2 * Copyright (C) Sistina Software, Inc. 1997-2003 All rights reserved.
3 * Copyright 2004-2011 Red Hat, Inc.
5 * This copyrighted material is made available to anyone wishing to use,
6 * modify, copy, or redistribute it subject to the terms and conditions
7 * of the GNU General Public License version 2.
11 #include <linux/dlm.h>
12 #include <linux/slab.h>
13 #include <linux/types.h>
14 #include <linux/delay.h>
15 #include <linux/gfs2_ondisk.h>
21 #include "trace_gfs2.h"
23 extern struct workqueue_struct *gfs2_control_wq;
26 * gfs2_update_stats - Update time based stats
27 * @mv: Pointer to mean/variance structure to update
28 * @sample: New data to include
30 * @delta is the difference between the current rtt sample and the
31 * running average srtt. We add 1/8 of that to the srtt in order to
32 * update the current srtt estimate. The varience estimate is a bit
33 * more complicated. We subtract the abs value of the @delta from
34 * the current variance estimate and add 1/4 of that to the running
37 * Note that the index points at the array entry containing the smoothed
38 * mean value, and the variance is always in the following entry
40 * Reference: TCP/IP Illustrated, vol 2, p. 831,832
41 * All times are in units of integer nanoseconds. Unlike the TCP/IP case,
42 * they are not scaled fixed point.
45 static inline void gfs2_update_stats(struct gfs2_lkstats *s, unsigned index,
48 s64 delta = sample - s->stats[index];
49 s->stats[index] += (delta >> 3);
51 s->stats[index] += ((abs64(delta) - s->stats[index]) >> 2);
55 * gfs2_update_reply_times - Update locking statistics
56 * @gl: The glock to update
58 * This assumes that gl->gl_dstamp has been set earlier.
60 * The rtt (lock round trip time) is an estimate of the time
61 * taken to perform a dlm lock request. We update it on each
64 * The blocking flag is set on the glock for all dlm requests
65 * which may potentially block due to lock requests from other nodes.
66 * DLM requests where the current lock state is exclusive, the
67 * requested state is null (or unlocked) or where the TRY or
68 * TRY_1CB flags are set are classified as non-blocking. All
69 * other DLM requests are counted as (potentially) blocking.
71 static inline void gfs2_update_reply_times(struct gfs2_glock *gl)
73 struct gfs2_pcpu_lkstats *lks;
74 const unsigned gltype = gl->gl_name.ln_type;
75 unsigned index = test_bit(GLF_BLOCKING, &gl->gl_flags) ?
76 GFS2_LKS_SRTTB : GFS2_LKS_SRTT;
80 rtt = ktime_to_ns(ktime_sub(ktime_get_real(), gl->gl_dstamp));
81 lks = this_cpu_ptr(gl->gl_sbd->sd_lkstats);
82 gfs2_update_stats(&gl->gl_stats, index, rtt); /* Local */
83 gfs2_update_stats(&lks->lkstats[gltype], index, rtt); /* Global */
86 trace_gfs2_glock_lock_time(gl, rtt);
90 * gfs2_update_request_times - Update locking statistics
91 * @gl: The glock to update
93 * The irt (lock inter-request times) measures the average time
94 * between requests to the dlm. It is updated immediately before
98 static inline void gfs2_update_request_times(struct gfs2_glock *gl)
100 struct gfs2_pcpu_lkstats *lks;
101 const unsigned gltype = gl->gl_name.ln_type;
106 dstamp = gl->gl_dstamp;
107 gl->gl_dstamp = ktime_get_real();
108 irt = ktime_to_ns(ktime_sub(gl->gl_dstamp, dstamp));
109 lks = this_cpu_ptr(gl->gl_sbd->sd_lkstats);
110 gfs2_update_stats(&gl->gl_stats, GFS2_LKS_SIRT, irt); /* Local */
111 gfs2_update_stats(&lks->lkstats[gltype], GFS2_LKS_SIRT, irt); /* Global */
115 static void gdlm_ast(void *arg)
117 struct gfs2_glock *gl = arg;
118 unsigned ret = gl->gl_state;
120 gfs2_update_reply_times(gl);
121 BUG_ON(gl->gl_lksb.sb_flags & DLM_SBF_DEMOTED);
123 if ((gl->gl_lksb.sb_flags & DLM_SBF_VALNOTVALID) && gl->gl_lksb.sb_lvbptr)
124 memset(gl->gl_lksb.sb_lvbptr, 0, GDLM_LVB_SIZE);
126 switch (gl->gl_lksb.sb_status) {
127 case -DLM_EUNLOCK: /* Unlocked, so glock can be freed */
130 case -DLM_ECANCEL: /* Cancel while getting lock */
131 ret |= LM_OUT_CANCELED;
133 case -EAGAIN: /* Try lock fails */
134 case -EDEADLK: /* Deadlock detected */
136 case -ETIMEDOUT: /* Canceled due to timeout */
139 case 0: /* Success */
141 default: /* Something unexpected */
146 if (gl->gl_lksb.sb_flags & DLM_SBF_ALTMODE) {
147 if (gl->gl_req == LM_ST_SHARED)
148 ret = LM_ST_DEFERRED;
149 else if (gl->gl_req == LM_ST_DEFERRED)
155 set_bit(GLF_INITIAL, &gl->gl_flags);
156 gfs2_glock_complete(gl, ret);
159 if (!test_bit(GLF_INITIAL, &gl->gl_flags))
160 gl->gl_lksb.sb_lkid = 0;
161 gfs2_glock_complete(gl, ret);
164 static void gdlm_bast(void *arg, int mode)
166 struct gfs2_glock *gl = arg;
170 gfs2_glock_cb(gl, LM_ST_UNLOCKED);
173 gfs2_glock_cb(gl, LM_ST_DEFERRED);
176 gfs2_glock_cb(gl, LM_ST_SHARED);
179 printk(KERN_ERR "unknown bast mode %d", mode);
184 /* convert gfs lock-state to dlm lock-mode */
186 static int make_mode(const unsigned int lmstate)
191 case LM_ST_EXCLUSIVE:
198 printk(KERN_ERR "unknown LM state %d", lmstate);
203 static u32 make_flags(struct gfs2_glock *gl, const unsigned int gfs_flags,
208 if (gl->gl_lksb.sb_lvbptr)
209 lkf |= DLM_LKF_VALBLK;
211 if (gfs_flags & LM_FLAG_TRY)
212 lkf |= DLM_LKF_NOQUEUE;
214 if (gfs_flags & LM_FLAG_TRY_1CB) {
215 lkf |= DLM_LKF_NOQUEUE;
216 lkf |= DLM_LKF_NOQUEUEBAST;
219 if (gfs_flags & LM_FLAG_PRIORITY) {
220 lkf |= DLM_LKF_NOORDER;
221 lkf |= DLM_LKF_HEADQUE;
224 if (gfs_flags & LM_FLAG_ANY) {
225 if (req == DLM_LOCK_PR)
226 lkf |= DLM_LKF_ALTCW;
227 else if (req == DLM_LOCK_CW)
228 lkf |= DLM_LKF_ALTPR;
233 if (gl->gl_lksb.sb_lkid != 0) {
234 lkf |= DLM_LKF_CONVERT;
235 if (test_bit(GLF_BLOCKING, &gl->gl_flags))
236 lkf |= DLM_LKF_QUECVT;
242 static void gfs2_reverse_hex(char *c, u64 value)
246 *c-- = hex_asc[value & 0x0f];
251 static int gdlm_lock(struct gfs2_glock *gl, unsigned int req_state,
254 struct lm_lockstruct *ls = &gl->gl_sbd->sd_lockstruct;
257 char strname[GDLM_STRNAME_BYTES] = "";
259 req = make_mode(req_state);
260 lkf = make_flags(gl, flags, req);
261 gfs2_glstats_inc(gl, GFS2_LKS_DCOUNT);
262 gfs2_sbstats_inc(gl, GFS2_LKS_DCOUNT);
263 if (gl->gl_lksb.sb_lkid) {
264 gfs2_update_request_times(gl);
266 memset(strname, ' ', GDLM_STRNAME_BYTES - 1);
267 strname[GDLM_STRNAME_BYTES - 1] = '\0';
268 gfs2_reverse_hex(strname + 7, gl->gl_name.ln_type);
269 gfs2_reverse_hex(strname + 23, gl->gl_name.ln_number);
270 gl->gl_dstamp = ktime_get_real();
273 * Submit the actual lock request.
276 return dlm_lock(ls->ls_dlm, req, &gl->gl_lksb, lkf, strname,
277 GDLM_STRNAME_BYTES - 1, 0, gdlm_ast, gl, gdlm_bast);
280 static void gdlm_put_lock(struct gfs2_glock *gl)
282 struct gfs2_sbd *sdp = gl->gl_sbd;
283 struct lm_lockstruct *ls = &sdp->sd_lockstruct;
284 int lvb_needs_unlock = 0;
287 if (gl->gl_lksb.sb_lkid == 0) {
292 clear_bit(GLF_BLOCKING, &gl->gl_flags);
293 gfs2_glstats_inc(gl, GFS2_LKS_DCOUNT);
294 gfs2_sbstats_inc(gl, GFS2_LKS_DCOUNT);
295 gfs2_update_request_times(gl);
297 /* don't want to skip dlm_unlock writing the lvb when lock is ex */
299 if (gl->gl_lksb.sb_lvbptr && (gl->gl_state == LM_ST_EXCLUSIVE))
300 lvb_needs_unlock = 1;
302 if (test_bit(SDF_SKIP_DLM_UNLOCK, &sdp->sd_flags) &&
308 error = dlm_unlock(ls->ls_dlm, gl->gl_lksb.sb_lkid, DLM_LKF_VALBLK,
311 printk(KERN_ERR "gdlm_unlock %x,%llx err=%d\n",
313 (unsigned long long)gl->gl_name.ln_number, error);
318 static void gdlm_cancel(struct gfs2_glock *gl)
320 struct lm_lockstruct *ls = &gl->gl_sbd->sd_lockstruct;
321 dlm_unlock(ls->ls_dlm, gl->gl_lksb.sb_lkid, DLM_LKF_CANCEL, NULL, gl);
325 * dlm/gfs2 recovery coordination using dlm_recover callbacks
327 * 1. dlm_controld sees lockspace members change
328 * 2. dlm_controld blocks dlm-kernel locking activity
329 * 3. dlm_controld within dlm-kernel notifies gfs2 (recover_prep)
330 * 4. dlm_controld starts and finishes its own user level recovery
331 * 5. dlm_controld starts dlm-kernel dlm_recoverd to do kernel recovery
332 * 6. dlm_recoverd notifies gfs2 of failed nodes (recover_slot)
333 * 7. dlm_recoverd does its own lock recovery
334 * 8. dlm_recoverd unblocks dlm-kernel locking activity
335 * 9. dlm_recoverd notifies gfs2 when done (recover_done with new generation)
336 * 10. gfs2_control updates control_lock lvb with new generation and jid bits
337 * 11. gfs2_control enqueues journals for gfs2_recover to recover (maybe none)
338 * 12. gfs2_recover dequeues and recovers journals of failed nodes
339 * 13. gfs2_recover provides recovery results to gfs2_control (recovery_result)
340 * 14. gfs2_control updates control_lock lvb jid bits for recovered journals
341 * 15. gfs2_control unblocks normal locking when all journals are recovered
343 * - failures during recovery
345 * recover_prep() may set BLOCK_LOCKS (step 3) again before gfs2_control
346 * clears BLOCK_LOCKS (step 15), e.g. another node fails while still
347 * recovering for a prior failure. gfs2_control needs a way to detect
348 * this so it can leave BLOCK_LOCKS set in step 15. This is managed using
349 * the recover_block and recover_start values.
351 * recover_done() provides a new lockspace generation number each time it
352 * is called (step 9). This generation number is saved as recover_start.
353 * When recover_prep() is called, it sets BLOCK_LOCKS and sets
354 * recover_block = recover_start. So, while recover_block is equal to
355 * recover_start, BLOCK_LOCKS should remain set. (recover_spin must
356 * be held around the BLOCK_LOCKS/recover_block/recover_start logic.)
358 * - more specific gfs2 steps in sequence above
360 * 3. recover_prep sets BLOCK_LOCKS and sets recover_block = recover_start
361 * 6. recover_slot records any failed jids (maybe none)
362 * 9. recover_done sets recover_start = new generation number
363 * 10. gfs2_control sets control_lock lvb = new gen + bits for failed jids
364 * 12. gfs2_recover does journal recoveries for failed jids identified above
365 * 14. gfs2_control clears control_lock lvb bits for recovered jids
366 * 15. gfs2_control checks if recover_block == recover_start (step 3 occured
367 * again) then do nothing, otherwise if recover_start > recover_block
368 * then clear BLOCK_LOCKS.
370 * - parallel recovery steps across all nodes
372 * All nodes attempt to update the control_lock lvb with the new generation
373 * number and jid bits, but only the first to get the control_lock EX will
374 * do so; others will see that it's already done (lvb already contains new
375 * generation number.)
377 * . All nodes get the same recover_prep/recover_slot/recover_done callbacks
378 * . All nodes attempt to set control_lock lvb gen + bits for the new gen
379 * . One node gets control_lock first and writes the lvb, others see it's done
380 * . All nodes attempt to recover jids for which they see control_lock bits set
381 * . One node succeeds for a jid, and that one clears the jid bit in the lvb
382 * . All nodes will eventually see all lvb bits clear and unblock locks
384 * - is there a problem with clearing an lvb bit that should be set
385 * and missing a journal recovery?
388 * 2. lvb bit set for step 1
389 * 3. jid recovered for step 1
390 * 4. jid taken again (new mount)
391 * 5. jid fails (for step 4)
392 * 6. lvb bit set for step 5 (will already be set)
393 * 7. lvb bit cleared for step 3
395 * This is not a problem because the failure in step 5 does not
396 * require recovery, because the mount in step 4 could not have
397 * progressed far enough to unblock locks and access the fs. The
398 * control_mount() function waits for all recoveries to be complete
399 * for the latest lockspace generation before ever unblocking locks
400 * and returning. The mount in step 4 waits until the recovery in
403 * - special case of first mounter: first node to mount the fs
405 * The first node to mount a gfs2 fs needs to check all the journals
406 * and recover any that need recovery before other nodes are allowed
407 * to mount the fs. (Others may begin mounting, but they must wait
408 * for the first mounter to be done before taking locks on the fs
409 * or accessing the fs.) This has two parts:
411 * 1. The mounted_lock tells a node it's the first to mount the fs.
412 * Each node holds the mounted_lock in PR while it's mounted.
413 * Each node tries to acquire the mounted_lock in EX when it mounts.
414 * If a node is granted the mounted_lock EX it means there are no
415 * other mounted nodes (no PR locks exist), and it is the first mounter.
416 * The mounted_lock is demoted to PR when first recovery is done, so
417 * others will fail to get an EX lock, but will get a PR lock.
419 * 2. The control_lock blocks others in control_mount() while the first
420 * mounter is doing first mount recovery of all journals.
421 * A mounting node needs to acquire control_lock in EX mode before
422 * it can proceed. The first mounter holds control_lock in EX while doing
423 * the first mount recovery, blocking mounts from other nodes, then demotes
424 * control_lock to NL when it's done (others_may_mount/first_done),
425 * allowing other nodes to continue mounting.
428 * control_lock EX/NOQUEUE success
429 * mounted_lock EX/NOQUEUE success (no other PR, so no other mounters)
431 * do first mounter recovery
432 * mounted_lock EX->PR
433 * control_lock EX->NL, write lvb generation
436 * control_lock EX/NOQUEUE success (if fail -EAGAIN, retry)
437 * mounted_lock EX/NOQUEUE fail -EAGAIN (expected due to other mounters PR)
438 * mounted_lock PR/NOQUEUE success
439 * read lvb generation
440 * control_lock EX->NL
443 * - mount during recovery
445 * If a node mounts while others are doing recovery (not first mounter),
446 * the mounting node will get its initial recover_done() callback without
447 * having seen any previous failures/callbacks.
449 * It must wait for all recoveries preceding its mount to be finished
450 * before it unblocks locks. It does this by repeating the "other mounter"
451 * steps above until the lvb generation number is >= its mount generation
452 * number (from initial recover_done) and all lvb bits are clear.
454 * - control_lock lvb format
456 * 4 bytes generation number: the latest dlm lockspace generation number
457 * from recover_done callback. Indicates the jid bitmap has been updated
458 * to reflect all slot failures through that generation.
460 * GDLM_LVB_SIZE-8 bytes of jid bit map. If bit N is set, it indicates
461 * that jid N needs recovery.
464 #define JID_BITMAP_OFFSET 8 /* 4 byte generation number + 4 byte unused */
466 static void control_lvb_read(struct lm_lockstruct *ls, uint32_t *lvb_gen,
470 memcpy(lvb_bits, ls->ls_control_lvb, GDLM_LVB_SIZE);
471 memcpy(&gen, lvb_bits, sizeof(uint32_t));
472 *lvb_gen = le32_to_cpu(gen);
475 static void control_lvb_write(struct lm_lockstruct *ls, uint32_t lvb_gen,
479 memcpy(ls->ls_control_lvb, lvb_bits, GDLM_LVB_SIZE);
480 gen = cpu_to_le32(lvb_gen);
481 memcpy(ls->ls_control_lvb, &gen, sizeof(uint32_t));
484 static int all_jid_bits_clear(char *lvb)
487 for (i = JID_BITMAP_OFFSET; i < GDLM_LVB_SIZE; i++) {
494 static void sync_wait_cb(void *arg)
496 struct lm_lockstruct *ls = arg;
497 complete(&ls->ls_sync_wait);
500 static int sync_unlock(struct gfs2_sbd *sdp, struct dlm_lksb *lksb, char *name)
502 struct lm_lockstruct *ls = &sdp->sd_lockstruct;
505 error = dlm_unlock(ls->ls_dlm, lksb->sb_lkid, 0, lksb, ls);
507 fs_err(sdp, "%s lkid %x error %d\n",
508 name, lksb->sb_lkid, error);
512 wait_for_completion(&ls->ls_sync_wait);
514 if (lksb->sb_status != -DLM_EUNLOCK) {
515 fs_err(sdp, "%s lkid %x status %d\n",
516 name, lksb->sb_lkid, lksb->sb_status);
522 static int sync_lock(struct gfs2_sbd *sdp, int mode, uint32_t flags,
523 unsigned int num, struct dlm_lksb *lksb, char *name)
525 struct lm_lockstruct *ls = &sdp->sd_lockstruct;
526 char strname[GDLM_STRNAME_BYTES];
529 memset(strname, 0, GDLM_STRNAME_BYTES);
530 snprintf(strname, GDLM_STRNAME_BYTES, "%8x%16x", LM_TYPE_NONDISK, num);
532 error = dlm_lock(ls->ls_dlm, mode, lksb, flags,
533 strname, GDLM_STRNAME_BYTES - 1,
534 0, sync_wait_cb, ls, NULL);
536 fs_err(sdp, "%s lkid %x flags %x mode %d error %d\n",
537 name, lksb->sb_lkid, flags, mode, error);
541 wait_for_completion(&ls->ls_sync_wait);
543 status = lksb->sb_status;
545 if (status && status != -EAGAIN) {
546 fs_err(sdp, "%s lkid %x flags %x mode %d status %d\n",
547 name, lksb->sb_lkid, flags, mode, status);
553 static int mounted_unlock(struct gfs2_sbd *sdp)
555 struct lm_lockstruct *ls = &sdp->sd_lockstruct;
556 return sync_unlock(sdp, &ls->ls_mounted_lksb, "mounted_lock");
559 static int mounted_lock(struct gfs2_sbd *sdp, int mode, uint32_t flags)
561 struct lm_lockstruct *ls = &sdp->sd_lockstruct;
562 return sync_lock(sdp, mode, flags, GFS2_MOUNTED_LOCK,
563 &ls->ls_mounted_lksb, "mounted_lock");
566 static int control_unlock(struct gfs2_sbd *sdp)
568 struct lm_lockstruct *ls = &sdp->sd_lockstruct;
569 return sync_unlock(sdp, &ls->ls_control_lksb, "control_lock");
572 static int control_lock(struct gfs2_sbd *sdp, int mode, uint32_t flags)
574 struct lm_lockstruct *ls = &sdp->sd_lockstruct;
575 return sync_lock(sdp, mode, flags, GFS2_CONTROL_LOCK,
576 &ls->ls_control_lksb, "control_lock");
579 static void gfs2_control_func(struct work_struct *work)
581 struct gfs2_sbd *sdp = container_of(work, struct gfs2_sbd, sd_control_work.work);
582 struct lm_lockstruct *ls = &sdp->sd_lockstruct;
583 uint32_t block_gen, start_gen, lvb_gen, flags;
589 spin_lock(&ls->ls_recover_spin);
591 * No MOUNT_DONE means we're still mounting; control_mount()
592 * will set this flag, after which this thread will take over
593 * all further clearing of BLOCK_LOCKS.
595 * FIRST_MOUNT means this node is doing first mounter recovery,
596 * for which recovery control is handled by
597 * control_mount()/control_first_done(), not this thread.
599 if (!test_bit(DFL_MOUNT_DONE, &ls->ls_recover_flags) ||
600 test_bit(DFL_FIRST_MOUNT, &ls->ls_recover_flags)) {
601 spin_unlock(&ls->ls_recover_spin);
604 block_gen = ls->ls_recover_block;
605 start_gen = ls->ls_recover_start;
606 spin_unlock(&ls->ls_recover_spin);
609 * Equal block_gen and start_gen implies we are between
610 * recover_prep and recover_done callbacks, which means
611 * dlm recovery is in progress and dlm locking is blocked.
612 * There's no point trying to do any work until recover_done.
615 if (block_gen == start_gen)
619 * Propagate recover_submit[] and recover_result[] to lvb:
620 * dlm_recoverd adds to recover_submit[] jids needing recovery
621 * gfs2_recover adds to recover_result[] journal recovery results
623 * set lvb bit for jids in recover_submit[] if the lvb has not
624 * yet been updated for the generation of the failure
626 * clear lvb bit for jids in recover_result[] if the result of
627 * the journal recovery is SUCCESS
630 error = control_lock(sdp, DLM_LOCK_EX, DLM_LKF_CONVERT|DLM_LKF_VALBLK);
632 fs_err(sdp, "control lock EX error %d\n", error);
636 control_lvb_read(ls, &lvb_gen, ls->ls_lvb_bits);
638 spin_lock(&ls->ls_recover_spin);
639 if (block_gen != ls->ls_recover_block ||
640 start_gen != ls->ls_recover_start) {
641 fs_info(sdp, "recover generation %u block1 %u %u\n",
642 start_gen, block_gen, ls->ls_recover_block);
643 spin_unlock(&ls->ls_recover_spin);
644 control_lock(sdp, DLM_LOCK_NL, DLM_LKF_CONVERT);
648 recover_size = ls->ls_recover_size;
650 if (lvb_gen <= start_gen) {
652 * Clear lvb bits for jids we've successfully recovered.
653 * Because all nodes attempt to recover failed journals,
654 * a journal can be recovered multiple times successfully
655 * in succession. Only the first will really do recovery,
656 * the others find it clean, but still report a successful
657 * recovery. So, another node may have already recovered
658 * the jid and cleared the lvb bit for it.
660 for (i = 0; i < recover_size; i++) {
661 if (ls->ls_recover_result[i] != LM_RD_SUCCESS)
664 ls->ls_recover_result[i] = 0;
666 if (!test_bit_le(i, ls->ls_lvb_bits + JID_BITMAP_OFFSET))
669 __clear_bit_le(i, ls->ls_lvb_bits + JID_BITMAP_OFFSET);
674 if (lvb_gen == start_gen) {
676 * Failed slots before start_gen are already set in lvb.
678 for (i = 0; i < recover_size; i++) {
679 if (!ls->ls_recover_submit[i])
681 if (ls->ls_recover_submit[i] < lvb_gen)
682 ls->ls_recover_submit[i] = 0;
684 } else if (lvb_gen < start_gen) {
686 * Failed slots before start_gen are not yet set in lvb.
688 for (i = 0; i < recover_size; i++) {
689 if (!ls->ls_recover_submit[i])
691 if (ls->ls_recover_submit[i] < start_gen) {
692 ls->ls_recover_submit[i] = 0;
693 __set_bit_le(i, ls->ls_lvb_bits + JID_BITMAP_OFFSET);
696 /* even if there are no bits to set, we need to write the
697 latest generation to the lvb */
701 * we should be getting a recover_done() for lvb_gen soon
704 spin_unlock(&ls->ls_recover_spin);
707 control_lvb_write(ls, start_gen, ls->ls_lvb_bits);
708 flags = DLM_LKF_CONVERT | DLM_LKF_VALBLK;
710 flags = DLM_LKF_CONVERT;
713 error = control_lock(sdp, DLM_LOCK_NL, flags);
715 fs_err(sdp, "control lock NL error %d\n", error);
720 * Everyone will see jid bits set in the lvb, run gfs2_recover_set(),
721 * and clear a jid bit in the lvb if the recovery is a success.
722 * Eventually all journals will be recovered, all jid bits will
723 * be cleared in the lvb, and everyone will clear BLOCK_LOCKS.
726 for (i = 0; i < recover_size; i++) {
727 if (test_bit_le(i, ls->ls_lvb_bits + JID_BITMAP_OFFSET)) {
728 fs_info(sdp, "recover generation %u jid %d\n",
730 gfs2_recover_set(sdp, i);
738 * No more jid bits set in lvb, all recovery is done, unblock locks
739 * (unless a new recover_prep callback has occured blocking locks
740 * again while working above)
743 spin_lock(&ls->ls_recover_spin);
744 if (ls->ls_recover_block == block_gen &&
745 ls->ls_recover_start == start_gen) {
746 clear_bit(DFL_BLOCK_LOCKS, &ls->ls_recover_flags);
747 spin_unlock(&ls->ls_recover_spin);
748 fs_info(sdp, "recover generation %u done\n", start_gen);
749 gfs2_glock_thaw(sdp);
751 fs_info(sdp, "recover generation %u block2 %u %u\n",
752 start_gen, block_gen, ls->ls_recover_block);
753 spin_unlock(&ls->ls_recover_spin);
757 static int control_mount(struct gfs2_sbd *sdp)
759 struct lm_lockstruct *ls = &sdp->sd_lockstruct;
760 uint32_t start_gen, block_gen, mount_gen, lvb_gen;
765 memset(&ls->ls_mounted_lksb, 0, sizeof(struct dlm_lksb));
766 memset(&ls->ls_control_lksb, 0, sizeof(struct dlm_lksb));
767 memset(&ls->ls_control_lvb, 0, GDLM_LVB_SIZE);
768 ls->ls_control_lksb.sb_lvbptr = ls->ls_control_lvb;
769 init_completion(&ls->ls_sync_wait);
771 set_bit(DFL_BLOCK_LOCKS, &ls->ls_recover_flags);
773 error = control_lock(sdp, DLM_LOCK_NL, DLM_LKF_VALBLK);
775 fs_err(sdp, "control_mount control_lock NL error %d\n", error);
779 error = mounted_lock(sdp, DLM_LOCK_NL, 0);
781 fs_err(sdp, "control_mount mounted_lock NL error %d\n", error);
785 mounted_mode = DLM_LOCK_NL;
788 if (retries++ && signal_pending(current)) {
794 * We always start with both locks in NL. control_lock is
795 * demoted to NL below so we don't need to do it here.
798 if (mounted_mode != DLM_LOCK_NL) {
799 error = mounted_lock(sdp, DLM_LOCK_NL, DLM_LKF_CONVERT);
802 mounted_mode = DLM_LOCK_NL;
806 * Other nodes need to do some work in dlm recovery and gfs2_control
807 * before the recover_done and control_lock will be ready for us below.
808 * A delay here is not required but often avoids having to retry.
811 msleep_interruptible(500);
814 * Acquire control_lock in EX and mounted_lock in either EX or PR.
815 * control_lock lvb keeps track of any pending journal recoveries.
816 * mounted_lock indicates if any other nodes have the fs mounted.
819 error = control_lock(sdp, DLM_LOCK_EX, DLM_LKF_CONVERT|DLM_LKF_NOQUEUE|DLM_LKF_VALBLK);
820 if (error == -EAGAIN) {
823 fs_err(sdp, "control_mount control_lock EX error %d\n", error);
827 error = mounted_lock(sdp, DLM_LOCK_EX, DLM_LKF_CONVERT|DLM_LKF_NOQUEUE);
829 mounted_mode = DLM_LOCK_EX;
831 } else if (error != -EAGAIN) {
832 fs_err(sdp, "control_mount mounted_lock EX error %d\n", error);
836 error = mounted_lock(sdp, DLM_LOCK_PR, DLM_LKF_CONVERT|DLM_LKF_NOQUEUE);
838 mounted_mode = DLM_LOCK_PR;
841 /* not even -EAGAIN should happen here */
842 fs_err(sdp, "control_mount mounted_lock PR error %d\n", error);
848 * If we got both locks above in EX, then we're the first mounter.
849 * If not, then we need to wait for the control_lock lvb to be
850 * updated by other mounted nodes to reflect our mount generation.
852 * In simple first mounter cases, first mounter will see zero lvb_gen,
853 * but in cases where all existing nodes leave/fail before mounting
854 * nodes finish control_mount, then all nodes will be mounting and
855 * lvb_gen will be non-zero.
858 control_lvb_read(ls, &lvb_gen, ls->ls_lvb_bits);
860 if (lvb_gen == 0xFFFFFFFF) {
861 /* special value to force mount attempts to fail */
862 fs_err(sdp, "control_mount control_lock disabled\n");
867 if (mounted_mode == DLM_LOCK_EX) {
868 /* first mounter, keep both EX while doing first recovery */
869 spin_lock(&ls->ls_recover_spin);
870 clear_bit(DFL_BLOCK_LOCKS, &ls->ls_recover_flags);
871 set_bit(DFL_MOUNT_DONE, &ls->ls_recover_flags);
872 set_bit(DFL_FIRST_MOUNT, &ls->ls_recover_flags);
873 spin_unlock(&ls->ls_recover_spin);
874 fs_info(sdp, "first mounter control generation %u\n", lvb_gen);
878 error = control_lock(sdp, DLM_LOCK_NL, DLM_LKF_CONVERT);
883 * We are not first mounter, now we need to wait for the control_lock
884 * lvb generation to be >= the generation from our first recover_done
885 * and all lvb bits to be clear (no pending journal recoveries.)
888 if (!all_jid_bits_clear(ls->ls_lvb_bits)) {
889 /* journals need recovery, wait until all are clear */
890 fs_info(sdp, "control_mount wait for journal recovery\n");
894 spin_lock(&ls->ls_recover_spin);
895 block_gen = ls->ls_recover_block;
896 start_gen = ls->ls_recover_start;
897 mount_gen = ls->ls_recover_mount;
899 if (lvb_gen < mount_gen) {
900 /* wait for mounted nodes to update control_lock lvb to our
901 generation, which might include new recovery bits set */
902 fs_info(sdp, "control_mount wait1 block %u start %u mount %u "
903 "lvb %u flags %lx\n", block_gen, start_gen, mount_gen,
904 lvb_gen, ls->ls_recover_flags);
905 spin_unlock(&ls->ls_recover_spin);
909 if (lvb_gen != start_gen) {
910 /* wait for mounted nodes to update control_lock lvb to the
911 latest recovery generation */
912 fs_info(sdp, "control_mount wait2 block %u start %u mount %u "
913 "lvb %u flags %lx\n", block_gen, start_gen, mount_gen,
914 lvb_gen, ls->ls_recover_flags);
915 spin_unlock(&ls->ls_recover_spin);
919 if (block_gen == start_gen) {
920 /* dlm recovery in progress, wait for it to finish */
921 fs_info(sdp, "control_mount wait3 block %u start %u mount %u "
922 "lvb %u flags %lx\n", block_gen, start_gen, mount_gen,
923 lvb_gen, ls->ls_recover_flags);
924 spin_unlock(&ls->ls_recover_spin);
928 clear_bit(DFL_BLOCK_LOCKS, &ls->ls_recover_flags);
929 set_bit(DFL_MOUNT_DONE, &ls->ls_recover_flags);
930 memset(ls->ls_recover_submit, 0, ls->ls_recover_size*sizeof(uint32_t));
931 memset(ls->ls_recover_result, 0, ls->ls_recover_size*sizeof(uint32_t));
932 spin_unlock(&ls->ls_recover_spin);
941 static int dlm_recovery_wait(void *word)
947 static int control_first_done(struct gfs2_sbd *sdp)
949 struct lm_lockstruct *ls = &sdp->sd_lockstruct;
950 uint32_t start_gen, block_gen;
954 spin_lock(&ls->ls_recover_spin);
955 start_gen = ls->ls_recover_start;
956 block_gen = ls->ls_recover_block;
958 if (test_bit(DFL_BLOCK_LOCKS, &ls->ls_recover_flags) ||
959 !test_bit(DFL_MOUNT_DONE, &ls->ls_recover_flags) ||
960 !test_bit(DFL_FIRST_MOUNT, &ls->ls_recover_flags)) {
961 /* sanity check, should not happen */
962 fs_err(sdp, "control_first_done start %u block %u flags %lx\n",
963 start_gen, block_gen, ls->ls_recover_flags);
964 spin_unlock(&ls->ls_recover_spin);
969 if (start_gen == block_gen) {
971 * Wait for the end of a dlm recovery cycle to switch from
972 * first mounter recovery. We can ignore any recover_slot
973 * callbacks between the recover_prep and next recover_done
974 * because we are still the first mounter and any failed nodes
975 * have not fully mounted, so they don't need recovery.
977 spin_unlock(&ls->ls_recover_spin);
978 fs_info(sdp, "control_first_done wait gen %u\n", start_gen);
980 wait_on_bit(&ls->ls_recover_flags, DFL_DLM_RECOVERY,
981 dlm_recovery_wait, TASK_UNINTERRUPTIBLE);
985 clear_bit(DFL_FIRST_MOUNT, &ls->ls_recover_flags);
986 set_bit(DFL_FIRST_MOUNT_DONE, &ls->ls_recover_flags);
987 memset(ls->ls_recover_submit, 0, ls->ls_recover_size*sizeof(uint32_t));
988 memset(ls->ls_recover_result, 0, ls->ls_recover_size*sizeof(uint32_t));
989 spin_unlock(&ls->ls_recover_spin);
991 memset(ls->ls_lvb_bits, 0, GDLM_LVB_SIZE);
992 control_lvb_write(ls, start_gen, ls->ls_lvb_bits);
994 error = mounted_lock(sdp, DLM_LOCK_PR, DLM_LKF_CONVERT);
996 fs_err(sdp, "control_first_done mounted PR error %d\n", error);
998 error = control_lock(sdp, DLM_LOCK_NL, DLM_LKF_CONVERT|DLM_LKF_VALBLK);
1000 fs_err(sdp, "control_first_done control NL error %d\n", error);
1006 * Expand static jid arrays if necessary (by increments of RECOVER_SIZE_INC)
1007 * to accomodate the largest slot number. (NB dlm slot numbers start at 1,
1008 * gfs2 jids start at 0, so jid = slot - 1)
1011 #define RECOVER_SIZE_INC 16
1013 static int set_recover_size(struct gfs2_sbd *sdp, struct dlm_slot *slots,
1016 struct lm_lockstruct *ls = &sdp->sd_lockstruct;
1017 uint32_t *submit = NULL;
1018 uint32_t *result = NULL;
1019 uint32_t old_size, new_size;
1022 if (!ls->ls_lvb_bits) {
1023 ls->ls_lvb_bits = kzalloc(GDLM_LVB_SIZE, GFP_NOFS);
1024 if (!ls->ls_lvb_bits)
1029 for (i = 0; i < num_slots; i++) {
1030 if (max_jid < slots[i].slot - 1)
1031 max_jid = slots[i].slot - 1;
1034 old_size = ls->ls_recover_size;
1036 if (old_size >= max_jid + 1)
1039 new_size = old_size + RECOVER_SIZE_INC;
1041 submit = kzalloc(new_size * sizeof(uint32_t), GFP_NOFS);
1042 result = kzalloc(new_size * sizeof(uint32_t), GFP_NOFS);
1043 if (!submit || !result) {
1049 spin_lock(&ls->ls_recover_spin);
1050 memcpy(submit, ls->ls_recover_submit, old_size * sizeof(uint32_t));
1051 memcpy(result, ls->ls_recover_result, old_size * sizeof(uint32_t));
1052 kfree(ls->ls_recover_submit);
1053 kfree(ls->ls_recover_result);
1054 ls->ls_recover_submit = submit;
1055 ls->ls_recover_result = result;
1056 ls->ls_recover_size = new_size;
1057 spin_unlock(&ls->ls_recover_spin);
1061 static void free_recover_size(struct lm_lockstruct *ls)
1063 kfree(ls->ls_lvb_bits);
1064 kfree(ls->ls_recover_submit);
1065 kfree(ls->ls_recover_result);
1066 ls->ls_recover_submit = NULL;
1067 ls->ls_recover_result = NULL;
1068 ls->ls_recover_size = 0;
1071 /* dlm calls before it does lock recovery */
1073 static void gdlm_recover_prep(void *arg)
1075 struct gfs2_sbd *sdp = arg;
1076 struct lm_lockstruct *ls = &sdp->sd_lockstruct;
1078 spin_lock(&ls->ls_recover_spin);
1079 ls->ls_recover_block = ls->ls_recover_start;
1080 set_bit(DFL_DLM_RECOVERY, &ls->ls_recover_flags);
1082 if (!test_bit(DFL_MOUNT_DONE, &ls->ls_recover_flags) ||
1083 test_bit(DFL_FIRST_MOUNT, &ls->ls_recover_flags)) {
1084 spin_unlock(&ls->ls_recover_spin);
1087 set_bit(DFL_BLOCK_LOCKS, &ls->ls_recover_flags);
1088 spin_unlock(&ls->ls_recover_spin);
1091 /* dlm calls after recover_prep has been completed on all lockspace members;
1092 identifies slot/jid of failed member */
1094 static void gdlm_recover_slot(void *arg, struct dlm_slot *slot)
1096 struct gfs2_sbd *sdp = arg;
1097 struct lm_lockstruct *ls = &sdp->sd_lockstruct;
1098 int jid = slot->slot - 1;
1100 spin_lock(&ls->ls_recover_spin);
1101 if (ls->ls_recover_size < jid + 1) {
1102 fs_err(sdp, "recover_slot jid %d gen %u short size %d",
1103 jid, ls->ls_recover_block, ls->ls_recover_size);
1104 spin_unlock(&ls->ls_recover_spin);
1108 if (ls->ls_recover_submit[jid]) {
1109 fs_info(sdp, "recover_slot jid %d gen %u prev %u",
1110 jid, ls->ls_recover_block, ls->ls_recover_submit[jid]);
1112 ls->ls_recover_submit[jid] = ls->ls_recover_block;
1113 spin_unlock(&ls->ls_recover_spin);
1116 /* dlm calls after recover_slot and after it completes lock recovery */
1118 static void gdlm_recover_done(void *arg, struct dlm_slot *slots, int num_slots,
1119 int our_slot, uint32_t generation)
1121 struct gfs2_sbd *sdp = arg;
1122 struct lm_lockstruct *ls = &sdp->sd_lockstruct;
1124 /* ensure the ls jid arrays are large enough */
1125 set_recover_size(sdp, slots, num_slots);
1127 spin_lock(&ls->ls_recover_spin);
1128 ls->ls_recover_start = generation;
1130 if (!ls->ls_recover_mount) {
1131 ls->ls_recover_mount = generation;
1132 ls->ls_jid = our_slot - 1;
1135 if (!test_bit(DFL_UNMOUNT, &ls->ls_recover_flags))
1136 queue_delayed_work(gfs2_control_wq, &sdp->sd_control_work, 0);
1138 clear_bit(DFL_DLM_RECOVERY, &ls->ls_recover_flags);
1139 smp_mb__after_clear_bit();
1140 wake_up_bit(&ls->ls_recover_flags, DFL_DLM_RECOVERY);
1141 spin_unlock(&ls->ls_recover_spin);
1144 /* gfs2_recover thread has a journal recovery result */
1146 static void gdlm_recovery_result(struct gfs2_sbd *sdp, unsigned int jid,
1147 unsigned int result)
1149 struct lm_lockstruct *ls = &sdp->sd_lockstruct;
1151 if (test_bit(DFL_NO_DLM_OPS, &ls->ls_recover_flags))
1154 /* don't care about the recovery of own journal during mount */
1155 if (jid == ls->ls_jid)
1158 spin_lock(&ls->ls_recover_spin);
1159 if (test_bit(DFL_FIRST_MOUNT, &ls->ls_recover_flags)) {
1160 spin_unlock(&ls->ls_recover_spin);
1163 if (ls->ls_recover_size < jid + 1) {
1164 fs_err(sdp, "recovery_result jid %d short size %d",
1165 jid, ls->ls_recover_size);
1166 spin_unlock(&ls->ls_recover_spin);
1170 fs_info(sdp, "recover jid %d result %s\n", jid,
1171 result == LM_RD_GAVEUP ? "busy" : "success");
1173 ls->ls_recover_result[jid] = result;
1175 /* GAVEUP means another node is recovering the journal; delay our
1176 next attempt to recover it, to give the other node a chance to
1177 finish before trying again */
1179 if (!test_bit(DFL_UNMOUNT, &ls->ls_recover_flags))
1180 queue_delayed_work(gfs2_control_wq, &sdp->sd_control_work,
1181 result == LM_RD_GAVEUP ? HZ : 0);
1182 spin_unlock(&ls->ls_recover_spin);
1185 const struct dlm_lockspace_ops gdlm_lockspace_ops = {
1186 .recover_prep = gdlm_recover_prep,
1187 .recover_slot = gdlm_recover_slot,
1188 .recover_done = gdlm_recover_done,
1191 static int gdlm_mount(struct gfs2_sbd *sdp, const char *table)
1193 struct lm_lockstruct *ls = &sdp->sd_lockstruct;
1194 char cluster[GFS2_LOCKNAME_LEN];
1197 int error, ops_result;
1200 * initialize everything
1203 INIT_DELAYED_WORK(&sdp->sd_control_work, gfs2_control_func);
1204 spin_lock_init(&ls->ls_recover_spin);
1205 ls->ls_recover_flags = 0;
1206 ls->ls_recover_mount = 0;
1207 ls->ls_recover_start = 0;
1208 ls->ls_recover_block = 0;
1209 ls->ls_recover_size = 0;
1210 ls->ls_recover_submit = NULL;
1211 ls->ls_recover_result = NULL;
1212 ls->ls_lvb_bits = NULL;
1214 error = set_recover_size(sdp, NULL, 0);
1219 * prepare dlm_new_lockspace args
1222 fsname = strchr(table, ':');
1224 fs_info(sdp, "no fsname found\n");
1228 memset(cluster, 0, sizeof(cluster));
1229 memcpy(cluster, table, strlen(table) - strlen(fsname));
1232 flags = DLM_LSFL_FS | DLM_LSFL_NEWEXCL;
1235 * create/join lockspace
1238 error = dlm_new_lockspace(fsname, cluster, flags, GDLM_LVB_SIZE,
1239 &gdlm_lockspace_ops, sdp, &ops_result,
1242 fs_err(sdp, "dlm_new_lockspace error %d\n", error);
1246 if (ops_result < 0) {
1248 * dlm does not support ops callbacks,
1249 * old dlm_controld/gfs_controld are used, try without ops.
1251 fs_info(sdp, "dlm lockspace ops not used\n");
1252 free_recover_size(ls);
1253 set_bit(DFL_NO_DLM_OPS, &ls->ls_recover_flags);
1257 if (!test_bit(SDF_NOJOURNALID, &sdp->sd_flags)) {
1258 fs_err(sdp, "dlm lockspace ops disallow jid preset\n");
1264 * control_mount() uses control_lock to determine first mounter,
1265 * and for later mounts, waits for any recoveries to be cleared.
1268 error = control_mount(sdp);
1270 fs_err(sdp, "mount control error %d\n", error);
1274 ls->ls_first = !!test_bit(DFL_FIRST_MOUNT, &ls->ls_recover_flags);
1275 clear_bit(SDF_NOJOURNALID, &sdp->sd_flags);
1276 smp_mb__after_clear_bit();
1277 wake_up_bit(&sdp->sd_flags, SDF_NOJOURNALID);
1281 dlm_release_lockspace(ls->ls_dlm, 2);
1283 free_recover_size(ls);
1288 static void gdlm_first_done(struct gfs2_sbd *sdp)
1290 struct lm_lockstruct *ls = &sdp->sd_lockstruct;
1293 if (test_bit(DFL_NO_DLM_OPS, &ls->ls_recover_flags))
1296 error = control_first_done(sdp);
1298 fs_err(sdp, "mount first_done error %d\n", error);
1301 static void gdlm_unmount(struct gfs2_sbd *sdp)
1303 struct lm_lockstruct *ls = &sdp->sd_lockstruct;
1305 if (test_bit(DFL_NO_DLM_OPS, &ls->ls_recover_flags))
1308 /* wait for gfs2_control_wq to be done with this mount */
1310 spin_lock(&ls->ls_recover_spin);
1311 set_bit(DFL_UNMOUNT, &ls->ls_recover_flags);
1312 spin_unlock(&ls->ls_recover_spin);
1313 flush_delayed_work(&sdp->sd_control_work);
1315 /* mounted_lock and control_lock will be purged in dlm recovery */
1318 dlm_release_lockspace(ls->ls_dlm, 2);
1322 free_recover_size(ls);
1325 static const match_table_t dlm_tokens = {
1326 { Opt_jid, "jid=%d"},
1328 { Opt_first, "first=%d"},
1329 { Opt_nodir, "nodir=%d"},
1333 const struct lm_lockops gfs2_dlm_ops = {
1334 .lm_proto_name = "lock_dlm",
1335 .lm_mount = gdlm_mount,
1336 .lm_first_done = gdlm_first_done,
1337 .lm_recovery_result = gdlm_recovery_result,
1338 .lm_unmount = gdlm_unmount,
1339 .lm_put_lock = gdlm_put_lock,
1340 .lm_lock = gdlm_lock,
1341 .lm_cancel = gdlm_cancel,
1342 .lm_tokens = &dlm_tokens,