monitor.c

   1 /*
   2  * mdmon - monitor external metadata arrays
   3  *
   4  * Copyright (C) 2007-2009 Neil Brown <neilb@suse.de>
   5  * Copyright (C) 2007-2009 Intel Corporation
   6  *
   7  * This program is free software; you can redistribute it and/or modify it
   8  * under the terms and conditions of the GNU General Public License,
   9  * version 2, as published by the Free Software Foundation.
  10  *
  11  * This program is distributed in the hope it will be useful, but WITHOUT
  12  * ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or
  13  * FITNESS FOR A PARTICULAR PURPOSE.  See the GNU General Public License for
  14  * more details.
  15  *
  16  * You should have received a copy of the GNU General Public License along with
  17  * this program; if not, write to the Free Software Foundation, Inc.,
  18  * 51 Franklin St - Fifth Floor, Boston, MA 02110-1301 USA.
  19  */
  20
  21 #include "mdadm.h"
  22 #include "mdmon.h"
  23 #include <sys/syscall.h>
  24 #include <sys/select.h>
  25 #include <signal.h>
  26
  27 static char *array_states[] = {
  28         "clear", "inactive", "suspended", "readonly", "read-auto",
  29         "clean", "active", "write-pending", "active-idle", NULL };
  30 static char *sync_actions[] = {
  31         "idle", "reshape", "resync", "recover", "check", "repair", NULL
  32 };
  33
  34 static int write_attr(char *attr, int fd)
  35 {
  36         return write(fd, attr, strlen(attr));
  37 }
  38
  39 static void add_fd(fd_set *fds, int *maxfd, int fd)
  40 {
  41         if (fd < 0)
  42                 return;
  43         if (fd > *maxfd)
  44                 *maxfd = fd;
  45         FD_SET(fd, fds);
  46 }
  47
  48 static int read_attr(char *buf, int len, int fd)
  49 {
  50         int n;
  51
  52         if (fd < 0) {
  53                 buf[0] = 0;
  54                 return 0;
  55         }
  56         lseek(fd, 0, 0);
  57         n = read(fd, buf, len - 1);
  58
  59         if (n <= 0) {
  60                 buf[0] = 0;
  61                 return 0;
  62         }
  63         buf[n] = 0;
  64         if (buf[n-1] == '\n')
  65                 buf[n-1] = 0;
  66         return n;
  67 }
  68
  69 static unsigned long long read_resync_start(int fd)
  70 {
  71         char buf[30];
  72         int n;
  73
  74         n = read_attr(buf, 30, fd);
  75         if (n <= 0)
  76                 return 0;
  77         if (strncmp(buf, "none", 4) == 0)
  78                 return MaxSector;
  79         else
  80                 return strtoull(buf, NULL, 10);
  81 }
  82
  83 static unsigned long long read_sync_completed(int fd)
  84 {
  85         unsigned long long val;
  86         char buf[50];
  87         int n;
  88         char *ep;
  89
  90         n = read_attr(buf, 50, fd);
  91
  92         if (n <= 0)
  93                 return 0;
  94         buf[n] = 0;
  95         val = strtoull(buf, &ep, 0);
  96         if (ep == buf || (*ep != 0 && *ep != '\n' && *ep != ' '))
  97                 return 0;
  98         return val;
  99 }
 100
 101 static enum array_state read_state(int fd)
 102 {
 103         char buf[20];
 104         int n = read_attr(buf, 20, fd);
 105
 106         if (n <= 0)
 107                 return bad_word;
 108         return (enum array_state) sysfs_match_word(buf, array_states);
 109 }
 110
 111 static enum sync_action read_action( int fd)
 112 {
 113         char buf[20];
 114         int n = read_attr(buf, 20, fd);
 115
 116         if (n <= 0)
 117                 return bad_action;
 118         return (enum sync_action) sysfs_match_word(buf, sync_actions);
 119 }
 120
 121 int read_dev_state(int fd)
 122 {
 123         char buf[60];
 124         int n = read_attr(buf, 60, fd);
 125         char *cp;
 126         int rv = 0;
 127
 128         if (n <= 0)
 129                 return 0;
 130
 131         cp = buf;
 132         while (cp) {
 133                 if (sysfs_attr_match(cp, "faulty"))
 134                         rv |= DS_FAULTY;
 135                 if (sysfs_attr_match(cp, "in_sync"))
 136                         rv |= DS_INSYNC;
 137                 if (sysfs_attr_match(cp, "write_mostly"))
 138                         rv |= DS_WRITE_MOSTLY;
 139                 if (sysfs_attr_match(cp, "spare"))
 140                         rv |= DS_SPARE;
 141                 if (sysfs_attr_match(cp, "blocked"))
 142                         rv |= DS_BLOCKED;
 143                 cp = strchr(cp, ',');
 144                 if (cp)
 145                         cp++;
 146         }
 147         return rv;
 148 }
 149
 150 static void signal_manager(void)
 151 {
 152         /* tgkill(getpid(), mon_tid, SIGUSR1); */
 153         int pid = getpid();
 154         syscall(SYS_tgkill, pid, mgr_tid, SIGUSR1);
 155 }
 156
 157 /* Monitor a set of active md arrays - all of which share the
 158  * same metadata - and respond to events that require
 159  * metadata update.
 160  *
 161  * New arrays are detected by another thread which allocates
 162  * required memory and attaches the data structure to our list.
 163  *
 164  * Events:
 165  *  Array stops.
 166  *    This is detected by array_state going to 'clear' or 'inactive'.
 167  *    while we thought it was active.
 168  *    Response is to mark metadata as clean and 'clear' the array(??)
 169  *  write-pending
 170  *    array_state if 'write-pending'
 171  *    We mark metadata as 'dirty' then set array to 'active'.
 172  *  active_idle
 173  *    Either ignore, or mark clean, then mark metadata as clean.
 174  *
 175  *  device fails
 176  *    detected by rd-N/state reporting "faulty"
 177  *    mark device as 'failed' in metadata, let the kernel release the
 178  *    device by writing '-blocked' to rd/state, and finally write 'remove' to
 179  *    rd/state.  Before a disk can be replaced it must be failed and removed
 180  *    from all container members, this will be preemptive for the other
 181  *    arrays... safe?
 182  *
 183  *  sync completes
 184  *    sync_action was 'resync' and becomes 'idle' and resync_start becomes
 185  *    MaxSector
 186  *    Notify metadata that sync is complete.
 187  *
 188  *  recovery completes
 189  *    sync_action changes from 'recover' to 'idle'
 190  *    Check each device state and mark metadata if 'faulty' or 'in_sync'.
 191  *
 192  *  deal with resync
 193  *    This only happens on finding a new array... mdadm will have set
 194  *    'resync_start' to the correct value.  If 'resync_start' indicates that an
 195  *    resync needs to occur set the array to the 'active' state rather than the
 196  *    initial read-auto state.
 197  *
 198  *
 199  *
 200  * We wait for a change (poll/select) on array_state, sync_action, and
 201  * each rd-X/state file.
 202  * When we get any change, we check everything.  So read each state file,
 203  * then decide what to do.
 204  *
 205  * The core action is to write new metadata to all devices in the array.
 206  * This is done at most once on any wakeup.
 207  * After that we might:
 208  *   - update the array_state
 209  *   - set the role of some devices.
 210  *   - request a sync_action
 211  *
 212  */
 213
 214 static int read_and_act(struct active_array *a)
 215 {
 216         unsigned long long sync_completed;
 217         int check_degraded = 0;
 218         int check_reshape = 0;
 219         int deactivate = 0;
 220         struct mdinfo *mdi;
 221         int dirty = 0;
 222
 223         a->next_state = bad_word;
 224         a->next_action = bad_action;
 225
 226         a->curr_state = read_state(a->info.state_fd);
 227         a->curr_action = read_action(a->action_fd);
 228         a->info.resync_start = read_resync_start(a->resync_start_fd);
 229         sync_completed = read_sync_completed(a->sync_completed_fd);
 230         for (mdi = a->info.devs; mdi ; mdi = mdi->next) {
 231                 mdi->next_state = 0;
 232                 mdi->curr_state = 0;
 233                 if (mdi->state_fd >= 0) {
 234                         mdi->recovery_start = read_resync_start(mdi->recovery_fd);
 235                         mdi->curr_state = read_dev_state(mdi->state_fd);
 236                 }
 237         }
 238
 239         if (a->curr_state > inactive &&
 240             a->prev_state == inactive) {
 241                 /* array has been started
 242                  * possible that container operation has to be completed
 243                  */
 244                 a->container->ss->set_array_state(a, 0);
 245         }
 246         if (a->curr_state <= inactive &&
 247             a->prev_state > inactive) {
 248                 /* array has been stopped */
 249                 a->container->ss->set_array_state(a, 1);
 250                 a->next_state = clear;
 251                 deactivate = 1;
 252         }
 253         if (a->curr_state == write_pending) {
 254                 a->container->ss->set_array_state(a, 0);
 255                 a->next_state = active;
 256                 dirty = 1;
 257         }
 258         if (a->curr_state == active_idle) {
 259                 /* Set array to 'clean' FIRST, then mark clean
 260                  * in the metadata
 261                  */
 262                 a->next_state = clean;
 263                 dirty = 1;
 264         }
 265         if (a->curr_state == clean) {
 266                 a->container->ss->set_array_state(a, 1);
 267         }
 268         if (a->curr_state == active ||
 269             a->curr_state == suspended ||
 270             a->curr_state == bad_word)
 271                 dirty = 1;
 272         if (a->curr_state == readonly) {
 273                 /* Well, I'm ready to handle things.  If readonly
 274                  * wasn't requested, transition to read-auto.
 275                  */
 276                 char buf[64];
 277                 read_attr(buf, sizeof(buf), a->metadata_fd);
 278                 if (strncmp(buf, "external:-", 10) == 0) {
 279                         /* explicit request for readonly array.  Leave it alone */
 280                         ;
 281                 } else {
 282                         if (a->container->ss->set_array_state(a, 2))
 283                                 a->next_state = read_auto; /* array is clean */
 284                         else {
 285                                 a->next_state = active; /* Now active for recovery etc */
 286                                 dirty = 1;
 287                         }
 288                 }
 289         }
 290
 291         if (!deactivate &&
 292             a->curr_action == idle &&
 293             a->prev_action == resync) {
 294                 /* A resync has finished.  The endpoint is recorded in
 295                  * 'sync_start'.  We don't update the metadata
 296                  * until the array goes inactive or readonly though.
 297                  * Just check if we need to fiddle spares.
 298                  */
 299                 a->container->ss->set_array_state(a, a->curr_state <= clean);
 300                 check_degraded = 1;
 301         }
 302
 303         if (!deactivate &&
 304             a->curr_action == idle &&
 305             a->prev_action == recover) {
 306                 /* A recovery has finished.  Some disks may be in sync now,
 307                  * and the array may no longer be degraded
 308                  */
 309                 for (mdi = a->info.devs ; mdi ; mdi = mdi->next) {
 310                         a->container->ss->set_disk(a, mdi->disk.raid_disk,
 311                                                    mdi->curr_state);
 312                         if (! (mdi->curr_state & DS_INSYNC))
 313                                 check_degraded = 1;
 314                 }
 315         }
 316
 317         if (!deactivate &&
 318             a->curr_action == reshape &&
 319             a->prev_action != reshape)
 320                 /* reshape was requested by mdadm.  Need to see if
 321                  * new devices have been added.  Manager does that
 322                  * when it sees check_reshape
 323                  */
 324                 check_reshape = 1;
 325
 326         /* Check for failures and if found:
 327          * 1/ Record the failure in the metadata and unblock the device.
 328          *    FIXME update the kernel to stop notifying on failed drives when
 329          *    the array is readonly and we have cleared 'blocked'
 330          * 2/ Try to remove the device if the array is writable, or can be
 331          *    made writable.
 332          */
 333         for (mdi = a->info.devs ; mdi ; mdi = mdi->next) {
 334                 if (mdi->curr_state & DS_FAULTY) {
 335                         a->container->ss->set_disk(a, mdi->disk.raid_disk,
 336                                                    mdi->curr_state);
 337                         check_degraded = 1;
 338                         mdi->next_state |= DS_UNBLOCK;
 339                         if (a->curr_state == read_auto) {
 340                                 a->container->ss->set_array_state(a, 0);
 341                                 a->next_state = active;
 342                         }
 343                         if (a->curr_state > readonly)
 344                                 mdi->next_state |= DS_REMOVE;
 345                 }
 346         }
 347
 348         /* Check for recovery checkpoint notifications.  We need to be a
 349          * minimum distance away from the last checkpoint to prevent
 350          * over checkpointing.  Note reshape checkpointing is handled
 351          * in the second branch.
 352          */
 353         if (sync_completed > a->last_checkpoint &&
 354             sync_completed - a->last_checkpoint > a->info.component_size >> 4 &&
 355             a->curr_action > reshape) {
 356                 /* A (non-reshape) sync_action has reached a checkpoint.
 357                  * Record the updated position in the metadata
 358                  */
 359                 a->last_checkpoint = sync_completed;
 360                 a->container->ss->set_array_state(a, a->curr_state <= clean);
 361         } else if ((a->curr_action == idle && a->prev_action == reshape) ||
 362                    (a->curr_action == reshape
 363                     && sync_completed > a->last_checkpoint) ) {
 364                 /* Reshape has progressed or completed so we need to
 365                  * update the array state - and possibly the array size
 366                  */
 367                 if (sync_completed != 0)
 368                         a->last_checkpoint = sync_completed;
 369                 /* We might need to update last_checkpoint depending on
 370                  * the reason that reshape finished.
 371                  * if array reshape is really finished:
 372                  *        set check point to the end, this allows
 373                  *        set_array_state() to finalize reshape in metadata
 374                  * if reshape if broken: do not set checkpoint to the end
 375                  *        this allows for reshape restart from checkpoint
 376                  */
 377                 if ((a->curr_action != reshape) &&
 378                     (a->prev_action == reshape)) {
 379                         char buf[40];
 380                         if ((sysfs_get_str(&a->info, NULL,
 381                                           "reshape_position",
 382                                           buf,
 383                                           sizeof(buf)) >= 0) &&
 384                              strncmp(buf, "none", 4) == 0)
 385                                 a->last_checkpoint = a->info.component_size;
 386                 }
 387                 a->container->ss->set_array_state(a, a->curr_state <= clean);
 388                 a->last_checkpoint = sync_completed;
 389         }
 390
 391         if (sync_completed > a->last_checkpoint)
 392                 a->last_checkpoint = sync_completed;
 393
 394         a->container->ss->sync_metadata(a->container);
 395         dprintf("%s(%d): state:%s action:%s next(", __func__, a->info.container_member,
 396                 array_states[a->curr_state], sync_actions[a->curr_action]);
 397
 398         /* Effect state changes in the array */
 399         if (a->next_state != bad_word) {
 400                 dprintf(" state:%s", array_states[a->next_state]);
 401                 write_attr(array_states[a->next_state], a->info.state_fd);
 402         }
 403         if (a->next_action != bad_action) {
 404                 write_attr(sync_actions[a->next_action], a->action_fd);
 405                 dprintf(" action:%s", sync_actions[a->next_action]);
 406         }
 407         for (mdi = a->info.devs; mdi ; mdi = mdi->next) {
 408                 if (mdi->next_state & DS_UNBLOCK) {
 409                         dprintf(" %d:-blocked", mdi->disk.raid_disk);
 410                         write_attr("-blocked", mdi->state_fd);
 411                 }
 412
 413                 if ((mdi->next_state & DS_REMOVE) && mdi->state_fd >= 0) {
 414                         int remove_result;
 415
 416                         /* the kernel may not be able to immediately remove the
 417                          * disk, we can simply wait until the next event to try
 418                          * again.
 419                          */
 420                         remove_result = write_attr("remove", mdi->state_fd);
 421                         if (remove_result > 0) {
 422                                 dprintf(" %d:removed", mdi->disk.raid_disk);
 423                                 close(mdi->state_fd);
 424                                 mdi->state_fd = -1;
 425                         }
 426                 }
 427                 if (mdi->next_state & DS_INSYNC) {
 428                         write_attr("+in_sync", mdi->state_fd);
 429                         dprintf(" %d:+in_sync", mdi->disk.raid_disk);
 430                 }
 431         }
 432         dprintf(" )\n");
 433
 434         /* move curr_ to prev_ */
 435         a->prev_state = a->curr_state;
 436
 437         a->prev_action = a->curr_action;
 438
 439         for (mdi = a->info.devs; mdi ; mdi = mdi->next) {
 440                 mdi->prev_state = mdi->curr_state;
 441                 mdi->next_state = 0;
 442         }
 443
 444         if (check_degraded || check_reshape) {
 445                 /* manager will do the actual check */
 446                 if (check_degraded)
 447                         a->check_degraded = 1;
 448                 if (check_reshape)
 449                         a->check_reshape = 1;
 450                 signal_manager();
 451         }
 452
 453         if (deactivate)
 454                 a->container = NULL;
 455
 456         return dirty;
 457 }
 458
 459 static struct mdinfo *
 460 find_device(struct active_array *a, int major, int minor)
 461 {
 462         struct mdinfo *mdi;
 463
 464         for (mdi = a->info.devs ; mdi ; mdi = mdi->next)
 465                 if (mdi->disk.major == major && mdi->disk.minor == minor)
 466                         return mdi;
 467
 468         return NULL;
 469 }
 470
 471 static void reconcile_failed(struct active_array *aa, struct mdinfo *failed)
 472 {
 473         struct active_array *a;
 474         struct mdinfo *victim;
 475
 476         for (a = aa; a; a = a->next) {
 477                 if (!a->container)
 478                         continue;
 479                 victim = find_device(a, failed->disk.major, failed->disk.minor);
 480                 if (!victim)
 481                         continue;
 482
 483                 if (!(victim->curr_state & DS_FAULTY))
 484                         write_attr("faulty", victim->state_fd);
 485         }
 486 }
 487
 488 #ifdef DEBUG
 489 static void dprint_wake_reasons(fd_set *fds)
 490 {
 491         int i;
 492         char proc_path[256];
 493         char link[256];
 494         char *basename;
 495         int rv;
 496
 497         fprintf(stderr, "monitor: wake ( ");
 498         for (i = 0; i < FD_SETSIZE; i++) {
 499                 if (FD_ISSET(i, fds)) {
 500                         sprintf(proc_path, "/proc/%d/fd/%d",
 501                                 (int) getpid(), i);
 502
 503                         rv = readlink(proc_path, link, sizeof(link) - 1);
 504                         if (rv < 0) {
 505                                 fprintf(stderr, "%d:unknown ", i);
 506                                 continue;
 507                         }
 508                         link[rv] = '\0';
 509                         basename = strrchr(link, '/');
 510                         fprintf(stderr, "%d:%s ",
 511                                 i, basename ? ++basename : link);
 512                 }
 513         }
 514         fprintf(stderr, ")\n");
 515 }
 516 #endif
 517
 518 int monitor_loop_cnt;
 519
 520 static int wait_and_act(struct supertype *container, int nowait)
 521 {
 522         fd_set rfds;
 523         int maxfd = 0;
 524         struct active_array **aap = &container->arrays;
 525         struct active_array *a, **ap;
 526         int rv;
 527         struct mdinfo *mdi;
 528         static unsigned int dirty_arrays = ~0; /* start at some non-zero value */
 529
 530         FD_ZERO(&rfds);
 531
 532         for (ap = aap ; *ap ;) {
 533                 a = *ap;
 534                 /* once an array has been deactivated we want to
 535                  * ask the manager to discard it.
 536                  */
 537                 if (!a->container || (a->info.array.level == 0)) {
 538                         if (discard_this) {
 539                                 ap = &(*ap)->next;
 540                                 continue;
 541                         }
 542                         *ap = a->next;
 543                         a->next = NULL;
 544                         discard_this = a;
 545                         signal_manager();
 546                         continue;
 547                 }
 548
 549                 add_fd(&rfds, &maxfd, a->info.state_fd);
 550                 add_fd(&rfds, &maxfd, a->action_fd);
 551                 add_fd(&rfds, &maxfd, a->sync_completed_fd);
 552                 for (mdi = a->info.devs ; mdi ; mdi = mdi->next)
 553                         add_fd(&rfds, &maxfd, mdi->state_fd);
 554
 555                 ap = &(*ap)->next;
 556         }
 557
 558         if (manager_ready && (*aap == NULL || (sigterm && !dirty_arrays))) {
 559                 /* No interesting arrays, or we have been told to
 560                  * terminate and everything is clean.  Lets see about
 561                  * exiting.  Note that blocking at this point is not a
 562                  * problem as there are no active arrays, there is
 563                  * nothing that we need to be ready to do.
 564                  */
 565                 int fd = open_dev_excl(container->devnum);
 566                 if (fd >= 0 || errno != EBUSY) {
 567                         /* OK, we are safe to leave */
 568                         if (sigterm && !dirty_arrays)
 569                                 dprintf("caught sigterm, all clean... exiting\n");
 570                         else
 571                                 dprintf("no arrays to monitor... exiting\n");
 572                         if (!sigterm)
 573                                 /* On SIGTERM, someone (the take-over mdmon) will
 574                                  * clean up
 575                                  */
 576                                 remove_pidfile(container->devname);
 577                         exit_now = 1;
 578                         signal_manager();
 579                         close(fd);
 580                         exit(0);
 581                 }
 582         }
 583
 584         if (!nowait) {
 585                 sigset_t set;
 586                 sigprocmask(SIG_UNBLOCK, NULL, &set);
 587                 sigdelset(&set, SIGUSR1);
 588                 monitor_loop_cnt |= 1;
 589                 rv = pselect(maxfd+1, NULL, NULL, &rfds, NULL, &set);
 590                 monitor_loop_cnt += 1;
 591                 if (rv == -1 && errno == EINTR)
 592                         rv = 0;
 593                 #ifdef DEBUG
 594                 dprint_wake_reasons(&rfds);
 595                 #endif
 596
 597         }
 598
 599         if (update_queue) {
 600                 struct metadata_update *this;
 601
 602                 for (this = update_queue; this ; this = this->next)
 603                         container->ss->process_update(container, this);
 604
 605                 update_queue_handled = update_queue;
 606                 update_queue = NULL;
 607                 signal_manager();
 608                 container->ss->sync_metadata(container);
 609         }
 610
 611         rv = 0;
 612         dirty_arrays = 0;
 613         for (a = *aap; a ; a = a->next) {
 614                 int is_dirty;
 615
 616                 if (a->replaces && !discard_this) {
 617                         struct active_array **ap;
 618                         for (ap = &a->next; *ap && *ap != a->replaces;
 619                              ap = & (*ap)->next)
 620                                 ;
 621                         if (*ap)
 622                                 *ap = (*ap)->next;
 623                         discard_this = a->replaces;
 624                         a->replaces = NULL;
 625                         /* FIXME check if device->state_fd need to be cleared?*/
 626                         signal_manager();
 627                 }
 628                 if (a->container) {
 629                         is_dirty = read_and_act(a);
 630                         rv |= 1;
 631                         dirty_arrays += is_dirty;
 632                         /* when terminating stop manipulating the array after it
 633                          * is clean, but make sure read_and_act() is given a
 634                          * chance to handle 'active_idle'
 635                          */
 636                         if (sigterm && !is_dirty)
 637                                 a->container = NULL; /* stop touching this array */
 638                 }
 639         }
 640
 641         /* propagate failures across container members */
 642         for (a = *aap; a ; a = a->next) {
 643                 if (!a->container)
 644                         continue;
 645                 for (mdi = a->info.devs ; mdi ; mdi = mdi->next)
 646                         if (mdi->curr_state & DS_FAULTY)
 647                                 reconcile_failed(*aap, mdi);
 648         }
 649
 650         return rv;
 651 }
 652
 653 void do_monitor(struct supertype *container)
 654 {
 655         int rv;
 656         int first = 1;
 657         do {
 658                 rv = wait_and_act(container, first);
 659                 first = 0;
 660         } while (rv >= 0);
 661 }