2012-09-28 23:22:47 +08:00
|
|
|
/*
|
|
|
|
* QEMU System Emulator block driver
|
|
|
|
*
|
|
|
|
* Copyright (c) 2011 IBM Corp.
|
|
|
|
* Copyright (c) 2012 Red Hat, Inc.
|
|
|
|
*
|
|
|
|
* Permission is hereby granted, free of charge, to any person obtaining a copy
|
|
|
|
* of this software and associated documentation files (the "Software"), to deal
|
|
|
|
* in the Software without restriction, including without limitation the rights
|
|
|
|
* to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
|
|
|
|
* copies of the Software, and to permit persons to whom the Software is
|
|
|
|
* furnished to do so, subject to the following conditions:
|
|
|
|
*
|
|
|
|
* The above copyright notice and this permission notice shall be included in
|
|
|
|
* all copies or substantial portions of the Software.
|
|
|
|
*
|
|
|
|
* THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
|
|
|
|
* IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
|
|
|
|
* FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL
|
|
|
|
* THE AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
|
|
|
|
* LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
|
|
|
|
* OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN
|
|
|
|
* THE SOFTWARE.
|
|
|
|
*/
|
|
|
|
|
2016-01-30 01:50:05 +08:00
|
|
|
#include "qemu/osdep.h"
|
2012-09-28 23:22:47 +08:00
|
|
|
#include "qemu-common.h"
|
2012-12-18 01:19:44 +08:00
|
|
|
#include "block/block.h"
|
2016-10-28 00:07:00 +08:00
|
|
|
#include "block/blockjob_int.h"
|
2012-12-18 01:19:44 +08:00
|
|
|
#include "block/block_int.h"
|
2018-03-10 16:27:30 +08:00
|
|
|
#include "block/trace.h"
|
2015-10-19 23:53:22 +08:00
|
|
|
#include "sysemu/block-backend.h"
|
2018-02-01 19:18:31 +08:00
|
|
|
#include "qapi/error.h"
|
2018-02-11 17:36:01 +08:00
|
|
|
#include "qapi/qapi-events-block-core.h"
|
2015-03-18 00:22:46 +08:00
|
|
|
#include "qapi/qmp/qerror.h"
|
2015-09-01 21:48:02 +08:00
|
|
|
#include "qemu/coroutine.h"
|
2016-07-05 22:28:56 +08:00
|
|
|
#include "qemu/id.h"
|
2012-12-18 01:20:00 +08:00
|
|
|
#include "qemu/timer.h"
|
2012-09-28 23:22:47 +08:00
|
|
|
|
2017-11-29 18:25:13 +08:00
|
|
|
/* Right now, this mutex is only needed to synchronize accesses to job->busy
|
|
|
|
* and job->sleep_timer, such as concurrent calls to block_job_do_yield and
|
|
|
|
* block_job_enter. */
|
|
|
|
static QemuMutex block_job_mutex;
|
|
|
|
|
2018-03-10 16:27:30 +08:00
|
|
|
/* BlockJob State Transition Table */
|
|
|
|
bool BlockJobSTT[BLOCK_JOB_STATUS__MAX][BLOCK_JOB_STATUS__MAX] = {
|
2018-03-10 16:27:42 +08:00
|
|
|
/* U, C, R, P, Y, S, W, D, X, E, N */
|
|
|
|
/* U: */ [BLOCK_JOB_STATUS_UNDEFINED] = {0, 1, 0, 0, 0, 0, 0, 0, 0, 0, 0},
|
|
|
|
/* C: */ [BLOCK_JOB_STATUS_CREATED] = {0, 0, 1, 0, 0, 0, 0, 0, 1, 0, 1},
|
|
|
|
/* R: */ [BLOCK_JOB_STATUS_RUNNING] = {0, 0, 0, 1, 1, 0, 1, 0, 1, 0, 0},
|
|
|
|
/* P: */ [BLOCK_JOB_STATUS_PAUSED] = {0, 0, 1, 0, 0, 0, 0, 0, 0, 0, 0},
|
|
|
|
/* Y: */ [BLOCK_JOB_STATUS_READY] = {0, 0, 0, 0, 0, 1, 1, 0, 1, 0, 0},
|
|
|
|
/* S: */ [BLOCK_JOB_STATUS_STANDBY] = {0, 0, 0, 0, 1, 0, 0, 0, 0, 0, 0},
|
|
|
|
/* W: */ [BLOCK_JOB_STATUS_WAITING] = {0, 0, 0, 0, 0, 0, 0, 1, 1, 0, 0},
|
|
|
|
/* D: */ [BLOCK_JOB_STATUS_PENDING] = {0, 0, 0, 0, 0, 0, 0, 0, 1, 1, 0},
|
|
|
|
/* X: */ [BLOCK_JOB_STATUS_ABORTING] = {0, 0, 0, 0, 0, 0, 0, 0, 1, 1, 0},
|
|
|
|
/* E: */ [BLOCK_JOB_STATUS_CONCLUDED] = {0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 1},
|
|
|
|
/* N: */ [BLOCK_JOB_STATUS_NULL] = {0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0},
|
2018-03-10 16:27:30 +08:00
|
|
|
};
|
|
|
|
|
blockjobs: add block_job_verb permission table
Which commands ("verbs") are appropriate for jobs in which state is
also somewhat burdensome to keep track of.
As of this commit, it looks rather useless, but begins to look more
interesting the more states we add to the STM table.
A recurring theme is that no verb will apply to an 'undefined' job.
Further, it's not presently possible to restrict the "pause" or "resume"
verbs any more than they are in this commit because of the asynchronous
nature of how jobs enter the PAUSED state; justifications for some
seemingly erroneous applications are given below.
=====
Verbs
=====
Cancel: Any state except undefined.
Pause: Any state except undefined;
'created': Requests that the job pauses as it starts.
'running': Normal usage. (PAUSED)
'paused': The job may be paused for internal reasons,
but the user may wish to force an indefinite
user-pause, so this is allowed.
'ready': Normal usage. (STANDBY)
'standby': Same logic as above.
Resume: Any state except undefined;
'created': Will lift a user's pause-on-start request.
'running': Will lift a pause request before it takes effect.
'paused': Normal usage.
'ready': Will lift a pause request before it takes effect.
'standby': Normal usage.
Set-speed: Any state except undefined, though ready may not be meaningful.
Complete: Only a 'ready' job may accept a complete request.
=======
Changes
=======
(1)
To facilitate "nice" error checking, all five major block-job verb
interfaces in blockjob.c now support an errp parameter:
- block_job_user_cancel is added as a new interface.
- block_job_user_pause gains an errp paramter
- block_job_user_resume gains an errp parameter
- block_job_set_speed already had an errp parameter.
- block_job_complete already had an errp parameter.
(2)
block-job-pause and block-job-resume will no longer no-op when trying
to pause an already paused job, or trying to resume a job that isn't
paused. These functions will now report that they did not perform the
action requested because it was not possible.
iotests have been adjusted to address this new behavior.
(3)
block-job-complete doesn't worry about checking !block_job_started,
because the permission table guards against this.
(4)
test-bdrv-drain's job implementation needs to announce that it is
'ready' now, in order to be completed.
Signed-off-by: John Snow <jsnow@redhat.com>
Reviewed-by: Kevin Wolf <kwolf@redhat.com>
Reviewed-by: Eric Blake <eblake@redhat.com>
Signed-off-by: Kevin Wolf <kwolf@redhat.com>
2018-03-10 16:27:32 +08:00
|
|
|
bool BlockJobVerbTable[BLOCK_JOB_VERB__MAX][BLOCK_JOB_STATUS__MAX] = {
|
2018-03-10 16:27:42 +08:00
|
|
|
/* U, C, R, P, Y, S, W, D, X, E, N */
|
|
|
|
[BLOCK_JOB_VERB_CANCEL] = {0, 1, 1, 1, 1, 1, 1, 1, 0, 0, 0},
|
|
|
|
[BLOCK_JOB_VERB_PAUSE] = {0, 1, 1, 1, 1, 1, 0, 0, 0, 0, 0},
|
|
|
|
[BLOCK_JOB_VERB_RESUME] = {0, 1, 1, 1, 1, 1, 0, 0, 0, 0, 0},
|
|
|
|
[BLOCK_JOB_VERB_SET_SPEED] = {0, 1, 1, 1, 1, 1, 0, 0, 0, 0, 0},
|
|
|
|
[BLOCK_JOB_VERB_COMPLETE] = {0, 0, 0, 0, 1, 0, 0, 0, 0, 0, 0},
|
2018-03-10 16:27:43 +08:00
|
|
|
[BLOCK_JOB_VERB_FINALIZE] = {0, 0, 0, 0, 0, 0, 0, 1, 0, 0, 0},
|
2018-03-10 16:27:42 +08:00
|
|
|
[BLOCK_JOB_VERB_DISMISS] = {0, 0, 0, 0, 0, 0, 0, 0, 0, 1, 0},
|
blockjobs: add block_job_verb permission table
Which commands ("verbs") are appropriate for jobs in which state is
also somewhat burdensome to keep track of.
As of this commit, it looks rather useless, but begins to look more
interesting the more states we add to the STM table.
A recurring theme is that no verb will apply to an 'undefined' job.
Further, it's not presently possible to restrict the "pause" or "resume"
verbs any more than they are in this commit because of the asynchronous
nature of how jobs enter the PAUSED state; justifications for some
seemingly erroneous applications are given below.
=====
Verbs
=====
Cancel: Any state except undefined.
Pause: Any state except undefined;
'created': Requests that the job pauses as it starts.
'running': Normal usage. (PAUSED)
'paused': The job may be paused for internal reasons,
but the user may wish to force an indefinite
user-pause, so this is allowed.
'ready': Normal usage. (STANDBY)
'standby': Same logic as above.
Resume: Any state except undefined;
'created': Will lift a user's pause-on-start request.
'running': Will lift a pause request before it takes effect.
'paused': Normal usage.
'ready': Will lift a pause request before it takes effect.
'standby': Normal usage.
Set-speed: Any state except undefined, though ready may not be meaningful.
Complete: Only a 'ready' job may accept a complete request.
=======
Changes
=======
(1)
To facilitate "nice" error checking, all five major block-job verb
interfaces in blockjob.c now support an errp parameter:
- block_job_user_cancel is added as a new interface.
- block_job_user_pause gains an errp paramter
- block_job_user_resume gains an errp parameter
- block_job_set_speed already had an errp parameter.
- block_job_complete already had an errp parameter.
(2)
block-job-pause and block-job-resume will no longer no-op when trying
to pause an already paused job, or trying to resume a job that isn't
paused. These functions will now report that they did not perform the
action requested because it was not possible.
iotests have been adjusted to address this new behavior.
(3)
block-job-complete doesn't worry about checking !block_job_started,
because the permission table guards against this.
(4)
test-bdrv-drain's job implementation needs to announce that it is
'ready' now, in order to be completed.
Signed-off-by: John Snow <jsnow@redhat.com>
Reviewed-by: Kevin Wolf <kwolf@redhat.com>
Reviewed-by: Eric Blake <eblake@redhat.com>
Signed-off-by: Kevin Wolf <kwolf@redhat.com>
2018-03-10 16:27:32 +08:00
|
|
|
};
|
|
|
|
|
2018-03-10 16:27:30 +08:00
|
|
|
static void block_job_state_transition(BlockJob *job, BlockJobStatus s1)
|
|
|
|
{
|
|
|
|
BlockJobStatus s0 = job->status;
|
|
|
|
assert(s1 >= 0 && s1 <= BLOCK_JOB_STATUS__MAX);
|
|
|
|
trace_block_job_state_transition(job, job->ret, BlockJobSTT[s0][s1] ?
|
|
|
|
"allowed" : "disallowed",
|
|
|
|
qapi_enum_lookup(&BlockJobStatus_lookup,
|
|
|
|
s0),
|
|
|
|
qapi_enum_lookup(&BlockJobStatus_lookup,
|
|
|
|
s1));
|
|
|
|
assert(BlockJobSTT[s0][s1]);
|
|
|
|
job->status = s1;
|
|
|
|
}
|
|
|
|
|
blockjobs: add block_job_verb permission table
Which commands ("verbs") are appropriate for jobs in which state is
also somewhat burdensome to keep track of.
As of this commit, it looks rather useless, but begins to look more
interesting the more states we add to the STM table.
A recurring theme is that no verb will apply to an 'undefined' job.
Further, it's not presently possible to restrict the "pause" or "resume"
verbs any more than they are in this commit because of the asynchronous
nature of how jobs enter the PAUSED state; justifications for some
seemingly erroneous applications are given below.
=====
Verbs
=====
Cancel: Any state except undefined.
Pause: Any state except undefined;
'created': Requests that the job pauses as it starts.
'running': Normal usage. (PAUSED)
'paused': The job may be paused for internal reasons,
but the user may wish to force an indefinite
user-pause, so this is allowed.
'ready': Normal usage. (STANDBY)
'standby': Same logic as above.
Resume: Any state except undefined;
'created': Will lift a user's pause-on-start request.
'running': Will lift a pause request before it takes effect.
'paused': Normal usage.
'ready': Will lift a pause request before it takes effect.
'standby': Normal usage.
Set-speed: Any state except undefined, though ready may not be meaningful.
Complete: Only a 'ready' job may accept a complete request.
=======
Changes
=======
(1)
To facilitate "nice" error checking, all five major block-job verb
interfaces in blockjob.c now support an errp parameter:
- block_job_user_cancel is added as a new interface.
- block_job_user_pause gains an errp paramter
- block_job_user_resume gains an errp parameter
- block_job_set_speed already had an errp parameter.
- block_job_complete already had an errp parameter.
(2)
block-job-pause and block-job-resume will no longer no-op when trying
to pause an already paused job, or trying to resume a job that isn't
paused. These functions will now report that they did not perform the
action requested because it was not possible.
iotests have been adjusted to address this new behavior.
(3)
block-job-complete doesn't worry about checking !block_job_started,
because the permission table guards against this.
(4)
test-bdrv-drain's job implementation needs to announce that it is
'ready' now, in order to be completed.
Signed-off-by: John Snow <jsnow@redhat.com>
Reviewed-by: Kevin Wolf <kwolf@redhat.com>
Reviewed-by: Eric Blake <eblake@redhat.com>
Signed-off-by: Kevin Wolf <kwolf@redhat.com>
2018-03-10 16:27:32 +08:00
|
|
|
static int block_job_apply_verb(BlockJob *job, BlockJobVerb bv, Error **errp)
|
|
|
|
{
|
|
|
|
assert(bv >= 0 && bv <= BLOCK_JOB_VERB__MAX);
|
|
|
|
trace_block_job_apply_verb(job, qapi_enum_lookup(&BlockJobStatus_lookup,
|
|
|
|
job->status),
|
|
|
|
qapi_enum_lookup(&BlockJobVerb_lookup, bv),
|
|
|
|
BlockJobVerbTable[bv][job->status] ?
|
|
|
|
"allowed" : "prohibited");
|
|
|
|
if (BlockJobVerbTable[bv][job->status]) {
|
|
|
|
return 0;
|
|
|
|
}
|
|
|
|
error_setg(errp, "Job '%s' in state '%s' cannot accept command verb '%s'",
|
|
|
|
job->id, qapi_enum_lookup(&BlockJobStatus_lookup, job->status),
|
|
|
|
qapi_enum_lookup(&BlockJobVerb_lookup, bv));
|
|
|
|
return -EPERM;
|
|
|
|
}
|
|
|
|
|
2017-11-29 18:25:13 +08:00
|
|
|
static void block_job_lock(void)
|
|
|
|
{
|
|
|
|
qemu_mutex_lock(&block_job_mutex);
|
|
|
|
}
|
|
|
|
|
|
|
|
static void block_job_unlock(void)
|
|
|
|
{
|
|
|
|
qemu_mutex_unlock(&block_job_mutex);
|
|
|
|
}
|
|
|
|
|
|
|
|
static void __attribute__((__constructor__)) block_job_init(void)
|
|
|
|
{
|
|
|
|
qemu_mutex_init(&block_job_mutex);
|
|
|
|
}
|
|
|
|
|
2016-10-28 00:06:58 +08:00
|
|
|
static void block_job_event_cancelled(BlockJob *job);
|
|
|
|
static void block_job_event_completed(BlockJob *job, const char *msg);
|
2018-03-10 16:27:42 +08:00
|
|
|
static int block_job_event_pending(BlockJob *job);
|
2017-12-14 04:46:11 +08:00
|
|
|
static void block_job_enter_cond(BlockJob *job, bool(*fn)(BlockJob *job));
|
2016-10-28 00:06:58 +08:00
|
|
|
|
2015-11-06 07:13:15 +08:00
|
|
|
/* Transactional group of block jobs */
|
|
|
|
struct BlockJobTxn {
|
|
|
|
|
|
|
|
/* Is this txn being cancelled? */
|
|
|
|
bool aborting;
|
|
|
|
|
|
|
|
/* List of jobs */
|
|
|
|
QLIST_HEAD(, BlockJob) jobs;
|
|
|
|
|
|
|
|
/* Reference count */
|
|
|
|
int refcnt;
|
|
|
|
};
|
|
|
|
|
2016-04-04 21:43:51 +08:00
|
|
|
static QLIST_HEAD(, BlockJob) block_jobs = QLIST_HEAD_INITIALIZER(block_jobs);
|
|
|
|
|
2017-05-08 22:13:04 +08:00
|
|
|
/*
|
|
|
|
* The block job API is composed of two categories of functions.
|
|
|
|
*
|
|
|
|
* The first includes functions used by the monitor. The monitor is
|
|
|
|
* peculiar in that it accesses the block job list with block_job_get, and
|
|
|
|
* therefore needs consistency across block_job_get and the actual operation
|
|
|
|
* (e.g. block_job_set_speed). The consistency is achieved with
|
|
|
|
* aio_context_acquire/release. These functions are declared in blockjob.h.
|
|
|
|
*
|
|
|
|
* The second includes functions used by the block job drivers and sometimes
|
|
|
|
* by the core block layer. These do not care about locking, because the
|
|
|
|
* whole coroutine runs under the AioContext lock, and are declared in
|
|
|
|
* blockjob_int.h.
|
|
|
|
*/
|
|
|
|
|
2016-04-04 21:43:51 +08:00
|
|
|
BlockJob *block_job_next(BlockJob *job)
|
|
|
|
{
|
|
|
|
if (!job) {
|
|
|
|
return QLIST_FIRST(&block_jobs);
|
|
|
|
}
|
|
|
|
return QLIST_NEXT(job, job_list);
|
|
|
|
}
|
|
|
|
|
2016-07-05 22:28:54 +08:00
|
|
|
BlockJob *block_job_get(const char *id)
|
|
|
|
{
|
|
|
|
BlockJob *job;
|
|
|
|
|
|
|
|
QLIST_FOREACH(job, &block_jobs, job_list) {
|
2016-10-28 00:06:55 +08:00
|
|
|
if (job->id && !strcmp(id, job->id)) {
|
2016-07-05 22:28:54 +08:00
|
|
|
return job;
|
|
|
|
}
|
|
|
|
}
|
|
|
|
|
|
|
|
return NULL;
|
|
|
|
}
|
|
|
|
|
2017-05-08 22:13:07 +08:00
|
|
|
BlockJobTxn *block_job_txn_new(void)
|
|
|
|
{
|
|
|
|
BlockJobTxn *txn = g_new0(BlockJobTxn, 1);
|
|
|
|
QLIST_INIT(&txn->jobs);
|
|
|
|
txn->refcnt = 1;
|
|
|
|
return txn;
|
|
|
|
}
|
|
|
|
|
|
|
|
static void block_job_txn_ref(BlockJobTxn *txn)
|
|
|
|
{
|
|
|
|
txn->refcnt++;
|
|
|
|
}
|
|
|
|
|
|
|
|
void block_job_txn_unref(BlockJobTxn *txn)
|
|
|
|
{
|
|
|
|
if (txn && --txn->refcnt == 0) {
|
|
|
|
g_free(txn);
|
|
|
|
}
|
|
|
|
}
|
|
|
|
|
|
|
|
void block_job_txn_add_job(BlockJobTxn *txn, BlockJob *job)
|
|
|
|
{
|
|
|
|
if (!txn) {
|
|
|
|
return;
|
|
|
|
}
|
|
|
|
|
|
|
|
assert(!job->txn);
|
|
|
|
job->txn = txn;
|
|
|
|
|
|
|
|
QLIST_INSERT_HEAD(&txn->jobs, job, txn_list);
|
|
|
|
block_job_txn_ref(txn);
|
|
|
|
}
|
|
|
|
|
2017-05-08 22:13:03 +08:00
|
|
|
static void block_job_pause(BlockJob *job)
|
|
|
|
{
|
|
|
|
job->pause_count++;
|
|
|
|
}
|
|
|
|
|
|
|
|
static void block_job_resume(BlockJob *job)
|
|
|
|
{
|
|
|
|
assert(job->pause_count > 0);
|
|
|
|
job->pause_count--;
|
|
|
|
if (job->pause_count) {
|
|
|
|
return;
|
|
|
|
}
|
|
|
|
block_job_enter(job);
|
|
|
|
}
|
|
|
|
|
2017-06-15 14:47:33 +08:00
|
|
|
void block_job_ref(BlockJob *job)
|
2017-05-08 22:13:02 +08:00
|
|
|
{
|
|
|
|
++job->refcnt;
|
|
|
|
}
|
|
|
|
|
|
|
|
static void block_job_attached_aio_context(AioContext *new_context,
|
|
|
|
void *opaque);
|
|
|
|
static void block_job_detach_aio_context(void *opaque);
|
|
|
|
|
2017-06-15 14:47:33 +08:00
|
|
|
void block_job_unref(BlockJob *job)
|
2017-05-08 22:13:02 +08:00
|
|
|
{
|
|
|
|
if (--job->refcnt == 0) {
|
2018-03-10 16:27:35 +08:00
|
|
|
assert(job->status == BLOCK_JOB_STATUS_NULL);
|
2017-05-08 22:13:02 +08:00
|
|
|
BlockDriverState *bs = blk_bs(job->blk);
|
2017-11-28 22:53:27 +08:00
|
|
|
QLIST_REMOVE(job, job_list);
|
2017-05-08 22:13:02 +08:00
|
|
|
bs->job = NULL;
|
|
|
|
block_job_remove_all_bdrv(job);
|
|
|
|
blk_remove_aio_context_notifier(job->blk,
|
|
|
|
block_job_attached_aio_context,
|
|
|
|
block_job_detach_aio_context, job);
|
|
|
|
blk_unref(job->blk);
|
|
|
|
error_free(job->blocker);
|
|
|
|
g_free(job->id);
|
2017-11-29 18:25:13 +08:00
|
|
|
assert(!timer_pending(&job->sleep_timer));
|
2017-05-08 22:13:02 +08:00
|
|
|
g_free(job);
|
|
|
|
}
|
|
|
|
}
|
|
|
|
|
2016-06-17 00:56:27 +08:00
|
|
|
static void block_job_attached_aio_context(AioContext *new_context,
|
|
|
|
void *opaque)
|
|
|
|
{
|
|
|
|
BlockJob *job = opaque;
|
|
|
|
|
|
|
|
if (job->driver->attached_aio_context) {
|
|
|
|
job->driver->attached_aio_context(job, new_context);
|
|
|
|
}
|
|
|
|
|
|
|
|
block_job_resume(job);
|
|
|
|
}
|
|
|
|
|
2016-10-27 18:48:50 +08:00
|
|
|
static void block_job_drain(BlockJob *job)
|
|
|
|
{
|
|
|
|
/* If job is !job->busy this kicks it into the next pause point. */
|
|
|
|
block_job_enter(job);
|
|
|
|
|
|
|
|
blk_drain(job->blk);
|
|
|
|
if (job->driver->drain) {
|
|
|
|
job->driver->drain(job);
|
|
|
|
}
|
|
|
|
}
|
|
|
|
|
2016-06-17 00:56:27 +08:00
|
|
|
static void block_job_detach_aio_context(void *opaque)
|
|
|
|
{
|
|
|
|
BlockJob *job = opaque;
|
|
|
|
|
|
|
|
/* In case the job terminates during aio_poll()... */
|
|
|
|
block_job_ref(job);
|
|
|
|
|
|
|
|
block_job_pause(job);
|
|
|
|
|
|
|
|
while (!job->paused && !job->completed) {
|
2016-10-27 18:48:50 +08:00
|
|
|
block_job_drain(job);
|
2016-06-17 00:56:27 +08:00
|
|
|
}
|
|
|
|
|
|
|
|
block_job_unref(job);
|
|
|
|
}
|
|
|
|
|
2017-05-08 22:13:03 +08:00
|
|
|
static char *child_job_get_parent_desc(BdrvChild *c)
|
|
|
|
{
|
|
|
|
BlockJob *job = c->opaque;
|
|
|
|
return g_strdup_printf("%s job '%s'",
|
2017-08-24 16:46:08 +08:00
|
|
|
BlockJobType_str(job->driver->job_type),
|
2017-05-08 22:13:03 +08:00
|
|
|
job->id);
|
|
|
|
}
|
|
|
|
|
2017-12-13 02:04:28 +08:00
|
|
|
static void child_job_drained_begin(BdrvChild *c)
|
2017-05-08 22:13:03 +08:00
|
|
|
{
|
2017-12-13 02:04:28 +08:00
|
|
|
BlockJob *job = c->opaque;
|
2017-05-08 22:13:03 +08:00
|
|
|
block_job_pause(job);
|
|
|
|
}
|
|
|
|
|
2017-12-13 02:04:28 +08:00
|
|
|
static void child_job_drained_end(BdrvChild *c)
|
2017-05-08 22:13:03 +08:00
|
|
|
{
|
2017-12-13 02:04:28 +08:00
|
|
|
BlockJob *job = c->opaque;
|
2017-05-08 22:13:03 +08:00
|
|
|
block_job_resume(job);
|
|
|
|
}
|
|
|
|
|
2017-12-13 02:04:28 +08:00
|
|
|
static const BdrvChildRole child_job = {
|
|
|
|
.get_parent_desc = child_job_get_parent_desc,
|
|
|
|
.drained_begin = child_job_drained_begin,
|
|
|
|
.drained_end = child_job_drained_end,
|
|
|
|
.stay_at_node = true,
|
2017-05-08 22:13:03 +08:00
|
|
|
};
|
|
|
|
|
2017-02-28 19:45:58 +08:00
|
|
|
void block_job_remove_all_bdrv(BlockJob *job)
|
|
|
|
{
|
|
|
|
GSList *l;
|
|
|
|
for (l = job->nodes; l; l = l->next) {
|
|
|
|
BdrvChild *c = l->data;
|
|
|
|
bdrv_op_unblock_all(c->bs, job->blocker);
|
|
|
|
bdrv_root_unref_child(c);
|
|
|
|
}
|
|
|
|
g_slist_free(job->nodes);
|
|
|
|
job->nodes = NULL;
|
|
|
|
}
|
|
|
|
|
2017-01-17 18:56:42 +08:00
|
|
|
int block_job_add_bdrv(BlockJob *job, const char *name, BlockDriverState *bs,
|
|
|
|
uint64_t perm, uint64_t shared_perm, Error **errp)
|
2016-10-28 15:08:04 +08:00
|
|
|
{
|
2017-01-17 18:56:42 +08:00
|
|
|
BdrvChild *c;
|
|
|
|
|
|
|
|
c = bdrv_root_attach_child(bs, name, &child_job, perm, shared_perm,
|
|
|
|
job, errp);
|
|
|
|
if (c == NULL) {
|
|
|
|
return -EPERM;
|
|
|
|
}
|
|
|
|
|
|
|
|
job->nodes = g_slist_prepend(job->nodes, c);
|
2016-10-28 15:08:04 +08:00
|
|
|
bdrv_ref(bs);
|
|
|
|
bdrv_op_block_all(bs, job->blocker);
|
2017-01-17 18:56:42 +08:00
|
|
|
|
|
|
|
return 0;
|
2016-10-28 15:08:04 +08:00
|
|
|
}
|
|
|
|
|
2016-10-28 00:06:55 +08:00
|
|
|
bool block_job_is_internal(BlockJob *job)
|
|
|
|
{
|
|
|
|
return (job->id == NULL);
|
|
|
|
}
|
|
|
|
|
2016-11-08 14:50:37 +08:00
|
|
|
static bool block_job_started(BlockJob *job)
|
|
|
|
{
|
|
|
|
return job->co;
|
|
|
|
}
|
|
|
|
|
2017-03-17 05:23:49 +08:00
|
|
|
/**
|
|
|
|
* All jobs must allow a pause point before entering their job proper. This
|
|
|
|
* ensures that jobs can be paused prior to being started, then resumed later.
|
|
|
|
*/
|
|
|
|
static void coroutine_fn block_job_co_entry(void *opaque)
|
|
|
|
{
|
|
|
|
BlockJob *job = opaque;
|
|
|
|
|
|
|
|
assert(job && job->driver && job->driver->start);
|
|
|
|
block_job_pause_point(job);
|
|
|
|
job->driver->start(job);
|
|
|
|
}
|
|
|
|
|
2017-11-29 18:25:13 +08:00
|
|
|
static void block_job_sleep_timer_cb(void *opaque)
|
|
|
|
{
|
|
|
|
BlockJob *job = opaque;
|
|
|
|
|
|
|
|
block_job_enter(job);
|
|
|
|
}
|
|
|
|
|
2016-11-08 14:50:37 +08:00
|
|
|
void block_job_start(BlockJob *job)
|
|
|
|
{
|
|
|
|
assert(job && !block_job_started(job) && job->paused &&
|
2017-03-17 05:23:49 +08:00
|
|
|
job->driver && job->driver->start);
|
|
|
|
job->co = qemu_coroutine_create(block_job_co_entry, job);
|
|
|
|
job->pause_count--;
|
|
|
|
job->busy = true;
|
|
|
|
job->paused = false;
|
2018-03-10 16:27:30 +08:00
|
|
|
block_job_state_transition(job, BLOCK_JOB_STATUS_RUNNING);
|
2017-04-10 20:12:05 +08:00
|
|
|
bdrv_coroutine_enter(blk_bs(job->blk), job->co);
|
2016-11-08 14:50:37 +08:00
|
|
|
}
|
|
|
|
|
2018-03-10 16:27:35 +08:00
|
|
|
static void block_job_decommission(BlockJob *job)
|
|
|
|
{
|
|
|
|
assert(job);
|
|
|
|
job->completed = true;
|
|
|
|
job->busy = false;
|
|
|
|
job->paused = false;
|
|
|
|
job->deferred_to_main_loop = true;
|
|
|
|
block_job_state_transition(job, BLOCK_JOB_STATUS_NULL);
|
|
|
|
block_job_unref(job);
|
|
|
|
}
|
|
|
|
|
2018-03-10 16:27:36 +08:00
|
|
|
static void block_job_do_dismiss(BlockJob *job)
|
|
|
|
{
|
|
|
|
block_job_decommission(job);
|
|
|
|
}
|
|
|
|
|
2018-03-10 16:27:34 +08:00
|
|
|
static void block_job_conclude(BlockJob *job)
|
|
|
|
{
|
|
|
|
block_job_state_transition(job, BLOCK_JOB_STATUS_CONCLUDED);
|
2018-03-10 16:27:36 +08:00
|
|
|
if (job->auto_dismiss || !block_job_started(job)) {
|
|
|
|
block_job_do_dismiss(job);
|
|
|
|
}
|
2018-03-10 16:27:34 +08:00
|
|
|
}
|
|
|
|
|
2018-03-10 16:27:37 +08:00
|
|
|
static void block_job_update_rc(BlockJob *job)
|
|
|
|
{
|
|
|
|
if (!job->ret && block_job_is_cancelled(job)) {
|
|
|
|
job->ret = -ECANCELED;
|
|
|
|
}
|
|
|
|
if (job->ret) {
|
|
|
|
block_job_state_transition(job, BLOCK_JOB_STATUS_ABORTING);
|
|
|
|
}
|
|
|
|
}
|
|
|
|
|
2018-03-10 16:27:40 +08:00
|
|
|
static int block_job_prepare(BlockJob *job)
|
|
|
|
{
|
|
|
|
if (job->ret == 0 && job->driver->prepare) {
|
|
|
|
job->ret = job->driver->prepare(job);
|
|
|
|
}
|
|
|
|
return job->ret;
|
|
|
|
}
|
|
|
|
|
2018-03-10 16:27:38 +08:00
|
|
|
static void block_job_commit(BlockJob *job)
|
|
|
|
{
|
|
|
|
assert(!job->ret);
|
|
|
|
if (job->driver->commit) {
|
|
|
|
job->driver->commit(job);
|
|
|
|
}
|
|
|
|
}
|
|
|
|
|
|
|
|
static void block_job_abort(BlockJob *job)
|
|
|
|
{
|
|
|
|
assert(job->ret);
|
|
|
|
if (job->driver->abort) {
|
|
|
|
job->driver->abort(job);
|
|
|
|
}
|
|
|
|
}
|
|
|
|
|
|
|
|
static void block_job_clean(BlockJob *job)
|
|
|
|
{
|
|
|
|
if (job->driver->clean) {
|
|
|
|
job->driver->clean(job);
|
|
|
|
}
|
|
|
|
}
|
|
|
|
|
2018-03-10 16:27:43 +08:00
|
|
|
static int block_job_finalize_single(BlockJob *job)
|
2015-11-06 07:13:15 +08:00
|
|
|
{
|
2017-05-08 22:13:09 +08:00
|
|
|
assert(job->completed);
|
|
|
|
|
2018-03-10 16:27:37 +08:00
|
|
|
/* Ensure abort is called for late-transactional failures */
|
|
|
|
block_job_update_rc(job);
|
2018-03-10 16:27:33 +08:00
|
|
|
|
2015-11-06 07:13:15 +08:00
|
|
|
if (!job->ret) {
|
2018-03-10 16:27:38 +08:00
|
|
|
block_job_commit(job);
|
2015-11-06 07:13:15 +08:00
|
|
|
} else {
|
2018-03-10 16:27:38 +08:00
|
|
|
block_job_abort(job);
|
blockjob: add .clean property
Cleaning up after we have deferred to the main thread but before the
transaction has converged can be dangerous and result in deadlocks
if the job cleanup invokes any BH polling loops.
A job may attempt to begin cleaning up, but may induce another job to
enter its cleanup routine. The second job, part of our same transaction,
will block waiting for the first job to finish, so neither job may now
make progress.
To rectify this, allow jobs to register a cleanup operation that will
always run regardless of if the job was in a transaction or not, and
if the transaction job group completed successfully or not.
Move sensitive cleanup to this callback instead which is guaranteed to
be run only after the transaction has converged, which removes sensitive
timing constraints from said cleanup.
Furthermore, in future patches these cleanup operations will be performed
regardless of whether or not we actually started the job. Therefore,
cleanup callbacks should essentially confine themselves to undoing create
operations, e.g. setup actions taken in what is now backup_start.
Reported-by: Vladimir Sementsov-Ogievskiy <vsementsov@virtuozzo.com>
Signed-off-by: John Snow <jsnow@redhat.com>
Reviewed-by: Kevin Wolf <kwolf@redhat.com>
Message-id: 1478587839-9834-3-git-send-email-jsnow@redhat.com
Signed-off-by: Jeff Cody <jcody@redhat.com>
2016-11-08 14:50:35 +08:00
|
|
|
}
|
2018-03-10 16:27:38 +08:00
|
|
|
block_job_clean(job);
|
2016-10-28 00:06:58 +08:00
|
|
|
|
|
|
|
if (job->cb) {
|
|
|
|
job->cb(job->opaque, job->ret);
|
|
|
|
}
|
2016-11-08 14:50:37 +08:00
|
|
|
|
|
|
|
/* Emit events only if we actually started */
|
|
|
|
if (block_job_started(job)) {
|
|
|
|
if (block_job_is_cancelled(job)) {
|
|
|
|
block_job_event_cancelled(job);
|
|
|
|
} else {
|
|
|
|
const char *msg = NULL;
|
|
|
|
if (job->ret < 0) {
|
|
|
|
msg = strerror(-job->ret);
|
|
|
|
}
|
|
|
|
block_job_event_completed(job, msg);
|
2016-10-28 00:06:58 +08:00
|
|
|
}
|
|
|
|
}
|
|
|
|
|
2018-03-10 16:27:27 +08:00
|
|
|
QLIST_REMOVE(job, txn_list);
|
|
|
|
block_job_txn_unref(job->txn);
|
2018-03-10 16:27:34 +08:00
|
|
|
block_job_conclude(job);
|
2018-03-10 16:27:40 +08:00
|
|
|
return 0;
|
2015-11-06 07:13:15 +08:00
|
|
|
}
|
|
|
|
|
block/mirror: change the semantic of 'force' of block-job-cancel
When doing drive mirror to a low speed shared storage, if there was heavy
BLK IO write workload in VM after the 'ready' event, drive mirror block job
can't be canceled immediately, it would keep running until the heavy BLK IO
workload stopped in the VM.
Libvirt depends on the current block-job-cancel semantics, which is that
when used without a flag after the 'ready' event, the command blocks
until data is in sync. However, these semantics are awkward in other
situations, for example, people may use drive mirror for realtime
backups while still wanting to use block live migration. Libvirt cannot
start a block live migration while another drive mirror is in progress,
but the user would rather abandon the backup attempt as broken and
proceed with the live migration than be stuck waiting for the current
drive mirror backup to finish.
The drive-mirror command already includes a 'force' flag, which libvirt
does not use, although it documented the flag as only being useful to
quit a job which is paused. However, since quitting a paused job has
the same effect as abandoning a backup in a non-paused job (namely, the
destination file is not in sync, and the command completes immediately),
we can just improve the documentation to make the force flag obviously
useful.
Cc: Paolo Bonzini <pbonzini@redhat.com>
Cc: Jeff Cody <jcody@redhat.com>
Cc: Kevin Wolf <kwolf@redhat.com>
Cc: Max Reitz <mreitz@redhat.com>
Cc: Eric Blake <eblake@redhat.com>
Cc: John Snow <jsnow@redhat.com>
Reported-by: Huaitong Han <huanhuaitong@didichuxing.com>
Signed-off-by: Huaitong Han <huanhuaitong@didichuxing.com>
Signed-off-by: Liang Li <liliangleo@didichuxing.com>
Signed-off-by: Jeff Cody <jcody@redhat.com>
Signed-off-by: Kevin Wolf <kwolf@redhat.com>
2018-03-13 20:12:16 +08:00
|
|
|
static void block_job_cancel_async(BlockJob *job, bool force)
|
2017-05-08 22:13:06 +08:00
|
|
|
{
|
|
|
|
if (job->iostatus != BLOCK_DEVICE_IO_STATUS_OK) {
|
|
|
|
block_job_iostatus_reset(job);
|
|
|
|
}
|
|
|
|
if (job->user_paused) {
|
|
|
|
/* Do not call block_job_enter here, the caller will handle it. */
|
|
|
|
job->user_paused = false;
|
|
|
|
job->pause_count--;
|
|
|
|
}
|
|
|
|
job->cancelled = true;
|
block/mirror: change the semantic of 'force' of block-job-cancel
When doing drive mirror to a low speed shared storage, if there was heavy
BLK IO write workload in VM after the 'ready' event, drive mirror block job
can't be canceled immediately, it would keep running until the heavy BLK IO
workload stopped in the VM.
Libvirt depends on the current block-job-cancel semantics, which is that
when used without a flag after the 'ready' event, the command blocks
until data is in sync. However, these semantics are awkward in other
situations, for example, people may use drive mirror for realtime
backups while still wanting to use block live migration. Libvirt cannot
start a block live migration while another drive mirror is in progress,
but the user would rather abandon the backup attempt as broken and
proceed with the live migration than be stuck waiting for the current
drive mirror backup to finish.
The drive-mirror command already includes a 'force' flag, which libvirt
does not use, although it documented the flag as only being useful to
quit a job which is paused. However, since quitting a paused job has
the same effect as abandoning a backup in a non-paused job (namely, the
destination file is not in sync, and the command completes immediately),
we can just improve the documentation to make the force flag obviously
useful.
Cc: Paolo Bonzini <pbonzini@redhat.com>
Cc: Jeff Cody <jcody@redhat.com>
Cc: Kevin Wolf <kwolf@redhat.com>
Cc: Max Reitz <mreitz@redhat.com>
Cc: Eric Blake <eblake@redhat.com>
Cc: John Snow <jsnow@redhat.com>
Reported-by: Huaitong Han <huanhuaitong@didichuxing.com>
Signed-off-by: Huaitong Han <huanhuaitong@didichuxing.com>
Signed-off-by: Liang Li <liliangleo@didichuxing.com>
Signed-off-by: Jeff Cody <jcody@redhat.com>
Signed-off-by: Kevin Wolf <kwolf@redhat.com>
2018-03-13 20:12:16 +08:00
|
|
|
/* To prevent 'force == false' overriding a previous 'force == true' */
|
|
|
|
job->force |= force;
|
2017-05-08 22:13:06 +08:00
|
|
|
}
|
|
|
|
|
2018-03-10 16:27:42 +08:00
|
|
|
static int block_job_txn_apply(BlockJobTxn *txn, int fn(BlockJob *), bool lock)
|
2018-03-10 16:27:39 +08:00
|
|
|
{
|
|
|
|
AioContext *ctx;
|
|
|
|
BlockJob *job, *next;
|
2018-03-10 16:27:40 +08:00
|
|
|
int rc = 0;
|
2018-03-10 16:27:39 +08:00
|
|
|
|
|
|
|
QLIST_FOREACH_SAFE(job, &txn->jobs, txn_list, next) {
|
2018-03-10 16:27:42 +08:00
|
|
|
if (lock) {
|
|
|
|
ctx = blk_get_aio_context(job->blk);
|
|
|
|
aio_context_acquire(ctx);
|
|
|
|
}
|
2018-03-10 16:27:40 +08:00
|
|
|
rc = fn(job);
|
2018-03-10 16:27:42 +08:00
|
|
|
if (lock) {
|
|
|
|
aio_context_release(ctx);
|
|
|
|
}
|
2018-03-10 16:27:40 +08:00
|
|
|
if (rc) {
|
|
|
|
break;
|
|
|
|
}
|
2018-03-10 16:27:39 +08:00
|
|
|
}
|
2018-03-10 16:27:40 +08:00
|
|
|
return rc;
|
2018-03-10 16:27:39 +08:00
|
|
|
}
|
|
|
|
|
2017-05-08 22:13:07 +08:00
|
|
|
static int block_job_finish_sync(BlockJob *job,
|
|
|
|
void (*finish)(BlockJob *, Error **errp),
|
|
|
|
Error **errp)
|
|
|
|
{
|
|
|
|
Error *local_err = NULL;
|
|
|
|
int ret;
|
|
|
|
|
|
|
|
assert(blk_bs(job->blk)->job == job);
|
|
|
|
|
|
|
|
block_job_ref(job);
|
|
|
|
|
2017-05-08 22:13:09 +08:00
|
|
|
if (finish) {
|
|
|
|
finish(job, &local_err);
|
|
|
|
}
|
2017-05-08 22:13:07 +08:00
|
|
|
if (local_err) {
|
|
|
|
error_propagate(errp, local_err);
|
|
|
|
block_job_unref(job);
|
|
|
|
return -EBUSY;
|
|
|
|
}
|
|
|
|
/* block_job_drain calls block_job_enter, and it should be enough to
|
|
|
|
* induce progress until the job completes or moves to the main thread.
|
|
|
|
*/
|
|
|
|
while (!job->deferred_to_main_loop && !job->completed) {
|
|
|
|
block_job_drain(job);
|
|
|
|
}
|
|
|
|
while (!job->completed) {
|
|
|
|
aio_poll(qemu_get_aio_context(), true);
|
|
|
|
}
|
|
|
|
ret = (job->cancelled && job->ret == 0) ? -ECANCELED : job->ret;
|
|
|
|
block_job_unref(job);
|
|
|
|
return ret;
|
|
|
|
}
|
|
|
|
|
2015-11-06 07:13:15 +08:00
|
|
|
static void block_job_completed_txn_abort(BlockJob *job)
|
|
|
|
{
|
|
|
|
AioContext *ctx;
|
|
|
|
BlockJobTxn *txn = job->txn;
|
2017-05-08 22:13:09 +08:00
|
|
|
BlockJob *other_job;
|
2015-11-06 07:13:15 +08:00
|
|
|
|
|
|
|
if (txn->aborting) {
|
|
|
|
/*
|
|
|
|
* We are cancelled by another job, which will handle everything.
|
|
|
|
*/
|
|
|
|
return;
|
|
|
|
}
|
|
|
|
txn->aborting = true;
|
2017-05-08 22:13:09 +08:00
|
|
|
block_job_txn_ref(txn);
|
|
|
|
|
2015-11-06 07:13:15 +08:00
|
|
|
/* We are the first failed job. Cancel other jobs. */
|
|
|
|
QLIST_FOREACH(other_job, &txn->jobs, txn_list) {
|
2016-04-08 20:51:09 +08:00
|
|
|
ctx = blk_get_aio_context(other_job->blk);
|
2015-11-06 07:13:15 +08:00
|
|
|
aio_context_acquire(ctx);
|
|
|
|
}
|
2017-05-08 22:13:09 +08:00
|
|
|
|
|
|
|
/* Other jobs are effectively cancelled by us, set the status for
|
|
|
|
* them; this job, however, may or may not be cancelled, depending
|
|
|
|
* on the caller, so leave it. */
|
2015-11-06 07:13:15 +08:00
|
|
|
QLIST_FOREACH(other_job, &txn->jobs, txn_list) {
|
2017-05-08 22:13:09 +08:00
|
|
|
if (other_job != job) {
|
block/mirror: change the semantic of 'force' of block-job-cancel
When doing drive mirror to a low speed shared storage, if there was heavy
BLK IO write workload in VM after the 'ready' event, drive mirror block job
can't be canceled immediately, it would keep running until the heavy BLK IO
workload stopped in the VM.
Libvirt depends on the current block-job-cancel semantics, which is that
when used without a flag after the 'ready' event, the command blocks
until data is in sync. However, these semantics are awkward in other
situations, for example, people may use drive mirror for realtime
backups while still wanting to use block live migration. Libvirt cannot
start a block live migration while another drive mirror is in progress,
but the user would rather abandon the backup attempt as broken and
proceed with the live migration than be stuck waiting for the current
drive mirror backup to finish.
The drive-mirror command already includes a 'force' flag, which libvirt
does not use, although it documented the flag as only being useful to
quit a job which is paused. However, since quitting a paused job has
the same effect as abandoning a backup in a non-paused job (namely, the
destination file is not in sync, and the command completes immediately),
we can just improve the documentation to make the force flag obviously
useful.
Cc: Paolo Bonzini <pbonzini@redhat.com>
Cc: Jeff Cody <jcody@redhat.com>
Cc: Kevin Wolf <kwolf@redhat.com>
Cc: Max Reitz <mreitz@redhat.com>
Cc: Eric Blake <eblake@redhat.com>
Cc: John Snow <jsnow@redhat.com>
Reported-by: Huaitong Han <huanhuaitong@didichuxing.com>
Signed-off-by: Huaitong Han <huanhuaitong@didichuxing.com>
Signed-off-by: Liang Li <liliangleo@didichuxing.com>
Signed-off-by: Jeff Cody <jcody@redhat.com>
Signed-off-by: Kevin Wolf <kwolf@redhat.com>
2018-03-13 20:12:16 +08:00
|
|
|
block_job_cancel_async(other_job, false);
|
2015-11-06 07:13:15 +08:00
|
|
|
}
|
|
|
|
}
|
2017-05-08 22:13:09 +08:00
|
|
|
while (!QLIST_EMPTY(&txn->jobs)) {
|
|
|
|
other_job = QLIST_FIRST(&txn->jobs);
|
2016-04-08 20:51:09 +08:00
|
|
|
ctx = blk_get_aio_context(other_job->blk);
|
2017-05-08 22:13:09 +08:00
|
|
|
if (!other_job->completed) {
|
|
|
|
assert(other_job->cancelled);
|
|
|
|
block_job_finish_sync(other_job, NULL, NULL);
|
|
|
|
}
|
2018-03-10 16:27:43 +08:00
|
|
|
block_job_finalize_single(other_job);
|
2015-11-06 07:13:15 +08:00
|
|
|
aio_context_release(ctx);
|
|
|
|
}
|
2017-05-08 22:13:09 +08:00
|
|
|
|
|
|
|
block_job_txn_unref(txn);
|
2015-11-06 07:13:15 +08:00
|
|
|
}
|
|
|
|
|
2018-03-10 16:27:43 +08:00
|
|
|
static int block_job_needs_finalize(BlockJob *job)
|
|
|
|
{
|
|
|
|
return !job->auto_finalize;
|
|
|
|
}
|
|
|
|
|
|
|
|
static void block_job_do_finalize(BlockJob *job)
|
|
|
|
{
|
|
|
|
int rc;
|
|
|
|
assert(job && job->txn);
|
|
|
|
|
|
|
|
/* prepare the transaction to complete */
|
|
|
|
rc = block_job_txn_apply(job->txn, block_job_prepare, true);
|
|
|
|
if (rc) {
|
|
|
|
block_job_completed_txn_abort(job);
|
|
|
|
} else {
|
|
|
|
block_job_txn_apply(job->txn, block_job_finalize_single, true);
|
|
|
|
}
|
|
|
|
}
|
|
|
|
|
2015-11-06 07:13:15 +08:00
|
|
|
static void block_job_completed_txn_success(BlockJob *job)
|
|
|
|
{
|
|
|
|
BlockJobTxn *txn = job->txn;
|
2018-03-10 16:27:39 +08:00
|
|
|
BlockJob *other_job;
|
2018-03-10 16:27:40 +08:00
|
|
|
|
2018-03-10 16:27:41 +08:00
|
|
|
block_job_state_transition(job, BLOCK_JOB_STATUS_WAITING);
|
|
|
|
|
2015-11-06 07:13:15 +08:00
|
|
|
/*
|
|
|
|
* Successful completion, see if there are other running jobs in this
|
|
|
|
* txn.
|
|
|
|
*/
|
|
|
|
QLIST_FOREACH(other_job, &txn->jobs, txn_list) {
|
|
|
|
if (!other_job->completed) {
|
|
|
|
return;
|
|
|
|
}
|
|
|
|
assert(other_job->ret == 0);
|
|
|
|
}
|
2018-03-10 16:27:40 +08:00
|
|
|
|
2018-03-10 16:27:42 +08:00
|
|
|
block_job_txn_apply(txn, block_job_event_pending, false);
|
2018-03-10 16:27:43 +08:00
|
|
|
|
|
|
|
/* If no jobs need manual finalization, automatically do so */
|
|
|
|
if (block_job_txn_apply(txn, block_job_needs_finalize, false) == 0) {
|
|
|
|
block_job_do_finalize(job);
|
|
|
|
}
|
2015-11-06 07:13:15 +08:00
|
|
|
}
|
|
|
|
|
2017-12-14 04:46:11 +08:00
|
|
|
/* Assumes the block_job_mutex is held */
|
|
|
|
static bool block_job_timer_pending(BlockJob *job)
|
|
|
|
{
|
|
|
|
return timer_pending(&job->sleep_timer);
|
|
|
|
}
|
|
|
|
|
2012-09-28 23:22:47 +08:00
|
|
|
void block_job_set_speed(BlockJob *job, int64_t speed, Error **errp)
|
|
|
|
{
|
|
|
|
Error *local_err = NULL;
|
2017-12-14 04:46:11 +08:00
|
|
|
int64_t old_speed = job->speed;
|
2012-09-28 23:22:47 +08:00
|
|
|
|
2013-10-08 17:29:38 +08:00
|
|
|
if (!job->driver->set_speed) {
|
2015-03-17 18:54:50 +08:00
|
|
|
error_setg(errp, QERR_UNSUPPORTED);
|
2012-09-28 23:22:47 +08:00
|
|
|
return;
|
|
|
|
}
|
blockjobs: add block_job_verb permission table
Which commands ("verbs") are appropriate for jobs in which state is
also somewhat burdensome to keep track of.
As of this commit, it looks rather useless, but begins to look more
interesting the more states we add to the STM table.
A recurring theme is that no verb will apply to an 'undefined' job.
Further, it's not presently possible to restrict the "pause" or "resume"
verbs any more than they are in this commit because of the asynchronous
nature of how jobs enter the PAUSED state; justifications for some
seemingly erroneous applications are given below.
=====
Verbs
=====
Cancel: Any state except undefined.
Pause: Any state except undefined;
'created': Requests that the job pauses as it starts.
'running': Normal usage. (PAUSED)
'paused': The job may be paused for internal reasons,
but the user may wish to force an indefinite
user-pause, so this is allowed.
'ready': Normal usage. (STANDBY)
'standby': Same logic as above.
Resume: Any state except undefined;
'created': Will lift a user's pause-on-start request.
'running': Will lift a pause request before it takes effect.
'paused': Normal usage.
'ready': Will lift a pause request before it takes effect.
'standby': Normal usage.
Set-speed: Any state except undefined, though ready may not be meaningful.
Complete: Only a 'ready' job may accept a complete request.
=======
Changes
=======
(1)
To facilitate "nice" error checking, all five major block-job verb
interfaces in blockjob.c now support an errp parameter:
- block_job_user_cancel is added as a new interface.
- block_job_user_pause gains an errp paramter
- block_job_user_resume gains an errp parameter
- block_job_set_speed already had an errp parameter.
- block_job_complete already had an errp parameter.
(2)
block-job-pause and block-job-resume will no longer no-op when trying
to pause an already paused job, or trying to resume a job that isn't
paused. These functions will now report that they did not perform the
action requested because it was not possible.
iotests have been adjusted to address this new behavior.
(3)
block-job-complete doesn't worry about checking !block_job_started,
because the permission table guards against this.
(4)
test-bdrv-drain's job implementation needs to announce that it is
'ready' now, in order to be completed.
Signed-off-by: John Snow <jsnow@redhat.com>
Reviewed-by: Kevin Wolf <kwolf@redhat.com>
Reviewed-by: Eric Blake <eblake@redhat.com>
Signed-off-by: Kevin Wolf <kwolf@redhat.com>
2018-03-10 16:27:32 +08:00
|
|
|
if (block_job_apply_verb(job, BLOCK_JOB_VERB_SET_SPEED, errp)) {
|
|
|
|
return;
|
|
|
|
}
|
2013-10-08 17:29:38 +08:00
|
|
|
job->driver->set_speed(job, speed, &local_err);
|
2014-01-30 22:07:28 +08:00
|
|
|
if (local_err) {
|
2012-09-28 23:22:47 +08:00
|
|
|
error_propagate(errp, local_err);
|
|
|
|
return;
|
|
|
|
}
|
|
|
|
|
|
|
|
job->speed = speed;
|
2018-03-10 16:27:26 +08:00
|
|
|
if (speed && speed <= old_speed) {
|
2017-12-14 04:46:11 +08:00
|
|
|
return;
|
|
|
|
}
|
|
|
|
|
|
|
|
/* kick only if a timer is pending */
|
|
|
|
block_job_enter_cond(job, block_job_timer_pending);
|
2012-09-28 23:22:47 +08:00
|
|
|
}
|
|
|
|
|
2012-10-18 22:49:21 +08:00
|
|
|
void block_job_complete(BlockJob *job, Error **errp)
|
|
|
|
{
|
2016-10-28 00:06:55 +08:00
|
|
|
/* Should not be reachable via external interface for internal jobs */
|
|
|
|
assert(job->id);
|
blockjobs: add block_job_verb permission table
Which commands ("verbs") are appropriate for jobs in which state is
also somewhat burdensome to keep track of.
As of this commit, it looks rather useless, but begins to look more
interesting the more states we add to the STM table.
A recurring theme is that no verb will apply to an 'undefined' job.
Further, it's not presently possible to restrict the "pause" or "resume"
verbs any more than they are in this commit because of the asynchronous
nature of how jobs enter the PAUSED state; justifications for some
seemingly erroneous applications are given below.
=====
Verbs
=====
Cancel: Any state except undefined.
Pause: Any state except undefined;
'created': Requests that the job pauses as it starts.
'running': Normal usage. (PAUSED)
'paused': The job may be paused for internal reasons,
but the user may wish to force an indefinite
user-pause, so this is allowed.
'ready': Normal usage. (STANDBY)
'standby': Same logic as above.
Resume: Any state except undefined;
'created': Will lift a user's pause-on-start request.
'running': Will lift a pause request before it takes effect.
'paused': Normal usage.
'ready': Will lift a pause request before it takes effect.
'standby': Normal usage.
Set-speed: Any state except undefined, though ready may not be meaningful.
Complete: Only a 'ready' job may accept a complete request.
=======
Changes
=======
(1)
To facilitate "nice" error checking, all five major block-job verb
interfaces in blockjob.c now support an errp parameter:
- block_job_user_cancel is added as a new interface.
- block_job_user_pause gains an errp paramter
- block_job_user_resume gains an errp parameter
- block_job_set_speed already had an errp parameter.
- block_job_complete already had an errp parameter.
(2)
block-job-pause and block-job-resume will no longer no-op when trying
to pause an already paused job, or trying to resume a job that isn't
paused. These functions will now report that they did not perform the
action requested because it was not possible.
iotests have been adjusted to address this new behavior.
(3)
block-job-complete doesn't worry about checking !block_job_started,
because the permission table guards against this.
(4)
test-bdrv-drain's job implementation needs to announce that it is
'ready' now, in order to be completed.
Signed-off-by: John Snow <jsnow@redhat.com>
Reviewed-by: Kevin Wolf <kwolf@redhat.com>
Reviewed-by: Eric Blake <eblake@redhat.com>
Signed-off-by: Kevin Wolf <kwolf@redhat.com>
2018-03-10 16:27:32 +08:00
|
|
|
if (block_job_apply_verb(job, BLOCK_JOB_VERB_COMPLETE, errp)) {
|
|
|
|
return;
|
|
|
|
}
|
|
|
|
if (job->pause_count || job->cancelled || !job->driver->complete) {
|
2016-07-05 22:28:53 +08:00
|
|
|
error_setg(errp, "The active block job '%s' cannot be completed",
|
|
|
|
job->id);
|
2012-10-18 22:49:21 +08:00
|
|
|
return;
|
|
|
|
}
|
|
|
|
|
2013-10-08 17:29:38 +08:00
|
|
|
job->driver->complete(job, errp);
|
2012-10-18 22:49:21 +08:00
|
|
|
}
|
|
|
|
|
2018-03-10 16:27:43 +08:00
|
|
|
void block_job_finalize(BlockJob *job, Error **errp)
|
|
|
|
{
|
|
|
|
assert(job && job->id && job->txn);
|
|
|
|
if (block_job_apply_verb(job, BLOCK_JOB_VERB_FINALIZE, errp)) {
|
|
|
|
return;
|
|
|
|
}
|
|
|
|
block_job_do_finalize(job);
|
|
|
|
}
|
|
|
|
|
2018-03-10 16:27:36 +08:00
|
|
|
void block_job_dismiss(BlockJob **jobptr, Error **errp)
|
|
|
|
{
|
|
|
|
BlockJob *job = *jobptr;
|
|
|
|
/* similarly to _complete, this is QMP-interface only. */
|
|
|
|
assert(job->id);
|
|
|
|
if (block_job_apply_verb(job, BLOCK_JOB_VERB_DISMISS, errp)) {
|
|
|
|
return;
|
|
|
|
}
|
|
|
|
|
|
|
|
block_job_do_dismiss(job);
|
|
|
|
*jobptr = NULL;
|
|
|
|
}
|
|
|
|
|
blockjobs: add block_job_verb permission table
Which commands ("verbs") are appropriate for jobs in which state is
also somewhat burdensome to keep track of.
As of this commit, it looks rather useless, but begins to look more
interesting the more states we add to the STM table.
A recurring theme is that no verb will apply to an 'undefined' job.
Further, it's not presently possible to restrict the "pause" or "resume"
verbs any more than they are in this commit because of the asynchronous
nature of how jobs enter the PAUSED state; justifications for some
seemingly erroneous applications are given below.
=====
Verbs
=====
Cancel: Any state except undefined.
Pause: Any state except undefined;
'created': Requests that the job pauses as it starts.
'running': Normal usage. (PAUSED)
'paused': The job may be paused for internal reasons,
but the user may wish to force an indefinite
user-pause, so this is allowed.
'ready': Normal usage. (STANDBY)
'standby': Same logic as above.
Resume: Any state except undefined;
'created': Will lift a user's pause-on-start request.
'running': Will lift a pause request before it takes effect.
'paused': Normal usage.
'ready': Will lift a pause request before it takes effect.
'standby': Normal usage.
Set-speed: Any state except undefined, though ready may not be meaningful.
Complete: Only a 'ready' job may accept a complete request.
=======
Changes
=======
(1)
To facilitate "nice" error checking, all five major block-job verb
interfaces in blockjob.c now support an errp parameter:
- block_job_user_cancel is added as a new interface.
- block_job_user_pause gains an errp paramter
- block_job_user_resume gains an errp parameter
- block_job_set_speed already had an errp parameter.
- block_job_complete already had an errp parameter.
(2)
block-job-pause and block-job-resume will no longer no-op when trying
to pause an already paused job, or trying to resume a job that isn't
paused. These functions will now report that they did not perform the
action requested because it was not possible.
iotests have been adjusted to address this new behavior.
(3)
block-job-complete doesn't worry about checking !block_job_started,
because the permission table guards against this.
(4)
test-bdrv-drain's job implementation needs to announce that it is
'ready' now, in order to be completed.
Signed-off-by: John Snow <jsnow@redhat.com>
Reviewed-by: Kevin Wolf <kwolf@redhat.com>
Reviewed-by: Eric Blake <eblake@redhat.com>
Signed-off-by: Kevin Wolf <kwolf@redhat.com>
2018-03-10 16:27:32 +08:00
|
|
|
void block_job_user_pause(BlockJob *job, Error **errp)
|
2016-10-28 00:06:59 +08:00
|
|
|
{
|
blockjobs: add block_job_verb permission table
Which commands ("verbs") are appropriate for jobs in which state is
also somewhat burdensome to keep track of.
As of this commit, it looks rather useless, but begins to look more
interesting the more states we add to the STM table.
A recurring theme is that no verb will apply to an 'undefined' job.
Further, it's not presently possible to restrict the "pause" or "resume"
verbs any more than they are in this commit because of the asynchronous
nature of how jobs enter the PAUSED state; justifications for some
seemingly erroneous applications are given below.
=====
Verbs
=====
Cancel: Any state except undefined.
Pause: Any state except undefined;
'created': Requests that the job pauses as it starts.
'running': Normal usage. (PAUSED)
'paused': The job may be paused for internal reasons,
but the user may wish to force an indefinite
user-pause, so this is allowed.
'ready': Normal usage. (STANDBY)
'standby': Same logic as above.
Resume: Any state except undefined;
'created': Will lift a user's pause-on-start request.
'running': Will lift a pause request before it takes effect.
'paused': Normal usage.
'ready': Will lift a pause request before it takes effect.
'standby': Normal usage.
Set-speed: Any state except undefined, though ready may not be meaningful.
Complete: Only a 'ready' job may accept a complete request.
=======
Changes
=======
(1)
To facilitate "nice" error checking, all five major block-job verb
interfaces in blockjob.c now support an errp parameter:
- block_job_user_cancel is added as a new interface.
- block_job_user_pause gains an errp paramter
- block_job_user_resume gains an errp parameter
- block_job_set_speed already had an errp parameter.
- block_job_complete already had an errp parameter.
(2)
block-job-pause and block-job-resume will no longer no-op when trying
to pause an already paused job, or trying to resume a job that isn't
paused. These functions will now report that they did not perform the
action requested because it was not possible.
iotests have been adjusted to address this new behavior.
(3)
block-job-complete doesn't worry about checking !block_job_started,
because the permission table guards against this.
(4)
test-bdrv-drain's job implementation needs to announce that it is
'ready' now, in order to be completed.
Signed-off-by: John Snow <jsnow@redhat.com>
Reviewed-by: Kevin Wolf <kwolf@redhat.com>
Reviewed-by: Eric Blake <eblake@redhat.com>
Signed-off-by: Kevin Wolf <kwolf@redhat.com>
2018-03-10 16:27:32 +08:00
|
|
|
if (block_job_apply_verb(job, BLOCK_JOB_VERB_PAUSE, errp)) {
|
|
|
|
return;
|
|
|
|
}
|
|
|
|
if (job->user_paused) {
|
|
|
|
error_setg(errp, "Job is already paused");
|
|
|
|
return;
|
|
|
|
}
|
2016-10-28 00:06:59 +08:00
|
|
|
job->user_paused = true;
|
|
|
|
block_job_pause(job);
|
|
|
|
}
|
|
|
|
|
|
|
|
bool block_job_user_paused(BlockJob *job)
|
|
|
|
{
|
2017-05-08 22:13:00 +08:00
|
|
|
return job->user_paused;
|
2016-10-28 00:06:59 +08:00
|
|
|
}
|
|
|
|
|
blockjobs: add block_job_verb permission table
Which commands ("verbs") are appropriate for jobs in which state is
also somewhat burdensome to keep track of.
As of this commit, it looks rather useless, but begins to look more
interesting the more states we add to the STM table.
A recurring theme is that no verb will apply to an 'undefined' job.
Further, it's not presently possible to restrict the "pause" or "resume"
verbs any more than they are in this commit because of the asynchronous
nature of how jobs enter the PAUSED state; justifications for some
seemingly erroneous applications are given below.
=====
Verbs
=====
Cancel: Any state except undefined.
Pause: Any state except undefined;
'created': Requests that the job pauses as it starts.
'running': Normal usage. (PAUSED)
'paused': The job may be paused for internal reasons,
but the user may wish to force an indefinite
user-pause, so this is allowed.
'ready': Normal usage. (STANDBY)
'standby': Same logic as above.
Resume: Any state except undefined;
'created': Will lift a user's pause-on-start request.
'running': Will lift a pause request before it takes effect.
'paused': Normal usage.
'ready': Will lift a pause request before it takes effect.
'standby': Normal usage.
Set-speed: Any state except undefined, though ready may not be meaningful.
Complete: Only a 'ready' job may accept a complete request.
=======
Changes
=======
(1)
To facilitate "nice" error checking, all five major block-job verb
interfaces in blockjob.c now support an errp parameter:
- block_job_user_cancel is added as a new interface.
- block_job_user_pause gains an errp paramter
- block_job_user_resume gains an errp parameter
- block_job_set_speed already had an errp parameter.
- block_job_complete already had an errp parameter.
(2)
block-job-pause and block-job-resume will no longer no-op when trying
to pause an already paused job, or trying to resume a job that isn't
paused. These functions will now report that they did not perform the
action requested because it was not possible.
iotests have been adjusted to address this new behavior.
(3)
block-job-complete doesn't worry about checking !block_job_started,
because the permission table guards against this.
(4)
test-bdrv-drain's job implementation needs to announce that it is
'ready' now, in order to be completed.
Signed-off-by: John Snow <jsnow@redhat.com>
Reviewed-by: Kevin Wolf <kwolf@redhat.com>
Reviewed-by: Eric Blake <eblake@redhat.com>
Signed-off-by: Kevin Wolf <kwolf@redhat.com>
2018-03-10 16:27:32 +08:00
|
|
|
void block_job_user_resume(BlockJob *job, Error **errp)
|
2016-10-28 00:06:59 +08:00
|
|
|
{
|
blockjobs: add block_job_verb permission table
Which commands ("verbs") are appropriate for jobs in which state is
also somewhat burdensome to keep track of.
As of this commit, it looks rather useless, but begins to look more
interesting the more states we add to the STM table.
A recurring theme is that no verb will apply to an 'undefined' job.
Further, it's not presently possible to restrict the "pause" or "resume"
verbs any more than they are in this commit because of the asynchronous
nature of how jobs enter the PAUSED state; justifications for some
seemingly erroneous applications are given below.
=====
Verbs
=====
Cancel: Any state except undefined.
Pause: Any state except undefined;
'created': Requests that the job pauses as it starts.
'running': Normal usage. (PAUSED)
'paused': The job may be paused for internal reasons,
but the user may wish to force an indefinite
user-pause, so this is allowed.
'ready': Normal usage. (STANDBY)
'standby': Same logic as above.
Resume: Any state except undefined;
'created': Will lift a user's pause-on-start request.
'running': Will lift a pause request before it takes effect.
'paused': Normal usage.
'ready': Will lift a pause request before it takes effect.
'standby': Normal usage.
Set-speed: Any state except undefined, though ready may not be meaningful.
Complete: Only a 'ready' job may accept a complete request.
=======
Changes
=======
(1)
To facilitate "nice" error checking, all five major block-job verb
interfaces in blockjob.c now support an errp parameter:
- block_job_user_cancel is added as a new interface.
- block_job_user_pause gains an errp paramter
- block_job_user_resume gains an errp parameter
- block_job_set_speed already had an errp parameter.
- block_job_complete already had an errp parameter.
(2)
block-job-pause and block-job-resume will no longer no-op when trying
to pause an already paused job, or trying to resume a job that isn't
paused. These functions will now report that they did not perform the
action requested because it was not possible.
iotests have been adjusted to address this new behavior.
(3)
block-job-complete doesn't worry about checking !block_job_started,
because the permission table guards against this.
(4)
test-bdrv-drain's job implementation needs to announce that it is
'ready' now, in order to be completed.
Signed-off-by: John Snow <jsnow@redhat.com>
Reviewed-by: Kevin Wolf <kwolf@redhat.com>
Reviewed-by: Eric Blake <eblake@redhat.com>
Signed-off-by: Kevin Wolf <kwolf@redhat.com>
2018-03-10 16:27:32 +08:00
|
|
|
assert(job);
|
|
|
|
if (!job->user_paused || job->pause_count <= 0) {
|
|
|
|
error_setg(errp, "Can't resume a job that was not paused");
|
|
|
|
return;
|
2016-10-28 00:06:59 +08:00
|
|
|
}
|
blockjobs: add block_job_verb permission table
Which commands ("verbs") are appropriate for jobs in which state is
also somewhat burdensome to keep track of.
As of this commit, it looks rather useless, but begins to look more
interesting the more states we add to the STM table.
A recurring theme is that no verb will apply to an 'undefined' job.
Further, it's not presently possible to restrict the "pause" or "resume"
verbs any more than they are in this commit because of the asynchronous
nature of how jobs enter the PAUSED state; justifications for some
seemingly erroneous applications are given below.
=====
Verbs
=====
Cancel: Any state except undefined.
Pause: Any state except undefined;
'created': Requests that the job pauses as it starts.
'running': Normal usage. (PAUSED)
'paused': The job may be paused for internal reasons,
but the user may wish to force an indefinite
user-pause, so this is allowed.
'ready': Normal usage. (STANDBY)
'standby': Same logic as above.
Resume: Any state except undefined;
'created': Will lift a user's pause-on-start request.
'running': Will lift a pause request before it takes effect.
'paused': Normal usage.
'ready': Will lift a pause request before it takes effect.
'standby': Normal usage.
Set-speed: Any state except undefined, though ready may not be meaningful.
Complete: Only a 'ready' job may accept a complete request.
=======
Changes
=======
(1)
To facilitate "nice" error checking, all five major block-job verb
interfaces in blockjob.c now support an errp parameter:
- block_job_user_cancel is added as a new interface.
- block_job_user_pause gains an errp paramter
- block_job_user_resume gains an errp parameter
- block_job_set_speed already had an errp parameter.
- block_job_complete already had an errp parameter.
(2)
block-job-pause and block-job-resume will no longer no-op when trying
to pause an already paused job, or trying to resume a job that isn't
paused. These functions will now report that they did not perform the
action requested because it was not possible.
iotests have been adjusted to address this new behavior.
(3)
block-job-complete doesn't worry about checking !block_job_started,
because the permission table guards against this.
(4)
test-bdrv-drain's job implementation needs to announce that it is
'ready' now, in order to be completed.
Signed-off-by: John Snow <jsnow@redhat.com>
Reviewed-by: Kevin Wolf <kwolf@redhat.com>
Reviewed-by: Eric Blake <eblake@redhat.com>
Signed-off-by: Kevin Wolf <kwolf@redhat.com>
2018-03-10 16:27:32 +08:00
|
|
|
if (block_job_apply_verb(job, BLOCK_JOB_VERB_RESUME, errp)) {
|
|
|
|
return;
|
|
|
|
}
|
|
|
|
block_job_iostatus_reset(job);
|
|
|
|
job->user_paused = false;
|
|
|
|
block_job_resume(job);
|
2016-10-28 00:06:59 +08:00
|
|
|
}
|
|
|
|
|
block/mirror: change the semantic of 'force' of block-job-cancel
When doing drive mirror to a low speed shared storage, if there was heavy
BLK IO write workload in VM after the 'ready' event, drive mirror block job
can't be canceled immediately, it would keep running until the heavy BLK IO
workload stopped in the VM.
Libvirt depends on the current block-job-cancel semantics, which is that
when used without a flag after the 'ready' event, the command blocks
until data is in sync. However, these semantics are awkward in other
situations, for example, people may use drive mirror for realtime
backups while still wanting to use block live migration. Libvirt cannot
start a block live migration while another drive mirror is in progress,
but the user would rather abandon the backup attempt as broken and
proceed with the live migration than be stuck waiting for the current
drive mirror backup to finish.
The drive-mirror command already includes a 'force' flag, which libvirt
does not use, although it documented the flag as only being useful to
quit a job which is paused. However, since quitting a paused job has
the same effect as abandoning a backup in a non-paused job (namely, the
destination file is not in sync, and the command completes immediately),
we can just improve the documentation to make the force flag obviously
useful.
Cc: Paolo Bonzini <pbonzini@redhat.com>
Cc: Jeff Cody <jcody@redhat.com>
Cc: Kevin Wolf <kwolf@redhat.com>
Cc: Max Reitz <mreitz@redhat.com>
Cc: Eric Blake <eblake@redhat.com>
Cc: John Snow <jsnow@redhat.com>
Reported-by: Huaitong Han <huanhuaitong@didichuxing.com>
Signed-off-by: Huaitong Han <huanhuaitong@didichuxing.com>
Signed-off-by: Liang Li <liliangleo@didichuxing.com>
Signed-off-by: Jeff Cody <jcody@redhat.com>
Signed-off-by: Kevin Wolf <kwolf@redhat.com>
2018-03-13 20:12:16 +08:00
|
|
|
void block_job_cancel(BlockJob *job, bool force)
|
2012-09-28 23:22:50 +08:00
|
|
|
{
|
2018-03-10 16:27:34 +08:00
|
|
|
if (job->status == BLOCK_JOB_STATUS_CONCLUDED) {
|
2018-03-10 16:27:36 +08:00
|
|
|
block_job_do_dismiss(job);
|
2018-03-10 16:27:43 +08:00
|
|
|
return;
|
|
|
|
}
|
block/mirror: change the semantic of 'force' of block-job-cancel
When doing drive mirror to a low speed shared storage, if there was heavy
BLK IO write workload in VM after the 'ready' event, drive mirror block job
can't be canceled immediately, it would keep running until the heavy BLK IO
workload stopped in the VM.
Libvirt depends on the current block-job-cancel semantics, which is that
when used without a flag after the 'ready' event, the command blocks
until data is in sync. However, these semantics are awkward in other
situations, for example, people may use drive mirror for realtime
backups while still wanting to use block live migration. Libvirt cannot
start a block live migration while another drive mirror is in progress,
but the user would rather abandon the backup attempt as broken and
proceed with the live migration than be stuck waiting for the current
drive mirror backup to finish.
The drive-mirror command already includes a 'force' flag, which libvirt
does not use, although it documented the flag as only being useful to
quit a job which is paused. However, since quitting a paused job has
the same effect as abandoning a backup in a non-paused job (namely, the
destination file is not in sync, and the command completes immediately),
we can just improve the documentation to make the force flag obviously
useful.
Cc: Paolo Bonzini <pbonzini@redhat.com>
Cc: Jeff Cody <jcody@redhat.com>
Cc: Kevin Wolf <kwolf@redhat.com>
Cc: Max Reitz <mreitz@redhat.com>
Cc: Eric Blake <eblake@redhat.com>
Cc: John Snow <jsnow@redhat.com>
Reported-by: Huaitong Han <huanhuaitong@didichuxing.com>
Signed-off-by: Huaitong Han <huanhuaitong@didichuxing.com>
Signed-off-by: Liang Li <liliangleo@didichuxing.com>
Signed-off-by: Jeff Cody <jcody@redhat.com>
Signed-off-by: Kevin Wolf <kwolf@redhat.com>
2018-03-13 20:12:16 +08:00
|
|
|
block_job_cancel_async(job, force);
|
2018-03-10 16:27:43 +08:00
|
|
|
if (!block_job_started(job)) {
|
2016-11-08 14:50:37 +08:00
|
|
|
block_job_completed(job, -ECANCELED);
|
2018-03-10 16:27:43 +08:00
|
|
|
} else if (job->deferred_to_main_loop) {
|
|
|
|
block_job_completed_txn_abort(job);
|
|
|
|
} else {
|
|
|
|
block_job_enter(job);
|
2016-11-08 14:50:37 +08:00
|
|
|
}
|
2012-09-28 23:22:50 +08:00
|
|
|
}
|
|
|
|
|
block/mirror: change the semantic of 'force' of block-job-cancel
When doing drive mirror to a low speed shared storage, if there was heavy
BLK IO write workload in VM after the 'ready' event, drive mirror block job
can't be canceled immediately, it would keep running until the heavy BLK IO
workload stopped in the VM.
Libvirt depends on the current block-job-cancel semantics, which is that
when used without a flag after the 'ready' event, the command blocks
until data is in sync. However, these semantics are awkward in other
situations, for example, people may use drive mirror for realtime
backups while still wanting to use block live migration. Libvirt cannot
start a block live migration while another drive mirror is in progress,
but the user would rather abandon the backup attempt as broken and
proceed with the live migration than be stuck waiting for the current
drive mirror backup to finish.
The drive-mirror command already includes a 'force' flag, which libvirt
does not use, although it documented the flag as only being useful to
quit a job which is paused. However, since quitting a paused job has
the same effect as abandoning a backup in a non-paused job (namely, the
destination file is not in sync, and the command completes immediately),
we can just improve the documentation to make the force flag obviously
useful.
Cc: Paolo Bonzini <pbonzini@redhat.com>
Cc: Jeff Cody <jcody@redhat.com>
Cc: Kevin Wolf <kwolf@redhat.com>
Cc: Max Reitz <mreitz@redhat.com>
Cc: Eric Blake <eblake@redhat.com>
Cc: John Snow <jsnow@redhat.com>
Reported-by: Huaitong Han <huanhuaitong@didichuxing.com>
Signed-off-by: Huaitong Han <huanhuaitong@didichuxing.com>
Signed-off-by: Liang Li <liliangleo@didichuxing.com>
Signed-off-by: Jeff Cody <jcody@redhat.com>
Signed-off-by: Kevin Wolf <kwolf@redhat.com>
2018-03-13 20:12:16 +08:00
|
|
|
void block_job_user_cancel(BlockJob *job, bool force, Error **errp)
|
blockjobs: add block_job_verb permission table
Which commands ("verbs") are appropriate for jobs in which state is
also somewhat burdensome to keep track of.
As of this commit, it looks rather useless, but begins to look more
interesting the more states we add to the STM table.
A recurring theme is that no verb will apply to an 'undefined' job.
Further, it's not presently possible to restrict the "pause" or "resume"
verbs any more than they are in this commit because of the asynchronous
nature of how jobs enter the PAUSED state; justifications for some
seemingly erroneous applications are given below.
=====
Verbs
=====
Cancel: Any state except undefined.
Pause: Any state except undefined;
'created': Requests that the job pauses as it starts.
'running': Normal usage. (PAUSED)
'paused': The job may be paused for internal reasons,
but the user may wish to force an indefinite
user-pause, so this is allowed.
'ready': Normal usage. (STANDBY)
'standby': Same logic as above.
Resume: Any state except undefined;
'created': Will lift a user's pause-on-start request.
'running': Will lift a pause request before it takes effect.
'paused': Normal usage.
'ready': Will lift a pause request before it takes effect.
'standby': Normal usage.
Set-speed: Any state except undefined, though ready may not be meaningful.
Complete: Only a 'ready' job may accept a complete request.
=======
Changes
=======
(1)
To facilitate "nice" error checking, all five major block-job verb
interfaces in blockjob.c now support an errp parameter:
- block_job_user_cancel is added as a new interface.
- block_job_user_pause gains an errp paramter
- block_job_user_resume gains an errp parameter
- block_job_set_speed already had an errp parameter.
- block_job_complete already had an errp parameter.
(2)
block-job-pause and block-job-resume will no longer no-op when trying
to pause an already paused job, or trying to resume a job that isn't
paused. These functions will now report that they did not perform the
action requested because it was not possible.
iotests have been adjusted to address this new behavior.
(3)
block-job-complete doesn't worry about checking !block_job_started,
because the permission table guards against this.
(4)
test-bdrv-drain's job implementation needs to announce that it is
'ready' now, in order to be completed.
Signed-off-by: John Snow <jsnow@redhat.com>
Reviewed-by: Kevin Wolf <kwolf@redhat.com>
Reviewed-by: Eric Blake <eblake@redhat.com>
Signed-off-by: Kevin Wolf <kwolf@redhat.com>
2018-03-10 16:27:32 +08:00
|
|
|
{
|
|
|
|
if (block_job_apply_verb(job, BLOCK_JOB_VERB_CANCEL, errp)) {
|
|
|
|
return;
|
|
|
|
}
|
block/mirror: change the semantic of 'force' of block-job-cancel
When doing drive mirror to a low speed shared storage, if there was heavy
BLK IO write workload in VM after the 'ready' event, drive mirror block job
can't be canceled immediately, it would keep running until the heavy BLK IO
workload stopped in the VM.
Libvirt depends on the current block-job-cancel semantics, which is that
when used without a flag after the 'ready' event, the command blocks
until data is in sync. However, these semantics are awkward in other
situations, for example, people may use drive mirror for realtime
backups while still wanting to use block live migration. Libvirt cannot
start a block live migration while another drive mirror is in progress,
but the user would rather abandon the backup attempt as broken and
proceed with the live migration than be stuck waiting for the current
drive mirror backup to finish.
The drive-mirror command already includes a 'force' flag, which libvirt
does not use, although it documented the flag as only being useful to
quit a job which is paused. However, since quitting a paused job has
the same effect as abandoning a backup in a non-paused job (namely, the
destination file is not in sync, and the command completes immediately),
we can just improve the documentation to make the force flag obviously
useful.
Cc: Paolo Bonzini <pbonzini@redhat.com>
Cc: Jeff Cody <jcody@redhat.com>
Cc: Kevin Wolf <kwolf@redhat.com>
Cc: Max Reitz <mreitz@redhat.com>
Cc: Eric Blake <eblake@redhat.com>
Cc: John Snow <jsnow@redhat.com>
Reported-by: Huaitong Han <huanhuaitong@didichuxing.com>
Signed-off-by: Huaitong Han <huanhuaitong@didichuxing.com>
Signed-off-by: Liang Li <liliangleo@didichuxing.com>
Signed-off-by: Jeff Cody <jcody@redhat.com>
Signed-off-by: Kevin Wolf <kwolf@redhat.com>
2018-03-13 20:12:16 +08:00
|
|
|
block_job_cancel(job, force);
|
blockjobs: add block_job_verb permission table
Which commands ("verbs") are appropriate for jobs in which state is
also somewhat burdensome to keep track of.
As of this commit, it looks rather useless, but begins to look more
interesting the more states we add to the STM table.
A recurring theme is that no verb will apply to an 'undefined' job.
Further, it's not presently possible to restrict the "pause" or "resume"
verbs any more than they are in this commit because of the asynchronous
nature of how jobs enter the PAUSED state; justifications for some
seemingly erroneous applications are given below.
=====
Verbs
=====
Cancel: Any state except undefined.
Pause: Any state except undefined;
'created': Requests that the job pauses as it starts.
'running': Normal usage. (PAUSED)
'paused': The job may be paused for internal reasons,
but the user may wish to force an indefinite
user-pause, so this is allowed.
'ready': Normal usage. (STANDBY)
'standby': Same logic as above.
Resume: Any state except undefined;
'created': Will lift a user's pause-on-start request.
'running': Will lift a pause request before it takes effect.
'paused': Normal usage.
'ready': Will lift a pause request before it takes effect.
'standby': Normal usage.
Set-speed: Any state except undefined, though ready may not be meaningful.
Complete: Only a 'ready' job may accept a complete request.
=======
Changes
=======
(1)
To facilitate "nice" error checking, all five major block-job verb
interfaces in blockjob.c now support an errp parameter:
- block_job_user_cancel is added as a new interface.
- block_job_user_pause gains an errp paramter
- block_job_user_resume gains an errp parameter
- block_job_set_speed already had an errp parameter.
- block_job_complete already had an errp parameter.
(2)
block-job-pause and block-job-resume will no longer no-op when trying
to pause an already paused job, or trying to resume a job that isn't
paused. These functions will now report that they did not perform the
action requested because it was not possible.
iotests have been adjusted to address this new behavior.
(3)
block-job-complete doesn't worry about checking !block_job_started,
because the permission table guards against this.
(4)
test-bdrv-drain's job implementation needs to announce that it is
'ready' now, in order to be completed.
Signed-off-by: John Snow <jsnow@redhat.com>
Reviewed-by: Kevin Wolf <kwolf@redhat.com>
Reviewed-by: Eric Blake <eblake@redhat.com>
Signed-off-by: Kevin Wolf <kwolf@redhat.com>
2018-03-10 16:27:32 +08:00
|
|
|
}
|
|
|
|
|
2014-10-24 21:57:33 +08:00
|
|
|
/* A wrapper around block_job_cancel() taking an Error ** parameter so it may be
|
|
|
|
* used with block_job_finish_sync() without the need for (rather nasty)
|
|
|
|
* function pointer casts there. */
|
|
|
|
static void block_job_cancel_err(BlockJob *job, Error **errp)
|
|
|
|
{
|
block/mirror: change the semantic of 'force' of block-job-cancel
When doing drive mirror to a low speed shared storage, if there was heavy
BLK IO write workload in VM after the 'ready' event, drive mirror block job
can't be canceled immediately, it would keep running until the heavy BLK IO
workload stopped in the VM.
Libvirt depends on the current block-job-cancel semantics, which is that
when used without a flag after the 'ready' event, the command blocks
until data is in sync. However, these semantics are awkward in other
situations, for example, people may use drive mirror for realtime
backups while still wanting to use block live migration. Libvirt cannot
start a block live migration while another drive mirror is in progress,
but the user would rather abandon the backup attempt as broken and
proceed with the live migration than be stuck waiting for the current
drive mirror backup to finish.
The drive-mirror command already includes a 'force' flag, which libvirt
does not use, although it documented the flag as only being useful to
quit a job which is paused. However, since quitting a paused job has
the same effect as abandoning a backup in a non-paused job (namely, the
destination file is not in sync, and the command completes immediately),
we can just improve the documentation to make the force flag obviously
useful.
Cc: Paolo Bonzini <pbonzini@redhat.com>
Cc: Jeff Cody <jcody@redhat.com>
Cc: Kevin Wolf <kwolf@redhat.com>
Cc: Max Reitz <mreitz@redhat.com>
Cc: Eric Blake <eblake@redhat.com>
Cc: John Snow <jsnow@redhat.com>
Reported-by: Huaitong Han <huanhuaitong@didichuxing.com>
Signed-off-by: Huaitong Han <huanhuaitong@didichuxing.com>
Signed-off-by: Liang Li <liliangleo@didichuxing.com>
Signed-off-by: Jeff Cody <jcody@redhat.com>
Signed-off-by: Kevin Wolf <kwolf@redhat.com>
2018-03-13 20:12:16 +08:00
|
|
|
block_job_cancel(job, false);
|
2014-10-24 21:57:33 +08:00
|
|
|
}
|
|
|
|
|
|
|
|
int block_job_cancel_sync(BlockJob *job)
|
|
|
|
{
|
|
|
|
return block_job_finish_sync(job, &block_job_cancel_err, NULL);
|
|
|
|
}
|
|
|
|
|
2016-04-09 00:26:37 +08:00
|
|
|
void block_job_cancel_sync_all(void)
|
|
|
|
{
|
|
|
|
BlockJob *job;
|
|
|
|
AioContext *aio_context;
|
|
|
|
|
|
|
|
while ((job = QLIST_FIRST(&block_jobs))) {
|
2016-04-08 20:51:09 +08:00
|
|
|
aio_context = blk_get_aio_context(job->blk);
|
2016-04-09 00:26:37 +08:00
|
|
|
aio_context_acquire(aio_context);
|
|
|
|
block_job_cancel_sync(job);
|
|
|
|
aio_context_release(aio_context);
|
|
|
|
}
|
|
|
|
}
|
|
|
|
|
2014-10-24 21:57:33 +08:00
|
|
|
int block_job_complete_sync(BlockJob *job, Error **errp)
|
|
|
|
{
|
|
|
|
return block_job_finish_sync(job, &block_job_complete, errp);
|
|
|
|
}
|
|
|
|
|
2016-10-28 00:06:55 +08:00
|
|
|
BlockJobInfo *block_job_query(BlockJob *job, Error **errp)
|
2012-09-28 23:22:48 +08:00
|
|
|
{
|
2016-10-28 00:06:55 +08:00
|
|
|
BlockJobInfo *info;
|
|
|
|
|
|
|
|
if (block_job_is_internal(job)) {
|
|
|
|
error_setg(errp, "Cannot query QEMU internal jobs");
|
|
|
|
return NULL;
|
|
|
|
}
|
|
|
|
info = g_new0(BlockJobInfo, 1);
|
2017-08-24 16:46:08 +08:00
|
|
|
info->type = g_strdup(BlockJobType_str(job->driver->job_type));
|
2015-09-16 19:34:54 +08:00
|
|
|
info->device = g_strdup(job->id);
|
block: introduce block job error
The following behaviors are possible:
'report': The behavior is the same as in 1.1. An I/O error,
respectively during a read or a write, will complete the job immediately
with an error code.
'ignore': An I/O error, respectively during a read or a write, will be
ignored. For streaming, the job will complete with an error and the
backing file will be left in place. For mirroring, the sector will be
marked again as dirty and re-examined later.
'stop': The job will be paused and the job iostatus will be set to
failed or nospace, while the VM will keep running. This can only be
specified if the block device has rerror=stop and werror=stop or enospc.
'enospc': Behaves as 'stop' for ENOSPC errors, 'report' for others.
In all cases, even for 'report', the I/O error is reported as a QMP
event BLOCK_JOB_ERROR, with the same arguments as BLOCK_IO_ERROR.
It is possible that while stopping the VM a BLOCK_IO_ERROR event will be
reported and will clobber the event from BLOCK_JOB_ERROR, or vice versa.
This is not really avoidable since stopping the VM completes all pending
I/O requests. In fact, it is already possible now that a series of
BLOCK_IO_ERROR events are reported with rerror=stop, because vm_stop
calls bdrv_drain_all and this can generate further errors.
Signed-off-by: Paolo Bonzini <pbonzini@redhat.com>
Reviewed-by: Eric Blake <eblake@redhat.com>
Signed-off-by: Kevin Wolf <kwolf@redhat.com>
2012-09-28 23:22:58 +08:00
|
|
|
info->len = job->len;
|
2017-11-29 18:25:13 +08:00
|
|
|
info->busy = atomic_read(&job->busy);
|
2015-04-03 22:05:18 +08:00
|
|
|
info->paused = job->pause_count > 0;
|
block: introduce block job error
The following behaviors are possible:
'report': The behavior is the same as in 1.1. An I/O error,
respectively during a read or a write, will complete the job immediately
with an error code.
'ignore': An I/O error, respectively during a read or a write, will be
ignored. For streaming, the job will complete with an error and the
backing file will be left in place. For mirroring, the sector will be
marked again as dirty and re-examined later.
'stop': The job will be paused and the job iostatus will be set to
failed or nospace, while the VM will keep running. This can only be
specified if the block device has rerror=stop and werror=stop or enospc.
'enospc': Behaves as 'stop' for ENOSPC errors, 'report' for others.
In all cases, even for 'report', the I/O error is reported as a QMP
event BLOCK_JOB_ERROR, with the same arguments as BLOCK_IO_ERROR.
It is possible that while stopping the VM a BLOCK_IO_ERROR event will be
reported and will clobber the event from BLOCK_JOB_ERROR, or vice versa.
This is not really avoidable since stopping the VM completes all pending
I/O requests. In fact, it is already possible now that a series of
BLOCK_IO_ERROR events are reported with rerror=stop, because vm_stop
calls bdrv_drain_all and this can generate further errors.
Signed-off-by: Paolo Bonzini <pbonzini@redhat.com>
Reviewed-by: Eric Blake <eblake@redhat.com>
Signed-off-by: Kevin Wolf <kwolf@redhat.com>
2012-09-28 23:22:58 +08:00
|
|
|
info->offset = job->offset;
|
|
|
|
info->speed = job->speed;
|
|
|
|
info->io_status = job->iostatus;
|
2014-10-24 21:57:34 +08:00
|
|
|
info->ready = job->ready;
|
blockjobs: add status enum
We're about to add several new states, and booleans are becoming
unwieldly and difficult to reason about. It would help to have a
more explicit bookkeeping of the state of blockjobs. To this end,
add a new "status" field and add our existing states in a redundant
manner alongside the bools they are replacing:
UNDEFINED: Placeholder, default state. Not currently visible to QMP
unless changes occur in the future to allow creating jobs
without starting them via QMP.
CREATED: replaces !!job->co && paused && !busy
RUNNING: replaces effectively (!paused && busy)
PAUSED: Nearly redundant with info->paused, which shows pause_count.
This reports the actual status of the job, which almost always
matches the paused request status. It differs in that it is
strictly only true when the job has actually gone dormant.
READY: replaces job->ready.
STANDBY: Paused, but job->ready is true.
New state additions in coming commits will not be quite so redundant:
WAITING: Waiting on transaction. This job has finished all the work
it can until the transaction converges, fails, or is canceled.
PENDING: Pending authorization from user. This job has finished all the
work it can until the job or transaction is finalized via
block_job_finalize. This implies the transaction has converged
and left the WAITING phase.
ABORTING: Job has encountered an error condition and is in the process
of aborting.
CONCLUDED: Job has ceased all operations and has a return code available
for query and may be dismissed via block_job_dismiss.
NULL: Job has been dismissed and (should) be destroyed. Should never
be visible to QMP.
Some of these states appear somewhat superfluous, but it helps define the
expected flow of a job; so some of the states wind up being synchronous
empty transitions. Importantly, jobs can be in only one of these states
at any given time, which helps code and external users alike reason about
the current condition of a job unambiguously.
Signed-off-by: John Snow <jsnow@redhat.com>
Signed-off-by: Kevin Wolf <kwolf@redhat.com>
2018-03-10 16:27:29 +08:00
|
|
|
info->status = job->status;
|
2018-03-10 16:27:44 +08:00
|
|
|
info->auto_finalize = job->auto_finalize;
|
|
|
|
info->auto_dismiss = job->auto_dismiss;
|
2012-09-28 23:22:48 +08:00
|
|
|
return info;
|
|
|
|
}
|
block: introduce block job error
The following behaviors are possible:
'report': The behavior is the same as in 1.1. An I/O error,
respectively during a read or a write, will complete the job immediately
with an error code.
'ignore': An I/O error, respectively during a read or a write, will be
ignored. For streaming, the job will complete with an error and the
backing file will be left in place. For mirroring, the sector will be
marked again as dirty and re-examined later.
'stop': The job will be paused and the job iostatus will be set to
failed or nospace, while the VM will keep running. This can only be
specified if the block device has rerror=stop and werror=stop or enospc.
'enospc': Behaves as 'stop' for ENOSPC errors, 'report' for others.
In all cases, even for 'report', the I/O error is reported as a QMP
event BLOCK_JOB_ERROR, with the same arguments as BLOCK_IO_ERROR.
It is possible that while stopping the VM a BLOCK_IO_ERROR event will be
reported and will clobber the event from BLOCK_JOB_ERROR, or vice versa.
This is not really avoidable since stopping the VM completes all pending
I/O requests. In fact, it is already possible now that a series of
BLOCK_IO_ERROR events are reported with rerror=stop, because vm_stop
calls bdrv_drain_all and this can generate further errors.
Signed-off-by: Paolo Bonzini <pbonzini@redhat.com>
Reviewed-by: Eric Blake <eblake@redhat.com>
Signed-off-by: Kevin Wolf <kwolf@redhat.com>
2012-09-28 23:22:58 +08:00
|
|
|
|
|
|
|
static void block_job_iostatus_set_err(BlockJob *job, int error)
|
|
|
|
{
|
|
|
|
if (job->iostatus == BLOCK_DEVICE_IO_STATUS_OK) {
|
|
|
|
job->iostatus = error == ENOSPC ? BLOCK_DEVICE_IO_STATUS_NOSPACE :
|
|
|
|
BLOCK_DEVICE_IO_STATUS_FAILED;
|
|
|
|
}
|
|
|
|
}
|
|
|
|
|
2016-10-28 00:06:58 +08:00
|
|
|
static void block_job_event_cancelled(BlockJob *job)
|
2014-06-18 14:43:47 +08:00
|
|
|
{
|
2016-10-28 00:06:55 +08:00
|
|
|
if (block_job_is_internal(job)) {
|
|
|
|
return;
|
|
|
|
}
|
|
|
|
|
2014-06-18 14:43:47 +08:00
|
|
|
qapi_event_send_block_job_cancelled(job->driver->job_type,
|
2015-09-16 19:34:54 +08:00
|
|
|
job->id,
|
2014-06-18 14:43:47 +08:00
|
|
|
job->len,
|
|
|
|
job->offset,
|
|
|
|
job->speed,
|
|
|
|
&error_abort);
|
|
|
|
}
|
block: introduce block job error
The following behaviors are possible:
'report': The behavior is the same as in 1.1. An I/O error,
respectively during a read or a write, will complete the job immediately
with an error code.
'ignore': An I/O error, respectively during a read or a write, will be
ignored. For streaming, the job will complete with an error and the
backing file will be left in place. For mirroring, the sector will be
marked again as dirty and re-examined later.
'stop': The job will be paused and the job iostatus will be set to
failed or nospace, while the VM will keep running. This can only be
specified if the block device has rerror=stop and werror=stop or enospc.
'enospc': Behaves as 'stop' for ENOSPC errors, 'report' for others.
In all cases, even for 'report', the I/O error is reported as a QMP
event BLOCK_JOB_ERROR, with the same arguments as BLOCK_IO_ERROR.
It is possible that while stopping the VM a BLOCK_IO_ERROR event will be
reported and will clobber the event from BLOCK_JOB_ERROR, or vice versa.
This is not really avoidable since stopping the VM completes all pending
I/O requests. In fact, it is already possible now that a series of
BLOCK_IO_ERROR events are reported with rerror=stop, because vm_stop
calls bdrv_drain_all and this can generate further errors.
Signed-off-by: Paolo Bonzini <pbonzini@redhat.com>
Reviewed-by: Eric Blake <eblake@redhat.com>
Signed-off-by: Kevin Wolf <kwolf@redhat.com>
2012-09-28 23:22:58 +08:00
|
|
|
|
2016-10-28 00:06:58 +08:00
|
|
|
static void block_job_event_completed(BlockJob *job, const char *msg)
|
2012-07-23 21:15:47 +08:00
|
|
|
{
|
2016-10-28 00:06:55 +08:00
|
|
|
if (block_job_is_internal(job)) {
|
|
|
|
return;
|
|
|
|
}
|
|
|
|
|
2014-06-18 14:43:47 +08:00
|
|
|
qapi_event_send_block_job_completed(job->driver->job_type,
|
2015-09-16 19:34:54 +08:00
|
|
|
job->id,
|
2014-06-18 14:43:47 +08:00
|
|
|
job->len,
|
|
|
|
job->offset,
|
|
|
|
job->speed,
|
|
|
|
!!msg,
|
|
|
|
msg,
|
|
|
|
&error_abort);
|
2012-07-23 21:15:47 +08:00
|
|
|
}
|
|
|
|
|
2018-03-10 16:27:42 +08:00
|
|
|
static int block_job_event_pending(BlockJob *job)
|
|
|
|
{
|
|
|
|
block_job_state_transition(job, BLOCK_JOB_STATUS_PENDING);
|
|
|
|
if (!job->auto_finalize && !block_job_is_internal(job)) {
|
|
|
|
qapi_event_send_block_job_pending(job->driver->job_type,
|
|
|
|
job->id,
|
|
|
|
&error_abort);
|
|
|
|
}
|
|
|
|
return 0;
|
|
|
|
}
|
|
|
|
|
2017-05-08 22:13:04 +08:00
|
|
|
/*
|
|
|
|
* API for block job drivers and the block layer. These functions are
|
|
|
|
* declared in blockjob_int.h.
|
|
|
|
*/
|
|
|
|
|
|
|
|
void *block_job_create(const char *job_id, const BlockJobDriver *driver,
|
2018-03-10 16:27:27 +08:00
|
|
|
BlockJobTxn *txn, BlockDriverState *bs, uint64_t perm,
|
2017-05-08 22:13:04 +08:00
|
|
|
uint64_t shared_perm, int64_t speed, int flags,
|
|
|
|
BlockCompletionFunc *cb, void *opaque, Error **errp)
|
|
|
|
{
|
|
|
|
BlockBackend *blk;
|
|
|
|
BlockJob *job;
|
|
|
|
int ret;
|
|
|
|
|
|
|
|
if (bs->job) {
|
|
|
|
error_setg(errp, QERR_DEVICE_IN_USE, bdrv_get_device_name(bs));
|
|
|
|
return NULL;
|
|
|
|
}
|
|
|
|
|
|
|
|
if (job_id == NULL && !(flags & BLOCK_JOB_INTERNAL)) {
|
|
|
|
job_id = bdrv_get_device_name(bs);
|
|
|
|
if (!*job_id) {
|
|
|
|
error_setg(errp, "An explicit job ID is required for this node");
|
|
|
|
return NULL;
|
|
|
|
}
|
|
|
|
}
|
|
|
|
|
|
|
|
if (job_id) {
|
|
|
|
if (flags & BLOCK_JOB_INTERNAL) {
|
|
|
|
error_setg(errp, "Cannot specify job ID for internal block job");
|
|
|
|
return NULL;
|
|
|
|
}
|
|
|
|
|
|
|
|
if (!id_wellformed(job_id)) {
|
|
|
|
error_setg(errp, "Invalid job ID '%s'", job_id);
|
|
|
|
return NULL;
|
|
|
|
}
|
|
|
|
|
|
|
|
if (block_job_get(job_id)) {
|
|
|
|
error_setg(errp, "Job ID '%s' already in use", job_id);
|
|
|
|
return NULL;
|
|
|
|
}
|
|
|
|
}
|
|
|
|
|
|
|
|
blk = blk_new(perm, shared_perm);
|
|
|
|
ret = blk_insert_bs(blk, bs, errp);
|
|
|
|
if (ret < 0) {
|
|
|
|
blk_unref(blk);
|
|
|
|
return NULL;
|
|
|
|
}
|
|
|
|
|
|
|
|
job = g_malloc0(driver->instance_size);
|
|
|
|
job->driver = driver;
|
|
|
|
job->id = g_strdup(job_id);
|
|
|
|
job->blk = blk;
|
|
|
|
job->cb = cb;
|
|
|
|
job->opaque = opaque;
|
|
|
|
job->busy = false;
|
|
|
|
job->paused = true;
|
|
|
|
job->pause_count = 1;
|
|
|
|
job->refcnt = 1;
|
2018-03-10 16:27:42 +08:00
|
|
|
job->auto_finalize = !(flags & BLOCK_JOB_MANUAL_FINALIZE);
|
2018-03-10 16:27:36 +08:00
|
|
|
job->auto_dismiss = !(flags & BLOCK_JOB_MANUAL_DISMISS);
|
2018-03-10 16:27:30 +08:00
|
|
|
block_job_state_transition(job, BLOCK_JOB_STATUS_CREATED);
|
2017-11-29 18:25:13 +08:00
|
|
|
aio_timer_init(qemu_get_aio_context(), &job->sleep_timer,
|
|
|
|
QEMU_CLOCK_REALTIME, SCALE_NS,
|
|
|
|
block_job_sleep_timer_cb, job);
|
2017-05-08 22:13:04 +08:00
|
|
|
|
|
|
|
error_setg(&job->blocker, "block device is in use by block job: %s",
|
2017-08-24 16:46:08 +08:00
|
|
|
BlockJobType_str(driver->job_type));
|
2017-05-08 22:13:04 +08:00
|
|
|
block_job_add_bdrv(job, "main node", bs, 0, BLK_PERM_ALL, &error_abort);
|
|
|
|
bs->job = job;
|
|
|
|
|
|
|
|
bdrv_op_unblock(bs, BLOCK_OP_TYPE_DATAPLANE, job->blocker);
|
|
|
|
|
|
|
|
QLIST_INSERT_HEAD(&block_jobs, job, job_list);
|
|
|
|
|
|
|
|
blk_add_aio_context_notifier(blk, block_job_attached_aio_context,
|
|
|
|
block_job_detach_aio_context, job);
|
|
|
|
|
|
|
|
/* Only set speed when necessary to avoid NotSupported error */
|
|
|
|
if (speed != 0) {
|
|
|
|
Error *local_err = NULL;
|
|
|
|
|
|
|
|
block_job_set_speed(job, speed, &local_err);
|
|
|
|
if (local_err) {
|
2018-03-10 16:27:35 +08:00
|
|
|
block_job_early_fail(job);
|
2017-05-08 22:13:04 +08:00
|
|
|
error_propagate(errp, local_err);
|
|
|
|
return NULL;
|
|
|
|
}
|
|
|
|
}
|
2018-03-10 16:27:27 +08:00
|
|
|
|
|
|
|
/* Single jobs are modeled as single-job transactions for sake of
|
|
|
|
* consolidating the job management logic */
|
|
|
|
if (!txn) {
|
|
|
|
txn = block_job_txn_new();
|
|
|
|
block_job_txn_add_job(txn, job);
|
|
|
|
block_job_txn_unref(txn);
|
|
|
|
} else {
|
|
|
|
block_job_txn_add_job(txn, job);
|
|
|
|
}
|
|
|
|
|
2017-05-08 22:13:04 +08:00
|
|
|
return job;
|
|
|
|
}
|
|
|
|
|
2017-05-08 22:13:03 +08:00
|
|
|
void block_job_pause_all(void)
|
|
|
|
{
|
|
|
|
BlockJob *job = NULL;
|
|
|
|
while ((job = block_job_next(job))) {
|
|
|
|
AioContext *aio_context = blk_get_aio_context(job->blk);
|
|
|
|
|
|
|
|
aio_context_acquire(aio_context);
|
2017-11-30 01:56:34 +08:00
|
|
|
block_job_ref(job);
|
2017-05-08 22:13:03 +08:00
|
|
|
block_job_pause(job);
|
|
|
|
aio_context_release(aio_context);
|
|
|
|
}
|
|
|
|
}
|
|
|
|
|
2017-05-08 22:13:04 +08:00
|
|
|
void block_job_early_fail(BlockJob *job)
|
|
|
|
{
|
2018-03-10 16:27:35 +08:00
|
|
|
assert(job->status == BLOCK_JOB_STATUS_CREATED);
|
|
|
|
block_job_decommission(job);
|
2017-05-08 22:13:04 +08:00
|
|
|
}
|
|
|
|
|
|
|
|
void block_job_completed(BlockJob *job, int ret)
|
|
|
|
{
|
2018-03-10 16:27:27 +08:00
|
|
|
assert(job && job->txn && !job->completed);
|
2017-05-08 22:13:04 +08:00
|
|
|
assert(blk_bs(job->blk)->job == job);
|
|
|
|
job->completed = true;
|
|
|
|
job->ret = ret;
|
2018-03-10 16:27:37 +08:00
|
|
|
block_job_update_rc(job);
|
|
|
|
trace_block_job_completed(job, ret, job->ret);
|
|
|
|
if (job->ret) {
|
2017-05-08 22:13:04 +08:00
|
|
|
block_job_completed_txn_abort(job);
|
|
|
|
} else {
|
|
|
|
block_job_completed_txn_success(job);
|
|
|
|
}
|
|
|
|
}
|
|
|
|
|
|
|
|
static bool block_job_should_pause(BlockJob *job)
|
|
|
|
{
|
|
|
|
return job->pause_count > 0;
|
|
|
|
}
|
|
|
|
|
2017-11-29 18:25:13 +08:00
|
|
|
/* Yield, and schedule a timer to reenter the coroutine after @ns nanoseconds.
|
|
|
|
* Reentering the job coroutine with block_job_enter() before the timer has
|
|
|
|
* expired is allowed and cancels the timer.
|
|
|
|
*
|
|
|
|
* If @ns is (uint64_t) -1, no timer is scheduled and block_job_enter() must be
|
|
|
|
* called explicitly. */
|
|
|
|
static void block_job_do_yield(BlockJob *job, uint64_t ns)
|
2017-11-29 18:25:12 +08:00
|
|
|
{
|
2017-11-29 18:25:13 +08:00
|
|
|
block_job_lock();
|
|
|
|
if (ns != -1) {
|
|
|
|
timer_mod(&job->sleep_timer, ns);
|
|
|
|
}
|
2017-11-29 18:25:12 +08:00
|
|
|
job->busy = false;
|
2017-11-29 18:25:13 +08:00
|
|
|
block_job_unlock();
|
2017-11-29 18:25:12 +08:00
|
|
|
qemu_coroutine_yield();
|
|
|
|
|
|
|
|
/* Set by block_job_enter before re-entering the coroutine. */
|
|
|
|
assert(job->busy);
|
|
|
|
}
|
|
|
|
|
2017-05-08 22:13:04 +08:00
|
|
|
void coroutine_fn block_job_pause_point(BlockJob *job)
|
|
|
|
{
|
|
|
|
assert(job && block_job_started(job));
|
|
|
|
|
|
|
|
if (!block_job_should_pause(job)) {
|
|
|
|
return;
|
|
|
|
}
|
|
|
|
if (block_job_is_cancelled(job)) {
|
|
|
|
return;
|
|
|
|
}
|
|
|
|
|
|
|
|
if (job->driver->pause) {
|
|
|
|
job->driver->pause(job);
|
|
|
|
}
|
|
|
|
|
|
|
|
if (block_job_should_pause(job) && !block_job_is_cancelled(job)) {
|
blockjobs: add status enum
We're about to add several new states, and booleans are becoming
unwieldly and difficult to reason about. It would help to have a
more explicit bookkeeping of the state of blockjobs. To this end,
add a new "status" field and add our existing states in a redundant
manner alongside the bools they are replacing:
UNDEFINED: Placeholder, default state. Not currently visible to QMP
unless changes occur in the future to allow creating jobs
without starting them via QMP.
CREATED: replaces !!job->co && paused && !busy
RUNNING: replaces effectively (!paused && busy)
PAUSED: Nearly redundant with info->paused, which shows pause_count.
This reports the actual status of the job, which almost always
matches the paused request status. It differs in that it is
strictly only true when the job has actually gone dormant.
READY: replaces job->ready.
STANDBY: Paused, but job->ready is true.
New state additions in coming commits will not be quite so redundant:
WAITING: Waiting on transaction. This job has finished all the work
it can until the transaction converges, fails, or is canceled.
PENDING: Pending authorization from user. This job has finished all the
work it can until the job or transaction is finalized via
block_job_finalize. This implies the transaction has converged
and left the WAITING phase.
ABORTING: Job has encountered an error condition and is in the process
of aborting.
CONCLUDED: Job has ceased all operations and has a return code available
for query and may be dismissed via block_job_dismiss.
NULL: Job has been dismissed and (should) be destroyed. Should never
be visible to QMP.
Some of these states appear somewhat superfluous, but it helps define the
expected flow of a job; so some of the states wind up being synchronous
empty transitions. Importantly, jobs can be in only one of these states
at any given time, which helps code and external users alike reason about
the current condition of a job unambiguously.
Signed-off-by: John Snow <jsnow@redhat.com>
Signed-off-by: Kevin Wolf <kwolf@redhat.com>
2018-03-10 16:27:29 +08:00
|
|
|
BlockJobStatus status = job->status;
|
2018-03-10 16:27:30 +08:00
|
|
|
block_job_state_transition(job, status == BLOCK_JOB_STATUS_READY ? \
|
|
|
|
BLOCK_JOB_STATUS_STANDBY : \
|
|
|
|
BLOCK_JOB_STATUS_PAUSED);
|
2017-05-08 22:13:04 +08:00
|
|
|
job->paused = true;
|
2017-11-29 18:25:13 +08:00
|
|
|
block_job_do_yield(job, -1);
|
2017-05-08 22:13:04 +08:00
|
|
|
job->paused = false;
|
2018-03-10 16:27:30 +08:00
|
|
|
block_job_state_transition(job, status);
|
2017-05-08 22:13:04 +08:00
|
|
|
}
|
|
|
|
|
|
|
|
if (job->driver->resume) {
|
|
|
|
job->driver->resume(job);
|
|
|
|
}
|
|
|
|
}
|
|
|
|
|
2017-05-08 22:13:03 +08:00
|
|
|
void block_job_resume_all(void)
|
|
|
|
{
|
2017-11-30 01:56:34 +08:00
|
|
|
BlockJob *job, *next;
|
|
|
|
|
|
|
|
QLIST_FOREACH_SAFE(job, &block_jobs, job_list, next) {
|
2017-05-08 22:13:03 +08:00
|
|
|
AioContext *aio_context = blk_get_aio_context(job->blk);
|
|
|
|
|
|
|
|
aio_context_acquire(aio_context);
|
|
|
|
block_job_resume(job);
|
2017-11-30 01:56:34 +08:00
|
|
|
block_job_unref(job);
|
2017-05-08 22:13:03 +08:00
|
|
|
aio_context_release(aio_context);
|
|
|
|
}
|
|
|
|
}
|
|
|
|
|
2017-12-14 04:46:11 +08:00
|
|
|
/*
|
|
|
|
* Conditionally enter a block_job pending a call to fn() while
|
|
|
|
* under the block_job_lock critical section.
|
|
|
|
*/
|
|
|
|
static void block_job_enter_cond(BlockJob *job, bool(*fn)(BlockJob *job))
|
2017-05-08 22:13:04 +08:00
|
|
|
{
|
2017-05-08 22:13:10 +08:00
|
|
|
if (!block_job_started(job)) {
|
|
|
|
return;
|
|
|
|
}
|
|
|
|
if (job->deferred_to_main_loop) {
|
|
|
|
return;
|
|
|
|
}
|
|
|
|
|
2017-11-29 18:25:13 +08:00
|
|
|
block_job_lock();
|
2017-11-29 18:25:12 +08:00
|
|
|
if (job->busy) {
|
2017-11-29 18:25:13 +08:00
|
|
|
block_job_unlock();
|
2017-11-29 18:25:12 +08:00
|
|
|
return;
|
2017-05-08 22:13:04 +08:00
|
|
|
}
|
2017-11-29 18:25:12 +08:00
|
|
|
|
2017-12-14 04:46:11 +08:00
|
|
|
if (fn && !fn(job)) {
|
|
|
|
block_job_unlock();
|
|
|
|
return;
|
|
|
|
}
|
|
|
|
|
2017-11-29 18:25:13 +08:00
|
|
|
assert(!job->deferred_to_main_loop);
|
|
|
|
timer_del(&job->sleep_timer);
|
2017-11-29 18:25:12 +08:00
|
|
|
job->busy = true;
|
2017-11-29 18:25:13 +08:00
|
|
|
block_job_unlock();
|
2017-11-29 18:25:12 +08:00
|
|
|
aio_co_wake(job->co);
|
2017-05-08 22:13:04 +08:00
|
|
|
}
|
|
|
|
|
2017-12-14 04:46:11 +08:00
|
|
|
void block_job_enter(BlockJob *job)
|
|
|
|
{
|
|
|
|
block_job_enter_cond(job, NULL);
|
|
|
|
}
|
|
|
|
|
2017-05-08 22:13:04 +08:00
|
|
|
bool block_job_is_cancelled(BlockJob *job)
|
|
|
|
{
|
|
|
|
return job->cancelled;
|
|
|
|
}
|
|
|
|
|
2017-11-29 18:25:11 +08:00
|
|
|
void block_job_sleep_ns(BlockJob *job, int64_t ns)
|
2017-05-08 22:13:04 +08:00
|
|
|
{
|
|
|
|
assert(job->busy);
|
|
|
|
|
|
|
|
/* Check cancellation *before* setting busy = false, too! */
|
|
|
|
if (block_job_is_cancelled(job)) {
|
|
|
|
return;
|
|
|
|
}
|
|
|
|
|
|
|
|
if (!block_job_should_pause(job)) {
|
2017-11-29 18:25:13 +08:00
|
|
|
block_job_do_yield(job, qemu_clock_get_ns(QEMU_CLOCK_REALTIME) + ns);
|
2017-05-08 22:13:04 +08:00
|
|
|
}
|
|
|
|
|
|
|
|
block_job_pause_point(job);
|
|
|
|
}
|
|
|
|
|
|
|
|
void block_job_yield(BlockJob *job)
|
|
|
|
{
|
|
|
|
assert(job->busy);
|
|
|
|
|
|
|
|
/* Check cancellation *before* setting busy = false, too! */
|
|
|
|
if (block_job_is_cancelled(job)) {
|
|
|
|
return;
|
|
|
|
}
|
|
|
|
|
|
|
|
if (!block_job_should_pause(job)) {
|
2017-11-29 18:25:13 +08:00
|
|
|
block_job_do_yield(job, -1);
|
2017-05-08 22:13:04 +08:00
|
|
|
}
|
|
|
|
|
|
|
|
block_job_pause_point(job);
|
|
|
|
}
|
|
|
|
|
2017-05-08 22:13:05 +08:00
|
|
|
void block_job_iostatus_reset(BlockJob *job)
|
|
|
|
{
|
2017-05-08 22:13:06 +08:00
|
|
|
if (job->iostatus == BLOCK_DEVICE_IO_STATUS_OK) {
|
|
|
|
return;
|
|
|
|
}
|
|
|
|
assert(job->user_paused && job->pause_count > 0);
|
2017-05-08 22:13:05 +08:00
|
|
|
job->iostatus = BLOCK_DEVICE_IO_STATUS_OK;
|
|
|
|
}
|
|
|
|
|
2014-06-18 14:43:47 +08:00
|
|
|
void block_job_event_ready(BlockJob *job)
|
2012-07-23 21:15:47 +08:00
|
|
|
{
|
2018-03-10 16:27:30 +08:00
|
|
|
block_job_state_transition(job, BLOCK_JOB_STATUS_READY);
|
2014-10-24 21:57:34 +08:00
|
|
|
job->ready = true;
|
|
|
|
|
2016-10-28 00:06:55 +08:00
|
|
|
if (block_job_is_internal(job)) {
|
|
|
|
return;
|
|
|
|
}
|
|
|
|
|
2014-06-28 01:24:13 +08:00
|
|
|
qapi_event_send_block_job_ready(job->driver->job_type,
|
2015-09-16 19:34:54 +08:00
|
|
|
job->id,
|
2014-06-28 01:24:13 +08:00
|
|
|
job->len,
|
|
|
|
job->offset,
|
|
|
|
job->speed, &error_abort);
|
2012-07-23 21:15:47 +08:00
|
|
|
}
|
|
|
|
|
2016-04-18 17:36:38 +08:00
|
|
|
BlockErrorAction block_job_error_action(BlockJob *job, BlockdevOnError on_err,
|
block: introduce block job error
The following behaviors are possible:
'report': The behavior is the same as in 1.1. An I/O error,
respectively during a read or a write, will complete the job immediately
with an error code.
'ignore': An I/O error, respectively during a read or a write, will be
ignored. For streaming, the job will complete with an error and the
backing file will be left in place. For mirroring, the sector will be
marked again as dirty and re-examined later.
'stop': The job will be paused and the job iostatus will be set to
failed or nospace, while the VM will keep running. This can only be
specified if the block device has rerror=stop and werror=stop or enospc.
'enospc': Behaves as 'stop' for ENOSPC errors, 'report' for others.
In all cases, even for 'report', the I/O error is reported as a QMP
event BLOCK_JOB_ERROR, with the same arguments as BLOCK_IO_ERROR.
It is possible that while stopping the VM a BLOCK_IO_ERROR event will be
reported and will clobber the event from BLOCK_JOB_ERROR, or vice versa.
This is not really avoidable since stopping the VM completes all pending
I/O requests. In fact, it is already possible now that a series of
BLOCK_IO_ERROR events are reported with rerror=stop, because vm_stop
calls bdrv_drain_all and this can generate further errors.
Signed-off-by: Paolo Bonzini <pbonzini@redhat.com>
Reviewed-by: Eric Blake <eblake@redhat.com>
Signed-off-by: Kevin Wolf <kwolf@redhat.com>
2012-09-28 23:22:58 +08:00
|
|
|
int is_read, int error)
|
|
|
|
{
|
|
|
|
BlockErrorAction action;
|
|
|
|
|
|
|
|
switch (on_err) {
|
|
|
|
case BLOCKDEV_ON_ERROR_ENOSPC:
|
2016-06-29 23:41:35 +08:00
|
|
|
case BLOCKDEV_ON_ERROR_AUTO:
|
2014-06-18 14:43:30 +08:00
|
|
|
action = (error == ENOSPC) ?
|
|
|
|
BLOCK_ERROR_ACTION_STOP : BLOCK_ERROR_ACTION_REPORT;
|
block: introduce block job error
The following behaviors are possible:
'report': The behavior is the same as in 1.1. An I/O error,
respectively during a read or a write, will complete the job immediately
with an error code.
'ignore': An I/O error, respectively during a read or a write, will be
ignored. For streaming, the job will complete with an error and the
backing file will be left in place. For mirroring, the sector will be
marked again as dirty and re-examined later.
'stop': The job will be paused and the job iostatus will be set to
failed or nospace, while the VM will keep running. This can only be
specified if the block device has rerror=stop and werror=stop or enospc.
'enospc': Behaves as 'stop' for ENOSPC errors, 'report' for others.
In all cases, even for 'report', the I/O error is reported as a QMP
event BLOCK_JOB_ERROR, with the same arguments as BLOCK_IO_ERROR.
It is possible that while stopping the VM a BLOCK_IO_ERROR event will be
reported and will clobber the event from BLOCK_JOB_ERROR, or vice versa.
This is not really avoidable since stopping the VM completes all pending
I/O requests. In fact, it is already possible now that a series of
BLOCK_IO_ERROR events are reported with rerror=stop, because vm_stop
calls bdrv_drain_all and this can generate further errors.
Signed-off-by: Paolo Bonzini <pbonzini@redhat.com>
Reviewed-by: Eric Blake <eblake@redhat.com>
Signed-off-by: Kevin Wolf <kwolf@redhat.com>
2012-09-28 23:22:58 +08:00
|
|
|
break;
|
|
|
|
case BLOCKDEV_ON_ERROR_STOP:
|
2014-06-18 14:43:30 +08:00
|
|
|
action = BLOCK_ERROR_ACTION_STOP;
|
block: introduce block job error
The following behaviors are possible:
'report': The behavior is the same as in 1.1. An I/O error,
respectively during a read or a write, will complete the job immediately
with an error code.
'ignore': An I/O error, respectively during a read or a write, will be
ignored. For streaming, the job will complete with an error and the
backing file will be left in place. For mirroring, the sector will be
marked again as dirty and re-examined later.
'stop': The job will be paused and the job iostatus will be set to
failed or nospace, while the VM will keep running. This can only be
specified if the block device has rerror=stop and werror=stop or enospc.
'enospc': Behaves as 'stop' for ENOSPC errors, 'report' for others.
In all cases, even for 'report', the I/O error is reported as a QMP
event BLOCK_JOB_ERROR, with the same arguments as BLOCK_IO_ERROR.
It is possible that while stopping the VM a BLOCK_IO_ERROR event will be
reported and will clobber the event from BLOCK_JOB_ERROR, or vice versa.
This is not really avoidable since stopping the VM completes all pending
I/O requests. In fact, it is already possible now that a series of
BLOCK_IO_ERROR events are reported with rerror=stop, because vm_stop
calls bdrv_drain_all and this can generate further errors.
Signed-off-by: Paolo Bonzini <pbonzini@redhat.com>
Reviewed-by: Eric Blake <eblake@redhat.com>
Signed-off-by: Kevin Wolf <kwolf@redhat.com>
2012-09-28 23:22:58 +08:00
|
|
|
break;
|
|
|
|
case BLOCKDEV_ON_ERROR_REPORT:
|
2014-06-18 14:43:30 +08:00
|
|
|
action = BLOCK_ERROR_ACTION_REPORT;
|
block: introduce block job error
The following behaviors are possible:
'report': The behavior is the same as in 1.1. An I/O error,
respectively during a read or a write, will complete the job immediately
with an error code.
'ignore': An I/O error, respectively during a read or a write, will be
ignored. For streaming, the job will complete with an error and the
backing file will be left in place. For mirroring, the sector will be
marked again as dirty and re-examined later.
'stop': The job will be paused and the job iostatus will be set to
failed or nospace, while the VM will keep running. This can only be
specified if the block device has rerror=stop and werror=stop or enospc.
'enospc': Behaves as 'stop' for ENOSPC errors, 'report' for others.
In all cases, even for 'report', the I/O error is reported as a QMP
event BLOCK_JOB_ERROR, with the same arguments as BLOCK_IO_ERROR.
It is possible that while stopping the VM a BLOCK_IO_ERROR event will be
reported and will clobber the event from BLOCK_JOB_ERROR, or vice versa.
This is not really avoidable since stopping the VM completes all pending
I/O requests. In fact, it is already possible now that a series of
BLOCK_IO_ERROR events are reported with rerror=stop, because vm_stop
calls bdrv_drain_all and this can generate further errors.
Signed-off-by: Paolo Bonzini <pbonzini@redhat.com>
Reviewed-by: Eric Blake <eblake@redhat.com>
Signed-off-by: Kevin Wolf <kwolf@redhat.com>
2012-09-28 23:22:58 +08:00
|
|
|
break;
|
|
|
|
case BLOCKDEV_ON_ERROR_IGNORE:
|
2014-06-18 14:43:30 +08:00
|
|
|
action = BLOCK_ERROR_ACTION_IGNORE;
|
block: introduce block job error
The following behaviors are possible:
'report': The behavior is the same as in 1.1. An I/O error,
respectively during a read or a write, will complete the job immediately
with an error code.
'ignore': An I/O error, respectively during a read or a write, will be
ignored. For streaming, the job will complete with an error and the
backing file will be left in place. For mirroring, the sector will be
marked again as dirty and re-examined later.
'stop': The job will be paused and the job iostatus will be set to
failed or nospace, while the VM will keep running. This can only be
specified if the block device has rerror=stop and werror=stop or enospc.
'enospc': Behaves as 'stop' for ENOSPC errors, 'report' for others.
In all cases, even for 'report', the I/O error is reported as a QMP
event BLOCK_JOB_ERROR, with the same arguments as BLOCK_IO_ERROR.
It is possible that while stopping the VM a BLOCK_IO_ERROR event will be
reported and will clobber the event from BLOCK_JOB_ERROR, or vice versa.
This is not really avoidable since stopping the VM completes all pending
I/O requests. In fact, it is already possible now that a series of
BLOCK_IO_ERROR events are reported with rerror=stop, because vm_stop
calls bdrv_drain_all and this can generate further errors.
Signed-off-by: Paolo Bonzini <pbonzini@redhat.com>
Reviewed-by: Eric Blake <eblake@redhat.com>
Signed-off-by: Kevin Wolf <kwolf@redhat.com>
2012-09-28 23:22:58 +08:00
|
|
|
break;
|
|
|
|
default:
|
|
|
|
abort();
|
|
|
|
}
|
2016-10-28 00:06:55 +08:00
|
|
|
if (!block_job_is_internal(job)) {
|
|
|
|
qapi_event_send_block_job_error(job->id,
|
|
|
|
is_read ? IO_OPERATION_TYPE_READ :
|
|
|
|
IO_OPERATION_TYPE_WRITE,
|
|
|
|
action, &error_abort);
|
|
|
|
}
|
2014-06-18 14:43:30 +08:00
|
|
|
if (action == BLOCK_ERROR_ACTION_STOP) {
|
blockjobs: add block_job_verb permission table
Which commands ("verbs") are appropriate for jobs in which state is
also somewhat burdensome to keep track of.
As of this commit, it looks rather useless, but begins to look more
interesting the more states we add to the STM table.
A recurring theme is that no verb will apply to an 'undefined' job.
Further, it's not presently possible to restrict the "pause" or "resume"
verbs any more than they are in this commit because of the asynchronous
nature of how jobs enter the PAUSED state; justifications for some
seemingly erroneous applications are given below.
=====
Verbs
=====
Cancel: Any state except undefined.
Pause: Any state except undefined;
'created': Requests that the job pauses as it starts.
'running': Normal usage. (PAUSED)
'paused': The job may be paused for internal reasons,
but the user may wish to force an indefinite
user-pause, so this is allowed.
'ready': Normal usage. (STANDBY)
'standby': Same logic as above.
Resume: Any state except undefined;
'created': Will lift a user's pause-on-start request.
'running': Will lift a pause request before it takes effect.
'paused': Normal usage.
'ready': Will lift a pause request before it takes effect.
'standby': Normal usage.
Set-speed: Any state except undefined, though ready may not be meaningful.
Complete: Only a 'ready' job may accept a complete request.
=======
Changes
=======
(1)
To facilitate "nice" error checking, all five major block-job verb
interfaces in blockjob.c now support an errp parameter:
- block_job_user_cancel is added as a new interface.
- block_job_user_pause gains an errp paramter
- block_job_user_resume gains an errp parameter
- block_job_set_speed already had an errp parameter.
- block_job_complete already had an errp parameter.
(2)
block-job-pause and block-job-resume will no longer no-op when trying
to pause an already paused job, or trying to resume a job that isn't
paused. These functions will now report that they did not perform the
action requested because it was not possible.
iotests have been adjusted to address this new behavior.
(3)
block-job-complete doesn't worry about checking !block_job_started,
because the permission table guards against this.
(4)
test-bdrv-drain's job implementation needs to announce that it is
'ready' now, in order to be completed.
Signed-off-by: John Snow <jsnow@redhat.com>
Reviewed-by: Kevin Wolf <kwolf@redhat.com>
Reviewed-by: Eric Blake <eblake@redhat.com>
Signed-off-by: Kevin Wolf <kwolf@redhat.com>
2018-03-10 16:27:32 +08:00
|
|
|
block_job_pause(job);
|
2015-04-03 22:05:18 +08:00
|
|
|
/* make the pause user visible, which will be resumed from QMP. */
|
blockjobs: add block_job_verb permission table
Which commands ("verbs") are appropriate for jobs in which state is
also somewhat burdensome to keep track of.
As of this commit, it looks rather useless, but begins to look more
interesting the more states we add to the STM table.
A recurring theme is that no verb will apply to an 'undefined' job.
Further, it's not presently possible to restrict the "pause" or "resume"
verbs any more than they are in this commit because of the asynchronous
nature of how jobs enter the PAUSED state; justifications for some
seemingly erroneous applications are given below.
=====
Verbs
=====
Cancel: Any state except undefined.
Pause: Any state except undefined;
'created': Requests that the job pauses as it starts.
'running': Normal usage. (PAUSED)
'paused': The job may be paused for internal reasons,
but the user may wish to force an indefinite
user-pause, so this is allowed.
'ready': Normal usage. (STANDBY)
'standby': Same logic as above.
Resume: Any state except undefined;
'created': Will lift a user's pause-on-start request.
'running': Will lift a pause request before it takes effect.
'paused': Normal usage.
'ready': Will lift a pause request before it takes effect.
'standby': Normal usage.
Set-speed: Any state except undefined, though ready may not be meaningful.
Complete: Only a 'ready' job may accept a complete request.
=======
Changes
=======
(1)
To facilitate "nice" error checking, all five major block-job verb
interfaces in blockjob.c now support an errp parameter:
- block_job_user_cancel is added as a new interface.
- block_job_user_pause gains an errp paramter
- block_job_user_resume gains an errp parameter
- block_job_set_speed already had an errp parameter.
- block_job_complete already had an errp parameter.
(2)
block-job-pause and block-job-resume will no longer no-op when trying
to pause an already paused job, or trying to resume a job that isn't
paused. These functions will now report that they did not perform the
action requested because it was not possible.
iotests have been adjusted to address this new behavior.
(3)
block-job-complete doesn't worry about checking !block_job_started,
because the permission table guards against this.
(4)
test-bdrv-drain's job implementation needs to announce that it is
'ready' now, in order to be completed.
Signed-off-by: John Snow <jsnow@redhat.com>
Reviewed-by: Kevin Wolf <kwolf@redhat.com>
Reviewed-by: Eric Blake <eblake@redhat.com>
Signed-off-by: Kevin Wolf <kwolf@redhat.com>
2018-03-10 16:27:32 +08:00
|
|
|
job->user_paused = true;
|
block: introduce block job error
The following behaviors are possible:
'report': The behavior is the same as in 1.1. An I/O error,
respectively during a read or a write, will complete the job immediately
with an error code.
'ignore': An I/O error, respectively during a read or a write, will be
ignored. For streaming, the job will complete with an error and the
backing file will be left in place. For mirroring, the sector will be
marked again as dirty and re-examined later.
'stop': The job will be paused and the job iostatus will be set to
failed or nospace, while the VM will keep running. This can only be
specified if the block device has rerror=stop and werror=stop or enospc.
'enospc': Behaves as 'stop' for ENOSPC errors, 'report' for others.
In all cases, even for 'report', the I/O error is reported as a QMP
event BLOCK_JOB_ERROR, with the same arguments as BLOCK_IO_ERROR.
It is possible that while stopping the VM a BLOCK_IO_ERROR event will be
reported and will clobber the event from BLOCK_JOB_ERROR, or vice versa.
This is not really avoidable since stopping the VM completes all pending
I/O requests. In fact, it is already possible now that a series of
BLOCK_IO_ERROR events are reported with rerror=stop, because vm_stop
calls bdrv_drain_all and this can generate further errors.
Signed-off-by: Paolo Bonzini <pbonzini@redhat.com>
Reviewed-by: Eric Blake <eblake@redhat.com>
Signed-off-by: Kevin Wolf <kwolf@redhat.com>
2012-09-28 23:22:58 +08:00
|
|
|
block_job_iostatus_set_err(job, error);
|
|
|
|
}
|
|
|
|
return action;
|
|
|
|
}
|
2014-10-21 19:03:54 +08:00
|
|
|
|
|
|
|
typedef struct {
|
|
|
|
BlockJob *job;
|
|
|
|
AioContext *aio_context;
|
|
|
|
BlockJobDeferToMainLoopFn *fn;
|
|
|
|
void *opaque;
|
|
|
|
} BlockJobDeferToMainLoopData;
|
|
|
|
|
|
|
|
static void block_job_defer_to_main_loop_bh(void *opaque)
|
|
|
|
{
|
|
|
|
BlockJobDeferToMainLoopData *data = opaque;
|
|
|
|
AioContext *aio_context;
|
|
|
|
|
|
|
|
/* Prevent race with block_job_defer_to_main_loop() */
|
|
|
|
aio_context_acquire(data->aio_context);
|
|
|
|
|
|
|
|
/* Fetch BDS AioContext again, in case it has changed */
|
2016-04-08 20:51:09 +08:00
|
|
|
aio_context = blk_get_aio_context(data->job->blk);
|
2017-03-22 01:48:10 +08:00
|
|
|
if (aio_context != data->aio_context) {
|
|
|
|
aio_context_acquire(aio_context);
|
|
|
|
}
|
2014-10-21 19:03:54 +08:00
|
|
|
|
|
|
|
data->fn(data->job, data->opaque);
|
|
|
|
|
2017-03-22 01:48:10 +08:00
|
|
|
if (aio_context != data->aio_context) {
|
|
|
|
aio_context_release(aio_context);
|
|
|
|
}
|
2014-10-21 19:03:54 +08:00
|
|
|
|
|
|
|
aio_context_release(data->aio_context);
|
|
|
|
|
|
|
|
g_free(data);
|
|
|
|
}
|
|
|
|
|
|
|
|
void block_job_defer_to_main_loop(BlockJob *job,
|
|
|
|
BlockJobDeferToMainLoopFn *fn,
|
|
|
|
void *opaque)
|
|
|
|
{
|
|
|
|
BlockJobDeferToMainLoopData *data = g_malloc(sizeof(*data));
|
|
|
|
data->job = job;
|
2016-04-08 20:51:09 +08:00
|
|
|
data->aio_context = blk_get_aio_context(job->blk);
|
2014-10-21 19:03:54 +08:00
|
|
|
data->fn = fn;
|
|
|
|
data->opaque = opaque;
|
2016-02-02 10:12:24 +08:00
|
|
|
job->deferred_to_main_loop = true;
|
2014-10-21 19:03:54 +08:00
|
|
|
|
2016-10-04 00:14:16 +08:00
|
|
|
aio_bh_schedule_oneshot(qemu_get_aio_context(),
|
|
|
|
block_job_defer_to_main_loop_bh, data);
|
2014-10-21 19:03:54 +08:00
|
|
|
}
|