2 * Copyright (C) Sistina Software, Inc. 1997-2003 All rights reserved.
3 * Copyright (C) 2004-2007 Red Hat, Inc. All rights reserved.
5 * This copyrighted material is made available to anyone wishing to use,
6 * modify, copy, or redistribute it subject to the terms and conditions
7 * of the GNU General Public License version 2.
11 * Quota change tags are associated with each transaction that allocates or
12 * deallocates space. Those changes are accumulated locally to each node (in a
13 * per-node file) and then are periodically synced to the quota file. This
14 * avoids the bottleneck of constantly touching the quota file, but introduces
15 * fuzziness in the current usage value of IDs that are being used on different
16 * nodes in the cluster simultaneously. So, it is possible for a user on
17 * multiple nodes to overrun their quota, but that overrun is controlable.
18 * Since quota tags are part of transactions, there is no need for a quota check
19 * program to be run on node crashes or anything like that.
21 * There are couple of knobs that let the administrator manage the quota
22 * fuzziness. "quota_quantum" sets the maximum time a quota change can be
23 * sitting on one node before being synced to the quota file. (The default is
24 * 60 seconds.) Another knob, "quota_scale" controls how quickly the frequency
25 * of quota file syncs increases as the user moves closer to their limit. The
26 * more frequent the syncs, the more accurate the quota enforcement, but that
27 * means that there is more contention between the nodes for the quota file.
28 * The default value is one. This sets the maximum theoretical quota overrun
29 * (with infinite node with infinite bandwidth) to twice the user's limit. (In
30 * practice, the maximum overrun you see should be much less.) A "quota_scale"
31 * number greater than one makes quota syncs more frequent and reduces the
32 * maximum overrun. Numbers less than one (but greater than zero) make quota
33 * syncs less frequent.
35 * GFS quotas also use per-ID Lock Value Blocks (LVBs) to cache the contents of
36 * the quota file, so it is not being constantly read.
39 #include <linux/sched.h>
40 #include <linux/slab.h>
41 #include <linux/spinlock.h>
42 #include <linux/completion.h>
43 #include <linux/buffer_head.h>
44 #include <linux/sort.h>
46 #include <linux/bio.h>
47 #include <linux/gfs2_ondisk.h>
48 #include <linux/kthread.h>
49 #include <linux/freezer.h>
50 #include <linux/quota.h>
51 #include <linux/dqblk_xfs.h>
70 struct gfs2_quota_change_host {
72 u32 qc_flags; /* GFS2_QCF_... */
76 static LIST_HEAD(qd_lru_list);
77 static atomic_t qd_lru_count = ATOMIC_INIT(0);
78 static DEFINE_SPINLOCK(qd_lru_lock);
80 int gfs2_shrink_qd_memory(int nr, gfp_t gfp_mask)
82 struct gfs2_quota_data *qd;
88 if (!(gfp_mask & __GFP_FS))
91 spin_lock(&qd_lru_lock);
92 while (nr && !list_empty(&qd_lru_list)) {
93 qd = list_entry(qd_lru_list.next,
94 struct gfs2_quota_data, qd_reclaim);
95 sdp = qd->qd_gl->gl_sbd;
97 /* Free from the filesystem-specific list */
98 list_del(&qd->qd_list);
100 gfs2_assert_warn(sdp, !qd->qd_change);
101 gfs2_assert_warn(sdp, !qd->qd_slot_count);
102 gfs2_assert_warn(sdp, !qd->qd_bh_count);
104 gfs2_glock_put(qd->qd_gl);
105 atomic_dec(&sdp->sd_quota_count);
107 /* Delete it from the common reclaim list */
108 list_del_init(&qd->qd_reclaim);
109 atomic_dec(&qd_lru_count);
110 spin_unlock(&qd_lru_lock);
111 kmem_cache_free(gfs2_quotad_cachep, qd);
112 spin_lock(&qd_lru_lock);
115 spin_unlock(&qd_lru_lock);
118 return (atomic_read(&qd_lru_count) * sysctl_vfs_cache_pressure) / 100;
121 static u64 qd2offset(struct gfs2_quota_data *qd)
125 offset = 2 * (u64)qd->qd_id + !test_bit(QDF_USER, &qd->qd_flags);
126 offset *= sizeof(struct gfs2_quota);
131 static int qd_alloc(struct gfs2_sbd *sdp, int user, u32 id,
132 struct gfs2_quota_data **qdp)
134 struct gfs2_quota_data *qd;
137 qd = kmem_cache_zalloc(gfs2_quotad_cachep, GFP_NOFS);
141 atomic_set(&qd->qd_count, 1);
144 set_bit(QDF_USER, &qd->qd_flags);
146 INIT_LIST_HEAD(&qd->qd_reclaim);
148 error = gfs2_glock_get(sdp, 2 * (u64)id + !user,
149 &gfs2_quota_glops, CREATE, &qd->qd_gl);
158 kmem_cache_free(gfs2_quotad_cachep, qd);
162 static int qd_get(struct gfs2_sbd *sdp, int user, u32 id,
163 struct gfs2_quota_data **qdp)
165 struct gfs2_quota_data *qd = NULL, *new_qd = NULL;
172 spin_lock(&qd_lru_lock);
173 list_for_each_entry(qd, &sdp->sd_quota_list, qd_list) {
174 if (qd->qd_id == id &&
175 !test_bit(QDF_USER, &qd->qd_flags) == !user) {
176 if (!atomic_read(&qd->qd_count) &&
177 !list_empty(&qd->qd_reclaim)) {
178 /* Remove it from reclaim list */
179 list_del_init(&qd->qd_reclaim);
180 atomic_dec(&qd_lru_count);
182 atomic_inc(&qd->qd_count);
193 list_add(&qd->qd_list, &sdp->sd_quota_list);
194 atomic_inc(&sdp->sd_quota_count);
198 spin_unlock(&qd_lru_lock);
202 gfs2_glock_put(new_qd->qd_gl);
203 kmem_cache_free(gfs2_quotad_cachep, new_qd);
209 error = qd_alloc(sdp, user, id, &new_qd);
215 static void qd_hold(struct gfs2_quota_data *qd)
217 struct gfs2_sbd *sdp = qd->qd_gl->gl_sbd;
218 gfs2_assert(sdp, atomic_read(&qd->qd_count));
219 atomic_inc(&qd->qd_count);
222 static void qd_put(struct gfs2_quota_data *qd)
224 if (atomic_dec_and_lock(&qd->qd_count, &qd_lru_lock)) {
225 /* Add to the reclaim list */
226 list_add_tail(&qd->qd_reclaim, &qd_lru_list);
227 atomic_inc(&qd_lru_count);
228 spin_unlock(&qd_lru_lock);
232 static int slot_get(struct gfs2_quota_data *qd)
234 struct gfs2_sbd *sdp = qd->qd_gl->gl_sbd;
235 unsigned int c, o = 0, b;
236 unsigned char byte = 0;
238 spin_lock(&qd_lru_lock);
240 if (qd->qd_slot_count++) {
241 spin_unlock(&qd_lru_lock);
245 for (c = 0; c < sdp->sd_quota_chunks; c++)
246 for (o = 0; o < PAGE_SIZE; o++) {
247 byte = sdp->sd_quota_bitmap[c][o];
255 for (b = 0; b < 8; b++)
256 if (!(byte & (1 << b)))
258 qd->qd_slot = c * (8 * PAGE_SIZE) + o * 8 + b;
260 if (qd->qd_slot >= sdp->sd_quota_slots)
263 sdp->sd_quota_bitmap[c][o] |= 1 << b;
265 spin_unlock(&qd_lru_lock);
271 spin_unlock(&qd_lru_lock);
275 static void slot_hold(struct gfs2_quota_data *qd)
277 struct gfs2_sbd *sdp = qd->qd_gl->gl_sbd;
279 spin_lock(&qd_lru_lock);
280 gfs2_assert(sdp, qd->qd_slot_count);
282 spin_unlock(&qd_lru_lock);
285 static void slot_put(struct gfs2_quota_data *qd)
287 struct gfs2_sbd *sdp = qd->qd_gl->gl_sbd;
289 spin_lock(&qd_lru_lock);
290 gfs2_assert(sdp, qd->qd_slot_count);
291 if (!--qd->qd_slot_count) {
292 gfs2_icbit_munge(sdp, sdp->sd_quota_bitmap, qd->qd_slot, 0);
295 spin_unlock(&qd_lru_lock);
298 static int bh_get(struct gfs2_quota_data *qd)
300 struct gfs2_sbd *sdp = qd->qd_gl->gl_sbd;
301 struct gfs2_inode *ip = GFS2_I(sdp->sd_qc_inode);
302 unsigned int block, offset;
303 struct buffer_head *bh;
305 struct buffer_head bh_map = { .b_state = 0, .b_blocknr = 0 };
307 mutex_lock(&sdp->sd_quota_mutex);
309 if (qd->qd_bh_count++) {
310 mutex_unlock(&sdp->sd_quota_mutex);
314 block = qd->qd_slot / sdp->sd_qc_per_block;
315 offset = qd->qd_slot % sdp->sd_qc_per_block;
317 bh_map.b_size = 1 << ip->i_inode.i_blkbits;
318 error = gfs2_block_map(&ip->i_inode, block, &bh_map, 0);
321 error = gfs2_meta_read(ip->i_gl, bh_map.b_blocknr, DIO_WAIT, &bh);
325 if (gfs2_metatype_check(sdp, bh, GFS2_METATYPE_QC))
329 qd->qd_bh_qc = (struct gfs2_quota_change *)
330 (bh->b_data + sizeof(struct gfs2_meta_header) +
331 offset * sizeof(struct gfs2_quota_change));
333 mutex_unlock(&sdp->sd_quota_mutex);
341 mutex_unlock(&sdp->sd_quota_mutex);
345 static void bh_put(struct gfs2_quota_data *qd)
347 struct gfs2_sbd *sdp = qd->qd_gl->gl_sbd;
349 mutex_lock(&sdp->sd_quota_mutex);
350 gfs2_assert(sdp, qd->qd_bh_count);
351 if (!--qd->qd_bh_count) {
356 mutex_unlock(&sdp->sd_quota_mutex);
359 static int qd_fish(struct gfs2_sbd *sdp, struct gfs2_quota_data **qdp)
361 struct gfs2_quota_data *qd = NULL;
367 if (sdp->sd_vfs->s_flags & MS_RDONLY)
370 spin_lock(&qd_lru_lock);
372 list_for_each_entry(qd, &sdp->sd_quota_list, qd_list) {
373 if (test_bit(QDF_LOCKED, &qd->qd_flags) ||
374 !test_bit(QDF_CHANGE, &qd->qd_flags) ||
375 qd->qd_sync_gen >= sdp->sd_quota_sync_gen)
378 list_move_tail(&qd->qd_list, &sdp->sd_quota_list);
380 set_bit(QDF_LOCKED, &qd->qd_flags);
381 gfs2_assert_warn(sdp, atomic_read(&qd->qd_count));
382 atomic_inc(&qd->qd_count);
383 qd->qd_change_sync = qd->qd_change;
384 gfs2_assert_warn(sdp, qd->qd_slot_count);
394 spin_unlock(&qd_lru_lock);
397 gfs2_assert_warn(sdp, qd->qd_change_sync);
400 clear_bit(QDF_LOCKED, &qd->qd_flags);
412 static int qd_trylock(struct gfs2_quota_data *qd)
414 struct gfs2_sbd *sdp = qd->qd_gl->gl_sbd;
416 if (sdp->sd_vfs->s_flags & MS_RDONLY)
419 spin_lock(&qd_lru_lock);
421 if (test_bit(QDF_LOCKED, &qd->qd_flags) ||
422 !test_bit(QDF_CHANGE, &qd->qd_flags)) {
423 spin_unlock(&qd_lru_lock);
427 list_move_tail(&qd->qd_list, &sdp->sd_quota_list);
429 set_bit(QDF_LOCKED, &qd->qd_flags);
430 gfs2_assert_warn(sdp, atomic_read(&qd->qd_count));
431 atomic_inc(&qd->qd_count);
432 qd->qd_change_sync = qd->qd_change;
433 gfs2_assert_warn(sdp, qd->qd_slot_count);
436 spin_unlock(&qd_lru_lock);
438 gfs2_assert_warn(sdp, qd->qd_change_sync);
440 clear_bit(QDF_LOCKED, &qd->qd_flags);
449 static void qd_unlock(struct gfs2_quota_data *qd)
451 gfs2_assert_warn(qd->qd_gl->gl_sbd,
452 test_bit(QDF_LOCKED, &qd->qd_flags));
453 clear_bit(QDF_LOCKED, &qd->qd_flags);
459 static int qdsb_get(struct gfs2_sbd *sdp, int user, u32 id,
460 struct gfs2_quota_data **qdp)
464 error = qd_get(sdp, user, id, qdp);
468 error = slot_get(*qdp);
472 error = bh_get(*qdp);
485 static void qdsb_put(struct gfs2_quota_data *qd)
492 int gfs2_quota_hold(struct gfs2_inode *ip, u32 uid, u32 gid)
494 struct gfs2_sbd *sdp = GFS2_SB(&ip->i_inode);
495 struct gfs2_alloc *al = ip->i_alloc;
496 struct gfs2_quota_data **qd = al->al_qd;
499 if (gfs2_assert_warn(sdp, !al->al_qd_num) ||
500 gfs2_assert_warn(sdp, !test_bit(GIF_QD_LOCKED, &ip->i_flags)))
503 if (sdp->sd_args.ar_quota == GFS2_QUOTA_OFF)
506 error = qdsb_get(sdp, QUOTA_USER, ip->i_inode.i_uid, qd);
512 error = qdsb_get(sdp, QUOTA_GROUP, ip->i_inode.i_gid, qd);
518 if (uid != NO_QUOTA_CHANGE && uid != ip->i_inode.i_uid) {
519 error = qdsb_get(sdp, QUOTA_USER, uid, qd);
526 if (gid != NO_QUOTA_CHANGE && gid != ip->i_inode.i_gid) {
527 error = qdsb_get(sdp, QUOTA_GROUP, gid, qd);
536 gfs2_quota_unhold(ip);
540 void gfs2_quota_unhold(struct gfs2_inode *ip)
542 struct gfs2_sbd *sdp = GFS2_SB(&ip->i_inode);
543 struct gfs2_alloc *al = ip->i_alloc;
546 gfs2_assert_warn(sdp, !test_bit(GIF_QD_LOCKED, &ip->i_flags));
548 for (x = 0; x < al->al_qd_num; x++) {
549 qdsb_put(al->al_qd[x]);
555 static int sort_qd(const void *a, const void *b)
557 const struct gfs2_quota_data *qd_a = *(const struct gfs2_quota_data **)a;
558 const struct gfs2_quota_data *qd_b = *(const struct gfs2_quota_data **)b;
560 if (!test_bit(QDF_USER, &qd_a->qd_flags) !=
561 !test_bit(QDF_USER, &qd_b->qd_flags)) {
562 if (test_bit(QDF_USER, &qd_a->qd_flags))
567 if (qd_a->qd_id < qd_b->qd_id)
569 if (qd_a->qd_id > qd_b->qd_id)
575 static void do_qc(struct gfs2_quota_data *qd, s64 change)
577 struct gfs2_sbd *sdp = qd->qd_gl->gl_sbd;
578 struct gfs2_inode *ip = GFS2_I(sdp->sd_qc_inode);
579 struct gfs2_quota_change *qc = qd->qd_bh_qc;
582 mutex_lock(&sdp->sd_quota_mutex);
583 gfs2_trans_add_bh(ip->i_gl, qd->qd_bh, 1);
585 if (!test_bit(QDF_CHANGE, &qd->qd_flags)) {
588 if (test_bit(QDF_USER, &qd->qd_flags))
589 qc->qc_flags = cpu_to_be32(GFS2_QCF_USER);
590 qc->qc_id = cpu_to_be32(qd->qd_id);
593 x = be64_to_cpu(qc->qc_change) + change;
594 qc->qc_change = cpu_to_be64(x);
596 spin_lock(&qd_lru_lock);
598 spin_unlock(&qd_lru_lock);
601 gfs2_assert_warn(sdp, test_bit(QDF_CHANGE, &qd->qd_flags));
602 clear_bit(QDF_CHANGE, &qd->qd_flags);
607 } else if (!test_and_set_bit(QDF_CHANGE, &qd->qd_flags)) {
612 mutex_unlock(&sdp->sd_quota_mutex);
616 * gfs2_adjust_quota - adjust record of current block usage
617 * @ip: The quota inode
618 * @loc: Offset of the entry in the quota file
619 * @change: The amount of usage change to record
620 * @qd: The quota data
621 * @fdq: The updated limits to record
623 * This function was mostly borrowed from gfs2_block_truncate_page which was
624 * in turn mostly borrowed from ext3
626 * Returns: 0 or -ve on error
629 static int gfs2_adjust_quota(struct gfs2_inode *ip, loff_t loc,
630 s64 change, struct gfs2_quota_data *qd,
631 struct fs_disk_quota *fdq)
633 struct inode *inode = &ip->i_inode;
634 struct address_space *mapping = inode->i_mapping;
635 unsigned long index = loc >> PAGE_CACHE_SHIFT;
636 unsigned offset = loc & (PAGE_CACHE_SIZE - 1);
637 unsigned blocksize, iblock, pos;
638 struct buffer_head *bh, *dibh;
641 struct gfs2_quota *qp;
646 if (gfs2_is_stuffed(ip))
647 gfs2_unstuff_dinode(ip, NULL);
649 page = grab_cache_page(mapping, index);
653 blocksize = inode->i_sb->s_blocksize;
654 iblock = index << (PAGE_CACHE_SHIFT - inode->i_sb->s_blocksize_bits);
656 if (!page_has_buffers(page))
657 create_empty_buffers(page, blocksize, 0);
659 bh = page_buffers(page);
661 while (offset >= pos) {
662 bh = bh->b_this_page;
667 if (!buffer_mapped(bh)) {
668 gfs2_block_map(inode, iblock, bh, 1);
669 if (!buffer_mapped(bh))
673 if (PageUptodate(page))
674 set_buffer_uptodate(bh);
676 if (!buffer_uptodate(bh)) {
677 ll_rw_block(READ_META, 1, &bh);
679 if (!buffer_uptodate(bh))
683 gfs2_trans_add_bh(ip->i_gl, bh, 0);
685 kaddr = kmap_atomic(page, KM_USER0);
687 value = (s64)be64_to_cpu(qp->qu_value) + change;
688 qp->qu_value = cpu_to_be64(value);
689 qd->qd_qb.qb_value = qp->qu_value;
691 if (fdq->d_fieldmask & FS_DQ_BSOFT) {
692 qp->qu_warn = cpu_to_be64(fdq->d_blk_softlimit);
693 qd->qd_qb.qb_warn = qp->qu_warn;
695 if (fdq->d_fieldmask & FS_DQ_BHARD) {
696 qp->qu_limit = cpu_to_be64(fdq->d_blk_hardlimit);
697 qd->qd_qb.qb_limit = qp->qu_limit;
700 flush_dcache_page(page);
701 kunmap_atomic(kaddr, KM_USER0);
703 err = gfs2_meta_inode_buffer(ip, &dibh);
707 size = loc + sizeof(struct gfs2_quota);
708 if (size > inode->i_size) {
709 ip->i_disksize = size;
710 i_size_write(inode, size);
712 inode->i_mtime = inode->i_atime = CURRENT_TIME;
713 gfs2_trans_add_bh(ip->i_gl, dibh, 1);
714 gfs2_dinode_out(ip, dibh->b_data);
716 mark_inode_dirty(inode);
720 page_cache_release(page);
724 static int do_sync(unsigned int num_qd, struct gfs2_quota_data **qda)
726 struct gfs2_sbd *sdp = (*qda)->qd_gl->gl_sbd;
727 struct gfs2_inode *ip = GFS2_I(sdp->sd_quota_inode);
728 unsigned int data_blocks, ind_blocks;
729 struct gfs2_holder *ghs, i_gh;
731 struct gfs2_quota_data *qd;
733 unsigned int nalloc = 0, blocks;
734 struct gfs2_alloc *al = NULL;
737 gfs2_write_calc_reserv(ip, sizeof(struct gfs2_quota),
738 &data_blocks, &ind_blocks);
740 ghs = kcalloc(num_qd, sizeof(struct gfs2_holder), GFP_NOFS);
744 sort(qda, num_qd, sizeof(struct gfs2_quota_data *), sort_qd, NULL);
745 mutex_lock_nested(&ip->i_inode.i_mutex, I_MUTEX_QUOTA);
746 for (qx = 0; qx < num_qd; qx++) {
747 error = gfs2_glock_nq_init(qda[qx]->qd_gl, LM_ST_EXCLUSIVE,
748 GL_NOCACHE, &ghs[qx]);
753 error = gfs2_glock_nq_init(ip->i_gl, LM_ST_EXCLUSIVE, 0, &i_gh);
757 for (x = 0; x < num_qd; x++) {
760 offset = qd2offset(qda[x]);
761 error = gfs2_write_alloc_required(ip, offset,
762 sizeof(struct gfs2_quota),
770 al = gfs2_alloc_get(ip);
776 * 1 blk for unstuffing inode if stuffed. We add this extra
777 * block to the reservation unconditionally. If the inode
778 * doesn't need unstuffing, the block will be released to the
779 * rgrp since it won't be allocated during the transaction
781 al->al_requested = 1;
782 /* +1 in the end for block requested above for unstuffing */
783 blocks = num_qd * data_blocks + RES_DINODE + num_qd + 1;
786 al->al_requested += nalloc * (data_blocks + ind_blocks);
787 error = gfs2_inplace_reserve(ip);
792 blocks += al->al_rgd->rd_length + nalloc * ind_blocks + RES_STATFS;
794 error = gfs2_trans_begin(sdp, blocks, 0);
798 for (x = 0; x < num_qd; x++) {
800 offset = qd2offset(qd);
801 error = gfs2_adjust_quota(ip, offset, qd->qd_change_sync, qd, NULL);
805 do_qc(qd, -qd->qd_change_sync);
813 gfs2_inplace_release(ip);
817 gfs2_glock_dq_uninit(&i_gh);
820 gfs2_glock_dq_uninit(&ghs[qx]);
821 mutex_unlock(&ip->i_inode.i_mutex);
823 gfs2_log_flush(ip->i_gl->gl_sbd, ip->i_gl);
827 static int update_qd(struct gfs2_sbd *sdp, struct gfs2_quota_data *qd)
829 struct gfs2_inode *ip = GFS2_I(sdp->sd_quota_inode);
831 struct gfs2_quota_lvb *qlvb;
835 memset(&q, 0, sizeof(struct gfs2_quota));
837 error = gfs2_internal_read(ip, NULL, (char *)&q, &pos, sizeof(q));
841 qlvb = (struct gfs2_quota_lvb *)qd->qd_gl->gl_lvb;
842 qlvb->qb_magic = cpu_to_be32(GFS2_MAGIC);
844 qlvb->qb_limit = q.qu_limit;
845 qlvb->qb_warn = q.qu_warn;
846 qlvb->qb_value = q.qu_value;
852 static int do_glock(struct gfs2_quota_data *qd, int force_refresh,
853 struct gfs2_holder *q_gh)
855 struct gfs2_sbd *sdp = qd->qd_gl->gl_sbd;
856 struct gfs2_inode *ip = GFS2_I(sdp->sd_quota_inode);
857 struct gfs2_holder i_gh;
861 error = gfs2_glock_nq_init(qd->qd_gl, LM_ST_SHARED, 0, q_gh);
865 qd->qd_qb = *(struct gfs2_quota_lvb *)qd->qd_gl->gl_lvb;
867 if (force_refresh || qd->qd_qb.qb_magic != cpu_to_be32(GFS2_MAGIC)) {
868 gfs2_glock_dq_uninit(q_gh);
869 error = gfs2_glock_nq_init(qd->qd_gl, LM_ST_EXCLUSIVE,
874 error = gfs2_glock_nq_init(ip->i_gl, LM_ST_SHARED, 0, &i_gh);
878 error = update_qd(sdp, qd);
882 gfs2_glock_dq_uninit(&i_gh);
883 gfs2_glock_dq_uninit(q_gh);
891 gfs2_glock_dq_uninit(&i_gh);
893 gfs2_glock_dq_uninit(q_gh);
897 int gfs2_quota_lock(struct gfs2_inode *ip, u32 uid, u32 gid)
899 struct gfs2_sbd *sdp = GFS2_SB(&ip->i_inode);
900 struct gfs2_alloc *al = ip->i_alloc;
904 gfs2_quota_hold(ip, uid, gid);
906 if (capable(CAP_SYS_RESOURCE) ||
907 sdp->sd_args.ar_quota != GFS2_QUOTA_ON)
910 sort(al->al_qd, al->al_qd_num, sizeof(struct gfs2_quota_data *),
913 for (x = 0; x < al->al_qd_num; x++) {
914 error = do_glock(al->al_qd[x], NO_FORCE, &al->al_qd_ghs[x]);
920 set_bit(GIF_QD_LOCKED, &ip->i_flags);
923 gfs2_glock_dq_uninit(&al->al_qd_ghs[x]);
924 gfs2_quota_unhold(ip);
930 static int need_sync(struct gfs2_quota_data *qd)
932 struct gfs2_sbd *sdp = qd->qd_gl->gl_sbd;
933 struct gfs2_tune *gt = &sdp->sd_tune;
935 unsigned int num, den;
938 if (!qd->qd_qb.qb_limit)
941 spin_lock(&qd_lru_lock);
942 value = qd->qd_change;
943 spin_unlock(&qd_lru_lock);
945 spin_lock(>->gt_spin);
946 num = gt->gt_quota_scale_num;
947 den = gt->gt_quota_scale_den;
948 spin_unlock(>->gt_spin);
952 else if ((s64)be64_to_cpu(qd->qd_qb.qb_value) >=
953 (s64)be64_to_cpu(qd->qd_qb.qb_limit))
956 value *= gfs2_jindex_size(sdp) * num;
957 value = div_s64(value, den);
958 value += (s64)be64_to_cpu(qd->qd_qb.qb_value);
959 if (value < (s64)be64_to_cpu(qd->qd_qb.qb_limit))
966 void gfs2_quota_unlock(struct gfs2_inode *ip)
968 struct gfs2_alloc *al = ip->i_alloc;
969 struct gfs2_quota_data *qda[4];
970 unsigned int count = 0;
973 if (!test_and_clear_bit(GIF_QD_LOCKED, &ip->i_flags))
976 for (x = 0; x < al->al_qd_num; x++) {
977 struct gfs2_quota_data *qd;
981 sync = need_sync(qd);
983 gfs2_glock_dq_uninit(&al->al_qd_ghs[x]);
985 if (sync && qd_trylock(qd))
991 for (x = 0; x < count; x++)
996 gfs2_quota_unhold(ip);
1001 static int print_message(struct gfs2_quota_data *qd, char *type)
1003 struct gfs2_sbd *sdp = qd->qd_gl->gl_sbd;
1005 printk(KERN_INFO "GFS2: fsid=%s: quota %s for %s %u\n",
1006 sdp->sd_fsname, type,
1007 (test_bit(QDF_USER, &qd->qd_flags)) ? "user" : "group",
1013 int gfs2_quota_check(struct gfs2_inode *ip, u32 uid, u32 gid)
1015 struct gfs2_sbd *sdp = GFS2_SB(&ip->i_inode);
1016 struct gfs2_alloc *al = ip->i_alloc;
1017 struct gfs2_quota_data *qd;
1022 if (!test_bit(GIF_QD_LOCKED, &ip->i_flags))
1025 if (sdp->sd_args.ar_quota != GFS2_QUOTA_ON)
1028 for (x = 0; x < al->al_qd_num; x++) {
1031 if (!((qd->qd_id == uid && test_bit(QDF_USER, &qd->qd_flags)) ||
1032 (qd->qd_id == gid && !test_bit(QDF_USER, &qd->qd_flags))))
1035 value = (s64)be64_to_cpu(qd->qd_qb.qb_value);
1036 spin_lock(&qd_lru_lock);
1037 value += qd->qd_change;
1038 spin_unlock(&qd_lru_lock);
1040 if (be64_to_cpu(qd->qd_qb.qb_limit) && (s64)be64_to_cpu(qd->qd_qb.qb_limit) < value) {
1041 print_message(qd, "exceeded");
1042 quota_send_warning(test_bit(QDF_USER, &qd->qd_flags) ?
1043 USRQUOTA : GRPQUOTA, qd->qd_id,
1044 sdp->sd_vfs->s_dev, QUOTA_NL_BHARDWARN);
1048 } else if (be64_to_cpu(qd->qd_qb.qb_warn) &&
1049 (s64)be64_to_cpu(qd->qd_qb.qb_warn) < value &&
1050 time_after_eq(jiffies, qd->qd_last_warn +
1052 gt_quota_warn_period) * HZ)) {
1053 quota_send_warning(test_bit(QDF_USER, &qd->qd_flags) ?
1054 USRQUOTA : GRPQUOTA, qd->qd_id,
1055 sdp->sd_vfs->s_dev, QUOTA_NL_BSOFTWARN);
1056 error = print_message(qd, "warning");
1057 qd->qd_last_warn = jiffies;
1064 void gfs2_quota_change(struct gfs2_inode *ip, s64 change,
1067 struct gfs2_alloc *al = ip->i_alloc;
1068 struct gfs2_quota_data *qd;
1071 if (gfs2_assert_warn(GFS2_SB(&ip->i_inode), change))
1073 if (ip->i_diskflags & GFS2_DIF_SYSTEM)
1076 for (x = 0; x < al->al_qd_num; x++) {
1079 if ((qd->qd_id == uid && test_bit(QDF_USER, &qd->qd_flags)) ||
1080 (qd->qd_id == gid && !test_bit(QDF_USER, &qd->qd_flags))) {
1086 int gfs2_quota_sync(struct super_block *sb, int type, int wait)
1088 struct gfs2_sbd *sdp = sb->s_fs_info;
1089 struct gfs2_quota_data **qda;
1090 unsigned int max_qd = gfs2_tune_get(sdp, gt_quota_simul_sync);
1091 unsigned int num_qd;
1095 sdp->sd_quota_sync_gen++;
1097 qda = kcalloc(max_qd, sizeof(struct gfs2_quota_data *), GFP_KERNEL);
1105 error = qd_fish(sdp, qda + num_qd);
1106 if (error || !qda[num_qd])
1108 if (++num_qd == max_qd)
1114 error = do_sync(num_qd, qda);
1116 for (x = 0; x < num_qd; x++)
1117 qda[x]->qd_sync_gen =
1118 sdp->sd_quota_sync_gen;
1120 for (x = 0; x < num_qd; x++)
1123 } while (!error && num_qd == max_qd);
1130 static int gfs2_quota_sync_timeo(struct super_block *sb, int type)
1132 return gfs2_quota_sync(sb, type, 0);
1135 int gfs2_quota_refresh(struct gfs2_sbd *sdp, int user, u32 id)
1137 struct gfs2_quota_data *qd;
1138 struct gfs2_holder q_gh;
1141 error = qd_get(sdp, user, id, &qd);
1145 error = do_glock(qd, FORCE, &q_gh);
1147 gfs2_glock_dq_uninit(&q_gh);
1153 static void gfs2_quota_change_in(struct gfs2_quota_change_host *qc, const void *buf)
1155 const struct gfs2_quota_change *str = buf;
1157 qc->qc_change = be64_to_cpu(str->qc_change);
1158 qc->qc_flags = be32_to_cpu(str->qc_flags);
1159 qc->qc_id = be32_to_cpu(str->qc_id);
1162 int gfs2_quota_init(struct gfs2_sbd *sdp)
1164 struct gfs2_inode *ip = GFS2_I(sdp->sd_qc_inode);
1165 unsigned int blocks = ip->i_disksize >> sdp->sd_sb.sb_bsize_shift;
1166 unsigned int x, slot = 0;
1167 unsigned int found = 0;
1172 if (!ip->i_disksize || ip->i_disksize > (64 << 20) ||
1173 ip->i_disksize & (sdp->sd_sb.sb_bsize - 1)) {
1174 gfs2_consist_inode(ip);
1177 sdp->sd_quota_slots = blocks * sdp->sd_qc_per_block;
1178 sdp->sd_quota_chunks = DIV_ROUND_UP(sdp->sd_quota_slots, 8 * PAGE_SIZE);
1182 sdp->sd_quota_bitmap = kcalloc(sdp->sd_quota_chunks,
1183 sizeof(unsigned char *), GFP_NOFS);
1184 if (!sdp->sd_quota_bitmap)
1187 for (x = 0; x < sdp->sd_quota_chunks; x++) {
1188 sdp->sd_quota_bitmap[x] = kzalloc(PAGE_SIZE, GFP_NOFS);
1189 if (!sdp->sd_quota_bitmap[x])
1193 for (x = 0; x < blocks; x++) {
1194 struct buffer_head *bh;
1199 error = gfs2_extent_map(&ip->i_inode, x, &new, &dblock, &extlen);
1204 bh = gfs2_meta_ra(ip->i_gl, dblock, extlen);
1207 if (gfs2_metatype_check(sdp, bh, GFS2_METATYPE_QC)) {
1212 for (y = 0; y < sdp->sd_qc_per_block && slot < sdp->sd_quota_slots;
1214 struct gfs2_quota_change_host qc;
1215 struct gfs2_quota_data *qd;
1217 gfs2_quota_change_in(&qc, bh->b_data +
1218 sizeof(struct gfs2_meta_header) +
1219 y * sizeof(struct gfs2_quota_change));
1223 error = qd_alloc(sdp, (qc.qc_flags & GFS2_QCF_USER),
1230 set_bit(QDF_CHANGE, &qd->qd_flags);
1231 qd->qd_change = qc.qc_change;
1233 qd->qd_slot_count = 1;
1235 spin_lock(&qd_lru_lock);
1236 gfs2_icbit_munge(sdp, sdp->sd_quota_bitmap, slot, 1);
1237 list_add(&qd->qd_list, &sdp->sd_quota_list);
1238 atomic_inc(&sdp->sd_quota_count);
1239 spin_unlock(&qd_lru_lock);
1250 fs_info(sdp, "found %u quota changes\n", found);
1255 gfs2_quota_cleanup(sdp);
1259 void gfs2_quota_cleanup(struct gfs2_sbd *sdp)
1261 struct list_head *head = &sdp->sd_quota_list;
1262 struct gfs2_quota_data *qd;
1265 spin_lock(&qd_lru_lock);
1266 while (!list_empty(head)) {
1267 qd = list_entry(head->prev, struct gfs2_quota_data, qd_list);
1269 if (atomic_read(&qd->qd_count) > 1 ||
1270 (atomic_read(&qd->qd_count) &&
1271 !test_bit(QDF_CHANGE, &qd->qd_flags))) {
1272 list_move(&qd->qd_list, head);
1273 spin_unlock(&qd_lru_lock);
1275 spin_lock(&qd_lru_lock);
1279 list_del(&qd->qd_list);
1280 /* Also remove if this qd exists in the reclaim list */
1281 if (!list_empty(&qd->qd_reclaim)) {
1282 list_del_init(&qd->qd_reclaim);
1283 atomic_dec(&qd_lru_count);
1285 atomic_dec(&sdp->sd_quota_count);
1286 spin_unlock(&qd_lru_lock);
1288 if (!atomic_read(&qd->qd_count)) {
1289 gfs2_assert_warn(sdp, !qd->qd_change);
1290 gfs2_assert_warn(sdp, !qd->qd_slot_count);
1292 gfs2_assert_warn(sdp, qd->qd_slot_count == 1);
1293 gfs2_assert_warn(sdp, !qd->qd_bh_count);
1295 gfs2_glock_put(qd->qd_gl);
1296 kmem_cache_free(gfs2_quotad_cachep, qd);
1298 spin_lock(&qd_lru_lock);
1300 spin_unlock(&qd_lru_lock);
1302 gfs2_assert_warn(sdp, !atomic_read(&sdp->sd_quota_count));
1304 if (sdp->sd_quota_bitmap) {
1305 for (x = 0; x < sdp->sd_quota_chunks; x++)
1306 kfree(sdp->sd_quota_bitmap[x]);
1307 kfree(sdp->sd_quota_bitmap);
1311 static void quotad_error(struct gfs2_sbd *sdp, const char *msg, int error)
1313 if (error == 0 || error == -EROFS)
1315 if (!test_bit(SDF_SHUTDOWN, &sdp->sd_flags))
1316 fs_err(sdp, "gfs2_quotad: %s error %d\n", msg, error);
1319 static void quotad_check_timeo(struct gfs2_sbd *sdp, const char *msg,
1320 int (*fxn)(struct super_block *sb, int type),
1321 unsigned long t, unsigned long *timeo,
1322 unsigned int *new_timeo)
1325 int error = fxn(sdp->sd_vfs, 0);
1326 quotad_error(sdp, msg, error);
1327 *timeo = gfs2_tune_get_i(&sdp->sd_tune, new_timeo) * HZ;
1333 static void quotad_check_trunc_list(struct gfs2_sbd *sdp)
1335 struct gfs2_inode *ip;
1339 spin_lock(&sdp->sd_trunc_lock);
1340 if (!list_empty(&sdp->sd_trunc_list)) {
1341 ip = list_entry(sdp->sd_trunc_list.next,
1342 struct gfs2_inode, i_trunc_list);
1343 list_del_init(&ip->i_trunc_list);
1345 spin_unlock(&sdp->sd_trunc_lock);
1348 gfs2_glock_finish_truncate(ip);
1352 void gfs2_wake_up_statfs(struct gfs2_sbd *sdp) {
1353 if (!sdp->sd_statfs_force_sync) {
1354 sdp->sd_statfs_force_sync = 1;
1355 wake_up(&sdp->sd_quota_wait);
1361 * gfs2_quotad - Write cached quota changes into the quota file
1362 * @sdp: Pointer to GFS2 superblock
1366 int gfs2_quotad(void *data)
1368 struct gfs2_sbd *sdp = data;
1369 struct gfs2_tune *tune = &sdp->sd_tune;
1370 unsigned long statfs_timeo = 0;
1371 unsigned long quotad_timeo = 0;
1372 unsigned long t = 0;
1376 while (!kthread_should_stop()) {
1378 /* Update the master statfs file */
1379 if (sdp->sd_statfs_force_sync) {
1380 int error = gfs2_statfs_sync(sdp->sd_vfs, 0);
1381 quotad_error(sdp, "statfs", error);
1382 statfs_timeo = gfs2_tune_get(sdp, gt_statfs_quantum) * HZ;
1385 quotad_check_timeo(sdp, "statfs", gfs2_statfs_sync, t,
1387 &tune->gt_statfs_quantum);
1389 /* Update quota file */
1390 quotad_check_timeo(sdp, "sync", gfs2_quota_sync_timeo, t,
1391 "ad_timeo, &tune->gt_quota_quantum);
1393 /* Check for & recover partially truncated inodes */
1394 quotad_check_trunc_list(sdp);
1396 if (freezing(current))
1398 t = min(quotad_timeo, statfs_timeo);
1400 prepare_to_wait(&sdp->sd_quota_wait, &wait, TASK_INTERRUPTIBLE);
1401 spin_lock(&sdp->sd_trunc_lock);
1402 empty = list_empty(&sdp->sd_trunc_list);
1403 spin_unlock(&sdp->sd_trunc_lock);
1404 if (empty && !sdp->sd_statfs_force_sync)
1405 t -= schedule_timeout(t);
1408 finish_wait(&sdp->sd_quota_wait, &wait);
1414 static int gfs2_quota_get_xstate(struct super_block *sb,
1415 struct fs_quota_stat *fqs)
1417 struct gfs2_sbd *sdp = sb->s_fs_info;
1419 memset(fqs, 0, sizeof(struct fs_quota_stat));
1420 fqs->qs_version = FS_QSTAT_VERSION;
1422 switch (sdp->sd_args.ar_quota) {
1424 fqs->qs_flags |= (XFS_QUOTA_UDQ_ENFD | XFS_QUOTA_GDQ_ENFD);
1426 case GFS2_QUOTA_ACCOUNT:
1427 fqs->qs_flags |= (XFS_QUOTA_UDQ_ACCT | XFS_QUOTA_GDQ_ACCT);
1429 case GFS2_QUOTA_OFF:
1433 if (sdp->sd_quota_inode) {
1434 fqs->qs_uquota.qfs_ino = GFS2_I(sdp->sd_quota_inode)->i_no_addr;
1435 fqs->qs_uquota.qfs_nblks = sdp->sd_quota_inode->i_blocks;
1437 fqs->qs_uquota.qfs_nextents = 1; /* unsupported */
1438 fqs->qs_gquota = fqs->qs_uquota; /* its the same inode in both cases */
1439 fqs->qs_incoredqs = atomic_read(&qd_lru_count);
1443 static int gfs2_xquota_get(struct super_block *sb, int type, qid_t id,
1444 struct fs_disk_quota *fdq)
1446 struct gfs2_sbd *sdp = sb->s_fs_info;
1447 struct gfs2_quota_lvb *qlvb;
1448 struct gfs2_quota_data *qd;
1449 struct gfs2_holder q_gh;
1452 memset(fdq, 0, sizeof(struct fs_disk_quota));
1454 if (sdp->sd_args.ar_quota == GFS2_QUOTA_OFF)
1455 return -ESRCH; /* Crazy XFS error code */
1457 if (type == USRQUOTA)
1459 else if (type == GRPQUOTA)
1464 error = qd_get(sdp, type, id, &qd);
1467 error = do_glock(qd, FORCE, &q_gh);
1471 qlvb = (struct gfs2_quota_lvb *)qd->qd_gl->gl_lvb;
1472 fdq->d_version = FS_DQUOT_VERSION;
1473 fdq->d_flags = (type == QUOTA_USER) ? XFS_USER_QUOTA : XFS_GROUP_QUOTA;
1475 fdq->d_blk_hardlimit = be64_to_cpu(qlvb->qb_limit);
1476 fdq->d_blk_softlimit = be64_to_cpu(qlvb->qb_warn);
1477 fdq->d_bcount = be64_to_cpu(qlvb->qb_value);
1479 gfs2_glock_dq_uninit(&q_gh);
1485 /* GFS2 only supports a subset of the XFS fields */
1486 #define GFS2_FIELDMASK (FS_DQ_BSOFT|FS_DQ_BHARD)
1488 static int gfs2_xquota_set(struct super_block *sb, int type, qid_t id,
1489 struct fs_disk_quota *fdq)
1491 struct gfs2_sbd *sdp = sb->s_fs_info;
1492 struct gfs2_inode *ip = GFS2_I(sdp->sd_quota_inode);
1493 struct gfs2_quota_data *qd;
1494 struct gfs2_holder q_gh, i_gh;
1495 unsigned int data_blocks, ind_blocks;
1496 unsigned int blocks = 0;
1498 struct gfs2_alloc *al;
1502 if (sdp->sd_args.ar_quota == GFS2_QUOTA_OFF)
1503 return -ESRCH; /* Crazy XFS error code */
1508 if (fdq->d_flags != XFS_USER_QUOTA)
1513 if (fdq->d_flags != XFS_GROUP_QUOTA)
1520 if (fdq->d_fieldmask & ~GFS2_FIELDMASK)
1522 if (fdq->d_id != id)
1525 error = qd_get(sdp, type, id, &qd);
1529 mutex_lock(&ip->i_inode.i_mutex);
1530 error = gfs2_glock_nq_init(qd->qd_gl, LM_ST_EXCLUSIVE, 0, &q_gh);
1533 error = gfs2_glock_nq_init(ip->i_gl, LM_ST_EXCLUSIVE, 0, &i_gh);
1537 /* Check for existing entry, if none then alloc new blocks */
1538 error = update_qd(sdp, qd);
1542 /* If nothing has changed, this is a no-op */
1543 if ((fdq->d_fieldmask & FS_DQ_BSOFT) &&
1544 (fdq->d_blk_softlimit == be64_to_cpu(qd->qd_qb.qb_warn)))
1545 fdq->d_fieldmask ^= FS_DQ_BSOFT;
1546 if ((fdq->d_fieldmask & FS_DQ_BHARD) &&
1547 (fdq->d_blk_hardlimit == be64_to_cpu(qd->qd_qb.qb_limit)))
1548 fdq->d_fieldmask ^= FS_DQ_BHARD;
1549 if (fdq->d_fieldmask == 0)
1552 offset = qd2offset(qd);
1553 error = gfs2_write_alloc_required(ip, offset, sizeof(struct gfs2_quota),
1557 if (alloc_required) {
1558 al = gfs2_alloc_get(ip);
1561 gfs2_write_calc_reserv(ip, sizeof(struct gfs2_quota),
1562 &data_blocks, &ind_blocks);
1563 blocks = al->al_requested = 1 + data_blocks + ind_blocks;
1564 error = gfs2_inplace_reserve(ip);
1569 error = gfs2_trans_begin(sdp, blocks + RES_DINODE + 1, 0);
1574 error = gfs2_adjust_quota(ip, offset, 0, qd, fdq);
1576 gfs2_trans_end(sdp);
1578 if (alloc_required) {
1579 gfs2_inplace_release(ip);
1584 gfs2_glock_dq_uninit(&i_gh);
1586 gfs2_glock_dq_uninit(&q_gh);
1588 mutex_unlock(&ip->i_inode.i_mutex);
1593 const struct quotactl_ops gfs2_quotactl_ops = {
1594 .quota_sync = gfs2_quota_sync,
1595 .get_xstate = gfs2_quota_get_xstate,
1596 .get_xquota = gfs2_xquota_get,
1597 .set_xquota = gfs2_xquota_set,