1 /*-
2 * SPDX-License-Identifier: BSD-2-Clause-FreeBSD
3 *
4 * Copyright (c) 2010 Alexander Motin <[email protected]>
5 * All rights reserved.
6 *
7 * Redistribution and use in source and binary forms, with or without
8 * modification, are permitted provided that the following conditions
9 * are met:
10 * 1. Redistributions of source code must retain the above copyright
11 * notice, this list of conditions and the following disclaimer.
12 * 2. Redistributions in binary form must reproduce the above copyright
13 * notice, this list of conditions and the following disclaimer in the
14 * documentation and/or other materials provided with the distribution.
15 *
16 * THIS SOFTWARE IS PROVIDED BY THE AUTHORS AND CONTRIBUTORS ``AS IS'' AND
17 * ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE
18 * IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE
19 * ARE DISCLAIMED. IN NO EVENT SHALL THE AUTHORS OR CONTRIBUTORS BE LIABLE
20 * FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL
21 * DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS
22 * OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION)
23 * HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT
24 * LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY
25 * OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF
26 * SUCH DAMAGE.
27 */
28
29 #include <sys/cdefs.h>
30 __FBSDID("$FreeBSD$");
31
32 #include <sys/param.h>
33 #include <sys/bio.h>
34 #include <sys/endian.h>
35 #include <sys/kernel.h>
36 #include <sys/kobj.h>
37 #include <sys/limits.h>
38 #include <sys/lock.h>
39 #include <sys/malloc.h>
40 #include <sys/mutex.h>
41 #include <sys/sysctl.h>
42 #include <sys/systm.h>
43 #include <geom/geom.h>
44 #include "geom/raid/g_raid.h"
45 #include "g_raid_tr_if.h"
46
47 SYSCTL_DECL(_kern_geom_raid_raid1);
48
49 #define RAID1_REBUILD_SLAB (1 << 20) /* One transation in a rebuild */
50 static int g_raid1_rebuild_slab = RAID1_REBUILD_SLAB;
51 SYSCTL_UINT(_kern_geom_raid_raid1, OID_AUTO, rebuild_slab_size, CTLFLAG_RWTUN,
52 &g_raid1_rebuild_slab, 0,
53 "Amount of the disk to rebuild each read/write cycle of the rebuild.");
54
55 #define RAID1_REBUILD_FAIR_IO 20 /* use 1/x of the available I/O */
56 static int g_raid1_rebuild_fair_io = RAID1_REBUILD_FAIR_IO;
57 SYSCTL_UINT(_kern_geom_raid_raid1, OID_AUTO, rebuild_fair_io, CTLFLAG_RWTUN,
58 &g_raid1_rebuild_fair_io, 0,
59 "Fraction of the I/O bandwidth to use when disk busy for rebuild.");
60
61 #define RAID1_REBUILD_CLUSTER_IDLE 100
62 static int g_raid1_rebuild_cluster_idle = RAID1_REBUILD_CLUSTER_IDLE;
63 SYSCTL_UINT(_kern_geom_raid_raid1, OID_AUTO, rebuild_cluster_idle, CTLFLAG_RWTUN,
64 &g_raid1_rebuild_cluster_idle, 0,
65 "Number of slabs to do each time we trigger a rebuild cycle");
66
67 #define RAID1_REBUILD_META_UPDATE 1024 /* update meta data every 1GB or so */
68 static int g_raid1_rebuild_meta_update = RAID1_REBUILD_META_UPDATE;
69 SYSCTL_UINT(_kern_geom_raid_raid1, OID_AUTO, rebuild_meta_update, CTLFLAG_RWTUN,
70 &g_raid1_rebuild_meta_update, 0,
71 "When to update the meta data.");
72
73 static MALLOC_DEFINE(M_TR_RAID1, "tr_raid1_data", "GEOM_RAID RAID1 data");
74
75 #define TR_RAID1_NONE 0
76 #define TR_RAID1_REBUILD 1
77 #define TR_RAID1_RESYNC 2
78
79 #define TR_RAID1_F_DOING_SOME 0x1
80 #define TR_RAID1_F_LOCKED 0x2
81 #define TR_RAID1_F_ABORT 0x4
82
83 struct g_raid_tr_raid1_object {
84 struct g_raid_tr_object trso_base;
85 int trso_starting;
86 int trso_stopping;
87 int trso_type;
88 int trso_recover_slabs; /* slabs before rest */
89 int trso_fair_io;
90 int trso_meta_update;
91 int trso_flags;
92 struct g_raid_subdisk *trso_failed_sd; /* like per volume */
93 void *trso_buffer; /* Buffer space */
94 struct bio trso_bio;
95 };
96
97 static g_raid_tr_taste_t g_raid_tr_taste_raid1;
98 static g_raid_tr_event_t g_raid_tr_event_raid1;
99 static g_raid_tr_start_t g_raid_tr_start_raid1;
100 static g_raid_tr_stop_t g_raid_tr_stop_raid1;
101 static g_raid_tr_iostart_t g_raid_tr_iostart_raid1;
102 static g_raid_tr_iodone_t g_raid_tr_iodone_raid1;
103 static g_raid_tr_kerneldump_t g_raid_tr_kerneldump_raid1;
104 static g_raid_tr_locked_t g_raid_tr_locked_raid1;
105 static g_raid_tr_idle_t g_raid_tr_idle_raid1;
106 static g_raid_tr_free_t g_raid_tr_free_raid1;
107
108 static kobj_method_t g_raid_tr_raid1_methods[] = {
109 KOBJMETHOD(g_raid_tr_taste, g_raid_tr_taste_raid1),
110 KOBJMETHOD(g_raid_tr_event, g_raid_tr_event_raid1),
111 KOBJMETHOD(g_raid_tr_start, g_raid_tr_start_raid1),
112 KOBJMETHOD(g_raid_tr_stop, g_raid_tr_stop_raid1),
113 KOBJMETHOD(g_raid_tr_iostart, g_raid_tr_iostart_raid1),
114 KOBJMETHOD(g_raid_tr_iodone, g_raid_tr_iodone_raid1),
115 KOBJMETHOD(g_raid_tr_kerneldump, g_raid_tr_kerneldump_raid1),
116 KOBJMETHOD(g_raid_tr_locked, g_raid_tr_locked_raid1),
117 KOBJMETHOD(g_raid_tr_idle, g_raid_tr_idle_raid1),
118 KOBJMETHOD(g_raid_tr_free, g_raid_tr_free_raid1),
119 { 0, 0 }
120 };
121
122 static struct g_raid_tr_class g_raid_tr_raid1_class = {
123 "RAID1",
124 g_raid_tr_raid1_methods,
125 sizeof(struct g_raid_tr_raid1_object),
126 .trc_enable = 1,
127 .trc_priority = 100,
128 .trc_accept_unmapped = 1
129 };
130
131 static void g_raid_tr_raid1_rebuild_abort(struct g_raid_tr_object *tr);
132 static void g_raid_tr_raid1_maybe_rebuild(struct g_raid_tr_object *tr,
133 struct g_raid_subdisk *sd);
134
135 static int
g_raid_tr_taste_raid1(struct g_raid_tr_object * tr,struct g_raid_volume * vol)136 g_raid_tr_taste_raid1(struct g_raid_tr_object *tr, struct g_raid_volume *vol)
137 {
138 struct g_raid_tr_raid1_object *trs;
139
140 trs = (struct g_raid_tr_raid1_object *)tr;
141 if (tr->tro_volume->v_raid_level != G_RAID_VOLUME_RL_RAID1 ||
142 (tr->tro_volume->v_raid_level_qualifier != G_RAID_VOLUME_RLQ_R1SM &&
143 tr->tro_volume->v_raid_level_qualifier != G_RAID_VOLUME_RLQ_R1MM))
144 return (G_RAID_TR_TASTE_FAIL);
145 trs->trso_starting = 1;
146 return (G_RAID_TR_TASTE_SUCCEED);
147 }
148
149 static int
g_raid_tr_update_state_raid1(struct g_raid_volume * vol,struct g_raid_subdisk * sd)150 g_raid_tr_update_state_raid1(struct g_raid_volume *vol,
151 struct g_raid_subdisk *sd)
152 {
153 struct g_raid_tr_raid1_object *trs;
154 struct g_raid_softc *sc;
155 struct g_raid_subdisk *tsd, *bestsd;
156 u_int s;
157 int i, na, ns;
158
159 sc = vol->v_softc;
160 trs = (struct g_raid_tr_raid1_object *)vol->v_tr;
161 if (trs->trso_stopping &&
162 (trs->trso_flags & TR_RAID1_F_DOING_SOME) == 0)
163 s = G_RAID_VOLUME_S_STOPPED;
164 else if (trs->trso_starting)
165 s = G_RAID_VOLUME_S_STARTING;
166 else {
167 /* Make sure we have at least one ACTIVE disk. */
168 na = g_raid_nsubdisks(vol, G_RAID_SUBDISK_S_ACTIVE);
169 if (na == 0) {
170 /*
171 * Critical situation! We have no any active disk!
172 * Choose the best disk we have to make it active.
173 */
174 bestsd = &vol->v_subdisks[0];
175 for (i = 1; i < vol->v_disks_count; i++) {
176 tsd = &vol->v_subdisks[i];
177 if (tsd->sd_state > bestsd->sd_state)
178 bestsd = tsd;
179 else if (tsd->sd_state == bestsd->sd_state &&
180 (tsd->sd_state == G_RAID_SUBDISK_S_REBUILD ||
181 tsd->sd_state == G_RAID_SUBDISK_S_RESYNC) &&
182 tsd->sd_rebuild_pos > bestsd->sd_rebuild_pos)
183 bestsd = tsd;
184 }
185 if (bestsd->sd_state >= G_RAID_SUBDISK_S_UNINITIALIZED) {
186 /* We found reasonable candidate. */
187 G_RAID_DEBUG1(1, sc,
188 "Promote subdisk %s:%d from %s to ACTIVE.",
189 vol->v_name, bestsd->sd_pos,
190 g_raid_subdisk_state2str(bestsd->sd_state));
191 g_raid_change_subdisk_state(bestsd,
192 G_RAID_SUBDISK_S_ACTIVE);
193 g_raid_write_metadata(sc,
194 vol, bestsd, bestsd->sd_disk);
195 }
196 }
197 na = g_raid_nsubdisks(vol, G_RAID_SUBDISK_S_ACTIVE);
198 ns = g_raid_nsubdisks(vol, G_RAID_SUBDISK_S_STALE) +
199 g_raid_nsubdisks(vol, G_RAID_SUBDISK_S_RESYNC);
200 if (na == vol->v_disks_count)
201 s = G_RAID_VOLUME_S_OPTIMAL;
202 else if (na + ns == vol->v_disks_count)
203 s = G_RAID_VOLUME_S_SUBOPTIMAL;
204 else if (na > 0)
205 s = G_RAID_VOLUME_S_DEGRADED;
206 else
207 s = G_RAID_VOLUME_S_BROKEN;
208 g_raid_tr_raid1_maybe_rebuild(vol->v_tr, sd);
209 }
210 if (s != vol->v_state) {
211 g_raid_event_send(vol, G_RAID_VOLUME_S_ALIVE(s) ?
212 G_RAID_VOLUME_E_UP : G_RAID_VOLUME_E_DOWN,
213 G_RAID_EVENT_VOLUME);
214 g_raid_change_volume_state(vol, s);
215 if (!trs->trso_starting && !trs->trso_stopping)
216 g_raid_write_metadata(sc, vol, NULL, NULL);
217 }
218 return (0);
219 }
220
221 static void
g_raid_tr_raid1_fail_disk(struct g_raid_softc * sc,struct g_raid_subdisk * sd,struct g_raid_disk * disk)222 g_raid_tr_raid1_fail_disk(struct g_raid_softc *sc, struct g_raid_subdisk *sd,
223 struct g_raid_disk *disk)
224 {
225 /*
226 * We don't fail the last disk in the pack, since it still has decent
227 * data on it and that's better than failing the disk if it is the root
228 * file system.
229 *
230 * XXX should this be controlled via a tunable? It makes sense for
231 * the volume that has / on it. I can't think of a case where we'd
232 * want the volume to go away on this kind of event.
233 */
234 if (g_raid_nsubdisks(sd->sd_volume, G_RAID_SUBDISK_S_ACTIVE) == 1 &&
235 g_raid_get_subdisk(sd->sd_volume, G_RAID_SUBDISK_S_ACTIVE) == sd)
236 return;
237 g_raid_fail_disk(sc, sd, disk);
238 }
239
240 static void
g_raid_tr_raid1_rebuild_some(struct g_raid_tr_object * tr)241 g_raid_tr_raid1_rebuild_some(struct g_raid_tr_object *tr)
242 {
243 struct g_raid_tr_raid1_object *trs;
244 struct g_raid_subdisk *sd, *good_sd;
245 struct bio *bp;
246
247 trs = (struct g_raid_tr_raid1_object *)tr;
248 if (trs->trso_flags & TR_RAID1_F_DOING_SOME)
249 return;
250 sd = trs->trso_failed_sd;
251 good_sd = g_raid_get_subdisk(sd->sd_volume, G_RAID_SUBDISK_S_ACTIVE);
252 if (good_sd == NULL) {
253 g_raid_tr_raid1_rebuild_abort(tr);
254 return;
255 }
256 bp = &trs->trso_bio;
257 memset(bp, 0, sizeof(*bp));
258 bp->bio_offset = sd->sd_rebuild_pos;
259 bp->bio_length = MIN(g_raid1_rebuild_slab,
260 sd->sd_size - sd->sd_rebuild_pos);
261 bp->bio_data = trs->trso_buffer;
262 bp->bio_cmd = BIO_READ;
263 bp->bio_cflags = G_RAID_BIO_FLAG_SYNC;
264 bp->bio_caller1 = good_sd;
265 trs->trso_flags |= TR_RAID1_F_DOING_SOME;
266 trs->trso_flags |= TR_RAID1_F_LOCKED;
267 g_raid_lock_range(sd->sd_volume, /* Lock callback starts I/O */
268 bp->bio_offset, bp->bio_length, NULL, bp);
269 }
270
271 static void
g_raid_tr_raid1_rebuild_done(struct g_raid_tr_raid1_object * trs)272 g_raid_tr_raid1_rebuild_done(struct g_raid_tr_raid1_object *trs)
273 {
274 struct g_raid_volume *vol;
275 struct g_raid_subdisk *sd;
276
277 vol = trs->trso_base.tro_volume;
278 sd = trs->trso_failed_sd;
279 g_raid_write_metadata(vol->v_softc, vol, sd, sd->sd_disk);
280 free(trs->trso_buffer, M_TR_RAID1);
281 trs->trso_buffer = NULL;
282 trs->trso_flags &= ~TR_RAID1_F_DOING_SOME;
283 trs->trso_type = TR_RAID1_NONE;
284 trs->trso_recover_slabs = 0;
285 trs->trso_failed_sd = NULL;
286 g_raid_tr_update_state_raid1(vol, NULL);
287 }
288
289 static void
g_raid_tr_raid1_rebuild_finish(struct g_raid_tr_object * tr)290 g_raid_tr_raid1_rebuild_finish(struct g_raid_tr_object *tr)
291 {
292 struct g_raid_tr_raid1_object *trs;
293 struct g_raid_subdisk *sd;
294
295 trs = (struct g_raid_tr_raid1_object *)tr;
296 sd = trs->trso_failed_sd;
297 G_RAID_DEBUG1(0, tr->tro_volume->v_softc,
298 "Subdisk %s:%d-%s rebuild completed.",
299 sd->sd_volume->v_name, sd->sd_pos,
300 sd->sd_disk ? g_raid_get_diskname(sd->sd_disk) : "[none]");
301 g_raid_change_subdisk_state(sd, G_RAID_SUBDISK_S_ACTIVE);
302 sd->sd_rebuild_pos = 0;
303 g_raid_tr_raid1_rebuild_done(trs);
304 }
305
306 static void
g_raid_tr_raid1_rebuild_abort(struct g_raid_tr_object * tr)307 g_raid_tr_raid1_rebuild_abort(struct g_raid_tr_object *tr)
308 {
309 struct g_raid_tr_raid1_object *trs;
310 struct g_raid_subdisk *sd;
311 struct g_raid_volume *vol;
312 off_t len;
313
314 vol = tr->tro_volume;
315 trs = (struct g_raid_tr_raid1_object *)tr;
316 sd = trs->trso_failed_sd;
317 if (trs->trso_flags & TR_RAID1_F_DOING_SOME) {
318 G_RAID_DEBUG1(1, vol->v_softc,
319 "Subdisk %s:%d-%s rebuild is aborting.",
320 sd->sd_volume->v_name, sd->sd_pos,
321 sd->sd_disk ? g_raid_get_diskname(sd->sd_disk) : "[none]");
322 trs->trso_flags |= TR_RAID1_F_ABORT;
323 } else {
324 G_RAID_DEBUG1(0, vol->v_softc,
325 "Subdisk %s:%d-%s rebuild aborted.",
326 sd->sd_volume->v_name, sd->sd_pos,
327 sd->sd_disk ? g_raid_get_diskname(sd->sd_disk) : "[none]");
328 trs->trso_flags &= ~TR_RAID1_F_ABORT;
329 if (trs->trso_flags & TR_RAID1_F_LOCKED) {
330 trs->trso_flags &= ~TR_RAID1_F_LOCKED;
331 len = MIN(g_raid1_rebuild_slab,
332 sd->sd_size - sd->sd_rebuild_pos);
333 g_raid_unlock_range(tr->tro_volume,
334 sd->sd_rebuild_pos, len);
335 }
336 g_raid_tr_raid1_rebuild_done(trs);
337 }
338 }
339
340 static void
g_raid_tr_raid1_rebuild_start(struct g_raid_tr_object * tr)341 g_raid_tr_raid1_rebuild_start(struct g_raid_tr_object *tr)
342 {
343 struct g_raid_volume *vol;
344 struct g_raid_tr_raid1_object *trs;
345 struct g_raid_subdisk *sd, *fsd;
346
347 vol = tr->tro_volume;
348 trs = (struct g_raid_tr_raid1_object *)tr;
349 if (trs->trso_failed_sd) {
350 G_RAID_DEBUG1(1, vol->v_softc,
351 "Already rebuild in start rebuild. pos %jd\n",
352 (intmax_t)trs->trso_failed_sd->sd_rebuild_pos);
353 return;
354 }
355 sd = g_raid_get_subdisk(vol, G_RAID_SUBDISK_S_ACTIVE);
356 if (sd == NULL) {
357 G_RAID_DEBUG1(1, vol->v_softc,
358 "No active disk to rebuild. night night.");
359 return;
360 }
361 fsd = g_raid_get_subdisk(vol, G_RAID_SUBDISK_S_RESYNC);
362 if (fsd == NULL)
363 fsd = g_raid_get_subdisk(vol, G_RAID_SUBDISK_S_REBUILD);
364 if (fsd == NULL) {
365 fsd = g_raid_get_subdisk(vol, G_RAID_SUBDISK_S_STALE);
366 if (fsd != NULL) {
367 fsd->sd_rebuild_pos = 0;
368 g_raid_change_subdisk_state(fsd,
369 G_RAID_SUBDISK_S_RESYNC);
370 g_raid_write_metadata(vol->v_softc, vol, fsd, NULL);
371 } else {
372 fsd = g_raid_get_subdisk(vol,
373 G_RAID_SUBDISK_S_UNINITIALIZED);
374 if (fsd == NULL)
375 fsd = g_raid_get_subdisk(vol,
376 G_RAID_SUBDISK_S_NEW);
377 if (fsd != NULL) {
378 fsd->sd_rebuild_pos = 0;
379 g_raid_change_subdisk_state(fsd,
380 G_RAID_SUBDISK_S_REBUILD);
381 g_raid_write_metadata(vol->v_softc,
382 vol, fsd, NULL);
383 }
384 }
385 }
386 if (fsd == NULL) {
387 G_RAID_DEBUG1(1, vol->v_softc,
388 "No failed disk to rebuild. night night.");
389 return;
390 }
391 trs->trso_failed_sd = fsd;
392 G_RAID_DEBUG1(0, vol->v_softc,
393 "Subdisk %s:%d-%s rebuild start at %jd.",
394 fsd->sd_volume->v_name, fsd->sd_pos,
395 fsd->sd_disk ? g_raid_get_diskname(fsd->sd_disk) : "[none]",
396 trs->trso_failed_sd->sd_rebuild_pos);
397 trs->trso_type = TR_RAID1_REBUILD;
398 trs->trso_buffer = malloc(g_raid1_rebuild_slab, M_TR_RAID1, M_WAITOK);
399 trs->trso_meta_update = g_raid1_rebuild_meta_update;
400 g_raid_tr_raid1_rebuild_some(tr);
401 }
402
403
404 static void
g_raid_tr_raid1_maybe_rebuild(struct g_raid_tr_object * tr,struct g_raid_subdisk * sd)405 g_raid_tr_raid1_maybe_rebuild(struct g_raid_tr_object *tr,
406 struct g_raid_subdisk *sd)
407 {
408 struct g_raid_volume *vol;
409 struct g_raid_tr_raid1_object *trs;
410 int na, nr;
411
412 /*
413 * If we're stopping, don't do anything. If we don't have at least one
414 * good disk and one bad disk, we don't do anything. And if there's a
415 * 'good disk' stored in the trs, then we're in progress and we punt.
416 * If we make it past all these checks, we need to rebuild.
417 */
418 vol = tr->tro_volume;
419 trs = (struct g_raid_tr_raid1_object *)tr;
420 if (trs->trso_stopping)
421 return;
422 na = g_raid_nsubdisks(vol, G_RAID_SUBDISK_S_ACTIVE);
423 nr = g_raid_nsubdisks(vol, G_RAID_SUBDISK_S_REBUILD) +
424 g_raid_nsubdisks(vol, G_RAID_SUBDISK_S_RESYNC);
425 switch(trs->trso_type) {
426 case TR_RAID1_NONE:
427 if (na == 0)
428 return;
429 if (nr == 0) {
430 nr = g_raid_nsubdisks(vol, G_RAID_SUBDISK_S_NEW) +
431 g_raid_nsubdisks(vol, G_RAID_SUBDISK_S_STALE) +
432 g_raid_nsubdisks(vol, G_RAID_SUBDISK_S_UNINITIALIZED);
433 if (nr == 0)
434 return;
435 }
436 g_raid_tr_raid1_rebuild_start(tr);
437 break;
438 case TR_RAID1_REBUILD:
439 if (na == 0 || nr == 0 || trs->trso_failed_sd == sd)
440 g_raid_tr_raid1_rebuild_abort(tr);
441 break;
442 case TR_RAID1_RESYNC:
443 break;
444 }
445 }
446
447 static int
g_raid_tr_event_raid1(struct g_raid_tr_object * tr,struct g_raid_subdisk * sd,u_int event)448 g_raid_tr_event_raid1(struct g_raid_tr_object *tr,
449 struct g_raid_subdisk *sd, u_int event)
450 {
451
452 g_raid_tr_update_state_raid1(tr->tro_volume, sd);
453 return (0);
454 }
455
456 static int
g_raid_tr_start_raid1(struct g_raid_tr_object * tr)457 g_raid_tr_start_raid1(struct g_raid_tr_object *tr)
458 {
459 struct g_raid_tr_raid1_object *trs;
460 struct g_raid_volume *vol;
461
462 trs = (struct g_raid_tr_raid1_object *)tr;
463 vol = tr->tro_volume;
464 trs->trso_starting = 0;
465 g_raid_tr_update_state_raid1(vol, NULL);
466 return (0);
467 }
468
469 static int
g_raid_tr_stop_raid1(struct g_raid_tr_object * tr)470 g_raid_tr_stop_raid1(struct g_raid_tr_object *tr)
471 {
472 struct g_raid_tr_raid1_object *trs;
473 struct g_raid_volume *vol;
474
475 trs = (struct g_raid_tr_raid1_object *)tr;
476 vol = tr->tro_volume;
477 trs->trso_starting = 0;
478 trs->trso_stopping = 1;
479 g_raid_tr_update_state_raid1(vol, NULL);
480 return (0);
481 }
482
483 /*
484 * Select the disk to read from. Take into account: subdisk state, running
485 * error recovery, average disk load, head position and possible cache hits.
486 */
487 #define ABS(x) (((x) >= 0) ? (x) : (-(x)))
488 static struct g_raid_subdisk *
g_raid_tr_raid1_select_read_disk(struct g_raid_volume * vol,struct bio * bp,u_int mask)489 g_raid_tr_raid1_select_read_disk(struct g_raid_volume *vol, struct bio *bp,
490 u_int mask)
491 {
492 struct g_raid_subdisk *sd, *best;
493 int i, prio, bestprio;
494
495 best = NULL;
496 bestprio = INT_MAX;
497 for (i = 0; i < vol->v_disks_count; i++) {
498 sd = &vol->v_subdisks[i];
499 if (sd->sd_state != G_RAID_SUBDISK_S_ACTIVE &&
500 ((sd->sd_state != G_RAID_SUBDISK_S_REBUILD &&
501 sd->sd_state != G_RAID_SUBDISK_S_RESYNC) ||
502 bp->bio_offset + bp->bio_length > sd->sd_rebuild_pos))
503 continue;
504 if ((mask & (1 << i)) != 0)
505 continue;
506 prio = G_RAID_SUBDISK_LOAD(sd);
507 prio += min(sd->sd_recovery, 255) << 22;
508 prio += (G_RAID_SUBDISK_S_ACTIVE - sd->sd_state) << 16;
509 /* If disk head is precisely in position - highly prefer it. */
510 if (G_RAID_SUBDISK_POS(sd) == bp->bio_offset)
511 prio -= 2 * G_RAID_SUBDISK_LOAD_SCALE;
512 else
513 /* If disk head is close to position - prefer it. */
514 if (ABS(G_RAID_SUBDISK_POS(sd) - bp->bio_offset) <
515 G_RAID_SUBDISK_TRACK_SIZE)
516 prio -= 1 * G_RAID_SUBDISK_LOAD_SCALE;
517 if (prio < bestprio) {
518 best = sd;
519 bestprio = prio;
520 }
521 }
522 return (best);
523 }
524
525 static void
g_raid_tr_iostart_raid1_read(struct g_raid_tr_object * tr,struct bio * bp)526 g_raid_tr_iostart_raid1_read(struct g_raid_tr_object *tr, struct bio *bp)
527 {
528 struct g_raid_subdisk *sd;
529 struct bio *cbp;
530
531 sd = g_raid_tr_raid1_select_read_disk(tr->tro_volume, bp, 0);
532 KASSERT(sd != NULL, ("No active disks in volume %s.",
533 tr->tro_volume->v_name));
534
535 cbp = g_clone_bio(bp);
536 if (cbp == NULL) {
537 g_raid_iodone(bp, ENOMEM);
538 return;
539 }
540
541 g_raid_subdisk_iostart(sd, cbp);
542 }
543
544 static void
g_raid_tr_iostart_raid1_write(struct g_raid_tr_object * tr,struct bio * bp)545 g_raid_tr_iostart_raid1_write(struct g_raid_tr_object *tr, struct bio *bp)
546 {
547 struct g_raid_volume *vol;
548 struct g_raid_subdisk *sd;
549 struct bio_queue_head queue;
550 struct bio *cbp;
551 int i;
552
553 vol = tr->tro_volume;
554
555 /*
556 * Allocate all bios before sending any request, so we can return
557 * ENOMEM in nice and clean way.
558 */
559 bioq_init(&queue);
560 for (i = 0; i < vol->v_disks_count; i++) {
561 sd = &vol->v_subdisks[i];
562 switch (sd->sd_state) {
563 case G_RAID_SUBDISK_S_ACTIVE:
564 break;
565 case G_RAID_SUBDISK_S_REBUILD:
566 /*
567 * When rebuilding, only part of this subdisk is
568 * writable, the rest will be written as part of the
569 * that process.
570 */
571 if (bp->bio_offset >= sd->sd_rebuild_pos)
572 continue;
573 break;
574 case G_RAID_SUBDISK_S_STALE:
575 case G_RAID_SUBDISK_S_RESYNC:
576 /*
577 * Resyncing still writes on the theory that the
578 * resync'd disk is very close and writing it will
579 * keep it that way better if we keep up while
580 * resyncing.
581 */
582 break;
583 default:
584 continue;
585 }
586 cbp = g_clone_bio(bp);
587 if (cbp == NULL)
588 goto failure;
589 cbp->bio_caller1 = sd;
590 bioq_insert_tail(&queue, cbp);
591 }
592 while ((cbp = bioq_takefirst(&queue)) != NULL) {
593 sd = cbp->bio_caller1;
594 cbp->bio_caller1 = NULL;
595 g_raid_subdisk_iostart(sd, cbp);
596 }
597 return;
598 failure:
599 while ((cbp = bioq_takefirst(&queue)) != NULL)
600 g_destroy_bio(cbp);
601 if (bp->bio_error == 0)
602 bp->bio_error = ENOMEM;
603 g_raid_iodone(bp, bp->bio_error);
604 }
605
606 static void
g_raid_tr_iostart_raid1(struct g_raid_tr_object * tr,struct bio * bp)607 g_raid_tr_iostart_raid1(struct g_raid_tr_object *tr, struct bio *bp)
608 {
609 struct g_raid_volume *vol;
610 struct g_raid_tr_raid1_object *trs;
611
612 vol = tr->tro_volume;
613 trs = (struct g_raid_tr_raid1_object *)tr;
614 if (vol->v_state != G_RAID_VOLUME_S_OPTIMAL &&
615 vol->v_state != G_RAID_VOLUME_S_SUBOPTIMAL &&
616 vol->v_state != G_RAID_VOLUME_S_DEGRADED) {
617 g_raid_iodone(bp, EIO);
618 return;
619 }
620 /*
621 * If we're rebuilding, squeeze in rebuild activity every so often,
622 * even when the disk is busy. Be sure to only count real I/O
623 * to the disk. All 'SPECIAL' I/O is traffic generated to the disk
624 * by this module.
625 */
626 if (trs->trso_failed_sd != NULL &&
627 !(bp->bio_cflags & G_RAID_BIO_FLAG_SPECIAL)) {
628 /* Make this new or running now round short. */
629 trs->trso_recover_slabs = 0;
630 if (--trs->trso_fair_io <= 0) {
631 trs->trso_fair_io = g_raid1_rebuild_fair_io;
632 g_raid_tr_raid1_rebuild_some(tr);
633 }
634 }
635 switch (bp->bio_cmd) {
636 case BIO_READ:
637 g_raid_tr_iostart_raid1_read(tr, bp);
638 break;
639 case BIO_WRITE:
640 case BIO_DELETE:
641 g_raid_tr_iostart_raid1_write(tr, bp);
642 break;
643 case BIO_FLUSH:
644 g_raid_tr_flush_common(tr, bp);
645 break;
646 default:
647 KASSERT(1 == 0, ("Invalid command here: %u (volume=%s)",
648 bp->bio_cmd, vol->v_name));
649 break;
650 }
651 }
652
653 static void
g_raid_tr_iodone_raid1(struct g_raid_tr_object * tr,struct g_raid_subdisk * sd,struct bio * bp)654 g_raid_tr_iodone_raid1(struct g_raid_tr_object *tr,
655 struct g_raid_subdisk *sd, struct bio *bp)
656 {
657 struct bio *cbp;
658 struct g_raid_subdisk *nsd;
659 struct g_raid_volume *vol;
660 struct bio *pbp;
661 struct g_raid_tr_raid1_object *trs;
662 uintptr_t *mask;
663 int error, do_write;
664
665 trs = (struct g_raid_tr_raid1_object *)tr;
666 vol = tr->tro_volume;
667 if (bp->bio_cflags & G_RAID_BIO_FLAG_SYNC) {
668 /*
669 * This operation is part of a rebuild or resync operation.
670 * See what work just got done, then schedule the next bit of
671 * work, if any. Rebuild/resync is done a little bit at a
672 * time. Either when a timeout happens, or after we get a
673 * bunch of I/Os to the disk (to make sure an active system
674 * will complete in a sane amount of time).
675 *
676 * We are setup to do differing amounts of work for each of
677 * these cases. so long as the slabs is smallish (less than
678 * 50 or so, I'd guess, but that's just a WAG), we shouldn't
679 * have any bio starvation issues. For active disks, we do
680 * 5MB of data, for inactive ones, we do 50MB.
681 */
682 if (trs->trso_type == TR_RAID1_REBUILD) {
683 if (bp->bio_cmd == BIO_READ) {
684
685 /* Immediately abort rebuild, if requested. */
686 if (trs->trso_flags & TR_RAID1_F_ABORT) {
687 trs->trso_flags &= ~TR_RAID1_F_DOING_SOME;
688 g_raid_tr_raid1_rebuild_abort(tr);
689 return;
690 }
691
692 /* On read error, skip and cross fingers. */
693 if (bp->bio_error != 0) {
694 G_RAID_LOGREQ(0, bp,
695 "Read error during rebuild (%d), "
696 "possible data loss!",
697 bp->bio_error);
698 goto rebuild_round_done;
699 }
700
701 /*
702 * The read operation finished, queue the
703 * write and get out.
704 */
705 G_RAID_LOGREQ(4, bp, "rebuild read done. %d",
706 bp->bio_error);
707 bp->bio_cmd = BIO_WRITE;
708 bp->bio_cflags = G_RAID_BIO_FLAG_SYNC;
709 G_RAID_LOGREQ(4, bp, "Queueing rebuild write.");
710 g_raid_subdisk_iostart(trs->trso_failed_sd, bp);
711 } else {
712 /*
713 * The write operation just finished. Do
714 * another. We keep cloning the master bio
715 * since it has the right buffers allocated to
716 * it.
717 */
718 G_RAID_LOGREQ(4, bp,
719 "rebuild write done. Error %d",
720 bp->bio_error);
721 nsd = trs->trso_failed_sd;
722 if (bp->bio_error != 0 ||
723 trs->trso_flags & TR_RAID1_F_ABORT) {
724 if ((trs->trso_flags &
725 TR_RAID1_F_ABORT) == 0) {
726 g_raid_tr_raid1_fail_disk(sd->sd_softc,
727 nsd, nsd->sd_disk);
728 }
729 trs->trso_flags &= ~TR_RAID1_F_DOING_SOME;
730 g_raid_tr_raid1_rebuild_abort(tr);
731 return;
732 }
733 rebuild_round_done:
734 nsd = trs->trso_failed_sd;
735 trs->trso_flags &= ~TR_RAID1_F_LOCKED;
736 g_raid_unlock_range(sd->sd_volume,
737 bp->bio_offset, bp->bio_length);
738 nsd->sd_rebuild_pos += bp->bio_length;
739 if (nsd->sd_rebuild_pos >= nsd->sd_size) {
740 g_raid_tr_raid1_rebuild_finish(tr);
741 return;
742 }
743
744 /* Abort rebuild if we are stopping */
745 if (trs->trso_stopping) {
746 trs->trso_flags &= ~TR_RAID1_F_DOING_SOME;
747 g_raid_tr_raid1_rebuild_abort(tr);
748 return;
749 }
750
751 if (--trs->trso_meta_update <= 0) {
752 g_raid_write_metadata(vol->v_softc,
753 vol, nsd, nsd->sd_disk);
754 trs->trso_meta_update =
755 g_raid1_rebuild_meta_update;
756 }
757 trs->trso_flags &= ~TR_RAID1_F_DOING_SOME;
758 if (--trs->trso_recover_slabs <= 0)
759 return;
760 g_raid_tr_raid1_rebuild_some(tr);
761 }
762 } else if (trs->trso_type == TR_RAID1_RESYNC) {
763 /*
764 * read good sd, read bad sd in parallel. when both
765 * done, compare the buffers. write good to the bad
766 * if different. do the next bit of work.
767 */
768 panic("Somehow, we think we're doing a resync");
769 }
770 return;
771 }
772 pbp = bp->bio_parent;
773 pbp->bio_inbed++;
774 if (bp->bio_cmd == BIO_READ && bp->bio_error != 0) {
775 /*
776 * Read failed on first drive. Retry the read error on
777 * another disk drive, if available, before erroring out the
778 * read.
779 */
780 sd->sd_disk->d_read_errs++;
781 G_RAID_LOGREQ(0, bp,
782 "Read error (%d), %d read errors total",
783 bp->bio_error, sd->sd_disk->d_read_errs);
784
785 /*
786 * If there are too many read errors, we move to degraded.
787 * XXX Do we want to FAIL the drive (eg, make the user redo
788 * everything to get it back in sync), or just degrade the
789 * drive, which kicks off a resync?
790 */
791 do_write = 1;
792 if (sd->sd_disk->d_read_errs > g_raid_read_err_thresh) {
793 g_raid_tr_raid1_fail_disk(sd->sd_softc, sd, sd->sd_disk);
794 if (pbp->bio_children == 1)
795 do_write = 0;
796 }
797
798 /*
799 * Find the other disk, and try to do the I/O to it.
800 */
801 mask = (uintptr_t *)(&pbp->bio_driver2);
802 if (pbp->bio_children == 1) {
803 /* Save original subdisk. */
804 pbp->bio_driver1 = do_write ? sd : NULL;
805 *mask = 0;
806 }
807 *mask |= 1 << sd->sd_pos;
808 nsd = g_raid_tr_raid1_select_read_disk(vol, pbp, *mask);
809 if (nsd != NULL && (cbp = g_clone_bio(pbp)) != NULL) {
810 g_destroy_bio(bp);
811 G_RAID_LOGREQ(2, cbp, "Retrying read from %d",
812 nsd->sd_pos);
813 if (pbp->bio_children == 2 && do_write) {
814 sd->sd_recovery++;
815 cbp->bio_caller1 = nsd;
816 pbp->bio_pflags = G_RAID_BIO_FLAG_LOCKED;
817 /* Lock callback starts I/O */
818 g_raid_lock_range(sd->sd_volume,
819 cbp->bio_offset, cbp->bio_length, pbp, cbp);
820 } else {
821 g_raid_subdisk_iostart(nsd, cbp);
822 }
823 return;
824 }
825 /*
826 * We can't retry. Return the original error by falling
827 * through. This will happen when there's only one good disk.
828 * We don't need to fail the raid, since its actual state is
829 * based on the state of the subdisks.
830 */
831 G_RAID_LOGREQ(2, bp, "Couldn't retry read, failing it");
832 }
833 if (bp->bio_cmd == BIO_READ &&
834 bp->bio_error == 0 &&
835 pbp->bio_children > 1 &&
836 pbp->bio_driver1 != NULL) {
837 /*
838 * If it was a read, and bio_children is >1, then we just
839 * recovered the data from the second drive. We should try to
840 * write that data to the first drive if sector remapping is
841 * enabled. A write should put the data in a new place on the
842 * disk, remapping the bad sector. Do we need to do that by
843 * queueing a request to the main worker thread? It doesn't
844 * affect the return code of this current read, and can be
845 * done at our leisure. However, to make the code simpler, it
846 * is done synchronously.
847 */
848 G_RAID_LOGREQ(3, bp, "Recovered data from other drive");
849 cbp = g_clone_bio(pbp);
850 if (cbp != NULL) {
851 g_destroy_bio(bp);
852 cbp->bio_cmd = BIO_WRITE;
853 cbp->bio_cflags = G_RAID_BIO_FLAG_REMAP;
854 G_RAID_LOGREQ(2, cbp,
855 "Attempting bad sector remap on failing drive.");
856 g_raid_subdisk_iostart(pbp->bio_driver1, cbp);
857 return;
858 }
859 }
860 if (pbp->bio_pflags & G_RAID_BIO_FLAG_LOCKED) {
861 /*
862 * We're done with a recovery, mark the range as unlocked.
863 * For any write errors, we aggressively fail the disk since
864 * there was both a READ and a WRITE error at this location.
865 * Both types of errors generally indicates the drive is on
866 * the verge of total failure anyway. Better to stop trusting
867 * it now. However, we need to reset error to 0 in that case
868 * because we're not failing the original I/O which succeeded.
869 */
870 if (bp->bio_cmd == BIO_WRITE && bp->bio_error) {
871 G_RAID_LOGREQ(0, bp, "Remap write failed: "
872 "failing subdisk.");
873 g_raid_tr_raid1_fail_disk(sd->sd_softc, sd, sd->sd_disk);
874 bp->bio_error = 0;
875 }
876 if (pbp->bio_driver1 != NULL) {
877 ((struct g_raid_subdisk *)pbp->bio_driver1)
878 ->sd_recovery--;
879 }
880 G_RAID_LOGREQ(2, bp, "REMAP done %d.", bp->bio_error);
881 g_raid_unlock_range(sd->sd_volume, bp->bio_offset,
882 bp->bio_length);
883 }
884 if (pbp->bio_cmd != BIO_READ) {
885 if (pbp->bio_inbed == 1 || pbp->bio_error != 0)
886 pbp->bio_error = bp->bio_error;
887 if (pbp->bio_cmd == BIO_WRITE && bp->bio_error != 0) {
888 G_RAID_LOGREQ(0, bp, "Write failed: failing subdisk.");
889 g_raid_tr_raid1_fail_disk(sd->sd_softc, sd, sd->sd_disk);
890 }
891 error = pbp->bio_error;
892 } else
893 error = bp->bio_error;
894 g_destroy_bio(bp);
895 if (pbp->bio_children == pbp->bio_inbed) {
896 pbp->bio_completed = pbp->bio_length;
897 g_raid_iodone(pbp, error);
898 }
899 }
900
901 static int
g_raid_tr_kerneldump_raid1(struct g_raid_tr_object * tr,void * virtual,vm_offset_t physical,off_t offset,size_t length)902 g_raid_tr_kerneldump_raid1(struct g_raid_tr_object *tr,
903 void *virtual, vm_offset_t physical, off_t offset, size_t length)
904 {
905 struct g_raid_volume *vol;
906 struct g_raid_subdisk *sd;
907 int error, i, ok;
908
909 vol = tr->tro_volume;
910 error = 0;
911 ok = 0;
912 for (i = 0; i < vol->v_disks_count; i++) {
913 sd = &vol->v_subdisks[i];
914 switch (sd->sd_state) {
915 case G_RAID_SUBDISK_S_ACTIVE:
916 break;
917 case G_RAID_SUBDISK_S_REBUILD:
918 /*
919 * When rebuilding, only part of this subdisk is
920 * writable, the rest will be written as part of the
921 * that process.
922 */
923 if (offset >= sd->sd_rebuild_pos)
924 continue;
925 break;
926 case G_RAID_SUBDISK_S_STALE:
927 case G_RAID_SUBDISK_S_RESYNC:
928 /*
929 * Resyncing still writes on the theory that the
930 * resync'd disk is very close and writing it will
931 * keep it that way better if we keep up while
932 * resyncing.
933 */
934 break;
935 default:
936 continue;
937 }
938 error = g_raid_subdisk_kerneldump(sd,
939 virtual, physical, offset, length);
940 if (error == 0)
941 ok++;
942 }
943 return (ok > 0 ? 0 : error);
944 }
945
946 static int
g_raid_tr_locked_raid1(struct g_raid_tr_object * tr,void * argp)947 g_raid_tr_locked_raid1(struct g_raid_tr_object *tr, void *argp)
948 {
949 struct bio *bp;
950 struct g_raid_subdisk *sd;
951
952 bp = (struct bio *)argp;
953 sd = (struct g_raid_subdisk *)bp->bio_caller1;
954 g_raid_subdisk_iostart(sd, bp);
955
956 return (0);
957 }
958
959 static int
g_raid_tr_idle_raid1(struct g_raid_tr_object * tr)960 g_raid_tr_idle_raid1(struct g_raid_tr_object *tr)
961 {
962 struct g_raid_tr_raid1_object *trs;
963
964 trs = (struct g_raid_tr_raid1_object *)tr;
965 trs->trso_fair_io = g_raid1_rebuild_fair_io;
966 trs->trso_recover_slabs = g_raid1_rebuild_cluster_idle;
967 if (trs->trso_type == TR_RAID1_REBUILD)
968 g_raid_tr_raid1_rebuild_some(tr);
969 return (0);
970 }
971
972 static int
g_raid_tr_free_raid1(struct g_raid_tr_object * tr)973 g_raid_tr_free_raid1(struct g_raid_tr_object *tr)
974 {
975 struct g_raid_tr_raid1_object *trs;
976
977 trs = (struct g_raid_tr_raid1_object *)tr;
978
979 if (trs->trso_buffer != NULL) {
980 free(trs->trso_buffer, M_TR_RAID1);
981 trs->trso_buffer = NULL;
982 }
983 return (0);
984 }
985
986 G_RAID_TR_DECLARE(raid1, "RAID1");
987