1 /*- 2 * SPDX-License-Identifier: BSD-2-Clause-FreeBSD 3 * 4 * Copyright (c) 2010 Alexander Motin <mav@FreeBSD.org> 5 * All rights reserved. 6 * 7 * Redistribution and use in source and binary forms, with or without 8 * modification, are permitted provided that the following conditions 9 * are met: 10 * 1. Redistributions of source code must retain the above copyright 11 * notice, this list of conditions and the following disclaimer. 12 * 2. Redistributions in binary form must reproduce the above copyright 13 * notice, this list of conditions and the following disclaimer in the 14 * documentation and/or other materials provided with the distribution. 15 * 16 * THIS SOFTWARE IS PROVIDED BY THE AUTHORS AND CONTRIBUTORS ``AS IS'' AND 17 * ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE 18 * IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE 19 * ARE DISCLAIMED. IN NO EVENT SHALL THE AUTHORS OR CONTRIBUTORS BE LIABLE 20 * FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL 21 * DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS 22 * OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION) 23 * HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT 24 * LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY 25 * OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF 26 * SUCH DAMAGE. 27 */ 28 29 #include <sys/cdefs.h> 30 __FBSDID("$FreeBSD$"); 31 32 #include <sys/param.h> 33 #include <sys/bio.h> 34 #include <sys/endian.h> 35 #include <sys/kernel.h> 36 #include <sys/kobj.h> 37 #include <sys/limits.h> 38 #include <sys/lock.h> 39 #include <sys/malloc.h> 40 #include <sys/mutex.h> 41 #include <sys/sysctl.h> 42 #include <sys/systm.h> 43 #include <geom/geom.h> 44 #include <geom/geom_dbg.h> 45 #include "geom/raid/g_raid.h" 46 #include "g_raid_tr_if.h" 47 48 SYSCTL_DECL(_kern_geom_raid_raid1); 49 50 #define RAID1_REBUILD_SLAB (1 << 20) /* One transation in a rebuild */ 51 static int g_raid1_rebuild_slab = RAID1_REBUILD_SLAB; 52 SYSCTL_UINT(_kern_geom_raid_raid1, OID_AUTO, rebuild_slab_size, CTLFLAG_RWTUN, 53 &g_raid1_rebuild_slab, 0, 54 "Amount of the disk to rebuild each read/write cycle of the rebuild."); 55 56 #define RAID1_REBUILD_FAIR_IO 20 /* use 1/x of the available I/O */ 57 static int g_raid1_rebuild_fair_io = RAID1_REBUILD_FAIR_IO; 58 SYSCTL_UINT(_kern_geom_raid_raid1, OID_AUTO, rebuild_fair_io, CTLFLAG_RWTUN, 59 &g_raid1_rebuild_fair_io, 0, 60 "Fraction of the I/O bandwidth to use when disk busy for rebuild."); 61 62 #define RAID1_REBUILD_CLUSTER_IDLE 100 63 static int g_raid1_rebuild_cluster_idle = RAID1_REBUILD_CLUSTER_IDLE; 64 SYSCTL_UINT(_kern_geom_raid_raid1, OID_AUTO, rebuild_cluster_idle, CTLFLAG_RWTUN, 65 &g_raid1_rebuild_cluster_idle, 0, 66 "Number of slabs to do each time we trigger a rebuild cycle"); 67 68 #define RAID1_REBUILD_META_UPDATE 1024 /* update meta data every 1GB or so */ 69 static int g_raid1_rebuild_meta_update = RAID1_REBUILD_META_UPDATE; 70 SYSCTL_UINT(_kern_geom_raid_raid1, OID_AUTO, rebuild_meta_update, CTLFLAG_RWTUN, 71 &g_raid1_rebuild_meta_update, 0, 72 "When to update the meta data."); 73 74 static MALLOC_DEFINE(M_TR_RAID1, "tr_raid1_data", "GEOM_RAID RAID1 data"); 75 76 #define TR_RAID1_NONE 0 77 #define TR_RAID1_REBUILD 1 78 #define TR_RAID1_RESYNC 2 79 80 #define TR_RAID1_F_DOING_SOME 0x1 81 #define TR_RAID1_F_LOCKED 0x2 82 #define TR_RAID1_F_ABORT 0x4 83 84 struct g_raid_tr_raid1_object { 85 struct g_raid_tr_object trso_base; 86 int trso_starting; 87 int trso_stopping; 88 int trso_type; 89 int trso_recover_slabs; /* slabs before rest */ 90 int trso_fair_io; 91 int trso_meta_update; 92 int trso_flags; 93 struct g_raid_subdisk *trso_failed_sd; /* like per volume */ 94 void *trso_buffer; /* Buffer space */ 95 struct bio trso_bio; 96 }; 97 98 static g_raid_tr_taste_t g_raid_tr_taste_raid1; 99 static g_raid_tr_event_t g_raid_tr_event_raid1; 100 static g_raid_tr_start_t g_raid_tr_start_raid1; 101 static g_raid_tr_stop_t g_raid_tr_stop_raid1; 102 static g_raid_tr_iostart_t g_raid_tr_iostart_raid1; 103 static g_raid_tr_iodone_t g_raid_tr_iodone_raid1; 104 static g_raid_tr_kerneldump_t g_raid_tr_kerneldump_raid1; 105 static g_raid_tr_locked_t g_raid_tr_locked_raid1; 106 static g_raid_tr_idle_t g_raid_tr_idle_raid1; 107 static g_raid_tr_free_t g_raid_tr_free_raid1; 108 109 static kobj_method_t g_raid_tr_raid1_methods[] = { 110 KOBJMETHOD(g_raid_tr_taste, g_raid_tr_taste_raid1), 111 KOBJMETHOD(g_raid_tr_event, g_raid_tr_event_raid1), 112 KOBJMETHOD(g_raid_tr_start, g_raid_tr_start_raid1), 113 KOBJMETHOD(g_raid_tr_stop, g_raid_tr_stop_raid1), 114 KOBJMETHOD(g_raid_tr_iostart, g_raid_tr_iostart_raid1), 115 KOBJMETHOD(g_raid_tr_iodone, g_raid_tr_iodone_raid1), 116 KOBJMETHOD(g_raid_tr_kerneldump, g_raid_tr_kerneldump_raid1), 117 KOBJMETHOD(g_raid_tr_locked, g_raid_tr_locked_raid1), 118 KOBJMETHOD(g_raid_tr_idle, g_raid_tr_idle_raid1), 119 KOBJMETHOD(g_raid_tr_free, g_raid_tr_free_raid1), 120 { 0, 0 } 121 }; 122 123 static struct g_raid_tr_class g_raid_tr_raid1_class = { 124 "RAID1", 125 g_raid_tr_raid1_methods, 126 sizeof(struct g_raid_tr_raid1_object), 127 .trc_enable = 1, 128 .trc_priority = 100, 129 .trc_accept_unmapped = 1 130 }; 131 132 static void g_raid_tr_raid1_rebuild_abort(struct g_raid_tr_object *tr); 133 static void g_raid_tr_raid1_maybe_rebuild(struct g_raid_tr_object *tr, 134 struct g_raid_subdisk *sd); 135 136 static int 137 g_raid_tr_taste_raid1(struct g_raid_tr_object *tr, struct g_raid_volume *vol) 138 { 139 struct g_raid_tr_raid1_object *trs; 140 141 trs = (struct g_raid_tr_raid1_object *)tr; 142 if (tr->tro_volume->v_raid_level != G_RAID_VOLUME_RL_RAID1 || 143 (tr->tro_volume->v_raid_level_qualifier != G_RAID_VOLUME_RLQ_R1SM && 144 tr->tro_volume->v_raid_level_qualifier != G_RAID_VOLUME_RLQ_R1MM)) 145 return (G_RAID_TR_TASTE_FAIL); 146 trs->trso_starting = 1; 147 return (G_RAID_TR_TASTE_SUCCEED); 148 } 149 150 static int 151 g_raid_tr_update_state_raid1(struct g_raid_volume *vol, 152 struct g_raid_subdisk *sd) 153 { 154 struct g_raid_tr_raid1_object *trs; 155 struct g_raid_softc *sc; 156 struct g_raid_subdisk *tsd, *bestsd; 157 u_int s; 158 int i, na, ns; 159 160 sc = vol->v_softc; 161 trs = (struct g_raid_tr_raid1_object *)vol->v_tr; 162 if (trs->trso_stopping && 163 (trs->trso_flags & TR_RAID1_F_DOING_SOME) == 0) 164 s = G_RAID_VOLUME_S_STOPPED; 165 else if (trs->trso_starting) 166 s = G_RAID_VOLUME_S_STARTING; 167 else { 168 /* Make sure we have at least one ACTIVE disk. */ 169 na = g_raid_nsubdisks(vol, G_RAID_SUBDISK_S_ACTIVE); 170 if (na == 0) { 171 /* 172 * Critical situation! We have no any active disk! 173 * Choose the best disk we have to make it active. 174 */ 175 bestsd = &vol->v_subdisks[0]; 176 for (i = 1; i < vol->v_disks_count; i++) { 177 tsd = &vol->v_subdisks[i]; 178 if (tsd->sd_state > bestsd->sd_state) 179 bestsd = tsd; 180 else if (tsd->sd_state == bestsd->sd_state && 181 (tsd->sd_state == G_RAID_SUBDISK_S_REBUILD || 182 tsd->sd_state == G_RAID_SUBDISK_S_RESYNC) && 183 tsd->sd_rebuild_pos > bestsd->sd_rebuild_pos) 184 bestsd = tsd; 185 } 186 if (bestsd->sd_state >= G_RAID_SUBDISK_S_UNINITIALIZED) { 187 /* We found reasonable candidate. */ 188 G_RAID_DEBUG1(1, sc, 189 "Promote subdisk %s:%d from %s to ACTIVE.", 190 vol->v_name, bestsd->sd_pos, 191 g_raid_subdisk_state2str(bestsd->sd_state)); 192 g_raid_change_subdisk_state(bestsd, 193 G_RAID_SUBDISK_S_ACTIVE); 194 g_raid_write_metadata(sc, 195 vol, bestsd, bestsd->sd_disk); 196 } 197 } 198 na = g_raid_nsubdisks(vol, G_RAID_SUBDISK_S_ACTIVE); 199 ns = g_raid_nsubdisks(vol, G_RAID_SUBDISK_S_STALE) + 200 g_raid_nsubdisks(vol, G_RAID_SUBDISK_S_RESYNC); 201 if (na == vol->v_disks_count) 202 s = G_RAID_VOLUME_S_OPTIMAL; 203 else if (na + ns == vol->v_disks_count) 204 s = G_RAID_VOLUME_S_SUBOPTIMAL; 205 else if (na > 0) 206 s = G_RAID_VOLUME_S_DEGRADED; 207 else 208 s = G_RAID_VOLUME_S_BROKEN; 209 g_raid_tr_raid1_maybe_rebuild(vol->v_tr, sd); 210 } 211 if (s != vol->v_state) { 212 g_raid_event_send(vol, G_RAID_VOLUME_S_ALIVE(s) ? 213 G_RAID_VOLUME_E_UP : G_RAID_VOLUME_E_DOWN, 214 G_RAID_EVENT_VOLUME); 215 g_raid_change_volume_state(vol, s); 216 if (!trs->trso_starting && !trs->trso_stopping) 217 g_raid_write_metadata(sc, vol, NULL, NULL); 218 } 219 return (0); 220 } 221 222 static void 223 g_raid_tr_raid1_fail_disk(struct g_raid_softc *sc, struct g_raid_subdisk *sd, 224 struct g_raid_disk *disk) 225 { 226 /* 227 * We don't fail the last disk in the pack, since it still has decent 228 * data on it and that's better than failing the disk if it is the root 229 * file system. 230 * 231 * XXX should this be controlled via a tunable? It makes sense for 232 * the volume that has / on it. I can't think of a case where we'd 233 * want the volume to go away on this kind of event. 234 */ 235 if (g_raid_nsubdisks(sd->sd_volume, G_RAID_SUBDISK_S_ACTIVE) == 1 && 236 g_raid_get_subdisk(sd->sd_volume, G_RAID_SUBDISK_S_ACTIVE) == sd) 237 return; 238 g_raid_fail_disk(sc, sd, disk); 239 } 240 241 static void 242 g_raid_tr_raid1_rebuild_some(struct g_raid_tr_object *tr) 243 { 244 struct g_raid_tr_raid1_object *trs; 245 struct g_raid_subdisk *sd, *good_sd; 246 struct bio *bp; 247 248 trs = (struct g_raid_tr_raid1_object *)tr; 249 if (trs->trso_flags & TR_RAID1_F_DOING_SOME) 250 return; 251 sd = trs->trso_failed_sd; 252 good_sd = g_raid_get_subdisk(sd->sd_volume, G_RAID_SUBDISK_S_ACTIVE); 253 if (good_sd == NULL) { 254 g_raid_tr_raid1_rebuild_abort(tr); 255 return; 256 } 257 bp = &trs->trso_bio; 258 memset(bp, 0, sizeof(*bp)); 259 bp->bio_offset = sd->sd_rebuild_pos; 260 bp->bio_length = MIN(g_raid1_rebuild_slab, 261 sd->sd_size - sd->sd_rebuild_pos); 262 bp->bio_data = trs->trso_buffer; 263 bp->bio_cmd = BIO_READ; 264 bp->bio_cflags = G_RAID_BIO_FLAG_SYNC; 265 bp->bio_caller1 = good_sd; 266 trs->trso_flags |= TR_RAID1_F_DOING_SOME; 267 trs->trso_flags |= TR_RAID1_F_LOCKED; 268 g_raid_lock_range(sd->sd_volume, /* Lock callback starts I/O */ 269 bp->bio_offset, bp->bio_length, NULL, bp); 270 } 271 272 static void 273 g_raid_tr_raid1_rebuild_done(struct g_raid_tr_raid1_object *trs) 274 { 275 struct g_raid_volume *vol; 276 struct g_raid_subdisk *sd; 277 278 vol = trs->trso_base.tro_volume; 279 sd = trs->trso_failed_sd; 280 g_raid_write_metadata(vol->v_softc, vol, sd, sd->sd_disk); 281 free(trs->trso_buffer, M_TR_RAID1); 282 trs->trso_buffer = NULL; 283 trs->trso_flags &= ~TR_RAID1_F_DOING_SOME; 284 trs->trso_type = TR_RAID1_NONE; 285 trs->trso_recover_slabs = 0; 286 trs->trso_failed_sd = NULL; 287 g_raid_tr_update_state_raid1(vol, NULL); 288 } 289 290 static void 291 g_raid_tr_raid1_rebuild_finish(struct g_raid_tr_object *tr) 292 { 293 struct g_raid_tr_raid1_object *trs; 294 struct g_raid_subdisk *sd; 295 296 trs = (struct g_raid_tr_raid1_object *)tr; 297 sd = trs->trso_failed_sd; 298 G_RAID_DEBUG1(0, tr->tro_volume->v_softc, 299 "Subdisk %s:%d-%s rebuild completed.", 300 sd->sd_volume->v_name, sd->sd_pos, 301 sd->sd_disk ? g_raid_get_diskname(sd->sd_disk) : "[none]"); 302 g_raid_change_subdisk_state(sd, G_RAID_SUBDISK_S_ACTIVE); 303 sd->sd_rebuild_pos = 0; 304 g_raid_tr_raid1_rebuild_done(trs); 305 } 306 307 static void 308 g_raid_tr_raid1_rebuild_abort(struct g_raid_tr_object *tr) 309 { 310 struct g_raid_tr_raid1_object *trs; 311 struct g_raid_subdisk *sd; 312 struct g_raid_volume *vol; 313 off_t len; 314 315 vol = tr->tro_volume; 316 trs = (struct g_raid_tr_raid1_object *)tr; 317 sd = trs->trso_failed_sd; 318 if (trs->trso_flags & TR_RAID1_F_DOING_SOME) { 319 G_RAID_DEBUG1(1, vol->v_softc, 320 "Subdisk %s:%d-%s rebuild is aborting.", 321 sd->sd_volume->v_name, sd->sd_pos, 322 sd->sd_disk ? g_raid_get_diskname(sd->sd_disk) : "[none]"); 323 trs->trso_flags |= TR_RAID1_F_ABORT; 324 } else { 325 G_RAID_DEBUG1(0, vol->v_softc, 326 "Subdisk %s:%d-%s rebuild aborted.", 327 sd->sd_volume->v_name, sd->sd_pos, 328 sd->sd_disk ? g_raid_get_diskname(sd->sd_disk) : "[none]"); 329 trs->trso_flags &= ~TR_RAID1_F_ABORT; 330 if (trs->trso_flags & TR_RAID1_F_LOCKED) { 331 trs->trso_flags &= ~TR_RAID1_F_LOCKED; 332 len = MIN(g_raid1_rebuild_slab, 333 sd->sd_size - sd->sd_rebuild_pos); 334 g_raid_unlock_range(tr->tro_volume, 335 sd->sd_rebuild_pos, len); 336 } 337 g_raid_tr_raid1_rebuild_done(trs); 338 } 339 } 340 341 static void 342 g_raid_tr_raid1_rebuild_start(struct g_raid_tr_object *tr) 343 { 344 struct g_raid_volume *vol; 345 struct g_raid_tr_raid1_object *trs; 346 struct g_raid_subdisk *sd, *fsd; 347 348 vol = tr->tro_volume; 349 trs = (struct g_raid_tr_raid1_object *)tr; 350 if (trs->trso_failed_sd) { 351 G_RAID_DEBUG1(1, vol->v_softc, 352 "Already rebuild in start rebuild. pos %jd\n", 353 (intmax_t)trs->trso_failed_sd->sd_rebuild_pos); 354 return; 355 } 356 sd = g_raid_get_subdisk(vol, G_RAID_SUBDISK_S_ACTIVE); 357 if (sd == NULL) { 358 G_RAID_DEBUG1(1, vol->v_softc, 359 "No active disk to rebuild. night night."); 360 return; 361 } 362 fsd = g_raid_get_subdisk(vol, G_RAID_SUBDISK_S_RESYNC); 363 if (fsd == NULL) 364 fsd = g_raid_get_subdisk(vol, G_RAID_SUBDISK_S_REBUILD); 365 if (fsd == NULL) { 366 fsd = g_raid_get_subdisk(vol, G_RAID_SUBDISK_S_STALE); 367 if (fsd != NULL) { 368 fsd->sd_rebuild_pos = 0; 369 g_raid_change_subdisk_state(fsd, 370 G_RAID_SUBDISK_S_RESYNC); 371 g_raid_write_metadata(vol->v_softc, vol, fsd, NULL); 372 } else { 373 fsd = g_raid_get_subdisk(vol, 374 G_RAID_SUBDISK_S_UNINITIALIZED); 375 if (fsd == NULL) 376 fsd = g_raid_get_subdisk(vol, 377 G_RAID_SUBDISK_S_NEW); 378 if (fsd != NULL) { 379 fsd->sd_rebuild_pos = 0; 380 g_raid_change_subdisk_state(fsd, 381 G_RAID_SUBDISK_S_REBUILD); 382 g_raid_write_metadata(vol->v_softc, 383 vol, fsd, NULL); 384 } 385 } 386 } 387 if (fsd == NULL) { 388 G_RAID_DEBUG1(1, vol->v_softc, 389 "No failed disk to rebuild. night night."); 390 return; 391 } 392 trs->trso_failed_sd = fsd; 393 G_RAID_DEBUG1(0, vol->v_softc, 394 "Subdisk %s:%d-%s rebuild start at %jd.", 395 fsd->sd_volume->v_name, fsd->sd_pos, 396 fsd->sd_disk ? g_raid_get_diskname(fsd->sd_disk) : "[none]", 397 trs->trso_failed_sd->sd_rebuild_pos); 398 trs->trso_type = TR_RAID1_REBUILD; 399 trs->trso_buffer = malloc(g_raid1_rebuild_slab, M_TR_RAID1, M_WAITOK); 400 trs->trso_meta_update = g_raid1_rebuild_meta_update; 401 g_raid_tr_raid1_rebuild_some(tr); 402 } 403 404 405 static void 406 g_raid_tr_raid1_maybe_rebuild(struct g_raid_tr_object *tr, 407 struct g_raid_subdisk *sd) 408 { 409 struct g_raid_volume *vol; 410 struct g_raid_tr_raid1_object *trs; 411 int na, nr; 412 413 /* 414 * If we're stopping, don't do anything. If we don't have at least one 415 * good disk and one bad disk, we don't do anything. And if there's a 416 * 'good disk' stored in the trs, then we're in progress and we punt. 417 * If we make it past all these checks, we need to rebuild. 418 */ 419 vol = tr->tro_volume; 420 trs = (struct g_raid_tr_raid1_object *)tr; 421 if (trs->trso_stopping) 422 return; 423 na = g_raid_nsubdisks(vol, G_RAID_SUBDISK_S_ACTIVE); 424 nr = g_raid_nsubdisks(vol, G_RAID_SUBDISK_S_REBUILD) + 425 g_raid_nsubdisks(vol, G_RAID_SUBDISK_S_RESYNC); 426 switch(trs->trso_type) { 427 case TR_RAID1_NONE: 428 if (na == 0) 429 return; 430 if (nr == 0) { 431 nr = g_raid_nsubdisks(vol, G_RAID_SUBDISK_S_NEW) + 432 g_raid_nsubdisks(vol, G_RAID_SUBDISK_S_STALE) + 433 g_raid_nsubdisks(vol, G_RAID_SUBDISK_S_UNINITIALIZED); 434 if (nr == 0) 435 return; 436 } 437 g_raid_tr_raid1_rebuild_start(tr); 438 break; 439 case TR_RAID1_REBUILD: 440 if (na == 0 || nr == 0 || trs->trso_failed_sd == sd) 441 g_raid_tr_raid1_rebuild_abort(tr); 442 break; 443 case TR_RAID1_RESYNC: 444 break; 445 } 446 } 447 448 static int 449 g_raid_tr_event_raid1(struct g_raid_tr_object *tr, 450 struct g_raid_subdisk *sd, u_int event) 451 { 452 453 g_raid_tr_update_state_raid1(tr->tro_volume, sd); 454 return (0); 455 } 456 457 static int 458 g_raid_tr_start_raid1(struct g_raid_tr_object *tr) 459 { 460 struct g_raid_tr_raid1_object *trs; 461 struct g_raid_volume *vol; 462 463 trs = (struct g_raid_tr_raid1_object *)tr; 464 vol = tr->tro_volume; 465 trs->trso_starting = 0; 466 g_raid_tr_update_state_raid1(vol, NULL); 467 return (0); 468 } 469 470 static int 471 g_raid_tr_stop_raid1(struct g_raid_tr_object *tr) 472 { 473 struct g_raid_tr_raid1_object *trs; 474 struct g_raid_volume *vol; 475 476 trs = (struct g_raid_tr_raid1_object *)tr; 477 vol = tr->tro_volume; 478 trs->trso_starting = 0; 479 trs->trso_stopping = 1; 480 g_raid_tr_update_state_raid1(vol, NULL); 481 return (0); 482 } 483 484 /* 485 * Select the disk to read from. Take into account: subdisk state, running 486 * error recovery, average disk load, head position and possible cache hits. 487 */ 488 #define ABS(x) (((x) >= 0) ? (x) : (-(x))) 489 static struct g_raid_subdisk * 490 g_raid_tr_raid1_select_read_disk(struct g_raid_volume *vol, struct bio *bp, 491 u_int mask) 492 { 493 struct g_raid_subdisk *sd, *best; 494 int i, prio, bestprio; 495 496 best = NULL; 497 bestprio = INT_MAX; 498 for (i = 0; i < vol->v_disks_count; i++) { 499 sd = &vol->v_subdisks[i]; 500 if (sd->sd_state != G_RAID_SUBDISK_S_ACTIVE && 501 ((sd->sd_state != G_RAID_SUBDISK_S_REBUILD && 502 sd->sd_state != G_RAID_SUBDISK_S_RESYNC) || 503 bp->bio_offset + bp->bio_length > sd->sd_rebuild_pos)) 504 continue; 505 if ((mask & (1 << i)) != 0) 506 continue; 507 prio = G_RAID_SUBDISK_LOAD(sd); 508 prio += min(sd->sd_recovery, 255) << 22; 509 prio += (G_RAID_SUBDISK_S_ACTIVE - sd->sd_state) << 16; 510 /* If disk head is precisely in position - highly prefer it. */ 511 if (G_RAID_SUBDISK_POS(sd) == bp->bio_offset) 512 prio -= 2 * G_RAID_SUBDISK_LOAD_SCALE; 513 else 514 /* If disk head is close to position - prefer it. */ 515 if (ABS(G_RAID_SUBDISK_POS(sd) - bp->bio_offset) < 516 G_RAID_SUBDISK_TRACK_SIZE) 517 prio -= 1 * G_RAID_SUBDISK_LOAD_SCALE; 518 if (prio < bestprio) { 519 best = sd; 520 bestprio = prio; 521 } 522 } 523 return (best); 524 } 525 526 static void 527 g_raid_tr_iostart_raid1_read(struct g_raid_tr_object *tr, struct bio *bp) 528 { 529 struct g_raid_subdisk *sd; 530 struct bio *cbp; 531 532 sd = g_raid_tr_raid1_select_read_disk(tr->tro_volume, bp, 0); 533 KASSERT(sd != NULL, ("No active disks in volume %s.", 534 tr->tro_volume->v_name)); 535 536 cbp = g_clone_bio(bp); 537 if (cbp == NULL) { 538 g_raid_iodone(bp, ENOMEM); 539 return; 540 } 541 542 g_raid_subdisk_iostart(sd, cbp); 543 } 544 545 static void 546 g_raid_tr_iostart_raid1_write(struct g_raid_tr_object *tr, struct bio *bp) 547 { 548 struct g_raid_volume *vol; 549 struct g_raid_subdisk *sd; 550 struct bio_queue_head queue; 551 struct bio *cbp; 552 int i; 553 554 vol = tr->tro_volume; 555 556 /* 557 * Allocate all bios before sending any request, so we can return 558 * ENOMEM in nice and clean way. 559 */ 560 bioq_init(&queue); 561 for (i = 0; i < vol->v_disks_count; i++) { 562 sd = &vol->v_subdisks[i]; 563 switch (sd->sd_state) { 564 case G_RAID_SUBDISK_S_ACTIVE: 565 break; 566 case G_RAID_SUBDISK_S_REBUILD: 567 /* 568 * When rebuilding, only part of this subdisk is 569 * writable, the rest will be written as part of the 570 * that process. 571 */ 572 if (bp->bio_offset >= sd->sd_rebuild_pos) 573 continue; 574 break; 575 case G_RAID_SUBDISK_S_STALE: 576 case G_RAID_SUBDISK_S_RESYNC: 577 /* 578 * Resyncing still writes on the theory that the 579 * resync'd disk is very close and writing it will 580 * keep it that way better if we keep up while 581 * resyncing. 582 */ 583 break; 584 default: 585 continue; 586 } 587 cbp = g_clone_bio(bp); 588 if (cbp == NULL) 589 goto failure; 590 cbp->bio_caller1 = sd; 591 bioq_insert_tail(&queue, cbp); 592 } 593 while ((cbp = bioq_takefirst(&queue)) != NULL) { 594 sd = cbp->bio_caller1; 595 cbp->bio_caller1 = NULL; 596 g_raid_subdisk_iostart(sd, cbp); 597 } 598 return; 599 failure: 600 while ((cbp = bioq_takefirst(&queue)) != NULL) 601 g_destroy_bio(cbp); 602 if (bp->bio_error == 0) 603 bp->bio_error = ENOMEM; 604 g_raid_iodone(bp, bp->bio_error); 605 } 606 607 static void 608 g_raid_tr_iostart_raid1(struct g_raid_tr_object *tr, struct bio *bp) 609 { 610 struct g_raid_volume *vol; 611 struct g_raid_tr_raid1_object *trs; 612 613 vol = tr->tro_volume; 614 trs = (struct g_raid_tr_raid1_object *)tr; 615 if (vol->v_state != G_RAID_VOLUME_S_OPTIMAL && 616 vol->v_state != G_RAID_VOLUME_S_SUBOPTIMAL && 617 vol->v_state != G_RAID_VOLUME_S_DEGRADED) { 618 g_raid_iodone(bp, EIO); 619 return; 620 } 621 /* 622 * If we're rebuilding, squeeze in rebuild activity every so often, 623 * even when the disk is busy. Be sure to only count real I/O 624 * to the disk. All 'SPECIAL' I/O is traffic generated to the disk 625 * by this module. 626 */ 627 if (trs->trso_failed_sd != NULL && 628 !(bp->bio_cflags & G_RAID_BIO_FLAG_SPECIAL)) { 629 /* Make this new or running now round short. */ 630 trs->trso_recover_slabs = 0; 631 if (--trs->trso_fair_io <= 0) { 632 trs->trso_fair_io = g_raid1_rebuild_fair_io; 633 g_raid_tr_raid1_rebuild_some(tr); 634 } 635 } 636 switch (bp->bio_cmd) { 637 case BIO_READ: 638 g_raid_tr_iostart_raid1_read(tr, bp); 639 break; 640 case BIO_WRITE: 641 case BIO_DELETE: 642 g_raid_tr_iostart_raid1_write(tr, bp); 643 break; 644 case BIO_SPEEDUP: 645 case BIO_FLUSH: 646 g_raid_tr_flush_common(tr, bp); 647 break; 648 default: 649 KASSERT(1 == 0, ("Invalid command here: %u (volume=%s)", 650 bp->bio_cmd, vol->v_name)); 651 break; 652 } 653 } 654 655 static void 656 g_raid_tr_iodone_raid1(struct g_raid_tr_object *tr, 657 struct g_raid_subdisk *sd, struct bio *bp) 658 { 659 struct bio *cbp; 660 struct g_raid_subdisk *nsd; 661 struct g_raid_volume *vol; 662 struct bio *pbp; 663 struct g_raid_tr_raid1_object *trs; 664 uintptr_t *mask; 665 int error, do_write; 666 667 trs = (struct g_raid_tr_raid1_object *)tr; 668 vol = tr->tro_volume; 669 if (bp->bio_cflags & G_RAID_BIO_FLAG_SYNC) { 670 /* 671 * This operation is part of a rebuild or resync operation. 672 * See what work just got done, then schedule the next bit of 673 * work, if any. Rebuild/resync is done a little bit at a 674 * time. Either when a timeout happens, or after we get a 675 * bunch of I/Os to the disk (to make sure an active system 676 * will complete in a sane amount of time). 677 * 678 * We are setup to do differing amounts of work for each of 679 * these cases. so long as the slabs is smallish (less than 680 * 50 or so, I'd guess, but that's just a WAG), we shouldn't 681 * have any bio starvation issues. For active disks, we do 682 * 5MB of data, for inactive ones, we do 50MB. 683 */ 684 if (trs->trso_type == TR_RAID1_REBUILD) { 685 if (bp->bio_cmd == BIO_READ) { 686 687 /* Immediately abort rebuild, if requested. */ 688 if (trs->trso_flags & TR_RAID1_F_ABORT) { 689 trs->trso_flags &= ~TR_RAID1_F_DOING_SOME; 690 g_raid_tr_raid1_rebuild_abort(tr); 691 return; 692 } 693 694 /* On read error, skip and cross fingers. */ 695 if (bp->bio_error != 0) { 696 G_RAID_LOGREQ(0, bp, 697 "Read error during rebuild (%d), " 698 "possible data loss!", 699 bp->bio_error); 700 goto rebuild_round_done; 701 } 702 703 /* 704 * The read operation finished, queue the 705 * write and get out. 706 */ 707 G_RAID_LOGREQ(4, bp, "rebuild read done. %d", 708 bp->bio_error); 709 bp->bio_cmd = BIO_WRITE; 710 bp->bio_cflags = G_RAID_BIO_FLAG_SYNC; 711 G_RAID_LOGREQ(4, bp, "Queueing rebuild write."); 712 g_raid_subdisk_iostart(trs->trso_failed_sd, bp); 713 } else { 714 /* 715 * The write operation just finished. Do 716 * another. We keep cloning the master bio 717 * since it has the right buffers allocated to 718 * it. 719 */ 720 G_RAID_LOGREQ(4, bp, 721 "rebuild write done. Error %d", 722 bp->bio_error); 723 nsd = trs->trso_failed_sd; 724 if (bp->bio_error != 0 || 725 trs->trso_flags & TR_RAID1_F_ABORT) { 726 if ((trs->trso_flags & 727 TR_RAID1_F_ABORT) == 0) { 728 g_raid_tr_raid1_fail_disk(sd->sd_softc, 729 nsd, nsd->sd_disk); 730 } 731 trs->trso_flags &= ~TR_RAID1_F_DOING_SOME; 732 g_raid_tr_raid1_rebuild_abort(tr); 733 return; 734 } 735 rebuild_round_done: 736 nsd = trs->trso_failed_sd; 737 trs->trso_flags &= ~TR_RAID1_F_LOCKED; 738 g_raid_unlock_range(sd->sd_volume, 739 bp->bio_offset, bp->bio_length); 740 nsd->sd_rebuild_pos += bp->bio_length; 741 if (nsd->sd_rebuild_pos >= nsd->sd_size) { 742 g_raid_tr_raid1_rebuild_finish(tr); 743 return; 744 } 745 746 /* Abort rebuild if we are stopping */ 747 if (trs->trso_stopping) { 748 trs->trso_flags &= ~TR_RAID1_F_DOING_SOME; 749 g_raid_tr_raid1_rebuild_abort(tr); 750 return; 751 } 752 753 if (--trs->trso_meta_update <= 0) { 754 g_raid_write_metadata(vol->v_softc, 755 vol, nsd, nsd->sd_disk); 756 trs->trso_meta_update = 757 g_raid1_rebuild_meta_update; 758 } 759 trs->trso_flags &= ~TR_RAID1_F_DOING_SOME; 760 if (--trs->trso_recover_slabs <= 0) 761 return; 762 g_raid_tr_raid1_rebuild_some(tr); 763 } 764 } else if (trs->trso_type == TR_RAID1_RESYNC) { 765 /* 766 * read good sd, read bad sd in parallel. when both 767 * done, compare the buffers. write good to the bad 768 * if different. do the next bit of work. 769 */ 770 panic("Somehow, we think we're doing a resync"); 771 } 772 return; 773 } 774 pbp = bp->bio_parent; 775 pbp->bio_inbed++; 776 if (bp->bio_cmd == BIO_READ && bp->bio_error != 0) { 777 /* 778 * Read failed on first drive. Retry the read error on 779 * another disk drive, if available, before erroring out the 780 * read. 781 */ 782 sd->sd_disk->d_read_errs++; 783 G_RAID_LOGREQ(0, bp, 784 "Read error (%d), %d read errors total", 785 bp->bio_error, sd->sd_disk->d_read_errs); 786 787 /* 788 * If there are too many read errors, we move to degraded. 789 * XXX Do we want to FAIL the drive (eg, make the user redo 790 * everything to get it back in sync), or just degrade the 791 * drive, which kicks off a resync? 792 */ 793 do_write = 1; 794 if (sd->sd_disk->d_read_errs > g_raid_read_err_thresh) { 795 g_raid_tr_raid1_fail_disk(sd->sd_softc, sd, sd->sd_disk); 796 if (pbp->bio_children == 1) 797 do_write = 0; 798 } 799 800 /* 801 * Find the other disk, and try to do the I/O to it. 802 */ 803 mask = (uintptr_t *)(&pbp->bio_driver2); 804 if (pbp->bio_children == 1) { 805 /* Save original subdisk. */ 806 pbp->bio_driver1 = do_write ? sd : NULL; 807 *mask = 0; 808 } 809 *mask |= 1 << sd->sd_pos; 810 nsd = g_raid_tr_raid1_select_read_disk(vol, pbp, *mask); 811 if (nsd != NULL && (cbp = g_clone_bio(pbp)) != NULL) { 812 g_destroy_bio(bp); 813 G_RAID_LOGREQ(2, cbp, "Retrying read from %d", 814 nsd->sd_pos); 815 if (pbp->bio_children == 2 && do_write) { 816 sd->sd_recovery++; 817 cbp->bio_caller1 = nsd; 818 pbp->bio_pflags = G_RAID_BIO_FLAG_LOCKED; 819 /* Lock callback starts I/O */ 820 g_raid_lock_range(sd->sd_volume, 821 cbp->bio_offset, cbp->bio_length, pbp, cbp); 822 } else { 823 g_raid_subdisk_iostart(nsd, cbp); 824 } 825 return; 826 } 827 /* 828 * We can't retry. Return the original error by falling 829 * through. This will happen when there's only one good disk. 830 * We don't need to fail the raid, since its actual state is 831 * based on the state of the subdisks. 832 */ 833 G_RAID_LOGREQ(2, bp, "Couldn't retry read, failing it"); 834 } 835 if (bp->bio_cmd == BIO_READ && 836 bp->bio_error == 0 && 837 pbp->bio_children > 1 && 838 pbp->bio_driver1 != NULL) { 839 /* 840 * If it was a read, and bio_children is >1, then we just 841 * recovered the data from the second drive. We should try to 842 * write that data to the first drive if sector remapping is 843 * enabled. A write should put the data in a new place on the 844 * disk, remapping the bad sector. Do we need to do that by 845 * queueing a request to the main worker thread? It doesn't 846 * affect the return code of this current read, and can be 847 * done at our leisure. However, to make the code simpler, it 848 * is done synchronously. 849 */ 850 G_RAID_LOGREQ(3, bp, "Recovered data from other drive"); 851 cbp = g_clone_bio(pbp); 852 if (cbp != NULL) { 853 g_destroy_bio(bp); 854 cbp->bio_cmd = BIO_WRITE; 855 cbp->bio_cflags = G_RAID_BIO_FLAG_REMAP; 856 G_RAID_LOGREQ(2, cbp, 857 "Attempting bad sector remap on failing drive."); 858 g_raid_subdisk_iostart(pbp->bio_driver1, cbp); 859 return; 860 } 861 } 862 if (pbp->bio_pflags & G_RAID_BIO_FLAG_LOCKED) { 863 /* 864 * We're done with a recovery, mark the range as unlocked. 865 * For any write errors, we aggressively fail the disk since 866 * there was both a READ and a WRITE error at this location. 867 * Both types of errors generally indicates the drive is on 868 * the verge of total failure anyway. Better to stop trusting 869 * it now. However, we need to reset error to 0 in that case 870 * because we're not failing the original I/O which succeeded. 871 */ 872 if (bp->bio_cmd == BIO_WRITE && bp->bio_error) { 873 G_RAID_LOGREQ(0, bp, "Remap write failed: " 874 "failing subdisk."); 875 g_raid_tr_raid1_fail_disk(sd->sd_softc, sd, sd->sd_disk); 876 bp->bio_error = 0; 877 } 878 if (pbp->bio_driver1 != NULL) { 879 ((struct g_raid_subdisk *)pbp->bio_driver1) 880 ->sd_recovery--; 881 } 882 G_RAID_LOGREQ(2, bp, "REMAP done %d.", bp->bio_error); 883 g_raid_unlock_range(sd->sd_volume, bp->bio_offset, 884 bp->bio_length); 885 } 886 if (pbp->bio_cmd != BIO_READ) { 887 if (pbp->bio_inbed == 1 || pbp->bio_error != 0) 888 pbp->bio_error = bp->bio_error; 889 if (pbp->bio_cmd == BIO_WRITE && bp->bio_error != 0) { 890 G_RAID_LOGREQ(0, bp, "Write failed: failing subdisk."); 891 g_raid_tr_raid1_fail_disk(sd->sd_softc, sd, sd->sd_disk); 892 } 893 error = pbp->bio_error; 894 } else 895 error = bp->bio_error; 896 g_destroy_bio(bp); 897 if (pbp->bio_children == pbp->bio_inbed) { 898 pbp->bio_completed = pbp->bio_length; 899 g_raid_iodone(pbp, error); 900 } 901 } 902 903 static int 904 g_raid_tr_kerneldump_raid1(struct g_raid_tr_object *tr, 905 void *virtual, vm_offset_t physical, off_t offset, size_t length) 906 { 907 struct g_raid_volume *vol; 908 struct g_raid_subdisk *sd; 909 int error, i, ok; 910 911 vol = tr->tro_volume; 912 error = 0; 913 ok = 0; 914 for (i = 0; i < vol->v_disks_count; i++) { 915 sd = &vol->v_subdisks[i]; 916 switch (sd->sd_state) { 917 case G_RAID_SUBDISK_S_ACTIVE: 918 break; 919 case G_RAID_SUBDISK_S_REBUILD: 920 /* 921 * When rebuilding, only part of this subdisk is 922 * writable, the rest will be written as part of the 923 * that process. 924 */ 925 if (offset >= sd->sd_rebuild_pos) 926 continue; 927 break; 928 case G_RAID_SUBDISK_S_STALE: 929 case G_RAID_SUBDISK_S_RESYNC: 930 /* 931 * Resyncing still writes on the theory that the 932 * resync'd disk is very close and writing it will 933 * keep it that way better if we keep up while 934 * resyncing. 935 */ 936 break; 937 default: 938 continue; 939 } 940 error = g_raid_subdisk_kerneldump(sd, 941 virtual, physical, offset, length); 942 if (error == 0) 943 ok++; 944 } 945 return (ok > 0 ? 0 : error); 946 } 947 948 static int 949 g_raid_tr_locked_raid1(struct g_raid_tr_object *tr, void *argp) 950 { 951 struct bio *bp; 952 struct g_raid_subdisk *sd; 953 954 bp = (struct bio *)argp; 955 sd = (struct g_raid_subdisk *)bp->bio_caller1; 956 g_raid_subdisk_iostart(sd, bp); 957 958 return (0); 959 } 960 961 static int 962 g_raid_tr_idle_raid1(struct g_raid_tr_object *tr) 963 { 964 struct g_raid_tr_raid1_object *trs; 965 966 trs = (struct g_raid_tr_raid1_object *)tr; 967 trs->trso_fair_io = g_raid1_rebuild_fair_io; 968 trs->trso_recover_slabs = g_raid1_rebuild_cluster_idle; 969 if (trs->trso_type == TR_RAID1_REBUILD) 970 g_raid_tr_raid1_rebuild_some(tr); 971 return (0); 972 } 973 974 static int 975 g_raid_tr_free_raid1(struct g_raid_tr_object *tr) 976 { 977 struct g_raid_tr_raid1_object *trs; 978 979 trs = (struct g_raid_tr_raid1_object *)tr; 980 981 if (trs->trso_buffer != NULL) { 982 free(trs->trso_buffer, M_TR_RAID1); 983 trs->trso_buffer = NULL; 984 } 985 return (0); 986 } 987 988 G_RAID_TR_DECLARE(raid1, "RAID1"); 989