2 * Copyright (c) 2000-2005 Silicon Graphics, Inc.
5 * This program is free software; you can redistribute it and/or
6 * modify it under the terms of the GNU General Public License as
7 * published by the Free Software Foundation.
9 * This program is distributed in the hope that it would be useful,
10 * but WITHOUT ANY WARRANTY; without even the implied warranty of
11 * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
12 * GNU General Public License for more details.
14 * You should have received a copy of the GNU General Public License
15 * along with this program; if not, write the Free Software Foundation,
16 * Inc., 51 Franklin St, Fifth Floor, Boston, MA 02110-1301 USA
19 #include <linux/capability.h>
26 #include "xfs_trans.h"
30 #include "xfs_alloc.h"
31 #include "xfs_dmapi.h"
32 #include "xfs_quota.h"
33 #include "xfs_mount.h"
34 #include "xfs_bmap_btree.h"
35 #include "xfs_alloc_btree.h"
36 #include "xfs_ialloc_btree.h"
37 #include "xfs_dir2_sf.h"
38 #include "xfs_attr_sf.h"
39 #include "xfs_dinode.h"
40 #include "xfs_inode.h"
41 #include "xfs_ialloc.h"
42 #include "xfs_itable.h"
44 #include "xfs_btree.h"
45 #include "xfs_rtalloc.h"
46 #include "xfs_error.h"
50 #include "xfs_buf_item.h"
51 #include "xfs_utils.h"
55 # define qdprintk(s, args...) cmn_err(CE_DEBUG, s, ## args)
57 # define qdprintk(s, args...) do { } while (0)
60 STATIC int xfs_qm_log_quotaoff(xfs_mount_t *, xfs_qoff_logitem_t **, uint);
61 STATIC int xfs_qm_log_quotaoff_end(xfs_mount_t *, xfs_qoff_logitem_t *,
63 STATIC uint xfs_qm_export_flags(uint);
64 STATIC uint xfs_qm_export_qtype_flags(uint);
65 STATIC void xfs_qm_export_dquot(xfs_mount_t *, xfs_disk_dquot_t *,
70 * Turn off quota accounting and/or enforcement for all udquots and/or
71 * gdquots. Called only at unmount time.
73 * This assumes that there are no dquots of this file system cached
74 * incore, and modifies the ondisk dquot directly. Therefore, for example,
75 * it is an error to call this twice, without purging the cache.
78 xfs_qm_scall_quotaoff(
84 uint inactivate_flags;
85 xfs_qoff_logitem_t *qoffstart;
89 * No file system can have quotas enabled on disk but not in core.
90 * Note that quota utilities (like quotaoff) _expect_
91 * errno == EEXIST here.
93 if ((mp->m_qflags & flags) == 0)
94 return XFS_ERROR(EEXIST);
97 flags &= (XFS_ALL_QUOTA_ACCT | XFS_ALL_QUOTA_ENFD);
100 * We don't want to deal with two quotaoffs messing up each other,
101 * so we're going to serialize it. quotaoff isn't exactly a performance
103 * If quotaoff, then we must be dealing with the root filesystem.
105 ASSERT(mp->m_quotainfo);
107 mutex_lock(&(XFS_QI_QOFFLOCK(mp)));
109 ASSERT(mp->m_quotainfo);
112 * If we're just turning off quota enforcement, change mp and go.
114 if ((flags & XFS_ALL_QUOTA_ACCT) == 0) {
115 mp->m_qflags &= ~(flags);
117 spin_lock(&mp->m_sb_lock);
118 mp->m_sb.sb_qflags = mp->m_qflags;
119 spin_unlock(&mp->m_sb_lock);
120 mutex_unlock(&(XFS_QI_QOFFLOCK(mp)));
122 /* XXX what to do if error ? Revert back to old vals incore ? */
123 error = xfs_qm_write_sb_changes(mp, XFS_SB_QFLAGS);
128 inactivate_flags = 0;
130 * If accounting is off, we must turn enforcement off, clear the
131 * quota 'CHKD' certificate to make it known that we have to
132 * do a quotacheck the next time this quota is turned on.
134 if (flags & XFS_UQUOTA_ACCT) {
135 dqtype |= XFS_QMOPT_UQUOTA;
136 flags |= (XFS_UQUOTA_CHKD | XFS_UQUOTA_ENFD);
137 inactivate_flags |= XFS_UQUOTA_ACTIVE;
139 if (flags & XFS_GQUOTA_ACCT) {
140 dqtype |= XFS_QMOPT_GQUOTA;
141 flags |= (XFS_OQUOTA_CHKD | XFS_OQUOTA_ENFD);
142 inactivate_flags |= XFS_GQUOTA_ACTIVE;
143 } else if (flags & XFS_PQUOTA_ACCT) {
144 dqtype |= XFS_QMOPT_PQUOTA;
145 flags |= (XFS_OQUOTA_CHKD | XFS_OQUOTA_ENFD);
146 inactivate_flags |= XFS_PQUOTA_ACTIVE;
150 * Nothing to do? Don't complain. This happens when we're just
151 * turning off quota enforcement.
153 if ((mp->m_qflags & flags) == 0) {
154 mutex_unlock(&(XFS_QI_QOFFLOCK(mp)));
159 * Write the LI_QUOTAOFF log record, and do SB changes atomically,
160 * and synchronously. If we fail to write, we should abort the
161 * operation as it cannot be recovered safely if we crash.
163 error = xfs_qm_log_quotaoff(mp, &qoffstart, flags);
168 * Next we clear the XFS_MOUNT_*DQ_ACTIVE bit(s) in the mount struct
169 * to take care of the race between dqget and quotaoff. We don't take
170 * any special locks to reset these bits. All processes need to check
171 * these bits *after* taking inode lock(s) to see if the particular
172 * quota type is in the process of being turned off. If *ACTIVE, it is
173 * guaranteed that all dquot structures and all quotainode ptrs will all
174 * stay valid as long as that inode is kept locked.
176 * There is no turning back after this.
178 mp->m_qflags &= ~inactivate_flags;
181 * Give back all the dquot reference(s) held by inodes.
182 * Here we go thru every single incore inode in this file system, and
183 * do a dqrele on the i_udquot/i_gdquot that it may have.
184 * Essentially, as long as somebody has an inode locked, this guarantees
185 * that quotas will not be turned off. This is handy because in a
186 * transaction once we lock the inode(s) and check for quotaon, we can
187 * depend on the quota inodes (and other things) being valid as long as
188 * we keep the lock(s).
190 xfs_qm_dqrele_all_inodes(mp, flags);
193 * Next we make the changes in the quota flag in the mount struct.
194 * This isn't protected by a particular lock directly, because we
195 * don't want to take a mrlock everytime we depend on quotas being on.
197 mp->m_qflags &= ~(flags);
200 * Go through all the dquots of this file system and purge them,
201 * according to what was turned off. We may not be able to get rid
202 * of all dquots, because dquots can have temporary references that
203 * are not attached to inodes. eg. xfs_setattr, xfs_create.
204 * So, if we couldn't purge all the dquots from the filesystem,
205 * we can't get rid of the incore data structures.
207 while ((nculprits = xfs_qm_dqpurge_all(mp, dqtype|XFS_QMOPT_QUOTAOFF)))
208 delay(10 * nculprits);
211 * Transactions that had started before ACTIVE state bit was cleared
212 * could have logged many dquots, so they'd have higher LSNs than
213 * the first QUOTAOFF log record does. If we happen to crash when
214 * the tail of the log has gone past the QUOTAOFF record, but
215 * before the last dquot modification, those dquots __will__
216 * recover, and that's not good.
218 * So, we have QUOTAOFF start and end logitems; the start
219 * logitem won't get overwritten until the end logitem appears...
221 error = xfs_qm_log_quotaoff_end(mp, qoffstart, flags);
223 /* We're screwed now. Shutdown is the only option. */
224 xfs_force_shutdown(mp, SHUTDOWN_CORRUPT_INCORE);
229 * If quotas is completely disabled, close shop.
231 if (((flags & XFS_MOUNT_QUOTA_ALL) == XFS_MOUNT_QUOTA_SET1) ||
232 ((flags & XFS_MOUNT_QUOTA_ALL) == XFS_MOUNT_QUOTA_SET2)) {
233 mutex_unlock(&(XFS_QI_QOFFLOCK(mp)));
234 xfs_qm_destroy_quotainfo(mp);
239 * Release our quotainode references, and vn_purge them,
240 * if we don't need them anymore.
242 if ((dqtype & XFS_QMOPT_UQUOTA) && XFS_QI_UQIP(mp)) {
243 IRELE(XFS_QI_UQIP(mp));
244 XFS_QI_UQIP(mp) = NULL;
246 if ((dqtype & (XFS_QMOPT_GQUOTA|XFS_QMOPT_PQUOTA)) && XFS_QI_GQIP(mp)) {
247 IRELE(XFS_QI_GQIP(mp));
248 XFS_QI_GQIP(mp) = NULL;
251 mutex_unlock(&(XFS_QI_QOFFLOCK(mp)));
257 xfs_qm_scall_trunc_qfiles(
261 int error = 0, error2 = 0;
264 if (!xfs_sb_version_hasquota(&mp->m_sb) || flags == 0) {
265 qdprintk("qtrunc flags=%x m_qflags=%x\n", flags, mp->m_qflags);
266 return XFS_ERROR(EINVAL);
269 if ((flags & XFS_DQ_USER) && mp->m_sb.sb_uquotino != NULLFSINO) {
270 error = xfs_iget(mp, NULL, mp->m_sb.sb_uquotino, 0, 0, &qip, 0);
272 error = xfs_truncate_file(mp, qip);
277 if ((flags & (XFS_DQ_GROUP|XFS_DQ_PROJ)) &&
278 mp->m_sb.sb_gquotino != NULLFSINO) {
279 error2 = xfs_iget(mp, NULL, mp->m_sb.sb_gquotino, 0, 0, &qip, 0);
281 error2 = xfs_truncate_file(mp, qip);
286 return error ? error : error2;
291 * Switch on (a given) quota enforcement for a filesystem. This takes
292 * effect immediately.
293 * (Switching on quota accounting must be done at mount time.)
296 xfs_qm_scall_quotaon(
305 flags &= (XFS_ALL_QUOTA_ACCT | XFS_ALL_QUOTA_ENFD);
307 * Switching on quota accounting must be done at mount time.
309 accflags = flags & XFS_ALL_QUOTA_ACCT;
310 flags &= ~(XFS_ALL_QUOTA_ACCT);
315 qdprintk("quotaon: zero flags, m_qflags=%x\n", mp->m_qflags);
316 return XFS_ERROR(EINVAL);
319 /* No fs can turn on quotas with a delayed effect */
320 ASSERT((flags & XFS_ALL_QUOTA_ACCT) == 0);
323 * Can't enforce without accounting. We check the superblock
324 * qflags here instead of m_qflags because rootfs can have
325 * quota acct on ondisk without m_qflags' knowing.
327 if (((flags & XFS_UQUOTA_ACCT) == 0 &&
328 (mp->m_sb.sb_qflags & XFS_UQUOTA_ACCT) == 0 &&
329 (flags & XFS_UQUOTA_ENFD))
331 ((flags & XFS_PQUOTA_ACCT) == 0 &&
332 (mp->m_sb.sb_qflags & XFS_PQUOTA_ACCT) == 0 &&
333 (flags & XFS_GQUOTA_ACCT) == 0 &&
334 (mp->m_sb.sb_qflags & XFS_GQUOTA_ACCT) == 0 &&
335 (flags & XFS_OQUOTA_ENFD))) {
336 qdprintk("Can't enforce without acct, flags=%x sbflags=%x\n",
337 flags, mp->m_sb.sb_qflags);
338 return XFS_ERROR(EINVAL);
341 * If everything's upto-date incore, then don't waste time.
343 if ((mp->m_qflags & flags) == flags)
344 return XFS_ERROR(EEXIST);
347 * Change sb_qflags on disk but not incore mp->qflags
348 * if this is the root filesystem.
350 spin_lock(&mp->m_sb_lock);
351 qf = mp->m_sb.sb_qflags;
352 mp->m_sb.sb_qflags = qf | flags;
353 spin_unlock(&mp->m_sb_lock);
356 * There's nothing to change if it's the same.
358 if ((qf & flags) == flags && sbflags == 0)
359 return XFS_ERROR(EEXIST);
360 sbflags |= XFS_SB_QFLAGS;
362 if ((error = xfs_qm_write_sb_changes(mp, sbflags)))
365 * If we aren't trying to switch on quota enforcement, we are done.
367 if (((mp->m_sb.sb_qflags & XFS_UQUOTA_ACCT) !=
368 (mp->m_qflags & XFS_UQUOTA_ACCT)) ||
369 ((mp->m_sb.sb_qflags & XFS_PQUOTA_ACCT) !=
370 (mp->m_qflags & XFS_PQUOTA_ACCT)) ||
371 ((mp->m_sb.sb_qflags & XFS_GQUOTA_ACCT) !=
372 (mp->m_qflags & XFS_GQUOTA_ACCT)) ||
373 (flags & XFS_ALL_QUOTA_ENFD) == 0)
376 if (! XFS_IS_QUOTA_RUNNING(mp))
377 return XFS_ERROR(ESRCH);
380 * Switch on quota enforcement in core.
382 mutex_lock(&(XFS_QI_QOFFLOCK(mp)));
383 mp->m_qflags |= (flags & XFS_ALL_QUOTA_ENFD);
384 mutex_unlock(&(XFS_QI_QOFFLOCK(mp)));
391 * Return quota status information, such as uquota-off, enforcements, etc.
394 xfs_qm_scall_getqstat(
396 fs_quota_stat_t *out)
398 xfs_inode_t *uip, *gip;
399 boolean_t tempuqip, tempgqip;
402 tempuqip = tempgqip = B_FALSE;
403 memset(out, 0, sizeof(fs_quota_stat_t));
405 out->qs_version = FS_QSTAT_VERSION;
406 if (!xfs_sb_version_hasquota(&mp->m_sb)) {
407 out->qs_uquota.qfs_ino = NULLFSINO;
408 out->qs_gquota.qfs_ino = NULLFSINO;
411 out->qs_flags = (__uint16_t) xfs_qm_export_flags(mp->m_qflags &
413 XFS_ALL_QUOTA_ENFD));
415 out->qs_uquota.qfs_ino = mp->m_sb.sb_uquotino;
416 out->qs_gquota.qfs_ino = mp->m_sb.sb_gquotino;
418 if (mp->m_quotainfo) {
419 uip = mp->m_quotainfo->qi_uquotaip;
420 gip = mp->m_quotainfo->qi_gquotaip;
422 if (!uip && mp->m_sb.sb_uquotino != NULLFSINO) {
423 if (xfs_iget(mp, NULL, mp->m_sb.sb_uquotino,
427 if (!gip && mp->m_sb.sb_gquotino != NULLFSINO) {
428 if (xfs_iget(mp, NULL, mp->m_sb.sb_gquotino,
433 out->qs_uquota.qfs_nblks = uip->i_d.di_nblocks;
434 out->qs_uquota.qfs_nextents = uip->i_d.di_nextents;
439 out->qs_gquota.qfs_nblks = gip->i_d.di_nblocks;
440 out->qs_gquota.qfs_nextents = gip->i_d.di_nextents;
444 if (mp->m_quotainfo) {
445 out->qs_incoredqs = XFS_QI_MPLNDQUOTS(mp);
446 out->qs_btimelimit = XFS_QI_BTIMELIMIT(mp);
447 out->qs_itimelimit = XFS_QI_ITIMELIMIT(mp);
448 out->qs_rtbtimelimit = XFS_QI_RTBTIMELIMIT(mp);
449 out->qs_bwarnlimit = XFS_QI_BWARNLIMIT(mp);
450 out->qs_iwarnlimit = XFS_QI_IWARNLIMIT(mp);
456 * Adjust quota limits, and start/stop timers accordingly.
459 xfs_qm_scall_setqlim(
463 fs_disk_quota_t *newlim)
465 xfs_disk_dquot_t *ddq;
469 xfs_qcnt_t hard, soft;
471 if ((newlim->d_fieldmask &
472 (FS_DQ_LIMIT_MASK|FS_DQ_TIMER_MASK|FS_DQ_WARNS_MASK)) == 0)
475 tp = xfs_trans_alloc(mp, XFS_TRANS_QM_SETQLIM);
476 if ((error = xfs_trans_reserve(tp, 0, sizeof(xfs_disk_dquot_t) + 128,
477 0, 0, XFS_DEFAULT_LOG_COUNT))) {
478 xfs_trans_cancel(tp, 0);
483 * We don't want to race with a quotaoff so take the quotaoff lock.
484 * (We don't hold an inode lock, so there's nothing else to stop
485 * a quotaoff from happening). (XXXThis doesn't currently happen
486 * because we take the vfslock before calling xfs_qm_sysent).
488 mutex_lock(&(XFS_QI_QOFFLOCK(mp)));
491 * Get the dquot (locked), and join it to the transaction.
492 * Allocate the dquot if this doesn't exist.
494 if ((error = xfs_qm_dqget(mp, NULL, id, type, XFS_QMOPT_DQALLOC, &dqp))) {
495 xfs_trans_cancel(tp, XFS_TRANS_ABORT);
496 mutex_unlock(&(XFS_QI_QOFFLOCK(mp)));
497 ASSERT(error != ENOENT);
500 xfs_dqtrace_entry(dqp, "Q_SETQLIM: AFT DQGET");
501 xfs_trans_dqjoin(tp, dqp);
505 * Make sure that hardlimits are >= soft limits before changing.
507 hard = (newlim->d_fieldmask & FS_DQ_BHARD) ?
508 (xfs_qcnt_t) XFS_BB_TO_FSB(mp, newlim->d_blk_hardlimit) :
509 be64_to_cpu(ddq->d_blk_hardlimit);
510 soft = (newlim->d_fieldmask & FS_DQ_BSOFT) ?
511 (xfs_qcnt_t) XFS_BB_TO_FSB(mp, newlim->d_blk_softlimit) :
512 be64_to_cpu(ddq->d_blk_softlimit);
513 if (hard == 0 || hard >= soft) {
514 ddq->d_blk_hardlimit = cpu_to_be64(hard);
515 ddq->d_blk_softlimit = cpu_to_be64(soft);
517 mp->m_quotainfo->qi_bhardlimit = hard;
518 mp->m_quotainfo->qi_bsoftlimit = soft;
521 qdprintk("blkhard %Ld < blksoft %Ld\n", hard, soft);
523 hard = (newlim->d_fieldmask & FS_DQ_RTBHARD) ?
524 (xfs_qcnt_t) XFS_BB_TO_FSB(mp, newlim->d_rtb_hardlimit) :
525 be64_to_cpu(ddq->d_rtb_hardlimit);
526 soft = (newlim->d_fieldmask & FS_DQ_RTBSOFT) ?
527 (xfs_qcnt_t) XFS_BB_TO_FSB(mp, newlim->d_rtb_softlimit) :
528 be64_to_cpu(ddq->d_rtb_softlimit);
529 if (hard == 0 || hard >= soft) {
530 ddq->d_rtb_hardlimit = cpu_to_be64(hard);
531 ddq->d_rtb_softlimit = cpu_to_be64(soft);
533 mp->m_quotainfo->qi_rtbhardlimit = hard;
534 mp->m_quotainfo->qi_rtbsoftlimit = soft;
537 qdprintk("rtbhard %Ld < rtbsoft %Ld\n", hard, soft);
540 hard = (newlim->d_fieldmask & FS_DQ_IHARD) ?
541 (xfs_qcnt_t) newlim->d_ino_hardlimit :
542 be64_to_cpu(ddq->d_ino_hardlimit);
543 soft = (newlim->d_fieldmask & FS_DQ_ISOFT) ?
544 (xfs_qcnt_t) newlim->d_ino_softlimit :
545 be64_to_cpu(ddq->d_ino_softlimit);
546 if (hard == 0 || hard >= soft) {
547 ddq->d_ino_hardlimit = cpu_to_be64(hard);
548 ddq->d_ino_softlimit = cpu_to_be64(soft);
550 mp->m_quotainfo->qi_ihardlimit = hard;
551 mp->m_quotainfo->qi_isoftlimit = soft;
554 qdprintk("ihard %Ld < isoft %Ld\n", hard, soft);
558 * Update warnings counter(s) if requested
560 if (newlim->d_fieldmask & FS_DQ_BWARNS)
561 ddq->d_bwarns = cpu_to_be16(newlim->d_bwarns);
562 if (newlim->d_fieldmask & FS_DQ_IWARNS)
563 ddq->d_iwarns = cpu_to_be16(newlim->d_iwarns);
564 if (newlim->d_fieldmask & FS_DQ_RTBWARNS)
565 ddq->d_rtbwarns = cpu_to_be16(newlim->d_rtbwarns);
569 * Timelimits for the super user set the relative time
570 * the other users can be over quota for this file system.
571 * If it is zero a default is used. Ditto for the default
572 * soft and hard limit values (already done, above), and
575 if (newlim->d_fieldmask & FS_DQ_BTIMER) {
576 mp->m_quotainfo->qi_btimelimit = newlim->d_btimer;
577 ddq->d_btimer = cpu_to_be32(newlim->d_btimer);
579 if (newlim->d_fieldmask & FS_DQ_ITIMER) {
580 mp->m_quotainfo->qi_itimelimit = newlim->d_itimer;
581 ddq->d_itimer = cpu_to_be32(newlim->d_itimer);
583 if (newlim->d_fieldmask & FS_DQ_RTBTIMER) {
584 mp->m_quotainfo->qi_rtbtimelimit = newlim->d_rtbtimer;
585 ddq->d_rtbtimer = cpu_to_be32(newlim->d_rtbtimer);
587 if (newlim->d_fieldmask & FS_DQ_BWARNS)
588 mp->m_quotainfo->qi_bwarnlimit = newlim->d_bwarns;
589 if (newlim->d_fieldmask & FS_DQ_IWARNS)
590 mp->m_quotainfo->qi_iwarnlimit = newlim->d_iwarns;
591 if (newlim->d_fieldmask & FS_DQ_RTBWARNS)
592 mp->m_quotainfo->qi_rtbwarnlimit = newlim->d_rtbwarns;
595 * If the user is now over quota, start the timelimit.
596 * The user will not be 'warned'.
597 * Note that we keep the timers ticking, whether enforcement
598 * is on or off. We don't really want to bother with iterating
599 * over all ondisk dquots and turning the timers on/off.
601 xfs_qm_adjust_dqtimers(mp, ddq);
603 dqp->dq_flags |= XFS_DQ_DIRTY;
604 xfs_trans_log_dquot(tp, dqp);
606 xfs_dqtrace_entry(dqp, "Q_SETQLIM: COMMIT");
607 error = xfs_trans_commit(tp, 0);
610 mutex_unlock(&(XFS_QI_QOFFLOCK(mp)));
616 xfs_qm_scall_getquota(
620 fs_disk_quota_t *out)
626 * Try to get the dquot. We don't want it allocated on disk, so
627 * we aren't passing the XFS_QMOPT_DOALLOC flag. If it doesn't
628 * exist, we'll get ENOENT back.
630 if ((error = xfs_qm_dqget(mp, NULL, id, type, 0, &dqp))) {
634 xfs_dqtrace_entry(dqp, "Q_GETQUOTA SUCCESS");
636 * If everything's NULL, this dquot doesn't quite exist as far as
637 * our utility programs are concerned.
639 if (XFS_IS_DQUOT_UNINITIALIZED(dqp)) {
641 return XFS_ERROR(ENOENT);
643 /* xfs_qm_dqprint(dqp); */
645 * Convert the disk dquot to the exportable format
647 xfs_qm_export_dquot(mp, &dqp->q_core, out);
649 return (error ? XFS_ERROR(EFAULT) : 0);
654 xfs_qm_log_quotaoff_end(
656 xfs_qoff_logitem_t *startqoff,
661 xfs_qoff_logitem_t *qoffi;
663 tp = xfs_trans_alloc(mp, XFS_TRANS_QM_QUOTAOFF_END);
665 if ((error = xfs_trans_reserve(tp, 0, sizeof(xfs_qoff_logitem_t) * 2,
666 0, 0, XFS_DEFAULT_LOG_COUNT))) {
667 xfs_trans_cancel(tp, 0);
671 qoffi = xfs_trans_get_qoff_item(tp, startqoff,
672 flags & XFS_ALL_QUOTA_ACCT);
673 xfs_trans_log_quotaoff_item(tp, qoffi);
676 * We have to make sure that the transaction is secure on disk before we
677 * return and actually stop quota accounting. So, make it synchronous.
678 * We don't care about quotoff's performance.
680 xfs_trans_set_sync(tp);
681 error = xfs_trans_commit(tp, 0);
689 xfs_qoff_logitem_t **qoffstartp,
694 xfs_qoff_logitem_t *qoffi=NULL;
697 tp = xfs_trans_alloc(mp, XFS_TRANS_QM_QUOTAOFF);
698 if ((error = xfs_trans_reserve(tp, 0,
699 sizeof(xfs_qoff_logitem_t) * 2 +
700 mp->m_sb.sb_sectsize + 128,
703 XFS_DEFAULT_LOG_COUNT))) {
707 qoffi = xfs_trans_get_qoff_item(tp, NULL, flags & XFS_ALL_QUOTA_ACCT);
708 xfs_trans_log_quotaoff_item(tp, qoffi);
710 spin_lock(&mp->m_sb_lock);
711 oldsbqflag = mp->m_sb.sb_qflags;
712 mp->m_sb.sb_qflags = (mp->m_qflags & ~(flags)) & XFS_MOUNT_QUOTA_ALL;
713 spin_unlock(&mp->m_sb_lock);
715 xfs_mod_sb(tp, XFS_SB_QFLAGS);
718 * We have to make sure that the transaction is secure on disk before we
719 * return and actually stop quota accounting. So, make it synchronous.
720 * We don't care about quotoff's performance.
722 xfs_trans_set_sync(tp);
723 error = xfs_trans_commit(tp, 0);
727 xfs_trans_cancel(tp, 0);
729 * No one else is modifying sb_qflags, so this is OK.
730 * We still hold the quotaofflock.
732 spin_lock(&mp->m_sb_lock);
733 mp->m_sb.sb_qflags = oldsbqflag;
734 spin_unlock(&mp->m_sb_lock);
742 * Translate an internal style on-disk-dquot to the exportable format.
743 * The main differences are that the counters/limits are all in Basic
744 * Blocks (BBs) instead of the internal FSBs, and all on-disk data has
745 * to be converted to the native endianness.
750 xfs_disk_dquot_t *src,
751 struct fs_disk_quota *dst)
753 memset(dst, 0, sizeof(*dst));
754 dst->d_version = FS_DQUOT_VERSION; /* different from src->d_version */
755 dst->d_flags = xfs_qm_export_qtype_flags(src->d_flags);
756 dst->d_id = be32_to_cpu(src->d_id);
757 dst->d_blk_hardlimit =
758 XFS_FSB_TO_BB(mp, be64_to_cpu(src->d_blk_hardlimit));
759 dst->d_blk_softlimit =
760 XFS_FSB_TO_BB(mp, be64_to_cpu(src->d_blk_softlimit));
761 dst->d_ino_hardlimit = be64_to_cpu(src->d_ino_hardlimit);
762 dst->d_ino_softlimit = be64_to_cpu(src->d_ino_softlimit);
763 dst->d_bcount = XFS_FSB_TO_BB(mp, be64_to_cpu(src->d_bcount));
764 dst->d_icount = be64_to_cpu(src->d_icount);
765 dst->d_btimer = be32_to_cpu(src->d_btimer);
766 dst->d_itimer = be32_to_cpu(src->d_itimer);
767 dst->d_iwarns = be16_to_cpu(src->d_iwarns);
768 dst->d_bwarns = be16_to_cpu(src->d_bwarns);
769 dst->d_rtb_hardlimit =
770 XFS_FSB_TO_BB(mp, be64_to_cpu(src->d_rtb_hardlimit));
771 dst->d_rtb_softlimit =
772 XFS_FSB_TO_BB(mp, be64_to_cpu(src->d_rtb_softlimit));
773 dst->d_rtbcount = XFS_FSB_TO_BB(mp, be64_to_cpu(src->d_rtbcount));
774 dst->d_rtbtimer = be32_to_cpu(src->d_rtbtimer);
775 dst->d_rtbwarns = be16_to_cpu(src->d_rtbwarns);
778 * Internally, we don't reset all the timers when quota enforcement
779 * gets turned off. No need to confuse the user level code,
780 * so return zeroes in that case.
782 if ((!XFS_IS_UQUOTA_ENFORCED(mp) && src->d_flags == XFS_DQ_USER) ||
783 (!XFS_IS_OQUOTA_ENFORCED(mp) &&
784 (src->d_flags & (XFS_DQ_PROJ | XFS_DQ_GROUP)))) {
791 if (((XFS_IS_UQUOTA_ENFORCED(mp) && dst->d_flags == XFS_USER_QUOTA) ||
792 (XFS_IS_OQUOTA_ENFORCED(mp) &&
793 (dst->d_flags & (XFS_PROJ_QUOTA | XFS_GROUP_QUOTA)))) &&
795 if (((int) dst->d_bcount >= (int) dst->d_blk_softlimit) &&
796 (dst->d_blk_softlimit > 0)) {
797 ASSERT(dst->d_btimer != 0);
799 if (((int) dst->d_icount >= (int) dst->d_ino_softlimit) &&
800 (dst->d_ino_softlimit > 0)) {
801 ASSERT(dst->d_itimer != 0);
808 xfs_qm_export_qtype_flags(
812 * Can't be more than one, or none.
814 ASSERT((flags & (XFS_PROJ_QUOTA | XFS_USER_QUOTA)) !=
815 (XFS_PROJ_QUOTA | XFS_USER_QUOTA));
816 ASSERT((flags & (XFS_PROJ_QUOTA | XFS_GROUP_QUOTA)) !=
817 (XFS_PROJ_QUOTA | XFS_GROUP_QUOTA));
818 ASSERT((flags & (XFS_USER_QUOTA | XFS_GROUP_QUOTA)) !=
819 (XFS_USER_QUOTA | XFS_GROUP_QUOTA));
820 ASSERT((flags & (XFS_PROJ_QUOTA|XFS_USER_QUOTA|XFS_GROUP_QUOTA)) != 0);
822 return (flags & XFS_DQ_USER) ?
823 XFS_USER_QUOTA : (flags & XFS_DQ_PROJ) ?
824 XFS_PROJ_QUOTA : XFS_GROUP_QUOTA;
834 if (flags & XFS_UQUOTA_ACCT)
835 uflags |= XFS_QUOTA_UDQ_ACCT;
836 if (flags & XFS_PQUOTA_ACCT)
837 uflags |= XFS_QUOTA_PDQ_ACCT;
838 if (flags & XFS_GQUOTA_ACCT)
839 uflags |= XFS_QUOTA_GDQ_ACCT;
840 if (flags & XFS_UQUOTA_ENFD)
841 uflags |= XFS_QUOTA_UDQ_ENFD;
842 if (flags & (XFS_OQUOTA_ENFD)) {
843 uflags |= (flags & XFS_GQUOTA_ACCT) ?
844 XFS_QUOTA_GDQ_ENFD : XFS_QUOTA_PDQ_ENFD;
851 * Release all the dquots on the inodes in an AG.
854 xfs_qm_dqrele_inodes_ag(
859 xfs_inode_t *ip = NULL;
860 xfs_perag_t *pag = &mp->m_perag[ag];
866 * use a gang lookup to find the next inode in the tree
867 * as the tree is sparse and a gang lookup walks to find
868 * the number of objects requested.
870 read_lock(&pag->pag_ici_lock);
871 nr_found = radix_tree_gang_lookup(&pag->pag_ici_root,
872 (void**)&ip, first_index, 1);
875 read_unlock(&pag->pag_ici_lock);
880 * Update the index for the next lookup. Catch overflows
881 * into the next AG range which can occur if we have inodes
882 * in the last block of the AG and we are currently
883 * pointing to the last inode.
885 first_index = XFS_INO_TO_AGINO(mp, ip->i_ino + 1);
886 if (first_index < XFS_INO_TO_AGINO(mp, ip->i_ino)) {
887 read_unlock(&pag->pag_ici_lock);
891 /* skip quota inodes */
892 if (ip == XFS_QI_UQIP(mp) || ip == XFS_QI_GQIP(mp)) {
893 ASSERT(ip->i_udquot == NULL);
894 ASSERT(ip->i_gdquot == NULL);
895 read_unlock(&pag->pag_ici_lock);
900 * If we can't get a reference on the inode, it must be
901 * in reclaim. Leave it for the reclaim code to flush.
903 if (!igrab(VFS_I(ip))) {
904 read_unlock(&pag->pag_ici_lock);
907 read_unlock(&pag->pag_ici_lock);
909 /* avoid new inodes though we shouldn't find any here */
910 if (xfs_iflags_test(ip, XFS_INEW)) {
915 xfs_ilock(ip, XFS_ILOCK_EXCL);
916 if ((flags & XFS_UQUOTA_ACCT) && ip->i_udquot) {
917 xfs_qm_dqrele(ip->i_udquot);
920 if (flags & (XFS_PQUOTA_ACCT|XFS_GQUOTA_ACCT) &&
922 xfs_qm_dqrele(ip->i_gdquot);
925 xfs_iput(ip, XFS_ILOCK_EXCL);
931 * Go thru all the inodes in the file system, releasing their dquots.
932 * Note that the mount structure gets modified to indicate that quotas are off
933 * AFTER this, in the case of quotaoff. This also gets called from
937 xfs_qm_dqrele_all_inodes(
938 struct xfs_mount *mp,
943 ASSERT(mp->m_quotainfo);
944 for (i = 0; i < mp->m_sb.sb_agcount; i++) {
945 if (!mp->m_perag[i].pag_ici_init)
947 xfs_qm_dqrele_inodes_ag(mp, i, flags);
951 /*------------------------------------------------------------------------*/
954 * This contains all the test functions for XFS disk quotas.
955 * Currently it does a quota accounting check. ie. it walks through
956 * all inodes in the file system, calculating the dquot accounting fields,
957 * and prints out any inconsistencies.
959 xfs_dqhash_t *qmtest_udqtab;
960 xfs_dqhash_t *qmtest_gdqtab;
963 struct mutex qcheck_lock;
965 #define DQTEST_HASHVAL(mp, id) (((__psunsigned_t)(mp) + \
966 (__psunsigned_t)(id)) & \
967 (qmtest_hashmask - 1))
969 #define DQTEST_HASH(mp, id, type) ((type & XFS_DQ_USER) ? \
971 DQTEST_HASHVAL(mp, id)) : \
973 DQTEST_HASHVAL(mp, id)))
975 #define DQTEST_LIST_PRINT(l, NXT, title) \
977 xfs_dqtest_t *dqp; int i = 0;\
978 cmn_err(CE_DEBUG, "%s (#%d)", title, (int) (l)->qh_nelems); \
979 for (dqp = (xfs_dqtest_t *)(l)->qh_next; dqp != NULL; \
980 dqp = (xfs_dqtest_t *)dqp->NXT) { \
981 cmn_err(CE_DEBUG, " %d. \"%d (%s)\" bcnt = %d, icnt = %d", \
982 ++i, dqp->d_id, DQFLAGTO_TYPESTR(dqp), \
983 dqp->d_bcount, dqp->d_icount); } \
986 typedef struct dqtest {
987 xfs_dqmarker_t q_lists;
988 xfs_dqhash_t *q_hash; /* the hashchain header */
989 xfs_mount_t *q_mount; /* filesystem this relates to */
990 xfs_dqid_t d_id; /* user id or group id */
991 xfs_qcnt_t d_bcount; /* # disk blocks owned by the user */
992 xfs_qcnt_t d_icount; /* # inodes owned by the user */
996 xfs_qm_hashinsert(xfs_dqhash_t *h, xfs_dqtest_t *dqp)
999 if (((d) = (h)->qh_next))
1000 (d)->HL_PREVP = &((dqp)->HL_NEXT);
1002 (dqp)->HL_PREVP = &((h)->qh_next);
1003 (h)->qh_next = (xfs_dquot_t *)dqp;
1008 xfs_qm_dqtest_print(
1011 cmn_err(CE_DEBUG, "-----------DQTEST DQUOT----------------");
1012 cmn_err(CE_DEBUG, "---- dquot ID = %d", d->d_id);
1013 cmn_err(CE_DEBUG, "---- fs = 0x%p", d->q_mount);
1014 cmn_err(CE_DEBUG, "---- bcount = %Lu (0x%x)",
1015 d->d_bcount, (int)d->d_bcount);
1016 cmn_err(CE_DEBUG, "---- icount = %Lu (0x%x)",
1017 d->d_icount, (int)d->d_icount);
1018 cmn_err(CE_DEBUG, "---------------------------");
1022 xfs_qm_dqtest_failed(
1032 cmn_err(CE_DEBUG, "quotacheck failed id=%d, err=%d\nreason: %s",
1033 d->d_id, error, reason);
1035 cmn_err(CE_DEBUG, "quotacheck failed id=%d (%s) [%d != %d]",
1036 d->d_id, reason, (int)a, (int)b);
1037 xfs_qm_dqtest_print(d);
1039 xfs_qm_dqprint(dqp);
1048 if (be64_to_cpu(dqp->q_core.d_icount) != d->d_icount) {
1049 xfs_qm_dqtest_failed(d, dqp, "icount mismatch",
1050 be64_to_cpu(dqp->q_core.d_icount),
1054 if (be64_to_cpu(dqp->q_core.d_bcount) != d->d_bcount) {
1055 xfs_qm_dqtest_failed(d, dqp, "bcount mismatch",
1056 be64_to_cpu(dqp->q_core.d_bcount),
1060 if (dqp->q_core.d_blk_softlimit &&
1061 be64_to_cpu(dqp->q_core.d_bcount) >=
1062 be64_to_cpu(dqp->q_core.d_blk_softlimit)) {
1063 if (!dqp->q_core.d_btimer && dqp->q_core.d_id) {
1065 "%d [%s] [0x%p] BLK TIMER NOT STARTED",
1066 d->d_id, DQFLAGTO_TYPESTR(d), d->q_mount);
1070 if (dqp->q_core.d_ino_softlimit &&
1071 be64_to_cpu(dqp->q_core.d_icount) >=
1072 be64_to_cpu(dqp->q_core.d_ino_softlimit)) {
1073 if (!dqp->q_core.d_itimer && dqp->q_core.d_id) {
1075 "%d [%s] [0x%p] INO TIMER NOT STARTED",
1076 d->d_id, DQFLAGTO_TYPESTR(d), d->q_mount);
1082 cmn_err(CE_DEBUG, "%d [%s] [0x%p] qchecked",
1083 d->d_id, DQFLAGTO_TYPESTR(d), d->q_mount);
1096 /* xfs_qm_dqtest_print(d); */
1097 if ((error = xfs_qm_dqget(d->q_mount, NULL, d->d_id, d->dq_flags, 0,
1099 xfs_qm_dqtest_failed(d, NULL, "dqget failed", 0, 0, error);
1102 xfs_dqtest_cmp2(d, dqp);
1107 xfs_qm_internalqcheck_dqget(
1111 xfs_dqtest_t **O_dq)
1116 h = DQTEST_HASH(mp, id, type);
1117 for (d = (xfs_dqtest_t *) h->qh_next; d != NULL;
1118 d = (xfs_dqtest_t *) d->HL_NEXT) {
1119 /* DQTEST_LIST_PRINT(h, HL_NEXT, "@@@@@ dqtestlist @@@@@"); */
1120 if (d->d_id == id && mp == d->q_mount) {
1125 d = kmem_zalloc(sizeof(xfs_dqtest_t), KM_SLEEP);
1130 xfs_qm_hashinsert(h, d);
1136 xfs_qm_internalqcheck_get_dquots(
1144 if (XFS_IS_UQUOTA_ON(mp))
1145 xfs_qm_internalqcheck_dqget(mp, uid, XFS_DQ_USER, ud);
1146 if (XFS_IS_GQUOTA_ON(mp))
1147 xfs_qm_internalqcheck_dqget(mp, gid, XFS_DQ_GROUP, gd);
1148 else if (XFS_IS_PQUOTA_ON(mp))
1149 xfs_qm_internalqcheck_dqget(mp, projid, XFS_DQ_PROJ, gd);
1154 xfs_qm_internalqcheck_dqadjust(
1159 d->d_bcount += (xfs_qcnt_t)ip->i_d.di_nblocks;
1163 xfs_qm_internalqcheck_adjust(
1164 xfs_mount_t *mp, /* mount point for filesystem */
1165 xfs_ino_t ino, /* inode number to get data for */
1166 void __user *buffer, /* not used */
1167 int ubsize, /* not used */
1168 void *private_data, /* not used */
1169 xfs_daddr_t bno, /* starting block of inode cluster */
1170 int *ubused, /* not used */
1171 void *dip, /* not used */
1172 int *res) /* bulkstat result code */
1175 xfs_dqtest_t *ud, *gd;
1177 boolean_t ipreleased;
1180 ASSERT(XFS_IS_QUOTA_RUNNING(mp));
1182 if (ino == mp->m_sb.sb_uquotino || ino == mp->m_sb.sb_gquotino) {
1183 *res = BULKSTAT_RV_NOTHING;
1184 qdprintk("internalqcheck: ino=%llu, uqino=%llu, gqino=%llu\n",
1185 (unsigned long long) ino,
1186 (unsigned long long) mp->m_sb.sb_uquotino,
1187 (unsigned long long) mp->m_sb.sb_gquotino);
1188 return XFS_ERROR(EINVAL);
1190 ipreleased = B_FALSE;
1192 lock_flags = XFS_ILOCK_SHARED;
1193 if ((error = xfs_iget(mp, NULL, ino, 0, lock_flags, &ip, bno))) {
1194 *res = BULKSTAT_RV_NOTHING;
1199 * This inode can have blocks after eof which can get released
1200 * when we send it to inactive. Since we don't check the dquot
1201 * until the after all our calculations are done, we must get rid
1205 xfs_iput(ip, lock_flags);
1206 ipreleased = B_TRUE;
1209 xfs_qm_internalqcheck_get_dquots(mp,
1210 (xfs_dqid_t) ip->i_d.di_uid,
1211 (xfs_dqid_t) ip->i_d.di_projid,
1212 (xfs_dqid_t) ip->i_d.di_gid,
1214 if (XFS_IS_UQUOTA_ON(mp)) {
1216 xfs_qm_internalqcheck_dqadjust(ip, ud);
1218 if (XFS_IS_OQUOTA_ON(mp)) {
1220 xfs_qm_internalqcheck_dqadjust(ip, gd);
1222 xfs_iput(ip, lock_flags);
1223 *res = BULKSTAT_RV_DIDONE;
1228 /* PRIVATE, debugging */
1230 xfs_qm_internalqcheck(
1236 xfs_dqtest_t *d, *e;
1241 qmtest_hashmask = 32;
1246 if (! XFS_IS_QUOTA_ON(mp))
1247 return XFS_ERROR(ESRCH);
1249 xfs_log_force(mp, (xfs_lsn_t)0, XFS_LOG_FORCE | XFS_LOG_SYNC);
1250 XFS_bflush(mp->m_ddev_targp);
1251 xfs_log_force(mp, (xfs_lsn_t)0, XFS_LOG_FORCE | XFS_LOG_SYNC);
1252 XFS_bflush(mp->m_ddev_targp);
1254 mutex_lock(&qcheck_lock);
1255 /* There should be absolutely no quota activity while this
1257 qmtest_udqtab = kmem_zalloc(qmtest_hashmask *
1258 sizeof(xfs_dqhash_t), KM_SLEEP);
1259 qmtest_gdqtab = kmem_zalloc(qmtest_hashmask *
1260 sizeof(xfs_dqhash_t), KM_SLEEP);
1263 * Iterate thru all the inodes in the file system,
1264 * adjusting the corresponding dquot counters
1266 if ((error = xfs_bulkstat(mp, &lastino, &count,
1267 xfs_qm_internalqcheck_adjust, NULL,
1268 0, NULL, BULKSTAT_FG_IGET, &done))) {
1273 cmn_err(CE_DEBUG, "Bulkstat returned error 0x%x", error);
1275 cmn_err(CE_DEBUG, "Checking results against system dquots");
1276 for (i = 0; i < qmtest_hashmask; i++) {
1277 h1 = &qmtest_udqtab[i];
1278 for (d = (xfs_dqtest_t *) h1->qh_next; d != NULL; ) {
1280 e = (xfs_dqtest_t *) d->HL_NEXT;
1284 h1 = &qmtest_gdqtab[i];
1285 for (d = (xfs_dqtest_t *) h1->qh_next; d != NULL; ) {
1287 e = (xfs_dqtest_t *) d->HL_NEXT;
1293 if (qmtest_nfails) {
1294 cmn_err(CE_DEBUG, "******** quotacheck failed ********");
1295 cmn_err(CE_DEBUG, "failures = %d", qmtest_nfails);
1297 cmn_err(CE_DEBUG, "******** quotacheck successful! ********");
1299 kmem_free(qmtest_udqtab);
1300 kmem_free(qmtest_gdqtab);
1301 mutex_unlock(&qcheck_lock);
1302 return (qmtest_nfails);