mirror of
https://git.proxmox.com/git/mirror_zfs.git
synced 2024-11-17 18:11:00 +03:00
c15d36c674
== Motivation and Context The current implementation of 'sharenfs' and 'sharesmb' relies on the use of the sharetab file. The use of this file is os-specific and not required by linux or freebsd. Currently the code must maintain updates to this file which adds complexity and presents a significant performance impact when sharing many datasets. In addition, concurrently running 'zfs sharenfs' command results in missing entries in the sharetab file leading to unexpected failures. == Description This change removes the sharetab logic from the linux and freebsd implementation of 'sharenfs' and 'sharesmb'. It still preserves an os-specific library which contains the logic required for sharing NFS or SMB. The following entry points exist in the vastly simplified libshare library: - sa_enable_share -- shares a dataset but may not commit the change - sa_disable_share -- unshares a dataset but may not commit the change - sa_is_shared -- determine if a dataset is shared - sa_commit_share -- notify NFS/SMB subsystem to commit the shares - sa_validate_shareopts -- determine if sharing options are valid The sa_commit_share entry point is provided as a performance enhancement and is not required. The sa_enable_share/sa_disable_share may commit the share as part of the implementation. Libshare provides a framework for both NFS and SMB but some operating systems may not fully support these protocols or all features of the protocol. NFS Operation: For linux, libshare updates /etc/exports.d/zfs.exports to add and remove shares and then commits the changes by invoking 'exportfs -r'. This file, is automatically read by the kernel NFS implementation which makes for better integration with the NFS systemd service. For FreeBSD, libshare updates /etc/zfs/exports to add and remove shares and then commits the changes by sending a SIGHUP to mountd. SMB Operation: For linux, libshare adds and removes files in /var/lib/samba/usershares by calling the 'net' command directly. There is no need to commit the changes. FreeBSD does not support SMB. == Performance Results To test sharing performance we created a pool with an increasing number of datasets and invoked various zfs actions that would enable and disable sharing. The performance testing was limited to NFS sharing. The following tests were performed on an 8 vCPU system with 128GB and a pool comprised of 4 50GB SSDs: Scale testing: - Share all filesystems in parallel -- zfs sharenfs=on <dataset> & - Unshare all filesystems in parallel -- zfs sharenfs=off <dataset> & Functional testing: - share each filesystem serially -- zfs share -a - unshare each filesystem serially -- zfs unshare -a - reset sharenfs property and unshare -- zfs inherit -r sharenfs <pool> For 'zfs sharenfs=on' scale testing we saw an average reduction in time of 89.43% and for 'zfs sharenfs=off' we saw an average reduction in time of 83.36%. Functional testing also shows a huge improvement: - zfs share -- 97.97% reduction in time - zfs unshare -- 96.47% reduction in time - zfs inhert -r sharenfs -- 99.01% reduction in time Reviewed-by: Matt Ahrens <matt@delphix.com> Reviewed-by: Brian Behlendorf <behlendorf1@llnl.gov> Reviewed-by: Ryan Moeller <ryan@ixsystems.com> Reviewed-by: Bryant G. Ly <bryangly@gmail.com> Signed-off-by: George Wilson <gwilson@delphix.com> External-Issue: DLPX-68690 Closes #1603 Closes #7692 Closes #7943 Closes #10300
454 lines
10 KiB
C
454 lines
10 KiB
C
/*
|
|
* CDDL HEADER START
|
|
*
|
|
* The contents of this file are subject to the terms of the
|
|
* Common Development and Distribution License (the "License").
|
|
* You may not use this file except in compliance with the License.
|
|
*
|
|
* You can obtain a copy of the license at usr/src/OPENSOLARIS.LICENSE
|
|
* or http://www.opensolaris.org/os/licensing.
|
|
* See the License for the specific language governing permissions
|
|
* and limitations under the License.
|
|
*
|
|
* When distributing Covered Code, include this CDDL HEADER in each
|
|
* file and include the License file at usr/src/OPENSOLARIS.LICENSE.
|
|
* If applicable, add the following below this CDDL HEADER, with the
|
|
* fields enclosed by brackets "[]" replaced with your own identifying
|
|
* information: Portions Copyright [yyyy] [name of copyright owner]
|
|
*
|
|
* CDDL HEADER END
|
|
*/
|
|
|
|
/*
|
|
* Copyright (c) 2002, 2010, Oracle and/or its affiliates. All rights reserved.
|
|
* Copyright (c) 2011,2012 Turbo Fredriksson <turbo@bayour.com>, based on nfs.c
|
|
* by Gunnar Beutner
|
|
* Copyright (c) 2019, 2020 by Delphix. All rights reserved.
|
|
*
|
|
* This is an addition to the zfs device driver to add, modify and remove SMB
|
|
* shares using the 'net share' command that comes with Samba.
|
|
*
|
|
* TESTING
|
|
* Make sure that samba listens to 'localhost' (127.0.0.1) and that the options
|
|
* 'usershare max shares' and 'usershare owner only' have been reviewed/set
|
|
* accordingly (see zfs(8) for information).
|
|
*
|
|
* Once configuration in samba have been done, test that this
|
|
* works with the following three commands (in this case, my ZFS
|
|
* filesystem is called 'share/Test1'):
|
|
*
|
|
* (root)# net -U root -S 127.0.0.1 usershare add Test1 /share/Test1 \
|
|
* "Comment: /share/Test1" "Everyone:F"
|
|
* (root)# net usershare list | grep -i test
|
|
* (root)# net -U root -S 127.0.0.1 usershare delete Test1
|
|
*
|
|
* The first command will create a user share that gives everyone full access.
|
|
* To limit the access below that, use normal UNIX commands (chmod, chown etc).
|
|
*/
|
|
|
|
#include <time.h>
|
|
#include <stdlib.h>
|
|
#include <stdio.h>
|
|
#include <string.h>
|
|
#include <strings.h>
|
|
#include <fcntl.h>
|
|
#include <sys/wait.h>
|
|
#include <unistd.h>
|
|
#include <dirent.h>
|
|
#include <sys/types.h>
|
|
#include <sys/stat.h>
|
|
#include <libzfs.h>
|
|
#include <libshare.h>
|
|
#include "libshare_impl.h"
|
|
#include "smb.h"
|
|
|
|
static boolean_t smb_available(void);
|
|
|
|
static sa_fstype_t *smb_fstype;
|
|
|
|
smb_share_t *smb_shares;
|
|
static int smb_disable_share(sa_share_impl_t impl_share);
|
|
static boolean_t smb_is_share_active(sa_share_impl_t impl_share);
|
|
|
|
/*
|
|
* Retrieve the list of SMB shares.
|
|
*/
|
|
static int
|
|
smb_retrieve_shares(void)
|
|
{
|
|
int rc = SA_OK;
|
|
char file_path[PATH_MAX], line[512], *token, *key, *value;
|
|
char *dup_value = NULL, *path = NULL, *comment = NULL, *name = NULL;
|
|
char *guest_ok = NULL;
|
|
DIR *shares_dir;
|
|
FILE *share_file_fp = NULL;
|
|
struct dirent *directory;
|
|
struct stat eStat;
|
|
smb_share_t *shares, *new_shares = NULL;
|
|
|
|
/* opendir(), stat() */
|
|
shares_dir = opendir(SHARE_DIR);
|
|
if (shares_dir == NULL)
|
|
return (SA_SYSTEM_ERR);
|
|
|
|
/* Go through the directory, looking for shares */
|
|
while ((directory = readdir(shares_dir))) {
|
|
if (directory->d_name[0] == '.')
|
|
continue;
|
|
|
|
snprintf(file_path, sizeof (file_path),
|
|
"%s/%s", SHARE_DIR, directory->d_name);
|
|
|
|
if (stat(file_path, &eStat) == -1) {
|
|
rc = SA_SYSTEM_ERR;
|
|
goto out;
|
|
}
|
|
|
|
if (!S_ISREG(eStat.st_mode))
|
|
continue;
|
|
|
|
if ((share_file_fp = fopen(file_path, "r")) == NULL) {
|
|
rc = SA_SYSTEM_ERR;
|
|
goto out;
|
|
}
|
|
|
|
name = strdup(directory->d_name);
|
|
if (name == NULL) {
|
|
rc = SA_NO_MEMORY;
|
|
goto out;
|
|
}
|
|
|
|
while (fgets(line, sizeof (line), share_file_fp)) {
|
|
if (line[0] == '#')
|
|
continue;
|
|
|
|
/* Trim trailing new-line character(s). */
|
|
while (line[strlen(line) - 1] == '\r' ||
|
|
line[strlen(line) - 1] == '\n')
|
|
line[strlen(line) - 1] = '\0';
|
|
|
|
/* Split the line in two, separated by '=' */
|
|
token = strchr(line, '=');
|
|
if (token == NULL)
|
|
continue;
|
|
|
|
key = line;
|
|
value = token + 1;
|
|
*token = '\0';
|
|
|
|
dup_value = strdup(value);
|
|
if (dup_value == NULL) {
|
|
rc = SA_NO_MEMORY;
|
|
goto out;
|
|
}
|
|
|
|
if (strcmp(key, "path") == 0) {
|
|
free(path);
|
|
path = dup_value;
|
|
} else if (strcmp(key, "comment") == 0) {
|
|
free(comment);
|
|
comment = dup_value;
|
|
} else if (strcmp(key, "guest_ok") == 0) {
|
|
free(guest_ok);
|
|
guest_ok = dup_value;
|
|
} else
|
|
free(dup_value);
|
|
|
|
dup_value = NULL;
|
|
|
|
if (path == NULL || comment == NULL || guest_ok == NULL)
|
|
continue; /* Incomplete share definition */
|
|
else {
|
|
shares = (smb_share_t *)
|
|
malloc(sizeof (smb_share_t));
|
|
if (shares == NULL) {
|
|
rc = SA_NO_MEMORY;
|
|
goto out;
|
|
}
|
|
|
|
(void) strlcpy(shares->name, name,
|
|
sizeof (shares->name));
|
|
|
|
(void) strlcpy(shares->path, path,
|
|
sizeof (shares->path));
|
|
|
|
(void) strlcpy(shares->comment, comment,
|
|
sizeof (shares->comment));
|
|
|
|
shares->guest_ok = atoi(guest_ok);
|
|
|
|
shares->next = new_shares;
|
|
new_shares = shares;
|
|
|
|
free(path);
|
|
free(comment);
|
|
free(guest_ok);
|
|
|
|
path = NULL;
|
|
comment = NULL;
|
|
guest_ok = NULL;
|
|
}
|
|
}
|
|
|
|
out:
|
|
if (share_file_fp != NULL) {
|
|
fclose(share_file_fp);
|
|
share_file_fp = NULL;
|
|
}
|
|
|
|
free(name);
|
|
free(path);
|
|
free(comment);
|
|
free(guest_ok);
|
|
|
|
name = NULL;
|
|
path = NULL;
|
|
comment = NULL;
|
|
guest_ok = NULL;
|
|
}
|
|
closedir(shares_dir);
|
|
|
|
smb_shares = new_shares;
|
|
|
|
return (rc);
|
|
}
|
|
|
|
/*
|
|
* Used internally by smb_enable_share to enable sharing for a single host.
|
|
*/
|
|
static int
|
|
smb_enable_share_one(const char *sharename, const char *sharepath)
|
|
{
|
|
char *argv[10], *pos;
|
|
char name[SMB_NAME_MAX], comment[SMB_COMMENT_MAX];
|
|
int rc;
|
|
|
|
/* Support ZFS share name regexp '[[:alnum:]_-.: ]' */
|
|
strlcpy(name, sharename, sizeof (name));
|
|
name [sizeof (name)-1] = '\0';
|
|
|
|
pos = name;
|
|
while (*pos != '\0') {
|
|
switch (*pos) {
|
|
case '/':
|
|
case '-':
|
|
case ':':
|
|
case ' ':
|
|
*pos = '_';
|
|
}
|
|
|
|
++pos;
|
|
}
|
|
|
|
/*
|
|
* CMD: net -S NET_CMD_ARG_HOST usershare add Test1 /share/Test1 \
|
|
* "Comment" "Everyone:F"
|
|
*/
|
|
snprintf(comment, sizeof (comment), "Comment: %s", sharepath);
|
|
|
|
argv[0] = NET_CMD_PATH;
|
|
argv[1] = (char *)"-S";
|
|
argv[2] = NET_CMD_ARG_HOST;
|
|
argv[3] = (char *)"usershare";
|
|
argv[4] = (char *)"add";
|
|
argv[5] = (char *)name;
|
|
argv[6] = (char *)sharepath;
|
|
argv[7] = (char *)comment;
|
|
argv[8] = "Everyone:F";
|
|
argv[9] = NULL;
|
|
|
|
rc = libzfs_run_process(argv[0], argv, 0);
|
|
if (rc < 0)
|
|
return (SA_SYSTEM_ERR);
|
|
|
|
/* Reload the share file */
|
|
(void) smb_retrieve_shares();
|
|
|
|
return (SA_OK);
|
|
}
|
|
|
|
/*
|
|
* Enables SMB sharing for the specified share.
|
|
*/
|
|
static int
|
|
smb_enable_share(sa_share_impl_t impl_share)
|
|
{
|
|
char *shareopts;
|
|
|
|
if (!smb_available())
|
|
return (SA_SYSTEM_ERR);
|
|
|
|
if (smb_is_share_active(impl_share))
|
|
smb_disable_share(impl_share);
|
|
|
|
shareopts = FSINFO(impl_share, smb_fstype)->shareopts;
|
|
if (shareopts == NULL) /* on/off */
|
|
return (SA_SYSTEM_ERR);
|
|
|
|
if (strcmp(shareopts, "off") == 0)
|
|
return (SA_OK);
|
|
|
|
/* Magic: Enable (i.e., 'create new') share */
|
|
return (smb_enable_share_one(impl_share->sa_zfsname,
|
|
impl_share->sa_mountpoint));
|
|
}
|
|
|
|
/*
|
|
* Used internally by smb_disable_share to disable sharing for a single host.
|
|
*/
|
|
static int
|
|
smb_disable_share_one(const char *sharename)
|
|
{
|
|
int rc;
|
|
char *argv[7];
|
|
|
|
/* CMD: net -S NET_CMD_ARG_HOST usershare delete Test1 */
|
|
argv[0] = NET_CMD_PATH;
|
|
argv[1] = (char *)"-S";
|
|
argv[2] = NET_CMD_ARG_HOST;
|
|
argv[3] = (char *)"usershare";
|
|
argv[4] = (char *)"delete";
|
|
argv[5] = strdup(sharename);
|
|
argv[6] = NULL;
|
|
|
|
rc = libzfs_run_process(argv[0], argv, 0);
|
|
if (rc < 0)
|
|
return (SA_SYSTEM_ERR);
|
|
else
|
|
return (SA_OK);
|
|
}
|
|
|
|
/*
|
|
* Disables SMB sharing for the specified share.
|
|
*/
|
|
static int
|
|
smb_disable_share(sa_share_impl_t impl_share)
|
|
{
|
|
smb_share_t *shares = smb_shares;
|
|
|
|
if (!smb_available()) {
|
|
/*
|
|
* The share can't possibly be active, so nothing
|
|
* needs to be done to disable it.
|
|
*/
|
|
return (SA_OK);
|
|
}
|
|
|
|
while (shares != NULL) {
|
|
if (strcmp(impl_share->sa_mountpoint, shares->path) == 0)
|
|
return (smb_disable_share_one(shares->name));
|
|
|
|
shares = shares->next;
|
|
}
|
|
|
|
return (SA_OK);
|
|
}
|
|
|
|
/*
|
|
* Checks whether the specified SMB share options are syntactically correct.
|
|
*/
|
|
static int
|
|
smb_validate_shareopts(const char *shareopts)
|
|
{
|
|
/* TODO: Accept 'name' and sec/acl (?) */
|
|
if ((strcmp(shareopts, "off") == 0) || (strcmp(shareopts, "on") == 0))
|
|
return (SA_OK);
|
|
|
|
return (SA_SYNTAX_ERR);
|
|
}
|
|
|
|
/*
|
|
* Checks whether a share is currently active.
|
|
*/
|
|
static boolean_t
|
|
smb_is_share_active(sa_share_impl_t impl_share)
|
|
{
|
|
smb_share_t *iter = smb_shares;
|
|
|
|
if (!smb_available())
|
|
return (B_FALSE);
|
|
|
|
/* Retrieve the list of (possible) active shares */
|
|
smb_retrieve_shares();
|
|
|
|
while (iter != NULL) {
|
|
if (strcmp(impl_share->sa_mountpoint, iter->path) == 0)
|
|
return (B_TRUE);
|
|
|
|
iter = iter->next;
|
|
}
|
|
|
|
return (B_FALSE);
|
|
}
|
|
|
|
/*
|
|
* Called to update a share's options. A share's options might be out of
|
|
* date if the share was loaded from disk and the "sharesmb" dataset
|
|
* property has changed in the meantime. This function also takes care
|
|
* of re-enabling the share if necessary.
|
|
*/
|
|
static int
|
|
smb_update_shareopts(sa_share_impl_t impl_share, const char *shareopts)
|
|
{
|
|
if (!impl_share)
|
|
return (SA_SYSTEM_ERR);
|
|
|
|
FSINFO(impl_share, smb_fstype)->shareopts = (char *)shareopts;
|
|
return (SA_OK);
|
|
}
|
|
|
|
static int
|
|
smb_update_shares(void)
|
|
{
|
|
/* Not implemented */
|
|
return (0);
|
|
}
|
|
|
|
/*
|
|
* Clears a share's SMB options. Used by libshare to
|
|
* clean up shares that are about to be free()'d.
|
|
*/
|
|
static void
|
|
smb_clear_shareopts(sa_share_impl_t impl_share)
|
|
{
|
|
FSINFO(impl_share, smb_fstype)->shareopts = NULL;
|
|
}
|
|
|
|
static const sa_share_ops_t smb_shareops = {
|
|
.enable_share = smb_enable_share,
|
|
.disable_share = smb_disable_share,
|
|
.is_shared = smb_is_share_active,
|
|
|
|
.validate_shareopts = smb_validate_shareopts,
|
|
.update_shareopts = smb_update_shareopts,
|
|
.clear_shareopts = smb_clear_shareopts,
|
|
.commit_shares = smb_update_shares,
|
|
};
|
|
|
|
/*
|
|
* Provides a convenient wrapper for determining SMB availability
|
|
*/
|
|
static boolean_t
|
|
smb_available(void)
|
|
{
|
|
struct stat statbuf;
|
|
|
|
if (lstat(SHARE_DIR, &statbuf) != 0 ||
|
|
!S_ISDIR(statbuf.st_mode))
|
|
return (B_FALSE);
|
|
|
|
if (access(NET_CMD_PATH, F_OK) != 0)
|
|
return (B_FALSE);
|
|
|
|
return (B_TRUE);
|
|
}
|
|
|
|
/*
|
|
* Initializes the SMB functionality of libshare.
|
|
*/
|
|
void
|
|
libshare_smb_init(void)
|
|
{
|
|
smb_fstype = register_fstype("smb", &smb_shareops);
|
|
}
|