1 /*-
2 * SPDX-License-Identifier: BSD-2-Clause
3 *
4 * Copyright (c) 2010 Alexander Motin <mav@FreeBSD.org>
5 * All rights reserved.
6 *
7 * Redistribution and use in source and binary forms, with or without
8 * modification, are permitted provided that the following conditions
9 * are met:
10 * 1. Redistributions of source code must retain the above copyright
11 * notice, this list of conditions and the following disclaimer.
12 * 2. Redistributions in binary form must reproduce the above copyright
13 * notice, this list of conditions and the following disclaimer in the
14 * documentation and/or other materials provided with the distribution.
15 *
16 * THIS SOFTWARE IS PROVIDED BY THE AUTHORS AND CONTRIBUTORS ``AS IS'' AND
17 * ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE
18 * IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE
19 * ARE DISCLAIMED. IN NO EVENT SHALL THE AUTHORS OR CONTRIBUTORS BE LIABLE
20 * FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL
21 * DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS
22 * OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION)
23 * HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT
24 * LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY
25 * OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF
26 * SUCH DAMAGE.
27 */
28
29 #include <sys/cdefs.h>
30 #include <sys/param.h>
31 #include <sys/bio.h>
32 #include <sys/endian.h>
33 #include <sys/kernel.h>
34 #include <sys/kobj.h>
35 #include <sys/limits.h>
36 #include <sys/lock.h>
37 #include <sys/malloc.h>
38 #include <sys/mutex.h>
39 #include <sys/sysctl.h>
40 #include <sys/systm.h>
41 #include <geom/geom.h>
42 #include <geom/geom_dbg.h>
43 #include "geom/raid/g_raid.h"
44 #include "g_raid_tr_if.h"
45
46 SYSCTL_DECL(_kern_geom_raid_raid1);
47
48 #define RAID1_REBUILD_SLAB (1 << 20) /* One transation in a rebuild */
49 static int g_raid1_rebuild_slab = RAID1_REBUILD_SLAB;
50 SYSCTL_UINT(_kern_geom_raid_raid1, OID_AUTO, rebuild_slab_size, CTLFLAG_RWTUN,
51 &g_raid1_rebuild_slab, 0,
52 "Amount of the disk to rebuild each read/write cycle of the rebuild.");
53
54 #define RAID1_REBUILD_FAIR_IO 20 /* use 1/x of the available I/O */
55 static int g_raid1_rebuild_fair_io = RAID1_REBUILD_FAIR_IO;
56 SYSCTL_UINT(_kern_geom_raid_raid1, OID_AUTO, rebuild_fair_io, CTLFLAG_RWTUN,
57 &g_raid1_rebuild_fair_io, 0,
58 "Fraction of the I/O bandwidth to use when disk busy for rebuild.");
59
60 #define RAID1_REBUILD_CLUSTER_IDLE 100
61 static int g_raid1_rebuild_cluster_idle = RAID1_REBUILD_CLUSTER_IDLE;
62 SYSCTL_UINT(_kern_geom_raid_raid1, OID_AUTO, rebuild_cluster_idle, CTLFLAG_RWTUN,
63 &g_raid1_rebuild_cluster_idle, 0,
64 "Number of slabs to do each time we trigger a rebuild cycle");
65
66 #define RAID1_REBUILD_META_UPDATE 1024 /* update meta data every 1GB or so */
67 static int g_raid1_rebuild_meta_update = RAID1_REBUILD_META_UPDATE;
68 SYSCTL_UINT(_kern_geom_raid_raid1, OID_AUTO, rebuild_meta_update, CTLFLAG_RWTUN,
69 &g_raid1_rebuild_meta_update, 0,
70 "When to update the meta data.");
71
72 static MALLOC_DEFINE(M_TR_RAID1, "tr_raid1_data", "GEOM_RAID RAID1 data");
73
74 #define TR_RAID1_NONE 0
75 #define TR_RAID1_REBUILD 1
76 #define TR_RAID1_RESYNC 2
77
78 #define TR_RAID1_F_DOING_SOME 0x1
79 #define TR_RAID1_F_LOCKED 0x2
80 #define TR_RAID1_F_ABORT 0x4
81
82 struct g_raid_tr_raid1_object {
83 struct g_raid_tr_object trso_base;
84 int trso_starting;
85 int trso_stopping;
86 int trso_type;
87 int trso_recover_slabs; /* slabs before rest */
88 int trso_fair_io;
89 int trso_meta_update;
90 int trso_flags;
91 struct g_raid_subdisk *trso_failed_sd; /* like per volume */
92 void *trso_buffer; /* Buffer space */
93 struct bio trso_bio;
94 };
95
96 static g_raid_tr_taste_t g_raid_tr_taste_raid1;
97 static g_raid_tr_event_t g_raid_tr_event_raid1;
98 static g_raid_tr_start_t g_raid_tr_start_raid1;
99 static g_raid_tr_stop_t g_raid_tr_stop_raid1;
100 static g_raid_tr_iostart_t g_raid_tr_iostart_raid1;
101 static g_raid_tr_iodone_t g_raid_tr_iodone_raid1;
102 static g_raid_tr_kerneldump_t g_raid_tr_kerneldump_raid1;
103 static g_raid_tr_locked_t g_raid_tr_locked_raid1;
104 static g_raid_tr_idle_t g_raid_tr_idle_raid1;
105 static g_raid_tr_free_t g_raid_tr_free_raid1;
106
107 static kobj_method_t g_raid_tr_raid1_methods[] = {
108 KOBJMETHOD(g_raid_tr_taste, g_raid_tr_taste_raid1),
109 KOBJMETHOD(g_raid_tr_event, g_raid_tr_event_raid1),
110 KOBJMETHOD(g_raid_tr_start, g_raid_tr_start_raid1),
111 KOBJMETHOD(g_raid_tr_stop, g_raid_tr_stop_raid1),
112 KOBJMETHOD(g_raid_tr_iostart, g_raid_tr_iostart_raid1),
113 KOBJMETHOD(g_raid_tr_iodone, g_raid_tr_iodone_raid1),
114 KOBJMETHOD(g_raid_tr_kerneldump, g_raid_tr_kerneldump_raid1),
115 KOBJMETHOD(g_raid_tr_locked, g_raid_tr_locked_raid1),
116 KOBJMETHOD(g_raid_tr_idle, g_raid_tr_idle_raid1),
117 KOBJMETHOD(g_raid_tr_free, g_raid_tr_free_raid1),
118 { 0, 0 }
119 };
120
121 static struct g_raid_tr_class g_raid_tr_raid1_class = {
122 "RAID1",
123 g_raid_tr_raid1_methods,
124 sizeof(struct g_raid_tr_raid1_object),
125 .trc_enable = 1,
126 .trc_priority = 100,
127 .trc_accept_unmapped = 1
128 };
129
130 static void g_raid_tr_raid1_rebuild_abort(struct g_raid_tr_object *tr);
131 static void g_raid_tr_raid1_maybe_rebuild(struct g_raid_tr_object *tr,
132 struct g_raid_subdisk *sd);
133
134 static int
g_raid_tr_taste_raid1(struct g_raid_tr_object * tr,struct g_raid_volume * vol)135 g_raid_tr_taste_raid1(struct g_raid_tr_object *tr, struct g_raid_volume *vol)
136 {
137 struct g_raid_tr_raid1_object *trs;
138
139 trs = (struct g_raid_tr_raid1_object *)tr;
140 if (tr->tro_volume->v_raid_level != G_RAID_VOLUME_RL_RAID1 ||
141 (tr->tro_volume->v_raid_level_qualifier != G_RAID_VOLUME_RLQ_R1SM &&
142 tr->tro_volume->v_raid_level_qualifier != G_RAID_VOLUME_RLQ_R1MM))
143 return (G_RAID_TR_TASTE_FAIL);
144 trs->trso_starting = 1;
145 return (G_RAID_TR_TASTE_SUCCEED);
146 }
147
148 static int
g_raid_tr_update_state_raid1(struct g_raid_volume * vol,struct g_raid_subdisk * sd)149 g_raid_tr_update_state_raid1(struct g_raid_volume *vol,
150 struct g_raid_subdisk *sd)
151 {
152 struct g_raid_tr_raid1_object *trs;
153 struct g_raid_softc *sc;
154 struct g_raid_subdisk *tsd, *bestsd;
155 u_int s;
156 int i, na, ns;
157
158 sc = vol->v_softc;
159 trs = (struct g_raid_tr_raid1_object *)vol->v_tr;
160 if (trs->trso_stopping &&
161 (trs->trso_flags & TR_RAID1_F_DOING_SOME) == 0)
162 s = G_RAID_VOLUME_S_STOPPED;
163 else if (trs->trso_starting)
164 s = G_RAID_VOLUME_S_STARTING;
165 else {
166 /* Make sure we have at least one ACTIVE disk. */
167 na = g_raid_nsubdisks(vol, G_RAID_SUBDISK_S_ACTIVE);
168 if (na == 0) {
169 /*
170 * Critical situation! We have no any active disk!
171 * Choose the best disk we have to make it active.
172 */
173 bestsd = &vol->v_subdisks[0];
174 for (i = 1; i < vol->v_disks_count; i++) {
175 tsd = &vol->v_subdisks[i];
176 if (tsd->sd_state > bestsd->sd_state)
177 bestsd = tsd;
178 else if (tsd->sd_state == bestsd->sd_state &&
179 (tsd->sd_state == G_RAID_SUBDISK_S_REBUILD ||
180 tsd->sd_state == G_RAID_SUBDISK_S_RESYNC) &&
181 tsd->sd_rebuild_pos > bestsd->sd_rebuild_pos)
182 bestsd = tsd;
183 }
184 if (bestsd->sd_state >= G_RAID_SUBDISK_S_UNINITIALIZED) {
185 /* We found reasonable candidate. */
186 G_RAID_DEBUG1(1, sc,
187 "Promote subdisk %s:%d from %s to ACTIVE.",
188 vol->v_name, bestsd->sd_pos,
189 g_raid_subdisk_state2str(bestsd->sd_state));
190 g_raid_change_subdisk_state(bestsd,
191 G_RAID_SUBDISK_S_ACTIVE);
192 g_raid_write_metadata(sc,
193 vol, bestsd, bestsd->sd_disk);
194 }
195 }
196 na = g_raid_nsubdisks(vol, G_RAID_SUBDISK_S_ACTIVE);
197 ns = g_raid_nsubdisks(vol, G_RAID_SUBDISK_S_STALE) +
198 g_raid_nsubdisks(vol, G_RAID_SUBDISK_S_RESYNC);
199 if (na == vol->v_disks_count)
200 s = G_RAID_VOLUME_S_OPTIMAL;
201 else if (na + ns == vol->v_disks_count)
202 s = G_RAID_VOLUME_S_SUBOPTIMAL;
203 else if (na > 0)
204 s = G_RAID_VOLUME_S_DEGRADED;
205 else
206 s = G_RAID_VOLUME_S_BROKEN;
207 g_raid_tr_raid1_maybe_rebuild(vol->v_tr, sd);
208 }
209 if (s != vol->v_state) {
210 g_raid_event_send(vol, G_RAID_VOLUME_S_ALIVE(s) ?
211 G_RAID_VOLUME_E_UP : G_RAID_VOLUME_E_DOWN,
212 G_RAID_EVENT_VOLUME);
213 g_raid_change_volume_state(vol, s);
214 if (!trs->trso_starting && !trs->trso_stopping)
215 g_raid_write_metadata(sc, vol, NULL, NULL);
216 }
217 return (0);
218 }
219
220 static void
g_raid_tr_raid1_fail_disk(struct g_raid_softc * sc,struct g_raid_subdisk * sd,struct g_raid_disk * disk)221 g_raid_tr_raid1_fail_disk(struct g_raid_softc *sc, struct g_raid_subdisk *sd,
222 struct g_raid_disk *disk)
223 {
224 /*
225 * We don't fail the last disk in the pack, since it still has decent
226 * data on it and that's better than failing the disk if it is the root
227 * file system.
228 *
229 * XXX should this be controlled via a tunable? It makes sense for
230 * the volume that has / on it. I can't think of a case where we'd
231 * want the volume to go away on this kind of event.
232 */
233 if (g_raid_nsubdisks(sd->sd_volume, G_RAID_SUBDISK_S_ACTIVE) == 1 &&
234 g_raid_get_subdisk(sd->sd_volume, G_RAID_SUBDISK_S_ACTIVE) == sd)
235 return;
236 g_raid_fail_disk(sc, sd, disk);
237 }
238
239 static void
g_raid_tr_raid1_rebuild_some(struct g_raid_tr_object * tr)240 g_raid_tr_raid1_rebuild_some(struct g_raid_tr_object *tr)
241 {
242 struct g_raid_tr_raid1_object *trs;
243 struct g_raid_subdisk *sd, *good_sd;
244 struct bio *bp;
245
246 trs = (struct g_raid_tr_raid1_object *)tr;
247 if (trs->trso_flags & TR_RAID1_F_DOING_SOME)
248 return;
249 sd = trs->trso_failed_sd;
250 good_sd = g_raid_get_subdisk(sd->sd_volume, G_RAID_SUBDISK_S_ACTIVE);
251 if (good_sd == NULL) {
252 g_raid_tr_raid1_rebuild_abort(tr);
253 return;
254 }
255 bp = &trs->trso_bio;
256 memset(bp, 0, sizeof(*bp));
257 bp->bio_offset = sd->sd_rebuild_pos;
258 bp->bio_length = MIN(g_raid1_rebuild_slab,
259 sd->sd_size - sd->sd_rebuild_pos);
260 bp->bio_data = trs->trso_buffer;
261 bp->bio_cmd = BIO_READ;
262 bp->bio_cflags = G_RAID_BIO_FLAG_SYNC;
263 bp->bio_caller1 = good_sd;
264 trs->trso_flags |= TR_RAID1_F_DOING_SOME;
265 trs->trso_flags |= TR_RAID1_F_LOCKED;
266 g_raid_lock_range(sd->sd_volume, /* Lock callback starts I/O */
267 bp->bio_offset, bp->bio_length, NULL, bp);
268 }
269
270 static void
g_raid_tr_raid1_rebuild_done(struct g_raid_tr_raid1_object * trs)271 g_raid_tr_raid1_rebuild_done(struct g_raid_tr_raid1_object *trs)
272 {
273 struct g_raid_volume *vol;
274 struct g_raid_subdisk *sd;
275
276 vol = trs->trso_base.tro_volume;
277 sd = trs->trso_failed_sd;
278 g_raid_write_metadata(vol->v_softc, vol, sd, sd->sd_disk);
279 free(trs->trso_buffer, M_TR_RAID1);
280 trs->trso_buffer = NULL;
281 trs->trso_flags &= ~TR_RAID1_F_DOING_SOME;
282 trs->trso_type = TR_RAID1_NONE;
283 trs->trso_recover_slabs = 0;
284 trs->trso_failed_sd = NULL;
285 g_raid_tr_update_state_raid1(vol, NULL);
286 }
287
288 static void
g_raid_tr_raid1_rebuild_finish(struct g_raid_tr_object * tr)289 g_raid_tr_raid1_rebuild_finish(struct g_raid_tr_object *tr)
290 {
291 struct g_raid_tr_raid1_object *trs;
292 struct g_raid_subdisk *sd;
293
294 trs = (struct g_raid_tr_raid1_object *)tr;
295 sd = trs->trso_failed_sd;
296 G_RAID_DEBUG1(0, tr->tro_volume->v_softc,
297 "Subdisk %s:%d-%s rebuild completed.",
298 sd->sd_volume->v_name, sd->sd_pos,
299 sd->sd_disk ? g_raid_get_diskname(sd->sd_disk) : "[none]");
300 g_raid_change_subdisk_state(sd, G_RAID_SUBDISK_S_ACTIVE);
301 sd->sd_rebuild_pos = 0;
302 g_raid_tr_raid1_rebuild_done(trs);
303 }
304
305 static void
g_raid_tr_raid1_rebuild_abort(struct g_raid_tr_object * tr)306 g_raid_tr_raid1_rebuild_abort(struct g_raid_tr_object *tr)
307 {
308 struct g_raid_tr_raid1_object *trs;
309 struct g_raid_subdisk *sd;
310 struct g_raid_volume *vol;
311 off_t len;
312
313 vol = tr->tro_volume;
314 trs = (struct g_raid_tr_raid1_object *)tr;
315 sd = trs->trso_failed_sd;
316 if (trs->trso_flags & TR_RAID1_F_DOING_SOME) {
317 G_RAID_DEBUG1(1, vol->v_softc,
318 "Subdisk %s:%d-%s rebuild is aborting.",
319 sd->sd_volume->v_name, sd->sd_pos,
320 sd->sd_disk ? g_raid_get_diskname(sd->sd_disk) : "[none]");
321 trs->trso_flags |= TR_RAID1_F_ABORT;
322 } else {
323 G_RAID_DEBUG1(0, vol->v_softc,
324 "Subdisk %s:%d-%s rebuild aborted.",
325 sd->sd_volume->v_name, sd->sd_pos,
326 sd->sd_disk ? g_raid_get_diskname(sd->sd_disk) : "[none]");
327 trs->trso_flags &= ~TR_RAID1_F_ABORT;
328 if (trs->trso_flags & TR_RAID1_F_LOCKED) {
329 trs->trso_flags &= ~TR_RAID1_F_LOCKED;
330 len = MIN(g_raid1_rebuild_slab,
331 sd->sd_size - sd->sd_rebuild_pos);
332 g_raid_unlock_range(tr->tro_volume,
333 sd->sd_rebuild_pos, len);
334 }
335 g_raid_tr_raid1_rebuild_done(trs);
336 }
337 }
338
339 static void
g_raid_tr_raid1_rebuild_start(struct g_raid_tr_object * tr)340 g_raid_tr_raid1_rebuild_start(struct g_raid_tr_object *tr)
341 {
342 struct g_raid_volume *vol;
343 struct g_raid_tr_raid1_object *trs;
344 struct g_raid_subdisk *sd, *fsd;
345
346 vol = tr->tro_volume;
347 trs = (struct g_raid_tr_raid1_object *)tr;
348 if (trs->trso_failed_sd) {
349 G_RAID_DEBUG1(1, vol->v_softc,
350 "Already rebuild in start rebuild. pos %jd\n",
351 (intmax_t)trs->trso_failed_sd->sd_rebuild_pos);
352 return;
353 }
354 sd = g_raid_get_subdisk(vol, G_RAID_SUBDISK_S_ACTIVE);
355 if (sd == NULL) {
356 G_RAID_DEBUG1(1, vol->v_softc,
357 "No active disk to rebuild. night night.");
358 return;
359 }
360 fsd = g_raid_get_subdisk(vol, G_RAID_SUBDISK_S_RESYNC);
361 if (fsd == NULL)
362 fsd = g_raid_get_subdisk(vol, G_RAID_SUBDISK_S_REBUILD);
363 if (fsd == NULL) {
364 fsd = g_raid_get_subdisk(vol, G_RAID_SUBDISK_S_STALE);
365 if (fsd != NULL) {
366 fsd->sd_rebuild_pos = 0;
367 g_raid_change_subdisk_state(fsd,
368 G_RAID_SUBDISK_S_RESYNC);
369 g_raid_write_metadata(vol->v_softc, vol, fsd, NULL);
370 } else {
371 fsd = g_raid_get_subdisk(vol,
372 G_RAID_SUBDISK_S_UNINITIALIZED);
373 if (fsd == NULL)
374 fsd = g_raid_get_subdisk(vol,
375 G_RAID_SUBDISK_S_NEW);
376 if (fsd != NULL) {
377 fsd->sd_rebuild_pos = 0;
378 g_raid_change_subdisk_state(fsd,
379 G_RAID_SUBDISK_S_REBUILD);
380 g_raid_write_metadata(vol->v_softc,
381 vol, fsd, NULL);
382 }
383 }
384 }
385 if (fsd == NULL) {
386 G_RAID_DEBUG1(1, vol->v_softc,
387 "No failed disk to rebuild. night night.");
388 return;
389 }
390 trs->trso_failed_sd = fsd;
391 G_RAID_DEBUG1(0, vol->v_softc,
392 "Subdisk %s:%d-%s rebuild start at %jd.",
393 fsd->sd_volume->v_name, fsd->sd_pos,
394 fsd->sd_disk ? g_raid_get_diskname(fsd->sd_disk) : "[none]",
395 trs->trso_failed_sd->sd_rebuild_pos);
396 trs->trso_type = TR_RAID1_REBUILD;
397 trs->trso_buffer = malloc(g_raid1_rebuild_slab, M_TR_RAID1, M_WAITOK);
398 trs->trso_meta_update = g_raid1_rebuild_meta_update;
399 g_raid_tr_raid1_rebuild_some(tr);
400 }
401
402 static void
g_raid_tr_raid1_maybe_rebuild(struct g_raid_tr_object * tr,struct g_raid_subdisk * sd)403 g_raid_tr_raid1_maybe_rebuild(struct g_raid_tr_object *tr,
404 struct g_raid_subdisk *sd)
405 {
406 struct g_raid_volume *vol;
407 struct g_raid_tr_raid1_object *trs;
408 int na, nr;
409
410 /*
411 * If we're stopping, don't do anything. If we don't have at least one
412 * good disk and one bad disk, we don't do anything. And if there's a
413 * 'good disk' stored in the trs, then we're in progress and we punt.
414 * If we make it past all these checks, we need to rebuild.
415 */
416 vol = tr->tro_volume;
417 trs = (struct g_raid_tr_raid1_object *)tr;
418 if (trs->trso_stopping)
419 return;
420 na = g_raid_nsubdisks(vol, G_RAID_SUBDISK_S_ACTIVE);
421 nr = g_raid_nsubdisks(vol, G_RAID_SUBDISK_S_REBUILD) +
422 g_raid_nsubdisks(vol, G_RAID_SUBDISK_S_RESYNC);
423 switch(trs->trso_type) {
424 case TR_RAID1_NONE:
425 if (na == 0)
426 return;
427 if (nr == 0) {
428 nr = g_raid_nsubdisks(vol, G_RAID_SUBDISK_S_NEW) +
429 g_raid_nsubdisks(vol, G_RAID_SUBDISK_S_STALE) +
430 g_raid_nsubdisks(vol, G_RAID_SUBDISK_S_UNINITIALIZED);
431 if (nr == 0)
432 return;
433 }
434 g_raid_tr_raid1_rebuild_start(tr);
435 break;
436 case TR_RAID1_REBUILD:
437 if (na == 0 || nr == 0 || trs->trso_failed_sd == sd)
438 g_raid_tr_raid1_rebuild_abort(tr);
439 break;
440 case TR_RAID1_RESYNC:
441 break;
442 }
443 }
444
445 static int
g_raid_tr_event_raid1(struct g_raid_tr_object * tr,struct g_raid_subdisk * sd,u_int event)446 g_raid_tr_event_raid1(struct g_raid_tr_object *tr,
447 struct g_raid_subdisk *sd, u_int event)
448 {
449
450 g_raid_tr_update_state_raid1(tr->tro_volume, sd);
451 return (0);
452 }
453
454 static int
g_raid_tr_start_raid1(struct g_raid_tr_object * tr)455 g_raid_tr_start_raid1(struct g_raid_tr_object *tr)
456 {
457 struct g_raid_tr_raid1_object *trs;
458 struct g_raid_volume *vol;
459
460 trs = (struct g_raid_tr_raid1_object *)tr;
461 vol = tr->tro_volume;
462 trs->trso_starting = 0;
463 g_raid_tr_update_state_raid1(vol, NULL);
464 return (0);
465 }
466
467 static int
g_raid_tr_stop_raid1(struct g_raid_tr_object * tr)468 g_raid_tr_stop_raid1(struct g_raid_tr_object *tr)
469 {
470 struct g_raid_tr_raid1_object *trs;
471 struct g_raid_volume *vol;
472
473 trs = (struct g_raid_tr_raid1_object *)tr;
474 vol = tr->tro_volume;
475 trs->trso_starting = 0;
476 trs->trso_stopping = 1;
477 g_raid_tr_update_state_raid1(vol, NULL);
478 return (0);
479 }
480
481 /*
482 * Select the disk to read from. Take into account: subdisk state, running
483 * error recovery, average disk load, head position and possible cache hits.
484 */
485 #define ABS(x) (((x) >= 0) ? (x) : (-(x)))
486 static struct g_raid_subdisk *
g_raid_tr_raid1_select_read_disk(struct g_raid_volume * vol,struct bio * bp,u_int mask)487 g_raid_tr_raid1_select_read_disk(struct g_raid_volume *vol, struct bio *bp,
488 u_int mask)
489 {
490 struct g_raid_subdisk *sd, *best;
491 int i, prio, bestprio;
492
493 best = NULL;
494 bestprio = INT_MAX;
495 for (i = 0; i < vol->v_disks_count; i++) {
496 sd = &vol->v_subdisks[i];
497 if (sd->sd_state != G_RAID_SUBDISK_S_ACTIVE &&
498 ((sd->sd_state != G_RAID_SUBDISK_S_REBUILD &&
499 sd->sd_state != G_RAID_SUBDISK_S_RESYNC) ||
500 bp->bio_offset + bp->bio_length > sd->sd_rebuild_pos))
501 continue;
502 if ((mask & (1 << i)) != 0)
503 continue;
504 prio = G_RAID_SUBDISK_LOAD(sd);
505 prio += min(sd->sd_recovery, 255) << 22;
506 prio += (G_RAID_SUBDISK_S_ACTIVE - sd->sd_state) << 16;
507 /* If disk head is precisely in position - highly prefer it. */
508 if (G_RAID_SUBDISK_POS(sd) == bp->bio_offset)
509 prio -= 2 * G_RAID_SUBDISK_LOAD_SCALE;
510 else
511 /* If disk head is close to position - prefer it. */
512 if (ABS(G_RAID_SUBDISK_POS(sd) - bp->bio_offset) <
513 G_RAID_SUBDISK_TRACK_SIZE)
514 prio -= 1 * G_RAID_SUBDISK_LOAD_SCALE;
515 if (prio < bestprio) {
516 best = sd;
517 bestprio = prio;
518 }
519 }
520 return (best);
521 }
522
523 static void
g_raid_tr_iostart_raid1_read(struct g_raid_tr_object * tr,struct bio * bp)524 g_raid_tr_iostart_raid1_read(struct g_raid_tr_object *tr, struct bio *bp)
525 {
526 struct g_raid_subdisk *sd;
527 struct bio *cbp;
528
529 sd = g_raid_tr_raid1_select_read_disk(tr->tro_volume, bp, 0);
530 KASSERT(sd != NULL, ("No active disks in volume %s.",
531 tr->tro_volume->v_name));
532
533 cbp = g_clone_bio(bp);
534 if (cbp == NULL) {
535 g_raid_iodone(bp, ENOMEM);
536 return;
537 }
538
539 g_raid_subdisk_iostart(sd, cbp);
540 }
541
542 static void
g_raid_tr_iostart_raid1_write(struct g_raid_tr_object * tr,struct bio * bp)543 g_raid_tr_iostart_raid1_write(struct g_raid_tr_object *tr, struct bio *bp)
544 {
545 struct g_raid_volume *vol;
546 struct g_raid_subdisk *sd;
547 struct bio_queue_head queue;
548 struct bio *cbp;
549 int i;
550
551 vol = tr->tro_volume;
552
553 /*
554 * Allocate all bios before sending any request, so we can return
555 * ENOMEM in nice and clean way.
556 */
557 bioq_init(&queue);
558 for (i = 0; i < vol->v_disks_count; i++) {
559 sd = &vol->v_subdisks[i];
560 switch (sd->sd_state) {
561 case G_RAID_SUBDISK_S_ACTIVE:
562 break;
563 case G_RAID_SUBDISK_S_REBUILD:
564 /*
565 * When rebuilding, only part of this subdisk is
566 * writable, the rest will be written as part of the
567 * that process.
568 */
569 if (bp->bio_offset >= sd->sd_rebuild_pos)
570 continue;
571 break;
572 case G_RAID_SUBDISK_S_STALE:
573 case G_RAID_SUBDISK_S_RESYNC:
574 /*
575 * Resyncing still writes on the theory that the
576 * resync'd disk is very close and writing it will
577 * keep it that way better if we keep up while
578 * resyncing.
579 */
580 break;
581 default:
582 continue;
583 }
584 cbp = g_clone_bio(bp);
585 if (cbp == NULL)
586 goto failure;
587 cbp->bio_caller1 = sd;
588 bioq_insert_tail(&queue, cbp);
589 }
590 while ((cbp = bioq_takefirst(&queue)) != NULL) {
591 sd = cbp->bio_caller1;
592 cbp->bio_caller1 = NULL;
593 g_raid_subdisk_iostart(sd, cbp);
594 }
595 return;
596 failure:
597 while ((cbp = bioq_takefirst(&queue)) != NULL)
598 g_destroy_bio(cbp);
599 if (bp->bio_error == 0)
600 bp->bio_error = ENOMEM;
601 g_raid_iodone(bp, bp->bio_error);
602 }
603
604 static void
g_raid_tr_iostart_raid1(struct g_raid_tr_object * tr,struct bio * bp)605 g_raid_tr_iostart_raid1(struct g_raid_tr_object *tr, struct bio *bp)
606 {
607 struct g_raid_volume *vol;
608 struct g_raid_tr_raid1_object *trs;
609
610 vol = tr->tro_volume;
611 trs = (struct g_raid_tr_raid1_object *)tr;
612 if (vol->v_state != G_RAID_VOLUME_S_OPTIMAL &&
613 vol->v_state != G_RAID_VOLUME_S_SUBOPTIMAL &&
614 vol->v_state != G_RAID_VOLUME_S_DEGRADED) {
615 g_raid_iodone(bp, EIO);
616 return;
617 }
618 /*
619 * If we're rebuilding, squeeze in rebuild activity every so often,
620 * even when the disk is busy. Be sure to only count real I/O
621 * to the disk. All 'SPECIAL' I/O is traffic generated to the disk
622 * by this module.
623 */
624 if (trs->trso_failed_sd != NULL &&
625 !(bp->bio_cflags & G_RAID_BIO_FLAG_SPECIAL)) {
626 /* Make this new or running now round short. */
627 trs->trso_recover_slabs = 0;
628 if (--trs->trso_fair_io <= 0) {
629 trs->trso_fair_io = g_raid1_rebuild_fair_io;
630 g_raid_tr_raid1_rebuild_some(tr);
631 }
632 }
633 switch (bp->bio_cmd) {
634 case BIO_READ:
635 g_raid_tr_iostart_raid1_read(tr, bp);
636 break;
637 case BIO_WRITE:
638 case BIO_DELETE:
639 g_raid_tr_iostart_raid1_write(tr, bp);
640 break;
641 case BIO_SPEEDUP:
642 case BIO_FLUSH:
643 g_raid_tr_flush_common(tr, bp);
644 break;
645 default:
646 KASSERT(1 == 0, ("Invalid command here: %u (volume=%s)",
647 bp->bio_cmd, vol->v_name));
648 break;
649 }
650 }
651
652 static void
g_raid_tr_iodone_raid1(struct g_raid_tr_object * tr,struct g_raid_subdisk * sd,struct bio * bp)653 g_raid_tr_iodone_raid1(struct g_raid_tr_object *tr,
654 struct g_raid_subdisk *sd, struct bio *bp)
655 {
656 struct bio *cbp;
657 struct g_raid_subdisk *nsd;
658 struct g_raid_volume *vol;
659 struct bio *pbp;
660 struct g_raid_tr_raid1_object *trs;
661 uintptr_t *mask;
662 int error, do_write;
663
664 trs = (struct g_raid_tr_raid1_object *)tr;
665 vol = tr->tro_volume;
666 if (bp->bio_cflags & G_RAID_BIO_FLAG_SYNC) {
667 /*
668 * This operation is part of a rebuild or resync operation.
669 * See what work just got done, then schedule the next bit of
670 * work, if any. Rebuild/resync is done a little bit at a
671 * time. Either when a timeout happens, or after we get a
672 * bunch of I/Os to the disk (to make sure an active system
673 * will complete in a sane amount of time).
674 *
675 * We are setup to do differing amounts of work for each of
676 * these cases. so long as the slabs is smallish (less than
677 * 50 or so, I'd guess, but that's just a WAG), we shouldn't
678 * have any bio starvation issues. For active disks, we do
679 * 5MB of data, for inactive ones, we do 50MB.
680 */
681 if (trs->trso_type == TR_RAID1_REBUILD) {
682 if (bp->bio_cmd == BIO_READ) {
683 /* Immediately abort rebuild, if requested. */
684 if (trs->trso_flags & TR_RAID1_F_ABORT) {
685 trs->trso_flags &= ~TR_RAID1_F_DOING_SOME;
686 g_raid_tr_raid1_rebuild_abort(tr);
687 return;
688 }
689
690 /* On read error, skip and cross fingers. */
691 if (bp->bio_error != 0) {
692 G_RAID_LOGREQ(0, bp,
693 "Read error during rebuild (%d), "
694 "possible data loss!",
695 bp->bio_error);
696 goto rebuild_round_done;
697 }
698
699 /*
700 * The read operation finished, queue the
701 * write and get out.
702 */
703 G_RAID_LOGREQ(4, bp, "rebuild read done. %d",
704 bp->bio_error);
705 bp->bio_cmd = BIO_WRITE;
706 bp->bio_cflags = G_RAID_BIO_FLAG_SYNC;
707 G_RAID_LOGREQ(4, bp, "Queueing rebuild write.");
708 g_raid_subdisk_iostart(trs->trso_failed_sd, bp);
709 } else {
710 /*
711 * The write operation just finished. Do
712 * another. We keep cloning the master bio
713 * since it has the right buffers allocated to
714 * it.
715 */
716 G_RAID_LOGREQ(4, bp,
717 "rebuild write done. Error %d",
718 bp->bio_error);
719 nsd = trs->trso_failed_sd;
720 if (bp->bio_error != 0 ||
721 trs->trso_flags & TR_RAID1_F_ABORT) {
722 if ((trs->trso_flags &
723 TR_RAID1_F_ABORT) == 0) {
724 g_raid_tr_raid1_fail_disk(sd->sd_softc,
725 nsd, nsd->sd_disk);
726 }
727 trs->trso_flags &= ~TR_RAID1_F_DOING_SOME;
728 g_raid_tr_raid1_rebuild_abort(tr);
729 return;
730 }
731 rebuild_round_done:
732 nsd = trs->trso_failed_sd;
733 trs->trso_flags &= ~TR_RAID1_F_LOCKED;
734 g_raid_unlock_range(sd->sd_volume,
735 bp->bio_offset, bp->bio_length);
736 nsd->sd_rebuild_pos += bp->bio_length;
737 if (nsd->sd_rebuild_pos >= nsd->sd_size) {
738 g_raid_tr_raid1_rebuild_finish(tr);
739 return;
740 }
741
742 /* Abort rebuild if we are stopping */
743 if (trs->trso_stopping) {
744 trs->trso_flags &= ~TR_RAID1_F_DOING_SOME;
745 g_raid_tr_raid1_rebuild_abort(tr);
746 return;
747 }
748
749 if (--trs->trso_meta_update <= 0) {
750 g_raid_write_metadata(vol->v_softc,
751 vol, nsd, nsd->sd_disk);
752 trs->trso_meta_update =
753 g_raid1_rebuild_meta_update;
754 }
755 trs->trso_flags &= ~TR_RAID1_F_DOING_SOME;
756 if (--trs->trso_recover_slabs <= 0)
757 return;
758 g_raid_tr_raid1_rebuild_some(tr);
759 }
760 } else if (trs->trso_type == TR_RAID1_RESYNC) {
761 /*
762 * read good sd, read bad sd in parallel. when both
763 * done, compare the buffers. write good to the bad
764 * if different. do the next bit of work.
765 */
766 panic("Somehow, we think we're doing a resync");
767 }
768 return;
769 }
770 pbp = bp->bio_parent;
771 pbp->bio_inbed++;
772 if (bp->bio_cmd == BIO_READ && bp->bio_error != 0) {
773 /*
774 * Read failed on first drive. Retry the read error on
775 * another disk drive, if available, before erroring out the
776 * read.
777 */
778 sd->sd_disk->d_read_errs++;
779 G_RAID_LOGREQ(0, bp,
780 "Read error (%d), %d read errors total",
781 bp->bio_error, sd->sd_disk->d_read_errs);
782
783 /*
784 * If there are too many read errors, we move to degraded.
785 * XXX Do we want to FAIL the drive (eg, make the user redo
786 * everything to get it back in sync), or just degrade the
787 * drive, which kicks off a resync?
788 */
789 do_write = 1;
790 if (sd->sd_disk->d_read_errs > g_raid_read_err_thresh) {
791 g_raid_tr_raid1_fail_disk(sd->sd_softc, sd, sd->sd_disk);
792 if (pbp->bio_children == 1)
793 do_write = 0;
794 }
795
796 /*
797 * Find the other disk, and try to do the I/O to it.
798 */
799 mask = (uintptr_t *)(&pbp->bio_driver2);
800 if (pbp->bio_children == 1) {
801 /* Save original subdisk. */
802 pbp->bio_driver1 = do_write ? sd : NULL;
803 *mask = 0;
804 }
805 *mask |= 1 << sd->sd_pos;
806 nsd = g_raid_tr_raid1_select_read_disk(vol, pbp, *mask);
807 if (nsd != NULL && (cbp = g_clone_bio(pbp)) != NULL) {
808 g_destroy_bio(bp);
809 G_RAID_LOGREQ(2, cbp, "Retrying read from %d",
810 nsd->sd_pos);
811 if (pbp->bio_children == 2 && do_write) {
812 sd->sd_recovery++;
813 cbp->bio_caller1 = nsd;
814 pbp->bio_pflags = G_RAID_BIO_FLAG_LOCKED;
815 /* Lock callback starts I/O */
816 g_raid_lock_range(sd->sd_volume,
817 cbp->bio_offset, cbp->bio_length, pbp, cbp);
818 } else {
819 g_raid_subdisk_iostart(nsd, cbp);
820 }
821 return;
822 }
823 /*
824 * We can't retry. Return the original error by falling
825 * through. This will happen when there's only one good disk.
826 * We don't need to fail the raid, since its actual state is
827 * based on the state of the subdisks.
828 */
829 G_RAID_LOGREQ(2, bp, "Couldn't retry read, failing it");
830 }
831 if (bp->bio_cmd == BIO_READ &&
832 bp->bio_error == 0 &&
833 pbp->bio_children > 1 &&
834 pbp->bio_driver1 != NULL) {
835 /*
836 * If it was a read, and bio_children is >1, then we just
837 * recovered the data from the second drive. We should try to
838 * write that data to the first drive if sector remapping is
839 * enabled. A write should put the data in a new place on the
840 * disk, remapping the bad sector. Do we need to do that by
841 * queueing a request to the main worker thread? It doesn't
842 * affect the return code of this current read, and can be
843 * done at our leisure. However, to make the code simpler, it
844 * is done synchronously.
845 */
846 G_RAID_LOGREQ(3, bp, "Recovered data from other drive");
847 cbp = g_clone_bio(pbp);
848 if (cbp != NULL) {
849 g_destroy_bio(bp);
850 cbp->bio_cmd = BIO_WRITE;
851 cbp->bio_cflags = G_RAID_BIO_FLAG_REMAP;
852 G_RAID_LOGREQ(2, cbp,
853 "Attempting bad sector remap on failing drive.");
854 g_raid_subdisk_iostart(pbp->bio_driver1, cbp);
855 return;
856 }
857 }
858 if (pbp->bio_pflags & G_RAID_BIO_FLAG_LOCKED) {
859 /*
860 * We're done with a recovery, mark the range as unlocked.
861 * For any write errors, we aggressively fail the disk since
862 * there was both a READ and a WRITE error at this location.
863 * Both types of errors generally indicates the drive is on
864 * the verge of total failure anyway. Better to stop trusting
865 * it now. However, we need to reset error to 0 in that case
866 * because we're not failing the original I/O which succeeded.
867 */
868 if (bp->bio_cmd == BIO_WRITE && bp->bio_error) {
869 G_RAID_LOGREQ(0, bp, "Remap write failed: "
870 "failing subdisk.");
871 g_raid_tr_raid1_fail_disk(sd->sd_softc, sd, sd->sd_disk);
872 bp->bio_error = 0;
873 }
874 if (pbp->bio_driver1 != NULL) {
875 ((struct g_raid_subdisk *)pbp->bio_driver1)
876 ->sd_recovery--;
877 }
878 G_RAID_LOGREQ(2, bp, "REMAP done %d.", bp->bio_error);
879 g_raid_unlock_range(sd->sd_volume, bp->bio_offset,
880 bp->bio_length);
881 }
882 if (pbp->bio_cmd != BIO_READ) {
883 if (pbp->bio_inbed == 1 || pbp->bio_error != 0)
884 pbp->bio_error = bp->bio_error;
885 if (pbp->bio_cmd == BIO_WRITE && bp->bio_error != 0) {
886 G_RAID_LOGREQ(0, bp, "Write failed: failing subdisk.");
887 g_raid_tr_raid1_fail_disk(sd->sd_softc, sd, sd->sd_disk);
888 }
889 error = pbp->bio_error;
890 } else
891 error = bp->bio_error;
892 g_destroy_bio(bp);
893 if (pbp->bio_children == pbp->bio_inbed) {
894 pbp->bio_completed = pbp->bio_length;
895 g_raid_iodone(pbp, error);
896 }
897 }
898
899 static int
g_raid_tr_kerneldump_raid1(struct g_raid_tr_object * tr,void * virtual,off_t offset,size_t length)900 g_raid_tr_kerneldump_raid1(struct g_raid_tr_object *tr, void *virtual,
901 off_t offset, size_t length)
902 {
903 struct g_raid_volume *vol;
904 struct g_raid_subdisk *sd;
905 int error, i, ok;
906
907 vol = tr->tro_volume;
908 error = 0;
909 ok = 0;
910 for (i = 0; i < vol->v_disks_count; i++) {
911 sd = &vol->v_subdisks[i];
912 switch (sd->sd_state) {
913 case G_RAID_SUBDISK_S_ACTIVE:
914 break;
915 case G_RAID_SUBDISK_S_REBUILD:
916 /*
917 * When rebuilding, only part of this subdisk is
918 * writable, the rest will be written as part of the
919 * that process.
920 */
921 if (offset >= sd->sd_rebuild_pos)
922 continue;
923 break;
924 case G_RAID_SUBDISK_S_STALE:
925 case G_RAID_SUBDISK_S_RESYNC:
926 /*
927 * Resyncing still writes on the theory that the
928 * resync'd disk is very close and writing it will
929 * keep it that way better if we keep up while
930 * resyncing.
931 */
932 break;
933 default:
934 continue;
935 }
936 error = g_raid_subdisk_kerneldump(sd, virtual, offset, length);
937 if (error == 0)
938 ok++;
939 }
940 return (ok > 0 ? 0 : error);
941 }
942
943 static int
g_raid_tr_locked_raid1(struct g_raid_tr_object * tr,void * argp)944 g_raid_tr_locked_raid1(struct g_raid_tr_object *tr, void *argp)
945 {
946 struct bio *bp;
947 struct g_raid_subdisk *sd;
948
949 bp = (struct bio *)argp;
950 sd = (struct g_raid_subdisk *)bp->bio_caller1;
951 g_raid_subdisk_iostart(sd, bp);
952
953 return (0);
954 }
955
956 static int
g_raid_tr_idle_raid1(struct g_raid_tr_object * tr)957 g_raid_tr_idle_raid1(struct g_raid_tr_object *tr)
958 {
959 struct g_raid_tr_raid1_object *trs;
960
961 trs = (struct g_raid_tr_raid1_object *)tr;
962 trs->trso_fair_io = g_raid1_rebuild_fair_io;
963 trs->trso_recover_slabs = g_raid1_rebuild_cluster_idle;
964 if (trs->trso_type == TR_RAID1_REBUILD)
965 g_raid_tr_raid1_rebuild_some(tr);
966 return (0);
967 }
968
969 static int
g_raid_tr_free_raid1(struct g_raid_tr_object * tr)970 g_raid_tr_free_raid1(struct g_raid_tr_object *tr)
971 {
972 struct g_raid_tr_raid1_object *trs;
973
974 trs = (struct g_raid_tr_raid1_object *)tr;
975
976 if (trs->trso_buffer != NULL) {
977 free(trs->trso_buffer, M_TR_RAID1);
978 trs->trso_buffer = NULL;
979 }
980 return (0);
981 }
982
983 G_RAID_TR_DECLARE(raid1, "RAID1");
984