1 /* AFS cell and server record management
3 * Copyright (C) 2002, 2017 Red Hat, Inc. All Rights Reserved.
4 * Written by David Howells (dhowells@redhat.com)
6 * This program is free software; you can redistribute it and/or
7 * modify it under the terms of the GNU General Public License
8 * as published by the Free Software Foundation; either version
9 * 2 of the License, or (at your option) any later version.
12 #include <linux/slab.h>
13 #include <linux/key.h>
14 #include <linux/ctype.h>
15 #include <linux/dns_resolver.h>
16 #include <linux/sched.h>
17 #include <linux/inet.h>
18 #include <linux/namei.h>
19 #include <keys/rxrpc-type.h>
22 static unsigned __read_mostly afs_cell_gc_delay
= 10;
24 static void afs_manage_cell(struct work_struct
*);
26 static void afs_dec_cells_outstanding(struct afs_net
*net
)
28 if (atomic_dec_and_test(&net
->cells_outstanding
))
29 wake_up_var(&net
->cells_outstanding
);
33 * Set the cell timer to fire after a given delay, assuming it's not already
34 * set for an earlier time.
36 static void afs_set_cell_timer(struct afs_net
*net
, time64_t delay
)
39 atomic_inc(&net
->cells_outstanding
);
40 if (timer_reduce(&net
->cells_timer
, jiffies
+ delay
* HZ
))
41 afs_dec_cells_outstanding(net
);
46 * Look up and get an activation reference on a cell record under RCU
47 * conditions. The caller must hold the RCU read lock.
49 struct afs_cell
*afs_lookup_cell_rcu(struct afs_net
*net
,
50 const char *name
, unsigned int namesz
)
52 struct afs_cell
*cell
= NULL
;
54 int n
, seq
= 0, ret
= 0;
56 _enter("%*.*s", namesz
, namesz
, name
);
58 if (name
&& namesz
== 0)
59 return ERR_PTR(-EINVAL
);
60 if (namesz
> AFS_MAXCELLNAME
)
61 return ERR_PTR(-ENAMETOOLONG
);
64 /* Unfortunately, rbtree walking doesn't give reliable results
65 * under just the RCU read lock, so we have to check for
69 afs_put_cell(net
, cell
);
73 read_seqbegin_or_lock(&net
->cells_lock
, &seq
);
76 cell
= rcu_dereference_raw(net
->ws_cell
);
85 p
= rcu_dereference_raw(net
->cells
.rb_node
);
87 cell
= rb_entry(p
, struct afs_cell
, net_node
);
89 n
= strncasecmp(cell
->name
, name
,
90 min_t(size_t, cell
->name_len
, namesz
));
92 n
= cell
->name_len
- namesz
;
94 p
= rcu_dereference_raw(p
->rb_left
);
96 p
= rcu_dereference_raw(p
->rb_right
);
98 if (atomic_inc_not_zero(&cell
->usage
)) {
102 /* We want to repeat the search, this time with
103 * the lock properly locked.
109 } while (need_seqretry(&net
->cells_lock
, seq
));
111 done_seqretry(&net
->cells_lock
, seq
);
113 return ret
== 0 ? cell
: ERR_PTR(ret
);
117 * Set up a cell record and fill in its name, VL server address list and
118 * allocate an anonymous key
120 static struct afs_cell
*afs_alloc_cell(struct afs_net
*net
,
121 const char *name
, unsigned int namelen
,
124 struct afs_cell
*cell
;
129 return ERR_PTR(-EINVAL
);
130 if (namelen
> AFS_MAXCELLNAME
) {
131 _leave(" = -ENAMETOOLONG");
132 return ERR_PTR(-ENAMETOOLONG
);
134 if (namelen
== 5 && memcmp(name
, "@cell", 5) == 0)
135 return ERR_PTR(-EINVAL
);
137 _enter("%*.*s,%s", namelen
, namelen
, name
, vllist
);
139 cell
= kzalloc(sizeof(struct afs_cell
), GFP_KERNEL
);
141 _leave(" = -ENOMEM");
142 return ERR_PTR(-ENOMEM
);
146 cell
->name_len
= namelen
;
147 for (i
= 0; i
< namelen
; i
++)
148 cell
->name
[i
] = tolower(name
[i
]);
150 atomic_set(&cell
->usage
, 2);
151 INIT_WORK(&cell
->manager
, afs_manage_cell
);
152 cell
->flags
= ((1 << AFS_CELL_FL_NOT_READY
) |
153 (1 << AFS_CELL_FL_NO_LOOKUP_YET
));
154 INIT_LIST_HEAD(&cell
->proc_volumes
);
155 rwlock_init(&cell
->proc_lock
);
156 rwlock_init(&cell
->vl_addrs_lock
);
158 /* Fill in the VL server list if we were given a list of addresses to
162 struct afs_addr_list
*alist
;
164 alist
= afs_parse_text_addrs(vllist
, strlen(vllist
), ':',
165 VL_SERVICE
, AFS_VL_PORT
);
167 ret
= PTR_ERR(alist
);
171 rcu_assign_pointer(cell
->vl_addrs
, alist
);
172 cell
->dns_expiry
= TIME64_MAX
;
175 _leave(" = %p", cell
);
180 printk(KERN_ERR
"kAFS: bad VL server IP address\n");
182 _leave(" = %d", ret
);
187 * afs_lookup_cell - Look up or create a cell record.
188 * @net: The network namespace
189 * @name: The name of the cell.
190 * @namesz: The strlen of the cell name.
191 * @vllist: A colon/comma separated list of numeric IP addresses or NULL.
192 * @excl: T if an error should be given if the cell name already exists.
194 * Look up a cell record by name and query the DNS for VL server addresses if
195 * needed. Note that that actual DNS query is punted off to the manager thread
196 * so that this function can return immediately if interrupted whilst allowing
197 * cell records to be shared even if not yet fully constructed.
199 struct afs_cell
*afs_lookup_cell(struct afs_net
*net
,
200 const char *name
, unsigned int namesz
,
201 const char *vllist
, bool excl
)
203 struct afs_cell
*cell
, *candidate
, *cursor
;
204 struct rb_node
*parent
, **pp
;
207 _enter("%s,%s", name
, vllist
);
211 cell
= afs_lookup_cell_rcu(net
, name
, namesz
);
217 /* Assume we're probably going to create a cell and preallocate and
218 * mostly set up a candidate record. We can then use this to stash the
219 * name, the net namespace and VL server addresses.
221 * We also want to do this before we hold any locks as it may involve
222 * upcalling to userspace to make DNS queries.
224 candidate
= afs_alloc_cell(net
, name
, namesz
, vllist
);
225 if (IS_ERR(candidate
)) {
226 _leave(" = %ld", PTR_ERR(candidate
));
230 /* Find the insertion point and check to see if someone else added a
231 * cell whilst we were allocating.
233 write_seqlock(&net
->cells_lock
);
235 pp
= &net
->cells
.rb_node
;
239 cursor
= rb_entry(parent
, struct afs_cell
, net_node
);
241 n
= strncasecmp(cursor
->name
, name
,
242 min_t(size_t, cursor
->name_len
, namesz
));
244 n
= cursor
->name_len
- namesz
;
246 pp
= &(*pp
)->rb_left
;
248 pp
= &(*pp
)->rb_right
;
250 goto cell_already_exists
;
255 rb_link_node_rcu(&cell
->net_node
, parent
, pp
);
256 rb_insert_color(&cell
->net_node
, &net
->cells
);
257 atomic_inc(&net
->cells_outstanding
);
258 write_sequnlock(&net
->cells_lock
);
260 queue_work(afs_wq
, &cell
->manager
);
263 _debug("wait_for_cell");
264 ret
= wait_on_bit(&cell
->flags
, AFS_CELL_FL_NOT_READY
, TASK_INTERRUPTIBLE
);
267 switch (READ_ONCE(cell
->state
)) {
268 case AFS_CELL_FAILED
:
272 _debug("weird %u %d", cell
->state
, cell
->error
);
274 case AFS_CELL_ACTIVE
:
278 _leave(" = %p [cell]", cell
);
282 _debug("cell exists");
287 afs_get_cell(cursor
);
290 write_sequnlock(&net
->cells_lock
);
296 afs_put_cell(net
, cell
);
298 _leave(" = %d [error]", ret
);
303 * set the root cell information
304 * - can be called with a module parameter string
305 * - can be called from a write to /proc/fs/afs/rootcell
307 int afs_cell_init(struct afs_net
*net
, const char *rootcell
)
309 struct afs_cell
*old_root
, *new_root
;
310 const char *cp
, *vllist
;
316 /* module is loaded with no parameters, or built statically.
317 * - in the future we might initialize cell DB here.
319 _leave(" = 0 [no root]");
323 cp
= strchr(rootcell
, ':');
325 _debug("kAFS: no VL server IP addresses specified");
327 len
= strlen(rootcell
);
333 /* allocate a cell record for the root cell */
334 new_root
= afs_lookup_cell(net
, rootcell
, len
, vllist
, false);
335 if (IS_ERR(new_root
)) {
336 _leave(" = %ld", PTR_ERR(new_root
));
337 return PTR_ERR(new_root
);
340 if (!test_and_set_bit(AFS_CELL_FL_NO_GC
, &new_root
->flags
))
341 afs_get_cell(new_root
);
343 /* install the new cell */
344 write_seqlock(&net
->cells_lock
);
345 old_root
= rcu_access_pointer(net
->ws_cell
);
346 rcu_assign_pointer(net
->ws_cell
, new_root
);
347 write_sequnlock(&net
->cells_lock
);
349 afs_put_cell(net
, old_root
);
355 * Update a cell's VL server address list from the DNS.
357 static void afs_update_cell(struct afs_cell
*cell
)
359 struct afs_addr_list
*alist
, *old
;
360 time64_t now
, expiry
;
362 _enter("%s", cell
->name
);
364 alist
= afs_dns_query(cell
, &expiry
);
366 switch (PTR_ERR(alist
)) {
368 /* The DNS said that the cell does not exist */
369 set_bit(AFS_CELL_FL_NOT_FOUND
, &cell
->flags
);
370 clear_bit(AFS_CELL_FL_DNS_FAIL
, &cell
->flags
);
371 cell
->dns_expiry
= ktime_get_real_seconds() + 61;
377 set_bit(AFS_CELL_FL_DNS_FAIL
, &cell
->flags
);
378 cell
->dns_expiry
= ktime_get_real_seconds() + 10;
382 cell
->error
= -EDESTADDRREQ
;
384 clear_bit(AFS_CELL_FL_DNS_FAIL
, &cell
->flags
);
385 clear_bit(AFS_CELL_FL_NOT_FOUND
, &cell
->flags
);
387 /* Exclusion on changing vl_addrs is achieved by a
388 * non-reentrant work item.
390 old
= rcu_dereference_protected(cell
->vl_addrs
, true);
391 rcu_assign_pointer(cell
->vl_addrs
, alist
);
392 cell
->dns_expiry
= expiry
;
395 afs_put_addrlist(old
);
398 if (test_and_clear_bit(AFS_CELL_FL_NO_LOOKUP_YET
, &cell
->flags
))
399 wake_up_bit(&cell
->flags
, AFS_CELL_FL_NO_LOOKUP_YET
);
401 now
= ktime_get_real_seconds();
402 afs_set_cell_timer(cell
->net
, cell
->dns_expiry
- now
);
407 * Destroy a cell record
409 static void afs_cell_destroy(struct rcu_head
*rcu
)
411 struct afs_cell
*cell
= container_of(rcu
, struct afs_cell
, rcu
);
413 _enter("%p{%s}", cell
, cell
->name
);
415 ASSERTCMP(atomic_read(&cell
->usage
), ==, 0);
417 afs_put_addrlist(rcu_access_pointer(cell
->vl_addrs
));
418 key_put(cell
->anonymous_key
);
421 _leave(" [destroyed]");
425 * Queue the cell manager.
427 static void afs_queue_cell_manager(struct afs_net
*net
)
429 int outstanding
= atomic_inc_return(&net
->cells_outstanding
);
431 _enter("%d", outstanding
);
433 if (!queue_work(afs_wq
, &net
->cells_manager
))
434 afs_dec_cells_outstanding(net
);
438 * Cell management timer. We have an increment on cells_outstanding that we
439 * need to pass along to the work item.
441 void afs_cells_timer(struct timer_list
*timer
)
443 struct afs_net
*net
= container_of(timer
, struct afs_net
, cells_timer
);
446 if (!queue_work(afs_wq
, &net
->cells_manager
))
447 afs_dec_cells_outstanding(net
);
451 * Get a reference on a cell record.
453 struct afs_cell
*afs_get_cell(struct afs_cell
*cell
)
455 atomic_inc(&cell
->usage
);
460 * Drop a reference on a cell record.
462 void afs_put_cell(struct afs_net
*net
, struct afs_cell
*cell
)
464 time64_t now
, expire_delay
;
469 _enter("%s", cell
->name
);
471 now
= ktime_get_real_seconds();
472 cell
->last_inactive
= now
;
474 if (!test_bit(AFS_CELL_FL_DNS_FAIL
, &cell
->flags
) &&
475 !test_bit(AFS_CELL_FL_NOT_FOUND
, &cell
->flags
))
476 expire_delay
= afs_cell_gc_delay
;
478 if (atomic_dec_return(&cell
->usage
) > 1)
481 /* 'cell' may now be garbage collected. */
482 afs_set_cell_timer(net
, expire_delay
);
486 * Allocate a key to use as a placeholder for anonymous user security.
488 static int afs_alloc_anon_key(struct afs_cell
*cell
)
491 char keyname
[4 + AFS_MAXCELLNAME
+ 1], *cp
, *dp
;
493 /* Create a key to represent an anonymous user. */
494 memcpy(keyname
, "afs@", 4);
498 *dp
++ = tolower(*cp
);
501 key
= rxrpc_get_null_key(keyname
);
505 cell
->anonymous_key
= key
;
507 _debug("anon key %p{%x}",
508 cell
->anonymous_key
, key_serial(cell
->anonymous_key
));
515 static int afs_activate_cell(struct afs_net
*net
, struct afs_cell
*cell
)
519 if (!cell
->anonymous_key
) {
520 ret
= afs_alloc_anon_key(cell
);
525 #ifdef CONFIG_AFS_FSCACHE
526 cell
->cache
= fscache_acquire_cookie(afs_cache_netfs
.primary_index
,
527 &afs_cell_cache_index_def
,
528 cell
->name
, strlen(cell
->name
),
532 ret
= afs_proc_cell_setup(cell
);
536 mutex_lock(&net
->proc_cells_lock
);
537 list_add_tail(&cell
->proc_link
, &net
->proc_cells
);
538 afs_dynroot_mkdir(net
, cell
);
539 mutex_unlock(&net
->proc_cells_lock
);
546 static void afs_deactivate_cell(struct afs_net
*net
, struct afs_cell
*cell
)
548 _enter("%s", cell
->name
);
550 afs_proc_cell_remove(cell
);
552 mutex_lock(&net
->proc_cells_lock
);
553 list_del_init(&cell
->proc_link
);
554 afs_dynroot_rmdir(net
, cell
);
555 mutex_unlock(&net
->proc_cells_lock
);
557 #ifdef CONFIG_AFS_FSCACHE
558 fscache_relinquish_cookie(cell
->cache
, NULL
, false);
566 * Manage a cell record, initialising and destroying it, maintaining its DNS
569 static void afs_manage_cell(struct work_struct
*work
)
571 struct afs_cell
*cell
= container_of(work
, struct afs_cell
, manager
);
572 struct afs_net
*net
= cell
->net
;
576 _enter("%s", cell
->name
);
579 _debug("state %u", cell
->state
);
580 switch (cell
->state
) {
581 case AFS_CELL_INACTIVE
:
582 case AFS_CELL_FAILED
:
583 write_seqlock(&net
->cells_lock
);
585 deleted
= atomic_try_cmpxchg_relaxed(&cell
->usage
, &usage
, 0);
587 rb_erase(&cell
->net_node
, &net
->cells
);
588 write_sequnlock(&net
->cells_lock
);
590 goto final_destruction
;
591 if (cell
->state
== AFS_CELL_FAILED
)
593 cell
->state
= AFS_CELL_UNSET
;
597 cell
->state
= AFS_CELL_ACTIVATING
;
600 case AFS_CELL_ACTIVATING
:
601 ret
= afs_activate_cell(net
, cell
);
603 goto activation_failed
;
605 cell
->state
= AFS_CELL_ACTIVE
;
607 clear_bit(AFS_CELL_FL_NOT_READY
, &cell
->flags
);
608 wake_up_bit(&cell
->flags
, AFS_CELL_FL_NOT_READY
);
611 case AFS_CELL_ACTIVE
:
612 if (atomic_read(&cell
->usage
) > 1) {
613 time64_t now
= ktime_get_real_seconds();
614 if (cell
->dns_expiry
<= now
&& net
->live
)
615 afs_update_cell(cell
);
618 cell
->state
= AFS_CELL_DEACTIVATING
;
621 case AFS_CELL_DEACTIVATING
:
622 set_bit(AFS_CELL_FL_NOT_READY
, &cell
->flags
);
623 if (atomic_read(&cell
->usage
) > 1)
624 goto reverse_deactivation
;
625 afs_deactivate_cell(net
, cell
);
626 cell
->state
= AFS_CELL_INACTIVE
;
632 _debug("bad state %u", cell
->state
);
633 BUG(); /* Unhandled state */
637 afs_deactivate_cell(net
, cell
);
639 cell
->state
= AFS_CELL_FAILED
;
641 if (test_and_clear_bit(AFS_CELL_FL_NOT_READY
, &cell
->flags
))
642 wake_up_bit(&cell
->flags
, AFS_CELL_FL_NOT_READY
);
645 reverse_deactivation
:
646 cell
->state
= AFS_CELL_ACTIVE
;
648 clear_bit(AFS_CELL_FL_NOT_READY
, &cell
->flags
);
649 wake_up_bit(&cell
->flags
, AFS_CELL_FL_NOT_READY
);
650 _leave(" [deact->act]");
654 _leave(" [done %u]", cell
->state
);
658 call_rcu(&cell
->rcu
, afs_cell_destroy
);
659 afs_dec_cells_outstanding(net
);
660 _leave(" [destruct %d]", atomic_read(&net
->cells_outstanding
));
664 * Manage the records of cells known to a network namespace. This includes
665 * updating the DNS records and garbage collecting unused cells that were
666 * automatically added.
668 * Note that constructed cell records may only be removed from net->cells by
669 * this work item, so it is safe for this work item to stash a cursor pointing
670 * into the tree and then return to caller (provided it skips cells that are
671 * still under construction).
673 * Note also that we were given an increment on net->cells_outstanding by
674 * whoever queued us that we need to deal with before returning.
676 void afs_manage_cells(struct work_struct
*work
)
678 struct afs_net
*net
= container_of(work
, struct afs_net
, cells_manager
);
679 struct rb_node
*cursor
;
680 time64_t now
= ktime_get_real_seconds(), next_manage
= TIME64_MAX
;
681 bool purging
= !net
->live
;
685 /* Trawl the cell database looking for cells that have expired from
686 * lack of use and cells whose DNS results have expired and dispatch
689 read_seqlock_excl(&net
->cells_lock
);
691 for (cursor
= rb_first(&net
->cells
); cursor
; cursor
= rb_next(cursor
)) {
692 struct afs_cell
*cell
=
693 rb_entry(cursor
, struct afs_cell
, net_node
);
695 bool sched_cell
= false;
697 usage
= atomic_read(&cell
->usage
);
698 _debug("manage %s %u", cell
->name
, usage
);
700 ASSERTCMP(usage
, >=, 1);
703 if (test_and_clear_bit(AFS_CELL_FL_NO_GC
, &cell
->flags
))
704 usage
= atomic_dec_return(&cell
->usage
);
705 ASSERTCMP(usage
, ==, 1);
709 time64_t expire_at
= cell
->last_inactive
;
711 if (!test_bit(AFS_CELL_FL_DNS_FAIL
, &cell
->flags
) &&
712 !test_bit(AFS_CELL_FL_NOT_FOUND
, &cell
->flags
))
713 expire_at
+= afs_cell_gc_delay
;
714 if (purging
|| expire_at
<= now
)
716 else if (expire_at
< next_manage
)
717 next_manage
= expire_at
;
721 if (cell
->dns_expiry
<= now
)
723 else if (cell
->dns_expiry
<= next_manage
)
724 next_manage
= cell
->dns_expiry
;
728 queue_work(afs_wq
, &cell
->manager
);
731 read_sequnlock_excl(&net
->cells_lock
);
733 /* Update the timer on the way out. We have to pass an increment on
734 * cells_outstanding in the namespace that we are in to the timer or
735 * the work scheduler.
737 if (!purging
&& next_manage
< TIME64_MAX
) {
738 now
= ktime_get_real_seconds();
740 if (next_manage
- now
<= 0) {
741 if (queue_work(afs_wq
, &net
->cells_manager
))
742 atomic_inc(&net
->cells_outstanding
);
744 afs_set_cell_timer(net
, next_manage
- now
);
748 afs_dec_cells_outstanding(net
);
749 _leave(" [%d]", atomic_read(&net
->cells_outstanding
));
753 * Purge in-memory cell database.
755 void afs_cell_purge(struct afs_net
*net
)
761 write_seqlock(&net
->cells_lock
);
762 ws
= rcu_access_pointer(net
->ws_cell
);
763 RCU_INIT_POINTER(net
->ws_cell
, NULL
);
764 write_sequnlock(&net
->cells_lock
);
765 afs_put_cell(net
, ws
);
768 if (del_timer_sync(&net
->cells_timer
))
769 atomic_dec(&net
->cells_outstanding
);
772 afs_queue_cell_manager(net
);
775 wait_var_event(&net
->cells_outstanding
,
776 !atomic_read(&net
->cells_outstanding
));