mirror of
git://sourceware.org/git/lvm2.git
synced 2024-12-30 17:18:21 +03:00
8c87dda195
There have been two file locks used to protect lvm "global state": "ORPHANS" and "GLOBAL". Commands that used the ORPHAN flock in exclusive mode: pvcreate, pvremove, vgcreate, vgextend, vgremove, vgcfgrestore Commands that used the ORPHAN flock in shared mode: vgimportclone, pvs, pvscan, pvresize, pvmove, pvdisplay, pvchange, fullreport Commands that used the GLOBAL flock in exclusive mode: pvchange, pvscan, vgimportclone, vgscan Commands that used the GLOBAL flock in shared mode: pvscan --cache, pvs The ORPHAN lock covers the important cases of serializing the use of orphan PVs. It also partially covers the reporting of orphan PVs (although not correctly as explained below.) The GLOBAL lock doesn't seem to have a clear purpose (it may have eroded over time.) Neither lock correctly protects the VG namespace, or orphan PV properties. To simplify and correct these issues, the two separate flocks are combined into the one GLOBAL flock, and this flock is used from the locking sites that are in place for the lvmlockd global lock. The logic behind the lvmlockd (distributed) global lock is that any command that changes "global state" needs to take the global lock in ex mode. Global state in lvm is: the list of VG names, the set of orphan PVs, and any properties of orphan PVs. Reading this global state can use the global lock in sh mode to ensure it doesn't change while being reported. The locking of global state now looks like: lockd_global() previously named lockd_gl(), acquires the distributed global lock through lvmlockd. This is unchanged. It serializes distributed lvm commands that are changing global state. This is a no-op when lvmlockd is not in use. lockf_global() acquires an flock on a local file. It serializes local lvm commands that are changing global state. lock_global() first calls lockf_global() to acquire the local flock for global state, and if this succeeds, it calls lockd_global() to acquire the distributed lock for global state. Replace instances of lockd_gl() with lock_global(), so that the existing sites for lvmlockd global state locking are now also used for local file locking of global state. Remove the previous file locking calls lock_vol(GLOBAL) and lock_vol(ORPHAN). The following commands which change global state are now serialized with the exclusive global flock: pvchange (of orphan), pvresize (of orphan), pvcreate, pvremove, vgcreate, vgextend, vgremove, vgreduce, vgrename, vgcfgrestore, vgimportclone, vgmerge, vgsplit Commands that use a shared flock to read global state (and will be serialized against the prior list) are those that use process_each functions that are based on processing a list of all VG names, or all PVs. The list of all VGs or all PVs is global state and the shared lock prevents those lists from changing while the command is processing them. The ORPHAN lock previously attempted to produce an accurate listing of orphan PVs, but it was only acquired at the end of the command during the fake vg_read of the fake orphan vg. This is not when orphan PVs were determined; they were determined by elimination beforehand by processing all real VGs, and subtracting the PVs in the real VGs from the list of all PVs that had been identified during the initial scan. This is fixed by holding the single global lock in shared mode while processing all VGs to determine the list of orphan PVs.
98 lines
2.5 KiB
C
98 lines
2.5 KiB
C
/*
|
|
* Copyright (C) 2001-2004 Sistina Software, Inc. All rights reserved.
|
|
* Copyright (C) 2004-2014 Red Hat, Inc. All rights reserved.
|
|
*
|
|
* This file is part of LVM2.
|
|
*
|
|
* This copyrighted material is made available to anyone wishing to use,
|
|
* modify, copy, or redistribute it subject to the terms and conditions
|
|
* of the GNU Lesser General Public License v.2.1.
|
|
*
|
|
* You should have received a copy of the GNU Lesser General Public License
|
|
* along with this program; if not, write to the Free Software Foundation,
|
|
* Inc., 51 Franklin Street, Fifth Floor, Boston, MA 02110-1301 USA
|
|
*/
|
|
|
|
#include "lib/misc/lib.h"
|
|
#include "lib/locking/locking.h"
|
|
#include "locking_types.h"
|
|
#include "lib/config/config.h"
|
|
#include "lib/config/defaults.h"
|
|
#include "lib/misc/lvm-string.h"
|
|
#include "lib/misc/lvm-flock.h"
|
|
|
|
#include <limits.h>
|
|
#include <unistd.h>
|
|
#include <sys/stat.h>
|
|
#include <fcntl.h>
|
|
#include <signal.h>
|
|
|
|
static char _lock_dir[PATH_MAX];
|
|
|
|
static void _fin_file_locking(void)
|
|
{
|
|
release_flocks(1);
|
|
}
|
|
|
|
static void _reset_file_locking(void)
|
|
{
|
|
release_flocks(0);
|
|
}
|
|
|
|
static int _file_lock_resource(struct cmd_context *cmd, const char *resource,
|
|
uint32_t flags, const struct logical_volume *lv)
|
|
{
|
|
char lockfile[PATH_MAX];
|
|
|
|
if (!strcmp(resource, VG_GLOBAL)) {
|
|
if (dm_snprintf(lockfile, sizeof(lockfile),
|
|
"%s/P_%s", _lock_dir, resource + 1) < 0) {
|
|
log_error("Too long locking filename %s/P_%s.", _lock_dir, resource + 1);
|
|
return 0;
|
|
}
|
|
} else
|
|
if (dm_snprintf(lockfile, sizeof(lockfile), "%s/V_%s", _lock_dir, resource) < 0) {
|
|
log_error("Too long locking filename %s/V_%s.", _lock_dir, resource);
|
|
return 0;
|
|
}
|
|
|
|
if (!lock_file(lockfile, flags))
|
|
return_0;
|
|
|
|
return 1;
|
|
}
|
|
|
|
int init_file_locking(struct locking_type *locking, struct cmd_context *cmd,
|
|
int suppress_messages)
|
|
{
|
|
int r;
|
|
const char *locking_dir;
|
|
|
|
init_flock(cmd);
|
|
|
|
locking->lock_resource = _file_lock_resource;
|
|
locking->reset_locking = _reset_file_locking;
|
|
locking->fin_locking = _fin_file_locking;
|
|
locking->flags = LCK_FLOCK;
|
|
|
|
/* Get lockfile directory from config file */
|
|
locking_dir = find_config_tree_str(cmd, global_locking_dir_CFG, NULL);
|
|
if (!dm_strncpy(_lock_dir, locking_dir, sizeof(_lock_dir))) {
|
|
log_error("Path for locking_dir %s is invalid.", locking_dir);
|
|
return 0;
|
|
}
|
|
|
|
(void) dm_prepare_selinux_context(_lock_dir, S_IFDIR);
|
|
r = dm_create_dir(_lock_dir);
|
|
(void) dm_prepare_selinux_context(NULL, 0);
|
|
|
|
if (!r)
|
|
return 0;
|
|
|
|
/* Trap a read-only file system */
|
|
if ((access(_lock_dir, R_OK | W_OK | X_OK) == -1) && (errno == EROFS))
|
|
return 0;
|
|
|
|
return 1;
|
|
}
|