2 * QEMU Block driver for RADOS (Ceph)
4 * Copyright (C) 2010-2011 Christian Brunner <chb@muc.de>,
5 * Josh Durgin <josh.durgin@dreamhost.com>
7 * This work is licensed under the terms of the GNU GPL, version 2. See
8 * the COPYING file in the top-level directory.
10 * Contributions after 2012-01-13 are licensed under the terms of the
11 * GNU GPL, version 2 or (at your option) any later version.
14 #include "qemu/osdep.h"
16 #include <rbd/librbd.h>
17 #include "qapi/error.h"
18 #include "qemu/error-report.h"
19 #include "qemu/module.h"
20 #include "qemu/option.h"
21 #include "block/block_int.h"
22 #include "block/qdict.h"
23 #include "crypto/secret.h"
24 #include "qemu/cutils.h"
25 #include "sysemu/replay.h"
26 #include "qapi/qmp/qstring.h"
27 #include "qapi/qmp/qdict.h"
28 #include "qapi/qmp/qjson.h"
29 #include "qapi/qmp/qlist.h"
30 #include "qapi/qobject-input-visitor.h"
31 #include "qapi/qapi-visit-block-core.h"
34 * When specifying the image filename use:
36 * rbd:poolname/devicename[@snapshotname][:option1=value1[:option2=value2...]]
38 * poolname must be the name of an existing rados pool.
40 * devicename is the name of the rbd image.
42 * Each option given is used to configure rados, and may be any valid
43 * Ceph option, "id", or "conf".
45 * The "id" option indicates what user we should authenticate as to
46 * the Ceph cluster. If it is excluded we will use the Ceph default
49 * The "conf" option specifies a Ceph configuration file to read. If
50 * it is not specified, we will read from the default Ceph locations
51 * (e.g., /etc/ceph/ceph.conf). To avoid reading _any_ configuration
52 * file, specify conf=/dev/null.
54 * Configuration values containing :, @, or = can be escaped with a
58 #define OBJ_MAX_SIZE (1UL << OBJ_DEFAULT_OBJ_ORDER)
60 #define RBD_MAX_SNAPS 100
62 #define RBD_ENCRYPTION_LUKS_HEADER_VERIFICATION_LEN 8
64 static const char rbd_luks_header_verification
[
65 RBD_ENCRYPTION_LUKS_HEADER_VERIFICATION_LEN
] = {
66 'L', 'U', 'K', 'S', 0xBA, 0xBE, 0, 1
69 static const char rbd_luks2_header_verification
[
70 RBD_ENCRYPTION_LUKS_HEADER_VERIFICATION_LEN
] = {
71 'L', 'U', 'K', 'S', 0xBA, 0xBE, 0, 2
82 typedef struct BDRVRBDState
{
93 typedef struct RBDTask
{
100 typedef struct RBDDiffIterateReq
{
106 static int qemu_rbd_connect(rados_t
*cluster
, rados_ioctx_t
*io_ctx
,
107 BlockdevOptionsRbd
*opts
, bool cache
,
108 const char *keypairs
, const char *secretid
,
111 static char *qemu_rbd_strchr(char *src
, char delim
)
115 for (p
= src
; *p
; ++p
) {
119 if (*p
== '\\' && p
[1] != '\0') {
128 static char *qemu_rbd_next_tok(char *src
, char delim
, char **p
)
134 end
= qemu_rbd_strchr(src
, delim
);
142 static void qemu_rbd_unescape(char *src
)
146 for (p
= src
; *src
; ++src
, ++p
) {
147 if (*src
== '\\' && src
[1] != '\0') {
155 static void qemu_rbd_parse_filename(const char *filename
, QDict
*options
,
160 QList
*keypairs
= NULL
;
161 char *found_str
, *image_name
;
163 if (!strstart(filename
, "rbd:", &start
)) {
164 error_setg(errp
, "File name must start with 'rbd:'");
168 buf
= g_strdup(start
);
171 found_str
= qemu_rbd_next_tok(p
, '/', &p
);
173 error_setg(errp
, "Pool name is required");
176 qemu_rbd_unescape(found_str
);
177 qdict_put_str(options
, "pool", found_str
);
179 if (qemu_rbd_strchr(p
, '@')) {
180 image_name
= qemu_rbd_next_tok(p
, '@', &p
);
182 found_str
= qemu_rbd_next_tok(p
, ':', &p
);
183 qemu_rbd_unescape(found_str
);
184 qdict_put_str(options
, "snapshot", found_str
);
186 image_name
= qemu_rbd_next_tok(p
, ':', &p
);
188 /* Check for namespace in the image_name */
189 if (qemu_rbd_strchr(image_name
, '/')) {
190 found_str
= qemu_rbd_next_tok(image_name
, '/', &image_name
);
191 qemu_rbd_unescape(found_str
);
192 qdict_put_str(options
, "namespace", found_str
);
194 qdict_put_str(options
, "namespace", "");
196 qemu_rbd_unescape(image_name
);
197 qdict_put_str(options
, "image", image_name
);
202 /* The following are essentially all key/value pairs, and we treat
203 * 'id' and 'conf' a bit special. Key/value pairs may be in any order. */
206 name
= qemu_rbd_next_tok(p
, '=', &p
);
208 error_setg(errp
, "conf option %s has no value", name
);
212 qemu_rbd_unescape(name
);
214 value
= qemu_rbd_next_tok(p
, ':', &p
);
215 qemu_rbd_unescape(value
);
217 if (!strcmp(name
, "conf")) {
218 qdict_put_str(options
, "conf", value
);
219 } else if (!strcmp(name
, "id")) {
220 qdict_put_str(options
, "user", value
);
223 * We pass these internally to qemu_rbd_set_keypairs(), so
224 * we can get away with the simpler list of [ "key1",
225 * "value1", "key2", "value2" ] rather than a raw dict
226 * { "key1": "value1", "key2": "value2" } where we can't
227 * guarantee order, or even a more correct but complex
228 * [ { "key1": "value1" }, { "key2": "value2" } ]
231 keypairs
= qlist_new();
233 qlist_append_str(keypairs
, name
);
234 qlist_append_str(keypairs
, value
);
239 qdict_put(options
, "=keyvalue-pairs",
240 qstring_from_gstring(qobject_to_json(QOBJECT(keypairs
))));
245 qobject_unref(keypairs
);
249 static int qemu_rbd_set_auth(rados_t cluster
, BlockdevOptionsRbd
*opts
,
255 RbdAuthModeList
*auth
;
257 if (opts
->key_secret
) {
258 key
= qcrypto_secret_lookup_as_base64(opts
->key_secret
, errp
);
262 r
= rados_conf_set(cluster
, "key", key
);
265 error_setg_errno(errp
, -r
, "Could not set 'key'");
270 if (opts
->has_auth_client_required
) {
271 accu
= g_string_new("");
272 for (auth
= opts
->auth_client_required
; auth
; auth
= auth
->next
) {
274 g_string_append_c(accu
, ';');
276 g_string_append(accu
, RbdAuthMode_str(auth
->value
));
278 acr
= g_string_free(accu
, FALSE
);
279 r
= rados_conf_set(cluster
, "auth_client_required", acr
);
282 error_setg_errno(errp
, -r
,
283 "Could not set 'auth_client_required'");
291 static int qemu_rbd_set_keypairs(rados_t cluster
, const char *keypairs_json
,
301 if (!keypairs_json
) {
304 keypairs
= qobject_to(QList
,
305 qobject_from_json(keypairs_json
, &error_abort
));
306 remaining
= qlist_size(keypairs
) / 2;
309 while (remaining
--) {
310 name
= qobject_to(QString
, qlist_pop(keypairs
));
311 value
= qobject_to(QString
, qlist_pop(keypairs
));
312 assert(name
&& value
);
313 key
= qstring_get_str(name
);
315 ret
= rados_conf_set(cluster
, key
, qstring_get_str(value
));
316 qobject_unref(value
);
318 error_setg_errno(errp
, -ret
, "invalid conf option %s", key
);
326 qobject_unref(keypairs
);
330 #ifdef LIBRBD_SUPPORTS_ENCRYPTION
331 static int qemu_rbd_convert_luks_options(
332 RbdEncryptionOptionsLUKSBase
*luks_opts
,
334 size_t *passphrase_len
,
337 return qcrypto_secret_lookup(luks_opts
->key_secret
, (uint8_t **)passphrase
,
338 passphrase_len
, errp
);
341 static int qemu_rbd_convert_luks_create_options(
342 RbdEncryptionCreateOptionsLUKSBase
*luks_opts
,
343 rbd_encryption_algorithm_t
*alg
,
345 size_t *passphrase_len
,
350 r
= qemu_rbd_convert_luks_options(
351 qapi_RbdEncryptionCreateOptionsLUKSBase_base(luks_opts
),
352 passphrase
, passphrase_len
, errp
);
357 if (luks_opts
->has_cipher_alg
) {
358 switch (luks_opts
->cipher_alg
) {
359 case QCRYPTO_CIPHER_ALG_AES_128
: {
360 *alg
= RBD_ENCRYPTION_ALGORITHM_AES128
;
363 case QCRYPTO_CIPHER_ALG_AES_256
: {
364 *alg
= RBD_ENCRYPTION_ALGORITHM_AES256
;
369 error_setg_errno(errp
, -r
, "unknown encryption algorithm: %u",
370 luks_opts
->cipher_alg
);
376 *alg
= RBD_ENCRYPTION_ALGORITHM_AES256
;
382 static int qemu_rbd_encryption_format(rbd_image_t image
,
383 RbdEncryptionCreateOptions
*encrypt
,
387 g_autofree
char *passphrase
= NULL
;
388 size_t passphrase_len
;
389 rbd_encryption_format_t format
;
390 rbd_encryption_options_t opts
;
391 rbd_encryption_luks1_format_options_t luks_opts
;
392 rbd_encryption_luks2_format_options_t luks2_opts
;
394 uint64_t raw_size
, effective_size
;
396 r
= rbd_get_size(image
, &raw_size
);
398 error_setg_errno(errp
, -r
, "cannot get raw image size");
402 switch (encrypt
->format
) {
403 case RBD_IMAGE_ENCRYPTION_FORMAT_LUKS
: {
404 memset(&luks_opts
, 0, sizeof(luks_opts
));
405 format
= RBD_ENCRYPTION_FORMAT_LUKS1
;
407 opts_size
= sizeof(luks_opts
);
408 r
= qemu_rbd_convert_luks_create_options(
409 qapi_RbdEncryptionCreateOptionsLUKS_base(&encrypt
->u
.luks
),
410 &luks_opts
.alg
, &passphrase
, &passphrase_len
, errp
);
414 luks_opts
.passphrase
= passphrase
;
415 luks_opts
.passphrase_size
= passphrase_len
;
418 case RBD_IMAGE_ENCRYPTION_FORMAT_LUKS2
: {
419 memset(&luks2_opts
, 0, sizeof(luks2_opts
));
420 format
= RBD_ENCRYPTION_FORMAT_LUKS2
;
422 opts_size
= sizeof(luks2_opts
);
423 r
= qemu_rbd_convert_luks_create_options(
424 qapi_RbdEncryptionCreateOptionsLUKS2_base(
426 &luks2_opts
.alg
, &passphrase
, &passphrase_len
, errp
);
430 luks2_opts
.passphrase
= passphrase
;
431 luks2_opts
.passphrase_size
= passphrase_len
;
437 errp
, -r
, "unknown image encryption format: %u",
443 r
= rbd_encryption_format(image
, format
, opts
, opts_size
);
445 error_setg_errno(errp
, -r
, "encryption format fail");
449 r
= rbd_get_size(image
, &effective_size
);
451 error_setg_errno(errp
, -r
, "cannot get effective image size");
455 r
= rbd_resize(image
, raw_size
+ (raw_size
- effective_size
));
457 error_setg_errno(errp
, -r
, "cannot resize image after format");
464 static int qemu_rbd_encryption_load(rbd_image_t image
,
465 RbdEncryptionOptions
*encrypt
,
469 g_autofree
char *passphrase
= NULL
;
470 size_t passphrase_len
;
471 rbd_encryption_luks1_format_options_t luks_opts
;
472 rbd_encryption_luks2_format_options_t luks2_opts
;
473 rbd_encryption_format_t format
;
474 rbd_encryption_options_t opts
;
477 switch (encrypt
->format
) {
478 case RBD_IMAGE_ENCRYPTION_FORMAT_LUKS
: {
479 memset(&luks_opts
, 0, sizeof(luks_opts
));
480 format
= RBD_ENCRYPTION_FORMAT_LUKS1
;
482 opts_size
= sizeof(luks_opts
);
483 r
= qemu_rbd_convert_luks_options(
484 qapi_RbdEncryptionOptionsLUKS_base(&encrypt
->u
.luks
),
485 &passphrase
, &passphrase_len
, errp
);
489 luks_opts
.passphrase
= passphrase
;
490 luks_opts
.passphrase_size
= passphrase_len
;
493 case RBD_IMAGE_ENCRYPTION_FORMAT_LUKS2
: {
494 memset(&luks2_opts
, 0, sizeof(luks2_opts
));
495 format
= RBD_ENCRYPTION_FORMAT_LUKS2
;
497 opts_size
= sizeof(luks2_opts
);
498 r
= qemu_rbd_convert_luks_options(
499 qapi_RbdEncryptionOptionsLUKS2_base(&encrypt
->u
.luks2
),
500 &passphrase
, &passphrase_len
, errp
);
504 luks2_opts
.passphrase
= passphrase
;
505 luks2_opts
.passphrase_size
= passphrase_len
;
511 errp
, -r
, "unknown image encryption format: %u",
517 r
= rbd_encryption_load(image
, format
, opts
, opts_size
);
519 error_setg_errno(errp
, -r
, "encryption load fail");
527 /* FIXME Deprecate and remove keypairs or make it available in QMP. */
528 static int qemu_rbd_do_create(BlockdevCreateOptions
*options
,
529 const char *keypairs
, const char *password_secret
,
532 BlockdevCreateOptionsRbd
*opts
= &options
->u
.rbd
;
534 rados_ioctx_t io_ctx
;
538 assert(options
->driver
== BLOCKDEV_DRIVER_RBD
);
539 if (opts
->location
->has_snapshot
) {
540 error_setg(errp
, "Can't use snapshot name for image creation");
544 #ifndef LIBRBD_SUPPORTS_ENCRYPTION
545 if (opts
->has_encrypt
) {
546 error_setg(errp
, "RBD library does not support image encryption");
551 if (opts
->has_cluster_size
) {
552 int64_t objsize
= opts
->cluster_size
;
553 if ((objsize
- 1) & objsize
) { /* not a power of 2? */
554 error_setg(errp
, "obj size needs to be power of 2");
557 if (objsize
< 4096) {
558 error_setg(errp
, "obj size too small");
561 obj_order
= ctz32(objsize
);
564 ret
= qemu_rbd_connect(&cluster
, &io_ctx
, opts
->location
, false, keypairs
,
565 password_secret
, errp
);
570 ret
= rbd_create(io_ctx
, opts
->location
->image
, opts
->size
, &obj_order
);
572 error_setg_errno(errp
, -ret
, "error rbd create");
576 #ifdef LIBRBD_SUPPORTS_ENCRYPTION
577 if (opts
->has_encrypt
) {
580 ret
= rbd_open(io_ctx
, opts
->location
->image
, &image
, NULL
);
582 error_setg_errno(errp
, -ret
,
583 "error opening image '%s' for encryption format",
584 opts
->location
->image
);
588 ret
= qemu_rbd_encryption_format(image
, opts
->encrypt
, errp
);
591 /* encryption format fail, try removing the image */
592 rbd_remove(io_ctx
, opts
->location
->image
);
600 rados_ioctx_destroy(io_ctx
);
601 rados_shutdown(cluster
);
605 static int qemu_rbd_co_create(BlockdevCreateOptions
*options
, Error
**errp
)
607 return qemu_rbd_do_create(options
, NULL
, NULL
, errp
);
610 static int qemu_rbd_extract_encryption_create_options(
612 RbdEncryptionCreateOptions
**spec
,
616 QDict
*encrypt_qdict
;
620 opts_qdict
= qemu_opts_to_qdict(opts
, NULL
);
621 qdict_extract_subqdict(opts_qdict
, &encrypt_qdict
, "encrypt.");
622 qobject_unref(opts_qdict
);
623 if (!qdict_size(encrypt_qdict
)) {
628 /* Convert options into a QAPI object */
629 v
= qobject_input_visitor_new_flat_confused(encrypt_qdict
, errp
);
635 visit_type_RbdEncryptionCreateOptions(v
, NULL
, spec
, errp
);
643 qobject_unref(encrypt_qdict
);
647 static int coroutine_fn
qemu_rbd_co_create_opts(BlockDriver
*drv
,
648 const char *filename
,
652 BlockdevCreateOptions
*create_options
;
653 BlockdevCreateOptionsRbd
*rbd_opts
;
654 BlockdevOptionsRbd
*loc
;
655 RbdEncryptionCreateOptions
*encrypt
= NULL
;
656 Error
*local_err
= NULL
;
657 const char *keypairs
, *password_secret
;
658 QDict
*options
= NULL
;
661 create_options
= g_new0(BlockdevCreateOptions
, 1);
662 create_options
->driver
= BLOCKDEV_DRIVER_RBD
;
663 rbd_opts
= &create_options
->u
.rbd
;
665 rbd_opts
->location
= g_new0(BlockdevOptionsRbd
, 1);
667 password_secret
= qemu_opt_get(opts
, "password-secret");
669 /* Read out options */
670 rbd_opts
->size
= ROUND_UP(qemu_opt_get_size_del(opts
, BLOCK_OPT_SIZE
, 0),
672 rbd_opts
->cluster_size
= qemu_opt_get_size_del(opts
,
673 BLOCK_OPT_CLUSTER_SIZE
, 0);
674 rbd_opts
->has_cluster_size
= (rbd_opts
->cluster_size
!= 0);
676 options
= qdict_new();
677 qemu_rbd_parse_filename(filename
, options
, &local_err
);
680 error_propagate(errp
, local_err
);
684 ret
= qemu_rbd_extract_encryption_create_options(opts
, &encrypt
, errp
);
688 rbd_opts
->encrypt
= encrypt
;
689 rbd_opts
->has_encrypt
= !!encrypt
;
692 * Caution: while qdict_get_try_str() is fine, getting non-string
693 * types would require more care. When @options come from -blockdev
694 * or blockdev_add, its members are typed according to the QAPI
695 * schema, but when they come from -drive, they're all QString.
697 loc
= rbd_opts
->location
;
698 loc
->pool
= g_strdup(qdict_get_try_str(options
, "pool"));
699 loc
->conf
= g_strdup(qdict_get_try_str(options
, "conf"));
700 loc
->has_conf
= !!loc
->conf
;
701 loc
->user
= g_strdup(qdict_get_try_str(options
, "user"));
702 loc
->has_user
= !!loc
->user
;
703 loc
->q_namespace
= g_strdup(qdict_get_try_str(options
, "namespace"));
704 loc
->has_q_namespace
= !!loc
->q_namespace
;
705 loc
->image
= g_strdup(qdict_get_try_str(options
, "image"));
706 keypairs
= qdict_get_try_str(options
, "=keyvalue-pairs");
708 ret
= qemu_rbd_do_create(create_options
, keypairs
, password_secret
, errp
);
714 qobject_unref(options
);
715 qapi_free_BlockdevCreateOptions(create_options
);
719 static char *qemu_rbd_mon_host(BlockdevOptionsRbd
*opts
, Error
**errp
)
722 const char *host
, *port
;
724 InetSocketAddressBaseList
*p
;
727 if (!opts
->has_server
) {
731 for (cnt
= 0, p
= opts
->server
; p
; p
= p
->next
) {
735 vals
= g_new(const char *, cnt
+ 1);
737 for (i
= 0, p
= opts
->server
; p
; p
= p
->next
, i
++) {
738 host
= p
->value
->host
;
739 port
= p
->value
->port
;
741 if (strchr(host
, ':')) {
742 vals
[i
] = g_strdup_printf("[%s]:%s", host
, port
);
744 vals
[i
] = g_strdup_printf("%s:%s", host
, port
);
749 rados_str
= i
? g_strjoinv(";", (char **)vals
) : NULL
;
750 g_strfreev((char **)vals
);
754 static int qemu_rbd_connect(rados_t
*cluster
, rados_ioctx_t
*io_ctx
,
755 BlockdevOptionsRbd
*opts
, bool cache
,
756 const char *keypairs
, const char *secretid
,
759 char *mon_host
= NULL
;
760 Error
*local_err
= NULL
;
764 if (opts
->key_secret
) {
766 "Legacy 'password-secret' clashes with 'key-secret'");
769 opts
->key_secret
= g_strdup(secretid
);
770 opts
->has_key_secret
= true;
773 mon_host
= qemu_rbd_mon_host(opts
, &local_err
);
775 error_propagate(errp
, local_err
);
780 r
= rados_create(cluster
, opts
->user
);
782 error_setg_errno(errp
, -r
, "error initializing");
786 /* try default location when conf=NULL, but ignore failure */
787 r
= rados_conf_read_file(*cluster
, opts
->conf
);
788 if (opts
->has_conf
&& r
< 0) {
789 error_setg_errno(errp
, -r
, "error reading conf file %s", opts
->conf
);
790 goto failed_shutdown
;
793 r
= qemu_rbd_set_keypairs(*cluster
, keypairs
, errp
);
795 goto failed_shutdown
;
799 r
= rados_conf_set(*cluster
, "mon_host", mon_host
);
801 goto failed_shutdown
;
805 r
= qemu_rbd_set_auth(*cluster
, opts
, errp
);
807 goto failed_shutdown
;
811 * Fallback to more conservative semantics if setting cache
812 * options fails. Ignore errors from setting rbd_cache because the
813 * only possible error is that the option does not exist, and
814 * librbd defaults to no caching. If write through caching cannot
815 * be set up, fall back to no caching.
818 rados_conf_set(*cluster
, "rbd_cache", "true");
820 rados_conf_set(*cluster
, "rbd_cache", "false");
823 r
= rados_connect(*cluster
);
825 error_setg_errno(errp
, -r
, "error connecting");
826 goto failed_shutdown
;
829 r
= rados_ioctx_create(*cluster
, opts
->pool
, io_ctx
);
831 error_setg_errno(errp
, -r
, "error opening pool %s", opts
->pool
);
832 goto failed_shutdown
;
835 * Set the namespace after opening the io context on the pool,
836 * if nspace == NULL or if nspace == "", it is just as we did nothing
838 rados_ioctx_set_namespace(*io_ctx
, opts
->q_namespace
);
844 rados_shutdown(*cluster
);
850 static int qemu_rbd_convert_options(QDict
*options
, BlockdevOptionsRbd
**opts
,
855 /* Convert the remaining options into a QAPI object */
856 v
= qobject_input_visitor_new_flat_confused(options
, errp
);
861 visit_type_BlockdevOptionsRbd(v
, NULL
, opts
, errp
);
870 static int qemu_rbd_attempt_legacy_options(QDict
*options
,
871 BlockdevOptionsRbd
**opts
,
877 filename
= g_strdup(qdict_get_try_str(options
, "filename"));
881 qdict_del(options
, "filename");
883 qemu_rbd_parse_filename(filename
, options
, NULL
);
885 /* keypairs freed by caller */
886 *keypairs
= g_strdup(qdict_get_try_str(options
, "=keyvalue-pairs"));
888 qdict_del(options
, "=keyvalue-pairs");
891 r
= qemu_rbd_convert_options(options
, opts
, NULL
);
897 static int qemu_rbd_open(BlockDriverState
*bs
, QDict
*options
, int flags
,
900 BDRVRBDState
*s
= bs
->opaque
;
901 BlockdevOptionsRbd
*opts
= NULL
;
903 Error
*local_err
= NULL
;
904 char *keypairs
, *secretid
;
905 rbd_image_info_t info
;
908 keypairs
= g_strdup(qdict_get_try_str(options
, "=keyvalue-pairs"));
910 qdict_del(options
, "=keyvalue-pairs");
913 secretid
= g_strdup(qdict_get_try_str(options
, "password-secret"));
915 qdict_del(options
, "password-secret");
918 r
= qemu_rbd_convert_options(options
, &opts
, &local_err
);
920 /* If keypairs are present, that means some options are present in
921 * the modern option format. Don't attempt to parse legacy option
922 * formats, as we won't support mixed usage. */
924 error_propagate(errp
, local_err
);
928 /* If the initial attempt to convert and process the options failed,
929 * we may be attempting to open an image file that has the rbd options
930 * specified in the older format consisting of all key/value pairs
931 * encoded in the filename. Go ahead and attempt to parse the
932 * filename, and see if we can pull out the required options. */
933 r
= qemu_rbd_attempt_legacy_options(options
, &opts
, &keypairs
);
935 /* Propagate the original error, not the legacy parsing fallback
936 * error, as the latter was just a best-effort attempt. */
937 error_propagate(errp
, local_err
);
940 /* Take care whenever deciding to actually deprecate; once this ability
941 * is removed, we will not be able to open any images with legacy-styled
942 * backing image strings. */
943 warn_report("RBD options encoded in the filename as keyvalue pairs "
947 /* Remove the processed options from the QDict (the visitor processes
948 * _all_ options in the QDict) */
949 while ((e
= qdict_first(options
))) {
950 qdict_del(options
, e
->key
);
953 r
= qemu_rbd_connect(&s
->cluster
, &s
->io_ctx
, opts
,
954 !(flags
& BDRV_O_NOCACHE
), keypairs
, secretid
, errp
);
959 s
->snap
= g_strdup(opts
->snapshot
);
960 s
->image_name
= g_strdup(opts
->image
);
962 /* rbd_open is always r/w */
963 r
= rbd_open(s
->io_ctx
, s
->image_name
, &s
->image
, s
->snap
);
965 error_setg_errno(errp
, -r
, "error reading header from %s",
970 if (opts
->has_encrypt
) {
971 #ifdef LIBRBD_SUPPORTS_ENCRYPTION
972 r
= qemu_rbd_encryption_load(s
->image
, opts
->encrypt
, errp
);
974 goto failed_post_open
;
978 error_setg(errp
, "RBD library does not support image encryption");
979 goto failed_post_open
;
983 r
= rbd_stat(s
->image
, &info
, sizeof(info
));
985 error_setg_errno(errp
, -r
, "error getting image info from %s",
987 goto failed_post_open
;
989 s
->image_size
= info
.size
;
990 s
->object_size
= info
.obj_size
;
992 /* If we are using an rbd snapshot, we must be r/o, otherwise
994 if (s
->snap
!= NULL
) {
995 r
= bdrv_apply_auto_read_only(bs
, "rbd snapshots are read-only", errp
);
997 goto failed_post_open
;
1001 #ifdef LIBRBD_SUPPORTS_WRITE_ZEROES
1002 bs
->supported_zero_flags
= BDRV_REQ_MAY_UNMAP
| BDRV_REQ_NO_FALLBACK
;
1005 /* When extending regular files, we get zeros from the OS */
1006 bs
->supported_truncate_flags
= BDRV_REQ_ZERO_WRITE
;
1012 rbd_close(s
->image
);
1014 rados_ioctx_destroy(s
->io_ctx
);
1016 g_free(s
->image_name
);
1017 rados_shutdown(s
->cluster
);
1019 qapi_free_BlockdevOptionsRbd(opts
);
1026 /* Since RBD is currently always opened R/W via the API,
1027 * we just need to check if we are using a snapshot or not, in
1028 * order to determine if we will allow it to be R/W */
1029 static int qemu_rbd_reopen_prepare(BDRVReopenState
*state
,
1030 BlockReopenQueue
*queue
, Error
**errp
)
1032 BDRVRBDState
*s
= state
->bs
->opaque
;
1035 if (s
->snap
&& state
->flags
& BDRV_O_RDWR
) {
1037 "Cannot change node '%s' to r/w when using RBD snapshot",
1038 bdrv_get_device_or_node_name(state
->bs
));
1045 static void qemu_rbd_close(BlockDriverState
*bs
)
1047 BDRVRBDState
*s
= bs
->opaque
;
1049 rbd_close(s
->image
);
1050 rados_ioctx_destroy(s
->io_ctx
);
1052 g_free(s
->image_name
);
1053 rados_shutdown(s
->cluster
);
1056 /* Resize the RBD image and update the 'image_size' with the current size */
1057 static int qemu_rbd_resize(BlockDriverState
*bs
, uint64_t size
)
1059 BDRVRBDState
*s
= bs
->opaque
;
1062 r
= rbd_resize(s
->image
, size
);
1067 s
->image_size
= size
;
1072 static void qemu_rbd_finish_bh(void *opaque
)
1074 RBDTask
*task
= opaque
;
1075 task
->complete
= true;
1076 aio_co_wake(task
->co
);
1080 * This is the completion callback function for all rbd aio calls
1081 * started from qemu_rbd_start_co().
1083 * Note: this function is being called from a non qemu thread so
1084 * we need to be careful about what we do here. Generally we only
1085 * schedule a BH, and do the rest of the io completion handling
1086 * from qemu_rbd_finish_bh() which runs in a qemu context.
1088 static void qemu_rbd_completion_cb(rbd_completion_t c
, RBDTask
*task
)
1090 task
->ret
= rbd_aio_get_return_value(c
);
1092 aio_bh_schedule_oneshot(bdrv_get_aio_context(task
->bs
),
1093 qemu_rbd_finish_bh
, task
);
1096 static int coroutine_fn
qemu_rbd_start_co(BlockDriverState
*bs
,
1103 BDRVRBDState
*s
= bs
->opaque
;
1104 RBDTask task
= { .bs
= bs
, .co
= qemu_coroutine_self() };
1108 assert(!qiov
|| qiov
->size
== bytes
);
1110 r
= rbd_aio_create_completion(&task
,
1111 (rbd_callback_t
) qemu_rbd_completion_cb
, &c
);
1118 r
= rbd_aio_readv(s
->image
, qiov
->iov
, qiov
->niov
, offset
, c
);
1121 r
= rbd_aio_writev(s
->image
, qiov
->iov
, qiov
->niov
, offset
, c
);
1123 case RBD_AIO_DISCARD
:
1124 r
= rbd_aio_discard(s
->image
, offset
, bytes
, c
);
1127 r
= rbd_aio_flush(s
->image
, c
);
1129 #ifdef LIBRBD_SUPPORTS_WRITE_ZEROES
1130 case RBD_AIO_WRITE_ZEROES
: {
1132 #ifdef RBD_WRITE_ZEROES_FLAG_THICK_PROVISION
1133 if (!(flags
& BDRV_REQ_MAY_UNMAP
)) {
1134 zero_flags
= RBD_WRITE_ZEROES_FLAG_THICK_PROVISION
;
1137 r
= rbd_aio_write_zeroes(s
->image
, offset
, bytes
, c
, zero_flags
, 0);
1146 error_report("rbd request failed early: cmd %d offset %" PRIu64
1147 " bytes %" PRIu64
" flags %d r %d (%s)", cmd
, offset
,
1148 bytes
, flags
, r
, strerror(-r
));
1153 while (!task
.complete
) {
1154 qemu_coroutine_yield();
1158 error_report("rbd request failed: cmd %d offset %" PRIu64
" bytes %"
1159 PRIu64
" flags %d task.ret %" PRIi64
" (%s)", cmd
, offset
,
1160 bytes
, flags
, task
.ret
, strerror(-task
.ret
));
1164 /* zero pad short reads */
1165 if (cmd
== RBD_AIO_READ
&& task
.ret
< qiov
->size
) {
1166 qemu_iovec_memset(qiov
, task
.ret
, 0, qiov
->size
- task
.ret
);
1173 coroutine_fn
qemu_rbd_co_preadv(BlockDriverState
*bs
, int64_t offset
,
1174 int64_t bytes
, QEMUIOVector
*qiov
,
1175 BdrvRequestFlags flags
)
1177 return qemu_rbd_start_co(bs
, offset
, bytes
, qiov
, flags
, RBD_AIO_READ
);
1181 coroutine_fn
qemu_rbd_co_pwritev(BlockDriverState
*bs
, int64_t offset
,
1182 int64_t bytes
, QEMUIOVector
*qiov
,
1183 BdrvRequestFlags flags
)
1185 BDRVRBDState
*s
= bs
->opaque
;
1187 * RBD APIs don't allow us to write more than actual size, so in order
1188 * to support growing images, we resize the image before write
1189 * operations that exceed the current size.
1191 if (offset
+ bytes
> s
->image_size
) {
1192 int r
= qemu_rbd_resize(bs
, offset
+ bytes
);
1197 return qemu_rbd_start_co(bs
, offset
, bytes
, qiov
, flags
, RBD_AIO_WRITE
);
1200 static int coroutine_fn
qemu_rbd_co_flush(BlockDriverState
*bs
)
1202 return qemu_rbd_start_co(bs
, 0, 0, NULL
, 0, RBD_AIO_FLUSH
);
1205 static int coroutine_fn
qemu_rbd_co_pdiscard(BlockDriverState
*bs
,
1206 int64_t offset
, int64_t bytes
)
1208 return qemu_rbd_start_co(bs
, offset
, bytes
, NULL
, 0, RBD_AIO_DISCARD
);
1211 #ifdef LIBRBD_SUPPORTS_WRITE_ZEROES
1213 coroutine_fn
qemu_rbd_co_pwrite_zeroes(BlockDriverState
*bs
, int64_t offset
,
1214 int64_t bytes
, BdrvRequestFlags flags
)
1216 return qemu_rbd_start_co(bs
, offset
, bytes
, NULL
, flags
,
1217 RBD_AIO_WRITE_ZEROES
);
1221 static int qemu_rbd_getinfo(BlockDriverState
*bs
, BlockDriverInfo
*bdi
)
1223 BDRVRBDState
*s
= bs
->opaque
;
1224 bdi
->cluster_size
= s
->object_size
;
1228 static ImageInfoSpecific
*qemu_rbd_get_specific_info(BlockDriverState
*bs
,
1231 BDRVRBDState
*s
= bs
->opaque
;
1232 ImageInfoSpecific
*spec_info
;
1233 char buf
[RBD_ENCRYPTION_LUKS_HEADER_VERIFICATION_LEN
] = {0};
1236 if (s
->image_size
>= RBD_ENCRYPTION_LUKS_HEADER_VERIFICATION_LEN
) {
1237 r
= rbd_read(s
->image
, 0,
1238 RBD_ENCRYPTION_LUKS_HEADER_VERIFICATION_LEN
, buf
);
1240 error_setg_errno(errp
, -r
, "cannot read image start for probe");
1245 spec_info
= g_new(ImageInfoSpecific
, 1);
1246 *spec_info
= (ImageInfoSpecific
){
1247 .type
= IMAGE_INFO_SPECIFIC_KIND_RBD
,
1248 .u
.rbd
.data
= g_new0(ImageInfoSpecificRbd
, 1),
1251 if (memcmp(buf
, rbd_luks_header_verification
,
1252 RBD_ENCRYPTION_LUKS_HEADER_VERIFICATION_LEN
) == 0) {
1253 spec_info
->u
.rbd
.data
->encryption_format
=
1254 RBD_IMAGE_ENCRYPTION_FORMAT_LUKS
;
1255 spec_info
->u
.rbd
.data
->has_encryption_format
= true;
1256 } else if (memcmp(buf
, rbd_luks2_header_verification
,
1257 RBD_ENCRYPTION_LUKS_HEADER_VERIFICATION_LEN
) == 0) {
1258 spec_info
->u
.rbd
.data
->encryption_format
=
1259 RBD_IMAGE_ENCRYPTION_FORMAT_LUKS2
;
1260 spec_info
->u
.rbd
.data
->has_encryption_format
= true;
1262 spec_info
->u
.rbd
.data
->has_encryption_format
= false;
1269 * rbd_diff_iterate2 allows to interrupt the exection by returning a negative
1270 * value in the callback routine. Choose a value that does not conflict with
1271 * an existing exitcode and return it if we want to prematurely stop the
1272 * execution because we detected a change in the allocation status.
1274 #define QEMU_RBD_EXIT_DIFF_ITERATE2 -9000
1276 static int qemu_rbd_diff_iterate_cb(uint64_t offs
, size_t len
,
1277 int exists
, void *opaque
)
1279 RBDDiffIterateReq
*req
= opaque
;
1281 assert(req
->offs
+ req
->bytes
<= offs
);
1283 * we do not diff against a snapshot so we should never receive a callback
1288 if (!req
->exists
&& offs
> req
->offs
) {
1290 * we started in an unallocated area and hit the first allocated
1291 * block. req->bytes must be set to the length of the unallocated area
1292 * before the allocated area. stop further processing.
1294 req
->bytes
= offs
- req
->offs
;
1295 return QEMU_RBD_EXIT_DIFF_ITERATE2
;
1298 if (req
->exists
&& offs
> req
->offs
+ req
->bytes
) {
1300 * we started in an allocated area and jumped over an unallocated area,
1301 * req->bytes contains the length of the allocated area before the
1302 * unallocated area. stop further processing.
1304 return QEMU_RBD_EXIT_DIFF_ITERATE2
;
1313 static int coroutine_fn
qemu_rbd_co_block_status(BlockDriverState
*bs
,
1314 bool want_zero
, int64_t offset
,
1315 int64_t bytes
, int64_t *pnum
,
1317 BlockDriverState
**file
)
1319 BDRVRBDState
*s
= bs
->opaque
;
1321 RBDDiffIterateReq req
= { .offs
= offset
};
1322 uint64_t features
, flags
;
1324 assert(offset
+ bytes
<= s
->image_size
);
1326 /* default to all sectors allocated */
1327 status
= BDRV_BLOCK_DATA
| BDRV_BLOCK_OFFSET_VALID
;
1332 /* check if RBD image supports fast-diff */
1333 r
= rbd_get_features(s
->image
, &features
);
1337 if (!(features
& RBD_FEATURE_FAST_DIFF
)) {
1341 /* check if RBD fast-diff result is valid */
1342 r
= rbd_get_flags(s
->image
, &flags
);
1346 if (flags
& RBD_FLAG_FAST_DIFF_INVALID
) {
1350 r
= rbd_diff_iterate2(s
->image
, NULL
, offset
, bytes
, true, true,
1351 qemu_rbd_diff_iterate_cb
, &req
);
1352 if (r
< 0 && r
!= QEMU_RBD_EXIT_DIFF_ITERATE2
) {
1355 assert(req
.bytes
<= bytes
);
1359 * rbd_diff_iterate2 does not invoke callbacks for unallocated
1360 * areas. This here catches the case where no callback was
1361 * invoked at all (req.bytes == 0).
1363 assert(req
.bytes
== 0);
1366 status
= BDRV_BLOCK_ZERO
| BDRV_BLOCK_OFFSET_VALID
;
1373 static int64_t qemu_rbd_getlength(BlockDriverState
*bs
)
1375 BDRVRBDState
*s
= bs
->opaque
;
1378 r
= rbd_get_size(s
->image
, &s
->image_size
);
1383 return s
->image_size
;
1386 static int coroutine_fn
qemu_rbd_co_truncate(BlockDriverState
*bs
,
1389 PreallocMode prealloc
,
1390 BdrvRequestFlags flags
,
1395 if (prealloc
!= PREALLOC_MODE_OFF
) {
1396 error_setg(errp
, "Unsupported preallocation mode '%s'",
1397 PreallocMode_str(prealloc
));
1401 r
= qemu_rbd_resize(bs
, offset
);
1403 error_setg_errno(errp
, -r
, "Failed to resize file");
1410 static int qemu_rbd_snap_create(BlockDriverState
*bs
,
1411 QEMUSnapshotInfo
*sn_info
)
1413 BDRVRBDState
*s
= bs
->opaque
;
1416 if (sn_info
->name
[0] == '\0') {
1417 return -EINVAL
; /* we need a name for rbd snapshots */
1421 * rbd snapshots are using the name as the user controlled unique identifier
1422 * we can't use the rbd snapid for that purpose, as it can't be set
1424 if (sn_info
->id_str
[0] != '\0' &&
1425 strcmp(sn_info
->id_str
, sn_info
->name
) != 0) {
1429 if (strlen(sn_info
->name
) >= sizeof(sn_info
->id_str
)) {
1433 r
= rbd_snap_create(s
->image
, sn_info
->name
);
1435 error_report("failed to create snap: %s", strerror(-r
));
1442 static int qemu_rbd_snap_remove(BlockDriverState
*bs
,
1443 const char *snapshot_id
,
1444 const char *snapshot_name
,
1447 BDRVRBDState
*s
= bs
->opaque
;
1450 if (!snapshot_name
) {
1451 error_setg(errp
, "rbd need a valid snapshot name");
1455 /* If snapshot_id is specified, it must be equal to name, see
1456 qemu_rbd_snap_list() */
1457 if (snapshot_id
&& strcmp(snapshot_id
, snapshot_name
)) {
1459 "rbd do not support snapshot id, it should be NULL or "
1460 "equal to snapshot name");
1464 r
= rbd_snap_remove(s
->image
, snapshot_name
);
1466 error_setg_errno(errp
, -r
, "Failed to remove the snapshot");
1471 static int qemu_rbd_snap_rollback(BlockDriverState
*bs
,
1472 const char *snapshot_name
)
1474 BDRVRBDState
*s
= bs
->opaque
;
1476 return rbd_snap_rollback(s
->image
, snapshot_name
);
1479 static int qemu_rbd_snap_list(BlockDriverState
*bs
,
1480 QEMUSnapshotInfo
**psn_tab
)
1482 BDRVRBDState
*s
= bs
->opaque
;
1483 QEMUSnapshotInfo
*sn_info
, *sn_tab
= NULL
;
1485 rbd_snap_info_t
*snaps
;
1486 int max_snaps
= RBD_MAX_SNAPS
;
1489 snaps
= g_new(rbd_snap_info_t
, max_snaps
);
1490 snap_count
= rbd_snap_list(s
->image
, snaps
, &max_snaps
);
1491 if (snap_count
<= 0) {
1494 } while (snap_count
== -ERANGE
);
1496 if (snap_count
<= 0) {
1500 sn_tab
= g_new0(QEMUSnapshotInfo
, snap_count
);
1502 for (i
= 0; i
< snap_count
; i
++) {
1503 const char *snap_name
= snaps
[i
].name
;
1505 sn_info
= sn_tab
+ i
;
1506 pstrcpy(sn_info
->id_str
, sizeof(sn_info
->id_str
), snap_name
);
1507 pstrcpy(sn_info
->name
, sizeof(sn_info
->name
), snap_name
);
1509 sn_info
->vm_state_size
= snaps
[i
].size
;
1510 sn_info
->date_sec
= 0;
1511 sn_info
->date_nsec
= 0;
1512 sn_info
->vm_clock_nsec
= 0;
1514 rbd_snap_list_end(snaps
);
1522 static void coroutine_fn
qemu_rbd_co_invalidate_cache(BlockDriverState
*bs
,
1525 BDRVRBDState
*s
= bs
->opaque
;
1526 int r
= rbd_invalidate_cache(s
->image
);
1528 error_setg_errno(errp
, -r
, "Failed to invalidate the cache");
1532 static QemuOptsList qemu_rbd_create_opts
= {
1533 .name
= "rbd-create-opts",
1534 .head
= QTAILQ_HEAD_INITIALIZER(qemu_rbd_create_opts
.head
),
1537 .name
= BLOCK_OPT_SIZE
,
1538 .type
= QEMU_OPT_SIZE
,
1539 .help
= "Virtual disk size"
1542 .name
= BLOCK_OPT_CLUSTER_SIZE
,
1543 .type
= QEMU_OPT_SIZE
,
1544 .help
= "RBD object size"
1547 .name
= "password-secret",
1548 .type
= QEMU_OPT_STRING
,
1549 .help
= "ID of secret providing the password",
1552 .name
= "encrypt.format",
1553 .type
= QEMU_OPT_STRING
,
1554 .help
= "Encrypt the image, format choices: 'luks', 'luks2'",
1557 .name
= "encrypt.cipher-alg",
1558 .type
= QEMU_OPT_STRING
,
1559 .help
= "Name of encryption cipher algorithm"
1560 " (allowed values: aes-128, aes-256)",
1563 .name
= "encrypt.key-secret",
1564 .type
= QEMU_OPT_STRING
,
1565 .help
= "ID of secret providing LUKS passphrase",
1567 { /* end of list */ }
1571 static const char *const qemu_rbd_strong_runtime_opts
[] = {
1584 static BlockDriver bdrv_rbd
= {
1585 .format_name
= "rbd",
1586 .instance_size
= sizeof(BDRVRBDState
),
1587 .bdrv_parse_filename
= qemu_rbd_parse_filename
,
1588 .bdrv_file_open
= qemu_rbd_open
,
1589 .bdrv_close
= qemu_rbd_close
,
1590 .bdrv_reopen_prepare
= qemu_rbd_reopen_prepare
,
1591 .bdrv_co_create
= qemu_rbd_co_create
,
1592 .bdrv_co_create_opts
= qemu_rbd_co_create_opts
,
1593 .bdrv_has_zero_init
= bdrv_has_zero_init_1
,
1594 .bdrv_get_info
= qemu_rbd_getinfo
,
1595 .bdrv_get_specific_info
= qemu_rbd_get_specific_info
,
1596 .create_opts
= &qemu_rbd_create_opts
,
1597 .bdrv_getlength
= qemu_rbd_getlength
,
1598 .bdrv_co_truncate
= qemu_rbd_co_truncate
,
1599 .protocol_name
= "rbd",
1601 .bdrv_co_preadv
= qemu_rbd_co_preadv
,
1602 .bdrv_co_pwritev
= qemu_rbd_co_pwritev
,
1603 .bdrv_co_flush_to_disk
= qemu_rbd_co_flush
,
1604 .bdrv_co_pdiscard
= qemu_rbd_co_pdiscard
,
1605 #ifdef LIBRBD_SUPPORTS_WRITE_ZEROES
1606 .bdrv_co_pwrite_zeroes
= qemu_rbd_co_pwrite_zeroes
,
1608 .bdrv_co_block_status
= qemu_rbd_co_block_status
,
1610 .bdrv_snapshot_create
= qemu_rbd_snap_create
,
1611 .bdrv_snapshot_delete
= qemu_rbd_snap_remove
,
1612 .bdrv_snapshot_list
= qemu_rbd_snap_list
,
1613 .bdrv_snapshot_goto
= qemu_rbd_snap_rollback
,
1614 .bdrv_co_invalidate_cache
= qemu_rbd_co_invalidate_cache
,
1616 .strong_runtime_opts
= qemu_rbd_strong_runtime_opts
,
1619 static void bdrv_rbd_init(void)
1621 bdrv_register(&bdrv_rbd
);
1624 block_init(bdrv_rbd_init
);