• E
    block: Honor BDRV_REQ_FUA during write_zeroes · 465fe887
    Eric Blake 提交于
    The block layer has a couple of cases where it can lose
    Force Unit Access semantics when writing a large block of
    zeroes, such that the request returns before the zeroes
    have been guaranteed to land on underlying media.
    
    SCSI does not support FUA during WRITESAME(10/16); FUA is only
    supported if it falls back to WRITE(10/16).  But where the
    underlying device is new enough to not need a fallback, it
    means that any upper layer request with FUA semantics was
    silently ignoring BDRV_REQ_FUA.
    
    Conversely, NBD has situations where it can support FUA but not
    ZERO_WRITE; when that happens, the generic block layer fallback
    to bdrv_driver_pwritev() (or the older bdrv_co_writev() in qemu
    2.6) was losing the FUA flag.
    
    The problem of losing flags unrelated to ZERO_WRITE has been
    latent in bdrv_co_do_write_zeroes() since commit aa7bfbff, but
    back then, it did not matter because there was no FUA flag.  It
    became observable when commit 93f5e6d8 paved the way for flags
    that can impact correctness, when we should have been using
    bdrv_co_writev_flags() with modified flags.  Compare to commit
    9eeb6dd1, which got flag manipulation right in
    bdrv_co_do_zero_pwritev().
    
    Symptoms: I tested with qemu-io with default writethrough cache
    (which is supposed to use FUA semantics on every write), and
    targetted an NBD client connected to a server that intentionally
    did not advertise NBD_FLAG_SEND_FUA.  When doing 'write 0 512',
    the NBD client sent two operations (NBD_CMD_WRITE then
    NBD_CMD_FLUSH) to get the fallback FUA semantics; but when doing
    'write -z 0 512', the NBD client sent only NBD_CMD_WRITE.
    
    The fix is do to a cleanup bdrv_co_flush() at the end of the
    operation if any step in the middle relied on a BDS that does
    not natively support FUA for that step (note that we don't
    need to flush after every operation, if the operation is broken
    into chunks based on bounce-buffer sizing).  Each BDS gains a
    new flag .supported_zero_flags, which parallels the use of
    .supported_write_flags but only when accessing a zero write
    operation (the flags MUST be different, because of SCSI having
    different semantics based on WRITE vs. WRITESAME; and also
    because BDRV_REQ_MAY_UNMAP only makes sense on zero writes).
    
    Also fix some documentation to describe -ENOTSUP semantics,
    particularly since iscsi depends on those semantics.
    
    Down the road, we may want to add a driver where its
    .bdrv_co_pwritev() honors all three of BDRV_REQ_FUA,
    BDRV_REQ_ZERO_WRITE, and BDRV_REQ_MAY_UNMAP, and advertise
    this via bs->supported_write_flags for blocks opened by that
    driver; such a driver should NOT supply .bdrv_co_write_zeroes
    nor .supported_zero_flags.  But none of the drivers touched
    in this patch want to do that (the act of writing zeroes is
    different enough from normal writes to deserve a second
    callback).
    Signed-off-by: NEric Blake <eblake@redhat.com>
    Reviewed-by: NFam Zheng <famz@redhat.com>
    Acked-by: NStefan Hajnoczi <stefanha@redhat.com>
    Signed-off-by: NKevin Wolf <kwolf@redhat.com>
    465fe887
block_int.h 28.4 KB