nfssvc.c 27 KB

123456789101112131415161718192021222324252627282930313233343536373839404142434445464748495051525354555657585960616263646566676869707172737475767778798081828384858687888990919293949596979899100101102103104105106107108109110111112113114115116117118119120121122123124125126127128129130131132133134135136137138139140141142143144145146147148149150151152153154155156157158159160161162163164165166167168169170171172173174175176177178179180181182183184185186187188189190191192193194195196197198199200201202203204205206207208209210211212213214215216217218219220221222223224225226227228229230231232233234235236237238239240241242243244245246247248249250251252253254255256257258259260261262263264265266267268269270271272273274275276277278279280281282283284285286287288289290291292293294295296297298299300301302303304305306307308309310311312313314315316317318319320321322323324325326327328329330331332333334335336337338339340341342343344345346347348349350351352353354355356357358359360361362363364365366367368369370371372373374375376377378379380381382383384385386387388389390391392393394395396397398399400401402403404405406407408409410411412413414415416417418419420421422423424425426427428429430431432433434435436437438439440441442443444445446447448449450451452453454455456457458459460461462463464465466467468469470471472473474475476477478479480481482483484485486487488489490491492493494495496497498499500501502503504505506507508509510511512513514515516517518519520521522523524525526527528529530531532533534535536537538539540541542543544545546547548549550551552553554555556557558559560561562563564565566567568569570571572573574575576577578579580581582583584585586587588589590591592593594595596597598599600601602603604605606607608609610611612613614615616617618619620621622623624625626627628629630631632633634635636637638639640641642643644645646647648649650651652653654655656657658659660661662663664665666667668669670671672673674675676677678679680681682683684685686687688689690691692693694695696697698699700701702703704705706707708709710711712713714715716717718719720721722723724725726727728729730731732733734735736737738739740741742743744745746747748749750751752753754755756757758759760761762763764765766767768769770771772773774775776777778779780781782783784785786787788789790791792793794795796797798799800801802803804805806807808809810811812813814815816817818819820821822823824825826827828829830831832833834835836837838839840841842843844845846847848849850851852853854855856857858859860861862863864865866867868869870871872873874875876877878879880881882883884885886887888889890891892893894895896897898899900901902903904905906907908909910911912913914915916917918919920921922923924925926927928929930931932933934935936937938939940941942943944945946947948949950951952953954955956957958959960961962963964965966967968969970971972973974975976977978979980981982983984985986987988989990991992993994995996997998999100010011002100310041005100610071008100910101011101210131014101510161017101810191020102110221023102410251026102710281029103010311032103310341035103610371038103910401041104210431044104510461047104810491050105110521053105410551056105710581059106010611062106310641065106610671068106910701071107210731074107510761077107810791080108110821083108410851086
  1. // SPDX-License-Identifier: GPL-2.0
  2. /*
  3. * Central processing for nfsd.
  4. *
  5. * Authors: Olaf Kirch (okir@monad.swb.de)
  6. *
  7. * Copyright (C) 1995, 1996, 1997 Olaf Kirch <okir@monad.swb.de>
  8. */
  9. #include <linux/sched/signal.h>
  10. #include <linux/freezer.h>
  11. #include <linux/module.h>
  12. #include <linux/fs_struct.h>
  13. #include <linux/swap.h>
  14. #include <linux/siphash.h>
  15. #include <linux/sunrpc/stats.h>
  16. #include <linux/sunrpc/svcsock.h>
  17. #include <linux/sunrpc/svc_xprt.h>
  18. #include <linux/lockd/bind.h>
  19. #include <linux/nfsacl.h>
  20. #include <linux/nfslocalio.h>
  21. #include <linux/seq_file.h>
  22. #include <linux/inetdevice.h>
  23. #include <net/addrconf.h>
  24. #include <net/ipv6.h>
  25. #include <net/net_namespace.h>
  26. #include "nfsd.h"
  27. #include "cache.h"
  28. #include "vfs.h"
  29. #include "netns.h"
  30. #include "filecache.h"
  31. #include "trace.h"
  32. #define NFSDDBG_FACILITY NFSDDBG_SVC
  33. atomic_t nfsd_th_cnt = ATOMIC_INIT(0);
  34. static int nfsd(void *vrqstp);
  35. #if defined(CONFIG_NFSD_V2_ACL) || defined(CONFIG_NFSD_V3_ACL)
  36. static int nfsd_acl_rpcbind_set(struct net *,
  37. const struct svc_program *,
  38. u32, int,
  39. unsigned short,
  40. unsigned short);
  41. static __be32 nfsd_acl_init_request(struct svc_rqst *,
  42. const struct svc_program *,
  43. struct svc_process_info *);
  44. #endif
  45. static int nfsd_rpcbind_set(struct net *,
  46. const struct svc_program *,
  47. u32, int,
  48. unsigned short,
  49. unsigned short);
  50. static __be32 nfsd_init_request(struct svc_rqst *,
  51. const struct svc_program *,
  52. struct svc_process_info *);
  53. /*
  54. * nfsd_mutex protects nn->nfsd_serv -- both the pointer itself and some members
  55. * of the svc_serv struct such as ->sv_temp_socks and ->sv_permsocks.
  56. *
  57. * Finally, the nfsd_mutex also protects some of the global variables that are
  58. * accessed when nfsd starts and that are settable via the write_* routines in
  59. * nfsctl.c. In particular:
  60. *
  61. * user_recovery_dirname
  62. * user_lease_time
  63. * nfsd_versions
  64. */
  65. DEFINE_MUTEX(nfsd_mutex);
  66. /*
  67. * nfsd_drc_lock protects nfsd_drc_max_pages and nfsd_drc_pages_used.
  68. * nfsd_drc_max_pages limits the total amount of memory available for
  69. * version 4.1 DRC caches.
  70. * nfsd_drc_pages_used tracks the current version 4.1 DRC memory usage.
  71. */
  72. DEFINE_SPINLOCK(nfsd_drc_lock);
  73. unsigned long nfsd_drc_max_mem;
  74. unsigned long nfsd_drc_mem_used;
  75. #if IS_ENABLED(CONFIG_NFS_LOCALIO)
  76. static const struct svc_version *localio_versions[] = {
  77. [1] = &localio_version1,
  78. };
  79. #define NFSD_LOCALIO_NRVERS ARRAY_SIZE(localio_versions)
  80. #endif /* CONFIG_NFS_LOCALIO */
  81. #if defined(CONFIG_NFSD_V2_ACL) || defined(CONFIG_NFSD_V3_ACL)
  82. static const struct svc_version *nfsd_acl_version[] = {
  83. # if defined(CONFIG_NFSD_V2_ACL)
  84. [2] = &nfsd_acl_version2,
  85. # endif
  86. # if defined(CONFIG_NFSD_V3_ACL)
  87. [3] = &nfsd_acl_version3,
  88. # endif
  89. };
  90. #define NFSD_ACL_MINVERS 2
  91. #define NFSD_ACL_NRVERS ARRAY_SIZE(nfsd_acl_version)
  92. #endif /* defined(CONFIG_NFSD_V2_ACL) || defined(CONFIG_NFSD_V3_ACL) */
  93. static const struct svc_version *nfsd_version[NFSD_MAXVERS+1] = {
  94. #if defined(CONFIG_NFSD_V2)
  95. [2] = &nfsd_version2,
  96. #endif
  97. [3] = &nfsd_version3,
  98. #if defined(CONFIG_NFSD_V4)
  99. [4] = &nfsd_version4,
  100. #endif
  101. };
  102. struct svc_program nfsd_programs[] = {
  103. {
  104. .pg_prog = NFS_PROGRAM, /* program number */
  105. .pg_nvers = NFSD_MAXVERS+1, /* nr of entries in nfsd_version */
  106. .pg_vers = nfsd_version, /* version table */
  107. .pg_name = "nfsd", /* program name */
  108. .pg_class = "nfsd", /* authentication class */
  109. .pg_authenticate = svc_set_client, /* export authentication */
  110. .pg_init_request = nfsd_init_request,
  111. .pg_rpcbind_set = nfsd_rpcbind_set,
  112. },
  113. #if defined(CONFIG_NFSD_V2_ACL) || defined(CONFIG_NFSD_V3_ACL)
  114. {
  115. .pg_prog = NFS_ACL_PROGRAM,
  116. .pg_nvers = NFSD_ACL_NRVERS,
  117. .pg_vers = nfsd_acl_version,
  118. .pg_name = "nfsacl",
  119. .pg_class = "nfsd",
  120. .pg_authenticate = svc_set_client,
  121. .pg_init_request = nfsd_acl_init_request,
  122. .pg_rpcbind_set = nfsd_acl_rpcbind_set,
  123. },
  124. #endif /* defined(CONFIG_NFSD_V2_ACL) || defined(CONFIG_NFSD_V3_ACL) */
  125. #if IS_ENABLED(CONFIG_NFS_LOCALIO)
  126. {
  127. .pg_prog = NFS_LOCALIO_PROGRAM,
  128. .pg_nvers = NFSD_LOCALIO_NRVERS,
  129. .pg_vers = localio_versions,
  130. .pg_name = "nfslocalio",
  131. .pg_class = "nfsd",
  132. .pg_authenticate = svc_set_client,
  133. .pg_init_request = svc_generic_init_request,
  134. .pg_rpcbind_set = svc_generic_rpcbind_set,
  135. }
  136. #endif /* CONFIG_NFS_LOCALIO */
  137. };
  138. bool nfsd_support_version(int vers)
  139. {
  140. if (vers >= NFSD_MINVERS && vers <= NFSD_MAXVERS)
  141. return nfsd_version[vers] != NULL;
  142. return false;
  143. }
  144. int nfsd_vers(struct nfsd_net *nn, int vers, enum vers_op change)
  145. {
  146. if (vers < NFSD_MINVERS || vers > NFSD_MAXVERS)
  147. return 0;
  148. switch(change) {
  149. case NFSD_SET:
  150. nn->nfsd_versions[vers] = nfsd_support_version(vers);
  151. break;
  152. case NFSD_CLEAR:
  153. nn->nfsd_versions[vers] = false;
  154. break;
  155. case NFSD_TEST:
  156. return nn->nfsd_versions[vers];
  157. case NFSD_AVAIL:
  158. return nfsd_support_version(vers);
  159. }
  160. return 0;
  161. }
  162. static void
  163. nfsd_adjust_nfsd_versions4(struct nfsd_net *nn)
  164. {
  165. unsigned i;
  166. for (i = 0; i <= NFSD_SUPPORTED_MINOR_VERSION; i++) {
  167. if (nn->nfsd4_minorversions[i])
  168. return;
  169. }
  170. nfsd_vers(nn, 4, NFSD_CLEAR);
  171. }
  172. int nfsd_minorversion(struct nfsd_net *nn, u32 minorversion, enum vers_op change)
  173. {
  174. if (minorversion > NFSD_SUPPORTED_MINOR_VERSION &&
  175. change != NFSD_AVAIL)
  176. return -1;
  177. switch(change) {
  178. case NFSD_SET:
  179. nfsd_vers(nn, 4, NFSD_SET);
  180. nn->nfsd4_minorversions[minorversion] =
  181. nfsd_vers(nn, 4, NFSD_TEST);
  182. break;
  183. case NFSD_CLEAR:
  184. nn->nfsd4_minorversions[minorversion] = false;
  185. nfsd_adjust_nfsd_versions4(nn);
  186. break;
  187. case NFSD_TEST:
  188. return nn->nfsd4_minorversions[minorversion];
  189. case NFSD_AVAIL:
  190. return minorversion <= NFSD_SUPPORTED_MINOR_VERSION &&
  191. nfsd_vers(nn, 4, NFSD_AVAIL);
  192. }
  193. return 0;
  194. }
  195. bool nfsd_serv_try_get(struct net *net) __must_hold(rcu)
  196. {
  197. struct nfsd_net *nn = net_generic(net, nfsd_net_id);
  198. return (nn && percpu_ref_tryget_live(&nn->nfsd_serv_ref));
  199. }
  200. void nfsd_serv_put(struct net *net) __must_hold(rcu)
  201. {
  202. struct nfsd_net *nn = net_generic(net, nfsd_net_id);
  203. percpu_ref_put(&nn->nfsd_serv_ref);
  204. }
  205. static void nfsd_serv_done(struct percpu_ref *ref)
  206. {
  207. struct nfsd_net *nn = container_of(ref, struct nfsd_net, nfsd_serv_ref);
  208. complete(&nn->nfsd_serv_confirm_done);
  209. }
  210. static void nfsd_serv_free(struct percpu_ref *ref)
  211. {
  212. struct nfsd_net *nn = container_of(ref, struct nfsd_net, nfsd_serv_ref);
  213. complete(&nn->nfsd_serv_free_done);
  214. }
  215. /*
  216. * Maximum number of nfsd processes
  217. */
  218. #define NFSD_MAXSERVS 8192
  219. int nfsd_nrthreads(struct net *net)
  220. {
  221. int rv = 0;
  222. struct nfsd_net *nn = net_generic(net, nfsd_net_id);
  223. mutex_lock(&nfsd_mutex);
  224. if (nn->nfsd_serv)
  225. rv = nn->nfsd_serv->sv_nrthreads;
  226. mutex_unlock(&nfsd_mutex);
  227. return rv;
  228. }
  229. static int nfsd_init_socks(struct net *net, const struct cred *cred)
  230. {
  231. int error;
  232. struct nfsd_net *nn = net_generic(net, nfsd_net_id);
  233. if (!list_empty(&nn->nfsd_serv->sv_permsocks))
  234. return 0;
  235. error = svc_xprt_create(nn->nfsd_serv, "udp", net, PF_INET, NFS_PORT,
  236. SVC_SOCK_DEFAULTS, cred);
  237. if (error < 0)
  238. return error;
  239. error = svc_xprt_create(nn->nfsd_serv, "tcp", net, PF_INET, NFS_PORT,
  240. SVC_SOCK_DEFAULTS, cred);
  241. if (error < 0)
  242. return error;
  243. return 0;
  244. }
  245. static int nfsd_users = 0;
  246. static int nfsd_startup_generic(void)
  247. {
  248. int ret;
  249. if (nfsd_users++)
  250. return 0;
  251. ret = nfsd_file_cache_init();
  252. if (ret)
  253. goto dec_users;
  254. ret = nfs4_state_start();
  255. if (ret)
  256. goto out_file_cache;
  257. return 0;
  258. out_file_cache:
  259. nfsd_file_cache_shutdown();
  260. dec_users:
  261. nfsd_users--;
  262. return ret;
  263. }
  264. static void nfsd_shutdown_generic(void)
  265. {
  266. if (--nfsd_users)
  267. return;
  268. nfs4_state_shutdown();
  269. nfsd_file_cache_shutdown();
  270. }
  271. static bool nfsd_needs_lockd(struct nfsd_net *nn)
  272. {
  273. return nfsd_vers(nn, 2, NFSD_TEST) || nfsd_vers(nn, 3, NFSD_TEST);
  274. }
  275. /**
  276. * nfsd_copy_write_verifier - Atomically copy a write verifier
  277. * @verf: buffer in which to receive the verifier cookie
  278. * @nn: NFS net namespace
  279. *
  280. * This function provides a wait-free mechanism for copying the
  281. * namespace's write verifier without tearing it.
  282. */
  283. void nfsd_copy_write_verifier(__be32 verf[2], struct nfsd_net *nn)
  284. {
  285. unsigned int seq;
  286. do {
  287. seq = read_seqbegin(&nn->writeverf_lock);
  288. memcpy(verf, nn->writeverf, sizeof(nn->writeverf));
  289. } while (read_seqretry(&nn->writeverf_lock, seq));
  290. }
  291. static void nfsd_reset_write_verifier_locked(struct nfsd_net *nn)
  292. {
  293. struct timespec64 now;
  294. u64 verf;
  295. /*
  296. * Because the time value is hashed, y2038 time_t overflow
  297. * is irrelevant in this usage.
  298. */
  299. ktime_get_raw_ts64(&now);
  300. verf = siphash_2u64(now.tv_sec, now.tv_nsec, &nn->siphash_key);
  301. memcpy(nn->writeverf, &verf, sizeof(nn->writeverf));
  302. }
  303. /**
  304. * nfsd_reset_write_verifier - Generate a new write verifier
  305. * @nn: NFS net namespace
  306. *
  307. * This function updates the ->writeverf field of @nn. This field
  308. * contains an opaque cookie that, according to Section 18.32.3 of
  309. * RFC 8881, "the client can use to determine whether a server has
  310. * changed instance state (e.g., server restart) between a call to
  311. * WRITE and a subsequent call to either WRITE or COMMIT. This
  312. * cookie MUST be unchanged during a single instance of the NFSv4.1
  313. * server and MUST be unique between instances of the NFSv4.1
  314. * server."
  315. */
  316. void nfsd_reset_write_verifier(struct nfsd_net *nn)
  317. {
  318. write_seqlock(&nn->writeverf_lock);
  319. nfsd_reset_write_verifier_locked(nn);
  320. write_sequnlock(&nn->writeverf_lock);
  321. }
  322. /*
  323. * Crank up a set of per-namespace resources for a new NFSD instance,
  324. * including lockd, a duplicate reply cache, an open file cache
  325. * instance, and a cache of NFSv4 state objects.
  326. */
  327. static int nfsd_startup_net(struct net *net, const struct cred *cred)
  328. {
  329. struct nfsd_net *nn = net_generic(net, nfsd_net_id);
  330. int ret;
  331. if (nn->nfsd_net_up)
  332. return 0;
  333. ret = nfsd_startup_generic();
  334. if (ret)
  335. return ret;
  336. ret = nfsd_init_socks(net, cred);
  337. if (ret)
  338. goto out_socks;
  339. if (nfsd_needs_lockd(nn) && !nn->lockd_up) {
  340. ret = lockd_up(net, cred);
  341. if (ret)
  342. goto out_socks;
  343. nn->lockd_up = true;
  344. }
  345. ret = nfsd_file_cache_start_net(net);
  346. if (ret)
  347. goto out_lockd;
  348. ret = nfsd_reply_cache_init(nn);
  349. if (ret)
  350. goto out_filecache;
  351. #ifdef CONFIG_NFSD_V4_2_INTER_SSC
  352. nfsd4_ssc_init_umount_work(nn);
  353. #endif
  354. ret = nfs4_state_start_net(net);
  355. if (ret)
  356. goto out_reply_cache;
  357. nn->nfsd_net_up = true;
  358. return 0;
  359. out_reply_cache:
  360. nfsd_reply_cache_shutdown(nn);
  361. out_filecache:
  362. nfsd_file_cache_shutdown_net(net);
  363. out_lockd:
  364. if (nn->lockd_up) {
  365. lockd_down(net);
  366. nn->lockd_up = false;
  367. }
  368. out_socks:
  369. nfsd_shutdown_generic();
  370. return ret;
  371. }
  372. static void nfsd_shutdown_net(struct net *net)
  373. {
  374. struct nfsd_net *nn = net_generic(net, nfsd_net_id);
  375. if (!nn->nfsd_net_up)
  376. return;
  377. nfsd_export_flush(net);
  378. nfs4_state_shutdown_net(net);
  379. nfsd_reply_cache_shutdown(nn);
  380. nfsd_file_cache_shutdown_net(net);
  381. if (nn->lockd_up) {
  382. lockd_down(net);
  383. nn->lockd_up = false;
  384. }
  385. percpu_ref_exit(&nn->nfsd_serv_ref);
  386. nn->nfsd_net_up = false;
  387. nfsd_shutdown_generic();
  388. }
  389. static DEFINE_SPINLOCK(nfsd_notifier_lock);
  390. static int nfsd_inetaddr_event(struct notifier_block *this, unsigned long event,
  391. void *ptr)
  392. {
  393. struct in_ifaddr *ifa = (struct in_ifaddr *)ptr;
  394. struct net_device *dev = ifa->ifa_dev->dev;
  395. struct net *net = dev_net(dev);
  396. struct nfsd_net *nn = net_generic(net, nfsd_net_id);
  397. struct sockaddr_in sin;
  398. if (event != NETDEV_DOWN || !nn->nfsd_serv)
  399. goto out;
  400. spin_lock(&nfsd_notifier_lock);
  401. if (nn->nfsd_serv) {
  402. dprintk("nfsd_inetaddr_event: removed %pI4\n", &ifa->ifa_local);
  403. sin.sin_family = AF_INET;
  404. sin.sin_addr.s_addr = ifa->ifa_local;
  405. svc_age_temp_xprts_now(nn->nfsd_serv, (struct sockaddr *)&sin);
  406. }
  407. spin_unlock(&nfsd_notifier_lock);
  408. out:
  409. return NOTIFY_DONE;
  410. }
  411. static struct notifier_block nfsd_inetaddr_notifier = {
  412. .notifier_call = nfsd_inetaddr_event,
  413. };
  414. #if IS_ENABLED(CONFIG_IPV6)
  415. static int nfsd_inet6addr_event(struct notifier_block *this,
  416. unsigned long event, void *ptr)
  417. {
  418. struct inet6_ifaddr *ifa = (struct inet6_ifaddr *)ptr;
  419. struct net_device *dev = ifa->idev->dev;
  420. struct net *net = dev_net(dev);
  421. struct nfsd_net *nn = net_generic(net, nfsd_net_id);
  422. struct sockaddr_in6 sin6;
  423. if (event != NETDEV_DOWN || !nn->nfsd_serv)
  424. goto out;
  425. spin_lock(&nfsd_notifier_lock);
  426. if (nn->nfsd_serv) {
  427. dprintk("nfsd_inet6addr_event: removed %pI6\n", &ifa->addr);
  428. sin6.sin6_family = AF_INET6;
  429. sin6.sin6_addr = ifa->addr;
  430. if (ipv6_addr_type(&sin6.sin6_addr) & IPV6_ADDR_LINKLOCAL)
  431. sin6.sin6_scope_id = ifa->idev->dev->ifindex;
  432. svc_age_temp_xprts_now(nn->nfsd_serv, (struct sockaddr *)&sin6);
  433. }
  434. spin_unlock(&nfsd_notifier_lock);
  435. out:
  436. return NOTIFY_DONE;
  437. }
  438. static struct notifier_block nfsd_inet6addr_notifier = {
  439. .notifier_call = nfsd_inet6addr_event,
  440. };
  441. #endif
  442. /* Only used under nfsd_mutex, so this atomic may be overkill: */
  443. static atomic_t nfsd_notifier_refcount = ATOMIC_INIT(0);
  444. /**
  445. * nfsd_destroy_serv - tear down NFSD's svc_serv for a namespace
  446. * @net: network namespace the NFS service is associated with
  447. */
  448. void nfsd_destroy_serv(struct net *net)
  449. {
  450. struct nfsd_net *nn = net_generic(net, nfsd_net_id);
  451. struct svc_serv *serv = nn->nfsd_serv;
  452. lockdep_assert_held(&nfsd_mutex);
  453. percpu_ref_kill_and_confirm(&nn->nfsd_serv_ref, nfsd_serv_done);
  454. wait_for_completion(&nn->nfsd_serv_confirm_done);
  455. wait_for_completion(&nn->nfsd_serv_free_done);
  456. /* percpu_ref_exit is called in nfsd_shutdown_net */
  457. spin_lock(&nfsd_notifier_lock);
  458. nn->nfsd_serv = NULL;
  459. spin_unlock(&nfsd_notifier_lock);
  460. /* check if the notifier still has clients */
  461. if (atomic_dec_return(&nfsd_notifier_refcount) == 0) {
  462. unregister_inetaddr_notifier(&nfsd_inetaddr_notifier);
  463. #if IS_ENABLED(CONFIG_IPV6)
  464. unregister_inet6addr_notifier(&nfsd_inet6addr_notifier);
  465. #endif
  466. }
  467. svc_xprt_destroy_all(serv, net);
  468. /*
  469. * write_ports can create the server without actually starting
  470. * any threads--if we get shut down before any threads are
  471. * started, then nfsd_destroy_serv will be run before any of this
  472. * other initialization has been done except the rpcb information.
  473. */
  474. svc_rpcb_cleanup(serv, net);
  475. nfsd_shutdown_net(net);
  476. svc_destroy(&serv);
  477. }
  478. void nfsd_reset_versions(struct nfsd_net *nn)
  479. {
  480. int i;
  481. for (i = 0; i <= NFSD_MAXVERS; i++)
  482. if (nfsd_vers(nn, i, NFSD_TEST))
  483. return;
  484. for (i = 0; i <= NFSD_MAXVERS; i++)
  485. if (i != 4)
  486. nfsd_vers(nn, i, NFSD_SET);
  487. else {
  488. int minor = 0;
  489. while (nfsd_minorversion(nn, minor, NFSD_SET) >= 0)
  490. minor++;
  491. }
  492. }
  493. /*
  494. * Each session guarantees a negotiated per slot memory cache for replies
  495. * which in turn consumes memory beyond the v2/v3/v4.0 server. A dedicated
  496. * NFSv4.1 server might want to use more memory for a DRC than a machine
  497. * with mutiple services.
  498. *
  499. * Impose a hard limit on the number of pages for the DRC which varies
  500. * according to the machines free pages. This is of course only a default.
  501. *
  502. * For now this is a #defined shift which could be under admin control
  503. * in the future.
  504. */
  505. static void set_max_drc(void)
  506. {
  507. #define NFSD_DRC_SIZE_SHIFT 7
  508. nfsd_drc_max_mem = (nr_free_buffer_pages()
  509. >> NFSD_DRC_SIZE_SHIFT) * PAGE_SIZE;
  510. nfsd_drc_mem_used = 0;
  511. dprintk("%s nfsd_drc_max_mem %lu \n", __func__, nfsd_drc_max_mem);
  512. }
  513. static int nfsd_get_default_max_blksize(void)
  514. {
  515. struct sysinfo i;
  516. unsigned long long target;
  517. unsigned long ret;
  518. si_meminfo(&i);
  519. target = (i.totalram - i.totalhigh) << PAGE_SHIFT;
  520. /*
  521. * Aim for 1/4096 of memory per thread This gives 1MB on 4Gig
  522. * machines, but only uses 32K on 128M machines. Bottom out at
  523. * 8K on 32M and smaller. Of course, this is only a default.
  524. */
  525. target >>= 12;
  526. ret = NFSSVC_MAXBLKSIZE;
  527. while (ret > target && ret >= 8*1024*2)
  528. ret /= 2;
  529. return ret;
  530. }
  531. void nfsd_shutdown_threads(struct net *net)
  532. {
  533. struct nfsd_net *nn = net_generic(net, nfsd_net_id);
  534. struct svc_serv *serv;
  535. mutex_lock(&nfsd_mutex);
  536. serv = nn->nfsd_serv;
  537. if (serv == NULL) {
  538. mutex_unlock(&nfsd_mutex);
  539. return;
  540. }
  541. /* Kill outstanding nfsd threads */
  542. svc_set_num_threads(serv, NULL, 0);
  543. nfsd_destroy_serv(net);
  544. mutex_unlock(&nfsd_mutex);
  545. }
  546. struct svc_rqst *nfsd_current_rqst(void)
  547. {
  548. if (kthread_func(current) == nfsd)
  549. return kthread_data(current);
  550. return NULL;
  551. }
  552. int nfsd_create_serv(struct net *net)
  553. {
  554. int error;
  555. struct nfsd_net *nn = net_generic(net, nfsd_net_id);
  556. struct svc_serv *serv;
  557. WARN_ON(!mutex_is_locked(&nfsd_mutex));
  558. if (nn->nfsd_serv)
  559. return 0;
  560. error = percpu_ref_init(&nn->nfsd_serv_ref, nfsd_serv_free,
  561. 0, GFP_KERNEL);
  562. if (error)
  563. return error;
  564. init_completion(&nn->nfsd_serv_free_done);
  565. init_completion(&nn->nfsd_serv_confirm_done);
  566. if (nfsd_max_blksize == 0)
  567. nfsd_max_blksize = nfsd_get_default_max_blksize();
  568. nfsd_reset_versions(nn);
  569. serv = svc_create_pooled(nfsd_programs, ARRAY_SIZE(nfsd_programs),
  570. &nn->nfsd_svcstats,
  571. nfsd_max_blksize, nfsd);
  572. if (serv == NULL)
  573. return -ENOMEM;
  574. serv->sv_maxconn = nn->max_connections;
  575. error = svc_bind(serv, net);
  576. if (error < 0) {
  577. svc_destroy(&serv);
  578. return error;
  579. }
  580. spin_lock(&nfsd_notifier_lock);
  581. nn->nfsd_serv = serv;
  582. spin_unlock(&nfsd_notifier_lock);
  583. set_max_drc();
  584. /* check if the notifier is already set */
  585. if (atomic_inc_return(&nfsd_notifier_refcount) == 1) {
  586. register_inetaddr_notifier(&nfsd_inetaddr_notifier);
  587. #if IS_ENABLED(CONFIG_IPV6)
  588. register_inet6addr_notifier(&nfsd_inet6addr_notifier);
  589. #endif
  590. }
  591. nfsd_reset_write_verifier(nn);
  592. return 0;
  593. }
  594. int nfsd_nrpools(struct net *net)
  595. {
  596. struct nfsd_net *nn = net_generic(net, nfsd_net_id);
  597. if (nn->nfsd_serv == NULL)
  598. return 0;
  599. else
  600. return nn->nfsd_serv->sv_nrpools;
  601. }
  602. int nfsd_get_nrthreads(int n, int *nthreads, struct net *net)
  603. {
  604. struct nfsd_net *nn = net_generic(net, nfsd_net_id);
  605. struct svc_serv *serv = nn->nfsd_serv;
  606. int i;
  607. if (serv)
  608. for (i = 0; i < serv->sv_nrpools && i < n; i++)
  609. nthreads[i] = serv->sv_pools[i].sp_nrthreads;
  610. return 0;
  611. }
  612. /**
  613. * nfsd_set_nrthreads - set the number of running threads in the net's service
  614. * @n: number of array members in @nthreads
  615. * @nthreads: array of thread counts for each pool
  616. * @net: network namespace to operate within
  617. *
  618. * This function alters the number of running threads for the given network
  619. * namespace in each pool. If passed an array longer then the number of pools
  620. * the extra pool settings are ignored. If passed an array shorter than the
  621. * number of pools, the missing values are interpreted as 0's.
  622. *
  623. * Returns 0 on success or a negative errno on error.
  624. */
  625. int nfsd_set_nrthreads(int n, int *nthreads, struct net *net)
  626. {
  627. int i = 0;
  628. int tot = 0;
  629. int err = 0;
  630. struct nfsd_net *nn = net_generic(net, nfsd_net_id);
  631. lockdep_assert_held(&nfsd_mutex);
  632. if (nn->nfsd_serv == NULL || n <= 0)
  633. return 0;
  634. /*
  635. * Special case: When n == 1, pass in NULL for the pool, so that the
  636. * change is distributed equally among them.
  637. */
  638. if (n == 1)
  639. return svc_set_num_threads(nn->nfsd_serv, NULL, nthreads[0]);
  640. if (n > nn->nfsd_serv->sv_nrpools)
  641. n = nn->nfsd_serv->sv_nrpools;
  642. /* enforce a global maximum number of threads */
  643. tot = 0;
  644. for (i = 0; i < n; i++) {
  645. nthreads[i] = min(nthreads[i], NFSD_MAXSERVS);
  646. tot += nthreads[i];
  647. }
  648. if (tot > NFSD_MAXSERVS) {
  649. /* total too large: scale down requested numbers */
  650. for (i = 0; i < n && tot > 0; i++) {
  651. int new = nthreads[i] * NFSD_MAXSERVS / tot;
  652. tot -= (nthreads[i] - new);
  653. nthreads[i] = new;
  654. }
  655. for (i = 0; i < n && tot > 0; i++) {
  656. nthreads[i]--;
  657. tot--;
  658. }
  659. }
  660. /* apply the new numbers */
  661. for (i = 0; i < n; i++) {
  662. err = svc_set_num_threads(nn->nfsd_serv,
  663. &nn->nfsd_serv->sv_pools[i],
  664. nthreads[i]);
  665. if (err)
  666. goto out;
  667. }
  668. /* Anything undefined in array is considered to be 0 */
  669. for (i = n; i < nn->nfsd_serv->sv_nrpools; ++i) {
  670. err = svc_set_num_threads(nn->nfsd_serv,
  671. &nn->nfsd_serv->sv_pools[i],
  672. 0);
  673. if (err)
  674. goto out;
  675. }
  676. out:
  677. return err;
  678. }
  679. /**
  680. * nfsd_svc: start up or shut down the nfsd server
  681. * @n: number of array members in @nthreads
  682. * @nthreads: array of thread counts for each pool
  683. * @net: network namespace to operate within
  684. * @cred: credentials to use for xprt creation
  685. * @scope: server scope value (defaults to nodename)
  686. *
  687. * Adjust the number of threads in each pool and return the new
  688. * total number of threads in the service.
  689. */
  690. int
  691. nfsd_svc(int n, int *nthreads, struct net *net, const struct cred *cred, const char *scope)
  692. {
  693. int error;
  694. struct nfsd_net *nn = net_generic(net, nfsd_net_id);
  695. struct svc_serv *serv;
  696. lockdep_assert_held(&nfsd_mutex);
  697. dprintk("nfsd: creating service\n");
  698. strscpy(nn->nfsd_name, scope ? scope : utsname()->nodename,
  699. sizeof(nn->nfsd_name));
  700. error = nfsd_create_serv(net);
  701. if (error)
  702. goto out;
  703. serv = nn->nfsd_serv;
  704. error = nfsd_startup_net(net, cred);
  705. if (error)
  706. goto out_put;
  707. error = nfsd_set_nrthreads(n, nthreads, net);
  708. if (error)
  709. goto out_put;
  710. error = serv->sv_nrthreads;
  711. out_put:
  712. if (serv->sv_nrthreads == 0)
  713. nfsd_destroy_serv(net);
  714. out:
  715. return error;
  716. }
  717. #if defined(CONFIG_NFSD_V2_ACL) || defined(CONFIG_NFSD_V3_ACL)
  718. static bool
  719. nfsd_support_acl_version(int vers)
  720. {
  721. if (vers >= NFSD_ACL_MINVERS && vers < NFSD_ACL_NRVERS)
  722. return nfsd_acl_version[vers] != NULL;
  723. return false;
  724. }
  725. static int
  726. nfsd_acl_rpcbind_set(struct net *net, const struct svc_program *progp,
  727. u32 version, int family, unsigned short proto,
  728. unsigned short port)
  729. {
  730. if (!nfsd_support_acl_version(version) ||
  731. !nfsd_vers(net_generic(net, nfsd_net_id), version, NFSD_TEST))
  732. return 0;
  733. return svc_generic_rpcbind_set(net, progp, version, family,
  734. proto, port);
  735. }
  736. static __be32
  737. nfsd_acl_init_request(struct svc_rqst *rqstp,
  738. const struct svc_program *progp,
  739. struct svc_process_info *ret)
  740. {
  741. struct nfsd_net *nn = net_generic(SVC_NET(rqstp), nfsd_net_id);
  742. int i;
  743. if (likely(nfsd_support_acl_version(rqstp->rq_vers) &&
  744. nfsd_vers(nn, rqstp->rq_vers, NFSD_TEST)))
  745. return svc_generic_init_request(rqstp, progp, ret);
  746. ret->mismatch.lovers = NFSD_ACL_NRVERS;
  747. for (i = NFSD_ACL_MINVERS; i < NFSD_ACL_NRVERS; i++) {
  748. if (nfsd_support_acl_version(rqstp->rq_vers) &&
  749. nfsd_vers(nn, i, NFSD_TEST)) {
  750. ret->mismatch.lovers = i;
  751. break;
  752. }
  753. }
  754. if (ret->mismatch.lovers == NFSD_ACL_NRVERS)
  755. return rpc_prog_unavail;
  756. ret->mismatch.hivers = NFSD_ACL_MINVERS;
  757. for (i = NFSD_ACL_NRVERS - 1; i >= NFSD_ACL_MINVERS; i--) {
  758. if (nfsd_support_acl_version(rqstp->rq_vers) &&
  759. nfsd_vers(nn, i, NFSD_TEST)) {
  760. ret->mismatch.hivers = i;
  761. break;
  762. }
  763. }
  764. return rpc_prog_mismatch;
  765. }
  766. #endif
  767. static int
  768. nfsd_rpcbind_set(struct net *net, const struct svc_program *progp,
  769. u32 version, int family, unsigned short proto,
  770. unsigned short port)
  771. {
  772. if (!nfsd_vers(net_generic(net, nfsd_net_id), version, NFSD_TEST))
  773. return 0;
  774. return svc_generic_rpcbind_set(net, progp, version, family,
  775. proto, port);
  776. }
  777. static __be32
  778. nfsd_init_request(struct svc_rqst *rqstp,
  779. const struct svc_program *progp,
  780. struct svc_process_info *ret)
  781. {
  782. struct nfsd_net *nn = net_generic(SVC_NET(rqstp), nfsd_net_id);
  783. int i;
  784. if (likely(nfsd_vers(nn, rqstp->rq_vers, NFSD_TEST)))
  785. return svc_generic_init_request(rqstp, progp, ret);
  786. ret->mismatch.lovers = NFSD_MAXVERS + 1;
  787. for (i = NFSD_MINVERS; i <= NFSD_MAXVERS; i++) {
  788. if (nfsd_vers(nn, i, NFSD_TEST)) {
  789. ret->mismatch.lovers = i;
  790. break;
  791. }
  792. }
  793. if (ret->mismatch.lovers > NFSD_MAXVERS)
  794. return rpc_prog_unavail;
  795. ret->mismatch.hivers = NFSD_MINVERS;
  796. for (i = NFSD_MAXVERS; i >= NFSD_MINVERS; i--) {
  797. if (nfsd_vers(nn, i, NFSD_TEST)) {
  798. ret->mismatch.hivers = i;
  799. break;
  800. }
  801. }
  802. return rpc_prog_mismatch;
  803. }
  804. /*
  805. * This is the NFS server kernel thread
  806. */
  807. static int
  808. nfsd(void *vrqstp)
  809. {
  810. struct svc_rqst *rqstp = (struct svc_rqst *) vrqstp;
  811. struct svc_xprt *perm_sock = list_entry(rqstp->rq_server->sv_permsocks.next, typeof(struct svc_xprt), xpt_list);
  812. struct net *net = perm_sock->xpt_net;
  813. struct nfsd_net *nn = net_generic(net, nfsd_net_id);
  814. /* At this point, the thread shares current->fs
  815. * with the init process. We need to create files with the
  816. * umask as defined by the client instead of init's umask.
  817. */
  818. svc_thread_init_status(rqstp, unshare_fs_struct());
  819. current->fs->umask = 0;
  820. atomic_inc(&nfsd_th_cnt);
  821. set_freezable();
  822. /*
  823. * The main request loop
  824. */
  825. while (!svc_thread_should_stop(rqstp)) {
  826. /* Update sv_maxconn if it has changed */
  827. rqstp->rq_server->sv_maxconn = nn->max_connections;
  828. svc_recv(rqstp);
  829. nfsd_file_net_dispose(nn);
  830. }
  831. atomic_dec(&nfsd_th_cnt);
  832. /* Release the thread */
  833. svc_exit_thread(rqstp);
  834. return 0;
  835. }
  836. /**
  837. * nfsd_dispatch - Process an NFS or NFSACL or LOCALIO Request
  838. * @rqstp: incoming request
  839. *
  840. * This RPC dispatcher integrates the NFS server's duplicate reply cache.
  841. *
  842. * Return values:
  843. * %0: Processing complete; do not send a Reply
  844. * %1: Processing complete; send Reply in rqstp->rq_res
  845. */
  846. int nfsd_dispatch(struct svc_rqst *rqstp)
  847. {
  848. const struct svc_procedure *proc = rqstp->rq_procinfo;
  849. __be32 *statp = rqstp->rq_accept_statp;
  850. struct nfsd_cacherep *rp;
  851. unsigned int start, len;
  852. __be32 *nfs_reply;
  853. /*
  854. * Give the xdr decoder a chance to change this if it wants
  855. * (necessary in the NFSv4.0 compound case)
  856. */
  857. rqstp->rq_cachetype = proc->pc_cachetype;
  858. /*
  859. * ->pc_decode advances the argument stream past the NFS
  860. * Call header, so grab the header's starting location and
  861. * size now for the call to nfsd_cache_lookup().
  862. */
  863. start = xdr_stream_pos(&rqstp->rq_arg_stream);
  864. len = xdr_stream_remaining(&rqstp->rq_arg_stream);
  865. if (!proc->pc_decode(rqstp, &rqstp->rq_arg_stream))
  866. goto out_decode_err;
  867. /*
  868. * Release rq_status_counter setting it to an odd value after the rpc
  869. * request has been properly parsed. rq_status_counter is used to
  870. * notify the consumers if the rqstp fields are stable
  871. * (rq_status_counter is odd) or not meaningful (rq_status_counter
  872. * is even).
  873. */
  874. smp_store_release(&rqstp->rq_status_counter, rqstp->rq_status_counter | 1);
  875. rp = NULL;
  876. switch (nfsd_cache_lookup(rqstp, start, len, &rp)) {
  877. case RC_DOIT:
  878. break;
  879. case RC_REPLY:
  880. goto out_cached_reply;
  881. case RC_DROPIT:
  882. goto out_dropit;
  883. }
  884. nfs_reply = xdr_inline_decode(&rqstp->rq_res_stream, 0);
  885. *statp = proc->pc_func(rqstp);
  886. if (test_bit(RQ_DROPME, &rqstp->rq_flags))
  887. goto out_update_drop;
  888. if (!proc->pc_encode(rqstp, &rqstp->rq_res_stream))
  889. goto out_encode_err;
  890. /*
  891. * Release rq_status_counter setting it to an even value after the rpc
  892. * request has been properly processed.
  893. */
  894. smp_store_release(&rqstp->rq_status_counter, rqstp->rq_status_counter + 1);
  895. nfsd_cache_update(rqstp, rp, rqstp->rq_cachetype, nfs_reply);
  896. out_cached_reply:
  897. return 1;
  898. out_decode_err:
  899. trace_nfsd_garbage_args_err(rqstp);
  900. *statp = rpc_garbage_args;
  901. return 1;
  902. out_update_drop:
  903. nfsd_cache_update(rqstp, rp, RC_NOCACHE, NULL);
  904. out_dropit:
  905. return 0;
  906. out_encode_err:
  907. trace_nfsd_cant_encode_err(rqstp);
  908. nfsd_cache_update(rqstp, rp, RC_NOCACHE, NULL);
  909. *statp = rpc_system_err;
  910. return 1;
  911. }
  912. /**
  913. * nfssvc_decode_voidarg - Decode void arguments
  914. * @rqstp: Server RPC transaction context
  915. * @xdr: XDR stream positioned at arguments to decode
  916. *
  917. * Return values:
  918. * %false: Arguments were not valid
  919. * %true: Decoding was successful
  920. */
  921. bool nfssvc_decode_voidarg(struct svc_rqst *rqstp, struct xdr_stream *xdr)
  922. {
  923. return true;
  924. }
  925. /**
  926. * nfssvc_encode_voidres - Encode void results
  927. * @rqstp: Server RPC transaction context
  928. * @xdr: XDR stream into which to encode results
  929. *
  930. * Return values:
  931. * %false: Local error while encoding
  932. * %true: Encoding was successful
  933. */
  934. bool nfssvc_encode_voidres(struct svc_rqst *rqstp, struct xdr_stream *xdr)
  935. {
  936. return true;
  937. }