2 * Copyright (c) 2000-2005 Silicon Graphics, Inc.
5 * This program is free software; you can redistribute it and/or
6 * modify it under the terms of the GNU General Public License as
7 * published by the Free Software Foundation.
9 * This program is distributed in the hope that it would be useful,
10 * but WITHOUT ANY WARRANTY; without even the implied warranty of
11 * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
12 * GNU General Public License for more details.
14 * You should have received a copy of the GNU General Public License
15 * along with this program; if not, write the Free Software Foundation,
16 * Inc., 51 Franklin St, Fifth Floor, Boston, MA 02110-1301 USA
19 #include <linux/capability.h>
26 #include "xfs_trans.h"
29 #include "xfs_alloc.h"
30 #include "xfs_quota.h"
31 #include "xfs_mount.h"
32 #include "xfs_bmap_btree.h"
33 #include "xfs_inode.h"
34 #include "xfs_itable.h"
36 #include "xfs_rtalloc.h"
37 #include "xfs_error.h"
39 #include "xfs_buf_item.h"
40 #include "xfs_utils.h"
42 #include "xfs_trace.h"
45 # define qdprintk(s, args...) cmn_err(CE_DEBUG, s, ## args)
47 # define qdprintk(s, args...) do { } while (0)
50 STATIC
int xfs_qm_log_quotaoff(xfs_mount_t
*, xfs_qoff_logitem_t
**, uint
);
51 STATIC
int xfs_qm_log_quotaoff_end(xfs_mount_t
*, xfs_qoff_logitem_t
*,
53 STATIC uint
xfs_qm_export_flags(uint
);
54 STATIC uint
xfs_qm_export_qtype_flags(uint
);
55 STATIC
void xfs_qm_export_dquot(xfs_mount_t
*, xfs_disk_dquot_t
*,
60 * Turn off quota accounting and/or enforcement for all udquots and/or
61 * gdquots. Called only at unmount time.
63 * This assumes that there are no dquots of this file system cached
64 * incore, and modifies the ondisk dquot directly. Therefore, for example,
65 * it is an error to call this twice, without purging the cache.
68 xfs_qm_scall_quotaoff(
72 struct xfs_quotainfo
*q
= mp
->m_quotainfo
;
75 uint inactivate_flags
;
76 xfs_qoff_logitem_t
*qoffstart
;
80 * No file system can have quotas enabled on disk but not in core.
81 * Note that quota utilities (like quotaoff) _expect_
82 * errno == EEXIST here.
84 if ((mp
->m_qflags
& flags
) == 0)
85 return XFS_ERROR(EEXIST
);
88 flags
&= (XFS_ALL_QUOTA_ACCT
| XFS_ALL_QUOTA_ENFD
);
91 * We don't want to deal with two quotaoffs messing up each other,
92 * so we're going to serialize it. quotaoff isn't exactly a performance
94 * If quotaoff, then we must be dealing with the root filesystem.
97 mutex_lock(&q
->qi_quotaofflock
);
100 * If we're just turning off quota enforcement, change mp and go.
102 if ((flags
& XFS_ALL_QUOTA_ACCT
) == 0) {
103 mp
->m_qflags
&= ~(flags
);
105 spin_lock(&mp
->m_sb_lock
);
106 mp
->m_sb
.sb_qflags
= mp
->m_qflags
;
107 spin_unlock(&mp
->m_sb_lock
);
108 mutex_unlock(&q
->qi_quotaofflock
);
110 /* XXX what to do if error ? Revert back to old vals incore ? */
111 error
= xfs_qm_write_sb_changes(mp
, XFS_SB_QFLAGS
);
116 inactivate_flags
= 0;
118 * If accounting is off, we must turn enforcement off, clear the
119 * quota 'CHKD' certificate to make it known that we have to
120 * do a quotacheck the next time this quota is turned on.
122 if (flags
& XFS_UQUOTA_ACCT
) {
123 dqtype
|= XFS_QMOPT_UQUOTA
;
124 flags
|= (XFS_UQUOTA_CHKD
| XFS_UQUOTA_ENFD
);
125 inactivate_flags
|= XFS_UQUOTA_ACTIVE
;
127 if (flags
& XFS_GQUOTA_ACCT
) {
128 dqtype
|= XFS_QMOPT_GQUOTA
;
129 flags
|= (XFS_OQUOTA_CHKD
| XFS_OQUOTA_ENFD
);
130 inactivate_flags
|= XFS_GQUOTA_ACTIVE
;
131 } else if (flags
& XFS_PQUOTA_ACCT
) {
132 dqtype
|= XFS_QMOPT_PQUOTA
;
133 flags
|= (XFS_OQUOTA_CHKD
| XFS_OQUOTA_ENFD
);
134 inactivate_flags
|= XFS_PQUOTA_ACTIVE
;
138 * Nothing to do? Don't complain. This happens when we're just
139 * turning off quota enforcement.
141 if ((mp
->m_qflags
& flags
) == 0)
145 * Write the LI_QUOTAOFF log record, and do SB changes atomically,
146 * and synchronously. If we fail to write, we should abort the
147 * operation as it cannot be recovered safely if we crash.
149 error
= xfs_qm_log_quotaoff(mp
, &qoffstart
, flags
);
154 * Next we clear the XFS_MOUNT_*DQ_ACTIVE bit(s) in the mount struct
155 * to take care of the race between dqget and quotaoff. We don't take
156 * any special locks to reset these bits. All processes need to check
157 * these bits *after* taking inode lock(s) to see if the particular
158 * quota type is in the process of being turned off. If *ACTIVE, it is
159 * guaranteed that all dquot structures and all quotainode ptrs will all
160 * stay valid as long as that inode is kept locked.
162 * There is no turning back after this.
164 mp
->m_qflags
&= ~inactivate_flags
;
167 * Give back all the dquot reference(s) held by inodes.
168 * Here we go thru every single incore inode in this file system, and
169 * do a dqrele on the i_udquot/i_gdquot that it may have.
170 * Essentially, as long as somebody has an inode locked, this guarantees
171 * that quotas will not be turned off. This is handy because in a
172 * transaction once we lock the inode(s) and check for quotaon, we can
173 * depend on the quota inodes (and other things) being valid as long as
174 * we keep the lock(s).
176 xfs_qm_dqrele_all_inodes(mp
, flags
);
179 * Next we make the changes in the quota flag in the mount struct.
180 * This isn't protected by a particular lock directly, because we
181 * don't want to take a mrlock everytime we depend on quotas being on.
183 mp
->m_qflags
&= ~(flags
);
186 * Go through all the dquots of this file system and purge them,
187 * according to what was turned off. We may not be able to get rid
188 * of all dquots, because dquots can have temporary references that
189 * are not attached to inodes. eg. xfs_setattr, xfs_create.
190 * So, if we couldn't purge all the dquots from the filesystem,
191 * we can't get rid of the incore data structures.
193 while ((nculprits
= xfs_qm_dqpurge_all(mp
, dqtype
)))
194 delay(10 * nculprits
);
197 * Transactions that had started before ACTIVE state bit was cleared
198 * could have logged many dquots, so they'd have higher LSNs than
199 * the first QUOTAOFF log record does. If we happen to crash when
200 * the tail of the log has gone past the QUOTAOFF record, but
201 * before the last dquot modification, those dquots __will__
202 * recover, and that's not good.
204 * So, we have QUOTAOFF start and end logitems; the start
205 * logitem won't get overwritten until the end logitem appears...
207 error
= xfs_qm_log_quotaoff_end(mp
, qoffstart
, flags
);
209 /* We're screwed now. Shutdown is the only option. */
210 xfs_force_shutdown(mp
, SHUTDOWN_CORRUPT_INCORE
);
215 * If quotas is completely disabled, close shop.
217 if (((flags
& XFS_MOUNT_QUOTA_ALL
) == XFS_MOUNT_QUOTA_SET1
) ||
218 ((flags
& XFS_MOUNT_QUOTA_ALL
) == XFS_MOUNT_QUOTA_SET2
)) {
219 mutex_unlock(&q
->qi_quotaofflock
);
220 xfs_qm_destroy_quotainfo(mp
);
225 * Release our quotainode references if we don't need them anymore.
227 if ((dqtype
& XFS_QMOPT_UQUOTA
) && q
->qi_uquotaip
) {
228 IRELE(q
->qi_uquotaip
);
229 q
->qi_uquotaip
= NULL
;
231 if ((dqtype
& (XFS_QMOPT_GQUOTA
|XFS_QMOPT_PQUOTA
)) && q
->qi_gquotaip
) {
232 IRELE(q
->qi_gquotaip
);
233 q
->qi_gquotaip
= NULL
;
237 mutex_unlock(&q
->qi_quotaofflock
);
242 xfs_qm_scall_trunc_qfile(
243 struct xfs_mount
*mp
,
246 struct xfs_inode
*ip
;
247 struct xfs_trans
*tp
;
250 if (ino
== NULLFSINO
)
253 error
= xfs_iget(mp
, NULL
, ino
, 0, 0, &ip
);
257 xfs_ilock(ip
, XFS_IOLOCK_EXCL
);
259 tp
= xfs_trans_alloc(mp
, XFS_TRANS_TRUNCATE_FILE
);
260 error
= xfs_trans_reserve(tp
, 0, XFS_ITRUNCATE_LOG_RES(mp
), 0,
261 XFS_TRANS_PERM_LOG_RES
,
262 XFS_ITRUNCATE_LOG_COUNT
);
264 xfs_trans_cancel(tp
, 0);
265 xfs_iunlock(ip
, XFS_IOLOCK_EXCL
);
269 xfs_ilock(ip
, XFS_ILOCK_EXCL
);
270 xfs_trans_ijoin(tp
, ip
);
272 error
= xfs_itruncate_finish(&tp
, ip
, 0, XFS_DATA_FORK
, 1);
274 xfs_trans_cancel(tp
, XFS_TRANS_RELEASE_LOG_RES
|
279 xfs_trans_ichgtime(tp
, ip
, XFS_ICHGTIME_MOD
| XFS_ICHGTIME_CHG
);
280 error
= xfs_trans_commit(tp
, XFS_TRANS_RELEASE_LOG_RES
);
283 xfs_iunlock(ip
, XFS_ILOCK_EXCL
| XFS_IOLOCK_EXCL
);
290 xfs_qm_scall_trunc_qfiles(
294 int error
= 0, error2
= 0;
296 if (!xfs_sb_version_hasquota(&mp
->m_sb
) || flags
== 0) {
297 qdprintk("qtrunc flags=%x m_qflags=%x\n", flags
, mp
->m_qflags
);
298 return XFS_ERROR(EINVAL
);
301 if (flags
& XFS_DQ_USER
)
302 error
= xfs_qm_scall_trunc_qfile(mp
, mp
->m_sb
.sb_uquotino
);
303 if (flags
& (XFS_DQ_GROUP
|XFS_DQ_PROJ
))
304 error2
= xfs_qm_scall_trunc_qfile(mp
, mp
->m_sb
.sb_gquotino
);
306 return error
? error
: error2
;
310 * Switch on (a given) quota enforcement for a filesystem. This takes
311 * effect immediately.
312 * (Switching on quota accounting must be done at mount time.)
315 xfs_qm_scall_quotaon(
324 flags
&= (XFS_ALL_QUOTA_ACCT
| XFS_ALL_QUOTA_ENFD
);
326 * Switching on quota accounting must be done at mount time.
328 accflags
= flags
& XFS_ALL_QUOTA_ACCT
;
329 flags
&= ~(XFS_ALL_QUOTA_ACCT
);
334 qdprintk("quotaon: zero flags, m_qflags=%x\n", mp
->m_qflags
);
335 return XFS_ERROR(EINVAL
);
338 /* No fs can turn on quotas with a delayed effect */
339 ASSERT((flags
& XFS_ALL_QUOTA_ACCT
) == 0);
342 * Can't enforce without accounting. We check the superblock
343 * qflags here instead of m_qflags because rootfs can have
344 * quota acct on ondisk without m_qflags' knowing.
346 if (((flags
& XFS_UQUOTA_ACCT
) == 0 &&
347 (mp
->m_sb
.sb_qflags
& XFS_UQUOTA_ACCT
) == 0 &&
348 (flags
& XFS_UQUOTA_ENFD
))
350 ((flags
& XFS_PQUOTA_ACCT
) == 0 &&
351 (mp
->m_sb
.sb_qflags
& XFS_PQUOTA_ACCT
) == 0 &&
352 (flags
& XFS_GQUOTA_ACCT
) == 0 &&
353 (mp
->m_sb
.sb_qflags
& XFS_GQUOTA_ACCT
) == 0 &&
354 (flags
& XFS_OQUOTA_ENFD
))) {
355 qdprintk("Can't enforce without acct, flags=%x sbflags=%x\n",
356 flags
, mp
->m_sb
.sb_qflags
);
357 return XFS_ERROR(EINVAL
);
360 * If everything's upto-date incore, then don't waste time.
362 if ((mp
->m_qflags
& flags
) == flags
)
363 return XFS_ERROR(EEXIST
);
366 * Change sb_qflags on disk but not incore mp->qflags
367 * if this is the root filesystem.
369 spin_lock(&mp
->m_sb_lock
);
370 qf
= mp
->m_sb
.sb_qflags
;
371 mp
->m_sb
.sb_qflags
= qf
| flags
;
372 spin_unlock(&mp
->m_sb_lock
);
375 * There's nothing to change if it's the same.
377 if ((qf
& flags
) == flags
&& sbflags
== 0)
378 return XFS_ERROR(EEXIST
);
379 sbflags
|= XFS_SB_QFLAGS
;
381 if ((error
= xfs_qm_write_sb_changes(mp
, sbflags
)))
384 * If we aren't trying to switch on quota enforcement, we are done.
386 if (((mp
->m_sb
.sb_qflags
& XFS_UQUOTA_ACCT
) !=
387 (mp
->m_qflags
& XFS_UQUOTA_ACCT
)) ||
388 ((mp
->m_sb
.sb_qflags
& XFS_PQUOTA_ACCT
) !=
389 (mp
->m_qflags
& XFS_PQUOTA_ACCT
)) ||
390 ((mp
->m_sb
.sb_qflags
& XFS_GQUOTA_ACCT
) !=
391 (mp
->m_qflags
& XFS_GQUOTA_ACCT
)) ||
392 (flags
& XFS_ALL_QUOTA_ENFD
) == 0)
395 if (! XFS_IS_QUOTA_RUNNING(mp
))
396 return XFS_ERROR(ESRCH
);
399 * Switch on quota enforcement in core.
401 mutex_lock(&mp
->m_quotainfo
->qi_quotaofflock
);
402 mp
->m_qflags
|= (flags
& XFS_ALL_QUOTA_ENFD
);
403 mutex_unlock(&mp
->m_quotainfo
->qi_quotaofflock
);
410 * Return quota status information, such as uquota-off, enforcements, etc.
413 xfs_qm_scall_getqstat(
414 struct xfs_mount
*mp
,
415 struct fs_quota_stat
*out
)
417 struct xfs_quotainfo
*q
= mp
->m_quotainfo
;
418 struct xfs_inode
*uip
, *gip
;
419 boolean_t tempuqip
, tempgqip
;
422 tempuqip
= tempgqip
= B_FALSE
;
423 memset(out
, 0, sizeof(fs_quota_stat_t
));
425 out
->qs_version
= FS_QSTAT_VERSION
;
426 if (!xfs_sb_version_hasquota(&mp
->m_sb
)) {
427 out
->qs_uquota
.qfs_ino
= NULLFSINO
;
428 out
->qs_gquota
.qfs_ino
= NULLFSINO
;
431 out
->qs_flags
= (__uint16_t
) xfs_qm_export_flags(mp
->m_qflags
&
433 XFS_ALL_QUOTA_ENFD
));
435 out
->qs_uquota
.qfs_ino
= mp
->m_sb
.sb_uquotino
;
436 out
->qs_gquota
.qfs_ino
= mp
->m_sb
.sb_gquotino
;
439 uip
= q
->qi_uquotaip
;
440 gip
= q
->qi_gquotaip
;
442 if (!uip
&& mp
->m_sb
.sb_uquotino
!= NULLFSINO
) {
443 if (xfs_iget(mp
, NULL
, mp
->m_sb
.sb_uquotino
,
447 if (!gip
&& mp
->m_sb
.sb_gquotino
!= NULLFSINO
) {
448 if (xfs_iget(mp
, NULL
, mp
->m_sb
.sb_gquotino
,
453 out
->qs_uquota
.qfs_nblks
= uip
->i_d
.di_nblocks
;
454 out
->qs_uquota
.qfs_nextents
= uip
->i_d
.di_nextents
;
459 out
->qs_gquota
.qfs_nblks
= gip
->i_d
.di_nblocks
;
460 out
->qs_gquota
.qfs_nextents
= gip
->i_d
.di_nextents
;
465 out
->qs_incoredqs
= q
->qi_dquots
;
466 out
->qs_btimelimit
= q
->qi_btimelimit
;
467 out
->qs_itimelimit
= q
->qi_itimelimit
;
468 out
->qs_rtbtimelimit
= q
->qi_rtbtimelimit
;
469 out
->qs_bwarnlimit
= q
->qi_bwarnlimit
;
470 out
->qs_iwarnlimit
= q
->qi_iwarnlimit
;
475 #define XFS_DQ_MASK \
476 (FS_DQ_LIMIT_MASK | FS_DQ_TIMER_MASK | FS_DQ_WARNS_MASK)
479 * Adjust quota limits, and start/stop timers accordingly.
482 xfs_qm_scall_setqlim(
486 fs_disk_quota_t
*newlim
)
488 struct xfs_quotainfo
*q
= mp
->m_quotainfo
;
489 xfs_disk_dquot_t
*ddq
;
493 xfs_qcnt_t hard
, soft
;
495 if (newlim
->d_fieldmask
& ~XFS_DQ_MASK
)
497 if ((newlim
->d_fieldmask
& XFS_DQ_MASK
) == 0)
500 tp
= xfs_trans_alloc(mp
, XFS_TRANS_QM_SETQLIM
);
501 if ((error
= xfs_trans_reserve(tp
, 0, sizeof(xfs_disk_dquot_t
) + 128,
502 0, 0, XFS_DEFAULT_LOG_COUNT
))) {
503 xfs_trans_cancel(tp
, 0);
508 * We don't want to race with a quotaoff so take the quotaoff lock.
509 * (We don't hold an inode lock, so there's nothing else to stop
510 * a quotaoff from happening). (XXXThis doesn't currently happen
511 * because we take the vfslock before calling xfs_qm_sysent).
513 mutex_lock(&q
->qi_quotaofflock
);
516 * Get the dquot (locked), and join it to the transaction.
517 * Allocate the dquot if this doesn't exist.
519 if ((error
= xfs_qm_dqget(mp
, NULL
, id
, type
, XFS_QMOPT_DQALLOC
, &dqp
))) {
520 xfs_trans_cancel(tp
, XFS_TRANS_ABORT
);
521 ASSERT(error
!= ENOENT
);
524 xfs_trans_dqjoin(tp
, dqp
);
528 * Make sure that hardlimits are >= soft limits before changing.
530 hard
= (newlim
->d_fieldmask
& FS_DQ_BHARD
) ?
531 (xfs_qcnt_t
) XFS_BB_TO_FSB(mp
, newlim
->d_blk_hardlimit
) :
532 be64_to_cpu(ddq
->d_blk_hardlimit
);
533 soft
= (newlim
->d_fieldmask
& FS_DQ_BSOFT
) ?
534 (xfs_qcnt_t
) XFS_BB_TO_FSB(mp
, newlim
->d_blk_softlimit
) :
535 be64_to_cpu(ddq
->d_blk_softlimit
);
536 if (hard
== 0 || hard
>= soft
) {
537 ddq
->d_blk_hardlimit
= cpu_to_be64(hard
);
538 ddq
->d_blk_softlimit
= cpu_to_be64(soft
);
540 q
->qi_bhardlimit
= hard
;
541 q
->qi_bsoftlimit
= soft
;
544 qdprintk("blkhard %Ld < blksoft %Ld\n", hard
, soft
);
546 hard
= (newlim
->d_fieldmask
& FS_DQ_RTBHARD
) ?
547 (xfs_qcnt_t
) XFS_BB_TO_FSB(mp
, newlim
->d_rtb_hardlimit
) :
548 be64_to_cpu(ddq
->d_rtb_hardlimit
);
549 soft
= (newlim
->d_fieldmask
& FS_DQ_RTBSOFT
) ?
550 (xfs_qcnt_t
) XFS_BB_TO_FSB(mp
, newlim
->d_rtb_softlimit
) :
551 be64_to_cpu(ddq
->d_rtb_softlimit
);
552 if (hard
== 0 || hard
>= soft
) {
553 ddq
->d_rtb_hardlimit
= cpu_to_be64(hard
);
554 ddq
->d_rtb_softlimit
= cpu_to_be64(soft
);
556 q
->qi_rtbhardlimit
= hard
;
557 q
->qi_rtbsoftlimit
= soft
;
560 qdprintk("rtbhard %Ld < rtbsoft %Ld\n", hard
, soft
);
563 hard
= (newlim
->d_fieldmask
& FS_DQ_IHARD
) ?
564 (xfs_qcnt_t
) newlim
->d_ino_hardlimit
:
565 be64_to_cpu(ddq
->d_ino_hardlimit
);
566 soft
= (newlim
->d_fieldmask
& FS_DQ_ISOFT
) ?
567 (xfs_qcnt_t
) newlim
->d_ino_softlimit
:
568 be64_to_cpu(ddq
->d_ino_softlimit
);
569 if (hard
== 0 || hard
>= soft
) {
570 ddq
->d_ino_hardlimit
= cpu_to_be64(hard
);
571 ddq
->d_ino_softlimit
= cpu_to_be64(soft
);
573 q
->qi_ihardlimit
= hard
;
574 q
->qi_isoftlimit
= soft
;
577 qdprintk("ihard %Ld < isoft %Ld\n", hard
, soft
);
581 * Update warnings counter(s) if requested
583 if (newlim
->d_fieldmask
& FS_DQ_BWARNS
)
584 ddq
->d_bwarns
= cpu_to_be16(newlim
->d_bwarns
);
585 if (newlim
->d_fieldmask
& FS_DQ_IWARNS
)
586 ddq
->d_iwarns
= cpu_to_be16(newlim
->d_iwarns
);
587 if (newlim
->d_fieldmask
& FS_DQ_RTBWARNS
)
588 ddq
->d_rtbwarns
= cpu_to_be16(newlim
->d_rtbwarns
);
592 * Timelimits for the super user set the relative time
593 * the other users can be over quota for this file system.
594 * If it is zero a default is used. Ditto for the default
595 * soft and hard limit values (already done, above), and
598 if (newlim
->d_fieldmask
& FS_DQ_BTIMER
) {
599 q
->qi_btimelimit
= newlim
->d_btimer
;
600 ddq
->d_btimer
= cpu_to_be32(newlim
->d_btimer
);
602 if (newlim
->d_fieldmask
& FS_DQ_ITIMER
) {
603 q
->qi_itimelimit
= newlim
->d_itimer
;
604 ddq
->d_itimer
= cpu_to_be32(newlim
->d_itimer
);
606 if (newlim
->d_fieldmask
& FS_DQ_RTBTIMER
) {
607 q
->qi_rtbtimelimit
= newlim
->d_rtbtimer
;
608 ddq
->d_rtbtimer
= cpu_to_be32(newlim
->d_rtbtimer
);
610 if (newlim
->d_fieldmask
& FS_DQ_BWARNS
)
611 q
->qi_bwarnlimit
= newlim
->d_bwarns
;
612 if (newlim
->d_fieldmask
& FS_DQ_IWARNS
)
613 q
->qi_iwarnlimit
= newlim
->d_iwarns
;
614 if (newlim
->d_fieldmask
& FS_DQ_RTBWARNS
)
615 q
->qi_rtbwarnlimit
= newlim
->d_rtbwarns
;
618 * If the user is now over quota, start the timelimit.
619 * The user will not be 'warned'.
620 * Note that we keep the timers ticking, whether enforcement
621 * is on or off. We don't really want to bother with iterating
622 * over all ondisk dquots and turning the timers on/off.
624 xfs_qm_adjust_dqtimers(mp
, ddq
);
626 dqp
->dq_flags
|= XFS_DQ_DIRTY
;
627 xfs_trans_log_dquot(tp
, dqp
);
629 error
= xfs_trans_commit(tp
, 0);
634 mutex_unlock(&q
->qi_quotaofflock
);
639 xfs_qm_scall_getquota(
643 fs_disk_quota_t
*out
)
649 * Try to get the dquot. We don't want it allocated on disk, so
650 * we aren't passing the XFS_QMOPT_DOALLOC flag. If it doesn't
651 * exist, we'll get ENOENT back.
653 if ((error
= xfs_qm_dqget(mp
, NULL
, id
, type
, 0, &dqp
))) {
658 * If everything's NULL, this dquot doesn't quite exist as far as
659 * our utility programs are concerned.
661 if (XFS_IS_DQUOT_UNINITIALIZED(dqp
)) {
663 return XFS_ERROR(ENOENT
);
665 /* xfs_qm_dqprint(dqp); */
667 * Convert the disk dquot to the exportable format
669 xfs_qm_export_dquot(mp
, &dqp
->q_core
, out
);
671 return (error
? XFS_ERROR(EFAULT
) : 0);
676 xfs_qm_log_quotaoff_end(
678 xfs_qoff_logitem_t
*startqoff
,
683 xfs_qoff_logitem_t
*qoffi
;
685 tp
= xfs_trans_alloc(mp
, XFS_TRANS_QM_QUOTAOFF_END
);
687 if ((error
= xfs_trans_reserve(tp
, 0, sizeof(xfs_qoff_logitem_t
) * 2,
688 0, 0, XFS_DEFAULT_LOG_COUNT
))) {
689 xfs_trans_cancel(tp
, 0);
693 qoffi
= xfs_trans_get_qoff_item(tp
, startqoff
,
694 flags
& XFS_ALL_QUOTA_ACCT
);
695 xfs_trans_log_quotaoff_item(tp
, qoffi
);
698 * We have to make sure that the transaction is secure on disk before we
699 * return and actually stop quota accounting. So, make it synchronous.
700 * We don't care about quotoff's performance.
702 xfs_trans_set_sync(tp
);
703 error
= xfs_trans_commit(tp
, 0);
711 xfs_qoff_logitem_t
**qoffstartp
,
716 xfs_qoff_logitem_t
*qoffi
=NULL
;
719 tp
= xfs_trans_alloc(mp
, XFS_TRANS_QM_QUOTAOFF
);
720 if ((error
= xfs_trans_reserve(tp
, 0,
721 sizeof(xfs_qoff_logitem_t
) * 2 +
722 mp
->m_sb
.sb_sectsize
+ 128,
725 XFS_DEFAULT_LOG_COUNT
))) {
729 qoffi
= xfs_trans_get_qoff_item(tp
, NULL
, flags
& XFS_ALL_QUOTA_ACCT
);
730 xfs_trans_log_quotaoff_item(tp
, qoffi
);
732 spin_lock(&mp
->m_sb_lock
);
733 oldsbqflag
= mp
->m_sb
.sb_qflags
;
734 mp
->m_sb
.sb_qflags
= (mp
->m_qflags
& ~(flags
)) & XFS_MOUNT_QUOTA_ALL
;
735 spin_unlock(&mp
->m_sb_lock
);
737 xfs_mod_sb(tp
, XFS_SB_QFLAGS
);
740 * We have to make sure that the transaction is secure on disk before we
741 * return and actually stop quota accounting. So, make it synchronous.
742 * We don't care about quotoff's performance.
744 xfs_trans_set_sync(tp
);
745 error
= xfs_trans_commit(tp
, 0);
749 xfs_trans_cancel(tp
, 0);
751 * No one else is modifying sb_qflags, so this is OK.
752 * We still hold the quotaofflock.
754 spin_lock(&mp
->m_sb_lock
);
755 mp
->m_sb
.sb_qflags
= oldsbqflag
;
756 spin_unlock(&mp
->m_sb_lock
);
764 * Translate an internal style on-disk-dquot to the exportable format.
765 * The main differences are that the counters/limits are all in Basic
766 * Blocks (BBs) instead of the internal FSBs, and all on-disk data has
767 * to be converted to the native endianness.
772 xfs_disk_dquot_t
*src
,
773 struct fs_disk_quota
*dst
)
775 memset(dst
, 0, sizeof(*dst
));
776 dst
->d_version
= FS_DQUOT_VERSION
; /* different from src->d_version */
777 dst
->d_flags
= xfs_qm_export_qtype_flags(src
->d_flags
);
778 dst
->d_id
= be32_to_cpu(src
->d_id
);
779 dst
->d_blk_hardlimit
=
780 XFS_FSB_TO_BB(mp
, be64_to_cpu(src
->d_blk_hardlimit
));
781 dst
->d_blk_softlimit
=
782 XFS_FSB_TO_BB(mp
, be64_to_cpu(src
->d_blk_softlimit
));
783 dst
->d_ino_hardlimit
= be64_to_cpu(src
->d_ino_hardlimit
);
784 dst
->d_ino_softlimit
= be64_to_cpu(src
->d_ino_softlimit
);
785 dst
->d_bcount
= XFS_FSB_TO_BB(mp
, be64_to_cpu(src
->d_bcount
));
786 dst
->d_icount
= be64_to_cpu(src
->d_icount
);
787 dst
->d_btimer
= be32_to_cpu(src
->d_btimer
);
788 dst
->d_itimer
= be32_to_cpu(src
->d_itimer
);
789 dst
->d_iwarns
= be16_to_cpu(src
->d_iwarns
);
790 dst
->d_bwarns
= be16_to_cpu(src
->d_bwarns
);
791 dst
->d_rtb_hardlimit
=
792 XFS_FSB_TO_BB(mp
, be64_to_cpu(src
->d_rtb_hardlimit
));
793 dst
->d_rtb_softlimit
=
794 XFS_FSB_TO_BB(mp
, be64_to_cpu(src
->d_rtb_softlimit
));
795 dst
->d_rtbcount
= XFS_FSB_TO_BB(mp
, be64_to_cpu(src
->d_rtbcount
));
796 dst
->d_rtbtimer
= be32_to_cpu(src
->d_rtbtimer
);
797 dst
->d_rtbwarns
= be16_to_cpu(src
->d_rtbwarns
);
800 * Internally, we don't reset all the timers when quota enforcement
801 * gets turned off. No need to confuse the user level code,
802 * so return zeroes in that case.
804 if ((!XFS_IS_UQUOTA_ENFORCED(mp
) && src
->d_flags
== XFS_DQ_USER
) ||
805 (!XFS_IS_OQUOTA_ENFORCED(mp
) &&
806 (src
->d_flags
& (XFS_DQ_PROJ
| XFS_DQ_GROUP
)))) {
813 if (((XFS_IS_UQUOTA_ENFORCED(mp
) && dst
->d_flags
== FS_USER_QUOTA
) ||
814 (XFS_IS_OQUOTA_ENFORCED(mp
) &&
815 (dst
->d_flags
& (FS_PROJ_QUOTA
| FS_GROUP_QUOTA
)))) &&
817 if (((int) dst
->d_bcount
>= (int) dst
->d_blk_softlimit
) &&
818 (dst
->d_blk_softlimit
> 0)) {
819 ASSERT(dst
->d_btimer
!= 0);
821 if (((int) dst
->d_icount
>= (int) dst
->d_ino_softlimit
) &&
822 (dst
->d_ino_softlimit
> 0)) {
823 ASSERT(dst
->d_itimer
!= 0);
830 xfs_qm_export_qtype_flags(
834 * Can't be more than one, or none.
836 ASSERT((flags
& (FS_PROJ_QUOTA
| FS_USER_QUOTA
)) !=
837 (FS_PROJ_QUOTA
| FS_USER_QUOTA
));
838 ASSERT((flags
& (FS_PROJ_QUOTA
| FS_GROUP_QUOTA
)) !=
839 (FS_PROJ_QUOTA
| FS_GROUP_QUOTA
));
840 ASSERT((flags
& (FS_USER_QUOTA
| FS_GROUP_QUOTA
)) !=
841 (FS_USER_QUOTA
| FS_GROUP_QUOTA
));
842 ASSERT((flags
& (FS_PROJ_QUOTA
|FS_USER_QUOTA
|FS_GROUP_QUOTA
)) != 0);
844 return (flags
& XFS_DQ_USER
) ?
845 FS_USER_QUOTA
: (flags
& XFS_DQ_PROJ
) ?
846 FS_PROJ_QUOTA
: FS_GROUP_QUOTA
;
856 if (flags
& XFS_UQUOTA_ACCT
)
857 uflags
|= FS_QUOTA_UDQ_ACCT
;
858 if (flags
& XFS_PQUOTA_ACCT
)
859 uflags
|= FS_QUOTA_PDQ_ACCT
;
860 if (flags
& XFS_GQUOTA_ACCT
)
861 uflags
|= FS_QUOTA_GDQ_ACCT
;
862 if (flags
& XFS_UQUOTA_ENFD
)
863 uflags
|= FS_QUOTA_UDQ_ENFD
;
864 if (flags
& (XFS_OQUOTA_ENFD
)) {
865 uflags
|= (flags
& XFS_GQUOTA_ACCT
) ?
866 FS_QUOTA_GDQ_ENFD
: FS_QUOTA_PDQ_ENFD
;
874 struct xfs_inode
*ip
,
875 struct xfs_perag
*pag
,
878 /* skip quota inodes */
879 if (ip
== ip
->i_mount
->m_quotainfo
->qi_uquotaip
||
880 ip
== ip
->i_mount
->m_quotainfo
->qi_gquotaip
) {
881 ASSERT(ip
->i_udquot
== NULL
);
882 ASSERT(ip
->i_gdquot
== NULL
);
886 xfs_ilock(ip
, XFS_ILOCK_EXCL
);
887 if ((flags
& XFS_UQUOTA_ACCT
) && ip
->i_udquot
) {
888 xfs_qm_dqrele(ip
->i_udquot
);
891 if (flags
& (XFS_PQUOTA_ACCT
|XFS_GQUOTA_ACCT
) && ip
->i_gdquot
) {
892 xfs_qm_dqrele(ip
->i_gdquot
);
895 xfs_iunlock(ip
, XFS_ILOCK_EXCL
);
901 * Go thru all the inodes in the file system, releasing their dquots.
903 * Note that the mount structure gets modified to indicate that quotas are off
904 * AFTER this, in the case of quotaoff.
907 xfs_qm_dqrele_all_inodes(
908 struct xfs_mount
*mp
,
911 ASSERT(mp
->m_quotainfo
);
912 xfs_inode_ag_iterator(mp
, xfs_dqrele_inode
, flags
);
915 /*------------------------------------------------------------------------*/
918 * This contains all the test functions for XFS disk quotas.
919 * Currently it does a quota accounting check. ie. it walks through
920 * all inodes in the file system, calculating the dquot accounting fields,
921 * and prints out any inconsistencies.
923 xfs_dqhash_t
*qmtest_udqtab
;
924 xfs_dqhash_t
*qmtest_gdqtab
;
927 struct mutex qcheck_lock
;
929 #define DQTEST_HASHVAL(mp, id) (((__psunsigned_t)(mp) + \
930 (__psunsigned_t)(id)) & \
931 (qmtest_hashmask - 1))
933 #define DQTEST_HASH(mp, id, type) ((type & XFS_DQ_USER) ? \
935 DQTEST_HASHVAL(mp, id)) : \
937 DQTEST_HASHVAL(mp, id)))
939 #define DQTEST_LIST_PRINT(l, NXT, title) \
941 xfs_dqtest_t *dqp; int i = 0;\
942 cmn_err(CE_DEBUG, "%s (#%d)", title, (int) (l)->qh_nelems); \
943 for (dqp = (xfs_dqtest_t *)(l)->qh_next; dqp != NULL; \
944 dqp = (xfs_dqtest_t *)dqp->NXT) { \
945 cmn_err(CE_DEBUG, " %d. \"%d (%s)\" bcnt = %d, icnt = %d", \
946 ++i, dqp->d_id, DQFLAGTO_TYPESTR(dqp), \
947 dqp->d_bcount, dqp->d_icount); } \
950 typedef struct dqtest
{
951 uint dq_flags
; /* various flags (XFS_DQ_*) */
952 struct list_head q_hashlist
;
953 xfs_dqhash_t
*q_hash
; /* the hashchain header */
954 xfs_mount_t
*q_mount
; /* filesystem this relates to */
955 xfs_dqid_t d_id
; /* user id or group id */
956 xfs_qcnt_t d_bcount
; /* # disk blocks owned by the user */
957 xfs_qcnt_t d_icount
; /* # inodes owned by the user */
961 xfs_qm_hashinsert(xfs_dqhash_t
*h
, xfs_dqtest_t
*dqp
)
963 list_add(&dqp
->q_hashlist
, &h
->qh_list
);
971 cmn_err(CE_DEBUG
, "-----------DQTEST DQUOT----------------");
972 cmn_err(CE_DEBUG
, "---- dquot ID = %d", d
->d_id
);
973 cmn_err(CE_DEBUG
, "---- fs = 0x%p", d
->q_mount
);
974 cmn_err(CE_DEBUG
, "---- bcount = %Lu (0x%x)",
975 d
->d_bcount
, (int)d
->d_bcount
);
976 cmn_err(CE_DEBUG
, "---- icount = %Lu (0x%x)",
977 d
->d_icount
, (int)d
->d_icount
);
978 cmn_err(CE_DEBUG
, "---------------------------");
982 xfs_qm_dqtest_failed(
992 cmn_err(CE_DEBUG
, "quotacheck failed id=%d, err=%d\nreason: %s",
993 d
->d_id
, error
, reason
);
995 cmn_err(CE_DEBUG
, "quotacheck failed id=%d (%s) [%d != %d]",
996 d
->d_id
, reason
, (int)a
, (int)b
);
997 xfs_qm_dqtest_print(d
);
1008 if (be64_to_cpu(dqp
->q_core
.d_icount
) != d
->d_icount
) {
1009 xfs_qm_dqtest_failed(d
, dqp
, "icount mismatch",
1010 be64_to_cpu(dqp
->q_core
.d_icount
),
1014 if (be64_to_cpu(dqp
->q_core
.d_bcount
) != d
->d_bcount
) {
1015 xfs_qm_dqtest_failed(d
, dqp
, "bcount mismatch",
1016 be64_to_cpu(dqp
->q_core
.d_bcount
),
1020 if (dqp
->q_core
.d_blk_softlimit
&&
1021 be64_to_cpu(dqp
->q_core
.d_bcount
) >=
1022 be64_to_cpu(dqp
->q_core
.d_blk_softlimit
)) {
1023 if (!dqp
->q_core
.d_btimer
&& dqp
->q_core
.d_id
) {
1025 "%d [%s] [0x%p] BLK TIMER NOT STARTED",
1026 d
->d_id
, DQFLAGTO_TYPESTR(d
), d
->q_mount
);
1030 if (dqp
->q_core
.d_ino_softlimit
&&
1031 be64_to_cpu(dqp
->q_core
.d_icount
) >=
1032 be64_to_cpu(dqp
->q_core
.d_ino_softlimit
)) {
1033 if (!dqp
->q_core
.d_itimer
&& dqp
->q_core
.d_id
) {
1035 "%d [%s] [0x%p] INO TIMER NOT STARTED",
1036 d
->d_id
, DQFLAGTO_TYPESTR(d
), d
->q_mount
);
1042 cmn_err(CE_DEBUG
, "%d [%s] [0x%p] qchecked",
1043 d
->d_id
, DQFLAGTO_TYPESTR(d
), d
->q_mount
);
1056 /* xfs_qm_dqtest_print(d); */
1057 if ((error
= xfs_qm_dqget(d
->q_mount
, NULL
, d
->d_id
, d
->dq_flags
, 0,
1059 xfs_qm_dqtest_failed(d
, NULL
, "dqget failed", 0, 0, error
);
1062 xfs_dqtest_cmp2(d
, dqp
);
1067 xfs_qm_internalqcheck_dqget(
1071 xfs_dqtest_t
**O_dq
)
1076 h
= DQTEST_HASH(mp
, id
, type
);
1077 list_for_each_entry(d
, &h
->qh_list
, q_hashlist
) {
1078 if (d
->d_id
== id
&& mp
== d
->q_mount
) {
1083 d
= kmem_zalloc(sizeof(xfs_dqtest_t
), KM_SLEEP
);
1088 INIT_LIST_HEAD(&d
->q_hashlist
);
1089 xfs_qm_hashinsert(h
, d
);
1095 xfs_qm_internalqcheck_get_dquots(
1103 if (XFS_IS_UQUOTA_ON(mp
))
1104 xfs_qm_internalqcheck_dqget(mp
, uid
, XFS_DQ_USER
, ud
);
1105 if (XFS_IS_GQUOTA_ON(mp
))
1106 xfs_qm_internalqcheck_dqget(mp
, gid
, XFS_DQ_GROUP
, gd
);
1107 else if (XFS_IS_PQUOTA_ON(mp
))
1108 xfs_qm_internalqcheck_dqget(mp
, projid
, XFS_DQ_PROJ
, gd
);
1113 xfs_qm_internalqcheck_dqadjust(
1118 d
->d_bcount
+= (xfs_qcnt_t
)ip
->i_d
.di_nblocks
;
1122 xfs_qm_internalqcheck_adjust(
1123 xfs_mount_t
*mp
, /* mount point for filesystem */
1124 xfs_ino_t ino
, /* inode number to get data for */
1125 void __user
*buffer
, /* not used */
1126 int ubsize
, /* not used */
1127 int *ubused
, /* not used */
1128 int *res
) /* bulkstat result code */
1131 xfs_dqtest_t
*ud
, *gd
;
1133 boolean_t ipreleased
;
1136 ASSERT(XFS_IS_QUOTA_RUNNING(mp
));
1138 if (ino
== mp
->m_sb
.sb_uquotino
|| ino
== mp
->m_sb
.sb_gquotino
) {
1139 *res
= BULKSTAT_RV_NOTHING
;
1140 qdprintk("internalqcheck: ino=%llu, uqino=%llu, gqino=%llu\n",
1141 (unsigned long long) ino
,
1142 (unsigned long long) mp
->m_sb
.sb_uquotino
,
1143 (unsigned long long) mp
->m_sb
.sb_gquotino
);
1144 return XFS_ERROR(EINVAL
);
1146 ipreleased
= B_FALSE
;
1148 lock_flags
= XFS_ILOCK_SHARED
;
1149 if ((error
= xfs_iget(mp
, NULL
, ino
, 0, lock_flags
, &ip
))) {
1150 *res
= BULKSTAT_RV_NOTHING
;
1155 * This inode can have blocks after eof which can get released
1156 * when we send it to inactive. Since we don't check the dquot
1157 * until the after all our calculations are done, we must get rid
1161 xfs_iunlock(ip
, lock_flags
);
1163 ipreleased
= B_TRUE
;
1166 xfs_qm_internalqcheck_get_dquots(mp
,
1167 (xfs_dqid_t
) ip
->i_d
.di_uid
,
1168 (xfs_dqid_t
) xfs_get_projid(ip
),
1169 (xfs_dqid_t
) ip
->i_d
.di_gid
,
1171 if (XFS_IS_UQUOTA_ON(mp
)) {
1173 xfs_qm_internalqcheck_dqadjust(ip
, ud
);
1175 if (XFS_IS_OQUOTA_ON(mp
)) {
1177 xfs_qm_internalqcheck_dqadjust(ip
, gd
);
1179 xfs_iunlock(ip
, lock_flags
);
1181 *res
= BULKSTAT_RV_DIDONE
;
1186 /* PRIVATE, debugging */
1188 xfs_qm_internalqcheck(
1197 qmtest_hashmask
= 32;
1202 if (! XFS_IS_QUOTA_ON(mp
))
1203 return XFS_ERROR(ESRCH
);
1205 xfs_log_force(mp
, XFS_LOG_SYNC
);
1206 XFS_bflush(mp
->m_ddev_targp
);
1207 xfs_log_force(mp
, XFS_LOG_SYNC
);
1208 XFS_bflush(mp
->m_ddev_targp
);
1210 mutex_lock(&qcheck_lock
);
1211 /* There should be absolutely no quota activity while this
1213 qmtest_udqtab
= kmem_zalloc(qmtest_hashmask
*
1214 sizeof(xfs_dqhash_t
), KM_SLEEP
);
1215 qmtest_gdqtab
= kmem_zalloc(qmtest_hashmask
*
1216 sizeof(xfs_dqhash_t
), KM_SLEEP
);
1219 * Iterate thru all the inodes in the file system,
1220 * adjusting the corresponding dquot counters
1222 error
= xfs_bulkstat(mp
, &lastino
, &count
,
1223 xfs_qm_internalqcheck_adjust
,
1226 cmn_err(CE_DEBUG
, "Bulkstat returned error 0x%x", error
);
1231 cmn_err(CE_DEBUG
, "Checking results against system dquots");
1232 for (i
= 0; i
< qmtest_hashmask
; i
++) {
1233 xfs_dqtest_t
*d
, *n
;
1236 h
= &qmtest_udqtab
[i
];
1237 list_for_each_entry_safe(d
, n
, &h
->qh_list
, q_hashlist
) {
1241 h
= &qmtest_gdqtab
[i
];
1242 list_for_each_entry_safe(d
, n
, &h
->qh_list
, q_hashlist
) {
1248 if (qmtest_nfails
) {
1249 cmn_err(CE_DEBUG
, "******** quotacheck failed ********");
1250 cmn_err(CE_DEBUG
, "failures = %d", qmtest_nfails
);
1252 cmn_err(CE_DEBUG
, "******** quotacheck successful! ********");
1254 kmem_free(qmtest_udqtab
);
1255 kmem_free(qmtest_gdqtab
);
1256 mutex_unlock(&qcheck_lock
);
1257 return (qmtest_nfails
);