| blob | fac61e8cefce6e8b33f4016422ae71d159d8f782 |
1 /*
2 * Copyright (c) 2007-2008 The DragonFly Project. All rights reserved.
3 *
4 * This code is derived from software contributed to The DragonFly Project
5 * by Matthew Dillon <dillon@backplane.com>
6 *
7 * Redistribution and use in source and binary forms, with or without
8 * modification, are permitted provided that the following conditions
9 * are met:
10 *
11 * 1. Redistributions of source code must retain the above copyright
12 * notice, this list of conditions and the following disclaimer.
13 * 2. Redistributions in binary form must reproduce the above copyright
14 * notice, this list of conditions and the following disclaimer in
15 * the documentation and/or other materials provided with the
16 * distribution.
17 * 3. Neither the name of The DragonFly Project nor the names of its
18 * contributors may be used to endorse or promote products derived
19 * from this software without specific, prior written permission.
20 *
21 * THIS SOFTWARE IS PROVIDED BY THE COPYRIGHT HOLDERS AND CONTRIBUTORS
22 * ``AS IS'' AND ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT
23 * LIMITED TO, THE IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS
24 * FOR A PARTICULAR PURPOSE ARE DISCLAIMED. IN NO EVENT SHALL THE
25 * COPYRIGHT HOLDERS OR CONTRIBUTORS BE LIABLE FOR ANY DIRECT, INDIRECT,
26 * INCIDENTAL, SPECIAL, EXEMPLARY OR CONSEQUENTIAL DAMAGES (INCLUDING,
27 * BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES;
28 * LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION) HOWEVER CAUSED
29 * AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT LIABILITY,
30 * OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT
31 * OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF
32 * SUCH DAMAGE.
33 *
34 * $DragonFly: src/sys/vfs/hammer/hammer_inode.c,v 1.103.2.4 2008/08/06 15:41:56 dillon Exp $
35 */
38 #include <vm/vm_extern.h>
39 #include <sys/buf.h>
40 #include <sys/buf2.h>
47 #if 0
49 #endif
51 hammer_flush_group_t flg);
53 hammer_flush_group_t flg);
56 #ifdef DEBUG_TRUNCATE
58 #endif
60 /*
61 * RB-Tree support for inode structures
62 */
63 int
65 {
79 }
81 /*
82 * RB-Tree support for inode structures / special LOOKUP_INFO
83 */
84 static int
86 {
100 }
102 /*
103 * Used by hammer_scan_inode_snapshots() to locate all of an object's
104 * snapshots. Note that the asof field is not tested, which we can get
105 * away with because it is the lowest-priority field.
106 */
107 static int
109 {
121 }
123 /*
124 * Used by hammer_unload_pseudofs() to locate all inodes associated with
125 * a particular PFS.
126 */
127 static int
129 {
136 }
138 /*
139 * RB-Tree support for pseudofs structures
140 */
141 static int
143 {
149 }
158 /*
159 * The kernel is not actively referencing this vnode but is still holding
160 * it cached.
161 *
162 * This is called from the frontend.
163 */
164 int
166 {
169 /*
170 * Degenerate case
171 */
175 }
177 /*
178 * If the inode no longer has visibility in the filesystem try to
179 * recycle it immediately, even if the inode is dirty. Recycling
180 * it quickly allows the system to reclaim buffer cache and VM
181 * resources which can matter a lot in a heavily loaded system.
182 *
183 * This can deadlock in vfsync() if we aren't careful.
184 *
185 * Do not queue the inode to the flusher if we still have visibility,
186 * otherwise namespace calls such as chmod will unnecessarily generate
187 * multiple inode updates.
188 */
194 }
196 }
198 /*
199 * Release the vnode association. This is typically (but not always)
200 * the last reference on the inode.
201 *
202 * Once the association is lost we are on our own with regards to
203 * flushing the inode.
204 */
205 int
207 {
209 hammer_mount_t hmp;
224 /*
225 * Poke the flusher. If we don't do this programs
226 * will start to stall on the reclaiming count.
227 */
231 }
232 }
234 }
236 }
238 /*
239 * Return a locked vnode for the specified inode. The inode must be
240 * referenced but NOT LOCKED on entry and will remain referenced on
241 * return.
242 *
243 * Called from the frontend.
244 */
245 int
247 {
248 hammer_mount_t hmp;
251 u_int8_t obj_type;
266 }
288 }
290 /*
291 * Only mark as the root vnode if the ip is not
292 * historical, otherwise the VFS cache will get
293 * confused. The other half of the special handling
294 * is in hammer_vop_nlookupdotdot().
295 *
296 * Pseudo-filesystem roots also do not count.
297 */
302 }
305 /* vnode locked by getnewvnode() */
306 /* make related vnode dirty if inode dirty? */
311 }
313 /*
314 * loop if the vget fails (aka races), or if the vp
315 * no longer matches ip->vp.
316 */
321 }
322 }
325 }
327 /*
328 * Locate all copies of the inode for obj_id compatible with the specified
329 * asof, reference, and issue the related call-back. This routine is used
330 * for direct-io invalidation and does not create any new inodes.
331 */
332 void
336 {
338 hammer_inode_info_cmp_all_history,
340 }
342 /*
343 * Acquire a HAMMER inode. The returned inode is not locked. These functions
344 * do not attach or detach the related vnode (use hammer_get_vnode() for
345 * that).
346 *
347 * The flags argument is only applied for newly created inodes, and only
348 * certain flags are inherited.
349 *
350 * Called from the frontend.
351 */
356 {
363 /*
364 * Determine if we already have an inode cached. If we do then
365 * we are golden.
366 */
370 loop:
376 }
378 /*
379 * Allocate a new inode structure and deal with races later.
380 */
399 /*
400 * Locate the on-disk inode. If this is a PFS root we always
401 * access the current version of the root inode and (if it is not
402 * a master) always access information under it with a snapshot
403 * TID.
404 */
405 retry:
417 HAMMER_CURSOR_ASOF;
423 }
425 /*
426 * On success the B-Tree lookup will hold the appropriate
427 * buffer cache buffers and provide a pointer to the requested
428 * information. Copy the information to the in-memory inode
429 * and cache the B-Tree node to improve future operations.
430 */
435 /*
436 * cache[0] tries to cache the location of the object inode.
437 * The assumption is that it is near the directory inode.
438 *
439 * cache[1] tries to cache the location of the object data.
440 * The assumption is that it is near the directory data.
441 */
446 /*
447 * The file should not contain any data past the file size
448 * stored in the inode. Setting save_trunc_off to the
449 * file size instead of max reduces B-Tree lookup overheads
450 * on append by allowing the flusher to avoid checking for
451 * record overwrites.
452 */
455 /*
456 * Locate and assign the pseudofs management structure to
457 * the inode.
458 */
465 errorp);
467 }
468 }
470 /*
471 * The inode is placed on the red-black tree and will be synced to
472 * the media when flushed or by the filesystem sync. If this races
473 * another instantiation/lookup the insertion will fail.
474 */
480 }
486 }
490 }
493 }
495 /*
496 * Create a new filesystem object, returning the inode in *ipp. The
497 * returned inode will be referenced. The inode is created in-memory.
498 *
499 * If pfsm is non-NULL the caller wishes to create the root inode for
500 * a master PFS.
501 */
502 int
506 {
507 hammer_mount_t hmp;
508 hammer_inode_t ip;
509 uid_t xuid;
526 }
538 /* ip->save_trunc_off = 0; (already zero) */
547 /*
548 * A nohistory designator on the parent directory is inherited by
549 * the child. We will do this even for pseudo-fs creation... the
550 * sysad can turn it off.
551 */
555 }
559 HAMMER_LOCALIZE_INODE;
572 /*
573 * Setup the ".." pointer. This only needs to be done for directories
574 * but we do it for all objects as a recovery aid.
575 */
578 #if 0
579 /*
580 * The parent_obj_localization field only applies to pseudo-fs roots.
581 * XXX this is no longer applicable, PFSs are no longer directly
582 * tied into the parent's directory structure.
583 */
588 }
589 #endif
599 }
601 /*
602 * Calculate default uid/gid and overwrite with information from
603 * the vap.
604 */
611 }
618 else
643 }
650 /* not reached */
652 }
655 }
657 /*
658 * Final cleanup / freeing of an inode structure
659 */
660 static void
662 {
674 }
677 }
679 /*
680 * Retrieve pseudo-fs data. NULL will never be returned.
681 *
682 * If an error occurs *errorp will be set and a default template is returned,
683 * otherwise *errorp is set to 0. Typically when an error occurs it will
684 * be ENOENT.
685 */
686 hammer_pseudofs_inmem_t
689 {
691 hammer_inode_t ip;
692 hammer_pseudofs_inmem_t pfsm;
696 retry:
702 }
704 /*
705 * PFS records are stored in the root inode (not the PFS root inode,
706 * but the real root). Avoid an infinite recursion if loading
707 * the PFS for the real root.
708 */
711 HAMMER_MAX_TID,
715 }
724 HAMMER_LOCALIZE_MISC;
736 else
742 HAMMER_PFSD_DELETED) {
749 }
750 }
751 }
761 }
763 }
765 /*
766 * Store pseudo-fs data. The backend will automatically delete any prior
767 * on-disk pseudo-fs data but we have to delete in-memory versions.
768 */
769 int
771 {
773 hammer_record_t record;
774 hammer_inode_t ip;
779 retry:
783 HAMMER_LOCALIZE_MISC;
804 }
805 }
811 HAMMER_LOCALIZE_MISC;
817 }
823 }
825 /*
826 * Create a root directory for a PFS if one does not alredy exist.
827 *
828 * The PFS root stands alone so we must also bump the nlinks count
829 * to prevent it from being destroyed on release.
830 */
831 int
833 hammer_pseudofs_inmem_t pfsm)
834 {
835 hammer_inode_t ip;
849 }
850 }
854 }
856 /*
857 * Unload any vnodes & inodes associated with a PFS, return ENOTEMPTY
858 * if we are unable to disassociate all the inodes.
859 */
860 static
861 int
863 {
871 else
875 }
877 int
879 {
885 hammer_inode_pfs_cmp,
886 hammer_unload_pseudofs_callback,
891 }
895 }
898 /*
899 * Release a reference on a PFS
900 */
901 void
903 {
908 }
909 }
911 /*
912 * Called by hammer_sync_inode().
913 */
914 static int
916 {
918 hammer_record_t record;
922 retry:
925 /*
926 * If the inode has a presence on-disk then locate it and mark
927 * it deleted, setting DELONDISK.
928 *
929 * The record may or may not be physically deleted, depending on
930 * the retention policy.
931 */
933 HAMMER_INODE_ONDISK) {
936 HAMMER_LOCALIZE_INODE;
958 }
961 }
970 }
971 }
973 /*
974 * Ok, write out the initial record or a new record (after deleting
975 * the old one), unless the DELETED flag is set. This routine will
976 * clear DELONDISK if it writes out a record.
977 *
978 * Update our inode statistics if this is the first application of
979 * the inode on-disk.
980 */
982 /*
983 * Generate a record and write it to the media. We clean-up
984 * the state before releasing so we do not have to set-up
985 * a flush_group.
986 */
997 /*
998 * If this flag is set we cannot sync the new file size
999 * because we haven't finished related truncations. The
1000 * inode will be flushed in another flush group to finish
1001 * the job.
1002 */
1009 }
1025 }
1027 /*
1028 * The record isn't managed by the inode's record tree,
1029 * destroy it whether we succeed or fail.
1030 */
1036 /*
1037 * Finish up.
1038 */
1043 HAMMER_INODE_ATIME |
1044 HAMMER_INODE_MTIME);
1049 /*
1050 * Root volume count of inodes
1051 */
1056 vol0_stat_inodes);
1062 }
1064 }
1065 }
1067 /*
1068 * If the inode has been destroyed, clean out any left-over flags
1069 * that may have been set by the frontend.
1070 */
1073 HAMMER_INODE_ATIME |
1074 HAMMER_INODE_MTIME);
1075 }
1077 }
1079 /*
1080 * Update only the itimes fields.
1081 *
1082 * ATIME can be updated without generating any UNDO. MTIME is updated
1083 * with UNDO so it is guaranteed to be synchronized properly in case of
1084 * a crash.
1085 *
1086 * Neither field is included in the B-Tree leaf element's CRC, which is how
1087 * we can get away with updating ATIME the way we do.
1088 */
1089 static int
1091 {
1095 retry:
1097 HAMMER_INODE_ONDISK) {
1099 }
1103 HAMMER_LOCALIZE_INODE;
1121 /*
1122 * Updating MTIME requires an UNDO. Just cover
1123 * both atime and mtime.
1124 */
1128 HAMMER_ITIMES_BYTES);
1134 /*
1135 * Updating atime only can be done in-place with
1136 * no UNDO.
1137 */
1144 }
1146 }
1153 }
1155 }
1157 /*
1158 * Release a reference on an inode, flush as requested.
1159 *
1160 * On the last reference we queue the inode to the flusher for its final
1161 * disposition.
1162 */
1163 void
1165 {
1168 /*
1169 * Handle disposition when dropping the last ref.
1170 */
1173 /*
1174 * Determine whether on-disk action is needed for
1175 * the inode's final disposition.
1176 */
1182 HAMMER_FLUSH_SIGNAL);
1185 }
1189 }
1194 /*
1195 * The inode still has multiple refs, try to drop
1196 * one ref.
1197 */
1202 }
1203 }
1204 }
1205 }
1207 /*
1208 * Unload and destroy the specified inode. Must be called with one remaining
1209 * reference. The reference is disposed of.
1210 *
1211 * The inode must be completely clean.
1212 */
1213 static int
1215 {
1233 }
1235 /*
1236 * Called during unmounting if a critical error occured. The in-memory
1237 * inode and all related structures are destroyed.
1238 *
1239 * If a critical error did not occur the unmount code calls the standard
1240 * release and asserts that the inode is gone.
1241 */
1242 int
1244 {
1245 hammer_record_t rec;
1247 /*
1248 * Get rid of the inodes in-memory records, regardless of their
1249 * state, and clear the mod-mask.
1250 */
1256 }
1260 else
1268 }
1273 /*
1274 * Remove the inode from any flush group, force it idle. FLUSH
1275 * and SETUP states have an inode ref.
1276 */
1282 /* fall through */
1286 /* fall through */
1289 }
1291 /*
1292 * There shouldn't be any associated vnode. The unload needs at
1293 * least one ref, if we do have a vp steal its ip ref.
1294 */
1302 }
1305 }
1307 /*
1308 * Called on mount -u when switching from RW to RO or vise-versa. Adjust
1309 * the read-only flag for cached inodes.
1310 *
1311 * This routine is called from a RB_SCAN().
1312 */
1313 int
1315 {
1320 else
1323 }
1325 /*
1326 * A transaction has modified an inode, requiring updates as specified by
1327 * the passed flags.
1328 *
1329 * HAMMER_INODE_DDIRTY: Inode data has been updated
1330 * HAMMER_INODE_XDIRTY: Dirty in-memory records
1331 * HAMMER_INODE_BUFS: Dirty buffer cache buffers
1332 * HAMMER_INODE_DELETED: Inode record/data must be deleted
1333 * HAMMER_INODE_ATIME/MTIME: mtime/atime has been updated
1334 */
1335 void
1337 {
1338 /*
1339 * ronly of 0 or 2 does not trigger assertion.
1340 * 2 is a special error state
1341 */
1349 }
1352 }
1354 /*
1355 * Request that an inode be flushed. This whole mess cannot block and may
1356 * recurse (if not synchronous). Once requested HAMMER will attempt to
1357 * actively flush the inode until the flush can be done.
1358 *
1359 * The inode may already be flushing, or may be in a setup state. We can
1360 * place the inode in a flushing state if it is currently idle and flag it
1361 * to reflush if it is currently flushing.
1362 *
1363 * Upon return if the inode could not be flushed due to a setup
1364 * dependancy, then it will be automatically flushed when the dependancy
1365 * is satisfied.
1366 */
1367 void
1369 {
1370 hammer_mount_t hmp;
1371 hammer_flush_group_t flg;
1374 /*
1375 * next_flush_group is the first flush group we can place the inode
1376 * in. It may be NULL. If it becomes full we append a new flush
1377 * group and make that the next_flush_group.
1378 */
1386 }
1392 }
1394 /*
1395 * Trivial 'nothing to flush' case. If the inode is in a SETUP
1396 * state we have to put it back into an IDLE state so we can
1397 * drop the extra ref.
1398 *
1399 * If we have a parent dependancy we must still fall through
1400 * so we can run it.
1401 */
1407 }
1410 }
1412 /*
1413 * Our flush action will depend on the current state.
1414 */
1417 /*
1418 * We have no dependancies and can flush immediately. Some
1419 * our children may not be flushable so we have to re-test
1420 * with that additional knowledge.
1421 */
1425 /*
1426 * Recurse upwards through dependancies via target_list
1427 * and start their flusher actions going if possible.
1428 *
1429 * 'good' is our connectivity. -1 means we have none and
1430 * can't flush, 0 means there weren't any dependancies, and
1431 * 1 means we have good connectivity.
1432 */
1436 /*
1437 * We can continue if good >= 0. Determine how
1438 * many records under our inode can be flushed (and
1439 * mark them).
1440 */
1443 /*
1444 * Parent has no connectivity, tell it to flush
1445 * us as soon as it does.
1446 *
1447 * The REFLUSH flag is also needed to trigger
1448 * dependancy wakeups.
1449 */
1451 HAMMER_INODE_REFLUSH;
1455 }
1456 }
1459 /*
1460 * We are already flushing, flag the inode to reflush
1461 * if needed after it completes its current flush.
1462 *
1463 * The REFLUSH flag is also needed to trigger
1464 * dependancy wakeups.
1465 */
1471 }
1473 }
1474 }
1476 /*
1477 * Scan ip->target_list, which is a list of records owned by PARENTS to our
1478 * ip which reference our ip.
1479 *
1480 * XXX This is a huge mess of recursive code, but not one bit of it blocks
1481 * so for now do not ref/deref the structures. Note that if we use the
1482 * ref/rel code later, the rel CAN block.
1483 */
1484 static int
1486 {
1487 hammer_record_t depend;
1499 }
1501 }
1503 /*
1504 * This helper function takes a record representing the dependancy between
1505 * the parent inode and child inode.
1506 *
1507 * record->ip = parent inode
1508 * record->target_ip = child inode
1509 *
1510 * We are asked to recurse upwards and convert the record from SETUP
1511 * to FLUSH if possible.
1512 *
1513 * Return 1 if the record gives us connectivity
1514 *
1515 * Return 0 if the record is not relevant
1516 *
1517 * Return -1 if we can't resolve the dependancy and there is no connectivity.
1518 */
1519 static int
1521 hammer_flush_group_t flg)
1522 {
1523 hammer_mount_t hmp;
1524 hammer_inode_t pip;
1531 /*
1532 * If the record is already flushing, is it in our flush group?
1533 *
1534 * If it is in our flush group but it is a general record or a
1535 * delete-on-disk, it does not improve our connectivity (return 0),
1536 * and if the target inode is not trying to destroy itself we can't
1537 * allow the operation yet anyway (the second return -1).
1538 */
1540 /*
1541 * If not in our flush group ask the parent to reflush
1542 * us as soon as possible.
1543 */
1548 }
1550 /*
1551 * If in our flush group everything is already set up,
1552 * just return whether the record will improve our
1553 * visibility or not.
1554 */
1558 }
1560 /*
1561 * It must be a setup record. Try to resolve the setup dependancies
1562 * by recursing upwards so we can place ip on the flush list.
1563 */
1568 /*
1569 * If good < 0 the parent has no connectivity and we cannot safely
1570 * flush the directory entry, which also means we can't flush our
1571 * ip. Flag the parent and us for downward recursion once the
1572 * parent's connectivity is resolved.
1573 */
1575 /* pip->flags |= HAMMER_INODE_CONN_DOWN; set by recursion */
1578 }
1580 /*
1581 * We are go, place the parent inode in a flushing state so we can
1582 * place its record in a flushing state. Note that the parent
1583 * may already be flushing. The record must be in the same flush
1584 * group as the parent.
1585 */
1591 #if 0
1594 /*
1595 * Regardless of flushing state we cannot sync this path if the
1596 * record represents a delete-on-disk but the target inode
1597 * is not ready to sync its own deletion.
1598 *
1599 * XXX need to count effective nlinks to determine whether
1600 * the flush is ok, otherwise removing a hardlink will
1601 * just leave the DEL record to rot.
1602 */
1606 #endif
1608 /*
1609 * If the parent is in the same flush group as us we can
1610 * just set the record to a flushing state and we are
1611 * done.
1612 */
1618 /*
1619 * A general directory-add contributes to our visibility.
1620 *
1621 * Otherwise it is probably a directory-delete or
1622 * delete-on-disk record and does not contribute to our
1623 * visbility (but we can still flush it).
1624 */
1629 /*
1630 * If the parent is not in our flush group we cannot
1631 * flush this record yet, there is no visibility.
1632 * We tell the parent to reflush and mark ourselves
1633 * so the parent knows it should flush us too.
1634 */
1638 }
1639 }
1641 /*
1642 * This is the core routine placing an inode into the FST_FLUSH state.
1643 */
1644 static void
1646 {
1649 /*
1650 * Set flush state and prevent the flusher from cycling into
1651 * the next flush group. Do not place the ip on the list yet.
1652 * Inodes not in the idle state get an extra reference.
1653 */
1664 /*
1665 * We need to be able to vfsync/truncate from the backend.
1666 */
1671 }
1673 /*
1674 * Figure out how many in-memory records we can actually flush
1675 * (not including inode meta-data, buffers, etc).
1676 */
1678 /*
1679 * If this is a upwards recursion we do not want to
1680 * recurse down again!
1681 */
1684 /*
1685 * No new records are added if we must complete a flush
1686 * from a previous cycle, but we do have to move the records
1687 * from the previous cycle to the current one.
1688 */
1689 #if 0
1692 #endif
1695 /*
1696 * Normal flush, scan records and bring them into the flush.
1697 * Directory adds and deletes are usually skipped (they are
1698 * grouped with the related inode rather then with the
1699 * directory).
1700 *
1701 * go_count can be negative, which means the scan aborted
1702 * due to the flush group being over-full and we should
1703 * flush what we have.
1704 */
1707 }
1709 /*
1710 * This is a more involved test that includes go_count. If we
1711 * can't flush, flag the inode and return. If go_count is 0 we
1712 * were are unable to flush any records in our rec_tree and
1713 * must ignore the XDIRTY flag.
1714 */
1726 }
1728 /*
1729 * REFLUSH is needed to trigger dependancy wakeups
1730 * when an inode is in SETUP.
1731 */
1736 }
1740 }
1741 }
1743 /*
1744 * Snapshot the state of the inode for the backend flusher.
1745 *
1746 * We continue to retain save_trunc_off even when all truncations
1747 * have been resolved as an optimization to determine if we can
1748 * skip the B-Tree lookup for overwrite deletions.
1749 *
1750 * NOTE: The DELETING flag is a mod flag, but it is also sticky,
1751 * and stays in ip->flags. Once set, it stays set until the
1752 * inode is destroyed.
1753 *
1754 * NOTE: If a truncation from a previous flush cycle had to be
1755 * continued into this one, the TRUNCATED flag will still be
1756 * set in sync_flags as will WOULDBLOCK. When this occurs
1757 * we CANNOT safely integrate a new truncation from the front-end
1758 * because there may be data records in-memory assigned a flush
1759 * state from the previous cycle that are supposed to be flushed
1760 * before the next frontend truncation.
1761 */
1763 HAMMER_INODE_TRUNCATED) {
1770 /*
1771 * The save_trunc_off used to cache whether the B-Tree
1772 * holds any records past that point is not used until
1773 * after the truncation has succeeded, so we can safely
1774 * set it now.
1775 */
1778 }
1784 #ifdef DEBUG_TRUNCATE
1787 #endif
1789 /*
1790 * The flusher list inherits our inode and reference.
1791 */
1799 }
1800 }
1802 /*
1803 * Callback for scan of ip->rec_tree. Try to include each record in our
1804 * flush. ip->flush_group has been set but the inode has not yet been
1805 * moved into a flushing state.
1806 *
1807 * If we get stuck on a record we have to set HAMMER_INODE_REFLUSH on
1808 * both inodes.
1809 *
1810 * We return 1 for any record placed or found in FST_FLUSH, which prevents
1811 * the caller from shortcutting the flush.
1812 */
1813 static int
1815 {
1816 hammer_flush_group_t flg;
1817 hammer_inode_t target_ip;
1818 hammer_inode_t ip;
1821 /*
1822 * Deleted records are ignored. Note that the flush detects deleted
1823 * front-end records at multiple points to deal with races. This is
1824 * just the first line of defense. The only time DELETED_FE cannot
1825 * be set is when HAMMER_RECF_INTERLOCK_BE is set.
1826 *
1827 * Don't get confused between record deletion and, say, directory
1828 * entry deletion. The deletion of a directory entry that is on
1829 * the media has nothing to do with the record deletion flags.
1830 */
1837 }
1839 }
1841 /*
1842 * If the record is in an idle state it has no dependancies and
1843 * can be flushed.
1844 */
1851 /*
1852 * The record has no setup dependancy, we can flush it.
1853 */
1862 /*
1863 * The record has a setup dependancy. These are typically
1864 * directory entry adds and deletes. Such entries will be
1865 * flushed when their inodes are flushed so we do not
1866 * usually have to add them to the flush here. However,
1867 * if the target_ip has set HAMMER_INODE_CONN_DOWN then
1868 * it is asking us to flush this record (and it).
1869 */
1874 /*
1875 * If the target IP is already flushing in our group
1876 * we could associate the record, but target_ip has
1877 * already synced ino_data to sync_ino_data and we
1878 * would also have to adjust nlinks. Plus there are
1879 * ordering issues for adds and deletes.
1880 *
1881 * Reflush downward if this is an ADD, and upward if
1882 * this is a DEL.
1883 */
1887 else
1890 }
1892 /*
1893 * Target IP is not yet flushing. This can get complex
1894 * because we have to be careful about the recursion.
1895 *
1896 * Directories create an issue for us in that if a flush
1897 * of a directory is requested the expectation is to flush
1898 * any pending directory entries, but this will cause the
1899 * related inodes to recursively flush as well. We can't
1900 * really defer the operation so just get as many as we
1901 * can and
1902 */
1903 #if 0
1906 /*
1907 * We aren't reclaiming and the target ip was not
1908 * previously prevented from flushing due to this
1909 * record dependancy. Do not flush this record.
1910 */
1911 /*r = 0;*/
1913 #endif
1916 /*
1917 * Our flush group is over-full and we risk blowing
1918 * out the UNDO FIFO. Stop the scan, flush what we
1919 * have, then reflush the directory.
1920 *
1921 * The directory may be forced through multiple
1922 * flush groups before it can be completely
1923 * flushed.
1924 */
1926 HAMMER_INODE_REFLUSH;
1929 /*
1930 * If the target IP is not flushing we can force
1931 * it to flush, even if it is unable to write out
1932 * any of its own records we have at least one in
1933 * hand that we CAN deal with.
1934 */
1940 HAMMER_FLUSH_RECURSION);
1943 /*
1944 * General or delete-on-disk record.
1945 *
1946 * XXX this needs help. If a delete-on-disk we could
1947 * disconnect the target. If the target has its own
1948 * dependancies they really need to be flushed.
1949 *
1950 * XXX
1951 */
1957 HAMMER_FLUSH_RECURSION);
1959 }
1962 /*
1963 * If the WOULDBLOCK flag is set records may have been left
1964 * over from a previous flush attempt. The flush group will
1965 * have been left intact - we are probably reflushing it
1966 * now.
1967 *
1968 * If a flush error occured ip->error will be non-zero.
1969 */
1973 }
1975 }
1977 #if 0
1978 /*
1979 * This version just moves records already in a flush state to the new
1980 * flush group and that is it.
1981 */
1982 static int
1984 {
1993 }
1995 }
1996 #endif
1998 /*
1999 * Wait for a previously queued flush to complete.
2000 *
2001 * If a critical error occured we don't try to wait.
2002 */
2003 void
2005 {
2006 hammer_flush_group_t flg;
2017 }
2018 }
2019 }
2020 }
2022 /*
2023 * Called by the backend code when a flush has been completed.
2024 * The inode has already been removed from the flush list.
2025 *
2026 * A pipelined flush can occur, in which case we must re-enter the
2027 * inode on the list and re-copy its fields.
2028 */
2029 void
2031 {
2032 hammer_mount_t hmp;
2039 /*
2040 * Merge left-over flags back into the frontend and fix the state.
2041 * Incomplete truncations are retained by the backend.
2042 */
2047 /*
2048 * The backend may have adjusted nlinks, so if the adjusted nlinks
2049 * does not match the fronttend set the frontend's RDIRTY flag again.
2050 */
2054 /*
2055 * Fix up the dirty buffer status.
2056 */
2059 }
2061 /*
2062 * Re-set the XDIRTY flag if some of the inode's in-memory records
2063 * could not be flushed.
2064 */
2070 /*
2071 * Do not lose track of inodes which no longer have vnode
2072 * assocations, otherwise they may never get flushed again.
2073 */
2077 /*
2078 * Adjust the flush state.
2079 */
2081 /*
2082 * We were unable to flush out all our records, leave the
2083 * inode in a flush state and in the current flush group.
2084 *
2085 * This occurs if the UNDO block gets too full
2086 * or there is too much dirty meta-data and allows the
2087 * flusher to finalize the UNDO block and then re-flush.
2088 */
2092 /*
2093 * Remove from the flush_group
2094 */
2098 /*
2099 * Clean up the vnode ref and tracking counts.
2100 */
2104 }
2108 /*
2109 * And adjust the state.
2110 */
2117 }
2119 /*
2120 * If the frontend is waiting for a flush to complete,
2121 * wake it up.
2122 */
2126 }
2127 }
2129 /*
2130 * If the frontend made more changes and requested another flush,
2131 * then try to get it running.
2132 *
2133 * Reflushes are aborted when the inode is errored out.
2134 */
2142 }
2143 }
2145 /*
2146 * If we have no parent dependancies we can clear CONN_DOWN
2147 */
2151 /*
2152 * If the inode is now clean drop the space reservation.
2153 */
2158 }
2162 }
2164 /*
2165 * Called from hammer_sync_inode() to synchronize in-memory records
2166 * to the media.
2167 */
2168 static int
2170 {
2176 /*
2177 * Skip records that do not belong to the current flush.
2178 */
2183 #if 1
2185 kprintf("sync_record %p ip %p bad flush group %p %p\n", record, record->ip, record->flush_group ,record->ip->flush_group);
2188 }
2189 #endif
2192 /*
2193 * Interlock the record using the BE flag. Once BE is set the
2194 * frontend cannot change the state of FE.
2195 *
2196 * NOTE: If FE is set prior to us setting BE we still sync the
2197 * record out, but the flush completion code converts it to
2198 * a delete-on-disk record instead of destroying it.
2199 */
2203 /*
2204 * The backend may have already disposed of the record.
2205 */
2209 }
2211 /*
2212 * If the whole inode is being deleting all on-disk records will
2213 * be deleted very soon, we can't sync any new records to disk
2214 * because they will be deleted in the same transaction they were
2215 * created in (delete_tid == create_tid), which will assert.
2216 *
2217 * XXX There may be a case with RECORD_ADD with DELETED_FE set
2218 * that we currently panic on.
2219 */
2223 /*
2224 * We don't have to do anything, if the record was
2225 * committed the space will have been accounted for
2226 * in the blockmap.
2227 */
2228 /* fall through */
2243 /*
2244 * Follow through and issue the on-disk deletion
2245 */
2247 }
2248 }
2250 /*
2251 * If DELETED_FE is set special handling is needed for directory
2252 * entries. Dependant pieces related to the directory entry may
2253 * have already been synced to disk. If this occurs we have to
2254 * sync the directory entry and then change the in-memory record
2255 * from an ADD to a DELETE to cover the fact that it's been
2256 * deleted by the frontend.
2257 *
2258 * A directory delete covering record (MEM_RECORD_DEL) can never
2259 * be deleted by the frontend.
2260 *
2261 * Any other record type (aka DATA) can be deleted by the frontend.
2262 * XXX At the moment the flusher must skip it because there may
2263 * be another data record in the flush group for the same block,
2264 * meaning that some frontend data changes can leak into the backend's
2265 * synchronization point.
2266 */
2275 }
2276 }
2278 /*
2279 * Assign the create_tid for new records. Deletions already
2280 * have the record's entire key properly set up.
2281 */
2294 }
2299 done:
2302 /*
2303 * Do partial finalization if we have built up too many dirty
2304 * buffers. Otherwise a buffer cache deadlock can occur when
2305 * doing things like creating tens of thousands of tiny files.
2306 *
2307 * We must release our cursor lock to avoid a 3-way deadlock
2308 * due to the exclusive sync lock the finalizer must get.
2309 */
2314 }
2317 }
2319 /*
2320 * XXX error handling
2321 */
2322 int
2324 {
2326 hammer_node_t tmp_node;
2327 hammer_record_t depend;
2328 hammer_record_t next;
2330 u_int64_t nlinks;
2339 /*
2340 * Any directory records referencing this inode which are not in
2341 * our current flush group must adjust our nlink count for the
2342 * purposes of synchronization to disk.
2343 *
2344 * Records which are in our flush group can be unlinked from our
2345 * inode now, potentially allowing the inode to be physically
2346 * deleted.
2347 *
2348 * This cannot block.
2349 */
2356 /*
2357 * If this is an ADD that was deleted by the frontend
2358 * the frontend nlinks count will have already been
2359 * decremented, but the backend is going to sync its
2360 * directory entry and must account for it. The
2361 * record will be converted to a delete-on-disk when
2362 * it gets synced.
2363 *
2364 * If the ADD was not deleted by the frontend we
2365 * can remove the dependancy from our target_list.
2366 */
2371 target_entry);
2373 }
2375 /*
2376 * Not part of our flush group
2377 */
2388 }
2389 }
2390 }
2392 /*
2393 * Set dirty if we had to modify the link count.
2394 */
2399 }
2401 /*
2402 * If there is a trunction queued destroy any data past the (aligned)
2403 * truncation point. Userland will have dealt with the buffer
2404 * containing the truncation point for us.
2405 *
2406 * We don't flush pending frontend data buffers until after we've
2407 * dealt with the truncation.
2408 */
2410 /*
2411 * Interlock trunc_off. The VOP front-end may continue to
2412 * make adjustments to it while we are blocked.
2413 */
2414 off_t trunc_off;
2415 off_t aligned_trunc_off;
2422 /*
2423 * Delete any whole blocks on-media. The front-end has
2424 * already cleaned out any partial block and made it
2425 * pending. The front-end may have updated trunc_off
2426 * while we were blocked so we only use sync_trunc_off.
2427 *
2428 * This operation can blow out the buffer cache, EWOULDBLOCK
2429 * means we were unable to complete the deletion. The
2430 * deletion will update sync_trunc_off in that case.
2431 */
2433 aligned_trunc_off,
2439 }
2444 /*
2445 * Clear the truncation flag on the backend after we have
2446 * complete the deletions. Backend data is now good again
2447 * (including new records we are about to sync, below).
2448 *
2449 * Leave sync_trunc_off intact. As we write additional
2450 * records the backend will update sync_trunc_off. This
2451 * tells the backend whether it can skip the overwrite
2452 * test. This should work properly even when the backend
2453 * writes full blocks where the truncation point straddles
2454 * the block because the comparison is against the base
2455 * offset of the record.
2456 */
2458 /* ip->sync_trunc_off = 0x7FFFFFFFFFFFFFFFLL; */
2461 }
2463 /*
2464 * Now sync related records. These will typically be directory
2465 * entries, records tracking direct-writes, or delete-on-disk records.
2466 */
2474 }
2477 /*
2478 * Re-seek for inode update, assuming our cache hasn't been ripped
2479 * out from under us.
2480 */
2490 }
2492 }
2494 /*
2495 * If we are deleting the inode the frontend had better not have
2496 * any active references on elements making up the inode.
2497 *
2498 * The call to hammer_ip_delete_clean() cleans up auxillary records
2499 * but not DB or DATA records. Those must have already been deleted
2500 * by the normal truncation mechanic.
2501 */
2515 /*
2516 * Set delete_tid in both the frontend and backend
2517 * copy of the inode record. The DELETED flag handles
2518 * this, do not set RDIRTY.
2519 */
2526 /*
2527 * Adjust the inode count in the volume header
2528 */
2533 vol0_stat_inodes);
2536 }
2538 }
2539 }
2545 defer_buffer_flush:
2546 /*
2547 * Now update the inode's on-disk inode-data and/or on-disk record.
2548 * DELETED and ONDISK are managed only in ip->flags.
2549 *
2550 * In the case of a defered buffer flush we still update the on-disk
2551 * inode to satisfy visibility requirements if there happen to be
2552 * directory dependancies.
2553 */
2556 /*
2557 * If deleted and on-disk, don't set any additional flags.
2558 * the delete flag takes care of things.
2559 *
2560 * Clear flags which may have been set by the frontend.
2561 */
2564 HAMMER_INODE_DELETING);
2567 /*
2568 * Take care of the case where a deleted inode was never
2569 * flushed to the disk in the first place.
2570 *
2571 * Clear flags which may have been set by the frontend.
2572 */
2575 HAMMER_INODE_DELETING);
2583 }
2586 /*
2587 * If already on-disk, do not set any additional flags.
2588 */
2591 /*
2592 * If not on-disk and not deleted, set DDIRTY to force
2593 * an initial record to be written.
2594 *
2595 * Also set the create_tid in both the frontend and backend
2596 * copy of the inode record.
2597 */
2604 }
2606 /*
2607 * If RDIRTY or DDIRTY is set, write out a new record. If the inode
2608 * is already on-disk the old record is marked as deleted.
2609 *
2610 * If DELETED is set hammer_update_inode() will delete the existing
2611 * record without writing out a new one.
2612 *
2613 * If *ONLY* the ITIMES flag is set we can update the record in-place.
2614 */
2624 }
2625 done:
2629 }
2632 }
2634 /*
2635 * This routine is called when the OS is no longer actively referencing
2636 * the inode (but might still be keeping it cached), or when releasing
2637 * the last reference to an inode.
2638 *
2639 * At this point if the inode's nlinks count is zero we want to destroy
2640 * it, which may mean destroying it on-media too.
2641 */
2642 void
2644 {
2647 /*
2648 * Set the DELETING flag when the link count drops to 0 and the
2649 * OS no longer has any opens on the inode.
2650 *
2651 * The backend will clear DELETING (a mod flag) and set DELETED
2652 * (a state flag) when it is actually able to perform the
2653 * operation.
2654 */
2664 }
2666 /*
2667 * Final cleanup
2668 */
2672 }
2675 }
2676 }
2677 }
2679 /*
2680 * After potentially resolving a dependancy the inode is tested
2681 * to determine whether it needs to be reflushed.
2682 */
2683 void
2685 {
2694 }
2696 }
2697 }
2699 /*
2700 * Clear the RECLAIM flag on an inode. This occurs when the inode is
2701 * reassociated with a vp or just before it gets freed.
2702 *
2703 * Wakeup one thread blocked waiting on reclaims to complete. Note that
2704 * the inode the thread is waiting on behalf of is a different inode then
2705 * the inode we are called with. This is to create a pipeline.
2706 */
2707 static void
2709 {
2724 }
2725 }
2727 /*
2728 * Setup our reclaim pipeline. We only let so many detached (and dirty)
2729 * inodes build up before we start blocking.
2730 *
2731 * When we block we don't care *which* inode has finished reclaiming,
2732 * as lone as one does. This is somewhat heuristical... we also put a
2733 * cap on how long we are willing to wait.
2734 */
2735 void
2737 {
2747 }
2751 HAMMER_RECLAIM_WAIT;
2756 }
2757 }