sys/vfs/hammer/hammer_inode.c

   1 /*
   2  * Copyright (c) 2007-2008 The DragonFly Project.  All rights reserved.
   3  *
   4  * This code is derived from software contributed to The DragonFly Project
   5  * by Matthew Dillon <dillon@backplane.com>
   6  *
   7  * Redistribution and use in source and binary forms, with or without
   8  * modification, are permitted provided that the following conditions
   9  * are met:
  10  *
  11  * 1. Redistributions of source code must retain the above copyright
  12  *    notice, this list of conditions and the following disclaimer.
  13  * 2. Redistributions in binary form must reproduce the above copyright
  14  *    notice, this list of conditions and the following disclaimer in
  15  *    the documentation and/or other materials provided with the
  16  *    distribution.
  17  * 3. Neither the name of The DragonFly Project nor the names of its
  18  *    contributors may be used to endorse or promote products derived
  19  *    from this software without specific, prior written permission.
  20  *
  21  * THIS SOFTWARE IS PROVIDED BY THE COPYRIGHT HOLDERS AND CONTRIBUTORS
  22  * ``AS IS'' AND ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT
  23  * LIMITED TO, THE IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS
  24  * FOR A PARTICULAR PURPOSE ARE DISCLAIMED.  IN NO EVENT SHALL THE
  25  * COPYRIGHT HOLDERS OR CONTRIBUTORS BE LIABLE FOR ANY DIRECT, INDIRECT,
  26  * INCIDENTAL, SPECIAL, EXEMPLARY OR CONSEQUENTIAL DAMAGES (INCLUDING,
  27  * BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES;
  28  * LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION) HOWEVER CAUSED
  29  * AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT LIABILITY,
  30  * OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT
  31  * OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF
  32  * SUCH DAMAGE.
  33  *
  34  * $DragonFly: src/sys/vfs/hammer/hammer_inode.c,v 1.105 2008/07/18 00:19:53 dillon Exp $
  35  */
  36
  37 #include "hammer.h"
  38 #include <vm/vm_extern.h>
  39 #include <sys/buf.h>
  40 #include <sys/buf2.h>
  41
  42 static int      hammer_unload_inode(struct hammer_inode *ip);
  43 static void     hammer_free_inode(hammer_inode_t ip);
  44 static void     hammer_flush_inode_core(hammer_inode_t ip,
  45                                         hammer_flush_group_t flg, int flags);
  46 static int      hammer_setup_child_callback(hammer_record_t rec, void *data);
  47 #if 0
  48 static int      hammer_syncgrp_child_callback(hammer_record_t rec, void *data);
  49 #endif
  50 static int      hammer_setup_parent_inodes(hammer_inode_t ip,
  51                                         hammer_flush_group_t flg);
  52 static int      hammer_setup_parent_inodes_helper(hammer_record_t record,
  53                                         hammer_flush_group_t flg);
  54 static void     hammer_inode_wakereclaims(hammer_inode_t ip);
  55
  56 #ifdef DEBUG_TRUNCATE
  57 extern struct hammer_inode *HammerTruncIp;
  58 #endif
  59
  60 /*
  61  * RB-Tree support for inode structures
  62  */
  63 int
  64 hammer_ino_rb_compare(hammer_inode_t ip1, hammer_inode_t ip2)
  65 {
  66         if (ip1->obj_localization < ip2->obj_localization)
  67                 return(-1);
  68         if (ip1->obj_localization > ip2->obj_localization)
  69                 return(1);
  70         if (ip1->obj_id < ip2->obj_id)
  71                 return(-1);
  72         if (ip1->obj_id > ip2->obj_id)
  73                 return(1);
  74         if (ip1->obj_asof < ip2->obj_asof)
  75                 return(-1);
  76         if (ip1->obj_asof > ip2->obj_asof)
  77                 return(1);
  78         return(0);
  79 }
  80
  81 /*
  82  * RB-Tree support for inode structures / special LOOKUP_INFO
  83  */
  84 static int
  85 hammer_inode_info_cmp(hammer_inode_info_t info, hammer_inode_t ip)
  86 {
  87         if (info->obj_localization < ip->obj_localization)
  88                 return(-1);
  89         if (info->obj_localization > ip->obj_localization)
  90                 return(1);
  91         if (info->obj_id < ip->obj_id)
  92                 return(-1);
  93         if (info->obj_id > ip->obj_id)
  94                 return(1);
  95         if (info->obj_asof < ip->obj_asof)
  96                 return(-1);
  97         if (info->obj_asof > ip->obj_asof)
  98                 return(1);
  99         return(0);
 100 }
 101
 102 /*
 103  * Used by hammer_scan_inode_snapshots() to locate all of an object's
 104  * snapshots.  Note that the asof field is not tested, which we can get
 105  * away with because it is the lowest-priority field.
 106  */
 107 static int
 108 hammer_inode_info_cmp_all_history(hammer_inode_t ip, void *data)
 109 {
 110         hammer_inode_info_t info = data;
 111
 112         if (ip->obj_localization > info->obj_localization)
 113                 return(1);
 114         if (ip->obj_localization < info->obj_localization)
 115                 return(-1);
 116         if (ip->obj_id > info->obj_id)
 117                 return(1);
 118         if (ip->obj_id < info->obj_id)
 119                 return(-1);
 120         return(0);
 121 }
 122
 123 /*
 124  * Used by hammer_unload_pseudofs() to locate all inodes associated with
 125  * a particular PFS.
 126  */
 127 static int
 128 hammer_inode_pfs_cmp(hammer_inode_t ip, void *data)
 129 {
 130         u_int32_t localization = *(u_int32_t *)data;
 131         if (ip->obj_localization > localization)
 132                 return(1);
 133         if (ip->obj_localization < localization)
 134                 return(-1);
 135         return(0);
 136 }
 137
 138 /*
 139  * RB-Tree support for pseudofs structures
 140  */
 141 static int
 142 hammer_pfs_rb_compare(hammer_pseudofs_inmem_t p1, hammer_pseudofs_inmem_t p2)
 143 {
 144         if (p1->localization < p2->localization)
 145                 return(-1);
 146         if (p1->localization > p2->localization)
 147                 return(1);
 148         return(0);
 149 }
 150
 151
 152 RB_GENERATE(hammer_ino_rb_tree, hammer_inode, rb_node, hammer_ino_rb_compare);
 153 RB_GENERATE_XLOOKUP(hammer_ino_rb_tree, INFO, hammer_inode, rb_node,
 154                 hammer_inode_info_cmp, hammer_inode_info_t);
 155 RB_GENERATE2(hammer_pfs_rb_tree, hammer_pseudofs_inmem, rb_node,
 156              hammer_pfs_rb_compare, u_int32_t, localization);
 157
 158 /*
 159  * The kernel is not actively referencing this vnode but is still holding
 160  * it cached.
 161  *
 162  * This is called from the frontend.
 163  */
 164 int
 165 hammer_vop_inactive(struct vop_inactive_args *ap)
 166 {
 167         struct hammer_inode *ip = VTOI(ap->a_vp);
 168
 169         /*
 170          * Degenerate case
 171          */
 172         if (ip == NULL) {
 173                 vrecycle(ap->a_vp);
 174                 return(0);
 175         }
 176
 177         /*
 178          * If the inode no longer has visibility in the filesystem try to
 179          * recycle it immediately, even if the inode is dirty.  Recycling
 180          * it quickly allows the system to reclaim buffer cache and VM
 181          * resources which can matter a lot in a heavily loaded system.
 182          *
 183          * This can deadlock in vfsync() if we aren't careful.
 184          *
 185          * Do not queue the inode to the flusher if we still have visibility,
 186          * otherwise namespace calls such as chmod will unnecessarily generate
 187          * multiple inode updates.
 188          */
 189         hammer_inode_unloadable_check(ip, 0);
 190         if (ip->ino_data.nlinks == 0) {
 191                 if (ip->flags & HAMMER_INODE_MODMASK)
 192                         hammer_flush_inode(ip, 0);
 193                 vrecycle(ap->a_vp);
 194         }
 195         return(0);
 196 }
 197
 198 /*
 199  * Release the vnode association.  This is typically (but not always)
 200  * the last reference on the inode.
 201  *
 202  * Once the association is lost we are on our own with regards to
 203  * flushing the inode.
 204  */
 205 int
 206 hammer_vop_reclaim(struct vop_reclaim_args *ap)
 207 {
 208         struct hammer_inode *ip;
 209         hammer_mount_t hmp;
 210         struct vnode *vp;
 211
 212         vp = ap->a_vp;
 213
 214         if ((ip = vp->v_data) != NULL) {
 215                 hmp = ip->hmp;
 216                 vp->v_data = NULL;
 217                 ip->vp = NULL;
 218
 219                 if ((ip->flags & HAMMER_INODE_RECLAIM) == 0) {
 220                         ++hammer_count_reclaiming;
 221                         ++hmp->inode_reclaims;
 222                         ip->flags |= HAMMER_INODE_RECLAIM;
 223
 224                         /*
 225                          * Poke the flusher.  If we don't do this programs
 226                          * will start to stall on the reclaiming count.
 227                          */
 228                         if (hmp->inode_reclaims > HAMMER_RECLAIM_FLUSH &&
 229                            (hmp->inode_reclaims & 255) == 0) {
 230                                hammer_flusher_async(hmp, NULL);
 231                         }
 232                 }
 233                 hammer_rel_inode(ip, 1);
 234         }
 235         return(0);
 236 }
 237
 238 /*
 239  * Return a locked vnode for the specified inode.  The inode must be
 240  * referenced but NOT LOCKED on entry and will remain referenced on
 241  * return.
 242  *
 243  * Called from the frontend.
 244  */
 245 int
 246 hammer_get_vnode(struct hammer_inode *ip, struct vnode **vpp)
 247 {
 248         hammer_mount_t hmp;
 249         struct vnode *vp;
 250         int error = 0;
 251         u_int8_t obj_type;
 252
 253         hmp = ip->hmp;
 254
 255         for (;;) {
 256                 if ((vp = ip->vp) == NULL) {
 257                         error = getnewvnode(VT_HAMMER, hmp->mp, vpp, 0, 0);
 258                         if (error)
 259                                 break;
 260                         hammer_lock_ex(&ip->lock);
 261                         if (ip->vp != NULL) {
 262                                 hammer_unlock(&ip->lock);
 263                                 vp->v_type = VBAD;
 264                                 vx_put(vp);
 265                                 continue;
 266                         }
 267                         hammer_ref(&ip->lock);
 268                         vp = *vpp;
 269                         ip->vp = vp;
 270
 271                         obj_type = ip->ino_data.obj_type;
 272                         vp->v_type = hammer_get_vnode_type(obj_type);
 273
 274                         hammer_inode_wakereclaims(ip);
 275
 276                         switch(ip->ino_data.obj_type) {
 277                         case HAMMER_OBJTYPE_CDEV:
 278                         case HAMMER_OBJTYPE_BDEV:
 279                                 vp->v_ops = &hmp->mp->mnt_vn_spec_ops;
 280                                 addaliasu(vp, ip->ino_data.rmajor,
 281                                           ip->ino_data.rminor);
 282                                 break;
 283                         case HAMMER_OBJTYPE_FIFO:
 284                                 vp->v_ops = &hmp->mp->mnt_vn_fifo_ops;
 285                                 break;
 286                         default:
 287                                 break;
 288                         }
 289
 290                         /*
 291                          * Only mark as the root vnode if the ip is not
 292                          * historical, otherwise the VFS cache will get
 293                          * confused.  The other half of the special handling
 294                          * is in hammer_vop_nlookupdotdot().
 295                          *
 296                          * Pseudo-filesystem roots also do not count.
 297                          */
 298                         if (ip->obj_id == HAMMER_OBJID_ROOT &&
 299                             ip->obj_asof == hmp->asof &&
 300                             ip->obj_localization == 0) {
 301                                 vp->v_flag |= VROOT;
 302                         }
 303
 304                         vp->v_data = (void *)ip;
 305                         /* vnode locked by getnewvnode() */
 306                         /* make related vnode dirty if inode dirty? */
 307                         hammer_unlock(&ip->lock);
 308                         if (vp->v_type == VREG)
 309                                 vinitvmio(vp, ip->ino_data.size);
 310                         break;
 311                 }
 312
 313                 /*
 314                  * loop if the vget fails (aka races), or if the vp
 315                  * no longer matches ip->vp.
 316                  */
 317                 if (vget(vp, LK_EXCLUSIVE) == 0) {
 318                         if (vp == ip->vp)
 319                                 break;
 320                         vput(vp);
 321                 }
 322         }
 323         *vpp = vp;
 324         return(error);
 325 }
 326
 327 /*
 328  * Locate all copies of the inode for obj_id compatible with the specified
 329  * asof, reference, and issue the related call-back.  This routine is used
 330  * for direct-io invalidation and does not create any new inodes.
 331  */
 332 void
 333 hammer_scan_inode_snapshots(hammer_mount_t hmp, hammer_inode_info_t iinfo,
 334                             int (*callback)(hammer_inode_t ip, void *data),
 335                             void *data)
 336 {
 337         hammer_ino_rb_tree_RB_SCAN(&hmp->rb_inos_root,
 338                                    hammer_inode_info_cmp_all_history,
 339                                    callback, iinfo);
 340 }
 341
 342 /*
 343  * Acquire a HAMMER inode.  The returned inode is not locked.  These functions
 344  * do not attach or detach the related vnode (use hammer_get_vnode() for
 345  * that).
 346  *
 347  * The flags argument is only applied for newly created inodes, and only
 348  * certain flags are inherited.
 349  *
 350  * Called from the frontend.
 351  */
 352 struct hammer_inode *
 353 hammer_get_inode(hammer_transaction_t trans, hammer_inode_t dip,
 354                  int64_t obj_id, hammer_tid_t asof, u_int32_t localization,
 355                  int flags, int *errorp)
 356 {
 357         hammer_mount_t hmp = trans->hmp;
 358         struct hammer_inode_info iinfo;
 359         struct hammer_cursor cursor;
 360         struct hammer_inode *ip;
 361
 362
 363         /*
 364          * Determine if we already have an inode cached.  If we do then
 365          * we are golden.
 366          */
 367         iinfo.obj_id = obj_id;
 368         iinfo.obj_asof = asof;
 369         iinfo.obj_localization = localization;
 370 loop:
 371         ip = hammer_ino_rb_tree_RB_LOOKUP_INFO(&hmp->rb_inos_root, &iinfo);
 372         if (ip) {
 373                 hammer_ref(&ip->lock);
 374                 *errorp = 0;
 375                 return(ip);
 376         }
 377
 378         /*
 379          * Allocate a new inode structure and deal with races later.
 380          */
 381         ip = kmalloc(sizeof(*ip), M_HAMMER, M_WAITOK|M_ZERO);
 382         ++hammer_count_inodes;
 383         ++hmp->count_inodes;
 384         ip->obj_id = obj_id;
 385         ip->obj_asof = iinfo.obj_asof;
 386         ip->obj_localization = localization;
 387         ip->hmp = hmp;
 388         ip->flags = flags & HAMMER_INODE_RO;
 389         ip->cache[0].ip = ip;
 390         ip->cache[1].ip = ip;
 391         if (hmp->ronly)
 392                 ip->flags |= HAMMER_INODE_RO;
 393         ip->sync_trunc_off = ip->trunc_off = ip->save_trunc_off =
 394                 0x7FFFFFFFFFFFFFFFLL;
 395         RB_INIT(&ip->rec_tree);
 396         TAILQ_INIT(&ip->target_list);
 397         hammer_ref(&ip->lock);
 398
 399         /*
 400          * Locate the on-disk inode.  If this is a PFS root we always
 401          * access the current version of the root inode and (if it is not
 402          * a master) always access information under it with a snapshot
 403          * TID.
 404          */
 405 retry:
 406         hammer_init_cursor(trans, &cursor, (dip ? &dip->cache[0] : NULL), NULL);
 407         cursor.key_beg.localization = localization + HAMMER_LOCALIZE_INODE;
 408         cursor.key_beg.obj_id = ip->obj_id;
 409         cursor.key_beg.key = 0;
 410         cursor.key_beg.create_tid = 0;
 411         cursor.key_beg.delete_tid = 0;
 412         cursor.key_beg.rec_type = HAMMER_RECTYPE_INODE;
 413         cursor.key_beg.obj_type = 0;
 414
 415         cursor.asof = iinfo.obj_asof;
 416         cursor.flags = HAMMER_CURSOR_GET_LEAF | HAMMER_CURSOR_GET_DATA |
 417                        HAMMER_CURSOR_ASOF;
 418
 419         *errorp = hammer_btree_lookup(&cursor);
 420         if (*errorp == EDEADLK) {
 421                 hammer_done_cursor(&cursor);
 422                 goto retry;
 423         }
 424
 425         /*
 426          * On success the B-Tree lookup will hold the appropriate
 427          * buffer cache buffers and provide a pointer to the requested
 428          * information.  Copy the information to the in-memory inode
 429          * and cache the B-Tree node to improve future operations.
 430          */
 431         if (*errorp == 0) {
 432                 ip->ino_leaf = cursor.node->ondisk->elms[cursor.index].leaf;
 433                 ip->ino_data = cursor.data->inode;
 434
 435                 /*
 436                  * cache[0] tries to cache the location of the object inode.
 437                  * The assumption is that it is near the directory inode.
 438                  *
 439                  * cache[1] tries to cache the location of the object data.
 440                  * The assumption is that it is near the directory data.
 441                  */
 442                 hammer_cache_node(&ip->cache[0], cursor.node);
 443                 if (dip && dip->cache[1].node)
 444                         hammer_cache_node(&ip->cache[1], dip->cache[1].node);
 445
 446                 /*
 447                  * The file should not contain any data past the file size
 448                  * stored in the inode.  Setting save_trunc_off to the
 449                  * file size instead of max reduces B-Tree lookup overheads
 450                  * on append by allowing the flusher to avoid checking for
 451                  * record overwrites.
 452                  */
 453                 ip->save_trunc_off = ip->ino_data.size;
 454
 455                 /*
 456                  * Locate and assign the pseudofs management structure to
 457                  * the inode.
 458                  */
 459                 if (dip && dip->obj_localization == ip->obj_localization) {
 460                         ip->pfsm = dip->pfsm;
 461                         hammer_ref(&ip->pfsm->lock);
 462                 } else {
 463                         ip->pfsm = hammer_load_pseudofs(trans,
 464                                                         ip->obj_localization,
 465                                                         errorp);
 466                         *errorp = 0;    /* ignore ENOENT */
 467                 }
 468         }
 469
 470         /*
 471          * The inode is placed on the red-black tree and will be synced to
 472          * the media when flushed or by the filesystem sync.  If this races
 473          * another instantiation/lookup the insertion will fail.
 474          */
 475         if (*errorp == 0) {
 476                 if (RB_INSERT(hammer_ino_rb_tree, &hmp->rb_inos_root, ip)) {
 477                         hammer_free_inode(ip);
 478                         hammer_done_cursor(&cursor);
 479                         goto loop;
 480                 }
 481                 ip->flags |= HAMMER_INODE_ONDISK;
 482         } else {
 483                 if (ip->flags & HAMMER_INODE_RSV_INODES) {
 484                         ip->flags &= ~HAMMER_INODE_RSV_INODES; /* sanity */
 485                         --hmp->rsv_inodes;
 486                 }
 487
 488                 hammer_free_inode(ip);
 489                 ip = NULL;
 490         }
 491         hammer_done_cursor(&cursor);
 492         return (ip);
 493 }
 494
 495 /*
 496  * Create a new filesystem object, returning the inode in *ipp.  The
 497  * returned inode will be referenced.  The inode is created in-memory.
 498  *
 499  * If pfsm is non-NULL the caller wishes to create the root inode for
 500  * a master PFS.
 501  */
 502 int
 503 hammer_create_inode(hammer_transaction_t trans, struct vattr *vap,
 504                     struct ucred *cred, hammer_inode_t dip,
 505                     hammer_pseudofs_inmem_t pfsm, struct hammer_inode **ipp)
 506 {
 507         hammer_mount_t hmp;
 508         hammer_inode_t ip;
 509         uid_t xuid;
 510         int error;
 511
 512         hmp = trans->hmp;
 513
 514         ip = kmalloc(sizeof(*ip), M_HAMMER, M_WAITOK|M_ZERO);
 515         ++hammer_count_inodes;
 516         ++hmp->count_inodes;
 517
 518         if (pfsm) {
 519                 KKASSERT(pfsm->localization != 0);
 520                 ip->obj_id = HAMMER_OBJID_ROOT;
 521                 ip->obj_localization = pfsm->localization;
 522         } else {
 523                 KKASSERT(dip != NULL);
 524                 ip->obj_id = hammer_alloc_objid(hmp, dip);
 525                 ip->obj_localization = dip->obj_localization;
 526         }
 527
 528         KKASSERT(ip->obj_id != 0);
 529         ip->obj_asof = hmp->asof;
 530         ip->hmp = hmp;
 531         ip->flush_state = HAMMER_FST_IDLE;
 532         ip->flags = HAMMER_INODE_DDIRTY |
 533                     HAMMER_INODE_ATIME | HAMMER_INODE_MTIME;
 534         ip->cache[0].ip = ip;
 535         ip->cache[1].ip = ip;
 536
 537         ip->trunc_off = 0x7FFFFFFFFFFFFFFFLL;
 538         /* ip->save_trunc_off = 0; (already zero) */
 539         RB_INIT(&ip->rec_tree);
 540         TAILQ_INIT(&ip->target_list);
 541
 542         ip->ino_data.atime = trans->time;
 543         ip->ino_data.mtime = trans->time;
 544         ip->ino_data.size = 0;
 545         ip->ino_data.nlinks = 0;
 546
 547         /*
 548          * A nohistory designator on the parent directory is inherited by
 549          * the child.  We will do this even for pseudo-fs creation... the
 550          * sysad can turn it off.
 551          */
 552         if (dip) {
 553                 ip->ino_data.uflags = dip->ino_data.uflags &
 554                                       (SF_NOHISTORY|UF_NOHISTORY|UF_NODUMP);
 555         }
 556
 557         ip->ino_leaf.base.btype = HAMMER_BTREE_TYPE_RECORD;
 558         ip->ino_leaf.base.localization = ip->obj_localization +
 559                                          HAMMER_LOCALIZE_INODE;
 560         ip->ino_leaf.base.obj_id = ip->obj_id;
 561         ip->ino_leaf.base.key = 0;
 562         ip->ino_leaf.base.create_tid = 0;
 563         ip->ino_leaf.base.delete_tid = 0;
 564         ip->ino_leaf.base.rec_type = HAMMER_RECTYPE_INODE;
 565         ip->ino_leaf.base.obj_type = hammer_get_obj_type(vap->va_type);
 566
 567         ip->ino_data.obj_type = ip->ino_leaf.base.obj_type;
 568         ip->ino_data.version = HAMMER_INODE_DATA_VERSION;
 569         ip->ino_data.mode = vap->va_mode;
 570         ip->ino_data.ctime = trans->time;
 571
 572         /*
 573          * Setup the ".." pointer.  This only needs to be done for directories
 574          * but we do it for all objects as a recovery aid.
 575          */
 576         if (dip)
 577                 ip->ino_data.parent_obj_id = dip->ino_leaf.base.obj_id;
 578 #if 0
 579         /*
 580          * The parent_obj_localization field only applies to pseudo-fs roots.
 581          * XXX this is no longer applicable, PFSs are no longer directly
 582          * tied into the parent's directory structure.
 583          */
 584         if (ip->ino_data.obj_type == HAMMER_OBJTYPE_DIRECTORY &&
 585             ip->obj_id == HAMMER_OBJID_ROOT) {
 586                 ip->ino_data.ext.obj.parent_obj_localization =
 587                                                 dip->obj_localization;
 588         }
 589 #endif
 590
 591         switch(ip->ino_leaf.base.obj_type) {
 592         case HAMMER_OBJTYPE_CDEV:
 593         case HAMMER_OBJTYPE_BDEV:
 594                 ip->ino_data.rmajor = vap->va_rmajor;
 595                 ip->ino_data.rminor = vap->va_rminor;
 596                 break;
 597         default:
 598                 break;
 599         }
 600
 601         /*
 602          * Calculate default uid/gid and overwrite with information from
 603          * the vap.
 604          */
 605         if (dip) {
 606                 xuid = hammer_to_unix_xid(&dip->ino_data.uid);
 607                 xuid = vop_helper_create_uid(hmp->mp, dip->ino_data.mode,
 608                                              xuid, cred, &vap->va_mode);
 609         } else {
 610                 xuid = 0;
 611         }
 612         ip->ino_data.mode = vap->va_mode;
 613
 614         if (vap->va_vaflags & VA_UID_UUID_VALID)
 615                 ip->ino_data.uid = vap->va_uid_uuid;
 616         else if (vap->va_uid != (uid_t)VNOVAL)
 617                 hammer_guid_to_uuid(&ip->ino_data.uid, vap->va_uid);
 618         else
 619                 hammer_guid_to_uuid(&ip->ino_data.uid, xuid);
 620
 621         if (vap->va_vaflags & VA_GID_UUID_VALID)
 622                 ip->ino_data.gid = vap->va_gid_uuid;
 623         else if (vap->va_gid != (gid_t)VNOVAL)
 624                 hammer_guid_to_uuid(&ip->ino_data.gid, vap->va_gid);
 625         else if (dip)
 626                 ip->ino_data.gid = dip->ino_data.gid;
 627
 628         hammer_ref(&ip->lock);
 629
 630         if (pfsm) {
 631                 ip->pfsm = pfsm;
 632                 hammer_ref(&pfsm->lock);
 633                 error = 0;
 634         } else if (dip->obj_localization == ip->obj_localization) {
 635                 ip->pfsm = dip->pfsm;
 636                 hammer_ref(&ip->pfsm->lock);
 637                 error = 0;
 638         } else {
 639                 ip->pfsm = hammer_load_pseudofs(trans,
 640                                                 ip->obj_localization,
 641                                                 &error);
 642                 error = 0;      /* ignore ENOENT */
 643         }
 644
 645         if (error) {
 646                 hammer_free_inode(ip);
 647                 ip = NULL;
 648         } else if (RB_INSERT(hammer_ino_rb_tree, &hmp->rb_inos_root, ip)) {
 649                 panic("hammer_create_inode: duplicate obj_id %llx", ip->obj_id);
 650                 /* not reached */
 651                 hammer_free_inode(ip);
 652         }
 653         *ipp = ip;
 654         return(error);
 655 }
 656
 657 /*
 658  * Final cleanup / freeing of an inode structure
 659  */
 660 static void
 661 hammer_free_inode(hammer_inode_t ip)
 662 {
 663         KKASSERT(ip->lock.refs == 1);
 664         hammer_uncache_node(&ip->cache[0]);
 665         hammer_uncache_node(&ip->cache[1]);
 666         hammer_inode_wakereclaims(ip);
 667         if (ip->objid_cache)
 668                 hammer_clear_objid(ip);
 669         --hammer_count_inodes;
 670         --ip->hmp->count_inodes;
 671         if (ip->pfsm) {
 672                 hammer_rel_pseudofs(ip->hmp, ip->pfsm);
 673                 ip->pfsm = NULL;
 674         }
 675         kfree(ip, M_HAMMER);
 676         ip = NULL;
 677 }
 678
 679 /*
 680  * Retrieve pseudo-fs data.  NULL will never be returned.
 681  *
 682  * If an error occurs *errorp will be set and a default template is returned,
 683  * otherwise *errorp is set to 0.  Typically when an error occurs it will
 684  * be ENOENT.
 685  */
 686 hammer_pseudofs_inmem_t
 687 hammer_load_pseudofs(hammer_transaction_t trans,
 688                      u_int32_t localization, int *errorp)
 689 {
 690         hammer_mount_t hmp = trans->hmp;
 691         hammer_inode_t ip;
 692         hammer_pseudofs_inmem_t pfsm;
 693         struct hammer_cursor cursor;
 694         int bytes;
 695
 696 retry:
 697         pfsm = RB_LOOKUP(hammer_pfs_rb_tree, &hmp->rb_pfsm_root, localization);
 698         if (pfsm) {
 699                 hammer_ref(&pfsm->lock);
 700                 *errorp = 0;
 701                 return(pfsm);
 702         }
 703
 704         /*
 705          * PFS records are stored in the root inode (not the PFS root inode,
 706          * but the real root).  Avoid an infinite recursion if loading
 707          * the PFS for the real root.
 708          */
 709         if (localization) {
 710                 ip = hammer_get_inode(trans, NULL, HAMMER_OBJID_ROOT,
 711                                       HAMMER_MAX_TID,
 712                                       HAMMER_DEF_LOCALIZATION, 0, errorp);
 713         } else {
 714                 ip = NULL;
 715         }
 716
 717         pfsm = kmalloc(sizeof(*pfsm), M_HAMMER, M_WAITOK | M_ZERO);
 718         pfsm->localization = localization;
 719         pfsm->pfsd.unique_uuid = trans->rootvol->ondisk->vol_fsid;
 720         pfsm->pfsd.shared_uuid = pfsm->pfsd.unique_uuid;
 721
 722         hammer_init_cursor(trans, &cursor, (ip ? &ip->cache[1] : NULL), ip);
 723         cursor.key_beg.localization = HAMMER_DEF_LOCALIZATION +
 724                                       HAMMER_LOCALIZE_MISC;
 725         cursor.key_beg.obj_id = HAMMER_OBJID_ROOT;
 726         cursor.key_beg.create_tid = 0;
 727         cursor.key_beg.delete_tid = 0;
 728         cursor.key_beg.rec_type = HAMMER_RECTYPE_PFS;
 729         cursor.key_beg.obj_type = 0;
 730         cursor.key_beg.key = localization;
 731         cursor.asof = HAMMER_MAX_TID;
 732         cursor.flags |= HAMMER_CURSOR_ASOF;
 733
 734         if (ip)
 735                 *errorp = hammer_ip_lookup(&cursor);
 736         else
 737                 *errorp = hammer_btree_lookup(&cursor);
 738         if (*errorp == 0) {
 739                 *errorp = hammer_ip_resolve_data(&cursor);
 740                 if (*errorp == 0) {
 741                         if (cursor.data->pfsd.mirror_flags &
 742                             HAMMER_PFSD_DELETED) {
 743                                 *errorp = ENOENT;
 744                         } else {
 745                                 bytes = cursor.leaf->data_len;
 746                                 if (bytes > sizeof(pfsm->pfsd))
 747                                         bytes = sizeof(pfsm->pfsd);
 748                                 bcopy(cursor.data, &pfsm->pfsd, bytes);
 749                         }
 750                 }
 751         }
 752         hammer_done_cursor(&cursor);
 753
 754         pfsm->fsid_udev = hammer_fsid_to_udev(&pfsm->pfsd.shared_uuid);
 755         hammer_ref(&pfsm->lock);
 756         if (ip)
 757                 hammer_rel_inode(ip, 0);
 758         if (RB_INSERT(hammer_pfs_rb_tree, &hmp->rb_pfsm_root, pfsm)) {
 759                 kfree(pfsm, M_HAMMER);
 760                 goto retry;
 761         }
 762         return(pfsm);
 763 }
 764
 765 /*
 766  * Store pseudo-fs data.  The backend will automatically delete any prior
 767  * on-disk pseudo-fs data but we have to delete in-memory versions.
 768  */
 769 int
 770 hammer_save_pseudofs(hammer_transaction_t trans, hammer_pseudofs_inmem_t pfsm)
 771 {
 772         struct hammer_cursor cursor;
 773         hammer_record_t record;
 774         hammer_inode_t ip;
 775         int error;
 776
 777         ip = hammer_get_inode(trans, NULL, HAMMER_OBJID_ROOT, HAMMER_MAX_TID,
 778                               HAMMER_DEF_LOCALIZATION, 0, &error);
 779 retry:
 780         pfsm->fsid_udev = hammer_fsid_to_udev(&pfsm->pfsd.shared_uuid);
 781         hammer_init_cursor(trans, &cursor, &ip->cache[1], ip);
 782         cursor.key_beg.localization = ip->obj_localization +
 783                                       HAMMER_LOCALIZE_MISC;
 784         cursor.key_beg.obj_id = HAMMER_OBJID_ROOT;
 785         cursor.key_beg.create_tid = 0;
 786         cursor.key_beg.delete_tid = 0;
 787         cursor.key_beg.rec_type = HAMMER_RECTYPE_PFS;
 788         cursor.key_beg.obj_type = 0;
 789         cursor.key_beg.key = pfsm->localization;
 790         cursor.asof = HAMMER_MAX_TID;
 791         cursor.flags |= HAMMER_CURSOR_ASOF;
 792
 793         error = hammer_ip_lookup(&cursor);
 794         if (error == 0 && hammer_cursor_inmem(&cursor)) {
 795                 record = cursor.iprec;
 796                 if (record->flags & HAMMER_RECF_INTERLOCK_BE) {
 797                         KKASSERT(cursor.deadlk_rec == NULL);
 798                         hammer_ref(&record->lock);
 799                         cursor.deadlk_rec = record;
 800                         error = EDEADLK;
 801                 } else {
 802                         record->flags |= HAMMER_RECF_DELETED_FE;
 803                         error = 0;
 804                 }
 805         }
 806         if (error == 0 || error == ENOENT) {
 807                 record = hammer_alloc_mem_record(ip, sizeof(pfsm->pfsd));
 808                 record->type = HAMMER_MEM_RECORD_GENERAL;
 809
 810                 record->leaf.base.localization = ip->obj_localization +
 811                                                  HAMMER_LOCALIZE_MISC;
 812                 record->leaf.base.rec_type = HAMMER_RECTYPE_PFS;
 813                 record->leaf.base.key = pfsm->localization;
 814                 record->leaf.data_len = sizeof(pfsm->pfsd);
 815                 bcopy(&pfsm->pfsd, record->data, sizeof(pfsm->pfsd));
 816                 error = hammer_ip_add_record(trans, record);
 817         }
 818         hammer_done_cursor(&cursor);
 819         if (error == EDEADLK)
 820                 goto retry;
 821         hammer_rel_inode(ip, 0);
 822         return(error);
 823 }
 824
 825 /*
 826  * Create a root directory for a PFS if one does not alredy exist.
 827  *
 828  * The PFS root stands alone so we must also bump the nlinks count
 829  * to prevent it from being destroyed on release.
 830  */
 831 int
 832 hammer_mkroot_pseudofs(hammer_transaction_t trans, struct ucred *cred,
 833                        hammer_pseudofs_inmem_t pfsm)
 834 {
 835         hammer_inode_t ip;
 836         struct vattr vap;
 837         int error;
 838
 839         ip = hammer_get_inode(trans, NULL, HAMMER_OBJID_ROOT, HAMMER_MAX_TID,
 840                               pfsm->localization, 0, &error);
 841         if (ip == NULL) {
 842                 vattr_null(&vap);
 843                 vap.va_mode = 0755;
 844                 vap.va_type = VDIR;
 845                 error = hammer_create_inode(trans, &vap, cred, NULL, pfsm, &ip);
 846                 if (error == 0) {
 847                         ++ip->ino_data.nlinks;
 848                         hammer_modify_inode(ip, HAMMER_INODE_DDIRTY);
 849                 }
 850         }
 851         if (ip)
 852                 hammer_rel_inode(ip, 0);
 853         return(error);
 854 }
 855
 856 /*
 857  * Unload any vnodes & inodes associated with a PFS, return ENOTEMPTY
 858  * if we are unable to disassociate all the inodes.
 859  */
 860 static
 861 int
 862 hammer_unload_pseudofs_callback(hammer_inode_t ip, void *data)
 863 {
 864         int res;
 865
 866         hammer_ref(&ip->lock);
 867         if (ip->lock.refs == 2 && ip->vp)
 868                 vclean_unlocked(ip->vp);
 869         if (ip->lock.refs == 1 && ip->vp == NULL)
 870                 res = 0;
 871         else
 872                 res = -1;       /* stop, someone is using the inode */
 873         hammer_rel_inode(ip, 0);
 874         return(res);
 875 }
 876
 877 int
 878 hammer_unload_pseudofs(hammer_transaction_t trans, u_int32_t localization)
 879 {
 880         int res;
 881         int try;
 882
 883         for (try = res = 0; try < 4; ++try) {
 884                 res = hammer_ino_rb_tree_RB_SCAN(&trans->hmp->rb_inos_root,
 885                                            hammer_inode_pfs_cmp,
 886                                            hammer_unload_pseudofs_callback,
 887                                            &localization);
 888                 if (res == 0 && try > 1)
 889                         break;
 890                 hammer_flusher_sync(trans->hmp);
 891         }
 892         if (res != 0)
 893                 res = ENOTEMPTY;
 894         return(res);
 895 }
 896
 897
 898 /*
 899  * Release a reference on a PFS
 900  */
 901 void
 902 hammer_rel_pseudofs(hammer_mount_t hmp, hammer_pseudofs_inmem_t pfsm)
 903 {
 904         hammer_unref(&pfsm->lock);
 905         if (pfsm->lock.refs == 0) {
 906                 RB_REMOVE(hammer_pfs_rb_tree, &hmp->rb_pfsm_root, pfsm);
 907                 kfree(pfsm, M_HAMMER);
 908         }
 909 }
 910
 911 /*
 912  * Called by hammer_sync_inode().
 913  */
 914 static int
 915 hammer_update_inode(hammer_cursor_t cursor, hammer_inode_t ip)
 916 {
 917         hammer_transaction_t trans = cursor->trans;
 918         hammer_record_t record;
 919         int error;
 920         int redirty;
 921
 922 retry:
 923         error = 0;
 924
 925         /*
 926          * If the inode has a presence on-disk then locate it and mark
 927          * it deleted, setting DELONDISK.
 928          *
 929          * The record may or may not be physically deleted, depending on
 930          * the retention policy.
 931          */
 932         if ((ip->flags & (HAMMER_INODE_ONDISK|HAMMER_INODE_DELONDISK)) ==
 933             HAMMER_INODE_ONDISK) {
 934                 hammer_normalize_cursor(cursor);
 935                 cursor->key_beg.localization = ip->obj_localization +
 936                                                HAMMER_LOCALIZE_INODE;
 937                 cursor->key_beg.obj_id = ip->obj_id;
 938                 cursor->key_beg.key = 0;
 939                 cursor->key_beg.create_tid = 0;
 940                 cursor->key_beg.delete_tid = 0;
 941                 cursor->key_beg.rec_type = HAMMER_RECTYPE_INODE;
 942                 cursor->key_beg.obj_type = 0;
 943                 cursor->asof = ip->obj_asof;
 944                 cursor->flags &= ~HAMMER_CURSOR_INITMASK;
 945                 cursor->flags |= HAMMER_CURSOR_GET_LEAF | HAMMER_CURSOR_ASOF;
 946                 cursor->flags |= HAMMER_CURSOR_BACKEND;
 947
 948                 error = hammer_btree_lookup(cursor);
 949                 if (hammer_debug_inode)
 950                         kprintf("IPDEL %p %08x %d", ip, ip->flags, error);
 951
 952                 if (error == 0) {
 953                         error = hammer_ip_delete_record(cursor, ip, trans->tid);
 954                         if (hammer_debug_inode)
 955                                 kprintf(" error %d\n", error);
 956                         if (error == 0) {
 957                                 ip->flags |= HAMMER_INODE_DELONDISK;
 958                         }
 959                         if (cursor->node)
 960                                 hammer_cache_node(&ip->cache[0], cursor->node);
 961                 }
 962                 if (error == EDEADLK) {
 963                         hammer_done_cursor(cursor);
 964                         error = hammer_init_cursor(trans, cursor,
 965                                                    &ip->cache[0], ip);
 966                         if (hammer_debug_inode)
 967                                 kprintf("IPDED %p %d\n", ip, error);
 968                         if (error == 0)
 969                                 goto retry;
 970                 }
 971         }
 972
 973         /*
 974          * Ok, write out the initial record or a new record (after deleting
 975          * the old one), unless the DELETED flag is set.  This routine will
 976          * clear DELONDISK if it writes out a record.
 977          *
 978          * Update our inode statistics if this is the first application of
 979          * the inode on-disk.
 980          */
 981         if (error == 0 && (ip->flags & HAMMER_INODE_DELETED) == 0) {
 982                 /*
 983                  * Generate a record and write it to the media.  We clean-up
 984                  * the state before releasing so we do not have to set-up
 985                  * a flush_group.
 986                  */
 987                 record = hammer_alloc_mem_record(ip, 0);
 988                 record->type = HAMMER_MEM_RECORD_INODE;
 989                 record->flush_state = HAMMER_FST_FLUSH;
 990                 record->leaf = ip->sync_ino_leaf;
 991                 record->leaf.base.create_tid = trans->tid;
 992                 record->leaf.data_len = sizeof(ip->sync_ino_data);
 993                 record->leaf.create_ts = trans->time32;
 994                 record->data = (void *)&ip->sync_ino_data;
 995                 record->flags |= HAMMER_RECF_INTERLOCK_BE;
 996
 997                 /*
 998                  * If this flag is set we cannot sync the new file size
 999                  * because we haven't finished related truncations.  The
1000                  * inode will be flushed in another flush group to finish
1001                  * the job.
1002                  */
1003                 if ((ip->flags & HAMMER_INODE_WOULDBLOCK) &&
1004                     ip->sync_ino_data.size != ip->ino_data.size) {
1005                         redirty = 1;
1006                         ip->sync_ino_data.size = ip->ino_data.size;
1007                 } else {
1008                         redirty = 0;
1009                 }
1010
1011                 for (;;) {
1012                         error = hammer_ip_sync_record_cursor(cursor, record);
1013                         if (hammer_debug_inode)
1014                                 kprintf("GENREC %p rec %08x %d\n",
1015                                         ip, record->flags, error);
1016                         if (error != EDEADLK)
1017                                 break;
1018                         hammer_done_cursor(cursor);
1019                         error = hammer_init_cursor(trans, cursor,
1020                                                    &ip->cache[0], ip);
1021                         if (hammer_debug_inode)
1022                                 kprintf("GENREC reinit %d\n", error);
1023                         if (error)
1024                                 break;
1025                 }
1026
1027                 /*
1028                  * The record isn't managed by the inode's record tree,
1029                  * destroy it whether we succeed or fail.
1030                  */
1031                 record->flags &= ~HAMMER_RECF_INTERLOCK_BE;
1032                 record->flags |= HAMMER_RECF_DELETED_FE | HAMMER_RECF_COMMITTED;
1033                 record->flush_state = HAMMER_FST_IDLE;
1034                 hammer_rel_mem_record(record);
1035
1036                 /*
1037                  * Finish up.
1038                  */
1039                 if (error == 0) {
1040                         if (hammer_debug_inode)
1041                                 kprintf("CLEANDELOND %p %08x\n", ip, ip->flags);
1042                         ip->sync_flags &= ~(HAMMER_INODE_DDIRTY |
1043                                             HAMMER_INODE_ATIME |
1044                                             HAMMER_INODE_MTIME);
1045                         ip->flags &= ~HAMMER_INODE_DELONDISK;
1046                         if (redirty)
1047                                 ip->sync_flags |= HAMMER_INODE_DDIRTY;
1048
1049                         /*
1050                          * Root volume count of inodes
1051                          */
1052                         hammer_sync_lock_sh(trans);
1053                         if ((ip->flags & HAMMER_INODE_ONDISK) == 0) {
1054                                 hammer_modify_volume_field(trans,
1055                                                            trans->rootvol,
1056                                                            vol0_stat_inodes);
1057                                 ++ip->hmp->rootvol->ondisk->vol0_stat_inodes;
1058                                 hammer_modify_volume_done(trans->rootvol);
1059                                 ip->flags |= HAMMER_INODE_ONDISK;
1060                                 if (hammer_debug_inode)
1061                                         kprintf("NOWONDISK %p\n", ip);
1062                         }
1063                         hammer_sync_unlock(trans);
1064                 }
1065         }
1066
1067         /*
1068          * If the inode has been destroyed, clean out any left-over flags
1069          * that may have been set by the frontend.
1070          */
1071         if (error == 0 && (ip->flags & HAMMER_INODE_DELETED)) {
1072                 ip->sync_flags &= ~(HAMMER_INODE_DDIRTY |
1073                                     HAMMER_INODE_ATIME |
1074                                     HAMMER_INODE_MTIME);
1075         }
1076         return(error);
1077 }
1078
1079 /*
1080  * Update only the itimes fields.
1081  *
1082  * ATIME can be updated without generating any UNDO.  MTIME is updated
1083  * with UNDO so it is guaranteed to be synchronized properly in case of
1084  * a crash.
1085  *
1086  * Neither field is included in the B-Tree leaf element's CRC, which is how
1087  * we can get away with updating ATIME the way we do.
1088  */
1089 static int
1090 hammer_update_itimes(hammer_cursor_t cursor, hammer_inode_t ip)
1091 {
1092         hammer_transaction_t trans = cursor->trans;
1093         int error;
1094
1095 retry:
1096         if ((ip->flags & (HAMMER_INODE_ONDISK|HAMMER_INODE_DELONDISK)) !=
1097             HAMMER_INODE_ONDISK) {
1098                 return(0);
1099         }
1100
1101         hammer_normalize_cursor(cursor);
1102         cursor->key_beg.localization = ip->obj_localization +
1103                                        HAMMER_LOCALIZE_INODE;
1104         cursor->key_beg.obj_id = ip->obj_id;
1105         cursor->key_beg.key = 0;
1106         cursor->key_beg.create_tid = 0;
1107         cursor->key_beg.delete_tid = 0;
1108         cursor->key_beg.rec_type = HAMMER_RECTYPE_INODE;
1109         cursor->key_beg.obj_type = 0;
1110         cursor->asof = ip->obj_asof;
1111         cursor->flags &= ~HAMMER_CURSOR_INITMASK;
1112         cursor->flags |= HAMMER_CURSOR_ASOF;
1113         cursor->flags |= HAMMER_CURSOR_GET_LEAF;
1114         cursor->flags |= HAMMER_CURSOR_GET_DATA;
1115         cursor->flags |= HAMMER_CURSOR_BACKEND;
1116
1117         error = hammer_btree_lookup(cursor);
1118         if (error == 0) {
1119                 hammer_cache_node(&ip->cache[0], cursor->node);
1120                 if (ip->sync_flags & HAMMER_INODE_MTIME) {
1121                         /*
1122                          * Updating MTIME requires an UNDO.  Just cover
1123                          * both atime and mtime.
1124                          */
1125                         hammer_sync_lock_sh(trans);
1126                         hammer_modify_buffer(trans, cursor->data_buffer,
1127                                      HAMMER_ITIMES_BASE(&cursor->data->inode),
1128                                      HAMMER_ITIMES_BYTES);
1129                         cursor->data->inode.atime = ip->sync_ino_data.atime;
1130                         cursor->data->inode.mtime = ip->sync_ino_data.mtime;
1131                         hammer_modify_buffer_done(cursor->data_buffer);
1132                         hammer_sync_unlock(trans);
1133                 } else if (ip->sync_flags & HAMMER_INODE_ATIME) {
1134                         /*
1135                          * Updating atime only can be done in-place with
1136                          * no UNDO.
1137                          */
1138                         hammer_sync_lock_sh(trans);
1139                         hammer_modify_buffer(trans, cursor->data_buffer,
1140                                              NULL, 0);
1141                         cursor->data->inode.atime = ip->sync_ino_data.atime;
1142                         hammer_modify_buffer_done(cursor->data_buffer);
1143                         hammer_sync_unlock(trans);
1144                 }
1145                 ip->sync_flags &= ~(HAMMER_INODE_ATIME | HAMMER_INODE_MTIME);
1146         }
1147         if (error == EDEADLK) {
1148                 hammer_done_cursor(cursor);
1149                 error = hammer_init_cursor(trans, cursor,
1150                                            &ip->cache[0], ip);
1151                 if (error == 0)
1152                         goto retry;
1153         }
1154         return(error);
1155 }
1156
1157 /*
1158  * Release a reference on an inode, flush as requested.
1159  *
1160  * On the last reference we queue the inode to the flusher for its final
1161  * disposition.
1162  */
1163 void
1164 hammer_rel_inode(struct hammer_inode *ip, int flush)
1165 {
1166         hammer_mount_t hmp = ip->hmp;
1167
1168         /*
1169          * Handle disposition when dropping the last ref.
1170          */
1171         for (;;) {
1172                 if (ip->lock.refs == 1) {
1173                         /*
1174                          * Determine whether on-disk action is needed for
1175                          * the inode's final disposition.
1176                          */
1177                         KKASSERT(ip->vp == NULL);
1178                         hammer_inode_unloadable_check(ip, 0);
1179                         if (ip->flags & HAMMER_INODE_MODMASK) {
1180                                 if (hmp->rsv_inodes > desiredvnodes) {
1181                                         hammer_flush_inode(ip,
1182                                                            HAMMER_FLUSH_SIGNAL);
1183                                 } else {
1184                                         hammer_flush_inode(ip, 0);
1185                                 }
1186                         } else if (ip->lock.refs == 1) {
1187                                 hammer_unload_inode(ip);
1188                                 break;
1189                         }
1190                 } else {
1191                         if (flush)
1192                                 hammer_flush_inode(ip, 0);
1193
1194                         /*
1195                          * The inode still has multiple refs, try to drop
1196                          * one ref.
1197                          */
1198                         KKASSERT(ip->lock.refs >= 1);
1199                         if (ip->lock.refs > 1) {
1200                                 hammer_unref(&ip->lock);
1201                                 break;
1202                         }
1203                 }
1204         }
1205 }
1206
1207 /*
1208  * Unload and destroy the specified inode.  Must be called with one remaining
1209  * reference.  The reference is disposed of.
1210  *
1211  * The inode must be completely clean.
1212  */
1213 static int
1214 hammer_unload_inode(struct hammer_inode *ip)
1215 {
1216         hammer_mount_t hmp = ip->hmp;
1217
1218         KASSERT(ip->lock.refs == 1,
1219                 ("hammer_unload_inode: %d refs\n", ip->lock.refs));
1220         KKASSERT(ip->vp == NULL);
1221         KKASSERT(ip->flush_state == HAMMER_FST_IDLE);
1222         KKASSERT(ip->cursor_ip_refs == 0);
1223         KKASSERT(ip->lock.lockcount == 0);
1224         KKASSERT((ip->flags & HAMMER_INODE_MODMASK) == 0);
1225
1226         KKASSERT(RB_EMPTY(&ip->rec_tree));
1227         KKASSERT(TAILQ_EMPTY(&ip->target_list));
1228
1229         RB_REMOVE(hammer_ino_rb_tree, &hmp->rb_inos_root, ip);
1230
1231         hammer_free_inode(ip);
1232         return(0);
1233 }
1234
1235 /*
1236  * Called during unmounting if a critical error occured.  The in-memory
1237  * inode and all related structures are destroyed.
1238  *
1239  * If a critical error did not occur the unmount code calls the standard
1240  * release and asserts that the inode is gone.
1241  */
1242 int
1243 hammer_destroy_inode_callback(struct hammer_inode *ip, void *data __unused)
1244 {
1245         hammer_record_t rec;
1246
1247         /*
1248          * Get rid of the inodes in-memory records, regardless of their
1249          * state, and clear the mod-mask.
1250          */
1251         while ((rec = TAILQ_FIRST(&ip->target_list)) != NULL) {
1252                 TAILQ_REMOVE(&ip->target_list, rec, target_entry);
1253                 rec->target_ip = NULL;
1254                 if (rec->flush_state == HAMMER_FST_SETUP)
1255                         rec->flush_state = HAMMER_FST_IDLE;
1256         }
1257         while ((rec = RB_ROOT(&ip->rec_tree)) != NULL) {
1258                 if (rec->flush_state == HAMMER_FST_FLUSH)
1259                         --rec->flush_group->refs;
1260                 else
1261                         hammer_ref(&rec->lock);
1262                 KKASSERT(rec->lock.refs == 1);
1263                 rec->flush_state = HAMMER_FST_IDLE;
1264                 rec->flush_group = NULL;
1265                 rec->flags |= HAMMER_RECF_DELETED_FE;
1266                 rec->flags |= HAMMER_RECF_DELETED_BE;
1267                 hammer_rel_mem_record(rec);
1268         }
1269         ip->flags &= ~HAMMER_INODE_MODMASK;
1270         ip->sync_flags &= ~HAMMER_INODE_MODMASK;
1271         KKASSERT(ip->vp == NULL);
1272
1273         /*
1274          * Remove the inode from any flush group, force it idle.  FLUSH
1275          * and SETUP states have an inode ref.
1276          */
1277         switch(ip->flush_state) {
1278         case HAMMER_FST_FLUSH:
1279                 TAILQ_REMOVE(&ip->flush_group->flush_list, ip, flush_entry);
1280                 --ip->flush_group->refs;
1281                 ip->flush_group = NULL;
1282                 /* fall through */
1283         case HAMMER_FST_SETUP:
1284                 hammer_unref(&ip->lock);
1285                 ip->flush_state = HAMMER_FST_IDLE;
1286                 /* fall through */
1287         case HAMMER_FST_IDLE:
1288                 break;
1289         }
1290
1291         /*
1292          * There shouldn't be any associated vnode.  The unload needs at
1293          * least one ref, if we do have a vp steal its ip ref.
1294          */
1295         if (ip->vp) {
1296                 kprintf("hammer_destroy_inode_callback: Unexpected "
1297                         "vnode association ip %p vp %p\n", ip, ip->vp);
1298                 ip->vp->v_data = NULL;
1299                 ip->vp = NULL;
1300         } else {
1301                 hammer_ref(&ip->lock);
1302         }
1303         hammer_unload_inode(ip);
1304         return(0);
1305 }
1306
1307 /*
1308  * Called on mount -u when switching from RW to RO or vise-versa.  Adjust
1309  * the read-only flag for cached inodes.
1310  *
1311  * This routine is called from a RB_SCAN().
1312  */
1313 int
1314 hammer_reload_inode(hammer_inode_t ip, void *arg __unused)
1315 {
1316         hammer_mount_t hmp = ip->hmp;
1317
1318         if (hmp->ronly || hmp->asof != HAMMER_MAX_TID)
1319                 ip->flags |= HAMMER_INODE_RO;
1320         else
1321                 ip->flags &= ~HAMMER_INODE_RO;
1322         return(0);
1323 }
1324
1325 /*
1326  * A transaction has modified an inode, requiring updates as specified by
1327  * the passed flags.
1328  *
1329  * HAMMER_INODE_DDIRTY: Inode data has been updated
1330  * HAMMER_INODE_XDIRTY: Dirty in-memory records
1331  * HAMMER_INODE_BUFS:   Dirty buffer cache buffers
1332  * HAMMER_INODE_DELETED: Inode record/data must be deleted
1333  * HAMMER_INODE_ATIME/MTIME: mtime/atime has been updated
1334  */
1335 void
1336 hammer_modify_inode(hammer_inode_t ip, int flags)
1337 {
1338         /*
1339          * ronly of 0 or 2 does not trigger assertion.
1340          * 2 is a special error state
1341          */
1342         KKASSERT(ip->hmp->ronly != 1 ||
1343                   (flags & (HAMMER_INODE_DDIRTY | HAMMER_INODE_XDIRTY |
1344                             HAMMER_INODE_BUFS | HAMMER_INODE_DELETED |
1345                             HAMMER_INODE_ATIME | HAMMER_INODE_MTIME)) == 0);
1346         if ((ip->flags & HAMMER_INODE_RSV_INODES) == 0) {
1347                 ip->flags |= HAMMER_INODE_RSV_INODES;
1348                 ++ip->hmp->rsv_inodes;
1349         }
1350
1351         ip->flags |= flags;
1352 }
1353
1354 /*
1355  * Request that an inode be flushed.  This whole mess cannot block and may
1356  * recurse (if not synchronous).  Once requested HAMMER will attempt to
1357  * actively flush the inode until the flush can be done.
1358  *
1359  * The inode may already be flushing, or may be in a setup state.  We can
1360  * place the inode in a flushing state if it is currently idle and flag it
1361  * to reflush if it is currently flushing.
1362  *
1363  * If the HAMMER_FLUSH_SYNCHRONOUS flag is specified we will attempt to
1364  * flush the indoe synchronously using the caller's context.
1365  */
1366 void
1367 hammer_flush_inode(hammer_inode_t ip, int flags)
1368 {
1369         hammer_mount_t hmp;
1370         hammer_flush_group_t flg;
1371         int good;
1372
1373         /*
1374          * next_flush_group is the first flush group we can place the inode
1375          * in.  It may be NULL.  If it becomes full we append a new flush
1376          * group and make that the next_flush_group.
1377          */
1378         hmp = ip->hmp;
1379         while ((flg = hmp->next_flush_group) != NULL) {
1380                 KKASSERT(flg->running == 0);
1381                 if (flg->total_count + flg->refs <= ip->hmp->undo_rec_limit)
1382                         break;
1383                 hmp->next_flush_group = TAILQ_NEXT(flg, flush_entry);
1384                 hammer_flusher_async(ip->hmp, flg);
1385         }
1386         if (flg == NULL) {
1387                 flg = kmalloc(sizeof(*flg), M_HAMMER, M_WAITOK|M_ZERO);
1388                 hmp->next_flush_group = flg;
1389                 TAILQ_INIT(&flg->flush_list);
1390                 TAILQ_INSERT_TAIL(&hmp->flush_group_list, flg, flush_entry);
1391         }
1392
1393         /*
1394          * Trivial 'nothing to flush' case.  If the inode is in a SETUP
1395          * state we have to put it back into an IDLE state so we can
1396          * drop the extra ref.
1397          *
1398          * If we have a parent dependancy we must still fall through
1399          * so we can run it.
1400          */
1401         if ((ip->flags & HAMMER_INODE_MODMASK) == 0) {
1402                 if (ip->flush_state == HAMMER_FST_SETUP &&
1403                     TAILQ_EMPTY(&ip->target_list)) {
1404                         ip->flush_state = HAMMER_FST_IDLE;
1405                         hammer_rel_inode(ip, 0);
1406                 }
1407                 if (ip->flush_state == HAMMER_FST_IDLE)
1408                         return;
1409         }
1410
1411         /*
1412          * Our flush action will depend on the current state.
1413          */
1414         switch(ip->flush_state) {
1415         case HAMMER_FST_IDLE:
1416                 /*
1417                  * We have no dependancies and can flush immediately.  Some
1418                  * our children may not be flushable so we have to re-test
1419                  * with that additional knowledge.
1420                  */
1421                 hammer_flush_inode_core(ip, flg, flags);
1422                 break;
1423         case HAMMER_FST_SETUP:
1424                 /*
1425                  * Recurse upwards through dependancies via target_list
1426                  * and start their flusher actions going if possible.
1427                  *
1428                  * 'good' is our connectivity.  -1 means we have none and
1429                  * can't flush, 0 means there weren't any dependancies, and
1430                  * 1 means we have good connectivity.
1431                  */
1432                 good = hammer_setup_parent_inodes(ip, flg);
1433
1434                 if (good >= 0) {
1435                         /*
1436                          * We can continue if good >= 0.  Determine how
1437                          * many records under our inode can be flushed (and
1438                          * mark them).
1439                          */
1440                         hammer_flush_inode_core(ip, flg, flags);
1441                 } else {
1442                         /*
1443                          * parent has no connectivity, tell it to flush
1444                          * us as soon as it does.
1445                          */
1446                         ip->flags |= HAMMER_INODE_CONN_DOWN;
1447                         if (flags & HAMMER_FLUSH_SIGNAL) {
1448                                 ip->flags |= HAMMER_INODE_RESIGNAL;
1449                                 hammer_flusher_async(ip->hmp, flg);
1450                         }
1451                 }
1452                 break;
1453         case HAMMER_FST_FLUSH:
1454                 /*
1455                  * We are already flushing, flag the inode to reflush
1456                  * if needed after it completes its current flush.
1457                  */
1458                 if ((ip->flags & HAMMER_INODE_REFLUSH) == 0)
1459                         ip->flags |= HAMMER_INODE_REFLUSH;
1460                 if (flags & HAMMER_FLUSH_SIGNAL) {
1461                         ip->flags |= HAMMER_INODE_RESIGNAL;
1462                         hammer_flusher_async(ip->hmp, flg);
1463                 }
1464                 break;
1465         }
1466 }
1467
1468 /*
1469  * Scan ip->target_list, which is a list of records owned by PARENTS to our
1470  * ip which reference our ip.
1471  *
1472  * XXX This is a huge mess of recursive code, but not one bit of it blocks
1473  *     so for now do not ref/deref the structures.  Note that if we use the
1474  *     ref/rel code later, the rel CAN block.
1475  */
1476 static int
1477 hammer_setup_parent_inodes(hammer_inode_t ip, hammer_flush_group_t flg)
1478 {
1479         hammer_record_t depend;
1480         int good;
1481         int r;
1482
1483         good = 0;
1484         TAILQ_FOREACH(depend, &ip->target_list, target_entry) {
1485                 r = hammer_setup_parent_inodes_helper(depend, flg);
1486                 KKASSERT(depend->target_ip == ip);
1487                 if (r < 0 && good == 0)
1488                         good = -1;
1489                 if (r > 0)
1490                         good = 1;
1491         }
1492         return(good);
1493 }
1494
1495 /*
1496  * This helper function takes a record representing the dependancy between
1497  * the parent inode and child inode.
1498  *
1499  * record->ip           = parent inode
1500  * record->target_ip    = child inode
1501  *
1502  * We are asked to recurse upwards and convert the record from SETUP
1503  * to FLUSH if possible.
1504  *
1505  * Return 1 if the record gives us connectivity
1506  *
1507  * Return 0 if the record is not relevant
1508  *
1509  * Return -1 if we can't resolve the dependancy and there is no connectivity.
1510  */
1511 static int
1512 hammer_setup_parent_inodes_helper(hammer_record_t record,
1513                                   hammer_flush_group_t flg)
1514 {
1515         hammer_mount_t hmp;
1516         hammer_inode_t pip;
1517         int good;
1518
1519         KKASSERT(record->flush_state != HAMMER_FST_IDLE);
1520         pip = record->ip;
1521         hmp = pip->hmp;
1522
1523         /*
1524          * If the record is already flushing, is it in our flush group?
1525          *
1526          * If it is in our flush group but it is a general record or a
1527          * delete-on-disk, it does not improve our connectivity (return 0),
1528          * and if the target inode is not trying to destroy itself we can't
1529          * allow the operation yet anyway (the second return -1).
1530          */
1531         if (record->flush_state == HAMMER_FST_FLUSH) {
1532                 /*
1533                  * If not in our flush group ask the parent to reflush
1534                  * us as soon as possible.
1535                  */
1536                 if (record->flush_group != flg) {
1537                         pip->flags |= HAMMER_INODE_REFLUSH;
1538                         record->target_ip->flags |= HAMMER_INODE_CONN_DOWN;
1539                         return(-1);
1540                 }
1541
1542                 /*
1543                  * If in our flush group everything is already set up,
1544                  * just return whether the record will improve our
1545                  * visibility or not.
1546                  */
1547                 if (record->type == HAMMER_MEM_RECORD_ADD)
1548                         return(1);
1549                 return(0);
1550         }
1551
1552         /*
1553          * It must be a setup record.  Try to resolve the setup dependancies
1554          * by recursing upwards so we can place ip on the flush list.
1555          */
1556         KKASSERT(record->flush_state == HAMMER_FST_SETUP);
1557
1558         good = hammer_setup_parent_inodes(pip, flg);
1559
1560         /*
1561          * If good < 0 the parent has no connectivity and we cannot safely
1562          * flush the directory entry, which also means we can't flush our
1563          * ip.  Flag the parent and us for downward recursion once the
1564          * parent's connectivity is resolved.
1565          */
1566         if (good < 0) {
1567                 /* pip->flags |= HAMMER_INODE_CONN_DOWN; set by recursion */
1568                 record->target_ip->flags |= HAMMER_INODE_CONN_DOWN;
1569                 return(good);
1570         }
1571
1572         /*
1573          * We are go, place the parent inode in a flushing state so we can
1574          * place its record in a flushing state.  Note that the parent
1575          * may already be flushing.  The record must be in the same flush
1576          * group as the parent.
1577          */
1578         if (pip->flush_state != HAMMER_FST_FLUSH)
1579                 hammer_flush_inode_core(pip, flg, HAMMER_FLUSH_RECURSION);
1580         KKASSERT(pip->flush_state == HAMMER_FST_FLUSH);
1581         KKASSERT(record->flush_state == HAMMER_FST_SETUP);
1582
1583 #if 0
1584         if (record->type == HAMMER_MEM_RECORD_DEL &&
1585             (record->target_ip->flags & (HAMMER_INODE_DELETED|HAMMER_INODE_DELONDISK)) == 0) {
1586                 /*
1587                  * Regardless of flushing state we cannot sync this path if the
1588                  * record represents a delete-on-disk but the target inode
1589                  * is not ready to sync its own deletion.
1590                  *
1591                  * XXX need to count effective nlinks to determine whether
1592                  * the flush is ok, otherwise removing a hardlink will
1593                  * just leave the DEL record to rot.
1594                  */
1595                 record->target_ip->flags |= HAMMER_INODE_REFLUSH;
1596                 return(-1);
1597         } else
1598 #endif
1599         if (pip->flush_group == flg) {
1600                 /*
1601                  * If the parent is in the same flush group as us we can
1602                  * just set the record to a flushing state and we are
1603                  * done.
1604                  */
1605                 record->flush_state = HAMMER_FST_FLUSH;
1606                 record->flush_group = flg;
1607                 ++record->flush_group->refs;
1608                 hammer_ref(&record->lock);
1609
1610                 /*
1611                  * A general directory-add contributes to our visibility.
1612                  *
1613                  * Otherwise it is probably a directory-delete or
1614                  * delete-on-disk record and does not contribute to our
1615                  * visbility (but we can still flush it).
1616                  */
1617                 if (record->type == HAMMER_MEM_RECORD_ADD)
1618                         return(1);
1619                 return(0);
1620         } else {
1621                 /*
1622                  * If the parent is not in our flush group we cannot
1623                  * flush this record yet, there is no visibility.
1624                  * We tell the parent to reflush and mark ourselves
1625                  * so the parent knows it should flush us too.
1626                  */
1627                 pip->flags |= HAMMER_INODE_REFLUSH;
1628                 record->target_ip->flags |= HAMMER_INODE_CONN_DOWN;
1629                 return(-1);
1630         }
1631 }
1632
1633 /*
1634  * This is the core routine placing an inode into the FST_FLUSH state.
1635  */
1636 static void
1637 hammer_flush_inode_core(hammer_inode_t ip, hammer_flush_group_t flg, int flags)
1638 {
1639         int go_count;
1640
1641         /*
1642          * Set flush state and prevent the flusher from cycling into
1643          * the next flush group.  Do not place the ip on the list yet.
1644          * Inodes not in the idle state get an extra reference.
1645          */
1646         KKASSERT(ip->flush_state != HAMMER_FST_FLUSH);
1647         if (ip->flush_state == HAMMER_FST_IDLE)
1648                 hammer_ref(&ip->lock);
1649         ip->flush_state = HAMMER_FST_FLUSH;
1650         ip->flush_group = flg;
1651         ++ip->hmp->flusher.group_lock;
1652         ++ip->hmp->count_iqueued;
1653         ++hammer_count_iqueued;
1654         ++flg->total_count;
1655
1656         /*
1657          * We need to be able to vfsync/truncate from the backend.
1658          */
1659         KKASSERT((ip->flags & HAMMER_INODE_VHELD) == 0);
1660         if (ip->vp && (ip->vp->v_flag & VINACTIVE) == 0) {
1661                 ip->flags |= HAMMER_INODE_VHELD;
1662                 vref(ip->vp);
1663         }
1664
1665         /*
1666          * Figure out how many in-memory records we can actually flush
1667          * (not including inode meta-data, buffers, etc).
1668          */
1669         if (flags & HAMMER_FLUSH_RECURSION) {
1670                 /*
1671                  * If this is a upwards recursion we do not want to
1672                  * recurse down again!
1673                  */
1674                 go_count = 1;
1675         } else if (ip->flags & HAMMER_INODE_WOULDBLOCK) {
1676                 /*
1677                  * No new records are added if we must complete a flush
1678                  * from a previous cycle, but we do have to move the records
1679                  * from the previous cycle to the current one.
1680                  */
1681 #if 0
1682                 go_count = RB_SCAN(hammer_rec_rb_tree, &ip->rec_tree, NULL,
1683                                    hammer_syncgrp_child_callback, NULL);
1684 #endif
1685                 go_count = 1;
1686         } else {
1687                 /*
1688                  * Normal flush, scan records and bring them into the flush.
1689                  * Directory adds and deletes are usually skipped (they are
1690                  * grouped with the related inode rather then with the
1691                  * directory).
1692                  *
1693                  * go_count can be negative, which means the scan aborted
1694                  * due to the flush group being over-full and we should
1695                  * flush what we have.
1696                  */
1697                 go_count = RB_SCAN(hammer_rec_rb_tree, &ip->rec_tree, NULL,
1698                                    hammer_setup_child_callback, NULL);
1699         }
1700
1701         /*
1702          * This is a more involved test that includes go_count.  If we
1703          * can't flush, flag the inode and return.  If go_count is 0 we
1704          * were are unable to flush any records in our rec_tree and
1705          * must ignore the XDIRTY flag.
1706          */
1707         if (go_count == 0) {
1708                 if ((ip->flags & HAMMER_INODE_MODMASK_NOXDIRTY) == 0) {
1709                         ip->flags |= HAMMER_INODE_REFLUSH;
1710
1711                         --ip->hmp->count_iqueued;
1712                         --hammer_count_iqueued;
1713
1714                         ip->flush_state = HAMMER_FST_SETUP;
1715                         ip->flush_group = NULL;
1716                         if (ip->flags & HAMMER_INODE_VHELD) {
1717                                 ip->flags &= ~HAMMER_INODE_VHELD;
1718                                 vrele(ip->vp);
1719                         }
1720                         if (flags & HAMMER_FLUSH_SIGNAL) {
1721                                 ip->flags |= HAMMER_INODE_RESIGNAL;
1722                                 hammer_flusher_async(ip->hmp, flg);
1723                         }
1724                         if (--ip->hmp->flusher.group_lock == 0)
1725                                 wakeup(&ip->hmp->flusher.group_lock);
1726                         return;
1727                 }
1728         }
1729
1730         /*
1731          * Snapshot the state of the inode for the backend flusher.
1732          *
1733          * We continue to retain save_trunc_off even when all truncations
1734          * have been resolved as an optimization to determine if we can
1735          * skip the B-Tree lookup for overwrite deletions.
1736          *
1737          * NOTE: The DELETING flag is a mod flag, but it is also sticky,
1738          * and stays in ip->flags.  Once set, it stays set until the
1739          * inode is destroyed.
1740          *
1741          * NOTE: If a truncation from a previous flush cycle had to be
1742          * continued into this one, the TRUNCATED flag will still be
1743          * set in sync_flags as will WOULDBLOCK.  When this occurs
1744          * we CANNOT safely integrate a new truncation from the front-end
1745          * because there may be data records in-memory assigned a flush
1746          * state from the previous cycle that are supposed to be flushed
1747          * before the next frontend truncation.
1748          */
1749         if ((ip->flags & (HAMMER_INODE_TRUNCATED | HAMMER_INODE_WOULDBLOCK)) ==
1750             HAMMER_INODE_TRUNCATED) {
1751                 KKASSERT((ip->sync_flags & HAMMER_INODE_TRUNCATED) == 0);
1752                 ip->sync_trunc_off = ip->trunc_off;
1753                 ip->trunc_off = 0x7FFFFFFFFFFFFFFFLL;
1754                 ip->flags &= ~HAMMER_INODE_TRUNCATED;
1755                 ip->sync_flags |= HAMMER_INODE_TRUNCATED;
1756
1757                 /*
1758                  * The save_trunc_off used to cache whether the B-Tree
1759                  * holds any records past that point is not used until
1760                  * after the truncation has succeeded, so we can safely
1761                  * set it now.
1762                  */
1763                 if (ip->save_trunc_off > ip->sync_trunc_off)
1764                         ip->save_trunc_off = ip->sync_trunc_off;
1765         }
1766         ip->sync_flags |= (ip->flags & HAMMER_INODE_MODMASK &
1767                            ~HAMMER_INODE_TRUNCATED);
1768         ip->sync_ino_leaf = ip->ino_leaf;
1769         ip->sync_ino_data = ip->ino_data;
1770         ip->flags &= ~HAMMER_INODE_MODMASK | HAMMER_INODE_TRUNCATED;
1771 #ifdef DEBUG_TRUNCATE
1772         if ((ip->sync_flags & HAMMER_INODE_TRUNCATED) && ip == HammerTruncIp)
1773                 kprintf("truncateS %016llx\n", ip->sync_trunc_off);
1774 #endif
1775
1776         /*
1777          * The flusher list inherits our inode and reference.
1778          */
1779         KKASSERT(flg->running == 0);
1780         TAILQ_INSERT_TAIL(&flg->flush_list, ip, flush_entry);
1781         if (--ip->hmp->flusher.group_lock == 0)
1782                 wakeup(&ip->hmp->flusher.group_lock);
1783
1784         if (flags & HAMMER_FLUSH_SIGNAL) {
1785                 hammer_flusher_async(ip->hmp, flg);
1786         }
1787 }
1788
1789 /*
1790  * Callback for scan of ip->rec_tree.  Try to include each record in our
1791  * flush.  ip->flush_group has been set but the inode has not yet been
1792  * moved into a flushing state.
1793  *
1794  * If we get stuck on a record we have to set HAMMER_INODE_REFLUSH on
1795  * both inodes.
1796  *
1797  * We return 1 for any record placed or found in FST_FLUSH, which prevents
1798  * the caller from shortcutting the flush.
1799  */
1800 static int
1801 hammer_setup_child_callback(hammer_record_t rec, void *data)
1802 {
1803         hammer_flush_group_t flg;
1804         hammer_inode_t target_ip;
1805         hammer_inode_t ip;
1806         int r;
1807
1808         /*
1809          * Deleted records are ignored.  Note that the flush detects deleted
1810          * front-end records at multiple points to deal with races.  This is
1811          * just the first line of defense.  The only time DELETED_FE cannot
1812          * be set is when HAMMER_RECF_INTERLOCK_BE is set.
1813          *
1814          * Don't get confused between record deletion and, say, directory
1815          * entry deletion.  The deletion of a directory entry that is on
1816          * the media has nothing to do with the record deletion flags.
1817          */
1818         if (rec->flags & (HAMMER_RECF_DELETED_FE|HAMMER_RECF_DELETED_BE)) {
1819                 if (rec->flush_state == HAMMER_FST_FLUSH) {
1820                         KKASSERT(rec->flush_group == rec->ip->flush_group);
1821                         r = 1;
1822                 } else {
1823                         r = 0;
1824                 }
1825                 return(r);
1826         }
1827
1828         /*
1829          * If the record is in an idle state it has no dependancies and
1830          * can be flushed.
1831          */
1832         ip = rec->ip;
1833         flg = ip->flush_group;
1834         r = 0;
1835
1836         switch(rec->flush_state) {
1837         case HAMMER_FST_IDLE:
1838                 /*
1839                  * The record has no setup dependancy, we can flush it.
1840                  */
1841                 KKASSERT(rec->target_ip == NULL);
1842                 rec->flush_state = HAMMER_FST_FLUSH;
1843                 rec->flush_group = flg;
1844                 ++flg->refs;
1845                 hammer_ref(&rec->lock);
1846                 r = 1;
1847                 break;
1848         case HAMMER_FST_SETUP:
1849                 /*
1850                  * The record has a setup dependancy.  These are typically
1851                  * directory entry adds and deletes.  Such entries will be
1852                  * flushed when their inodes are flushed so we do not
1853                  * usually have to add them to the flush here.  However,
1854                  * if the target_ip has set HAMMER_INODE_CONN_DOWN then
1855                  * it is asking us to flush this record (and it).
1856                  */
1857                 target_ip = rec->target_ip;
1858                 KKASSERT(target_ip != NULL);
1859                 KKASSERT(target_ip->flush_state != HAMMER_FST_IDLE);
1860
1861                 /*
1862                  * If the target IP is already flushing in our group
1863                  * we are golden, otherwise make sure the target
1864                  * reflushes.
1865                  */
1866                 if (target_ip->flush_state == HAMMER_FST_FLUSH) {
1867                         if (target_ip->flush_group == flg) {
1868                                 rec->flush_state = HAMMER_FST_FLUSH;
1869                                 rec->flush_group = flg;
1870                                 ++flg->refs;
1871                                 hammer_ref(&rec->lock);
1872                                 r = 1;
1873                         } else {
1874                                 target_ip->flags |= HAMMER_INODE_REFLUSH;
1875                         }
1876                         break;
1877                 }
1878
1879                 /*
1880                  * Target IP is not yet flushing.  This can get complex
1881                  * because we have to be careful about the recursion.
1882                  *
1883                  * Directories create an issue for us in that if a flush
1884                  * of a directory is requested the expectation is to flush
1885                  * any pending directory entries, but this will cause the
1886                  * related inodes to recursively flush as well.  We can't
1887                  * really defer the operation so just get as many as we
1888                  * can and
1889                  */
1890 #if 0
1891                 if ((target_ip->flags & HAMMER_INODE_RECLAIM) == 0 &&
1892                     (target_ip->flags & HAMMER_INODE_CONN_DOWN) == 0) {
1893                         /*
1894                          * We aren't reclaiming and the target ip was not
1895                          * previously prevented from flushing due to this
1896                          * record dependancy.  Do not flush this record.
1897                          */
1898                         /*r = 0;*/
1899                 } else
1900 #endif
1901                 if (flg->total_count + flg->refs >
1902                            ip->hmp->undo_rec_limit) {
1903                         /*
1904                          * Our flush group is over-full and we risk blowing
1905                          * out the UNDO FIFO.  Stop the scan, flush what we
1906                          * have, then reflush the directory.
1907                          *
1908                          * The directory may be forced through multiple
1909                          * flush groups before it can be completely
1910                          * flushed.
1911                          */
1912                         ip->flags |= HAMMER_INODE_REFLUSH;
1913                         ip->flags |= HAMMER_INODE_RESIGNAL;
1914                         r = -1;
1915                 } else if (rec->type == HAMMER_MEM_RECORD_ADD) {
1916                         /*
1917                          * If the target IP is not flushing we can force
1918                          * it to flush, even if it is unable to write out
1919                          * any of its own records we have at least one in
1920                          * hand that we CAN deal with.
1921                          */
1922                         rec->flush_state = HAMMER_FST_FLUSH;
1923                         rec->flush_group = flg;
1924                         ++flg->refs;
1925                         hammer_ref(&rec->lock);
1926                         hammer_flush_inode_core(target_ip, flg,
1927                                                 HAMMER_FLUSH_RECURSION);
1928                         r = 1;
1929                 } else {
1930                         /*
1931                          * General or delete-on-disk record.
1932                          *
1933                          * XXX this needs help.  If a delete-on-disk we could
1934                          * disconnect the target.  If the target has its own
1935                          * dependancies they really need to be flushed.
1936                          *
1937                          * XXX
1938                          */
1939                         rec->flush_state = HAMMER_FST_FLUSH;
1940                         rec->flush_group = flg;
1941                         ++flg->refs;
1942                         hammer_ref(&rec->lock);
1943                         hammer_flush_inode_core(target_ip, flg,
1944                                                 HAMMER_FLUSH_RECURSION);
1945                         r = 1;
1946                 }
1947                 break;
1948         case HAMMER_FST_FLUSH:
1949                 /*
1950                  * If the WOULDBLOCK flag is set records may have been left
1951                  * over from a previous flush attempt.  The flush group will
1952                  * have been left intact - we are probably reflushing it
1953                  * now.
1954                  *
1955                  * If a flush error occured ip->error will be non-zero.
1956                  */
1957                 KKASSERT(rec->flush_group == flg);
1958                 r = 1;
1959                 break;
1960         }
1961         return(r);
1962 }
1963
1964 #if 0
1965 /*
1966  * This version just moves records already in a flush state to the new
1967  * flush group and that is it.
1968  */
1969 static int
1970 hammer_syncgrp_child_callback(hammer_record_t rec, void *data)
1971 {
1972         hammer_inode_t ip = rec->ip;
1973
1974         switch(rec->flush_state) {
1975         case HAMMER_FST_FLUSH:
1976                 KKASSERT(rec->flush_group == ip->flush_group);
1977                 break;
1978         default:
1979                 break;
1980         }
1981         return(0);
1982 }
1983 #endif
1984
1985 /*
1986  * Wait for a previously queued flush to complete.
1987  *
1988  * If a critical error occured we don't try to wait.
1989  */
1990 void
1991 hammer_wait_inode(hammer_inode_t ip)
1992 {
1993         hammer_flush_group_t flg;
1994
1995         flg = NULL;
1996         if ((ip->hmp->flags & HAMMER_MOUNT_CRITICAL_ERROR) == 0) {
1997                 if (ip->flush_state == HAMMER_FST_SETUP) {
1998                         hammer_flush_inode(ip, HAMMER_FLUSH_SIGNAL);
1999                 }
2000                 while (ip->flush_state != HAMMER_FST_IDLE &&
2001                        (ip->hmp->flags & HAMMER_MOUNT_CRITICAL_ERROR) == 0) {
2002                         ip->flags |= HAMMER_INODE_FLUSHW;
2003                         tsleep(&ip->flags, 0, "hmrwin", 0);
2004                 }
2005         }
2006 }
2007
2008 /*
2009  * Called by the backend code when a flush has been completed.
2010  * The inode has already been removed from the flush list.
2011  *
2012  * A pipelined flush can occur, in which case we must re-enter the
2013  * inode on the list and re-copy its fields.
2014  */
2015 void
2016 hammer_flush_inode_done(hammer_inode_t ip, int error)
2017 {
2018         hammer_mount_t hmp;
2019         int dorel;
2020
2021         KKASSERT(ip->flush_state == HAMMER_FST_FLUSH);
2022
2023         hmp = ip->hmp;
2024
2025         /*
2026          * Merge left-over flags back into the frontend and fix the state.
2027          * Incomplete truncations are retained by the backend.
2028          */
2029         ip->error = error;
2030         ip->flags |= ip->sync_flags & ~HAMMER_INODE_TRUNCATED;
2031         ip->sync_flags &= HAMMER_INODE_TRUNCATED;
2032
2033         /*
2034          * The backend may have adjusted nlinks, so if the adjusted nlinks
2035          * does not match the fronttend set the frontend's RDIRTY flag again.
2036          */
2037         if (ip->ino_data.nlinks != ip->sync_ino_data.nlinks)
2038                 ip->flags |= HAMMER_INODE_DDIRTY;
2039
2040         /*
2041          * Fix up the dirty buffer status.
2042          */
2043         if (ip->vp && RB_ROOT(&ip->vp->v_rbdirty_tree)) {
2044                 ip->flags |= HAMMER_INODE_BUFS;
2045         }
2046
2047         /*
2048          * Re-set the XDIRTY flag if some of the inode's in-memory records
2049          * could not be flushed.
2050          */
2051         KKASSERT((RB_EMPTY(&ip->rec_tree) &&
2052                   (ip->flags & HAMMER_INODE_XDIRTY) == 0) ||
2053                  (!RB_EMPTY(&ip->rec_tree) &&
2054                   (ip->flags & HAMMER_INODE_XDIRTY) != 0));
2055
2056         /*
2057          * Do not lose track of inodes which no longer have vnode
2058          * assocations, otherwise they may never get flushed again.
2059          */
2060         if ((ip->flags & HAMMER_INODE_MODMASK) && ip->vp == NULL)
2061                 ip->flags |= HAMMER_INODE_REFLUSH;
2062
2063         /*
2064          * Adjust the flush state.
2065          */
2066         if (ip->flags & HAMMER_INODE_WOULDBLOCK) {
2067                 /*
2068                  * We were unable to flush out all our records, leave the
2069                  * inode in a flush state and in the current flush group.
2070                  *
2071                  * This occurs if the UNDO block gets too full
2072                  * or there is too much dirty meta-data and allows the
2073                  * flusher to finalize the UNDO block and then re-flush.
2074                  */
2075                 ip->flags &= ~HAMMER_INODE_WOULDBLOCK;
2076                 dorel = 0;
2077         } else {
2078                 /*
2079                  * Remove from the flush_group
2080                  */
2081                 TAILQ_REMOVE(&ip->flush_group->flush_list, ip, flush_entry);
2082                 ip->flush_group = NULL;
2083
2084                 /*
2085                  * Clean up the vnode ref and tracking counts.
2086                  */
2087                 if (ip->flags & HAMMER_INODE_VHELD) {
2088                         ip->flags &= ~HAMMER_INODE_VHELD;
2089                         vrele(ip->vp);
2090                 }
2091                 --hmp->count_iqueued;
2092                 --hammer_count_iqueued;
2093
2094                 /*
2095                  * And adjust the state.
2096                  */
2097                 if (TAILQ_EMPTY(&ip->target_list) && RB_EMPTY(&ip->rec_tree)) {
2098                         ip->flush_state = HAMMER_FST_IDLE;
2099                         dorel = 1;
2100                 } else {
2101                         ip->flush_state = HAMMER_FST_SETUP;
2102                         dorel = 0;
2103                 }
2104
2105                 /*
2106                  * If the frontend is waiting for a flush to complete,
2107                  * wake it up.
2108                  */
2109                 if (ip->flags & HAMMER_INODE_FLUSHW) {
2110                         ip->flags &= ~HAMMER_INODE_FLUSHW;
2111                         wakeup(&ip->flags);
2112                 }
2113         }
2114
2115         /*
2116          * If the frontend made more changes and requested another flush,
2117          * then try to get it running.
2118          *
2119          * Reflushes are aborted when the inode is errored out.
2120          */
2121         if (ip->flags & HAMMER_INODE_REFLUSH) {
2122                 ip->flags &= ~HAMMER_INODE_REFLUSH;
2123                 if (ip->flags & HAMMER_INODE_RESIGNAL) {
2124                         ip->flags &= ~HAMMER_INODE_RESIGNAL;
2125                         hammer_flush_inode(ip, HAMMER_FLUSH_SIGNAL);
2126                 } else {
2127                         hammer_flush_inode(ip, 0);
2128                 }
2129         }
2130
2131         /*
2132          * If we have no parent dependancies we can clear CONN_DOWN
2133          */
2134         if (TAILQ_EMPTY(&ip->target_list))
2135                 ip->flags &= ~HAMMER_INODE_CONN_DOWN;
2136
2137         /*
2138          * If the inode is now clean drop the space reservation.
2139          */
2140         if ((ip->flags & HAMMER_INODE_MODMASK) == 0 &&
2141             (ip->flags & HAMMER_INODE_RSV_INODES)) {
2142                 ip->flags &= ~HAMMER_INODE_RSV_INODES;
2143                 --hmp->rsv_inodes;
2144         }
2145
2146         if (dorel)
2147                 hammer_rel_inode(ip, 0);
2148 }
2149
2150 /*
2151  * Called from hammer_sync_inode() to synchronize in-memory records
2152  * to the media.
2153  */
2154 static int
2155 hammer_sync_record_callback(hammer_record_t record, void *data)
2156 {
2157         hammer_cursor_t cursor = data;
2158         hammer_transaction_t trans = cursor->trans;
2159         hammer_mount_t hmp = trans->hmp;
2160         int error;
2161
2162         /*
2163          * Skip records that do not belong to the current flush.
2164          */
2165         ++hammer_stats_record_iterations;
2166         if (record->flush_state != HAMMER_FST_FLUSH)
2167                 return(0);
2168
2169 #if 1
2170         if (record->flush_group != record->ip->flush_group) {
2171                 kprintf("sync_record %p ip %p bad flush group %p %p\n", record, record->ip, record->flush_group ,record->ip->flush_group);
2172                 Debugger("blah2");
2173                 return(0);
2174         }
2175 #endif
2176         KKASSERT(record->flush_group == record->ip->flush_group);
2177
2178         /*
2179          * Interlock the record using the BE flag.  Once BE is set the
2180          * frontend cannot change the state of FE.
2181          *
2182          * NOTE: If FE is set prior to us setting BE we still sync the
2183          * record out, but the flush completion code converts it to
2184          * a delete-on-disk record instead of destroying it.
2185          */
2186         KKASSERT((record->flags & HAMMER_RECF_INTERLOCK_BE) == 0);
2187         record->flags |= HAMMER_RECF_INTERLOCK_BE;
2188
2189         /*
2190          * The backend may have already disposed of the record.
2191          */
2192         if (record->flags & HAMMER_RECF_DELETED_BE) {
2193                 error = 0;
2194                 goto done;
2195         }
2196
2197         /*
2198          * If the whole inode is being deleting all on-disk records will
2199          * be deleted very soon, we can't sync any new records to disk
2200          * because they will be deleted in the same transaction they were
2201          * created in (delete_tid == create_tid), which will assert.
2202          *
2203          * XXX There may be a case with RECORD_ADD with DELETED_FE set
2204          * that we currently panic on.
2205          */
2206         if (record->ip->sync_flags & HAMMER_INODE_DELETING) {
2207                 switch(record->type) {
2208                 case HAMMER_MEM_RECORD_DATA:
2209                         /*
2210                          * We don't have to do anything, if the record was
2211                          * committed the space will have been accounted for
2212                          * in the blockmap.
2213                          */
2214                         /* fall through */
2215                 case HAMMER_MEM_RECORD_GENERAL:
2216                         record->flags |= HAMMER_RECF_DELETED_FE;
2217                         record->flags |= HAMMER_RECF_DELETED_BE;
2218                         error = 0;
2219                         goto done;
2220                 case HAMMER_MEM_RECORD_ADD:
2221                         panic("hammer_sync_record_callback: illegal add "
2222                               "during inode deletion record %p", record);
2223                         break; /* NOT REACHED */
2224                 case HAMMER_MEM_RECORD_INODE:
2225                         panic("hammer_sync_record_callback: attempt to "
2226                               "sync inode record %p?", record);
2227                         break; /* NOT REACHED */
2228                 case HAMMER_MEM_RECORD_DEL:
2229                         /*
2230                          * Follow through and issue the on-disk deletion
2231                          */
2232                         break;
2233                 }
2234         }
2235
2236         /*
2237          * If DELETED_FE is set special handling is needed for directory
2238          * entries.  Dependant pieces related to the directory entry may
2239          * have already been synced to disk.  If this occurs we have to
2240          * sync the directory entry and then change the in-memory record
2241          * from an ADD to a DELETE to cover the fact that it's been
2242          * deleted by the frontend.
2243          *
2244          * A directory delete covering record (MEM_RECORD_DEL) can never
2245          * be deleted by the frontend.
2246          *
2247          * Any other record type (aka DATA) can be deleted by the frontend.
2248          * XXX At the moment the flusher must skip it because there may
2249          * be another data record in the flush group for the same block,
2250          * meaning that some frontend data changes can leak into the backend's
2251          * synchronization point.
2252          */
2253         if (record->flags & HAMMER_RECF_DELETED_FE) {
2254                 if (record->type == HAMMER_MEM_RECORD_ADD) {
2255                         record->flags |= HAMMER_RECF_CONVERT_DELETE;
2256                 } else {
2257                         KKASSERT(record->type != HAMMER_MEM_RECORD_DEL);
2258                         record->flags |= HAMMER_RECF_DELETED_BE;
2259                         error = 0;
2260                         goto done;
2261                 }
2262         }
2263
2264         /*
2265          * Assign the create_tid for new records.  Deletions already
2266          * have the record's entire key properly set up.
2267          */
2268         if (record->type != HAMMER_MEM_RECORD_DEL)
2269                 record->leaf.base.create_tid = trans->tid;
2270                 record->leaf.create_ts = trans->time32;
2271         for (;;) {
2272                 error = hammer_ip_sync_record_cursor(cursor, record);
2273                 if (error != EDEADLK)
2274                         break;
2275                 hammer_done_cursor(cursor);
2276                 error = hammer_init_cursor(trans, cursor, &record->ip->cache[0],
2277                                            record->ip);
2278                 if (error)
2279                         break;
2280         }
2281         record->flags &= ~HAMMER_RECF_CONVERT_DELETE;
2282
2283         if (error)
2284                 error = -error;
2285 done:
2286         hammer_flush_record_done(record, error);
2287
2288         /*
2289          * Do partial finalization if we have built up too many dirty
2290          * buffers.  Otherwise a buffer cache deadlock can occur when
2291          * doing things like creating tens of thousands of tiny files.
2292          *
2293          * We must release our cursor lock to avoid a 3-way deadlock
2294          * due to the exclusive sync lock the finalizer must get.
2295          */
2296         if (hammer_flusher_meta_limit(hmp)) {
2297                 hammer_unlock_cursor(cursor, 0);
2298                 hammer_flusher_finalize(trans, 0);
2299                 hammer_lock_cursor(cursor, 0);
2300         }
2301
2302         return(error);
2303 }
2304
2305 /*
2306  * XXX error handling
2307  */
2308 int
2309 hammer_sync_inode(hammer_transaction_t trans, hammer_inode_t ip)
2310 {
2311         struct hammer_cursor cursor;
2312         hammer_node_t tmp_node;
2313         hammer_record_t depend;
2314         hammer_record_t next;
2315         int error, tmp_error;
2316         u_int64_t nlinks;
2317
2318         if ((ip->sync_flags & HAMMER_INODE_MODMASK) == 0)
2319                 return(0);
2320
2321         error = hammer_init_cursor(trans, &cursor, &ip->cache[1], ip);
2322         if (error)
2323                 goto done;
2324
2325         /*
2326          * Any directory records referencing this inode which are not in
2327          * our current flush group must adjust our nlink count for the
2328          * purposes of synchronization to disk.
2329          *
2330          * Records which are in our flush group can be unlinked from our
2331          * inode now, potentially allowing the inode to be physically
2332          * deleted.
2333          *
2334          * This cannot block.
2335          */
2336         nlinks = ip->ino_data.nlinks;
2337         next = TAILQ_FIRST(&ip->target_list);
2338         while ((depend = next) != NULL) {
2339                 next = TAILQ_NEXT(depend, target_entry);
2340                 if (depend->flush_state == HAMMER_FST_FLUSH &&
2341                     depend->flush_group == ip->flush_group) {
2342                         /*
2343                          * If this is an ADD that was deleted by the frontend
2344                          * the frontend nlinks count will have already been
2345                          * decremented, but the backend is going to sync its
2346                          * directory entry and must account for it.  The
2347                          * record will be converted to a delete-on-disk when
2348                          * it gets synced.
2349                          *
2350                          * If the ADD was not deleted by the frontend we
2351                          * can remove the dependancy from our target_list.
2352                          */
2353                         if (depend->flags & HAMMER_RECF_DELETED_FE) {
2354                                 ++nlinks;
2355                         } else {
2356                                 TAILQ_REMOVE(&ip->target_list, depend,
2357                                              target_entry);
2358                                 depend->target_ip = NULL;
2359                         }
2360                 } else if ((depend->flags & HAMMER_RECF_DELETED_FE) == 0) {
2361                         /*
2362                          * Not part of our flush group
2363                          */
2364                         KKASSERT((depend->flags & HAMMER_RECF_DELETED_BE) == 0);
2365                         switch(depend->type) {
2366                         case HAMMER_MEM_RECORD_ADD:
2367                                 --nlinks;
2368                                 break;
2369                         case HAMMER_MEM_RECORD_DEL:
2370                                 ++nlinks;
2371                                 break;
2372                         default:
2373                                 break;
2374                         }
2375                 }
2376         }
2377
2378         /*
2379          * Set dirty if we had to modify the link count.
2380          */
2381         if (ip->sync_ino_data.nlinks != nlinks) {
2382                 KKASSERT((int64_t)nlinks >= 0);
2383                 ip->sync_ino_data.nlinks = nlinks;
2384                 ip->sync_flags |= HAMMER_INODE_DDIRTY;
2385         }
2386
2387         /*
2388          * If there is a trunction queued destroy any data past the (aligned)
2389          * truncation point.  Userland will have dealt with the buffer
2390          * containing the truncation point for us.
2391          *
2392          * We don't flush pending frontend data buffers until after we've
2393          * dealt with the truncation.
2394          */
2395         if (ip->sync_flags & HAMMER_INODE_TRUNCATED) {
2396                 /*
2397                  * Interlock trunc_off.  The VOP front-end may continue to
2398                  * make adjustments to it while we are blocked.
2399                  */
2400                 off_t trunc_off;
2401                 off_t aligned_trunc_off;
2402                 int blkmask;
2403
2404                 trunc_off = ip->sync_trunc_off;
2405                 blkmask = hammer_blocksize(trunc_off) - 1;
2406                 aligned_trunc_off = (trunc_off + blkmask) & ~(int64_t)blkmask;
2407
2408                 /*
2409                  * Delete any whole blocks on-media.  The front-end has
2410                  * already cleaned out any partial block and made it
2411                  * pending.  The front-end may have updated trunc_off
2412                  * while we were blocked so we only use sync_trunc_off.
2413                  *
2414                  * This operation can blow out the buffer cache, EWOULDBLOCK
2415                  * means we were unable to complete the deletion.  The
2416                  * deletion will update sync_trunc_off in that case.
2417                  */
2418                 error = hammer_ip_delete_range(&cursor, ip,
2419                                                 aligned_trunc_off,
2420                                                 0x7FFFFFFFFFFFFFFFLL, 2);
2421                 if (error == EWOULDBLOCK) {
2422                         ip->flags |= HAMMER_INODE_WOULDBLOCK;
2423                         error = 0;
2424                         goto defer_buffer_flush;
2425                 }
2426
2427                 if (error)
2428                         goto done;
2429
2430                 /*
2431                  * Clear the truncation flag on the backend after we have
2432                  * complete the deletions.  Backend data is now good again
2433                  * (including new records we are about to sync, below).
2434                  *
2435                  * Leave sync_trunc_off intact.  As we write additional
2436                  * records the backend will update sync_trunc_off.  This
2437                  * tells the backend whether it can skip the overwrite
2438                  * test.  This should work properly even when the backend
2439                  * writes full blocks where the truncation point straddles
2440                  * the block because the comparison is against the base
2441                  * offset of the record.
2442                  */
2443                 ip->sync_flags &= ~HAMMER_INODE_TRUNCATED;
2444                 /* ip->sync_trunc_off = 0x7FFFFFFFFFFFFFFFLL; */
2445         } else {
2446                 error = 0;
2447         }
2448
2449         /*
2450          * Now sync related records.  These will typically be directory
2451          * entries, records tracking direct-writes, or delete-on-disk records.
2452          */
2453         if (error == 0) {
2454                 tmp_error = RB_SCAN(hammer_rec_rb_tree, &ip->rec_tree, NULL,
2455                                     hammer_sync_record_callback, &cursor);
2456                 if (tmp_error < 0)
2457                         tmp_error = -error;
2458                 if (tmp_error)
2459                         error = tmp_error;
2460         }
2461         hammer_cache_node(&ip->cache[1], cursor.node);
2462
2463         /*
2464          * Re-seek for inode update, assuming our cache hasn't been ripped
2465          * out from under us.
2466          */
2467         if (error == 0) {
2468                 tmp_node = hammer_ref_node_safe(ip->hmp, &ip->cache[0], &error);
2469                 if (tmp_node) {
2470                         hammer_cursor_downgrade(&cursor);
2471                         hammer_lock_sh(&tmp_node->lock);
2472                         if ((tmp_node->flags & HAMMER_NODE_DELETED) == 0)
2473                                 hammer_cursor_seek(&cursor, tmp_node, 0);
2474                         hammer_unlock(&tmp_node->lock);
2475                         hammer_rel_node(tmp_node);
2476                 }
2477                 error = 0;
2478         }
2479
2480         /*
2481          * If we are deleting the inode the frontend had better not have
2482          * any active references on elements making up the inode.
2483          *
2484          * The call to hammer_ip_delete_clean() cleans up auxillary records
2485          * but not DB or DATA records.  Those must have already been deleted
2486          * by the normal truncation mechanic.
2487          */
2488         if (error == 0 && ip->sync_ino_data.nlinks == 0 &&
2489                 RB_EMPTY(&ip->rec_tree)  &&
2490             (ip->sync_flags & HAMMER_INODE_DELETING) &&
2491             (ip->flags & HAMMER_INODE_DELETED) == 0) {
2492                 int count1 = 0;
2493
2494                 error = hammer_ip_delete_clean(&cursor, ip, &count1);
2495                 if (error == 0) {
2496                         ip->flags |= HAMMER_INODE_DELETED;
2497                         ip->sync_flags &= ~HAMMER_INODE_DELETING;
2498                         ip->sync_flags &= ~HAMMER_INODE_TRUNCATED;
2499                         KKASSERT(RB_EMPTY(&ip->rec_tree));
2500
2501                         /*
2502                          * Set delete_tid in both the frontend and backend
2503                          * copy of the inode record.  The DELETED flag handles
2504                          * this, do not set RDIRTY.
2505                          */
2506                         ip->ino_leaf.base.delete_tid = trans->tid;
2507                         ip->sync_ino_leaf.base.delete_tid = trans->tid;
2508                         ip->ino_leaf.delete_ts = trans->time32;
2509                         ip->sync_ino_leaf.delete_ts = trans->time32;
2510
2511
2512                         /*
2513                          * Adjust the inode count in the volume header
2514                          */
2515                         hammer_sync_lock_sh(trans);
2516                         if (ip->flags & HAMMER_INODE_ONDISK) {
2517                                 hammer_modify_volume_field(trans,
2518                                                            trans->rootvol,
2519                                                            vol0_stat_inodes);
2520                                 --ip->hmp->rootvol->ondisk->vol0_stat_inodes;
2521                                 hammer_modify_volume_done(trans->rootvol);
2522                         }
2523                         hammer_sync_unlock(trans);
2524                 }
2525         }
2526
2527         if (error)
2528                 goto done;
2529         ip->sync_flags &= ~HAMMER_INODE_BUFS;
2530
2531 defer_buffer_flush:
2532         /*
2533          * Now update the inode's on-disk inode-data and/or on-disk record.
2534          * DELETED and ONDISK are managed only in ip->flags.
2535          *
2536          * In the case of a defered buffer flush we still update the on-disk
2537          * inode to satisfy visibility requirements if there happen to be
2538          * directory dependancies.
2539          */
2540         switch(ip->flags & (HAMMER_INODE_DELETED | HAMMER_INODE_ONDISK)) {
2541         case HAMMER_INODE_DELETED|HAMMER_INODE_ONDISK:
2542                 /*
2543                  * If deleted and on-disk, don't set any additional flags.
2544                  * the delete flag takes care of things.
2545                  *
2546                  * Clear flags which may have been set by the frontend.
2547                  */
2548                 ip->sync_flags &= ~(HAMMER_INODE_DDIRTY | HAMMER_INODE_XDIRTY |
2549                                     HAMMER_INODE_ATIME | HAMMER_INODE_MTIME |
2550                                     HAMMER_INODE_DELETING);
2551                 break;
2552         case HAMMER_INODE_DELETED:
2553                 /*
2554                  * Take care of the case where a deleted inode was never
2555                  * flushed to the disk in the first place.
2556                  *
2557                  * Clear flags which may have been set by the frontend.
2558                  */
2559                 ip->sync_flags &= ~(HAMMER_INODE_DDIRTY | HAMMER_INODE_XDIRTY |
2560                                     HAMMER_INODE_ATIME | HAMMER_INODE_MTIME |
2561                                     HAMMER_INODE_DELETING);
2562                 while (RB_ROOT(&ip->rec_tree)) {
2563                         hammer_record_t record = RB_ROOT(&ip->rec_tree);
2564                         hammer_ref(&record->lock);
2565                         KKASSERT(record->lock.refs == 1);
2566                         record->flags |= HAMMER_RECF_DELETED_FE;
2567                         record->flags |= HAMMER_RECF_DELETED_BE;
2568                         hammer_rel_mem_record(record);
2569                 }
2570                 break;
2571         case HAMMER_INODE_ONDISK:
2572                 /*
2573                  * If already on-disk, do not set any additional flags.
2574                  */
2575                 break;
2576         default:
2577                 /*
2578                  * If not on-disk and not deleted, set DDIRTY to force
2579                  * an initial record to be written.
2580                  *
2581                  * Also set the create_tid in both the frontend and backend
2582                  * copy of the inode record.
2583                  */
2584                 ip->ino_leaf.base.create_tid = trans->tid;
2585                 ip->ino_leaf.create_ts = trans->time32;
2586                 ip->sync_ino_leaf.base.create_tid = trans->tid;
2587                 ip->sync_ino_leaf.create_ts = trans->time32;
2588                 ip->sync_flags |= HAMMER_INODE_DDIRTY;
2589                 break;
2590         }
2591
2592         /*
2593          * If RDIRTY or DDIRTY is set, write out a new record.  If the inode
2594          * is already on-disk the old record is marked as deleted.
2595          *
2596          * If DELETED is set hammer_update_inode() will delete the existing
2597          * record without writing out a new one.
2598          *
2599          * If *ONLY* the ITIMES flag is set we can update the record in-place.
2600          */
2601         if (ip->flags & HAMMER_INODE_DELETED) {
2602                 error = hammer_update_inode(&cursor, ip);
2603         } else
2604         if ((ip->sync_flags & HAMMER_INODE_DDIRTY) == 0 &&
2605             (ip->sync_flags & (HAMMER_INODE_ATIME | HAMMER_INODE_MTIME))) {
2606                 error = hammer_update_itimes(&cursor, ip);
2607         } else
2608         if (ip->sync_flags & (HAMMER_INODE_DDIRTY | HAMMER_INODE_ATIME | HAMMER_INODE_MTIME)) {
2609                 error = hammer_update_inode(&cursor, ip);
2610         }
2611 done:
2612         if (error) {
2613                 hammer_critical_error(ip->hmp, ip, error,
2614                                       "while syncing inode");
2615         }
2616         hammer_done_cursor(&cursor);
2617         return(error);
2618 }
2619
2620 /*
2621  * This routine is called when the OS is no longer actively referencing
2622  * the inode (but might still be keeping it cached), or when releasing
2623  * the last reference to an inode.
2624  *
2625  * At this point if the inode's nlinks count is zero we want to destroy
2626  * it, which may mean destroying it on-media too.
2627  */
2628 void
2629 hammer_inode_unloadable_check(hammer_inode_t ip, int getvp)
2630 {
2631         struct vnode *vp;
2632
2633         /*
2634          * Set the DELETING flag when the link count drops to 0 and the
2635          * OS no longer has any opens on the inode.
2636          *
2637          * The backend will clear DELETING (a mod flag) and set DELETED
2638          * (a state flag) when it is actually able to perform the
2639          * operation.
2640          */
2641         if (ip->ino_data.nlinks == 0 &&
2642             (ip->flags & (HAMMER_INODE_DELETING|HAMMER_INODE_DELETED)) == 0) {
2643                 ip->flags |= HAMMER_INODE_DELETING;
2644                 ip->flags |= HAMMER_INODE_TRUNCATED;
2645                 ip->trunc_off = 0;
2646                 vp = NULL;
2647                 if (getvp) {
2648                         if (hammer_get_vnode(ip, &vp) != 0)
2649                                 return;
2650                 }
2651
2652                 /*
2653                  * Final cleanup
2654                  */
2655                 if (ip->vp) {
2656                         vtruncbuf(ip->vp, 0, HAMMER_BUFSIZE);
2657                         vnode_pager_setsize(ip->vp, 0);
2658                 }
2659                 if (getvp) {
2660                         vput(vp);
2661                 }
2662         }
2663 }
2664
2665 /*
2666  * After potentially resolving a dependancy the inode is tested
2667  * to determine whether it needs to be reflushed.
2668  */
2669 void
2670 hammer_test_inode(hammer_inode_t ip)
2671 {
2672         if (ip->flags & HAMMER_INODE_REFLUSH) {
2673                 ip->flags &= ~HAMMER_INODE_REFLUSH;
2674                 hammer_ref(&ip->lock);
2675                 if (ip->flags & HAMMER_INODE_RESIGNAL) {
2676                         ip->flags &= ~HAMMER_INODE_RESIGNAL;
2677                         hammer_flush_inode(ip, HAMMER_FLUSH_SIGNAL);
2678                 } else {
2679                         hammer_flush_inode(ip, 0);
2680                 }
2681                 hammer_rel_inode(ip, 0);
2682         }
2683 }
2684
2685 /*
2686  * Clear the RECLAIM flag on an inode.  This occurs when the inode is
2687  * reassociated with a vp or just before it gets freed.
2688  *
2689  * Wakeup one thread blocked waiting on reclaims to complete.  Note that
2690  * the inode the thread is waiting on behalf of is a different inode then
2691  * the inode we are called with.  This is to create a pipeline.
2692  */
2693 static void
2694 hammer_inode_wakereclaims(hammer_inode_t ip)
2695 {
2696         struct hammer_reclaim *reclaim;
2697         hammer_mount_t hmp = ip->hmp;
2698
2699         if ((ip->flags & HAMMER_INODE_RECLAIM) == 0)
2700                 return;
2701
2702         --hammer_count_reclaiming;
2703         --hmp->inode_reclaims;
2704         ip->flags &= ~HAMMER_INODE_RECLAIM;
2705
2706         if ((reclaim = TAILQ_FIRST(&hmp->reclaim_list)) != NULL) {
2707                 TAILQ_REMOVE(&hmp->reclaim_list, reclaim, entry);
2708                 reclaim->okydoky = 1;
2709                 wakeup(reclaim);
2710         }
2711 }
2712
2713 /*
2714  * Setup our reclaim pipeline.  We only let so many detached (and dirty)
2715  * inodes build up before we start blocking.
2716  *
2717  * When we block we don't care *which* inode has finished reclaiming,
2718  * as lone as one does.  This is somewhat heuristical... we also put a
2719  * cap on how long we are willing to wait.
2720  */
2721 void
2722 hammer_inode_waitreclaims(hammer_mount_t hmp)
2723 {
2724         struct hammer_reclaim reclaim;
2725         int delay;
2726
2727         if (hmp->inode_reclaims > HAMMER_RECLAIM_WAIT) {
2728                 reclaim.okydoky = 0;
2729                 TAILQ_INSERT_TAIL(&hmp->reclaim_list,
2730                                   &reclaim, entry);
2731         } else {
2732                 reclaim.okydoky = 1;
2733         }
2734
2735         if (reclaim.okydoky == 0) {
2736                 delay = (hmp->inode_reclaims - HAMMER_RECLAIM_WAIT) * hz /
2737                         HAMMER_RECLAIM_WAIT;
2738                 if (delay >= 0)
2739                         tsleep(&reclaim, 0, "hmrrcm", delay + 1);
2740                 if (reclaim.okydoky == 0)
2741                         TAILQ_REMOVE(&hmp->reclaim_list, &reclaim, entry);
2742         }
2743 }
2744