17c478bd9Sstevel@tonic-gate /* 27c478bd9Sstevel@tonic-gate * CDDL HEADER START 37c478bd9Sstevel@tonic-gate * 47c478bd9Sstevel@tonic-gate * The contents of this file are subject to the terms of the 53d7072f8Seschrock * Common Development and Distribution License (the "License"). 63d7072f8Seschrock * You may not use this file except in compliance with the License. 77c478bd9Sstevel@tonic-gate * 87c478bd9Sstevel@tonic-gate * You can obtain a copy of the license at usr/src/OPENSOLARIS.LICENSE 97c478bd9Sstevel@tonic-gate * or http://www.opensolaris.org/os/licensing. 107c478bd9Sstevel@tonic-gate * See the License for the specific language governing permissions 117c478bd9Sstevel@tonic-gate * and limitations under the License. 127c478bd9Sstevel@tonic-gate * 137c478bd9Sstevel@tonic-gate * When distributing Covered Code, include this CDDL HEADER in each 147c478bd9Sstevel@tonic-gate * file and include the License file at usr/src/OPENSOLARIS.LICENSE. 157c478bd9Sstevel@tonic-gate * If applicable, add the following below this CDDL HEADER, with the 167c478bd9Sstevel@tonic-gate * fields enclosed by brackets "[]" replaced with your own identifying 177c478bd9Sstevel@tonic-gate * information: Portions Copyright [yyyy] [name of copyright owner] 187c478bd9Sstevel@tonic-gate * 197c478bd9Sstevel@tonic-gate * CDDL HEADER END 207c478bd9Sstevel@tonic-gate */ 217c478bd9Sstevel@tonic-gate /* 22b1efbcd6SAlok Aggarwal * Copyright 2009 Sun Microsystems, Inc. All rights reserved. 237c478bd9Sstevel@tonic-gate * Use is subject to license terms. 247c478bd9Sstevel@tonic-gate */ 257c478bd9Sstevel@tonic-gate 267c478bd9Sstevel@tonic-gate 277c478bd9Sstevel@tonic-gate #ifndef _SYS_LOFI_H 287c478bd9Sstevel@tonic-gate #define _SYS_LOFI_H 297c478bd9Sstevel@tonic-gate 307c478bd9Sstevel@tonic-gate #include <sys/types.h> 317c478bd9Sstevel@tonic-gate #include <sys/time.h> 327c478bd9Sstevel@tonic-gate #include <sys/taskq.h> 337c478bd9Sstevel@tonic-gate #include <sys/vtoc.h> 347c478bd9Sstevel@tonic-gate #include <sys/dkio.h> 357c478bd9Sstevel@tonic-gate #include <sys/vnode.h> 36*4058a205Sjrgn.keil@googlemail.com #include <sys/list.h> 377d82f0f8SDina K Nimeh #include <sys/crypto/api.h> 387c478bd9Sstevel@tonic-gate 397c478bd9Sstevel@tonic-gate #ifdef __cplusplus 407c478bd9Sstevel@tonic-gate extern "C" { 417c478bd9Sstevel@tonic-gate #endif 427c478bd9Sstevel@tonic-gate 437c478bd9Sstevel@tonic-gate /* 447c478bd9Sstevel@tonic-gate * /dev names: 457c478bd9Sstevel@tonic-gate * /dev/lofictl - master control device 467c478bd9Sstevel@tonic-gate * /dev/lofi - block devices, named by minor number 477c478bd9Sstevel@tonic-gate * /dev/rlofi - character devices, named by minor number 487c478bd9Sstevel@tonic-gate */ 497c478bd9Sstevel@tonic-gate #define LOFI_DRIVER_NAME "lofi" 507c478bd9Sstevel@tonic-gate #define LOFI_CTL_NODE "ctl" 517c478bd9Sstevel@tonic-gate #define LOFI_CTL_NAME LOFI_DRIVER_NAME LOFI_CTL_NODE 527c478bd9Sstevel@tonic-gate #define LOFI_BLOCK_NAME LOFI_DRIVER_NAME 537c478bd9Sstevel@tonic-gate #define LOFI_CHAR_NAME "r" LOFI_DRIVER_NAME 547c478bd9Sstevel@tonic-gate 5587117650Saalok #define SEGHDR 1 5687117650Saalok #define COMPRESSED 1 5787117650Saalok #define UNCOMPRESSED 0 5887117650Saalok #define MAXALGLEN 36 5987117650Saalok 607c478bd9Sstevel@tonic-gate /* 617c478bd9Sstevel@tonic-gate * 627c478bd9Sstevel@tonic-gate * Use is: 637c478bd9Sstevel@tonic-gate * ld = open("/dev/lofictl", O_RDWR | O_EXCL); 647c478bd9Sstevel@tonic-gate * 657c478bd9Sstevel@tonic-gate * lofi must be opened exclusively. Access is controlled by permissions on 667c478bd9Sstevel@tonic-gate * the device, which is 644 by default. Write-access is required for ioctls 677c478bd9Sstevel@tonic-gate * that change state, but only read-access is required for the ioctls that 687c478bd9Sstevel@tonic-gate * return information. Basically, only root can add and remove files, but 697c478bd9Sstevel@tonic-gate * non-root can look at the current lists. 707c478bd9Sstevel@tonic-gate * 717c478bd9Sstevel@tonic-gate * ioctl usage: 727c478bd9Sstevel@tonic-gate * 737c478bd9Sstevel@tonic-gate * kernel ioctls 747c478bd9Sstevel@tonic-gate * 757c478bd9Sstevel@tonic-gate * strcpy(li.li_filename, "somefilename"); 767c478bd9Sstevel@tonic-gate * ioctl(ld, LOFI_MAP_FILE, &li); 777c478bd9Sstevel@tonic-gate * newminor = li.li_minor; 787c478bd9Sstevel@tonic-gate * 797c478bd9Sstevel@tonic-gate * strcpy(li.li_filename, "somefilename"); 807c478bd9Sstevel@tonic-gate * ioctl(ld, LOFI_UNMAP_FILE, &li); 817c478bd9Sstevel@tonic-gate * 827c478bd9Sstevel@tonic-gate * strcpy(li.li_filename, "somefilename"); 837c478bd9Sstevel@tonic-gate * li.li_minor = minor_number; 847c478bd9Sstevel@tonic-gate * ioctl(ld, LOFI_MAP_FILE_MINOR, &li); 857c478bd9Sstevel@tonic-gate * 867c478bd9Sstevel@tonic-gate * li.li_minor = minor_number; 877c478bd9Sstevel@tonic-gate * ioctl(ld, LOFI_UNMAP_FILE_MINOR, &li); 887c478bd9Sstevel@tonic-gate * 897c478bd9Sstevel@tonic-gate * li.li_minor = minor_number; 907c478bd9Sstevel@tonic-gate * ioctl(ld, LOFI_GET_FILENAME, &li); 917d82f0f8SDina K Nimeh * filename = li.li_filename; 927d82f0f8SDina K Nimeh * encrypted = li.li_crypto_enabled; 937c478bd9Sstevel@tonic-gate * 947c478bd9Sstevel@tonic-gate * strcpy(li.li_filename, "somefilename"); 957c478bd9Sstevel@tonic-gate * ioctl(ld, LOFI_GET_MINOR, &li); 967d82f0f8SDina K Nimeh * minor = li.li_minor; 977c478bd9Sstevel@tonic-gate * 987c478bd9Sstevel@tonic-gate * li.li_minor = 0; 997c478bd9Sstevel@tonic-gate * ioctl(ld, LOFI_GET_MAXMINOR, &li); 1007c478bd9Sstevel@tonic-gate * maxminor = li.li_minor; 1017c478bd9Sstevel@tonic-gate * 10287117650Saalok * strcpy(li.li_filename, "somefilename"); 10387117650Saalok * li.li_minor = 0; 10487117650Saalok * ioctl(ld, LOFI_CHECK_COMPRESSED, &li); 10587117650Saalok * 1063d7072f8Seschrock * If the 'li_force' flag is set for any of the LOFI_UNMAP_* commands, then if 1073d7072f8Seschrock * the device is busy, the underlying vnode will be closed, and any subsequent 1083d7072f8Seschrock * operations will fail. It will behave as if the device had been forcibly 1093d7072f8Seschrock * removed, so the DKIOCSTATE ioctl will return DKIO_DEV_GONE. When the device 1103d7072f8Seschrock * is last closed, it will be torn down. 1113d7072f8Seschrock * 11293239addSjohnlev * If the 'li_cleanup' flag is set for any of the LOFI_UNMAP_* commands, then 11393239addSjohnlev * if the device is busy, it is marked for removal at the next time it is 11493239addSjohnlev * no longer held open by anybody. When the device is last closed, it will be 11593239addSjohnlev * torn down. 11693239addSjohnlev * 1177c478bd9Sstevel@tonic-gate * Oh, and last but not least: these ioctls are totally private and only 1187c478bd9Sstevel@tonic-gate * for use by lofiadm(1M). 1197c478bd9Sstevel@tonic-gate * 1207c478bd9Sstevel@tonic-gate */ 1217c478bd9Sstevel@tonic-gate 1227d82f0f8SDina K Nimeh typedef enum iv_method { 1237d82f0f8SDina K Nimeh IVM_NONE, /* no iv needed, iv is null */ 1247d82f0f8SDina K Nimeh IVM_ENC_BLKNO /* iv is logical block no. encrypted */ 1257d82f0f8SDina K Nimeh } iv_method_t; 1267d82f0f8SDina K Nimeh 1277c478bd9Sstevel@tonic-gate struct lofi_ioctl { 1287c478bd9Sstevel@tonic-gate uint32_t li_minor; 1293d7072f8Seschrock boolean_t li_force; 13093239addSjohnlev boolean_t li_cleanup; 1316f02aa44SDina K Nimeh char li_filename[MAXPATHLEN]; 1327d82f0f8SDina K Nimeh 1337d82f0f8SDina K Nimeh /* the following fields are required for compression support */ 13487117650Saalok char li_algorithm[MAXALGLEN]; 1357d82f0f8SDina K Nimeh 1367d82f0f8SDina K Nimeh /* the following fields are required for encryption support */ 1377d82f0f8SDina K Nimeh boolean_t li_crypto_enabled; 1387d82f0f8SDina K Nimeh crypto_mech_name_t li_cipher; /* for data */ 1397d82f0f8SDina K Nimeh uint32_t li_key_len; /* for data */ 1407d82f0f8SDina K Nimeh char li_key[56]; /* for data: max 448-bit Blowfish key */ 1417d82f0f8SDina K Nimeh crypto_mech_name_t li_iv_cipher; /* for iv derivation */ 1427d82f0f8SDina K Nimeh uint32_t li_iv_len; /* for iv derivation */ 1437d82f0f8SDina K Nimeh iv_method_t li_iv_type; /* for iv derivation */ 1447c478bd9Sstevel@tonic-gate }; 1457c478bd9Sstevel@tonic-gate 1467c478bd9Sstevel@tonic-gate #define LOFI_IOC_BASE (('L' << 16) | ('F' << 8)) 1477c478bd9Sstevel@tonic-gate 1487c478bd9Sstevel@tonic-gate #define LOFI_MAP_FILE (LOFI_IOC_BASE | 0x01) 1497c478bd9Sstevel@tonic-gate #define LOFI_MAP_FILE_MINOR (LOFI_IOC_BASE | 0x02) 1507c478bd9Sstevel@tonic-gate #define LOFI_UNMAP_FILE (LOFI_IOC_BASE | 0x03) 1517c478bd9Sstevel@tonic-gate #define LOFI_UNMAP_FILE_MINOR (LOFI_IOC_BASE | 0x04) 1527c478bd9Sstevel@tonic-gate #define LOFI_GET_FILENAME (LOFI_IOC_BASE | 0x05) 1537c478bd9Sstevel@tonic-gate #define LOFI_GET_MINOR (LOFI_IOC_BASE | 0x06) 1547c478bd9Sstevel@tonic-gate #define LOFI_GET_MAXMINOR (LOFI_IOC_BASE | 0x07) 15587117650Saalok #define LOFI_CHECK_COMPRESSED (LOFI_IOC_BASE | 0x08) 1567c478bd9Sstevel@tonic-gate 1577c478bd9Sstevel@tonic-gate /* 1587c478bd9Sstevel@tonic-gate * file types that might be usable with lofi, maybe. Only regular 1597c478bd9Sstevel@tonic-gate * files are documented though. 1607c478bd9Sstevel@tonic-gate */ 1617c478bd9Sstevel@tonic-gate #define S_ISLOFIABLE(mode) \ 1627c478bd9Sstevel@tonic-gate (S_ISREG(mode) || S_ISBLK(mode) || S_ISCHR(mode)) 1637c478bd9Sstevel@tonic-gate 1647c478bd9Sstevel@tonic-gate #if defined(_KERNEL) 1657c478bd9Sstevel@tonic-gate 166*4058a205Sjrgn.keil@googlemail.com 167*4058a205Sjrgn.keil@googlemail.com /* 168*4058a205Sjrgn.keil@googlemail.com * Cache decompressed data segments for the compressed lofi images. 169*4058a205Sjrgn.keil@googlemail.com * 170*4058a205Sjrgn.keil@googlemail.com * To avoid that we have to decompress data of a compressed 171*4058a205Sjrgn.keil@googlemail.com * segment multiple times when accessing parts of the segment's 172*4058a205Sjrgn.keil@googlemail.com * data we cache the uncompressed data, using a simple linked list. 173*4058a205Sjrgn.keil@googlemail.com */ 174*4058a205Sjrgn.keil@googlemail.com struct lofi_comp_cache { 175*4058a205Sjrgn.keil@googlemail.com list_node_t lc_list; /* linked list */ 176*4058a205Sjrgn.keil@googlemail.com uchar_t *lc_data; /* decompressed segment data */ 177*4058a205Sjrgn.keil@googlemail.com uint64_t lc_index; /* segment index */ 178*4058a205Sjrgn.keil@googlemail.com }; 179*4058a205Sjrgn.keil@googlemail.com 1807c478bd9Sstevel@tonic-gate /* 1817c478bd9Sstevel@tonic-gate * We limit the maximum number of active lofi devices to 128, which seems very 1827c478bd9Sstevel@tonic-gate * large. You can tune this by changing lofi_max_files in /etc/system. 1837c478bd9Sstevel@tonic-gate * If you change it dynamically, which you probably shouldn't do, make sure 1847c478bd9Sstevel@tonic-gate * to only _increase_ it. 1857c478bd9Sstevel@tonic-gate */ 1867c478bd9Sstevel@tonic-gate #define LOFI_MAX_FILES 128 1877c478bd9Sstevel@tonic-gate extern uint32_t lofi_max_files; 1887c478bd9Sstevel@tonic-gate 1897c478bd9Sstevel@tonic-gate #define V_ISLOFIABLE(vtype) \ 1907c478bd9Sstevel@tonic-gate ((vtype == VREG) || (vtype == VBLK) || (vtype == VCHR)) 1917c478bd9Sstevel@tonic-gate 1927d82f0f8SDina K Nimeh /* 1937d82f0f8SDina K Nimeh * Need exactly 6 bytes to identify encrypted lofi image 1947d82f0f8SDina K Nimeh */ 1957d82f0f8SDina K Nimeh extern const char lofi_crypto_magic[6]; 1967d82f0f8SDina K Nimeh #define LOFI_CRYPTO_MAGIC { 'C', 'F', 'L', 'O', 'F', 'I' } 1977d82f0f8SDina K Nimeh #define LOFI_CRYPTO_VERSION ((uint16_t)0) 1987d82f0f8SDina K Nimeh #define LOFI_CRYPTO_DATA_SECTOR ((uint32_t)16) /* for version 0 */ 1997d82f0f8SDina K Nimeh 2007d82f0f8SDina K Nimeh /* 2017d82f0f8SDina K Nimeh * Crypto metadata for encrypted lofi images 2027d82f0f8SDina K Nimeh * The fields here only satisfy initial implementation requirements. 2037d82f0f8SDina K Nimeh */ 2047d82f0f8SDina K Nimeh struct crypto_meta { 2057d82f0f8SDina K Nimeh char magic[6]; /* LOFI_CRYPTO_MAGIC */ 2067d82f0f8SDina K Nimeh uint16_t version; /* version of encrypted lofi */ 2077d82f0f8SDina K Nimeh char reserved1[96]; /* future use */ 2087d82f0f8SDina K Nimeh uint32_t data_sector; /* start of data area */ 2097d82f0f8SDina K Nimeh char pad[404]; /* end on DEV_BSIZE bdry */ 2107d82f0f8SDina K Nimeh /* second header block is not defined at this time */ 2117d82f0f8SDina K Nimeh }; 2127d82f0f8SDina K Nimeh 2137c478bd9Sstevel@tonic-gate struct lofi_state { 2147c478bd9Sstevel@tonic-gate char *ls_filename; /* filename to open */ 2157c478bd9Sstevel@tonic-gate size_t ls_filename_sz; 2167c478bd9Sstevel@tonic-gate struct vnode *ls_vp; /* open vnode */ 2173d7072f8Seschrock kmutex_t ls_vp_lock; /* protects ls_vp */ 2183d7072f8Seschrock kcondvar_t ls_vp_cv; /* signal changes to ls_vp */ 2193d7072f8Seschrock uint32_t ls_vp_iocount; /* # pending I/O requests */ 2203d7072f8Seschrock boolean_t ls_vp_closereq; /* force close requested */ 2217c478bd9Sstevel@tonic-gate u_offset_t ls_vp_size; 2227c478bd9Sstevel@tonic-gate uint32_t ls_blk_open; 2237c478bd9Sstevel@tonic-gate uint32_t ls_chr_open; 2247c478bd9Sstevel@tonic-gate uint32_t ls_lyr_open_count; 2257c478bd9Sstevel@tonic-gate int ls_openflag; 22693239addSjohnlev boolean_t ls_cleanup; /* cleanup on close */ 2277c478bd9Sstevel@tonic-gate taskq_t *ls_taskq; 2287c478bd9Sstevel@tonic-gate kstat_t *ls_kstat; 2297c478bd9Sstevel@tonic-gate kmutex_t ls_kstat_lock; 2307c478bd9Sstevel@tonic-gate struct dk_geom ls_dkg; 2317c478bd9Sstevel@tonic-gate struct vtoc ls_vtoc; 2327c478bd9Sstevel@tonic-gate struct dk_cinfo ls_ci; 23387117650Saalok 23487117650Saalok /* the following fields are required for compression support */ 23587117650Saalok int ls_comp_algorithm_index; /* idx into compress_table */ 23687117650Saalok char ls_comp_algorithm[MAXALGLEN]; 23787117650Saalok uint32_t ls_uncomp_seg_sz; /* sz of uncompressed segment */ 23887117650Saalok uint32_t ls_comp_index_sz; /* number of index entries */ 23987117650Saalok uint32_t ls_comp_seg_shift; /* exponent for byte shift */ 24087117650Saalok uint32_t ls_uncomp_last_seg_sz; /* sz of last uncomp segment */ 24187117650Saalok uint64_t ls_comp_offbase; /* offset of actual compressed data */ 24287117650Saalok uint64_t *ls_comp_seg_index; /* array of index entries */ 24387117650Saalok caddr_t ls_comp_index_data; /* index pages loaded from file */ 24487117650Saalok uint32_t ls_comp_index_data_sz; 24587117650Saalok u_offset_t ls_vp_comp_size; /* actual compressed file size */ 2467d82f0f8SDina K Nimeh 247*4058a205Sjrgn.keil@googlemail.com /* lock and anchor for compressed segment caching */ 248*4058a205Sjrgn.keil@googlemail.com kmutex_t ls_comp_cache_lock; /* protects ls_comp_cache */ 249*4058a205Sjrgn.keil@googlemail.com list_t ls_comp_cache; /* cached decompressed segs */ 250*4058a205Sjrgn.keil@googlemail.com uint32_t ls_comp_cache_count; 251*4058a205Sjrgn.keil@googlemail.com 2527d82f0f8SDina K Nimeh /* the following fields are required for encryption support */ 2537d82f0f8SDina K Nimeh boolean_t ls_crypto_enabled; 2547d82f0f8SDina K Nimeh u_offset_t ls_crypto_offset; /* crypto meta size */ 2557d82f0f8SDina K Nimeh struct crypto_meta ls_crypto; 2567d82f0f8SDina K Nimeh crypto_mechanism_t ls_mech; /* for data encr/decr */ 2577d82f0f8SDina K Nimeh crypto_key_t ls_key; /* for data encr/decr */ 2587d82f0f8SDina K Nimeh crypto_mechanism_t ls_iv_mech; /* for iv derivation */ 2597d82f0f8SDina K Nimeh size_t ls_iv_len; /* for iv derivation */ 2607d82f0f8SDina K Nimeh iv_method_t ls_iv_type; /* for iv derivation */ 2617d82f0f8SDina K Nimeh kmutex_t ls_crypto_lock; 2627d82f0f8SDina K Nimeh crypto_ctx_template_t ls_ctx_tmpl; 2637d82f0f8SDina K Nimeh 2647c478bd9Sstevel@tonic-gate }; 2657c478bd9Sstevel@tonic-gate 26687117650Saalok #endif /* _KERNEL */ 26787117650Saalok 26887117650Saalok /* 26987117650Saalok * Common signature for all lofi compress functions 27087117650Saalok */ 27187117650Saalok typedef int lofi_compress_func_t(void *src, size_t srclen, void *dst, 27287117650Saalok size_t *destlen, int level); 27387117650Saalok 27487117650Saalok /* 27587117650Saalok * Information about each compression function 27687117650Saalok */ 27787117650Saalok typedef struct lofi_compress_info { 27887117650Saalok lofi_compress_func_t *l_decompress; 27987117650Saalok lofi_compress_func_t *l_compress; 28087117650Saalok int l_level; 28187117650Saalok char *l_name; /* algorithm name */ 28287117650Saalok } lofi_compress_info_t; 28387117650Saalok 28487117650Saalok enum lofi_compress { 28587117650Saalok LOFI_COMPRESS_GZIP = 0, 28687117650Saalok LOFI_COMPRESS_GZIP_6 = 1, 28787117650Saalok LOFI_COMPRESS_GZIP_9 = 2, 288b1efbcd6SAlok Aggarwal LOFI_COMPRESS_LZMA = 3, 28987117650Saalok LOFI_COMPRESS_FUNCTIONS 29087117650Saalok }; 2917c478bd9Sstevel@tonic-gate 2927c478bd9Sstevel@tonic-gate #ifdef __cplusplus 2937c478bd9Sstevel@tonic-gate } 2947c478bd9Sstevel@tonic-gate #endif 2957c478bd9Sstevel@tonic-gate 2967c478bd9Sstevel@tonic-gate #endif /* _SYS_LOFI_H */ 297