4 * The contents of this file are subject to the terms of the
5 * Common Development and Distribution License (the "License").
6 * You may not use this file except in compliance with the License.
8 * You can obtain a copy of the license at usr/src/OPENSOLARIS.LICENSE
9 * or http://www.opensolaris.org/os/licensing.
10 * See the License for the specific language governing permissions
11 * and limitations under the License.
13 * When distributing Covered Code, include this CDDL HEADER in each
14 * file and include the License file at usr/src/OPENSOLARIS.LICENSE.
15 * If applicable, add the following below this CDDL HEADER, with the
16 * fields enclosed by brackets "[]" replaced with your own identifying
17 * information: Portions Copyright [yyyy] [name of copyright owner]
22 * Copyright (c) 2005, 2010, Oracle and/or its affiliates. All rights reserved.
25 /* Portions Copyright 2010 Robert Milkowski */
27 #include <sys/types.h>
28 #include <sys/param.h>
29 #include <sys/systm.h>
30 #include <sys/sysmacros.h>
32 #include <sys/pathname.h>
33 #include <sys/vnode.h>
35 #include <sys/vfs_opreg.h>
36 #include <sys/mntent.h>
37 #include <sys/mount.h>
38 #include <sys/cmn_err.h>
39 #include "fs/fs_subr.h"
40 #include <sys/zfs_znode.h>
41 #include <sys/zfs_dir.h>
43 #include <sys/fs/zfs.h>
45 #include <sys/dsl_prop.h>
46 #include <sys/dsl_dataset.h>
47 #include <sys/dsl_deleg.h>
51 #include <sys/varargs.h>
52 #include <sys/policy.h>
53 #include <sys/atomic.h>
54 #include <sys/mkdev.h>
55 #include <sys/modctl.h>
56 #include <sys/refstr.h>
57 #include <sys/zfs_ioctl.h>
58 #include <sys/zfs_ctldir.h>
59 #include <sys/zfs_fuid.h>
60 #include <sys/bootconf.h>
61 #include <sys/sunddi.h>
63 #include <sys/dmu_objset.h>
64 #include <sys/spa_boot.h>
66 #include "zfs_comutil.h"
70 vfsops_t *zfs_vfsops = NULL;
71 static major_t zfs_major;
72 static minor_t zfs_minor;
73 static kmutex_t zfs_dev_mtx;
75 extern int sys_shutdown;
77 static int zfs_mount(vfs_t *vfsp, vnode_t *mvp, struct mounta *uap, cred_t *cr);
78 static int zfs_umount(vfs_t *vfsp, int fflag, cred_t *cr);
79 static int zfs_mountroot(vfs_t *vfsp, enum whymountroot);
80 static int zfs_root(vfs_t *vfsp, vnode_t **vpp);
81 static int zfs_statvfs(vfs_t *vfsp, struct statvfs64 *statp);
82 static int zfs_vget(vfs_t *vfsp, vnode_t **vpp, fid_t *fidp);
83 static void zfs_freevfs(vfs_t *vfsp);
85 static const fs_operation_def_t zfs_vfsops_template[] = {
86 VFSNAME_MOUNT, { .vfs_mount = zfs_mount },
87 VFSNAME_MOUNTROOT, { .vfs_mountroot = zfs_mountroot },
88 VFSNAME_UNMOUNT, { .vfs_unmount = zfs_umount },
89 VFSNAME_ROOT, { .vfs_root = zfs_root },
90 VFSNAME_STATVFS, { .vfs_statvfs = zfs_statvfs },
91 VFSNAME_SYNC, { .vfs_sync = zfs_sync },
92 VFSNAME_VGET, { .vfs_vget = zfs_vget },
93 VFSNAME_FREEVFS, { .vfs_freevfs = zfs_freevfs },
97 static const fs_operation_def_t zfs_vfsops_eio_template[] = {
98 VFSNAME_FREEVFS, { .vfs_freevfs = zfs_freevfs },
103 * We need to keep a count of active fs's.
104 * This is necessary to prevent our module
105 * from being unloaded after a umount -f
107 static uint32_t zfs_active_fs_count = 0;
109 static char *noatime_cancel[] = { MNTOPT_ATIME, NULL };
110 static char *atime_cancel[] = { MNTOPT_NOATIME, NULL };
111 static char *noxattr_cancel[] = { MNTOPT_XATTR, NULL };
112 static char *xattr_cancel[] = { MNTOPT_NOXATTR, NULL };
115 * MO_DEFAULT is not used since the default value is determined
116 * by the equivalent property.
118 static mntopt_t mntopts[] = {
119 { MNTOPT_NOXATTR, noxattr_cancel, NULL, 0, NULL },
120 { MNTOPT_XATTR, xattr_cancel, NULL, 0, NULL },
121 { MNTOPT_NOATIME, noatime_cancel, NULL, 0, NULL },
122 { MNTOPT_ATIME, atime_cancel, NULL, 0, NULL }
125 static mntopts_t zfs_mntopts = {
126 sizeof (mntopts) / sizeof (mntopt_t),
132 zfs_sync(vfs_t *vfsp, short flag, cred_t *cr)
135 * Data integrity is job one. We don't want a compromised kernel
136 * writing to the storage pool, so we never sync during panic.
142 * SYNC_ATTR is used by fsflush() to force old filesystems like UFS
143 * to sync metadata, which they would otherwise cache indefinitely.
144 * Semantically, the only requirement is that the sync be initiated.
145 * The DMU syncs out txgs frequently, so there's nothing to do.
147 if (flag & SYNC_ATTR)
152 * Sync a specific filesystem.
154 zfsvfs_t *zfsvfs = vfsp->vfs_data;
158 dp = dmu_objset_pool(zfsvfs->z_os);
161 * If the system is shutting down, then skip any
162 * filesystems which may exist on a suspended pool.
164 if (sys_shutdown && spa_suspended(dp->dp_spa)) {
169 if (zfsvfs->z_log != NULL)
170 zil_commit(zfsvfs->z_log, 0);
175 * Sync all ZFS filesystems. This is what happens when you
176 * run sync(1M). Unlike other filesystems, ZFS honors the
177 * request by waiting for all pools to commit all dirty data.
186 zfs_create_unique_device(dev_t *dev)
191 ASSERT3U(zfs_minor, <=, MAXMIN32);
192 minor_t start = zfs_minor;
194 mutex_enter(&zfs_dev_mtx);
195 if (zfs_minor >= MAXMIN32) {
197 * If we're still using the real major
198 * keep out of /dev/zfs and /dev/zvol minor
199 * number space. If we're using a getudev()'ed
200 * major number, we can use all of its minors.
202 if (zfs_major == ddi_name_to_major(ZFS_DRIVER))
203 zfs_minor = ZFS_MIN_MINOR;
209 *dev = makedevice(zfs_major, zfs_minor);
210 mutex_exit(&zfs_dev_mtx);
211 } while (vfs_devismounted(*dev) && zfs_minor != start);
212 if (zfs_minor == start) {
214 * We are using all ~262,000 minor numbers for the
215 * current major number. Create a new major number.
217 if ((new_major = getudev()) == (major_t)-1) {
219 "zfs_mount: Can't get unique major "
223 mutex_enter(&zfs_dev_mtx);
224 zfs_major = new_major;
227 mutex_exit(&zfs_dev_mtx);
231 /* CONSTANTCONDITION */
238 atime_changed_cb(void *arg, uint64_t newval)
240 zfsvfs_t *zfsvfs = arg;
242 if (newval == TRUE) {
243 zfsvfs->z_atime = TRUE;
244 vfs_clearmntopt(zfsvfs->z_vfs, MNTOPT_NOATIME);
245 vfs_setmntopt(zfsvfs->z_vfs, MNTOPT_ATIME, NULL, 0);
247 zfsvfs->z_atime = FALSE;
248 vfs_clearmntopt(zfsvfs->z_vfs, MNTOPT_ATIME);
249 vfs_setmntopt(zfsvfs->z_vfs, MNTOPT_NOATIME, NULL, 0);
254 xattr_changed_cb(void *arg, uint64_t newval)
256 zfsvfs_t *zfsvfs = arg;
258 if (newval == TRUE) {
259 /* XXX locking on vfs_flag? */
260 zfsvfs->z_vfs->vfs_flag |= VFS_XATTR;
261 vfs_clearmntopt(zfsvfs->z_vfs, MNTOPT_NOXATTR);
262 vfs_setmntopt(zfsvfs->z_vfs, MNTOPT_XATTR, NULL, 0);
264 /* XXX locking on vfs_flag? */
265 zfsvfs->z_vfs->vfs_flag &= ~VFS_XATTR;
266 vfs_clearmntopt(zfsvfs->z_vfs, MNTOPT_XATTR);
267 vfs_setmntopt(zfsvfs->z_vfs, MNTOPT_NOXATTR, NULL, 0);
272 blksz_changed_cb(void *arg, uint64_t newval)
274 zfsvfs_t *zfsvfs = arg;
276 if (newval < SPA_MINBLOCKSIZE ||
277 newval > SPA_MAXBLOCKSIZE || !ISP2(newval))
278 newval = SPA_MAXBLOCKSIZE;
280 zfsvfs->z_max_blksz = newval;
281 zfsvfs->z_vfs->vfs_bsize = newval;
285 readonly_changed_cb(void *arg, uint64_t newval)
287 zfsvfs_t *zfsvfs = arg;
290 /* XXX locking on vfs_flag? */
291 zfsvfs->z_vfs->vfs_flag |= VFS_RDONLY;
292 vfs_clearmntopt(zfsvfs->z_vfs, MNTOPT_RW);
293 vfs_setmntopt(zfsvfs->z_vfs, MNTOPT_RO, NULL, 0);
295 /* XXX locking on vfs_flag? */
296 zfsvfs->z_vfs->vfs_flag &= ~VFS_RDONLY;
297 vfs_clearmntopt(zfsvfs->z_vfs, MNTOPT_RO);
298 vfs_setmntopt(zfsvfs->z_vfs, MNTOPT_RW, NULL, 0);
303 devices_changed_cb(void *arg, uint64_t newval)
305 zfsvfs_t *zfsvfs = arg;
307 if (newval == FALSE) {
308 zfsvfs->z_vfs->vfs_flag |= VFS_NODEVICES;
309 vfs_clearmntopt(zfsvfs->z_vfs, MNTOPT_DEVICES);
310 vfs_setmntopt(zfsvfs->z_vfs, MNTOPT_NODEVICES, NULL, 0);
312 zfsvfs->z_vfs->vfs_flag &= ~VFS_NODEVICES;
313 vfs_clearmntopt(zfsvfs->z_vfs, MNTOPT_NODEVICES);
314 vfs_setmntopt(zfsvfs->z_vfs, MNTOPT_DEVICES, NULL, 0);
319 setuid_changed_cb(void *arg, uint64_t newval)
321 zfsvfs_t *zfsvfs = arg;
323 if (newval == FALSE) {
324 zfsvfs->z_vfs->vfs_flag |= VFS_NOSETUID;
325 vfs_clearmntopt(zfsvfs->z_vfs, MNTOPT_SETUID);
326 vfs_setmntopt(zfsvfs->z_vfs, MNTOPT_NOSETUID, NULL, 0);
328 zfsvfs->z_vfs->vfs_flag &= ~VFS_NOSETUID;
329 vfs_clearmntopt(zfsvfs->z_vfs, MNTOPT_NOSETUID);
330 vfs_setmntopt(zfsvfs->z_vfs, MNTOPT_SETUID, NULL, 0);
335 exec_changed_cb(void *arg, uint64_t newval)
337 zfsvfs_t *zfsvfs = arg;
339 if (newval == FALSE) {
340 zfsvfs->z_vfs->vfs_flag |= VFS_NOEXEC;
341 vfs_clearmntopt(zfsvfs->z_vfs, MNTOPT_EXEC);
342 vfs_setmntopt(zfsvfs->z_vfs, MNTOPT_NOEXEC, NULL, 0);
344 zfsvfs->z_vfs->vfs_flag &= ~VFS_NOEXEC;
345 vfs_clearmntopt(zfsvfs->z_vfs, MNTOPT_NOEXEC);
346 vfs_setmntopt(zfsvfs->z_vfs, MNTOPT_EXEC, NULL, 0);
351 * The nbmand mount option can be changed at mount time.
352 * We can't allow it to be toggled on live file systems or incorrect
353 * behavior may be seen from cifs clients
355 * This property isn't registered via dsl_prop_register(), but this callback
356 * will be called when a file system is first mounted
359 nbmand_changed_cb(void *arg, uint64_t newval)
361 zfsvfs_t *zfsvfs = arg;
362 if (newval == FALSE) {
363 vfs_clearmntopt(zfsvfs->z_vfs, MNTOPT_NBMAND);
364 vfs_setmntopt(zfsvfs->z_vfs, MNTOPT_NONBMAND, NULL, 0);
366 vfs_clearmntopt(zfsvfs->z_vfs, MNTOPT_NONBMAND);
367 vfs_setmntopt(zfsvfs->z_vfs, MNTOPT_NBMAND, NULL, 0);
372 snapdir_changed_cb(void *arg, uint64_t newval)
374 zfsvfs_t *zfsvfs = arg;
376 zfsvfs->z_show_ctldir = newval;
380 vscan_changed_cb(void *arg, uint64_t newval)
382 zfsvfs_t *zfsvfs = arg;
384 zfsvfs->z_vscan = newval;
388 acl_inherit_changed_cb(void *arg, uint64_t newval)
390 zfsvfs_t *zfsvfs = arg;
392 zfsvfs->z_acl_inherit = newval;
396 zfs_register_callbacks(vfs_t *vfsp)
398 struct dsl_dataset *ds = NULL;
400 zfsvfs_t *zfsvfs = NULL;
402 int readonly, do_readonly = B_FALSE;
403 int setuid, do_setuid = B_FALSE;
404 int exec, do_exec = B_FALSE;
405 int devices, do_devices = B_FALSE;
406 int xattr, do_xattr = B_FALSE;
407 int atime, do_atime = B_FALSE;
411 zfsvfs = vfsp->vfs_data;
416 * The act of registering our callbacks will destroy any mount
417 * options we may have. In order to enable temporary overrides
418 * of mount options, we stash away the current values and
419 * restore them after we register the callbacks.
421 if (vfs_optionisset(vfsp, MNTOPT_RO, NULL) ||
422 !spa_writeable(dmu_objset_spa(os))) {
424 do_readonly = B_TRUE;
425 } else if (vfs_optionisset(vfsp, MNTOPT_RW, NULL)) {
427 do_readonly = B_TRUE;
429 if (vfs_optionisset(vfsp, MNTOPT_NOSUID, NULL)) {
435 if (vfs_optionisset(vfsp, MNTOPT_NODEVICES, NULL)) {
438 } else if (vfs_optionisset(vfsp, MNTOPT_DEVICES, NULL)) {
443 if (vfs_optionisset(vfsp, MNTOPT_NOSETUID, NULL)) {
446 } else if (vfs_optionisset(vfsp, MNTOPT_SETUID, NULL)) {
451 if (vfs_optionisset(vfsp, MNTOPT_NOEXEC, NULL)) {
454 } else if (vfs_optionisset(vfsp, MNTOPT_EXEC, NULL)) {
458 if (vfs_optionisset(vfsp, MNTOPT_NOXATTR, NULL)) {
461 } else if (vfs_optionisset(vfsp, MNTOPT_XATTR, NULL)) {
465 if (vfs_optionisset(vfsp, MNTOPT_NOATIME, NULL)) {
468 } else if (vfs_optionisset(vfsp, MNTOPT_ATIME, NULL)) {
474 * nbmand is a special property. It can only be changed at
477 * This is weird, but it is documented to only be changeable
480 if (vfs_optionisset(vfsp, MNTOPT_NONBMAND, NULL)) {
482 } else if (vfs_optionisset(vfsp, MNTOPT_NBMAND, NULL)) {
485 char osname[MAXNAMELEN];
487 dmu_objset_name(os, osname);
488 if (error = dsl_prop_get_integer(osname, "nbmand", &nbmand,
495 * Register property callbacks.
497 * It would probably be fine to just check for i/o error from
498 * the first prop_register(), but I guess I like to go
501 ds = dmu_objset_ds(os);
502 error = dsl_prop_register(ds, "atime", atime_changed_cb, zfsvfs);
503 error = error ? error : dsl_prop_register(ds,
504 "xattr", xattr_changed_cb, zfsvfs);
505 error = error ? error : dsl_prop_register(ds,
506 "recordsize", blksz_changed_cb, zfsvfs);
507 error = error ? error : dsl_prop_register(ds,
508 "readonly", readonly_changed_cb, zfsvfs);
509 error = error ? error : dsl_prop_register(ds,
510 "devices", devices_changed_cb, zfsvfs);
511 error = error ? error : dsl_prop_register(ds,
512 "setuid", setuid_changed_cb, zfsvfs);
513 error = error ? error : dsl_prop_register(ds,
514 "exec", exec_changed_cb, zfsvfs);
515 error = error ? error : dsl_prop_register(ds,
516 "snapdir", snapdir_changed_cb, zfsvfs);
517 error = error ? error : dsl_prop_register(ds,
518 "aclinherit", acl_inherit_changed_cb, zfsvfs);
519 error = error ? error : dsl_prop_register(ds,
520 "vscan", vscan_changed_cb, zfsvfs);
525 * Invoke our callbacks to restore temporary mount options.
528 readonly_changed_cb(zfsvfs, readonly);
530 setuid_changed_cb(zfsvfs, setuid);
532 exec_changed_cb(zfsvfs, exec);
534 devices_changed_cb(zfsvfs, devices);
536 xattr_changed_cb(zfsvfs, xattr);
538 atime_changed_cb(zfsvfs, atime);
540 nbmand_changed_cb(zfsvfs, nbmand);
546 * We may attempt to unregister some callbacks that are not
547 * registered, but this is OK; it will simply return ENOMSG,
548 * which we will ignore.
550 (void) dsl_prop_unregister(ds, "atime", atime_changed_cb, zfsvfs);
551 (void) dsl_prop_unregister(ds, "xattr", xattr_changed_cb, zfsvfs);
552 (void) dsl_prop_unregister(ds, "recordsize", blksz_changed_cb, zfsvfs);
553 (void) dsl_prop_unregister(ds, "readonly", readonly_changed_cb, zfsvfs);
554 (void) dsl_prop_unregister(ds, "devices", devices_changed_cb, zfsvfs);
555 (void) dsl_prop_unregister(ds, "setuid", setuid_changed_cb, zfsvfs);
556 (void) dsl_prop_unregister(ds, "exec", exec_changed_cb, zfsvfs);
557 (void) dsl_prop_unregister(ds, "snapdir", snapdir_changed_cb, zfsvfs);
558 (void) dsl_prop_unregister(ds, "aclinherit", acl_inherit_changed_cb,
560 (void) dsl_prop_unregister(ds, "vscan", vscan_changed_cb, zfsvfs);
564 #endif /* HAVE_ZPL */
567 zfs_space_delta_cb(dmu_object_type_t bonustype, void *data,
568 uint64_t *userp, uint64_t *groupp)
570 znode_phys_t *znp = data;
574 * Is it a valid type of object to track?
576 if (bonustype != DMU_OT_ZNODE && bonustype != DMU_OT_SA)
580 * If we have a NULL data pointer
581 * then assume the id's aren't changing and
582 * return EEXIST to the dmu to let it know to
588 if (bonustype == DMU_OT_ZNODE) {
589 *userp = znp->zp_uid;
590 *groupp = znp->zp_gid;
594 ASSERT(bonustype == DMU_OT_SA);
595 hdrsize = sa_hdrsize(data);
598 *userp = *((uint64_t *)((uintptr_t)data + hdrsize +
600 *groupp = *((uint64_t *)((uintptr_t)data + hdrsize +
604 * This should only happen for newly created
605 * files that haven't had the znode data filled
617 fuidstr_to_sid(zfsvfs_t *zfsvfs, const char *fuidstr,
618 char *domainbuf, int buflen, uid_t *ridp)
623 fuid = strtonum(fuidstr, NULL);
625 domain = zfs_fuid_find_by_idx(zfsvfs, FUID_INDEX(fuid));
627 (void) strlcpy(domainbuf, domain, buflen);
630 *ridp = FUID_RID(fuid);
634 zfs_userquota_prop_to_obj(zfsvfs_t *zfsvfs, zfs_userquota_prop_t type)
637 case ZFS_PROP_USERUSED:
638 return (DMU_USERUSED_OBJECT);
639 case ZFS_PROP_GROUPUSED:
640 return (DMU_GROUPUSED_OBJECT);
641 case ZFS_PROP_USERQUOTA:
642 return (zfsvfs->z_userquota_obj);
643 case ZFS_PROP_GROUPQUOTA:
644 return (zfsvfs->z_groupquota_obj);
650 zfs_userspace_many(zfsvfs_t *zfsvfs, zfs_userquota_prop_t type,
651 uint64_t *cookiep, void *vbuf, uint64_t *bufsizep)
656 zfs_useracct_t *buf = vbuf;
659 if (!dmu_objset_userspace_present(zfsvfs->z_os))
662 obj = zfs_userquota_prop_to_obj(zfsvfs, type);
668 for (zap_cursor_init_serialized(&zc, zfsvfs->z_os, obj, *cookiep);
669 (error = zap_cursor_retrieve(&zc, &za)) == 0;
670 zap_cursor_advance(&zc)) {
671 if ((uintptr_t)buf - (uintptr_t)vbuf + sizeof (zfs_useracct_t) >
675 fuidstr_to_sid(zfsvfs, za.za_name,
676 buf->zu_domain, sizeof (buf->zu_domain), &buf->zu_rid);
678 buf->zu_space = za.za_first_integer;
684 ASSERT3U((uintptr_t)buf - (uintptr_t)vbuf, <=, *bufsizep);
685 *bufsizep = (uintptr_t)buf - (uintptr_t)vbuf;
686 *cookiep = zap_cursor_serialize(&zc);
687 zap_cursor_fini(&zc);
692 * buf must be big enough (eg, 32 bytes)
695 id_to_fuidstr(zfsvfs_t *zfsvfs, const char *domain, uid_t rid,
696 char *buf, boolean_t addok)
701 if (domain && domain[0]) {
702 domainid = zfs_fuid_find_by_domain(zfsvfs, domain, NULL, addok);
706 fuid = FUID_ENCODE(domainid, rid);
707 (void) sprintf(buf, "%llx", (longlong_t)fuid);
712 zfs_userspace_one(zfsvfs_t *zfsvfs, zfs_userquota_prop_t type,
713 const char *domain, uint64_t rid, uint64_t *valp)
721 if (!dmu_objset_userspace_present(zfsvfs->z_os))
724 obj = zfs_userquota_prop_to_obj(zfsvfs, type);
728 err = id_to_fuidstr(zfsvfs, domain, rid, buf, B_FALSE);
732 err = zap_lookup(zfsvfs->z_os, obj, buf, 8, 1, valp);
739 zfs_set_userquota(zfsvfs_t *zfsvfs, zfs_userquota_prop_t type,
740 const char *domain, uint64_t rid, uint64_t quota)
746 boolean_t fuid_dirtied;
748 if (type != ZFS_PROP_USERQUOTA && type != ZFS_PROP_GROUPQUOTA)
751 if (zfsvfs->z_version < ZPL_VERSION_USERSPACE)
754 objp = (type == ZFS_PROP_USERQUOTA) ? &zfsvfs->z_userquota_obj :
755 &zfsvfs->z_groupquota_obj;
757 err = id_to_fuidstr(zfsvfs, domain, rid, buf, B_TRUE);
760 fuid_dirtied = zfsvfs->z_fuid_dirty;
762 tx = dmu_tx_create(zfsvfs->z_os);
763 dmu_tx_hold_zap(tx, *objp ? *objp : DMU_NEW_OBJECT, B_TRUE, NULL);
765 dmu_tx_hold_zap(tx, MASTER_NODE_OBJ, B_TRUE,
766 zfs_userquota_prop_prefixes[type]);
769 zfs_fuid_txhold(zfsvfs, tx);
770 err = dmu_tx_assign(tx, TXG_WAIT);
776 mutex_enter(&zfsvfs->z_lock);
778 *objp = zap_create(zfsvfs->z_os, DMU_OT_USERGROUP_QUOTA,
780 VERIFY(0 == zap_add(zfsvfs->z_os, MASTER_NODE_OBJ,
781 zfs_userquota_prop_prefixes[type], 8, 1, objp, tx));
783 mutex_exit(&zfsvfs->z_lock);
786 err = zap_remove(zfsvfs->z_os, *objp, buf, tx);
790 err = zap_update(zfsvfs->z_os, *objp, buf, 8, 1, "a, tx);
794 zfs_fuid_sync(zfsvfs, tx);
800 zfs_fuid_overquota(zfsvfs_t *zfsvfs, boolean_t isgroup, uint64_t fuid)
803 uint64_t used, quota, usedobj, quotaobj;
806 usedobj = isgroup ? DMU_GROUPUSED_OBJECT : DMU_USERUSED_OBJECT;
807 quotaobj = isgroup ? zfsvfs->z_groupquota_obj : zfsvfs->z_userquota_obj;
809 if (quotaobj == 0 || zfsvfs->z_replay)
812 (void) sprintf(buf, "%llx", (longlong_t)fuid);
813 err = zap_lookup(zfsvfs->z_os, quotaobj, buf, 8, 1, "a);
817 err = zap_lookup(zfsvfs->z_os, usedobj, buf, 8, 1, &used);
820 return (used >= quota);
824 zfs_owner_overquota(zfsvfs_t *zfsvfs, znode_t *zp, boolean_t isgroup)
829 quotaobj = isgroup ? zfsvfs->z_groupquota_obj : zfsvfs->z_userquota_obj;
831 fuid = isgroup ? zp->z_gid : zp->z_uid;
833 if (quotaobj == 0 || zfsvfs->z_replay)
836 return (zfs_fuid_overquota(zfsvfs, isgroup, fuid));
840 zfsvfs_create(const char *osname, zfsvfs_t **zfvp)
848 zfsvfs = kmem_zalloc(sizeof (zfsvfs_t), KM_SLEEP);
851 * We claim to always be readonly so we can open snapshots;
852 * other ZPL code will prevent us from writing to snapshots.
854 error = dmu_objset_own(osname, DMU_OST_ZFS, B_TRUE, zfsvfs, &os);
856 kmem_free(zfsvfs, sizeof (zfsvfs_t));
861 * Initialize the zfs-specific filesystem structure.
862 * Should probably make this a kmem cache, shuffle fields,
863 * and just bzero up to z_hold_mtx[].
865 zfsvfs->z_vfs = NULL;
866 zfsvfs->z_parent = zfsvfs;
867 zfsvfs->z_max_blksz = SPA_MAXBLOCKSIZE;
868 zfsvfs->z_show_ctldir = ZFS_SNAPDIR_VISIBLE;
871 error = zfs_get_zplprop(os, ZFS_PROP_VERSION, &zfsvfs->z_version);
874 } else if (zfsvfs->z_version >
875 zfs_zpl_version_map(spa_version(dmu_objset_spa(os)))) {
876 (void) printf("Can't mount a version %lld file system "
877 "on a version %lld pool\n. Pool must be upgraded to mount "
878 "this file system.", (u_longlong_t)zfsvfs->z_version,
879 (u_longlong_t)spa_version(dmu_objset_spa(os)));
883 if ((error = zfs_get_zplprop(os, ZFS_PROP_NORMALIZE, &zval)) != 0)
885 zfsvfs->z_norm = (int)zval;
887 if ((error = zfs_get_zplprop(os, ZFS_PROP_UTF8ONLY, &zval)) != 0)
889 zfsvfs->z_utf8 = (zval != 0);
891 if ((error = zfs_get_zplprop(os, ZFS_PROP_CASE, &zval)) != 0)
893 zfsvfs->z_case = (uint_t)zval;
896 * Fold case on file systems that are always or sometimes case
899 if (zfsvfs->z_case == ZFS_CASE_INSENSITIVE ||
900 zfsvfs->z_case == ZFS_CASE_MIXED)
901 zfsvfs->z_norm |= U8_TEXTPREP_TOUPPER;
903 zfsvfs->z_use_fuids = USE_FUIDS(zfsvfs->z_version, zfsvfs->z_os);
904 zfsvfs->z_use_sa = USE_SA(zfsvfs->z_version, zfsvfs->z_os);
906 if (zfsvfs->z_use_sa) {
907 /* should either have both of these objects or none */
908 error = zap_lookup(os, MASTER_NODE_OBJ, ZFS_SA_ATTRS, 8, 1,
914 * Pre SA versions file systems should never touch
915 * either the attribute registration or layout objects.
920 error = sa_setup(os, sa_obj, zfs_attr_table, ZPL_END,
921 &zfsvfs->z_attr_table);
925 if (zfsvfs->z_version >= ZPL_VERSION_SA)
926 sa_register_update_callback(os, zfs_sa_upgrade);
928 error = zap_lookup(os, MASTER_NODE_OBJ, ZFS_ROOT_OBJ, 8, 1,
932 ASSERT(zfsvfs->z_root != 0);
934 error = zap_lookup(os, MASTER_NODE_OBJ, ZFS_UNLINKED_SET, 8, 1,
935 &zfsvfs->z_unlinkedobj);
939 error = zap_lookup(os, MASTER_NODE_OBJ,
940 zfs_userquota_prop_prefixes[ZFS_PROP_USERQUOTA],
941 8, 1, &zfsvfs->z_userquota_obj);
942 if (error && error != ENOENT)
945 error = zap_lookup(os, MASTER_NODE_OBJ,
946 zfs_userquota_prop_prefixes[ZFS_PROP_GROUPQUOTA],
947 8, 1, &zfsvfs->z_groupquota_obj);
948 if (error && error != ENOENT)
951 error = zap_lookup(os, MASTER_NODE_OBJ, ZFS_FUID_TABLES, 8, 1,
952 &zfsvfs->z_fuid_obj);
953 if (error && error != ENOENT)
956 error = zap_lookup(os, MASTER_NODE_OBJ, ZFS_SHARES_DIR, 8, 1,
957 &zfsvfs->z_shares_dir);
958 if (error && error != ENOENT)
961 mutex_init(&zfsvfs->z_znodes_lock, NULL, MUTEX_DEFAULT, NULL);
962 mutex_init(&zfsvfs->z_lock, NULL, MUTEX_DEFAULT, NULL);
963 list_create(&zfsvfs->z_all_znodes, sizeof (znode_t),
964 offsetof(znode_t, z_link_node));
965 rrw_init(&zfsvfs->z_teardown_lock);
966 rw_init(&zfsvfs->z_teardown_inactive_lock, NULL, RW_DEFAULT, NULL);
967 rw_init(&zfsvfs->z_fuid_lock, NULL, RW_DEFAULT, NULL);
968 for (i = 0; i != ZFS_OBJ_MTX_SZ; i++)
969 mutex_init(&zfsvfs->z_hold_mtx[i], NULL, MUTEX_DEFAULT, NULL);
975 dmu_objset_disown(os, zfsvfs);
977 kmem_free(zfsvfs, sizeof (zfsvfs_t));
982 zfsvfs_setup(zfsvfs_t *zfsvfs, boolean_t mounting)
986 error = zfs_register_callbacks(zfsvfs->z_vfs);
991 * Set the objset user_ptr to track its zfsvfs.
993 mutex_enter(&zfsvfs->z_os->os_user_ptr_lock);
994 dmu_objset_set_user(zfsvfs->z_os, zfsvfs);
995 mutex_exit(&zfsvfs->z_os->os_user_ptr_lock);
997 zfsvfs->z_log = zil_open(zfsvfs->z_os, zfs_get_data);
1000 * If we are not mounting (ie: online recv), then we don't
1001 * have to worry about replaying the log as we blocked all
1002 * operations out since we closed the ZIL.
1008 * During replay we remove the read only flag to
1009 * allow replays to succeed.
1011 readonly = zfsvfs->z_vfs->vfs_flag & VFS_RDONLY;
1013 zfsvfs->z_vfs->vfs_flag &= ~VFS_RDONLY;
1015 zfs_unlinked_drain(zfsvfs);
1018 * Parse and replay the intent log.
1020 * Because of ziltest, this must be done after
1021 * zfs_unlinked_drain(). (Further note: ziltest
1022 * doesn't use readonly mounts, where
1023 * zfs_unlinked_drain() isn't called.) This is because
1024 * ziltest causes spa_sync() to think it's committed,
1025 * but actually it is not, so the intent log contains
1026 * many txg's worth of changes.
1028 * In particular, if object N is in the unlinked set in
1029 * the last txg to actually sync, then it could be
1030 * actually freed in a later txg and then reallocated
1031 * in a yet later txg. This would write a "create
1032 * object N" record to the intent log. Normally, this
1033 * would be fine because the spa_sync() would have
1034 * written out the fact that object N is free, before
1035 * we could write the "create object N" intent log
1038 * But when we are in ziltest mode, we advance the "open
1039 * txg" without actually spa_sync()-ing the changes to
1040 * disk. So we would see that object N is still
1041 * allocated and in the unlinked set, and there is an
1042 * intent log record saying to allocate it.
1044 if (spa_writeable(dmu_objset_spa(zfsvfs->z_os))) {
1045 if (zil_replay_disable) {
1046 zil_destroy(zfsvfs->z_log, B_FALSE);
1048 zfsvfs->z_replay = B_TRUE;
1049 zil_replay(zfsvfs->z_os, zfsvfs,
1051 zfsvfs->z_replay = B_FALSE;
1054 zfsvfs->z_vfs->vfs_flag |= readonly; /* restore readonly bit */
1061 zfsvfs_free(zfsvfs_t *zfsvfs)
1064 extern krwlock_t zfsvfs_lock; /* in zfs_znode.c */
1067 * This is a barrier to prevent the filesystem from going away in
1068 * zfs_znode_move() until we can safely ensure that the filesystem is
1069 * not unmounted. We consider the filesystem valid before the barrier
1070 * and invalid after the barrier.
1072 rw_enter(&zfsvfs_lock, RW_READER);
1073 rw_exit(&zfsvfs_lock);
1075 zfs_fuid_destroy(zfsvfs);
1077 mutex_destroy(&zfsvfs->z_znodes_lock);
1078 mutex_destroy(&zfsvfs->z_lock);
1079 list_destroy(&zfsvfs->z_all_znodes);
1080 rrw_destroy(&zfsvfs->z_teardown_lock);
1081 rw_destroy(&zfsvfs->z_teardown_inactive_lock);
1082 rw_destroy(&zfsvfs->z_fuid_lock);
1083 for (i = 0; i != ZFS_OBJ_MTX_SZ; i++)
1084 mutex_destroy(&zfsvfs->z_hold_mtx[i]);
1085 kmem_free(zfsvfs, sizeof (zfsvfs_t));
1089 zfs_set_fuid_feature(zfsvfs_t *zfsvfs)
1091 zfsvfs->z_use_fuids = USE_FUIDS(zfsvfs->z_version, zfsvfs->z_os);
1092 if (zfsvfs->z_use_fuids && zfsvfs->z_vfs) {
1093 vfs_set_feature(zfsvfs->z_vfs, VFSFT_XVATTR);
1094 vfs_set_feature(zfsvfs->z_vfs, VFSFT_SYSATTR_VIEWS);
1095 vfs_set_feature(zfsvfs->z_vfs, VFSFT_ACEMASKONACCESS);
1096 vfs_set_feature(zfsvfs->z_vfs, VFSFT_ACLONCREATE);
1097 vfs_set_feature(zfsvfs->z_vfs, VFSFT_ACCESS_FILTER);
1098 vfs_set_feature(zfsvfs->z_vfs, VFSFT_REPARSE);
1100 zfsvfs->z_use_sa = USE_SA(zfsvfs->z_version, zfsvfs->z_os);
1104 zfs_domount(vfs_t *vfsp, char *osname)
1107 uint64_t recordsize, fsid_guid;
1114 error = zfsvfs_create(osname, &zfsvfs);
1117 zfsvfs->z_vfs = vfsp;
1119 /* Initialize the generic filesystem structure. */
1120 vfsp->vfs_bcount = 0;
1121 vfsp->vfs_data = NULL;
1123 if (zfs_create_unique_device(&mount_dev) == -1) {
1127 ASSERT(vfs_devismounted(mount_dev) == 0);
1129 if (error = dsl_prop_get_integer(osname, "recordsize", &recordsize,
1133 vfsp->vfs_dev = mount_dev;
1134 vfsp->vfs_fstype = zfsfstype;
1135 vfsp->vfs_bsize = recordsize;
1136 vfsp->vfs_flag |= VFS_NOTRUNC;
1137 vfsp->vfs_data = zfsvfs;
1140 * The fsid is 64 bits, composed of an 8-bit fs type, which
1141 * separates our fsid from any other filesystem types, and a
1142 * 56-bit objset unique ID. The objset unique ID is unique to
1143 * all objsets open on this system, provided by unique_create().
1144 * The 8-bit fs type must be put in the low bits of fsid[1]
1145 * because that's where other Solaris filesystems put it.
1147 fsid_guid = dmu_objset_fsid_guid(zfsvfs->z_os);
1148 ASSERT((fsid_guid & ~((1ULL<<56)-1)) == 0);
1149 vfsp->vfs_fsid.val[0] = fsid_guid;
1150 vfsp->vfs_fsid.val[1] = ((fsid_guid>>32) << 8) |
1154 * Set features for file system.
1156 zfs_set_fuid_feature(zfsvfs);
1157 if (zfsvfs->z_case == ZFS_CASE_INSENSITIVE) {
1158 vfs_set_feature(vfsp, VFSFT_DIRENTFLAGS);
1159 vfs_set_feature(vfsp, VFSFT_CASEINSENSITIVE);
1160 vfs_set_feature(vfsp, VFSFT_NOCASESENSITIVE);
1161 } else if (zfsvfs->z_case == ZFS_CASE_MIXED) {
1162 vfs_set_feature(vfsp, VFSFT_DIRENTFLAGS);
1163 vfs_set_feature(vfsp, VFSFT_CASEINSENSITIVE);
1165 vfs_set_feature(vfsp, VFSFT_ZEROCOPY_SUPPORTED);
1167 if (dmu_objset_is_snapshot(zfsvfs->z_os)) {
1170 atime_changed_cb(zfsvfs, B_FALSE);
1171 readonly_changed_cb(zfsvfs, B_TRUE);
1172 if (error = dsl_prop_get_integer(osname, "xattr", &pval, NULL))
1174 xattr_changed_cb(zfsvfs, pval);
1175 zfsvfs->z_issnap = B_TRUE;
1176 zfsvfs->z_os->os_sync = ZFS_SYNC_DISABLED;
1178 mutex_enter(&zfsvfs->z_os->os_user_ptr_lock);
1179 dmu_objset_set_user(zfsvfs->z_os, zfsvfs);
1180 mutex_exit(&zfsvfs->z_os->os_user_ptr_lock);
1182 error = zfsvfs_setup(zfsvfs, B_TRUE);
1185 if (!zfsvfs->z_issnap)
1186 zfsctl_create(zfsvfs);
1189 dmu_objset_disown(zfsvfs->z_os, zfsvfs);
1190 zfsvfs_free(zfsvfs);
1192 atomic_add_32(&zfs_active_fs_count, 1);
1199 zfs_unregister_callbacks(zfsvfs_t *zfsvfs)
1201 objset_t *os = zfsvfs->z_os;
1202 struct dsl_dataset *ds;
1205 * Unregister properties.
1207 if (!dmu_objset_is_snapshot(os)) {
1208 ds = dmu_objset_ds(os);
1209 VERIFY(dsl_prop_unregister(ds, "atime", atime_changed_cb,
1212 VERIFY(dsl_prop_unregister(ds, "xattr", xattr_changed_cb,
1215 VERIFY(dsl_prop_unregister(ds, "recordsize", blksz_changed_cb,
1218 VERIFY(dsl_prop_unregister(ds, "readonly", readonly_changed_cb,
1221 VERIFY(dsl_prop_unregister(ds, "devices", devices_changed_cb,
1224 VERIFY(dsl_prop_unregister(ds, "setuid", setuid_changed_cb,
1227 VERIFY(dsl_prop_unregister(ds, "exec", exec_changed_cb,
1230 VERIFY(dsl_prop_unregister(ds, "snapdir", snapdir_changed_cb,
1233 VERIFY(dsl_prop_unregister(ds, "aclinherit",
1234 acl_inherit_changed_cb, zfsvfs) == 0);
1236 VERIFY(dsl_prop_unregister(ds, "vscan",
1237 vscan_changed_cb, zfsvfs) == 0);
1242 * Convert a decimal digit string to a uint64_t integer.
1245 str_to_uint64(char *str, uint64_t *objnum)
1250 if (*str < '0' || *str > '9')
1253 num = num*10 + *str++ - '0';
1261 * The boot path passed from the boot loader is in the form of
1262 * "rootpool-name/root-filesystem-object-number'. Convert this
1263 * string to a dataset name: "rootpool-name/root-filesystem-name".
1266 zfs_parse_bootfs(char *bpath, char *outpath)
1272 if (*bpath == 0 || *bpath == '/')
1275 (void) strcpy(outpath, bpath);
1277 slashp = strchr(bpath, '/');
1279 /* if no '/', just return the pool name */
1280 if (slashp == NULL) {
1284 /* if not a number, just return the root dataset name */
1285 if (str_to_uint64(slashp+1, &objnum)) {
1290 error = dsl_dsobj_to_dsname(bpath, objnum, outpath);
1297 * zfs_check_global_label:
1298 * Check that the hex label string is appropriate for the dataset
1299 * being mounted into the global_zone proper.
1301 * Return an error if the hex label string is not default or
1302 * admin_low/admin_high. For admin_low labels, the corresponding
1303 * dataset must be readonly.
1306 zfs_check_global_label(const char *dsname, const char *hexsl)
1308 if (strcasecmp(hexsl, ZFS_MLSLABEL_DEFAULT) == 0)
1310 if (strcasecmp(hexsl, ADMIN_HIGH) == 0)
1312 if (strcasecmp(hexsl, ADMIN_LOW) == 0) {
1313 /* must be readonly */
1316 if (dsl_prop_get_integer(dsname,
1317 zfs_prop_to_name(ZFS_PROP_READONLY), &rdonly, NULL))
1319 return (rdonly ? 0 : EACCES);
1325 * zfs_mount_label_policy:
1326 * Determine whether the mount is allowed according to MAC check.
1327 * by comparing (where appropriate) label of the dataset against
1328 * the label of the zone being mounted into. If the dataset has
1329 * no label, create one.
1332 * 0 : access allowed
1333 * >0 : error code, such as EACCES
1336 zfs_mount_label_policy(vfs_t *vfsp, char *osname)
1339 zone_t *mntzone = NULL;
1340 ts_label_t *mnt_tsl;
1343 char ds_hexsl[MAXNAMELEN];
1345 retv = EACCES; /* assume the worst */
1348 * Start by getting the dataset label if it exists.
1350 error = dsl_prop_get(osname, zfs_prop_to_name(ZFS_PROP_MLSLABEL),
1351 1, sizeof (ds_hexsl), &ds_hexsl, NULL);
1356 * If labeling is NOT enabled, then disallow the mount of datasets
1357 * which have a non-default label already. No other label checks
1360 if (!is_system_labeled()) {
1361 if (strcasecmp(ds_hexsl, ZFS_MLSLABEL_DEFAULT) == 0)
1367 * Get the label of the mountpoint. If mounting into the global
1368 * zone (i.e. mountpoint is not within an active zone and the
1369 * zoned property is off), the label must be default or
1370 * admin_low/admin_high only; no other checks are needed.
1372 mntzone = zone_find_by_any_path(refstr_value(vfsp->vfs_mntpt), B_FALSE);
1373 if (mntzone->zone_id == GLOBAL_ZONEID) {
1378 if (dsl_prop_get_integer(osname,
1379 zfs_prop_to_name(ZFS_PROP_ZONED), &zoned, NULL))
1382 return (zfs_check_global_label(osname, ds_hexsl));
1385 * This is the case of a zone dataset being mounted
1386 * initially, before the zone has been fully created;
1387 * allow this mount into global zone.
1392 mnt_tsl = mntzone->zone_slabel;
1393 ASSERT(mnt_tsl != NULL);
1394 label_hold(mnt_tsl);
1395 mnt_sl = label2bslabel(mnt_tsl);
1397 if (strcasecmp(ds_hexsl, ZFS_MLSLABEL_DEFAULT) == 0) {
1399 * The dataset doesn't have a real label, so fabricate one.
1403 if (l_to_str_internal(mnt_sl, &str) == 0 &&
1404 dsl_prop_set(osname, zfs_prop_to_name(ZFS_PROP_MLSLABEL),
1405 ZPROP_SRC_LOCAL, 1, strlen(str) + 1, str) == 0)
1408 kmem_free(str, strlen(str) + 1);
1409 } else if (hexstr_to_label(ds_hexsl, &ds_sl) == 0) {
1411 * Now compare labels to complete the MAC check. If the
1412 * labels are equal then allow access. If the mountpoint
1413 * label dominates the dataset label, allow readonly access.
1414 * Otherwise, access is denied.
1416 if (blequal(mnt_sl, &ds_sl))
1418 else if (bldominates(mnt_sl, &ds_sl)) {
1419 vfs_setmntopt(vfsp, MNTOPT_RO, NULL, 0);
1424 label_rele(mnt_tsl);
1430 zfs_mountroot(vfs_t *vfsp, enum whymountroot why)
1433 static int zfsrootdone = 0;
1434 zfsvfs_t *zfsvfs = NULL;
1443 * The filesystem that we mount as root is defined in the
1444 * boot property "zfs-bootfs" with a format of
1445 * "poolname/root-dataset-objnum".
1447 if (why == ROOT_INIT) {
1451 * the process of doing a spa_load will require the
1452 * clock to be set before we could (for example) do
1453 * something better by looking at the timestamp on
1454 * an uberblock, so just set it to -1.
1458 if ((zfs_bootfs = spa_get_bootprop("zfs-bootfs")) == NULL) {
1459 cmn_err(CE_NOTE, "spa_get_bootfs: can not get "
1463 zfs_devid = spa_get_bootprop("diskdevid");
1464 error = spa_import_rootpool(rootfs.bo_name, zfs_devid);
1466 spa_free_bootprop(zfs_devid);
1468 spa_free_bootprop(zfs_bootfs);
1469 cmn_err(CE_NOTE, "spa_import_rootpool: error %d",
1473 if (error = zfs_parse_bootfs(zfs_bootfs, rootfs.bo_name)) {
1474 spa_free_bootprop(zfs_bootfs);
1475 cmn_err(CE_NOTE, "zfs_parse_bootfs: error %d",
1480 spa_free_bootprop(zfs_bootfs);
1482 if (error = vfs_lock(vfsp))
1485 if (error = zfs_domount(vfsp, rootfs.bo_name)) {
1486 cmn_err(CE_NOTE, "zfs_domount: error %d", error);
1490 zfsvfs = (zfsvfs_t *)vfsp->vfs_data;
1492 if (error = zfs_zget(zfsvfs, zfsvfs->z_root, &zp)) {
1493 cmn_err(CE_NOTE, "zfs_zget: error %d", error);
1498 mutex_enter(&vp->v_lock);
1499 vp->v_flag |= VROOT;
1500 mutex_exit(&vp->v_lock);
1504 * Leave rootvp held. The root file system is never unmounted.
1507 vfs_add((struct vnode *)0, vfsp,
1508 (vfsp->vfs_flag & VFS_RDONLY) ? MS_RDONLY : 0);
1512 } else if (why == ROOT_REMOUNT) {
1513 readonly_changed_cb(vfsp->vfs_data, B_FALSE);
1514 vfsp->vfs_flag |= VFS_REMOUNT;
1516 /* refresh mount options */
1517 zfs_unregister_callbacks(vfsp->vfs_data);
1518 return (zfs_register_callbacks(vfsp));
1520 } else if (why == ROOT_UNMOUNT) {
1521 zfs_unregister_callbacks((zfsvfs_t *)vfsp->vfs_data);
1522 (void) zfs_sync(vfsp, 0, 0);
1527 * if "why" is equal to anything else other than ROOT_INIT,
1528 * ROOT_REMOUNT, or ROOT_UNMOUNT, we do not support it.
1535 zfs_mount(vfs_t *vfsp, vnode_t *mvp, struct mounta *uap, cred_t *cr)
1540 uio_seg_t fromspace = (uap->flags & MS_SYSSPACE) ?
1541 UIO_SYSSPACE : UIO_USERSPACE;
1544 if (mvp->v_type != VDIR)
1547 mutex_enter(&mvp->v_lock);
1548 if ((uap->flags & MS_REMOUNT) == 0 &&
1549 (uap->flags & MS_OVERLAY) == 0 &&
1550 (mvp->v_count != 1 || (mvp->v_flag & VROOT))) {
1551 mutex_exit(&mvp->v_lock);
1554 mutex_exit(&mvp->v_lock);
1557 * ZFS does not support passing unparsed data in via MS_DATA.
1558 * Users should use the MS_OPTIONSTR interface; this means
1559 * that all option parsing is already done and the options struct
1560 * can be interrogated.
1562 if ((uap->flags & MS_DATA) && uap->datalen > 0)
1566 * Get the objset name (the "special" mount argument).
1568 if (error = pn_get(uap->spec, fromspace, &spn))
1571 osname = spn.pn_path;
1574 * Check for mount privilege?
1576 * If we don't have privilege then see if
1577 * we have local permission to allow it
1579 error = secpolicy_fs_mount(cr, mvp, vfsp);
1581 if (dsl_deleg_access(osname, ZFS_DELEG_PERM_MOUNT, cr) == 0) {
1585 * Make sure user is the owner of the mount point
1586 * or has sufficient privileges.
1589 vattr.va_mask = AT_UID;
1591 if (VOP_GETATTR(mvp, &vattr, 0, cr, NULL)) {
1595 if (secpolicy_vnode_owner(cr, vattr.va_uid) != 0 &&
1596 VOP_ACCESS(mvp, VWRITE, 0, cr, NULL) != 0) {
1599 secpolicy_fs_mount_clearopts(cr, vfsp);
1606 * Refuse to mount a filesystem if we are in a local zone and the
1607 * dataset is not visible.
1609 if (!INGLOBALZONE(curproc) &&
1610 (!zone_dataset_visible(osname, &canwrite) || !canwrite)) {
1615 error = zfs_mount_label_policy(vfsp, osname);
1620 * When doing a remount, we simply refresh our temporary properties
1621 * according to those options set in the current VFS options.
1623 if (uap->flags & MS_REMOUNT) {
1624 /* refresh mount options */
1625 zfs_unregister_callbacks(vfsp->vfs_data);
1626 error = zfs_register_callbacks(vfsp);
1630 error = zfs_domount(vfsp, osname);
1633 * Add an extra VFS_HOLD on our parent vfs so that it can't
1634 * disappear due to a forced unmount.
1636 if (error == 0 && ((zfsvfs_t *)vfsp->vfs_data)->z_issnap)
1637 VFS_HOLD(mvp->v_vfsp);
1645 zfs_statvfs(vfs_t *vfsp, struct statvfs64 *statp)
1647 zfsvfs_t *zfsvfs = vfsp->vfs_data;
1649 uint64_t refdbytes, availbytes, usedobjs, availobjs;
1653 dmu_objset_space(zfsvfs->z_os,
1654 &refdbytes, &availbytes, &usedobjs, &availobjs);
1657 * The underlying storage pool actually uses multiple block sizes.
1658 * We report the fragsize as the smallest block size we support,
1659 * and we report our blocksize as the filesystem's maximum blocksize.
1661 statp->f_frsize = 1UL << SPA_MINBLOCKSHIFT;
1662 statp->f_bsize = zfsvfs->z_max_blksz;
1665 * The following report "total" blocks of various kinds in the
1666 * file system, but reported in terms of f_frsize - the
1670 statp->f_blocks = (refdbytes + availbytes) >> SPA_MINBLOCKSHIFT;
1671 statp->f_bfree = availbytes >> SPA_MINBLOCKSHIFT;
1672 statp->f_bavail = statp->f_bfree; /* no root reservation */
1675 * statvfs() should really be called statufs(), because it assumes
1676 * static metadata. ZFS doesn't preallocate files, so the best
1677 * we can do is report the max that could possibly fit in f_files,
1678 * and that minus the number actually used in f_ffree.
1679 * For f_ffree, report the smaller of the number of object available
1680 * and the number of blocks (each object will take at least a block).
1682 statp->f_ffree = MIN(availobjs, statp->f_bfree);
1683 statp->f_favail = statp->f_ffree; /* no "root reservation" */
1684 statp->f_files = statp->f_ffree + usedobjs;
1686 (void) cmpldev(&d32, vfsp->vfs_dev);
1687 statp->f_fsid = d32;
1690 * We're a zfs filesystem.
1692 (void) strcpy(statp->f_basetype, vfssw[vfsp->vfs_fstype].vsw_name);
1694 statp->f_flag = vf_to_stf(vfsp->vfs_flag);
1696 statp->f_namemax = ZFS_MAXNAMELEN;
1699 * We have all of 32 characters to stuff a string here.
1700 * Is there anything useful we could/should provide?
1702 bzero(statp->f_fstr, sizeof (statp->f_fstr));
1709 zfs_root(vfs_t *vfsp, vnode_t **vpp)
1711 zfsvfs_t *zfsvfs = vfsp->vfs_data;
1717 error = zfs_zget(zfsvfs, zfsvfs->z_root, &rootzp);
1719 *vpp = ZTOV(rootzp);
1726 * Teardown the zfsvfs::z_os.
1728 * Note, if 'unmounting' if FALSE, we return with the 'z_teardown_lock'
1729 * and 'z_teardown_inactive_lock' held.
1732 zfsvfs_teardown(zfsvfs_t *zfsvfs, boolean_t unmounting)
1736 rrw_enter(&zfsvfs->z_teardown_lock, RW_WRITER, FTAG);
1740 * We purge the parent filesystem's vfsp as the parent
1741 * filesystem and all of its snapshots have their vnode's
1742 * v_vfsp set to the parent's filesystem's vfsp. Note,
1743 * 'z_parent' is self referential for non-snapshots.
1745 (void) dnlc_purge_vfsp(zfsvfs->z_parent->z_vfs, 0);
1749 * Close the zil. NB: Can't close the zil while zfs_inactive
1750 * threads are blocked as zil_close can call zfs_inactive.
1752 if (zfsvfs->z_log) {
1753 zil_close(zfsvfs->z_log);
1754 zfsvfs->z_log = NULL;
1757 rw_enter(&zfsvfs->z_teardown_inactive_lock, RW_WRITER);
1760 * If we are not unmounting (ie: online recv) and someone already
1761 * unmounted this file system while we were doing the switcheroo,
1762 * or a reopen of z_os failed then just bail out now.
1764 if (!unmounting && (zfsvfs->z_unmounted || zfsvfs->z_os == NULL)) {
1765 rw_exit(&zfsvfs->z_teardown_inactive_lock);
1766 rrw_exit(&zfsvfs->z_teardown_lock, FTAG);
1771 * At this point there are no vops active, and any new vops will
1772 * fail with EIO since we have z_teardown_lock for writer (only
1773 * relavent for forced unmount).
1775 * Release all holds on dbufs.
1777 mutex_enter(&zfsvfs->z_znodes_lock);
1778 for (zp = list_head(&zfsvfs->z_all_znodes); zp != NULL;
1779 zp = list_next(&zfsvfs->z_all_znodes, zp))
1781 ASSERT(ZTOV(zp)->v_count > 0);
1782 zfs_znode_dmu_fini(zp);
1784 mutex_exit(&zfsvfs->z_znodes_lock);
1787 * If we are unmounting, set the unmounted flag and let new vops
1788 * unblock. zfs_inactive will have the unmounted behavior, and all
1789 * other vops will fail with EIO.
1792 zfsvfs->z_unmounted = B_TRUE;
1793 rrw_exit(&zfsvfs->z_teardown_lock, FTAG);
1794 rw_exit(&zfsvfs->z_teardown_inactive_lock);
1798 * z_os will be NULL if there was an error in attempting to reopen
1799 * zfsvfs, so just return as the properties had already been
1800 * unregistered and cached data had been evicted before.
1802 if (zfsvfs->z_os == NULL)
1806 * Unregister properties.
1808 zfs_unregister_callbacks(zfsvfs);
1813 if (dmu_objset_is_dirty_anywhere(zfsvfs->z_os))
1814 if (!(zfsvfs->z_vfs->vfs_flag & VFS_RDONLY))
1815 txg_wait_synced(dmu_objset_pool(zfsvfs->z_os), 0);
1816 (void) dmu_objset_evict_dbufs(zfsvfs->z_os);
1823 zfs_umount(vfs_t *vfsp, int fflag, cred_t *cr)
1825 zfsvfs_t *zfsvfs = vfsp->vfs_data;
1829 ret = secpolicy_fs_unmount(cr, vfsp);
1831 if (dsl_deleg_access((char *)refstr_value(vfsp->vfs_resource),
1832 ZFS_DELEG_PERM_MOUNT, cr))
1837 * We purge the parent filesystem's vfsp as the parent filesystem
1838 * and all of its snapshots have their vnode's v_vfsp set to the
1839 * parent's filesystem's vfsp. Note, 'z_parent' is self
1840 * referential for non-snapshots.
1842 (void) dnlc_purge_vfsp(zfsvfs->z_parent->z_vfs, 0);
1845 * Unmount any snapshots mounted under .zfs before unmounting the
1848 if (zfsvfs->z_ctldir != NULL &&
1849 (ret = zfsctl_umount_snapshots(vfsp, fflag, cr)) != 0) {
1853 if (!(fflag & MS_FORCE)) {
1855 * Check the number of active vnodes in the file system.
1856 * Our count is maintained in the vfs structure, but the
1857 * number is off by 1 to indicate a hold on the vfs
1860 * The '.zfs' directory maintains a reference of its
1861 * own, and any active references underneath are
1862 * reflected in the vnode count.
1864 if (zfsvfs->z_ctldir == NULL) {
1865 if (vfsp->vfs_count > 1)
1868 if (vfsp->vfs_count > 2 ||
1869 zfsvfs->z_ctldir->v_count > 1)
1874 vfsp->vfs_flag |= VFS_UNMOUNTED;
1876 VERIFY(zfsvfs_teardown(zfsvfs, B_TRUE) == 0);
1880 * z_os will be NULL if there was an error in
1881 * attempting to reopen zfsvfs.
1885 * Unset the objset user_ptr.
1887 mutex_enter(&os->os_user_ptr_lock);
1888 dmu_objset_set_user(os, NULL);
1889 mutex_exit(&os->os_user_ptr_lock);
1892 * Finally release the objset
1894 dmu_objset_disown(os, zfsvfs);
1898 * We can now safely destroy the '.zfs' directory node.
1900 if (zfsvfs->z_ctldir != NULL)
1901 zfsctl_destroy(zfsvfs);
1907 zfs_vget(vfs_t *vfsp, vnode_t **vpp, fid_t *fidp)
1909 zfsvfs_t *zfsvfs = vfsp->vfs_data;
1911 uint64_t object = 0;
1912 uint64_t fid_gen = 0;
1921 if (fidp->fid_len == LONG_FID_LEN) {
1922 zfid_long_t *zlfid = (zfid_long_t *)fidp;
1923 uint64_t objsetid = 0;
1924 uint64_t setgen = 0;
1926 for (i = 0; i < sizeof (zlfid->zf_setid); i++)
1927 objsetid |= ((uint64_t)zlfid->zf_setid[i]) << (8 * i);
1929 for (i = 0; i < sizeof (zlfid->zf_setgen); i++)
1930 setgen |= ((uint64_t)zlfid->zf_setgen[i]) << (8 * i);
1934 err = zfsctl_lookup_objset(vfsp, objsetid, &zfsvfs);
1940 if (fidp->fid_len == SHORT_FID_LEN || fidp->fid_len == LONG_FID_LEN) {
1941 zfid_short_t *zfid = (zfid_short_t *)fidp;
1943 for (i = 0; i < sizeof (zfid->zf_object); i++)
1944 object |= ((uint64_t)zfid->zf_object[i]) << (8 * i);
1946 for (i = 0; i < sizeof (zfid->zf_gen); i++)
1947 fid_gen |= ((uint64_t)zfid->zf_gen[i]) << (8 * i);
1953 /* A zero fid_gen means we are in the .zfs control directories */
1955 (object == ZFSCTL_INO_ROOT || object == ZFSCTL_INO_SNAPDIR)) {
1956 *vpp = zfsvfs->z_ctldir;
1957 ASSERT(*vpp != NULL);
1958 if (object == ZFSCTL_INO_SNAPDIR) {
1959 VERIFY(zfsctl_root_lookup(*vpp, "snapshot", vpp, NULL,
1960 0, NULL, NULL, NULL, NULL, NULL) == 0);
1968 gen_mask = -1ULL >> (64 - 8 * i);
1970 dprintf("getting %llu [%u mask %llx]\n", object, fid_gen, gen_mask);
1971 if (err = zfs_zget(zfsvfs, object, &zp)) {
1975 (void) sa_lookup(zp->z_sa_hdl, SA_ZPL_GEN(zfsvfs), &zp_gen,
1977 zp_gen = zp_gen & gen_mask;
1980 if (zp->z_unlinked || zp_gen != fid_gen) {
1981 dprintf("znode gen (%u) != fid gen (%u)\n", zp_gen, fid_gen);
1993 * Block out VOPs and close zfsvfs_t::z_os
1995 * Note, if successful, then we return with the 'z_teardown_lock' and
1996 * 'z_teardown_inactive_lock' write held.
1999 zfs_suspend_fs(zfsvfs_t *zfsvfs)
2003 if ((error = zfsvfs_teardown(zfsvfs, B_FALSE)) != 0)
2005 dmu_objset_disown(zfsvfs->z_os, zfsvfs);
2011 * Reopen zfsvfs_t::z_os and release VOPs.
2014 zfs_resume_fs(zfsvfs_t *zfsvfs, const char *osname)
2018 ASSERT(RRW_WRITE_HELD(&zfsvfs->z_teardown_lock));
2019 ASSERT(RW_WRITE_HELD(&zfsvfs->z_teardown_inactive_lock));
2021 err = dmu_objset_own(osname, DMU_OST_ZFS, B_FALSE, zfsvfs,
2024 zfsvfs->z_os = NULL;
2027 uint64_t sa_obj = 0;
2029 err2 = zap_lookup(zfsvfs->z_os, MASTER_NODE_OBJ,
2030 ZFS_SA_ATTRS, 8, 1, &sa_obj);
2032 if ((err || err2) && zfsvfs->z_version >= ZPL_VERSION_SA)
2036 if ((err = sa_setup(zfsvfs->z_os, sa_obj,
2037 zfs_attr_table, ZPL_END, &zfsvfs->z_attr_table)) != 0)
2040 VERIFY(zfsvfs_setup(zfsvfs, B_FALSE) == 0);
2043 * Attempt to re-establish all the active znodes with
2044 * their dbufs. If a zfs_rezget() fails, then we'll let
2045 * any potential callers discover that via ZFS_ENTER_VERIFY_VP
2046 * when they try to use their znode.
2048 mutex_enter(&zfsvfs->z_znodes_lock);
2049 for (zp = list_head(&zfsvfs->z_all_znodes); zp;
2050 zp = list_next(&zfsvfs->z_all_znodes, zp)) {
2051 (void) zfs_rezget(zp);
2053 mutex_exit(&zfsvfs->z_znodes_lock);
2058 /* release the VOPs */
2059 rw_exit(&zfsvfs->z_teardown_inactive_lock);
2060 rrw_exit(&zfsvfs->z_teardown_lock, FTAG);
2064 * Since we couldn't reopen zfsvfs::z_os, force
2065 * unmount this file system.
2067 if (vn_vfswlock(zfsvfs->z_vfs->vfs_vnodecovered) == 0)
2068 (void) dounmount(zfsvfs->z_vfs, MS_FORCE, CRED());
2074 zfs_freevfs(vfs_t *vfsp)
2076 zfsvfs_t *zfsvfs = vfsp->vfs_data;
2079 * If this is a snapshot, we have an extra VFS_HOLD on our parent
2080 * from zfs_mount(). Release it here. If we came through
2081 * zfs_mountroot() instead, we didn't grab an extra hold, so
2082 * skip the VFS_RELE for rootvfs.
2084 if (zfsvfs->z_issnap && (vfsp != rootvfs))
2085 VFS_RELE(zfsvfs->z_parent->z_vfs);
2087 zfsvfs_free(zfsvfs);
2089 atomic_add_32(&zfs_active_fs_count, -1);
2093 * VFS_INIT() initialization. Note that there is no VFS_FINI(),
2094 * so we can't safely do any non-idempotent initialization here.
2095 * Leave that to zfs_init() and zfs_fini(), which are called
2096 * from the module's _init() and _fini() entry points.
2100 zfs_vfsinit(int fstype, char *name)
2107 * Setup vfsops and vnodeops tables.
2109 error = vfs_setfsops(fstype, zfs_vfsops_template, &zfs_vfsops);
2111 cmn_err(CE_WARN, "zfs: bad vfs ops template");
2114 error = zfs_create_op_tables();
2116 zfs_remove_op_tables();
2117 cmn_err(CE_WARN, "zfs: bad vnode ops template");
2118 (void) vfs_freevfsops_by_type(zfsfstype);
2122 mutex_init(&zfs_dev_mtx, NULL, MUTEX_DEFAULT, NULL);
2125 * Unique major number for all zfs mounts.
2126 * If we run out of 32-bit minors, we'll getudev() another major.
2128 zfs_major = ddi_name_to_major(ZFS_DRIVER);
2129 zfs_minor = ZFS_MIN_MINOR;
2133 #endif /* HAVE_ZPL */
2140 * Initialize .zfs directory structures
2145 * Initialize znode cache, vnode ops, etc...
2148 #endif /* HAVE_ZPL */
2150 dmu_objset_register_type(DMU_OST_ZFS, zfs_space_delta_cb);
2159 #endif /* HAVE_ZPL */
2164 zfs_set_version(zfsvfs_t *zfsvfs, uint64_t newvers)
2167 objset_t *os = zfsvfs->z_os;
2170 if (newvers < ZPL_VERSION_INITIAL || newvers > ZPL_VERSION)
2173 if (newvers < zfsvfs->z_version)
2176 if (zfs_spa_version_map(newvers) >
2177 spa_version(dmu_objset_spa(zfsvfs->z_os)))
2180 tx = dmu_tx_create(os);
2181 dmu_tx_hold_zap(tx, MASTER_NODE_OBJ, B_FALSE, ZPL_VERSION_STR);
2182 if (newvers >= ZPL_VERSION_SA && !zfsvfs->z_use_sa) {
2183 dmu_tx_hold_zap(tx, MASTER_NODE_OBJ, B_TRUE,
2185 dmu_tx_hold_zap(tx, DMU_NEW_OBJECT, FALSE, NULL);
2187 error = dmu_tx_assign(tx, TXG_WAIT);
2193 error = zap_update(os, MASTER_NODE_OBJ, ZPL_VERSION_STR,
2194 8, 1, &newvers, tx);
2201 if (newvers >= ZPL_VERSION_SA && !zfsvfs->z_use_sa) {
2204 ASSERT3U(spa_version(dmu_objset_spa(zfsvfs->z_os)), >=,
2206 sa_obj = zap_create(os, DMU_OT_SA_MASTER_NODE,
2207 DMU_OT_NONE, 0, tx);
2209 error = zap_add(os, MASTER_NODE_OBJ,
2210 ZFS_SA_ATTRS, 8, 1, &sa_obj, tx);
2211 ASSERT3U(error, ==, 0);
2213 VERIFY(0 == sa_set_sa_object(os, sa_obj));
2214 sa_register_update_callback(os, zfs_sa_upgrade);
2217 spa_history_log_internal(LOG_DS_UPGRADE,
2218 dmu_objset_spa(os), tx, "oldver=%llu newver=%llu dataset = %llu",
2219 zfsvfs->z_version, newvers, dmu_objset_id(os));
2223 zfsvfs->z_version = newvers;
2225 if (zfsvfs->z_version >= ZPL_VERSION_FUID)
2226 zfs_set_fuid_feature(zfsvfs);
2230 #endif /* HAVE_ZPL */
2233 * Read a property stored within the master node.
2236 zfs_get_zplprop(objset_t *os, zfs_prop_t prop, uint64_t *value)
2242 * Look up the file system's value for the property. For the
2243 * version property, we look up a slightly different string.
2245 if (prop == ZFS_PROP_VERSION)
2246 pname = ZPL_VERSION_STR;
2248 pname = zfs_prop_to_name(prop);
2251 error = zap_lookup(os, MASTER_NODE_OBJ, pname, 8, 1, value);
2253 if (error == ENOENT) {
2254 /* No value set, use the default value */
2256 case ZFS_PROP_VERSION:
2257 *value = ZPL_VERSION;
2259 case ZFS_PROP_NORMALIZE:
2260 case ZFS_PROP_UTF8ONLY:
2264 *value = ZFS_CASE_SENSITIVE;
2275 static vfsdef_t vfw = {
2279 VSW_HASPROTO|VSW_CANRWRO|VSW_CANREMOUNT|VSW_VOLATILEDEV|VSW_STATS|
2284 struct modlfs zfs_modlfs = {
2285 &mod_fsops, "ZFS filesystem version " SPA_VERSION_STRING, &vfw
2287 #endif /* HAVE_ZPL */