock);
|
2017-09-19 22:19:08 +03:00
|
|
|
zp->z_is_mapped = B_TRUE;
|
2011-02-03 21:34:05 +03:00
|
|
|
mutex_exit(&zp->z_lock);
|
|
|
|
|
|
|
|
return (error);
|
|
|
|
}
|
|
|
|
|
|
|
|
/*
|
|
|
|
* Populate a page with data for the Linux page cache. This function is
|
|
|
|
* only used to support mmap(2). There will be an identical copy of the
|
|
|
|
* data in the ARC which is kept up to date via .write() and .writepage().
|
|
|
|
*/
|
2021-07-20 17:03:33 +03:00
|
|
|
static inline int
|
|
|
|
zpl_readpage_common(struct page *pp)
|
2011-02-03 21:34:05 +03:00
|
|
|
{
|
|
|
|
struct inode *ip;
|
2011-05-28 05:53:07 +04:00
|
|
|
struct page *pl[1];
|
2011-02-03 21:34:05 +03:00
|
|
|
int error = 0;
|
2015-03-31 06:43:29 +03:00
|
|
|
fstrans_cookie_t cookie;
|
2011-02-03 21:34:05 +03:00
|
|
|
|
|
|
|
ASSERT(PageLocked(pp));
|
|
|
|
ip = pp->mapping->host;
|
2011-05-28 05:53:07 +04:00
|
|
|
pl[0] = pp;
|
2011-02-03 21:34:05 +03:00
|
|
|
|
2015-03-31 06:43:29 +03:00
|
|
|
cookie = spl_fstrans_mark();
|
2011-05-28 05:53:07 +04:00
|
|
|
error = -zfs_getpage(ip, pl, 1);
|
2015-03-31 06:43:29 +03:00
|
|
|
spl_fstrans_unmark(cookie);
|
2011-02-03 21:34:05 +03:00
|
|
|
|
2011-05-28 05:53:07 +04:00
|
|
|
if (error) {
|
|
|
|
SetPageError(pp);
|
|
|
|
ClearPageUptodate(pp);
|
|
|
|
} else {
|
|
|
|
ClearPageError(pp);
|
|
|
|
SetPageUptodate(pp);
|
|
|
|
flush_dcache_page(pp);
|
|
|
|
}
|
2011-02-03 21:34:05 +03:00
|
|
|
|
2011-05-28 05:53:07 +04:00
|
|
|
unlock_page(pp);
|
2013-11-01 23:26:11 +04:00
|
|
|
return (error);
|
2011-05-28 05:53:07 +04:00
|
|
|
}
|
2011-02-03 21:34:05 +03:00
|
|
|
|
2022-05-27 23:44:43 +03:00
|
|
|
#ifdef HAVE_VFS_READ_FOLIO
|
|
|
|
static int
|
|
|
|
zpl_read_folio(struct file *filp, struct folio *folio)
|
|
|
|
{
|
|
|
|
return (zpl_readpage_common(&folio->page));
|
|
|
|
}
|
|
|
|
#else
|
2021-07-20 17:03:33 +03:00
|
|
|
static int
|
|
|
|
zpl_readpage(struct file *filp, struct page *pp)
|
|
|
|
{
|
|
|
|
return (zpl_readpage_common(pp));
|
|
|
|
}
|
2022-05-27 23:44:43 +03:00
|
|
|
#endif
|
2021-07-20 17:03:33 +03:00
|
|
|
|
|
|
|
static int
|
|
|
|
zpl_readpage_filler(void *data, struct page *pp)
|
|
|
|
{
|
|
|
|
return (zpl_readpage_common(pp));
|
|
|
|
}
|
|
|
|
|
2011-08-05 03:25:43 +04:00
|
|
|
/*
|
|
|
|
* Populate a set of pages with data for the Linux page cache. This
|
|
|
|
* function will only be called for read ahead and never for demand
|
|
|
|
* paging. For simplicity, the code relies on read_cache_pages() to
|
|
|
|
* correctly lock each page for IO and call zpl_readpage().
|
|
|
|
*/
|
2022-04-02 02:15:25 +03:00
|
|
|
#ifdef HAVE_VFS_READPAGES
|
2011-08-05 03:25:43 +04:00
|
|
|
static int
|
|
|
|
zpl_readpages(struct file *filp, struct address_space *mapping,
|
2017-01-21 00:17:55 +03:00
|
|
|
struct list_head *pages, unsigned nr_pages)
|
2011-08-05 03:25:43 +04:00
|
|
|
{
|
2021-07-20 17:03:33 +03:00
|
|
|
return (read_cache_pages(mapping, pages, zpl_readpage_filler, NULL));
|
2011-08-05 03:25:43 +04:00
|
|
|
}
|
2022-04-02 02:15:25 +03:00
|
|
|
#else
|
|
|
|
static void
|
|
|
|
zpl_readahead(struct readahead_control *ractl)
|
|
|
|
{
|
|
|
|
struct page *page;
|
|
|
|
|
|
|
|
while ((page = readahead_page(ractl)) != NULL) {
|
|
|
|
int ret;
|
|
|
|
|
|
|
|
ret = zpl_readpage_filler(NULL, page);
|
|
|
|
put_page(page);
|
|
|
|
if (ret)
|
|
|
|
break;
|
|
|
|
}
|
|
|
|
}
|
|
|
|
#endif
|
2011-08-05 03:25:43 +04:00
|
|
|
|
2020-06-15 21:30:37 +03:00
|
|
|
static int
|
2011-05-28 05:53:07 +04:00
|
|
|
zpl_putpage(struct page *pp, struct writeback_control *wbc, void *data)
|
|
|
|
{
|
2022-05-03 23:23:26 +03:00
|
|
|
boolean_t *for_sync = data;
|
2014-07-13 22:35:19 +04:00
|
|
|
fstrans_cookie_t cookie;
|
2011-08-02 08:28:51 +04:00
|
|
|
|
|
|
|
ASSERT(PageLocked(pp));
|
|
|
|
ASSERT(!PageWriteback(pp));
|
2012-08-18 22:17:23 +04:00
|
|
|
|
2014-07-13 22:35:19 +04:00
|
|
|
cookie = spl_fstrans_mark();
|
2022-05-03 23:23:26 +03:00
|
|
|
(void) zfs_putpage(pp->mapping->host, pp, wbc, *for_sync);
|
2014-07-13 22:35:19 +04:00
|
|
|
spl_fstrans_unmark(cookie);
|
2011-02-03 21:34:05 +03:00
|
|
|
|
2011-08-02 08:28:51 +04:00
|
|
|
return (0);
|
2011-05-28 05:53:07 +04:00
|
|
|
}
|
2011-02-03 21:34:05 +03:00
|
|
|
|
2011-05-28 05:53:07 +04:00
|
|
|
static int
|
|
|
|
zpl_writepages(struct address_space *mapping, struct writeback_control *wbc)
|
|
|
|
{
|
Only commit the ZIL once in zpl_writepages() (msync() case).
Currently, using msync() results in the following code path:
sys_msync -> zpl_fsync -> filemap_write_and_wait_range -> zpl_writepages -> write_cache_pages -> zpl_putpage
In such a code path, zil_commit() is called as part of zpl_putpage().
This means that for each page, the write is handed to the DMU, the ZIL
is committed, and only then do we move on to the next page. As one might
imagine, this results in atrocious performance where there is a large
number of pages to write: instead of committing a batch of N writes,
we do N commits containing one page each. In some extreme cases this
can result in msync() being ~700 times slower than it should be, as well
as very inefficient use of ZIL resources.
This patch fixes this issue by making sure that the requested writes
are batched and then committed only once. Unfortunately, the
implementation is somewhat non-trivial because there is no way to run
write_cache_pages in SYNC mode (so that we get all pages) without
making it wait on the writeback tag for each page.
The solution implemented here is composed of two parts:
- I added a new callback system to the ZIL, which allows the caller to
be notified when its ITX gets written to stable storage. One nice
thing is that the callback is called not only in zil_commit() but
in zil_sync() as well, which means that the caller doesn't have to
care whether the write ended up in the ZIL or the DMU: it will get
notified as soon as it's safe, period. This is an improvement over
dmu_tx_callback_register() that was used previously, which only
supports DMU writes. The rationale for this change is to allow
zpl_putpage() to be notified when a ZIL commit is completed without
having to block on zil_commit() itself.
- zpl_writepages() now calls write_cache_pages in non-SYNC mode, which
will prevent (1) write_cache_pages from blocking, and (2) zpl_putpage
from issuing ZIL commits. zpl_writepages() will issue the commit
itself instead of relying on zpl_putpage() to do it, thus nicely
batching the writes. Note, however, that we still have to call
write_cache_pages() again in SYNC mode because there is an edge case
documented in the implementation of write_cache_pages() whereas it
will not give us all dirty pages when running in non-SYNC mode. Thus
we need to run it at least once in SYNC mode to make sure we honor
persistency guarantees. This only happens when the pages are
modified at the same time msync() is running, which should be rare.
In most cases there won't be any additional pages and this second
call will do nothing.
Note that this change also fixes a bug related to #907 whereas calling
msync() on pages that were already handed over to the DMU in a previous
writepages() call would make msync() block until the next TXG sync
instead of returning as soon as the ZIL commit is complete. The new
callback system fixes that problem.
Signed-off-by: Richard Yao <ryao@gentoo.org>
Signed-off-by: Brian Behlendorf <behlendorf1@llnl.gov>
Closes #1849
Closes #907
2013-11-10 19:00:11 +04:00
|
|
|
znode_t *zp = ITOZ(mapping->host);
|
2017-03-08 03:21:37 +03:00
|
|
|
zfsvfs_t *zfsvfs = ITOZSB(mapping->host);
|
Only commit the ZIL once in zpl_writepages() (msync() case).
Currently, using msync() results in the following code path:
sys_msync -> zpl_fsync -> filemap_write_and_wait_range -> zpl_writepages -> write_cache_pages -> zpl_putpage
In such a code path, zil_commit() is called as part of zpl_putpage().
This means that for each page, the write is handed to the DMU, the ZIL
is committed, and only then do we move on to the next page. As one might
imagine, this results in atrocious performance where there is a large
number of pages to write: instead of committing a batch of N writes,
we do N commits containing one page each. In some extreme cases this
can result in msync() being ~700 times slower than it should be, as well
as very inefficient use of ZIL resources.
This patch fixes this issue by making sure that the requested writes
are batched and then committed only once. Unfortunately, the
implementation is somewhat non-trivial because there is no way to run
write_cache_pages in SYNC mode (so that we get all pages) without
making it wait on the writeback tag for each page.
The solution implemented here is composed of two parts:
- I added a new callback system to the ZIL, which allows the caller to
be notified when its ITX gets written to stable storage. One nice
thing is that the callback is called not only in zil_commit() but
in zil_sync() as well, which means that the caller doesn't have to
care whether the write ended up in the ZIL or the DMU: it will get
notified as soon as it's safe, period. This is an improvement over
dmu_tx_callback_register() that was used previously, which only
supports DMU writes. The rationale for this change is to allow
zpl_putpage() to be notified when a ZIL commit is completed without
having to block on zil_commit() itself.
- zpl_writepages() now calls write_cache_pages in non-SYNC mode, which
will prevent (1) write_cache_pages from blocking, and (2) zpl_putpage
from issuing ZIL commits. zpl_writepages() will issue the commit
itself instead of relying on zpl_putpage() to do it, thus nicely
batching the writes. Note, however, that we still have to call
write_cache_pages() again in SYNC mode because there is an edge case
documented in the implementation of write_cache_pages() whereas it
will not give us all dirty pages when running in non-SYNC mode. Thus
we need to run it at least once in SYNC mode to make sure we honor
persistency guarantees. This only happens when the pages are
modified at the same time msync() is running, which should be rare.
In most cases there won't be any additional pages and this second
call will do nothing.
Note that this change also fixes a bug related to #907 whereas calling
msync() on pages that were already handed over to the DMU in a previous
writepages() call would make msync() block until the next TXG sync
instead of returning as soon as the ZIL commit is complete. The new
callback system fixes that problem.
Signed-off-by: Richard Yao <ryao@gentoo.org>
Signed-off-by: Brian Behlendorf <behlendorf1@llnl.gov>
Closes #1849
Closes #907
2013-11-10 19:00:11 +04:00
|
|
|
enum writeback_sync_modes sync_mode;
|
|
|
|
int result;
|
|
|
|
|
2020-11-14 21:19:00 +03:00
|
|
|
ZPL_ENTER(zfsvfs);
|
2017-03-08 03:21:37 +03:00
|
|
|
if (zfsvfs->z_os->os_sync == ZFS_SYNC_ALWAYS)
|
Only commit the ZIL once in zpl_writepages() (msync() case).
Currently, using msync() results in the following code path:
sys_msync -> zpl_fsync -> filemap_write_and_wait_range -> zpl_writepages -> write_cache_pages -> zpl_putpage
In such a code path, zil_commit() is called as part of zpl_putpage().
This means that for each page, the write is handed to the DMU, the ZIL
is committed, and only then do we move on to the next page. As one might
imagine, this results in atrocious performance where there is a large
number of pages to write: instead of committing a batch of N writes,
we do N commits containing one page each. In some extreme cases this
can result in msync() being ~700 times slower than it should be, as well
as very inefficient use of ZIL resources.
This patch fixes this issue by making sure that the requested writes
are batched and then committed only once. Unfortunately, the
implementation is somewhat non-trivial because there is no way to run
write_cache_pages in SYNC mode (so that we get all pages) without
making it wait on the writeback tag for each page.
The solution implemented here is composed of two parts:
- I added a new callback system to the ZIL, which allows the caller to
be notified when its ITX gets written to stable storage. One nice
thing is that the callback is called not only in zil_commit() but
in zil_sync() as well, which means that the caller doesn't have to
care whether the write ended up in the ZIL or the DMU: it will get
notified as soon as it's safe, period. This is an improvement over
dmu_tx_callback_register() that was used previously, which only
supports DMU writes. The rationale for this change is to allow
zpl_putpage() to be notified when a ZIL commit is completed without
having to block on zil_commit() itself.
- zpl_writepages() now calls write_cache_pages in non-SYNC mode, which
will prevent (1) write_cache_pages from blocking, and (2) zpl_putpage
from issuing ZIL commits. zpl_writepages() will issue the commit
itself instead of relying on zpl_putpage() to do it, thus nicely
batching the writes. Note, however, that we still have to call
write_cache_pages() again in SYNC mode because there is an edge case
documented in the implementation of write_cache_pages() whereas it
will not give us all dirty pages when running in non-SYNC mode. Thus
we need to run it at least once in SYNC mode to make sure we honor
persistency guarantees. This only happens when the pages are
modified at the same time msync() is running, which should be rare.
In most cases there won't be any additional pages and this second
call will do nothing.
Note that this change also fixes a bug related to #907 whereas calling
msync() on pages that were already handed over to the DMU in a previous
writepages() call would make msync() block until the next TXG sync
instead of returning as soon as the ZIL commit is complete. The new
callback system fixes that problem.
Signed-off-by: Richard Yao <ryao@gentoo.org>
Signed-off-by: Brian Behlendorf <behlendorf1@llnl.gov>
Closes #1849
Closes #907
2013-11-10 19:00:11 +04:00
|
|
|
wbc->sync_mode = WB_SYNC_ALL;
|
2020-11-14 21:19:00 +03:00
|
|
|
ZPL_EXIT(zfsvfs);
|
Only commit the ZIL once in zpl_writepages() (msync() case).
Currently, using msync() results in the following code path:
sys_msync -> zpl_fsync -> filemap_write_and_wait_range -> zpl_writepages -> write_cache_pages -> zpl_putpage
In such a code path, zil_commit() is called as part of zpl_putpage().
This means that for each page, the write is handed to the DMU, the ZIL
is committed, and only then do we move on to the next page. As one might
imagine, this results in atrocious performance where there is a large
number of pages to write: instead of committing a batch of N writes,
we do N commits containing one page each. In some extreme cases this
can result in msync() being ~700 times slower than it should be, as well
as very inefficient use of ZIL resources.
This patch fixes this issue by making sure that the requested writes
are batched and then committed only once. Unfortunately, the
implementation is somewhat non-trivial because there is no way to run
write_cache_pages in SYNC mode (so that we get all pages) without
making it wait on the writeback tag for each page.
The solution implemented here is composed of two parts:
- I added a new callback system to the ZIL, which allows the caller to
be notified when its ITX gets written to stable storage. One nice
thing is that the callback is called not only in zil_commit() but
in zil_sync() as well, which means that the caller doesn't have to
care whether the write ended up in the ZIL or the DMU: it will get
notified as soon as it's safe, period. This is an improvement over
dmu_tx_callback_register() that was used previously, which only
supports DMU writes. The rationale for this change is to allow
zpl_putpage() to be notified when a ZIL commit is completed without
having to block on zil_commit() itself.
- zpl_writepages() now calls write_cache_pages in non-SYNC mode, which
will prevent (1) write_cache_pages from blocking, and (2) zpl_putpage
from issuing ZIL commits. zpl_writepages() will issue the commit
itself instead of relying on zpl_putpage() to do it, thus nicely
batching the writes. Note, however, that we still have to call
write_cache_pages() again in SYNC mode because there is an edge case
documented in the implementation of write_cache_pages() whereas it
will not give us all dirty pages when running in non-SYNC mode. Thus
we need to run it at least once in SYNC mode to make sure we honor
persistency guarantees. This only happens when the pages are
modified at the same time msync() is running, which should be rare.
In most cases there won't be any additional pages and this second
call will do nothing.
Note that this change also fixes a bug related to #907 whereas calling
msync() on pages that were already handed over to the DMU in a previous
writepages() call would make msync() block until the next TXG sync
instead of returning as soon as the ZIL commit is complete. The new
callback system fixes that problem.
Signed-off-by: Richard Yao <ryao@gentoo.org>
Signed-off-by: Brian Behlendorf <behlendorf1@llnl.gov>
Closes #1849
Closes #907
2013-11-10 19:00:11 +04:00
|
|
|
sync_mode = wbc->sync_mode;
|
|
|
|
|
|
|
|
/*
|
|
|
|
* We don't want to run write_cache_pages() in SYNC mode here, because
|
|
|
|
* that would make putpage() wait for a single page to be committed to
|
|
|
|
* disk every single time, resulting in atrocious performance. Instead
|
|
|
|
* we run it once in non-SYNC mode so that the ZIL gets all the data,
|
|
|
|
* and then we commit it all in one go.
|
|
|
|
*/
|
2022-05-03 23:23:26 +03:00
|
|
|
boolean_t for_sync = (sync_mode == WB_SYNC_ALL);
|
Only commit the ZIL once in zpl_writepages() (msync() case).
Currently, using msync() results in the following code path:
sys_msync -> zpl_fsync -> filemap_write_and_wait_range -> zpl_writepages -> write_cache_pages -> zpl_putpage
In such a code path, zil_commit() is called as part of zpl_putpage().
This means that for each page, the write is handed to the DMU, the ZIL
is committed, and only then do we move on to the next page. As one might
imagine, this results in atrocious performance where there is a large
number of pages to write: instead of committing a batch of N writes,
we do N commits containing one page each. In some extreme cases this
can result in msync() being ~700 times slower than it should be, as well
as very inefficient use of ZIL resources.
This patch fixes this issue by making sure that the requested writes
are batched and then committed only once. Unfortunately, the
implementation is somewhat non-trivial because there is no way to run
write_cache_pages in SYNC mode (so that we get all pages) without
making it wait on the writeback tag for each page.
The solution implemented here is composed of two parts:
- I added a new callback system to the ZIL, which allows the caller to
be notified when its ITX gets written to stable storage. One nice
thing is that the callback is called not only in zil_commit() but
in zil_sync() as well, which means that the caller doesn't have to
care whether the write ended up in the ZIL or the DMU: it will get
notified as soon as it's safe, period. This is an improvement over
dmu_tx_callback_register() that was used previously, which only
supports DMU writes. The rationale for this change is to allow
zpl_putpage() to be notified when a ZIL commit is completed without
having to block on zil_commit() itself.
- zpl_writepages() now calls write_cache_pages in non-SYNC mode, which
will prevent (1) write_cache_pages from blocking, and (2) zpl_putpage
from issuing ZIL commits. zpl_writepages() will issue the commit
itself instead of relying on zpl_putpage() to do it, thus nicely
batching the writes. Note, however, that we still have to call
write_cache_pages() again in SYNC mode because there is an edge case
documented in the implementation of write_cache_pages() whereas it
will not give us all dirty pages when running in non-SYNC mode. Thus
we need to run it at least once in SYNC mode to make sure we honor
persistency guarantees. This only happens when the pages are
modified at the same time msync() is running, which should be rare.
In most cases there won't be any additional pages and this second
call will do nothing.
Note that this change also fixes a bug related to #907 whereas calling
msync() on pages that were already handed over to the DMU in a previous
writepages() call would make msync() block until the next TXG sync
instead of returning as soon as the ZIL commit is complete. The new
callback system fixes that problem.
Signed-off-by: Richard Yao <ryao@gentoo.org>
Signed-off-by: Brian Behlendorf <behlendorf1@llnl.gov>
Closes #1849
Closes #907
2013-11-10 19:00:11 +04:00
|
|
|
wbc->sync_mode = WB_SYNC_NONE;
|
2022-05-03 23:23:26 +03:00
|
|
|
result = write_cache_pages(mapping, wbc, zpl_putpage, &for_sync);
|
Only commit the ZIL once in zpl_writepages() (msync() case).
Currently, using msync() results in the following code path:
sys_msync -> zpl_fsync -> filemap_write_and_wait_range -> zpl_writepages -> write_cache_pages -> zpl_putpage
In such a code path, zil_commit() is called as part of zpl_putpage().
This means that for each page, the write is handed to the DMU, the ZIL
is committed, and only then do we move on to the next page. As one might
imagine, this results in atrocious performance where there is a large
number of pages to write: instead of committing a batch of N writes,
we do N commits containing one page each. In some extreme cases this
can result in msync() being ~700 times slower than it should be, as well
as very inefficient use of ZIL resources.
This patch fixes this issue by making sure that the requested writes
are batched and then committed only once. Unfortunately, the
implementation is somewhat non-trivial because there is no way to run
write_cache_pages in SYNC mode (so that we get all pages) without
making it wait on the writeback tag for each page.
The solution implemented here is composed of two parts:
- I added a new callback system to the ZIL, which allows the caller to
be notified when its ITX gets written to stable storage. One nice
thing is that the callback is called not only in zil_commit() but
in zil_sync() as well, which means that the caller doesn't have to
care whether the write ended up in the ZIL or the DMU: it will get
notified as soon as it's safe, period. This is an improvement over
dmu_tx_callback_register() that was used previously, which only
supports DMU writes. The rationale for this change is to allow
zpl_putpage() to be notified when a ZIL commit is completed without
having to block on zil_commit() itself.
- zpl_writepages() now calls write_cache_pages in non-SYNC mode, which
will prevent (1) write_cache_pages from blocking, and (2) zpl_putpage
from issuing ZIL commits. zpl_writepages() will issue the commit
itself instead of relying on zpl_putpage() to do it, thus nicely
batching the writes. Note, however, that we still have to call
write_cache_pages() again in SYNC mode because there is an edge case
documented in the implementation of write_cache_pages() whereas it
will not give us all dirty pages when running in non-SYNC mode. Thus
we need to run it at least once in SYNC mode to make sure we honor
persistency guarantees. This only happens when the pages are
modified at the same time msync() is running, which should be rare.
In most cases there won't be any additional pages and this second
call will do nothing.
Note that this change also fixes a bug related to #907 whereas calling
msync() on pages that were already handed over to the DMU in a previous
writepages() call would make msync() block until the next TXG sync
instead of returning as soon as the ZIL commit is complete. The new
callback system fixes that problem.
Signed-off-by: Richard Yao <ryao@gentoo.org>
Signed-off-by: Brian Behlendorf <behlendorf1@llnl.gov>
Closes #1849
Closes #907
2013-11-10 19:00:11 +04:00
|
|
|
if (sync_mode != wbc->sync_mode) {
|
2020-11-14 21:19:00 +03:00
|
|
|
ZPL_ENTER(zfsvfs);
|
|
|
|
ZPL_VERIFY_ZP(zp);
|
2017-03-08 03:21:37 +03:00
|
|
|
if (zfsvfs->z_log != NULL)
|
|
|
|
zil_commit(zfsvfs->z_log, zp->z_id);
|
2020-11-14 21:19:00 +03:00
|
|
|
ZPL_EXIT(zfsvfs);
|
Only commit the ZIL once in zpl_writepages() (msync() case).
Currently, using msync() results in the following code path:
sys_msync -> zpl_fsync -> filemap_write_and_wait_range -> zpl_writepages -> write_cache_pages -> zpl_putpage
In such a code path, zil_commit() is called as part of zpl_putpage().
This means that for each page, the write is handed to the DMU, the ZIL
is committed, and only then do we move on to the next page. As one might
imagine, this results in atrocious performance where there is a large
number of pages to write: instead of committing a batch of N writes,
we do N commits containing one page each. In some extreme cases this
can result in msync() being ~700 times slower than it should be, as well
as very inefficient use of ZIL resources.
This patch fixes this issue by making sure that the requested writes
are batched and then committed only once. Unfortunately, the
implementation is somewhat non-trivial because there is no way to run
write_cache_pages in SYNC mode (so that we get all pages) without
making it wait on the writeback tag for each page.
The solution implemented here is composed of two parts:
- I added a new callback system to the ZIL, which allows the caller to
be notified when its ITX gets written to stable storage. One nice
thing is that the callback is called not only in zil_commit() but
in zil_sync() as well, which means that the caller doesn't have to
care whether the write ended up in the ZIL or the DMU: it will get
notified as soon as it's safe, period. This is an improvement over
dmu_tx_callback_register() that was used previously, which only
supports DMU writes. The rationale for this change is to allow
zpl_putpage() to be notified when a ZIL commit is completed without
having to block on zil_commit() itself.
- zpl_writepages() now calls write_cache_pages in non-SYNC mode, which
will prevent (1) write_cache_pages from blocking, and (2) zpl_putpage
from issuing ZIL commits. zpl_writepages() will issue the commit
itself instead of relying on zpl_putpage() to do it, thus nicely
batching the writes. Note, however, that we still have to call
write_cache_pages() again in SYNC mode because there is an edge case
documented in the implementation of write_cache_pages() whereas it
will not give us all dirty pages when running in non-SYNC mode. Thus
we need to run it at least once in SYNC mode to make sure we honor
persistency guarantees. This only happens when the pages are
modified at the same time msync() is running, which should be rare.
In most cases there won't be any additional pages and this second
call will do nothing.
Note that this change also fixes a bug related to #907 whereas calling
msync() on pages that were already handed over to the DMU in a previous
writepages() call would make msync() block until the next TXG sync
instead of returning as soon as the ZIL commit is complete. The new
callback system fixes that problem.
Signed-off-by: Richard Yao <ryao@gentoo.org>
Signed-off-by: Brian Behlendorf <behlendorf1@llnl.gov>
Closes #1849
Closes #907
2013-11-10 19:00:11 +04:00
|
|
|
|
|
|
|
/*
|
|
|
|
* We need to call write_cache_pages() again (we can't just
|
|
|
|
* return after the commit) because the previous call in
|
|
|
|
* non-SYNC mode does not guarantee that we got all the dirty
|
|
|
|
* pages (see the implementation of write_cache_pages() for
|
|
|
|
* details). That being said, this is a no-op in most cases.
|
|
|
|
*/
|
|
|
|
wbc->sync_mode = sync_mode;
|
2022-05-03 23:23:26 +03:00
|
|
|
result = write_cache_pages(mapping, wbc, zpl_putpage,
|
|
|
|
&for_sync);
|
Only commit the ZIL once in zpl_writepages() (msync() case).
Currently, using msync() results in the following code path:
sys_msync -> zpl_fsync -> filemap_write_and_wait_range -> zpl_writepages -> write_cache_pages -> zpl_putpage
In such a code path, zil_commit() is called as part of zpl_putpage().
This means that for each page, the write is handed to the DMU, the ZIL
is committed, and only then do we move on to the next page. As one might
imagine, this results in atrocious performance where there is a large
number of pages to write: instead of committing a batch of N writes,
we do N commits containing one page each. In some extreme cases this
can result in msync() being ~700 times slower than it should be, as well
as very inefficient use of ZIL resources.
This patch fixes this issue by making sure that the requested writes
are batched and then committed only once. Unfortunately, the
implementation is somewhat non-trivial because there is no way to run
write_cache_pages in SYNC mode (so that we get all pages) without
making it wait on the writeback tag for each page.
The solution implemented here is composed of two parts:
- I added a new callback system to the ZIL, which allows the caller to
be notified when its ITX gets written to stable storage. One nice
thing is that the callback is called not only in zil_commit() but
in zil_sync() as well, which means that the caller doesn't have to
care whether the write ended up in the ZIL or the DMU: it will get
notified as soon as it's safe, period. This is an improvement over
dmu_tx_callback_register() that was used previously, which only
supports DMU writes. The rationale for this change is to allow
zpl_putpage() to be notified when a ZIL commit is completed without
having to block on zil_commit() itself.
- zpl_writepages() now calls write_cache_pages in non-SYNC mode, which
will prevent (1) write_cache_pages from blocking, and (2) zpl_putpage
from issuing ZIL commits. zpl_writepages() will issue the commit
itself instead of relying on zpl_putpage() to do it, thus nicely
batching the writes. Note, however, that we still have to call
write_cache_pages() again in SYNC mode because there is an edge case
documented in the implementation of write_cache_pages() whereas it
will not give us all dirty pages when running in non-SYNC mode. Thus
we need to run it at least once in SYNC mode to make sure we honor
persistency guarantees. This only happens when the pages are
modified at the same time msync() is running, which should be rare.
In most cases there won't be any additional pages and this second
call will do nothing.
Note that this change also fixes a bug related to #907 whereas calling
msync() on pages that were already handed over to the DMU in a previous
writepages() call would make msync() block until the next TXG sync
instead of returning as soon as the ZIL commit is complete. The new
callback system fixes that problem.
Signed-off-by: Richard Yao <ryao@gentoo.org>
Signed-off-by: Brian Behlendorf <behlendorf1@llnl.gov>
Closes #1849
Closes #907
2013-11-10 19:00:11 +04:00
|
|
|
}
|
|
|
|
return (result);
|
2011-02-03 21:34:05 +03:00
|
|
|
}
|
|
|
|
|
|
|
|
/*
|
|
|
|
* Write out dirty pages to the ARC, this function is only required to
|
|
|
|
* support mmap(2). Mapped pages may be dirtied by memory operations
|
|
|
|
* which never call .write(). These dirty pages are kept in sync with
|
|
|
|
* the ARC buffers via this hook.
|
|
|
|
*/
|
|
|
|
static int
|
|
|
|
zpl_writepage(struct page *pp, struct writeback_control *wbc)
|
|
|
|
{
|
Only commit the ZIL once in zpl_writepages() (msync() case).
Currently, using msync() results in the following code path:
sys_msync -> zpl_fsync -> filemap_write_and_wait_range -> zpl_writepages -> write_cache_pages -> zpl_putpage
In such a code path, zil_commit() is called as part of zpl_putpage().
This means that for each page, the write is handed to the DMU, the ZIL
is committed, and only then do we move on to the next page. As one might
imagine, this results in atrocious performance where there is a large
number of pages to write: instead of committing a batch of N writes,
we do N commits containing one page each. In some extreme cases this
can result in msync() being ~700 times slower than it should be, as well
as very inefficient use of ZIL resources.
This patch fixes this issue by making sure that the requested writes
are batched and then committed only once. Unfortunately, the
implementation is somewhat non-trivial because there is no way to run
write_cache_pages in SYNC mode (so that we get all pages) without
making it wait on the writeback tag for each page.
The solution implemented here is composed of two parts:
- I added a new callback system to the ZIL, which allows the caller to
be notified when its ITX gets written to stable storage. One nice
thing is that the callback is called not only in zil_commit() but
in zil_sync() as well, which means that the caller doesn't have to
care whether the write ended up in the ZIL or the DMU: it will get
notified as soon as it's safe, period. This is an improvement over
dmu_tx_callback_register() that was used previously, which only
supports DMU writes. The rationale for this change is to allow
zpl_putpage() to be notified when a ZIL commit is completed without
having to block on zil_commit() itself.
- zpl_writepages() now calls write_cache_pages in non-SYNC mode, which
will prevent (1) write_cache_pages from blocking, and (2) zpl_putpage
from issuing ZIL commits. zpl_writepages() will issue the commit
itself instead of relying on zpl_putpage() to do it, thus nicely
batching the writes. Note, however, that we still have to call
write_cache_pages() again in SYNC mode because there is an edge case
documented in the implementation of write_cache_pages() whereas it
will not give us all dirty pages when running in non-SYNC mode. Thus
we need to run it at least once in SYNC mode to make sure we honor
persistency guarantees. This only happens when the pages are
modified at the same time msync() is running, which should be rare.
In most cases there won't be any additional pages and this second
call will do nothing.
Note that this change also fixes a bug related to #907 whereas calling
msync() on pages that were already handed over to the DMU in a previous
writepages() call would make msync() block until the next TXG sync
instead of returning as soon as the ZIL commit is complete. The new
callback system fixes that problem.
Signed-off-by: Richard Yao <ryao@gentoo.org>
Signed-off-by: Brian Behlendorf <behlendorf1@llnl.gov>
Closes #1849
Closes #907
2013-11-10 19:00:11 +04:00
|
|
|
if (ITOZSB(pp->mapping->host)->z_os->os_sync == ZFS_SYNC_ALWAYS)
|
|
|
|
wbc->sync_mode = WB_SYNC_ALL;
|
|
|
|
|
2022-05-03 23:23:26 +03:00
|
|
|
boolean_t for_sync = (wbc->sync_mode == WB_SYNC_ALL);
|
|
|
|
|
|
|
|
return (zpl_putpage(pp, wbc, &for_sync));
|
2011-02-03 21:34:05 +03:00
|
|
|
}
|
|
|
|
|
2011-09-02 11:42:07 +04:00
|
|
|
/*
|
linux: add basic fallocate(mode=0/2) compatibility
Implement semi-compatible functionality for mode=0 (preallocation)
and mode=FALLOC_FL_KEEP_SIZE (preallocation beyond EOF) for ZPL.
Since ZFS does COW and snapshots, preallocating blocks for a file
cannot guarantee that writes to the file will not run out of space.
Even if the first overwrite was guaranteed, it would not handle any
later overwrite of blocks due to COW, so strict compliance is futile.
Instead, make a best-effort check that at least enough free space is
currently available in the pool (with a bit of margin), then create
a sparse file of the requested size and continue on with life.
This does not handle all cases (e.g. several fallocate() calls before
writing into the files when the filesystem is nearly full), which
would require a more complex mechanism to be implemented, probably
based on a modified version of dmu_prealloc(), but is usable as-is.
A new module option zfs_fallocate_reserve_percent is used to control
the reserve margin for any single fallocate call. By default, this
is 110% of the requested preallocation size, so an additional 10% of
available space is reserved for overhead to allow the application a
good chance of finishing the write when the fallocate() succeeds.
If the heuristics of this basic fallocate implementation are not
desirable, the old non-functional behavior of returning EOPNOTSUPP
for calls can be restored by setting zfs_fallocate_reserve_percent=0.
The parameter of zfs_statvfs() is changed to take an inode instead
of a dentry, since no dentry is available in zfs_fallocate_common().
A few tests from @behlendorf cover basic fallocate functionality.
Reviewed-by: Richard Laager <rlaager@wiktel.com>
Reviewed-by: Arshad Hussain <arshad.super@gmail.com>
Reviewed-by: Matthew Ahrens <mahrens@delphix.com>
Co-authored-by: Brian Behlendorf <behlendorf1@llnl.gov>
Signed-off-by: Andreas Dilger <adilger@dilger.ca>
Issue #326
Closes #10408
2020-06-18 21:22:11 +03:00
|
|
|
* The flag combination which matches the behavior of zfs_space() is
|
|
|
|
* FALLOC_FL_KEEP_SIZE | FALLOC_FL_PUNCH_HOLE. The FALLOC_FL_PUNCH_HOLE
|
2014-08-21 02:35:13 +04:00
|
|
|
* flag was introduced in the 2.6.38 kernel.
|
linux: add basic fallocate(mode=0/2) compatibility
Implement semi-compatible functionality for mode=0 (preallocation)
and mode=FALLOC_FL_KEEP_SIZE (preallocation beyond EOF) for ZPL.
Since ZFS does COW and snapshots, preallocating blocks for a file
cannot guarantee that writes to the file will not run out of space.
Even if the first overwrite was guaranteed, it would not handle any
later overwrite of blocks due to COW, so strict compliance is futile.
Instead, make a best-effort check that at least enough free space is
currently available in the pool (with a bit of margin), then create
a sparse file of the requested size and continue on with life.
This does not handle all cases (e.g. several fallocate() calls before
writing into the files when the filesystem is nearly full), which
would require a more complex mechanism to be implemented, probably
based on a modified version of dmu_prealloc(), but is usable as-is.
A new module option zfs_fallocate_reserve_percent is used to control
the reserve margin for any single fallocate call. By default, this
is 110% of the requested preallocation size, so an additional 10% of
available space is reserved for overhead to allow the application a
good chance of finishing the write when the fallocate() succeeds.
If the heuristics of this basic fallocate implementation are not
desirable, the old non-functional behavior of returning EOPNOTSUPP
for calls can be restored by setting zfs_fallocate_reserve_percent=0.
The parameter of zfs_statvfs() is changed to take an inode instead
of a dentry, since no dentry is available in zfs_fallocate_common().
A few tests from @behlendorf cover basic fallocate functionality.
Reviewed-by: Richard Laager <rlaager@wiktel.com>
Reviewed-by: Arshad Hussain <arshad.super@gmail.com>
Reviewed-by: Matthew Ahrens <mahrens@delphix.com>
Co-authored-by: Brian Behlendorf <behlendorf1@llnl.gov>
Signed-off-by: Andreas Dilger <adilger@dilger.ca>
Issue #326
Closes #10408
2020-06-18 21:22:11 +03:00
|
|
|
*
|
|
|
|
* The original mode=0 (allocate space) behavior can be reasonably emulated
|
|
|
|
* by checking if enough space exists and creating a sparse file, as real
|
|
|
|
* persistent space reservation is not possible due to COW, snapshots, etc.
|
2011-09-02 11:42:07 +04:00
|
|
|
*/
|
2019-11-12 19:59:06 +03:00
|
|
|
static long
|
2011-09-02 11:42:07 +04:00
|
|
|
zpl_fallocate_common(struct inode *ip, int mode, loff_t offset, loff_t len)
|
|
|
|
{
|
2014-08-21 02:35:13 +04:00
|
|
|
cred_t *cr = CRED();
|
|
|
|
loff_t olen;
|
2015-03-31 06:43:29 +03:00
|
|
|
fstrans_cookie_t cookie;
|
linux: add basic fallocate(mode=0/2) compatibility
Implement semi-compatible functionality for mode=0 (preallocation)
and mode=FALLOC_FL_KEEP_SIZE (preallocation beyond EOF) for ZPL.
Since ZFS does COW and snapshots, preallocating blocks for a file
cannot guarantee that writes to the file will not run out of space.
Even if the first overwrite was guaranteed, it would not handle any
later overwrite of blocks due to COW, so strict compliance is futile.
Instead, make a best-effort check that at least enough free space is
currently available in the pool (with a bit of margin), then create
a sparse file of the requested size and continue on with life.
This does not handle all cases (e.g. several fallocate() calls before
writing into the files when the filesystem is nearly full), which
would require a more complex mechanism to be implemented, probably
based on a modified version of dmu_prealloc(), but is usable as-is.
A new module option zfs_fallocate_reserve_percent is used to control
the reserve margin for any single fallocate call. By default, this
is 110% of the requested preallocation size, so an additional 10% of
available space is reserved for overhead to allow the application a
good chance of finishing the write when the fallocate() succeeds.
If the heuristics of this basic fallocate implementation are not
desirable, the old non-functional behavior of returning EOPNOTSUPP
for calls can be restored by setting zfs_fallocate_reserve_percent=0.
The parameter of zfs_statvfs() is changed to take an inode instead
of a dentry, since no dentry is available in zfs_fallocate_common().
A few tests from @behlendorf cover basic fallocate functionality.
Reviewed-by: Richard Laager <rlaager@wiktel.com>
Reviewed-by: Arshad Hussain <arshad.super@gmail.com>
Reviewed-by: Matthew Ahrens <mahrens@delphix.com>
Co-authored-by: Brian Behlendorf <behlendorf1@llnl.gov>
Signed-off-by: Andreas Dilger <adilger@dilger.ca>
Issue #326
Closes #10408
2020-06-18 21:22:11 +03:00
|
|
|
int error = 0;
|
2014-08-21 02:35:13 +04:00
|
|
|
|
2022-01-19 08:12:15 +03:00
|
|
|
int test_mode = FALLOC_FL_PUNCH_HOLE;
|
|
|
|
#ifdef HAVE_FALLOC_FL_ZERO_RANGE
|
|
|
|
test_mode |= FALLOC_FL_ZERO_RANGE;
|
|
|
|
#endif
|
|
|
|
|
|
|
|
if ((mode & ~(FALLOC_FL_KEEP_SIZE | test_mode)) != 0)
|
2019-11-21 20:32:57 +03:00
|
|
|
return (-EOPNOTSUPP);
|
2011-09-02 11:42:07 +04:00
|
|
|
|
2014-08-21 02:35:13 +04:00
|
|
|
if (offset < 0 || len <= 0)
|
|
|
|
return (-EINVAL);
|
2011-09-02 11:42:07 +04:00
|
|
|
|
2014-08-21 02:35:13 +04:00
|
|
|
spl_inode_lock(ip);
|
|
|
|
olen = i_size_read(ip);
|
2011-09-02 11:42:07 +04:00
|
|
|
|
2016-10-25 02:41:56 +03:00
|
|
|
crhold(cr);
|
2015-03-31 06:43:29 +03:00
|
|
|
cookie = spl_fstrans_mark();
|
2022-01-19 08:12:15 +03:00
|
|
|
if (mode & (test_mode)) {
|
linux: add basic fallocate(mode=0/2) compatibility
Implement semi-compatible functionality for mode=0 (preallocation)
and mode=FALLOC_FL_KEEP_SIZE (preallocation beyond EOF) for ZPL.
Since ZFS does COW and snapshots, preallocating blocks for a file
cannot guarantee that writes to the file will not run out of space.
Even if the first overwrite was guaranteed, it would not handle any
later overwrite of blocks due to COW, so strict compliance is futile.
Instead, make a best-effort check that at least enough free space is
currently available in the pool (with a bit of margin), then create
a sparse file of the requested size and continue on with life.
This does not handle all cases (e.g. several fallocate() calls before
writing into the files when the filesystem is nearly full), which
would require a more complex mechanism to be implemented, probably
based on a modified version of dmu_prealloc(), but is usable as-is.
A new module option zfs_fallocate_reserve_percent is used to control
the reserve margin for any single fallocate call. By default, this
is 110% of the requested preallocation size, so an additional 10% of
available space is reserved for overhead to allow the application a
good chance of finishing the write when the fallocate() succeeds.
If the heuristics of this basic fallocate implementation are not
desirable, the old non-functional behavior of returning EOPNOTSUPP
for calls can be restored by setting zfs_fallocate_reserve_percent=0.
The parameter of zfs_statvfs() is changed to take an inode instead
of a dentry, since no dentry is available in zfs_fallocate_common().
A few tests from @behlendorf cover basic fallocate functionality.
Reviewed-by: Richard Laager <rlaager@wiktel.com>
Reviewed-by: Arshad Hussain <arshad.super@gmail.com>
Reviewed-by: Matthew Ahrens <mahrens@delphix.com>
Co-authored-by: Brian Behlendorf <behlendorf1@llnl.gov>
Signed-off-by: Andreas Dilger <adilger@dilger.ca>
Issue #326
Closes #10408
2020-06-18 21:22:11 +03:00
|
|
|
flock64_t bf;
|
|
|
|
|
2022-04-21 02:07:03 +03:00
|
|
|
if (mode & FALLOC_FL_KEEP_SIZE) {
|
|
|
|
if (offset > olen)
|
|
|
|
goto out_unmark;
|
linux: add basic fallocate(mode=0/2) compatibility
Implement semi-compatible functionality for mode=0 (preallocation)
and mode=FALLOC_FL_KEEP_SIZE (preallocation beyond EOF) for ZPL.
Since ZFS does COW and snapshots, preallocating blocks for a file
cannot guarantee that writes to the file will not run out of space.
Even if the first overwrite was guaranteed, it would not handle any
later overwrite of blocks due to COW, so strict compliance is futile.
Instead, make a best-effort check that at least enough free space is
currently available in the pool (with a bit of margin), then create
a sparse file of the requested size and continue on with life.
This does not handle all cases (e.g. several fallocate() calls before
writing into the files when the filesystem is nearly full), which
would require a more complex mechanism to be implemented, probably
based on a modified version of dmu_prealloc(), but is usable as-is.
A new module option zfs_fallocate_reserve_percent is used to control
the reserve margin for any single fallocate call. By default, this
is 110% of the requested preallocation size, so an additional 10% of
available space is reserved for overhead to allow the application a
good chance of finishing the write when the fallocate() succeeds.
If the heuristics of this basic fallocate implementation are not
desirable, the old non-functional behavior of returning EOPNOTSUPP
for calls can be restored by setting zfs_fallocate_reserve_percent=0.
The parameter of zfs_statvfs() is changed to take an inode instead
of a dentry, since no dentry is available in zfs_fallocate_common().
A few tests from @behlendorf cover basic fallocate functionality.
Reviewed-by: Richard Laager <rlaager@wiktel.com>
Reviewed-by: Arshad Hussain <arshad.super@gmail.com>
Reviewed-by: Matthew Ahrens <mahrens@delphix.com>
Co-authored-by: Brian Behlendorf <behlendorf1@llnl.gov>
Signed-off-by: Andreas Dilger <adilger@dilger.ca>
Issue #326
Closes #10408
2020-06-18 21:22:11 +03:00
|
|
|
|
2022-04-21 02:07:03 +03:00
|
|
|
if (offset + len > olen)
|
|
|
|
len = olen - offset;
|
|
|
|
}
|
linux: add basic fallocate(mode=0/2) compatibility
Implement semi-compatible functionality for mode=0 (preallocation)
and mode=FALLOC_FL_KEEP_SIZE (preallocation beyond EOF) for ZPL.
Since ZFS does COW and snapshots, preallocating blocks for a file
cannot guarantee that writes to the file will not run out of space.
Even if the first overwrite was guaranteed, it would not handle any
later overwrite of blocks due to COW, so strict compliance is futile.
Instead, make a best-effort check that at least enough free space is
currently available in the pool (with a bit of margin), then create
a sparse file of the requested size and continue on with life.
This does not handle all cases (e.g. several fallocate() calls before
writing into the files when the filesystem is nearly full), which
would require a more complex mechanism to be implemented, probably
based on a modified version of dmu_prealloc(), but is usable as-is.
A new module option zfs_fallocate_reserve_percent is used to control
the reserve margin for any single fallocate call. By default, this
is 110% of the requested preallocation size, so an additional 10% of
available space is reserved for overhead to allow the application a
good chance of finishing the write when the fallocate() succeeds.
If the heuristics of this basic fallocate implementation are not
desirable, the old non-functional behavior of returning EOPNOTSUPP
for calls can be restored by setting zfs_fallocate_reserve_percent=0.
The parameter of zfs_statvfs() is changed to take an inode instead
of a dentry, since no dentry is available in zfs_fallocate_common().
A few tests from @behlendorf cover basic fallocate functionality.
Reviewed-by: Richard Laager <rlaager@wiktel.com>
Reviewed-by: Arshad Hussain <arshad.super@gmail.com>
Reviewed-by: Matthew Ahrens <mahrens@delphix.com>
Co-authored-by: Brian Behlendorf <behlendorf1@llnl.gov>
Signed-off-by: Andreas Dilger <adilger@dilger.ca>
Issue #326
Closes #10408
2020-06-18 21:22:11 +03:00
|
|
|
bf.l_type = F_WRLCK;
|
|
|
|
bf.l_whence = SEEK_SET;
|
|
|
|
bf.l_start = offset;
|
|
|
|
bf.l_len = len;
|
|
|
|
bf.l_pid = 0;
|
|
|
|
|
|
|
|
error = -zfs_space(ITOZ(ip), F_FREESP, &bf, O_RDWR, offset, cr);
|
|
|
|
} else if ((mode & ~FALLOC_FL_KEEP_SIZE) == 0) {
|
|
|
|
unsigned int percent = zfs_fallocate_reserve_percent;
|
|
|
|
struct kstatfs statfs;
|
|
|
|
|
|
|
|
/* Legacy mode, disable fallocate compatibility. */
|
|
|
|
if (percent == 0) {
|
|
|
|
error = -EOPNOTSUPP;
|
|
|
|
goto out_unmark;
|
|
|
|
}
|
|
|
|
|
|
|
|
/*
|
|
|
|
* Use zfs_statvfs() instead of dmu_objset_space() since it
|
|
|
|
* also checks project quota limits, which are relevant here.
|
|
|
|
*/
|
|
|
|
error = zfs_statvfs(ip, &statfs);
|
|
|
|
if (error)
|
|
|
|
goto out_unmark;
|
|
|
|
|
|
|
|
/*
|
|
|
|
* Shrink available space a bit to account for overhead/races.
|
|
|
|
* We know the product previously fit into availbytes from
|
|
|
|
* dmu_objset_space(), so the smaller product will also fit.
|
|
|
|
*/
|
|
|
|
if (len > statfs.f_bavail * (statfs.f_bsize * 100 / percent)) {
|
|
|
|
error = -ENOSPC;
|
|
|
|
goto out_unmark;
|
|
|
|
}
|
|
|
|
if (!(mode & FALLOC_FL_KEEP_SIZE) && offset + len > olen)
|
|
|
|
error = zfs_freesp(ITOZ(ip), offset + len, 0, 0, FALSE);
|
|
|
|
}
|
|
|
|
out_unmark:
|
2015-03-31 06:43:29 +03:00
|
|
|
spl_fstrans_unmark(cookie);
|
2014-08-21 02:35:13 +04:00
|
|
|
spl_inode_unlock(ip);
|
2011-09-02 11:42:07 +04:00
|
|
|
|
|
|
|
crfree(cr);
|
|
|
|
|
|
|
|
return (error);
|
|
|
|
}
|
|
|
|
|
|
|
|
static long
|
|
|
|
zpl_fallocate(struct file *filp, int mode, loff_t offset, loff_t len)
|
|
|
|
{
|
2016-08-04 18:57:35 +03:00
|
|
|
return zpl_fallocate_common(file_inode(filp),
|
2011-09-02 11:42:07 +04:00
|
|
|
mode, offset, len);
|
|
|
|
}
|
|
|
|
|
2021-12-18 03:18:37 +03:00
|
|
|
static int
|
|
|
|
zpl_ioctl_getversion(struct file *filp, void __user *arg)
|
|
|
|
{
|
|
|
|
uint32_t generation = file_inode(filp)->i_generation;
|
|
|
|
|
|
|
|
return (copy_to_user(arg, &generation, sizeof (generation)));
|
|
|
|
}
|
|
|
|
|
2018-02-14 01:54:54 +03:00
|
|
|
#define ZFS_FL_USER_VISIBLE (FS_FL_USER_VISIBLE | ZFS_PROJINHERIT_FL)
|
|
|
|
#define ZFS_FL_USER_MODIFIABLE (FS_FL_USER_MODIFIABLE | ZFS_PROJINHERIT_FL)
|
|
|
|
|
|
|
|
static uint32_t
|
|
|
|
__zpl_ioctl_getflags(struct inode *ip)
|
2011-07-02 02:56:35 +04:00
|
|
|
{
|
|
|
|
uint64_t zfs_flags = ITOZ(ip)->z_pflags;
|
2018-02-14 01:54:54 +03:00
|
|
|
uint32_t ioctl_flags = 0;
|
2011-07-02 02:56:35 +04:00
|
|
|
|
|
|
|
if (zfs_flags & ZFS_IMMUTABLE)
|
|
|
|
ioctl_flags |= FS_IMMUTABLE_FL;
|
|
|
|
|
|
|
|
if (zfs_flags & ZFS_APPENDONLY)
|
|
|
|
ioctl_flags |= FS_APPEND_FL;
|
|
|
|
|
|
|
|
if (zfs_flags & ZFS_NODUMP)
|
|
|
|
ioctl_flags |= FS_NODUMP_FL;
|
|
|
|
|
2018-02-14 01:54:54 +03:00
|
|
|
if (zfs_flags & ZFS_PROJINHERIT)
|
|
|
|
ioctl_flags |= ZFS_PROJINHERIT_FL;
|
2011-07-02 02:56:35 +04:00
|
|
|
|
2018-02-14 01:54:54 +03:00
|
|
|
return (ioctl_flags & ZFS_FL_USER_VISIBLE);
|
|
|
|
}
|
2011-07-02 02:56:35 +04:00
|
|
|
|
2018-02-14 01:54:54 +03:00
|
|
|
/*
|
|
|
|
* Map zfs file z_pflags (xvattr_t) to linux file attributes. Only file
|
|
|
|
* attributes common to both Linux and Solaris are mapped.
|
|
|
|
*/
|
|
|
|
static int
|
|
|
|
zpl_ioctl_getflags(struct file *filp, void __user *arg)
|
|
|
|
{
|
|
|
|
uint32_t flags;
|
|
|
|
int err;
|
|
|
|
|
|
|
|
flags = __zpl_ioctl_getflags(file_inode(filp));
|
|
|
|
err = copy_to_user(arg, &flags, sizeof (flags));
|
|
|
|
|
|
|
|
return (err);
|
2011-07-02 02:56:35 +04:00
|
|
|
}
|
|
|
|
|
|
|
|
/*
|
|
|
|
* fchange() is a helper macro to detect if we have been asked to change a
|
|
|
|
* flag. This is ugly, but the requirement that we do this is a consequence of
|
|
|
|
* how the Linux file attribute interface was designed. Another consequence is
|
|
|
|
* that concurrent modification of files suffers from a TOCTOU race. Neither
|
|
|
|
* are things we can fix without modifying the kernel-userland interface, which
|
|
|
|
* is outside of our jurisdiction.
|
|
|
|
*/
|
|
|
|
|
2016-12-16 23:41:56 +03:00
|
|
|
#define fchange(f0, f1, b0, b1) (!((f0) & (b0)) != !((f1) & (b1)))
|
2011-07-02 02:56:35 +04:00
|
|
|
|
|
|
|
static int
|
2018-02-14 01:54:54 +03:00
|
|
|
__zpl_ioctl_setflags(struct inode *ip, uint32_t ioctl_flags, xvattr_t *xva)
|
2011-07-02 02:56:35 +04:00
|
|
|
{
|
2018-02-14 01:54:54 +03:00
|
|
|
uint64_t zfs_flags = ITOZ(ip)->z_pflags;
|
|
|
|
xoptattr_t *xoap;
|
2011-07-02 02:56:35 +04:00
|
|
|
|
2018-02-14 01:54:54 +03:00
|
|
|
if (ioctl_flags & ~(FS_IMMUTABLE_FL | FS_APPEND_FL | FS_NODUMP_FL |
|
|
|
|
ZFS_PROJINHERIT_FL))
|
2011-07-02 02:56:35 +04:00
|
|
|
return (-EOPNOTSUPP);
|
|
|
|
|
2018-02-14 01:54:54 +03:00
|
|
|
if (ioctl_flags & ~ZFS_FL_USER_MODIFIABLE)
|
2011-07-02 02:56:35 +04:00
|
|
|
return (-EACCES);
|
|
|
|
|
|
|
|
if ((fchange(ioctl_flags, zfs_flags, FS_IMMUTABLE_FL, ZFS_IMMUTABLE) ||
|
|
|
|
fchange(ioctl_flags, zfs_flags, FS_APPEND_FL, ZFS_APPENDONLY)) &&
|
|
|
|
!capable(CAP_LINUX_IMMUTABLE))
|
2021-03-26 20:46:45 +03:00
|
|
|
return (-EPERM);
|
2011-07-02 02:56:35 +04:00
|
|
|
|
2021-03-20 07:00:59 +03:00
|
|
|
if (!zpl_inode_owner_or_capable(kcred->user_ns, ip))
|
2011-07-02 02:56:35 +04:00
|
|
|
return (-EACCES);
|
|
|
|
|
2018-02-14 01:54:54 +03:00
|
|
|
xva_init(xva);
|
|
|
|
xoap = xva_getxoptattr(xva);
|
2011-07-02 02:56:35 +04:00
|
|
|
|
Expose additional file level attributes
ZFS allows to update and retrieve additional file level attributes for
FreeBSD. This commit allows additional file level attributes to be
updated and retrieved for Linux. These include the flags stored in the
upper half of z_pflags only.
Two new IOCTLs have been added for this purpose. ZFS_IOC_GETDOSFLAGS
can be used to retrieve the attributes, while ZFS_IOC_SETDOSFLAGS can
be used to update the attributes.
Attributes that are allowed to be updated include ZFS_IMMUTABLE,
ZFS_APPENDONLY, ZFS_NOUNLINK, ZFS_ARCHIVE, ZFS_NODUMP, ZFS_SYSTEM,
ZFS_HIDDEN, ZFS_READONLY, ZFS_REPARSE, ZFS_OFFLINE and ZFS_SPARSE.
Flags can be or'd together while calling ZFS_IOC_SETDOSFLAGS.
Reviewed-by: Alexander Motin <mav@FreeBSD.org>
Reviewed-by: Brian Behlendorf <behlendorf1@llnl.gov>
Reviewed-by: Ryan Moeller <ryan@iXsystems.com>
Signed-off-by: Umer Saleem <usaleem@ixsystems.com>
Closes #13118
2022-03-08 04:52:03 +03:00
|
|
|
#define FLAG_CHANGE(iflag, zflag, xflag, xfield) do { \
|
|
|
|
if (((ioctl_flags & (iflag)) && !(zfs_flags & (zflag))) || \
|
|
|
|
((zfs_flags & (zflag)) && !(ioctl_flags & (iflag)))) { \
|
|
|
|
XVA_SET_REQ(xva, (xflag)); \
|
|
|
|
(xfield) = ((ioctl_flags & (iflag)) != 0); \
|
|
|
|
} \
|
|
|
|
} while (0)
|
|
|
|
|
|
|
|
FLAG_CHANGE(FS_IMMUTABLE_FL, ZFS_IMMUTABLE, XAT_IMMUTABLE,
|
|
|
|
xoap->xoa_immutable);
|
|
|
|
FLAG_CHANGE(FS_APPEND_FL, ZFS_APPENDONLY, XAT_APPENDONLY,
|
|
|
|
xoap->xoa_appendonly);
|
|
|
|
FLAG_CHANGE(FS_NODUMP_FL, ZFS_NODUMP, XAT_NODUMP,
|
|
|
|
xoap->xoa_nodump);
|
|
|
|
FLAG_CHANGE(ZFS_PROJINHERIT_FL, ZFS_PROJINHERIT, XAT_PROJINHERIT,
|
|
|
|
xoap->xoa_projinherit);
|
|
|
|
|
|
|
|
#undef FLAG_CHANGE
|
2018-02-14 01:54:54 +03:00
|
|
|
|
|
|
|
return (0);
|
|
|
|
}
|
|
|
|
|
|
|
|
static int
|
|
|
|
zpl_ioctl_setflags(struct file *filp, void __user *arg)
|
|
|
|
{
|
|
|
|
struct inode *ip = file_inode(filp);
|
|
|
|
uint32_t flags;
|
|
|
|
cred_t *cr = CRED();
|
|
|
|
xvattr_t xva;
|
|
|
|
int err;
|
|
|
|
fstrans_cookie_t cookie;
|
|
|
|
|
|
|
|
if (copy_from_user(&flags, arg, sizeof (flags)))
|
|
|
|
return (-EFAULT);
|
|
|
|
|
|
|
|
err = __zpl_ioctl_setflags(ip, flags, &xva);
|
|
|
|
if (err)
|
|
|
|
return (err);
|
|
|
|
|
2011-07-02 02:56:35 +04:00
|
|
|
crhold(cr);
|
2015-03-31 06:43:29 +03:00
|
|
|
cookie = spl_fstrans_mark();
|
2019-12-11 22:53:57 +03:00
|
|
|
err = -zfs_setattr(ITOZ(ip), (vattr_t *)&xva, 0, cr);
|
2015-03-31 06:43:29 +03:00
|
|
|
spl_fstrans_unmark(cookie);
|
2011-07-02 02:56:35 +04:00
|
|
|
crfree(cr);
|
|
|
|
|
2018-02-14 01:54:54 +03:00
|
|
|
return (err);
|
|
|
|
}
|
|
|
|
|
|
|
|
static int
|
|
|
|
zpl_ioctl_getxattr(struct file *filp, void __user *arg)
|
|
|
|
{
|
|
|
|
zfsxattr_t fsx = { 0 };
|
|
|
|
struct inode *ip = file_inode(filp);
|
|
|
|
int err;
|
|
|
|
|
|
|
|
fsx.fsx_xflags = __zpl_ioctl_getflags(ip);
|
|
|
|
fsx.fsx_projid = ITOZ(ip)->z_projid;
|
|
|
|
err = copy_to_user(arg, &fsx, sizeof (fsx));
|
|
|
|
|
|
|
|
return (err);
|
|
|
|
}
|
|
|
|
|
|
|
|
static int
|
|
|
|
zpl_ioctl_setxattr(struct file *filp, void __user *arg)
|
|
|
|
{
|
|
|
|
struct inode *ip = file_inode(filp);
|
|
|
|
zfsxattr_t fsx;
|
|
|
|
cred_t *cr = CRED();
|
|
|
|
xvattr_t xva;
|
|
|
|
xoptattr_t *xoap;
|
|
|
|
int err;
|
|
|
|
fstrans_cookie_t cookie;
|
|
|
|
|
|
|
|
if (copy_from_user(&fsx, arg, sizeof (fsx)))
|
|
|
|
return (-EFAULT);
|
|
|
|
|
|
|
|
if (!zpl_is_valid_projid(fsx.fsx_projid))
|
|
|
|
return (-EINVAL);
|
|
|
|
|
|
|
|
err = __zpl_ioctl_setflags(ip, fsx.fsx_xflags, &xva);
|
|
|
|
if (err)
|
|
|
|
return (err);
|
|
|
|
|
|
|
|
xoap = xva_getxoptattr(&xva);
|
|
|
|
XVA_SET_REQ(&xva, XAT_PROJID);
|
|
|
|
xoap->xoa_projid = fsx.fsx_projid;
|
|
|
|
|
|
|
|
crhold(cr);
|
|
|
|
cookie = spl_fstrans_mark();
|
2019-12-11 22:53:57 +03:00
|
|
|
err = -zfs_setattr(ITOZ(ip), (vattr_t *)&xva, 0, cr);
|
2018-02-14 01:54:54 +03:00
|
|
|
spl_fstrans_unmark(cookie);
|
|
|
|
crfree(cr);
|
|
|
|
|
|
|
|
return (err);
|
2011-07-02 02:56:35 +04:00
|
|
|
}
|
|
|
|
|
Expose additional file level attributes
ZFS allows to update and retrieve additional file level attributes for
FreeBSD. This commit allows additional file level attributes to be
updated and retrieved for Linux. These include the flags stored in the
upper half of z_pflags only.
Two new IOCTLs have been added for this purpose. ZFS_IOC_GETDOSFLAGS
can be used to retrieve the attributes, while ZFS_IOC_SETDOSFLAGS can
be used to update the attributes.
Attributes that are allowed to be updated include ZFS_IMMUTABLE,
ZFS_APPENDONLY, ZFS_NOUNLINK, ZFS_ARCHIVE, ZFS_NODUMP, ZFS_SYSTEM,
ZFS_HIDDEN, ZFS_READONLY, ZFS_REPARSE, ZFS_OFFLINE and ZFS_SPARSE.
Flags can be or'd together while calling ZFS_IOC_SETDOSFLAGS.
Reviewed-by: Alexander Motin <mav@FreeBSD.org>
Reviewed-by: Brian Behlendorf <behlendorf1@llnl.gov>
Reviewed-by: Ryan Moeller <ryan@iXsystems.com>
Signed-off-by: Umer Saleem <usaleem@ixsystems.com>
Closes #13118
2022-03-08 04:52:03 +03:00
|
|
|
/*
|
|
|
|
* Expose Additional File Level Attributes of ZFS.
|
|
|
|
*/
|
|
|
|
static int
|
|
|
|
zpl_ioctl_getdosflags(struct file *filp, void __user *arg)
|
|
|
|
{
|
|
|
|
struct inode *ip = file_inode(filp);
|
|
|
|
uint64_t dosflags = ITOZ(ip)->z_pflags;
|
|
|
|
dosflags &= ZFS_DOS_FL_USER_VISIBLE;
|
|
|
|
int err = copy_to_user(arg, &dosflags, sizeof (dosflags));
|
|
|
|
|
|
|
|
return (err);
|
|
|
|
}
|
|
|
|
|
|
|
|
static int
|
|
|
|
__zpl_ioctl_setdosflags(struct inode *ip, uint64_t ioctl_flags, xvattr_t *xva)
|
|
|
|
{
|
|
|
|
uint64_t zfs_flags = ITOZ(ip)->z_pflags;
|
|
|
|
xoptattr_t *xoap;
|
|
|
|
|
|
|
|
if (ioctl_flags & (~ZFS_DOS_FL_USER_VISIBLE))
|
|
|
|
return (-EOPNOTSUPP);
|
|
|
|
|
|
|
|
if ((fchange(ioctl_flags, zfs_flags, ZFS_IMMUTABLE, ZFS_IMMUTABLE) ||
|
|
|
|
fchange(ioctl_flags, zfs_flags, ZFS_APPENDONLY, ZFS_APPENDONLY)) &&
|
|
|
|
!capable(CAP_LINUX_IMMUTABLE))
|
|
|
|
return (-EPERM);
|
|
|
|
|
|
|
|
if (!zpl_inode_owner_or_capable(kcred->user_ns, ip))
|
|
|
|
return (-EACCES);
|
|
|
|
|
|
|
|
xva_init(xva);
|
|
|
|
xoap = xva_getxoptattr(xva);
|
|
|
|
|
|
|
|
#define FLAG_CHANGE(iflag, xflag, xfield) do { \
|
|
|
|
if (((ioctl_flags & (iflag)) && !(zfs_flags & (iflag))) || \
|
|
|
|
((zfs_flags & (iflag)) && !(ioctl_flags & (iflag)))) { \
|
|
|
|
XVA_SET_REQ(xva, (xflag)); \
|
|
|
|
(xfield) = ((ioctl_flags & (iflag)) != 0); \
|
|
|
|
} \
|
|
|
|
} while (0)
|
|
|
|
|
|
|
|
FLAG_CHANGE(ZFS_IMMUTABLE, XAT_IMMUTABLE, xoap->xoa_immutable);
|
|
|
|
FLAG_CHANGE(ZFS_APPENDONLY, XAT_APPENDONLY, xoap->xoa_appendonly);
|
|
|
|
FLAG_CHANGE(ZFS_NODUMP, XAT_NODUMP, xoap->xoa_nodump);
|
|
|
|
FLAG_CHANGE(ZFS_READONLY, XAT_READONLY, xoap->xoa_readonly);
|
|
|
|
FLAG_CHANGE(ZFS_HIDDEN, XAT_HIDDEN, xoap->xoa_hidden);
|
|
|
|
FLAG_CHANGE(ZFS_SYSTEM, XAT_SYSTEM, xoap->xoa_system);
|
|
|
|
FLAG_CHANGE(ZFS_ARCHIVE, XAT_ARCHIVE, xoap->xoa_archive);
|
|
|
|
FLAG_CHANGE(ZFS_NOUNLINK, XAT_NOUNLINK, xoap->xoa_nounlink);
|
|
|
|
FLAG_CHANGE(ZFS_REPARSE, XAT_REPARSE, xoap->xoa_reparse);
|
|
|
|
FLAG_CHANGE(ZFS_OFFLINE, XAT_OFFLINE, xoap->xoa_offline);
|
|
|
|
FLAG_CHANGE(ZFS_SPARSE, XAT_SPARSE, xoap->xoa_sparse);
|
|
|
|
|
|
|
|
#undef FLAG_CHANGE
|
|
|
|
|
|
|
|
return (0);
|
|
|
|
}
|
|
|
|
|
|
|
|
/*
|
|
|
|
* Set Additional File Level Attributes of ZFS.
|
|
|
|
*/
|
|
|
|
static int
|
|
|
|
zpl_ioctl_setdosflags(struct file *filp, void __user *arg)
|
|
|
|
{
|
|
|
|
struct inode *ip = file_inode(filp);
|
|
|
|
uint64_t dosflags;
|
|
|
|
cred_t *cr = CRED();
|
|
|
|
xvattr_t xva;
|
|
|
|
int err;
|
|
|
|
fstrans_cookie_t cookie;
|
|
|
|
|
|
|
|
if (copy_from_user(&dosflags, arg, sizeof (dosflags)))
|
|
|
|
return (-EFAULT);
|
|
|
|
|
|
|
|
err = __zpl_ioctl_setdosflags(ip, dosflags, &xva);
|
|
|
|
if (err)
|
|
|
|
return (err);
|
|
|
|
|
|
|
|
crhold(cr);
|
|
|
|
cookie = spl_fstrans_mark();
|
|
|
|
err = -zfs_setattr(ITOZ(ip), (vattr_t *)&xva, 0, cr);
|
|
|
|
spl_fstrans_unmark(cookie);
|
|
|
|
crfree(cr);
|
|
|
|
|
|
|
|
return (err);
|
|
|
|
}
|
|
|
|
|
2013-06-26 23:53:04 +04:00
|
|
|
static long
|
|
|
|
zpl_ioctl(struct file *filp, unsigned int cmd, unsigned long arg)
|
|
|
|
{
|
|
|
|
switch (cmd) {
|
2021-12-18 03:18:37 +03:00
|
|
|
case FS_IOC_GETVERSION:
|
|
|
|
return (zpl_ioctl_getversion(filp, (void *)arg));
|
2011-07-02 02:56:35 +04:00
|
|
|
case FS_IOC_GETFLAGS:
|
|
|
|
return (zpl_ioctl_getflags(filp, (void *)arg));
|
|
|
|
case FS_IOC_SETFLAGS:
|
|
|
|
return (zpl_ioctl_setflags(filp, (void *)arg));
|
2018-02-14 01:54:54 +03:00
|
|
|
case ZFS_IOC_FSGETXATTR:
|
|
|
|
return (zpl_ioctl_getxattr(filp, (void *)arg));
|
|
|
|
case ZFS_IOC_FSSETXATTR:
|
|
|
|
return (zpl_ioctl_setxattr(filp, (void *)arg));
|
Expose additional file level attributes
ZFS allows to update and retrieve additional file level attributes for
FreeBSD. This commit allows additional file level attributes to be
updated and retrieved for Linux. These include the flags stored in the
upper half of z_pflags only.
Two new IOCTLs have been added for this purpose. ZFS_IOC_GETDOSFLAGS
can be used to retrieve the attributes, while ZFS_IOC_SETDOSFLAGS can
be used to update the attributes.
Attributes that are allowed to be updated include ZFS_IMMUTABLE,
ZFS_APPENDONLY, ZFS_NOUNLINK, ZFS_ARCHIVE, ZFS_NODUMP, ZFS_SYSTEM,
ZFS_HIDDEN, ZFS_READONLY, ZFS_REPARSE, ZFS_OFFLINE and ZFS_SPARSE.
Flags can be or'd together while calling ZFS_IOC_SETDOSFLAGS.
Reviewed-by: Alexander Motin <mav@FreeBSD.org>
Reviewed-by: Brian Behlendorf <behlendorf1@llnl.gov>
Reviewed-by: Ryan Moeller <ryan@iXsystems.com>
Signed-off-by: Umer Saleem <usaleem@ixsystems.com>
Closes #13118
2022-03-08 04:52:03 +03:00
|
|
|
case ZFS_IOC_GETDOSFLAGS:
|
|
|
|
return (zpl_ioctl_getdosflags(filp, (void *)arg));
|
|
|
|
case ZFS_IOC_SETDOSFLAGS:
|
|
|
|
return (zpl_ioctl_setdosflags(filp, (void *)arg));
|
2013-06-26 23:53:04 +04:00
|
|
|
default:
|
|
|
|
return (-ENOTTY);
|
|
|
|
}
|
|
|
|
}
|
|
|
|
|
|
|
|
#ifdef CONFIG_COMPAT
|
|
|
|
static long
|
|
|
|
zpl_compat_ioctl(struct file *filp, unsigned int cmd, unsigned long arg)
|
|
|
|
{
|
2016-03-31 01:00:23 +03:00
|
|
|
switch (cmd) {
|
2021-12-18 03:18:37 +03:00
|
|
|
case FS_IOC32_GETVERSION:
|
|
|
|
cmd = FS_IOC_GETVERSION;
|
|
|
|
break;
|
2016-03-31 01:00:23 +03:00
|
|
|
case FS_IOC32_GETFLAGS:
|
|
|
|
cmd = FS_IOC_GETFLAGS;
|
|
|
|
break;
|
|
|
|
case FS_IOC32_SETFLAGS:
|
|
|
|
cmd = FS_IOC_SETFLAGS;
|
|
|
|
break;
|
|
|
|
default:
|
|
|
|
return (-ENOTTY);
|
|
|
|
}
|
|
|
|
return (zpl_ioctl(filp, cmd, (unsigned long)compat_ptr(arg)));
|
2013-06-26 23:53:04 +04:00
|
|
|
}
|
|
|
|
#endif /* CONFIG_COMPAT */
|
|
|
|
|
|
|
|
|
2011-01-26 23:03:58 +03:00
|
|
|
const struct address_space_operations zpl_address_space_operations = {
|
2022-04-02 02:15:25 +03:00
|
|
|
#ifdef HAVE_VFS_READPAGES
|
2011-05-28 05:53:07 +04:00
|
|
|
.readpages = zpl_readpages,
|
2022-04-02 02:15:25 +03:00
|
|
|
#else
|
|
|
|
.readahead = zpl_readahead,
|
|
|
|
#endif
|
2022-05-27 23:44:43 +03:00
|
|
|
#ifdef HAVE_VFS_READ_FOLIO
|
|
|
|
.read_folio = zpl_read_folio,
|
|
|
|
#else
|
2011-01-26 23:03:58 +03:00
|
|
|
.readpage = zpl_readpage,
|
2022-05-27 23:44:43 +03:00
|
|
|
#endif
|
2011-01-26 23:03:58 +03:00
|
|
|
.writepage = zpl_writepage,
|
2013-11-01 23:26:11 +04:00
|
|
|
.writepages = zpl_writepages,
|
2018-08-27 20:04:21 +03:00
|
|
|
.direct_IO = zpl_direct_IO,
|
2021-07-26 20:55:55 +03:00
|
|
|
#ifdef HAVE_VFS_SET_PAGE_DIRTY_NOBUFFERS
|
|
|
|
.set_page_dirty = __set_page_dirty_nobuffers,
|
|
|
|
#endif
|
2022-04-27 22:54:17 +03:00
|
|
|
#ifdef HAVE_VFS_FILEMAP_DIRTY_FOLIO
|
|
|
|
.dirty_folio = filemap_dirty_folio,
|
|
|
|
#endif
|
2011-01-26 23:03:58 +03:00
|
|
|
};
|
|
|
|
|
|
|
|
const struct file_operations zpl_file_operations = {
|
2011-03-08 22:04:51 +03:00
|
|
|
.open = zpl_open,
|
|
|
|
.release = zpl_release,
|
2013-06-13 21:51:09 +04:00
|
|
|
.llseek = zpl_llseek,
|
2015-05-12 02:26:18 +03:00
|
|
|
#ifdef HAVE_VFS_RW_ITERATE
|
2017-03-06 20:20:20 +03:00
|
|
|
#ifdef HAVE_NEW_SYNC_READ
|
|
|
|
.read = new_sync_read,
|
|
|
|
.write = new_sync_write,
|
|
|
|
#endif
|
2015-05-12 02:26:18 +03:00
|
|
|
.read_iter = zpl_iter_read,
|
|
|
|
.write_iter = zpl_iter_write,
|
2020-12-18 19:48:26 +03:00
|
|
|
#ifdef HAVE_VFS_IOV_ITER
|
|
|
|
.splice_read = generic_file_splice_read,
|
|
|
|
.splice_write = iter_file_splice_write,
|
|
|
|
#endif
|
2015-05-12 02:26:18 +03:00
|
|
|
#else
|
2017-03-06 20:20:20 +03:00
|
|
|
.read = do_sync_read,
|
|
|
|
.write = do_sync_write,
|
Linux AIO Support
nfsd uses do_readv_writev() to implement fops->read and fops->write.
do_readv_writev() will attempt to read/write using fops->aio_read and
fops->aio_write, but it will fallback to fops->read and fops->write when
AIO is not available. However, the fallback will perform a call for each
individual data page. Since our default recordsize is 128KB, sequential
operations on NFS will generate 32 DMU transactions where only 1
transaction was needed. That was unnecessary overhead and we implement
fops->aio_read and fops->aio_write to eliminate it.
ZFS originated in OpenSolaris, where the AIO API is entirely implemented
in userland's libc by intelligently mapping them to VOP_WRITE, VOP_READ
and VOP_FSYNC. Linux implements AIO inside the kernel itself. Linux
filesystems therefore must implement their own AIO logic and nearly all
of them implement fops->aio_write synchronously. Consequently, they do
not implement aio_fsync(). However, since the ZPL works by mapping
Linux's VFS calls to the functions implementing Illumos' VFS operations,
we instead implement AIO in the kernel by mapping the operations to the
VOP_READ, VOP_WRITE and VOP_FSYNC equivalents. We therefore implement
fops->aio_fsync.
One might be inclined to make our fops->aio_write implementation
synchronous to make software that expects this behavior safe. However,
there are several reasons not to do this:
1. Other platforms do not implement aio_write() synchronously and since
the majority of userland software using AIO should be cross platform,
expectations of synchronous behavior should not be a problem.
2. We would hurt the performance of programs that use POSIX interfaces
properly while simultaneously encouraging the creation of more
non-compliant software.
3. The broader community concluded that userland software should be
patched to properly use POSIX interfaces instead of implementing hacks
in filesystems to cater to broken software. This concept is best
described as the O_PONIES debate.
4. Making an asynchronous write synchronous is non sequitur.
Any software dependent on synchronous aio_write behavior will suffer
data loss on ZFSOnLinux in a kernel panic / system failure of at most
zfs_txg_timeout seconds, which by default is 5 seconds. This seems like
a reasonable consequence of using non-compliant software.
It should be noted that this is also a problem in the kernel itself
where nfsd does not pass O_SYNC on files opened with it and instead
relies on a open()/write()/close() to enforce synchronous behavior when
the flush is only guarenteed on last close.
Exporting any filesystem that does not implement AIO via NFS risks data
loss in the event of a kernel panic / system failure when something else
is also accessing the file. Exporting any file system that implements
AIO the way this patch does bears similar risk. However, it seems
reasonable to forgo crippling our AIO implementation in favor of
developing patches to fix this problem in Linux's nfsd for the reasons
stated earlier. In the interim, the risk will remain. Failing to
implement AIO will not change the problem that nfsd created, so there is
no reason for nfsd's mistake to block our implementation of AIO.
It also should be noted that `aio_cancel()` will always return
`AIO_NOTCANCELED` under this implementation. It is possible to implement
aio_cancel by deferring work to taskqs and use `kiocb_set_cancel_fn()`
to set a callback function for cancelling work sent to taskqs, but the
simpler approach is allowed by the specification:
```
Which operations are cancelable is implementation-defined.
```
http://pubs.opengroup.org/onlinepubs/009695399/functions/aio_cancel.html
The only programs on my system that are capable of using `aio_cancel()`
are QEMU, beecrypt and fio use it according to a recursive grep of my
system's `/usr/src/debug`. That suggests that `aio_cancel()` users are
rare. Implementing aio_cancel() is left to a future date when it is
clear that there are consumers that benefit from its implementation to
justify the work.
Lastly, it is important to know that handling of the iovec updates differs
between Illumos and Linux in the implementation of read/write. On Linux,
it is the VFS' responsibility whle on Illumos, it is the filesystem's
responsibility. We take the intermediate solution of copying the iovec
so that the ZFS code can update it like on Solaris while leaving the
originals alone. This imposes some overhead. We could always revisit
this should profiling show that the allocations are a problem.
Signed-off-by: Richard Yao <ryao@gentoo.org>
Signed-off-by: Brian Behlendorf <behlendorf1@llnl.gov>
Closes #223
Closes #2373
2014-08-04 15:09:32 +04:00
|
|
|
.aio_read = zpl_aio_read,
|
|
|
|
.aio_write = zpl_aio_write,
|
2015-05-12 02:26:18 +03:00
|
|
|
#endif
|
2011-02-03 21:34:05 +03:00
|
|
|
.mmap = zpl_mmap,
|
2011-01-26 23:03:58 +03:00
|
|
|
.fsync = zpl_fsync,
|
2016-11-15 20:20:46 +03:00
|
|
|
#ifdef HAVE_FILE_AIO_FSYNC
|
Linux AIO Support
nfsd uses do_readv_writev() to implement fops->read and fops->write.
do_readv_writev() will attempt to read/write using fops->aio_read and
fops->aio_write, but it will fallback to fops->read and fops->write when
AIO is not available. However, the fallback will perform a call for each
individual data page. Since our default recordsize is 128KB, sequential
operations on NFS will generate 32 DMU transactions where only 1
transaction was needed. That was unnecessary overhead and we implement
fops->aio_read and fops->aio_write to eliminate it.
ZFS originated in OpenSolaris, where the AIO API is entirely implemented
in userland's libc by intelligently mapping them to VOP_WRITE, VOP_READ
and VOP_FSYNC. Linux implements AIO inside the kernel itself. Linux
filesystems therefore must implement their own AIO logic and nearly all
of them implement fops->aio_write synchronously. Consequently, they do
not implement aio_fsync(). However, since the ZPL works by mapping
Linux's VFS calls to the functions implementing Illumos' VFS operations,
we instead implement AIO in the kernel by mapping the operations to the
VOP_READ, VOP_WRITE and VOP_FSYNC equivalents. We therefore implement
fops->aio_fsync.
One might be inclined to make our fops->aio_write implementation
synchronous to make software that expects this behavior safe. However,
there are several reasons not to do this:
1. Other platforms do not implement aio_write() synchronously and since
the majority of userland software using AIO should be cross platform,
expectations of synchronous behavior should not be a problem.
2. We would hurt the performance of programs that use POSIX interfaces
properly while simultaneously encouraging the creation of more
non-compliant software.
3. The broader community concluded that userland software should be
patched to properly use POSIX interfaces instead of implementing hacks
in filesystems to cater to broken software. This concept is best
described as the O_PONIES debate.
4. Making an asynchronous write synchronous is non sequitur.
Any software dependent on synchronous aio_write behavior will suffer
data loss on ZFSOnLinux in a kernel panic / system failure of at most
zfs_txg_timeout seconds, which by default is 5 seconds. This seems like
a reasonable consequence of using non-compliant software.
It should be noted that this is also a problem in the kernel itself
where nfsd does not pass O_SYNC on files opened with it and instead
relies on a open()/write()/close() to enforce synchronous behavior when
the flush is only guarenteed on last close.
Exporting any filesystem that does not implement AIO via NFS risks data
loss in the event of a kernel panic / system failure when something else
is also accessing the file. Exporting any file system that implements
AIO the way this patch does bears similar risk. However, it seems
reasonable to forgo crippling our AIO implementation in favor of
developing patches to fix this problem in Linux's nfsd for the reasons
stated earlier. In the interim, the risk will remain. Failing to
implement AIO will not change the problem that nfsd created, so there is
no reason for nfsd's mistake to block our implementation of AIO.
It also should be noted that `aio_cancel()` will always return
`AIO_NOTCANCELED` under this implementation. It is possible to implement
aio_cancel by deferring work to taskqs and use `kiocb_set_cancel_fn()`
to set a callback function for cancelling work sent to taskqs, but the
simpler approach is allowed by the specification:
```
Which operations are cancelable is implementation-defined.
```
http://pubs.opengroup.org/onlinepubs/009695399/functions/aio_cancel.html
The only programs on my system that are capable of using `aio_cancel()`
are QEMU, beecrypt and fio use it according to a recursive grep of my
system's `/usr/src/debug`. That suggests that `aio_cancel()` users are
rare. Implementing aio_cancel() is left to a future date when it is
clear that there are consumers that benefit from its implementation to
justify the work.
Lastly, it is important to know that handling of the iovec updates differs
between Illumos and Linux in the implementation of read/write. On Linux,
it is the VFS' responsibility whle on Illumos, it is the filesystem's
responsibility. We take the intermediate solution of copying the iovec
so that the ZFS code can update it like on Solaris while leaving the
originals alone. This imposes some overhead. We could always revisit
this should profiling show that the allocations are a problem.
Signed-off-by: Richard Yao <ryao@gentoo.org>
Signed-off-by: Brian Behlendorf <behlendorf1@llnl.gov>
Closes #223
Closes #2373
2014-08-04 15:09:32 +04:00
|
|
|
.aio_fsync = zpl_aio_fsync,
|
2016-11-15 20:20:46 +03:00
|
|
|
#endif
|
2013-11-01 23:26:11 +04:00
|
|
|
.fallocate = zpl_fallocate,
|
|
|
|
.unlocked_ioctl = zpl_ioctl,
|
2013-06-26 23:53:04 +04:00
|
|
|
#ifdef CONFIG_COMPAT
|
2013-11-01 23:26:11 +04:00
|
|
|
.compat_ioctl = zpl_compat_ioctl,
|
2013-06-26 23:53:04 +04:00
|
|
|
#endif
|
2011-01-26 23:03:58 +03:00
|
|
|
};
|
|
|
|
|
|
|
|
const struct file_operations zpl_dir_file_operations = {
|
|
|
|
.llseek = generic_file_llseek,
|
|
|
|
.read = generic_read_dir,
|
2018-05-03 01:01:24 +03:00
|
|
|
#if defined(HAVE_VFS_ITERATE_SHARED)
|
2016-05-19 00:30:20 +03:00
|
|
|
.iterate_shared = zpl_iterate,
|
|
|
|
#elif defined(HAVE_VFS_ITERATE)
|
2013-08-07 16:53:45 +04:00
|
|
|
.iterate = zpl_iterate,
|
|
|
|
#else
|
2011-01-26 23:03:58 +03:00
|
|
|
.readdir = zpl_readdir,
|
2013-08-07 16:53:45 +04:00
|
|
|
#endif
|
2011-01-26 23:03:58 +03:00
|
|
|
.fsync = zpl_fsync,
|
2013-06-26 23:53:04 +04:00
|
|
|
.unlocked_ioctl = zpl_ioctl,
|
|
|
|
#ifdef CONFIG_COMPAT
|
|
|
|
.compat_ioctl = zpl_compat_ioctl,
|
|
|
|
#endif
|
2011-01-26 23:03:58 +03:00
|
|
|
};
|
linux: add basic fallocate(mode=0/2) compatibility
Implement semi-compatible functionality for mode=0 (preallocation)
and mode=FALLOC_FL_KEEP_SIZE (preallocation beyond EOF) for ZPL.
Since ZFS does COW and snapshots, preallocating blocks for a file
cannot guarantee that writes to the file will not run out of space.
Even if the first overwrite was guaranteed, it would not handle any
later overwrite of blocks due to COW, so strict compliance is futile.
Instead, make a best-effort check that at least enough free space is
currently available in the pool (with a bit of margin), then create
a sparse file of the requested size and continue on with life.
This does not handle all cases (e.g. several fallocate() calls before
writing into the files when the filesystem is nearly full), which
would require a more complex mechanism to be implemented, probably
based on a modified version of dmu_prealloc(), but is usable as-is.
A new module option zfs_fallocate_reserve_percent is used to control
the reserve margin for any single fallocate call. By default, this
is 110% of the requested preallocation size, so an additional 10% of
available space is reserved for overhead to allow the application a
good chance of finishing the write when the fallocate() succeeds.
If the heuristics of this basic fallocate implementation are not
desirable, the old non-functional behavior of returning EOPNOTSUPP
for calls can be restored by setting zfs_fallocate_reserve_percent=0.
The parameter of zfs_statvfs() is changed to take an inode instead
of a dentry, since no dentry is available in zfs_fallocate_common().
A few tests from @behlendorf cover basic fallocate functionality.
Reviewed-by: Richard Laager <rlaager@wiktel.com>
Reviewed-by: Arshad Hussain <arshad.super@gmail.com>
Reviewed-by: Matthew Ahrens <mahrens@delphix.com>
Co-authored-by: Brian Behlendorf <behlendorf1@llnl.gov>
Signed-off-by: Andreas Dilger <adilger@dilger.ca>
Issue #326
Closes #10408
2020-06-18 21:22:11 +03:00
|
|
|
|
2022-01-21 19:07:15 +03:00
|
|
|
/* CSTYLED */
|
linux: add basic fallocate(mode=0/2) compatibility
Implement semi-compatible functionality for mode=0 (preallocation)
and mode=FALLOC_FL_KEEP_SIZE (preallocation beyond EOF) for ZPL.
Since ZFS does COW and snapshots, preallocating blocks for a file
cannot guarantee that writes to the file will not run out of space.
Even if the first overwrite was guaranteed, it would not handle any
later overwrite of blocks due to COW, so strict compliance is futile.
Instead, make a best-effort check that at least enough free space is
currently available in the pool (with a bit of margin), then create
a sparse file of the requested size and continue on with life.
This does not handle all cases (e.g. several fallocate() calls before
writing into the files when the filesystem is nearly full), which
would require a more complex mechanism to be implemented, probably
based on a modified version of dmu_prealloc(), but is usable as-is.
A new module option zfs_fallocate_reserve_percent is used to control
the reserve margin for any single fallocate call. By default, this
is 110% of the requested preallocation size, so an additional 10% of
available space is reserved for overhead to allow the application a
good chance of finishing the write when the fallocate() succeeds.
If the heuristics of this basic fallocate implementation are not
desirable, the old non-functional behavior of returning EOPNOTSUPP
for calls can be restored by setting zfs_fallocate_reserve_percent=0.
The parameter of zfs_statvfs() is changed to take an inode instead
of a dentry, since no dentry is available in zfs_fallocate_common().
A few tests from @behlendorf cover basic fallocate functionality.
Reviewed-by: Richard Laager <rlaager@wiktel.com>
Reviewed-by: Arshad Hussain <arshad.super@gmail.com>
Reviewed-by: Matthew Ahrens <mahrens@delphix.com>
Co-authored-by: Brian Behlendorf <behlendorf1@llnl.gov>
Signed-off-by: Andreas Dilger <adilger@dilger.ca>
Issue #326
Closes #10408
2020-06-18 21:22:11 +03:00
|
|
|
module_param(zfs_fallocate_reserve_percent, uint, 0644);
|
|
|
|
MODULE_PARM_DESC(zfs_fallocate_reserve_percent,
|
2022-01-21 19:07:15 +03:00
|
|
|
"Percentage of length to use for the available capacity check");
|