xref: /dragonfly/sys/vfs/hammer/hammer_vfsops.c (revision b0d289c2)
1 /*
2  * Copyright (c) 2007-2008 The DragonFly Project.  All rights reserved.
3  *
4  * This code is derived from software contributed to The DragonFly Project
5  * by Matthew Dillon <dillon@backplane.com>
6  *
7  * Redistribution and use in source and binary forms, with or without
8  * modification, are permitted provided that the following conditions
9  * are met:
10  *
11  * 1. Redistributions of source code must retain the above copyright
12  *    notice, this list of conditions and the following disclaimer.
13  * 2. Redistributions in binary form must reproduce the above copyright
14  *    notice, this list of conditions and the following disclaimer in
15  *    the documentation and/or other materials provided with the
16  *    distribution.
17  * 3. Neither the name of The DragonFly Project nor the names of its
18  *    contributors may be used to endorse or promote products derived
19  *    from this software without specific, prior written permission.
20  *
21  * THIS SOFTWARE IS PROVIDED BY THE COPYRIGHT HOLDERS AND CONTRIBUTORS
22  * ``AS IS'' AND ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT
23  * LIMITED TO, THE IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS
24  * FOR A PARTICULAR PURPOSE ARE DISCLAIMED.  IN NO EVENT SHALL THE
25  * COPYRIGHT HOLDERS OR CONTRIBUTORS BE LIABLE FOR ANY DIRECT, INDIRECT,
26  * INCIDENTAL, SPECIAL, EXEMPLARY OR CONSEQUENTIAL DAMAGES (INCLUDING,
27  * BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES;
28  * LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION) HOWEVER CAUSED
29  * AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT LIABILITY,
30  * OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT
31  * OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF
32  * SUCH DAMAGE.
33  */
34 
35 #include <sys/param.h>
36 #include <sys/systm.h>
37 #include <sys/kernel.h>
38 #include <sys/vnode.h>
39 #include <sys/mount.h>
40 #include <sys/malloc.h>
41 #include <sys/nlookup.h>
42 #include <sys/fcntl.h>
43 #include <sys/sysctl.h>
44 #include <sys/buf.h>
45 #include <sys/buf2.h>
46 #include "hammer.h"
47 
48 /*
49  * NOTE!  Global statistics may not be MPSAFE so HAMMER never uses them
50  *	  in conditionals.
51  */
52 int hammer_supported_version = HAMMER_VOL_VERSION_DEFAULT;
53 int hammer_debug_io;
54 int hammer_debug_general;
55 int hammer_debug_debug = 1;		/* medium-error panics */
56 int hammer_debug_inode;
57 int hammer_debug_locks;
58 int hammer_debug_btree;
59 int hammer_debug_tid;
60 int hammer_debug_recover;		/* -1 will disable, +1 will force */
61 int hammer_debug_recover_faults;
62 int hammer_debug_critical;		/* non-zero enter debugger on error */
63 int hammer_cluster_enable = 1;		/* enable read clustering by default */
64 int hammer_live_dedup = 0;
65 int hammer_tdmux_ticks;
66 int hammer_count_fsyncs;
67 int hammer_count_inodes;
68 int hammer_count_iqueued;
69 int hammer_count_reclaims;
70 int hammer_count_records;
71 int hammer_count_record_datas;
72 int hammer_count_volumes;
73 int hammer_count_buffers;
74 int hammer_count_nodes;
75 int64_t hammer_count_extra_space_used;
76 int64_t hammer_stats_btree_lookups;
77 int64_t hammer_stats_btree_searches;
78 int64_t hammer_stats_btree_inserts;
79 int64_t hammer_stats_btree_deletes;
80 int64_t hammer_stats_btree_elements;
81 int64_t hammer_stats_btree_splits;
82 int64_t hammer_stats_btree_iterations;
83 int64_t hammer_stats_btree_root_iterations;
84 int64_t hammer_stats_record_iterations;
85 
86 int64_t hammer_stats_file_read;
87 int64_t hammer_stats_file_write;
88 int64_t hammer_stats_file_iopsr;
89 int64_t hammer_stats_file_iopsw;
90 int64_t hammer_stats_disk_read;
91 int64_t hammer_stats_disk_write;
92 int64_t hammer_stats_inode_flushes;
93 int64_t hammer_stats_commits;
94 int64_t hammer_stats_undo;
95 int64_t hammer_stats_redo;
96 
97 long hammer_count_dirtybufspace;	/* global */
98 int hammer_count_refedbufs;		/* global */
99 int hammer_count_reservations;
100 long hammer_count_io_running_read;
101 long hammer_count_io_running_write;
102 int hammer_count_io_locked;
103 long hammer_limit_dirtybufspace;	/* per-mount */
104 int hammer_limit_recs;			/* as a whole XXX */
105 int hammer_limit_inode_recs = 2048;	/* per inode */
106 int hammer_limit_reclaims;
107 int hammer_live_dedup_cache_size = DEDUP_CACHE_SIZE;
108 int hammer_limit_redo = 4096 * 1024;	/* per inode */
109 int hammer_autoflush = 500;		/* auto flush (typ on reclaim) */
110 int hammer_bio_count;
111 int hammer_verify_zone;
112 int hammer_verify_data = 1;
113 int hammer_write_mode;
114 int hammer_double_buffer;
115 int hammer_btree_full_undo = 1;
116 int hammer_yield_check = 16;
117 int hammer_fsync_mode = 3;
118 int64_t hammer_contention_count;
119 int64_t hammer_zone_limit;
120 
121 /*
122  * Live dedup debug counters (sysctls are writable so that counters
123  * can be reset from userspace).
124  */
125 int64_t hammer_live_dedup_vnode_bcmps = 0;
126 int64_t hammer_live_dedup_device_bcmps = 0;
127 int64_t hammer_live_dedup_findblk_failures = 0;
128 int64_t hammer_live_dedup_bmap_saves = 0;
129 
130 
131 SYSCTL_NODE(_vfs, OID_AUTO, hammer, CTLFLAG_RW, 0, "HAMMER filesystem");
132 
133 SYSCTL_INT(_vfs_hammer, OID_AUTO, supported_version, CTLFLAG_RD,
134 	   &hammer_supported_version, 0, "");
135 SYSCTL_INT(_vfs_hammer, OID_AUTO, debug_general, CTLFLAG_RW,
136 	   &hammer_debug_general, 0, "");
137 SYSCTL_INT(_vfs_hammer, OID_AUTO, debug_io, CTLFLAG_RW,
138 	   &hammer_debug_io, 0, "");
139 SYSCTL_INT(_vfs_hammer, OID_AUTO, debug_debug, CTLFLAG_RW,
140 	   &hammer_debug_debug, 0, "");
141 SYSCTL_INT(_vfs_hammer, OID_AUTO, debug_inode, CTLFLAG_RW,
142 	   &hammer_debug_inode, 0, "");
143 SYSCTL_INT(_vfs_hammer, OID_AUTO, debug_locks, CTLFLAG_RW,
144 	   &hammer_debug_locks, 0, "");
145 SYSCTL_INT(_vfs_hammer, OID_AUTO, debug_btree, CTLFLAG_RW,
146 	   &hammer_debug_btree, 0, "");
147 SYSCTL_INT(_vfs_hammer, OID_AUTO, debug_tid, CTLFLAG_RW,
148 	   &hammer_debug_tid, 0, "");
149 SYSCTL_INT(_vfs_hammer, OID_AUTO, debug_recover, CTLFLAG_RW,
150 	   &hammer_debug_recover, 0, "");
151 SYSCTL_INT(_vfs_hammer, OID_AUTO, debug_recover_faults, CTLFLAG_RW,
152 	   &hammer_debug_recover_faults, 0, "");
153 SYSCTL_INT(_vfs_hammer, OID_AUTO, debug_critical, CTLFLAG_RW,
154 	   &hammer_debug_critical, 0, "");
155 SYSCTL_INT(_vfs_hammer, OID_AUTO, cluster_enable, CTLFLAG_RW,
156 	   &hammer_cluster_enable, 0, "");
157 /*
158  * 0 - live dedup is disabled
159  * 1 - dedup cache is populated on reads only
160  * 2 - dedup cache is populated on both reads and writes
161  *
162  * LIVE_DEDUP IS DISABLED PERMANENTLY!  This feature appears to cause
163  * blockmap corruption over time so we've turned it off permanently.
164  */
165 SYSCTL_INT(_vfs_hammer, OID_AUTO, live_dedup, CTLFLAG_RD,
166 	   &hammer_live_dedup, 0, "Enable live dedup (experimental)");
167 SYSCTL_INT(_vfs_hammer, OID_AUTO, tdmux_ticks, CTLFLAG_RW,
168 	   &hammer_tdmux_ticks, 0, "Hammer tdmux ticks");
169 
170 SYSCTL_LONG(_vfs_hammer, OID_AUTO, limit_dirtybufspace, CTLFLAG_RW,
171 	   &hammer_limit_dirtybufspace, 0, "");
172 SYSCTL_INT(_vfs_hammer, OID_AUTO, limit_recs, CTLFLAG_RW,
173 	   &hammer_limit_recs, 0, "");
174 SYSCTL_INT(_vfs_hammer, OID_AUTO, limit_inode_recs, CTLFLAG_RW,
175 	   &hammer_limit_inode_recs, 0, "");
176 SYSCTL_INT(_vfs_hammer, OID_AUTO, limit_reclaims, CTLFLAG_RW,
177 	   &hammer_limit_reclaims, 0, "");
178 SYSCTL_INT(_vfs_hammer, OID_AUTO, live_dedup_cache_size, CTLFLAG_RW,
179 	   &hammer_live_dedup_cache_size, 0,
180 	   "Number of cache entries");
181 SYSCTL_INT(_vfs_hammer, OID_AUTO, limit_redo, CTLFLAG_RW,
182 	   &hammer_limit_redo, 0, "");
183 
184 SYSCTL_INT(_vfs_hammer, OID_AUTO, count_fsyncs, CTLFLAG_RD,
185 	   &hammer_count_fsyncs, 0, "");
186 SYSCTL_INT(_vfs_hammer, OID_AUTO, count_inodes, CTLFLAG_RD,
187 	   &hammer_count_inodes, 0, "");
188 SYSCTL_INT(_vfs_hammer, OID_AUTO, count_iqueued, CTLFLAG_RD,
189 	   &hammer_count_iqueued, 0, "");
190 SYSCTL_INT(_vfs_hammer, OID_AUTO, count_reclaims, CTLFLAG_RD,
191 	   &hammer_count_reclaims, 0, "");
192 SYSCTL_INT(_vfs_hammer, OID_AUTO, count_records, CTLFLAG_RD,
193 	   &hammer_count_records, 0, "");
194 SYSCTL_INT(_vfs_hammer, OID_AUTO, count_record_datas, CTLFLAG_RD,
195 	   &hammer_count_record_datas, 0, "");
196 SYSCTL_INT(_vfs_hammer, OID_AUTO, count_volumes, CTLFLAG_RD,
197 	   &hammer_count_volumes, 0, "");
198 SYSCTL_INT(_vfs_hammer, OID_AUTO, count_buffers, CTLFLAG_RD,
199 	   &hammer_count_buffers, 0, "");
200 SYSCTL_INT(_vfs_hammer, OID_AUTO, count_nodes, CTLFLAG_RD,
201 	   &hammer_count_nodes, 0, "");
202 SYSCTL_QUAD(_vfs_hammer, OID_AUTO, count_extra_space_used, CTLFLAG_RD,
203 	   &hammer_count_extra_space_used, 0, "");
204 
205 SYSCTL_QUAD(_vfs_hammer, OID_AUTO, stats_btree_searches, CTLFLAG_RD,
206 	   &hammer_stats_btree_searches, 0, "");
207 SYSCTL_QUAD(_vfs_hammer, OID_AUTO, stats_btree_lookups, CTLFLAG_RD,
208 	   &hammer_stats_btree_lookups, 0, "");
209 SYSCTL_QUAD(_vfs_hammer, OID_AUTO, stats_btree_inserts, CTLFLAG_RD,
210 	   &hammer_stats_btree_inserts, 0, "");
211 SYSCTL_QUAD(_vfs_hammer, OID_AUTO, stats_btree_deletes, CTLFLAG_RD,
212 	   &hammer_stats_btree_deletes, 0, "");
213 SYSCTL_QUAD(_vfs_hammer, OID_AUTO, stats_btree_elements, CTLFLAG_RD,
214 	   &hammer_stats_btree_elements, 0, "");
215 SYSCTL_QUAD(_vfs_hammer, OID_AUTO, stats_btree_splits, CTLFLAG_RD,
216 	   &hammer_stats_btree_splits, 0, "");
217 SYSCTL_QUAD(_vfs_hammer, OID_AUTO, stats_btree_iterations, CTLFLAG_RD,
218 	   &hammer_stats_btree_iterations, 0, "");
219 SYSCTL_QUAD(_vfs_hammer, OID_AUTO, stats_btree_root_iterations, CTLFLAG_RD,
220 	   &hammer_stats_btree_root_iterations, 0, "");
221 SYSCTL_QUAD(_vfs_hammer, OID_AUTO, stats_record_iterations, CTLFLAG_RD,
222 	   &hammer_stats_record_iterations, 0, "");
223 
224 SYSCTL_QUAD(_vfs_hammer, OID_AUTO, stats_file_read, CTLFLAG_RD,
225 	   &hammer_stats_file_read, 0, "");
226 SYSCTL_QUAD(_vfs_hammer, OID_AUTO, stats_file_write, CTLFLAG_RD,
227 	   &hammer_stats_file_write, 0, "");
228 SYSCTL_QUAD(_vfs_hammer, OID_AUTO, stats_file_iopsr, CTLFLAG_RD,
229 	   &hammer_stats_file_iopsr, 0, "");
230 SYSCTL_QUAD(_vfs_hammer, OID_AUTO, stats_file_iopsw, CTLFLAG_RD,
231 	   &hammer_stats_file_iopsw, 0, "");
232 SYSCTL_QUAD(_vfs_hammer, OID_AUTO, stats_disk_read, CTLFLAG_RD,
233 	   &hammer_stats_disk_read, 0, "");
234 SYSCTL_QUAD(_vfs_hammer, OID_AUTO, stats_disk_write, CTLFLAG_RD,
235 	   &hammer_stats_disk_write, 0, "");
236 SYSCTL_QUAD(_vfs_hammer, OID_AUTO, stats_inode_flushes, CTLFLAG_RD,
237 	   &hammer_stats_inode_flushes, 0, "");
238 SYSCTL_QUAD(_vfs_hammer, OID_AUTO, stats_commits, CTLFLAG_RD,
239 	   &hammer_stats_commits, 0, "");
240 SYSCTL_QUAD(_vfs_hammer, OID_AUTO, stats_undo, CTLFLAG_RD,
241 	   &hammer_stats_undo, 0, "");
242 SYSCTL_QUAD(_vfs_hammer, OID_AUTO, stats_redo, CTLFLAG_RD,
243 	   &hammer_stats_redo, 0, "");
244 
245 SYSCTL_QUAD(_vfs_hammer, OID_AUTO, live_dedup_vnode_bcmps, CTLFLAG_RW,
246 	    &hammer_live_dedup_vnode_bcmps, 0,
247 	    "successful vnode buffer comparisons");
248 SYSCTL_QUAD(_vfs_hammer, OID_AUTO, live_dedup_device_bcmps, CTLFLAG_RW,
249 	    &hammer_live_dedup_device_bcmps, 0,
250 	    "successful device buffer comparisons");
251 SYSCTL_QUAD(_vfs_hammer, OID_AUTO, live_dedup_findblk_failures, CTLFLAG_RW,
252 	    &hammer_live_dedup_findblk_failures, 0,
253 	    "block lookup failures for comparison");
254 SYSCTL_QUAD(_vfs_hammer, OID_AUTO, live_dedup_bmap_saves, CTLFLAG_RW,
255 	    &hammer_live_dedup_bmap_saves, 0,
256 	    "useful physical block lookups");
257 
258 SYSCTL_LONG(_vfs_hammer, OID_AUTO, count_dirtybufspace, CTLFLAG_RD,
259 	   &hammer_count_dirtybufspace, 0, "");
260 SYSCTL_INT(_vfs_hammer, OID_AUTO, count_refedbufs, CTLFLAG_RD,
261 	   &hammer_count_refedbufs, 0, "");
262 SYSCTL_INT(_vfs_hammer, OID_AUTO, count_reservations, CTLFLAG_RD,
263 	   &hammer_count_reservations, 0, "");
264 SYSCTL_LONG(_vfs_hammer, OID_AUTO, count_io_running_read, CTLFLAG_RD,
265 	   &hammer_count_io_running_read, 0, "");
266 SYSCTL_INT(_vfs_hammer, OID_AUTO, count_io_locked, CTLFLAG_RD,
267 	   &hammer_count_io_locked, 0, "");
268 SYSCTL_LONG(_vfs_hammer, OID_AUTO, count_io_running_write, CTLFLAG_RD,
269 	   &hammer_count_io_running_write, 0, "");
270 SYSCTL_QUAD(_vfs_hammer, OID_AUTO, zone_limit, CTLFLAG_RW,
271 	   &hammer_zone_limit, 0, "");
272 SYSCTL_QUAD(_vfs_hammer, OID_AUTO, contention_count, CTLFLAG_RW,
273 	   &hammer_contention_count, 0, "");
274 SYSCTL_INT(_vfs_hammer, OID_AUTO, autoflush, CTLFLAG_RW,
275 	   &hammer_autoflush, 0, "");
276 SYSCTL_INT(_vfs_hammer, OID_AUTO, verify_zone, CTLFLAG_RW,
277 	   &hammer_verify_zone, 0, "");
278 SYSCTL_INT(_vfs_hammer, OID_AUTO, verify_data, CTLFLAG_RW,
279 	   &hammer_verify_data, 0, "");
280 SYSCTL_INT(_vfs_hammer, OID_AUTO, write_mode, CTLFLAG_RW,
281 	   &hammer_write_mode, 0, "");
282 SYSCTL_INT(_vfs_hammer, OID_AUTO, double_buffer, CTLFLAG_RW,
283 	   &hammer_double_buffer, 0, "");
284 SYSCTL_INT(_vfs_hammer, OID_AUTO, btree_full_undo, CTLFLAG_RW,
285 	   &hammer_btree_full_undo, 0, "");
286 SYSCTL_INT(_vfs_hammer, OID_AUTO, yield_check, CTLFLAG_RW,
287 	   &hammer_yield_check, 0, "");
288 SYSCTL_INT(_vfs_hammer, OID_AUTO, fsync_mode, CTLFLAG_RW,
289 	   &hammer_fsync_mode, 0, "");
290 
291 /* KTR_INFO_MASTER(hammer); */
292 
293 /*
294  * VFS ABI
295  */
296 static void	hammer_free_hmp(struct mount *mp);
297 
298 static int	hammer_vfs_mount(struct mount *mp, char *path, caddr_t data,
299 				struct ucred *cred);
300 static int	hammer_vfs_unmount(struct mount *mp, int mntflags);
301 static int	hammer_vfs_root(struct mount *mp, struct vnode **vpp);
302 static int	hammer_vfs_statfs(struct mount *mp, struct statfs *sbp,
303 				struct ucred *cred);
304 static int	hammer_vfs_statvfs(struct mount *mp, struct statvfs *sbp,
305 				struct ucred *cred);
306 static int	hammer_vfs_sync(struct mount *mp, int waitfor);
307 static int	hammer_vfs_vget(struct mount *mp, struct vnode *dvp,
308 				ino_t ino, struct vnode **vpp);
309 static int	hammer_vfs_init(struct vfsconf *conf);
310 static int	hammer_vfs_fhtovp(struct mount *mp, struct vnode *rootvp,
311 				struct fid *fhp, struct vnode **vpp);
312 static int	hammer_vfs_vptofh(struct vnode *vp, struct fid *fhp);
313 static int	hammer_vfs_checkexp(struct mount *mp, struct sockaddr *nam,
314 				int *exflagsp, struct ucred **credanonp);
315 
316 
317 static struct vfsops hammer_vfsops = {
318 	.vfs_mount	= hammer_vfs_mount,
319 	.vfs_unmount	= hammer_vfs_unmount,
320 	.vfs_root 	= hammer_vfs_root,
321 	.vfs_statfs	= hammer_vfs_statfs,
322 	.vfs_statvfs	= hammer_vfs_statvfs,
323 	.vfs_sync	= hammer_vfs_sync,
324 	.vfs_vget	= hammer_vfs_vget,
325 	.vfs_init	= hammer_vfs_init,
326 	.vfs_vptofh	= hammer_vfs_vptofh,
327 	.vfs_fhtovp	= hammer_vfs_fhtovp,
328 	.vfs_checkexp	= hammer_vfs_checkexp
329 };
330 
331 MALLOC_DEFINE(M_HAMMER, "HAMMER-mount", "");
332 
333 VFS_SET(hammer_vfsops, hammer, 0);
334 MODULE_VERSION(hammer, 1);
335 
336 static int
337 hammer_vfs_init(struct vfsconf *conf)
338 {
339 	long n;
340 
341 	/*
342 	 * Wait up to this long for an exclusive deadlock to clear
343 	 * before acquiring a new shared lock on the ip.  The deadlock
344 	 * may have occured on a b-tree node related to the ip.
345 	 */
346 	if (hammer_tdmux_ticks == 0)
347 		hammer_tdmux_ticks = hz / 5;
348 
349 	/*
350 	 * Autosize, but be careful because a hammer filesystem's
351 	 * reserve is partially calculated based on dirtybufspace,
352 	 * so we simply cannot allow it to get too large.
353 	 */
354 	if (hammer_limit_recs == 0) {
355 		n = nbuf * 25;
356 		if (n > kmalloc_limit(M_HAMMER) / 512)
357 			n = kmalloc_limit(M_HAMMER) / 512;
358 		if (n > 2 * 1024 * 1024)
359 			n = 2 * 1024 * 1024;
360 		hammer_limit_recs = (int)n;
361 	}
362 	if (hammer_limit_dirtybufspace == 0) {
363 		hammer_limit_dirtybufspace = hidirtybufspace / 2;
364 		if (hammer_limit_dirtybufspace < 1L * 1024 * 1024)
365 			hammer_limit_dirtybufspace = 1024L * 1024;
366 		if (hammer_limit_dirtybufspace > 1024L * 1024 * 1024)
367 			hammer_limit_dirtybufspace = 1024L * 1024 * 1024;
368 	}
369 
370 	/*
371 	 * The hammer_inode structure detaches from the vnode on reclaim.
372 	 * This limits the number of inodes in this state to prevent a
373 	 * memory pool blowout.
374 	 */
375 	if (hammer_limit_reclaims == 0)
376 		hammer_limit_reclaims = desiredvnodes / 10;
377 
378 	return(0);
379 }
380 
381 static int
382 hammer_vfs_mount(struct mount *mp, char *mntpt, caddr_t data,
383 		 struct ucred *cred)
384 {
385 	struct hammer_mount_info info;
386 	hammer_mount_t hmp;
387 	hammer_volume_t rootvol;
388 	struct vnode *rootvp;
389 	struct vnode *devvp = NULL;
390 	const char *upath;	/* volume name in userspace */
391 	char *path;		/* volume name in system space */
392 	int error;
393 	int i;
394 	int master_id;
395 	char *next_volume_ptr = NULL;
396 
397 	/*
398 	 * Accept hammer_mount_info.  mntpt is NULL for root mounts at boot.
399 	 */
400 	if (mntpt == NULL) {
401 		bzero(&info, sizeof(info));
402 		info.asof = 0;
403 		info.hflags = 0;
404 		info.nvolumes = 1;
405 
406 		next_volume_ptr = mp->mnt_stat.f_mntfromname;
407 
408 		/* Count number of volumes separated by ':' */
409 		for (char *p = next_volume_ptr; *p != '\0'; ++p) {
410 			if (*p == ':') {
411 				++info.nvolumes;
412 			}
413 		}
414 
415 		mp->mnt_flag &= ~MNT_RDONLY; /* mount R/W */
416 	} else {
417 		if ((error = copyin(data, &info, sizeof(info))) != 0)
418 			return (error);
419 	}
420 
421 	/*
422 	 * updating or new mount
423 	 */
424 	if (mp->mnt_flag & MNT_UPDATE) {
425 		hmp = (void *)mp->mnt_data;
426 		KKASSERT(hmp != NULL);
427 	} else {
428 		if (info.nvolumes <= 0 || info.nvolumes > HAMMER_MAX_VOLUMES)
429 			return (EINVAL);
430 		hmp = NULL;
431 	}
432 
433 	/*
434 	 * master-id validation.  The master id may not be changed by a
435 	 * mount update.
436 	 */
437 	if (info.hflags & HMNT_MASTERID) {
438 		if (hmp && hmp->master_id != info.master_id) {
439 			kprintf("hammer: cannot change master id "
440 				"with mount update\n");
441 			return(EINVAL);
442 		}
443 		master_id = info.master_id;
444 		if (master_id < -1 || master_id >= HAMMER_MAX_MASTERS)
445 			return (EINVAL);
446 	} else {
447 		if (hmp)
448 			master_id = hmp->master_id;
449 		else
450 			master_id = 0;
451 	}
452 
453 	/*
454 	 * Internal mount data structure
455 	 */
456 	if (hmp == NULL) {
457 		hmp = kmalloc(sizeof(*hmp), M_HAMMER, M_WAITOK | M_ZERO);
458 		mp->mnt_data = (qaddr_t)hmp;
459 		hmp->mp = mp;
460 		/*TAILQ_INIT(&hmp->recycle_list);*/
461 
462 		/*
463 		 * Make sure kmalloc type limits are set appropriately.
464 		 *
465 		 * Our inode kmalloc group is sized based on maxvnodes
466 		 * (controlled by the system, not us).
467 		 */
468 		kmalloc_create(&hmp->m_misc, "HAMMER-others");
469 		kmalloc_create(&hmp->m_inodes, "HAMMER-inodes");
470 
471 		kmalloc_raise_limit(hmp->m_inodes, 0);	/* unlimited */
472 
473 		hmp->root_btree_beg.localization = 0x00000000U;
474 		hmp->root_btree_beg.obj_id = -0x8000000000000000LL;
475 		hmp->root_btree_beg.key = -0x8000000000000000LL;
476 		hmp->root_btree_beg.create_tid = 1;
477 		hmp->root_btree_beg.delete_tid = 1;
478 		hmp->root_btree_beg.rec_type = 0;
479 		hmp->root_btree_beg.obj_type = 0;
480 
481 		hmp->root_btree_end.localization = 0xFFFFFFFFU;
482 		hmp->root_btree_end.obj_id = 0x7FFFFFFFFFFFFFFFLL;
483 		hmp->root_btree_end.key = 0x7FFFFFFFFFFFFFFFLL;
484 		hmp->root_btree_end.create_tid = 0xFFFFFFFFFFFFFFFFULL;
485 		hmp->root_btree_end.delete_tid = 0;   /* special case */
486 		hmp->root_btree_end.rec_type = 0xFFFFU;
487 		hmp->root_btree_end.obj_type = 0;
488 
489 		hmp->krate.freq = 1;	/* maximum reporting rate (hz) */
490 		hmp->krate.count = -16;	/* initial burst */
491 		hmp->kdiag.freq = 1;	/* maximum reporting rate (hz) */
492 		hmp->kdiag.count = -16;	/* initial burst */
493 
494 		hmp->sync_lock.refs = 1;
495 		hmp->free_lock.refs = 1;
496 		hmp->undo_lock.refs = 1;
497 		hmp->blkmap_lock.refs = 1;
498 		hmp->snapshot_lock.refs = 1;
499 		hmp->volume_lock.refs = 1;
500 
501 		TAILQ_INIT(&hmp->delay_list);
502 		TAILQ_INIT(&hmp->flush_group_list);
503 		TAILQ_INIT(&hmp->objid_cache_list);
504 		TAILQ_INIT(&hmp->undo_lru_list);
505 		TAILQ_INIT(&hmp->reclaim_list);
506 
507 		RB_INIT(&hmp->rb_dedup_crc_root);
508 		RB_INIT(&hmp->rb_dedup_off_root);
509 		TAILQ_INIT(&hmp->dedup_lru_list);
510 	}
511 	hmp->hflags &= ~HMNT_USERFLAGS;
512 	hmp->hflags |= info.hflags & HMNT_USERFLAGS;
513 
514 	hmp->master_id = master_id;
515 
516 	if (info.asof) {
517 		mp->mnt_flag |= MNT_RDONLY;
518 		hmp->asof = info.asof;
519 	} else {
520 		hmp->asof = HAMMER_MAX_TID;
521 	}
522 
523 	hmp->volume_to_remove = -1;
524 
525 	/*
526 	 * Re-open read-write if originally read-only, or vise-versa.
527 	 *
528 	 * When going from read-only to read-write execute the stage2
529 	 * recovery if it has not already been run.
530 	 */
531 	if (mp->mnt_flag & MNT_UPDATE) {
532 		lwkt_gettoken(&hmp->fs_token);
533 		error = 0;
534 		if (hmp->ronly && (mp->mnt_kern_flag & MNTK_WANTRDWR)) {
535 			kprintf("HAMMER read-only -> read-write\n");
536 			hmp->ronly = 0;
537 			RB_SCAN(hammer_vol_rb_tree, &hmp->rb_vols_root, NULL,
538 				hammer_adjust_volume_mode, NULL);
539 			rootvol = hammer_get_root_volume(hmp, &error);
540 			if (rootvol) {
541 				hammer_recover_flush_buffers(hmp, rootvol, 1);
542 				error = hammer_recover_stage2(hmp, rootvol);
543 				bcopy(rootvol->ondisk->vol0_blockmap,
544 				      hmp->blockmap,
545 				      sizeof(hmp->blockmap));
546 				hammer_rel_volume(rootvol, 0);
547 			}
548 			RB_SCAN(hammer_ino_rb_tree, &hmp->rb_inos_root, NULL,
549 				hammer_reload_inode, NULL);
550 			/* kernel clears MNT_RDONLY */
551 		} else if (hmp->ronly == 0 && (mp->mnt_flag & MNT_RDONLY)) {
552 			kprintf("HAMMER read-write -> read-only\n");
553 			hmp->ronly = 1;	/* messy */
554 			RB_SCAN(hammer_ino_rb_tree, &hmp->rb_inos_root, NULL,
555 				hammer_reload_inode, NULL);
556 			hmp->ronly = 0;
557 			hammer_flusher_sync(hmp);
558 			hammer_flusher_sync(hmp);
559 			hammer_flusher_sync(hmp);
560 			hmp->ronly = 1;
561 			RB_SCAN(hammer_vol_rb_tree, &hmp->rb_vols_root, NULL,
562 				hammer_adjust_volume_mode, NULL);
563 		}
564 		lwkt_reltoken(&hmp->fs_token);
565 		return(error);
566 	}
567 
568 	RB_INIT(&hmp->rb_vols_root);
569 	RB_INIT(&hmp->rb_inos_root);
570 	RB_INIT(&hmp->rb_redo_root);
571 	RB_INIT(&hmp->rb_nods_root);
572 	RB_INIT(&hmp->rb_undo_root);
573 	RB_INIT(&hmp->rb_resv_root);
574 	RB_INIT(&hmp->rb_bufs_root);
575 	RB_INIT(&hmp->rb_pfsm_root);
576 
577 	hmp->ronly = ((mp->mnt_flag & MNT_RDONLY) != 0);
578 
579 	RB_INIT(&hmp->volu_root);
580 	RB_INIT(&hmp->undo_root);
581 	RB_INIT(&hmp->data_root);
582 	RB_INIT(&hmp->meta_root);
583 	RB_INIT(&hmp->lose_root);
584 	TAILQ_INIT(&hmp->iorun_list);
585 
586 	lwkt_token_init(&hmp->fs_token, "hammerfs");
587 	lwkt_token_init(&hmp->io_token, "hammerio");
588 
589 	lwkt_gettoken(&hmp->fs_token);
590 
591 	/*
592 	 * Load volumes
593 	 */
594 	path = objcache_get(namei_oc, M_WAITOK);
595 	hmp->nvolumes = -1;
596 	for (i = 0; i < info.nvolumes; ++i) {
597 		if (mntpt == NULL) {
598 			/*
599 			 * Root mount.
600 			 */
601 			KKASSERT(next_volume_ptr != NULL);
602 			strcpy(path, "");
603 			if (*next_volume_ptr != '/') {
604 				/* relative path */
605 				strcpy(path, "/dev/");
606 			}
607 			int k;
608 			for (k = strlen(path); k < MAXPATHLEN-1; ++k) {
609 				if (*next_volume_ptr == '\0') {
610 					break;
611 				} else if (*next_volume_ptr == ':') {
612 					++next_volume_ptr;
613 					break;
614 				} else {
615 					path[k] = *next_volume_ptr;
616 					++next_volume_ptr;
617 				}
618 			}
619 			path[k] = '\0';
620 
621 			error = 0;
622 			cdev_t dev = kgetdiskbyname(path);
623 			error = bdevvp(dev, &devvp);
624 			if (error) {
625 				kprintf("hammer_mountroot: can't find devvp\n");
626 			}
627 		} else {
628 			error = copyin(&info.volumes[i], &upath,
629 				       sizeof(char *));
630 			if (error == 0)
631 				error = copyinstr(upath, path,
632 						  MAXPATHLEN, NULL);
633 		}
634 		if (error == 0)
635 			error = hammer_install_volume(hmp, path, devvp);
636 		if (error)
637 			break;
638 	}
639 	objcache_put(namei_oc, path);
640 
641 	/*
642 	 * Make sure we found a root volume
643 	 */
644 	if (error == 0 && hmp->rootvol == NULL) {
645 		kprintf("hammer_mount: No root volume found!\n");
646 		error = EINVAL;
647 	}
648 
649 	/*
650 	 * Check that all required volumes are available
651 	 */
652 	if (error == 0 && hammer_mountcheck_volumes(hmp)) {
653 		kprintf("hammer_mount: Missing volumes, cannot mount!\n");
654 		error = EINVAL;
655 	}
656 
657 	if (error) {
658 		/* called with fs_token held */
659 		hammer_free_hmp(mp);
660 		return (error);
661 	}
662 
663 	/*
664 	 * No errors, setup enough of the mount point so we can lookup the
665 	 * root vnode.
666 	 */
667 	mp->mnt_iosize_max = MAXPHYS;
668 	mp->mnt_kern_flag |= MNTK_FSMID;
669 	mp->mnt_kern_flag |= MNTK_THR_SYNC;	/* new vsyncscan semantics */
670 
671 	/*
672 	 * MPSAFE code.  Note that VOPs and VFSops which are not MPSAFE
673 	 * will acquire a per-mount token prior to entry and release it
674 	 * on return.
675 	 */
676 	mp->mnt_kern_flag |= MNTK_ALL_MPSAFE;
677 	/*MNTK_RD_MPSAFE | MNTK_GA_MPSAFE | MNTK_IN_MPSAFE;*/
678 
679 	/*
680 	 * note: f_iosize is used by vnode_pager_haspage() when constructing
681 	 * its VOP_BMAP call.
682 	 */
683 	mp->mnt_stat.f_iosize = HAMMER_BUFSIZE;
684 	mp->mnt_stat.f_bsize = HAMMER_BUFSIZE;
685 
686 	mp->mnt_vstat.f_frsize = HAMMER_BUFSIZE;
687 	mp->mnt_vstat.f_bsize = HAMMER_BUFSIZE;
688 
689 	mp->mnt_maxsymlinklen = 255;
690 	mp->mnt_flag |= MNT_LOCAL;
691 
692 	vfs_add_vnodeops(mp, &hammer_vnode_vops, &mp->mnt_vn_norm_ops);
693 	vfs_add_vnodeops(mp, &hammer_spec_vops, &mp->mnt_vn_spec_ops);
694 	vfs_add_vnodeops(mp, &hammer_fifo_vops, &mp->mnt_vn_fifo_ops);
695 
696 	/*
697 	 * The root volume's ondisk pointer is only valid if we hold a
698 	 * reference to it.
699 	 */
700 	rootvol = hammer_get_root_volume(hmp, &error);
701 	if (error)
702 		goto failed;
703 
704 	/*
705 	 * Perform any necessary UNDO operations.  The recovery code does
706 	 * call hammer_undo_lookup() so we have to pre-cache the blockmap,
707 	 * and then re-copy it again after recovery is complete.
708 	 *
709 	 * If this is a read-only mount the UNDO information is retained
710 	 * in memory in the form of dirty buffer cache buffers, and not
711 	 * written back to the media.
712 	 */
713 	bcopy(rootvol->ondisk->vol0_blockmap, hmp->blockmap,
714 	      sizeof(hmp->blockmap));
715 
716 	/*
717 	 * Check filesystem version
718 	 */
719 	hmp->version = rootvol->ondisk->vol_version;
720 	if (hmp->version < HAMMER_VOL_VERSION_MIN ||
721 	    hmp->version > HAMMER_VOL_VERSION_MAX) {
722 		kprintf("HAMMER: mount unsupported fs version %d\n",
723 			hmp->version);
724 		error = ERANGE;
725 		goto done;
726 	}
727 
728 	/*
729 	 * The undo_rec_limit limits the size of flush groups to avoid
730 	 * blowing out the UNDO FIFO.  This calculation is typically in
731 	 * the tens of thousands and is designed primarily when small
732 	 * HAMMER filesystems are created.
733 	 */
734 	hmp->undo_rec_limit = hammer_undo_max(hmp) / 8192 + 100;
735 	if (hammer_debug_general & 0x0001)
736 		kprintf("HAMMER: undo_rec_limit %d\n", hmp->undo_rec_limit);
737 
738 	/*
739 	 * NOTE: Recover stage1 not only handles meta-data recovery, it
740 	 * 	 also sets hmp->undo_seqno for HAMMER VERSION 4+ filesystems.
741 	 */
742 	error = hammer_recover_stage1(hmp, rootvol);
743 	if (error) {
744 		kprintf("Failed to recover HAMMER filesystem on mount\n");
745 		goto done;
746 	}
747 
748 	/*
749 	 * Finish setup now that we have a good root volume.
750 	 *
751 	 * The top 16 bits of fsid.val[1] is a pfs id.
752 	 */
753 	ksnprintf(mp->mnt_stat.f_mntfromname,
754 		  sizeof(mp->mnt_stat.f_mntfromname), "%s",
755 		  rootvol->ondisk->vol_name);
756 	mp->mnt_stat.f_fsid.val[0] =
757 		crc32((char *)&rootvol->ondisk->vol_fsid + 0, 8);
758 	mp->mnt_stat.f_fsid.val[1] =
759 		crc32((char *)&rootvol->ondisk->vol_fsid + 8, 8);
760 	mp->mnt_stat.f_fsid.val[1] &= 0x0000FFFF;
761 
762 	mp->mnt_vstat.f_fsid_uuid = rootvol->ondisk->vol_fsid;
763 	mp->mnt_vstat.f_fsid = crc32(&mp->mnt_vstat.f_fsid_uuid,
764 				     sizeof(mp->mnt_vstat.f_fsid_uuid));
765 
766 	/*
767 	 * Certain often-modified fields in the root volume are cached in
768 	 * the hammer_mount structure so we do not have to generate lots
769 	 * of little UNDO structures for them.
770 	 *
771 	 * Recopy after recovery.  This also has the side effect of
772 	 * setting our cached undo FIFO's first_offset, which serves to
773 	 * placemark the FIFO start for the NEXT flush cycle while the
774 	 * on-disk first_offset represents the LAST flush cycle.
775 	 */
776 	hmp->next_tid = rootvol->ondisk->vol0_next_tid;
777 	hmp->flush_tid1 = hmp->next_tid;
778 	hmp->flush_tid2 = hmp->next_tid;
779 	bcopy(rootvol->ondisk->vol0_blockmap, hmp->blockmap,
780 	      sizeof(hmp->blockmap));
781 	hmp->copy_stat_freebigblocks = rootvol->ondisk->vol0_stat_freebigblocks;
782 
783 	hammer_flusher_create(hmp);
784 
785 	/*
786 	 * Locate the root directory using the root cluster's B-Tree as a
787 	 * starting point.  The root directory uses an obj_id of 1.
788 	 *
789 	 * FUTURE: Leave the root directory cached referenced but unlocked
790 	 * in hmp->rootvp (need to flush it on unmount).
791 	 */
792 	error = hammer_vfs_vget(mp, NULL, 1, &rootvp);
793 	if (error)
794 		goto done;
795 	vput(rootvp);
796 	/*vn_unlock(hmp->rootvp);*/
797 	if (hmp->ronly == 0)
798 		error = hammer_recover_stage2(hmp, rootvol);
799 
800 	/*
801 	 * If the stage2 recovery fails be sure to clean out all cached
802 	 * vnodes before throwing away the mount structure or bad things
803 	 * will happen.
804 	 */
805 	if (error)
806 		vflush(mp, 0, 0);
807 
808 done:
809 	if ((mp->mnt_flag & MNT_UPDATE) == 0) {
810 		/* New mount */
811 
812 		/* Populate info for mount point (NULL pad)*/
813 		bzero(mp->mnt_stat.f_mntonname, MNAMELEN);
814 		size_t size;
815 		if (mntpt) {
816 			copyinstr(mntpt, mp->mnt_stat.f_mntonname,
817 							MNAMELEN -1, &size);
818 		} else { /* Root mount */
819 			mp->mnt_stat.f_mntonname[0] = '/';
820 		}
821 	}
822 	(void)VFS_STATFS(mp, &mp->mnt_stat, cred);
823 	hammer_rel_volume(rootvol, 0);
824 failed:
825 	/*
826 	 * Cleanup and return.
827 	 */
828 	if (error) {
829 		/* called with fs_token held */
830 		hammer_free_hmp(mp);
831 	} else {
832 		lwkt_reltoken(&hmp->fs_token);
833 	}
834 	return (error);
835 }
836 
837 static int
838 hammer_vfs_unmount(struct mount *mp, int mntflags)
839 {
840 	hammer_mount_t hmp = (void *)mp->mnt_data;
841 	int flags;
842 	int error;
843 
844 	/*
845 	 * Clean out the vnodes
846 	 */
847 	lwkt_gettoken(&hmp->fs_token);
848 	flags = 0;
849 	if (mntflags & MNT_FORCE)
850 		flags |= FORCECLOSE;
851 	error = vflush(mp, 0, flags);
852 
853 	/*
854 	 * Clean up the internal mount structure and related entities.  This
855 	 * may issue I/O.
856 	 */
857 	if (error == 0) {
858 		/* called with fs_token held */
859 		hammer_free_hmp(mp);
860 	} else {
861 		lwkt_reltoken(&hmp->fs_token);
862 	}
863 	return(error);
864 }
865 
866 /*
867  * Clean up the internal mount structure and disassociate it from the mount.
868  * This may issue I/O.
869  *
870  * Called with fs_token held.
871  */
872 static void
873 hammer_free_hmp(struct mount *mp)
874 {
875 	hammer_mount_t hmp = (void *)mp->mnt_data;
876 	hammer_flush_group_t flg;
877 	int count;
878 	int dummy;
879 
880 	/*
881 	 * Flush anything dirty.  This won't even run if the
882 	 * filesystem errored-out.
883 	 */
884 	count = 0;
885 	while (hammer_flusher_haswork(hmp)) {
886 		hammer_flusher_sync(hmp);
887 		++count;
888 		if (count >= 5) {
889 			if (count == 5)
890 				kprintf("HAMMER: umount flushing.");
891 			else
892 				kprintf(".");
893 			tsleep(&dummy, 0, "hmrufl", hz);
894 		}
895 		if (count == 30) {
896 			kprintf("giving up\n");
897 			break;
898 		}
899 	}
900 	if (count >= 5 && count < 30)
901 		kprintf("\n");
902 
903 	/*
904 	 * If the mount had a critical error we have to destroy any
905 	 * remaining inodes before we can finish cleaning up the flusher.
906 	 */
907 	if (hmp->flags & HAMMER_MOUNT_CRITICAL_ERROR) {
908 		RB_SCAN(hammer_ino_rb_tree, &hmp->rb_inos_root, NULL,
909 			hammer_destroy_inode_callback, NULL);
910 	}
911 
912 	/*
913 	 * There shouldn't be any inodes left now and any left over
914 	 * flush groups should now be empty.
915 	 */
916 	KKASSERT(RB_EMPTY(&hmp->rb_inos_root));
917 	while ((flg = TAILQ_FIRST(&hmp->flush_group_list)) != NULL) {
918 		TAILQ_REMOVE(&hmp->flush_group_list, flg, flush_entry);
919 		KKASSERT(RB_EMPTY(&flg->flush_tree));
920 		if (flg->refs) {
921 			kprintf("HAMMER: Warning, flush_group %p was "
922 				"not empty on umount!\n", flg);
923 		}
924 		kfree(flg, hmp->m_misc);
925 	}
926 
927 	/*
928 	 * We can finally destroy the flusher
929 	 */
930 	hammer_flusher_destroy(hmp);
931 
932 	/*
933 	 * We may have held recovered buffers due to a read-only mount.
934 	 * These must be discarded.
935 	 */
936 	if (hmp->ronly)
937 		hammer_recover_flush_buffers(hmp, NULL, -1);
938 
939 	/*
940 	 * Unload buffers and then volumes
941 	 */
942         RB_SCAN(hammer_buf_rb_tree, &hmp->rb_bufs_root, NULL,
943 		hammer_unload_buffer, NULL);
944 	RB_SCAN(hammer_vol_rb_tree, &hmp->rb_vols_root, NULL,
945 		hammer_unload_volume, NULL);
946 
947 	mp->mnt_data = NULL;
948 	mp->mnt_flag &= ~MNT_LOCAL;
949 	hmp->mp = NULL;
950 	hammer_destroy_objid_cache(hmp);
951 	hammer_destroy_dedup_cache(hmp);
952 	if (hmp->dedup_free_cache != NULL) {
953 		kfree(hmp->dedup_free_cache, hmp->m_misc);
954 		hmp->dedup_free_cache = NULL;
955 	}
956 	kmalloc_destroy(&hmp->m_misc);
957 	kmalloc_destroy(&hmp->m_inodes);
958 	lwkt_reltoken(&hmp->fs_token);
959 	kfree(hmp, M_HAMMER);
960 }
961 
962 /*
963  * Report critical errors.  ip may be NULL.
964  */
965 void
966 hammer_critical_error(hammer_mount_t hmp, hammer_inode_t ip,
967 		      int error, const char *msg)
968 {
969 	hmp->flags |= HAMMER_MOUNT_CRITICAL_ERROR;
970 
971 	krateprintf(&hmp->krate,
972 		    "HAMMER(%s): Critical error inode=%jd error=%d %s\n",
973 		    hmp->mp->mnt_stat.f_mntfromname,
974 		    (intmax_t)(ip ? ip->obj_id : -1),
975 		    error, msg);
976 
977 	if (hmp->ronly == 0) {
978 		hmp->ronly = 2;		/* special errored read-only mode */
979 		hmp->mp->mnt_flag |= MNT_RDONLY;
980 		RB_SCAN(hammer_vol_rb_tree, &hmp->rb_vols_root, NULL,
981 			hammer_adjust_volume_mode, NULL);
982 		kprintf("HAMMER(%s): Forcing read-only mode\n",
983 			hmp->mp->mnt_stat.f_mntfromname);
984 	}
985 	hmp->error = error;
986 	if (hammer_debug_critical)
987 		Debugger("Entering debugger");
988 }
989 
990 
991 /*
992  * Obtain a vnode for the specified inode number.  An exclusively locked
993  * vnode is returned.
994  */
995 int
996 hammer_vfs_vget(struct mount *mp, struct vnode *dvp,
997 		ino_t ino, struct vnode **vpp)
998 {
999 	struct hammer_transaction trans;
1000 	struct hammer_mount *hmp = (void *)mp->mnt_data;
1001 	struct hammer_inode *ip;
1002 	int error;
1003 	u_int32_t localization;
1004 
1005 	lwkt_gettoken(&hmp->fs_token);
1006 	hammer_simple_transaction(&trans, hmp);
1007 
1008 	/*
1009 	 * If a directory vnode is supplied (mainly NFS) then we can acquire
1010 	 * the PFS domain from it.  Otherwise we would only be able to vget
1011 	 * inodes in the root PFS.
1012 	 */
1013 	if (dvp) {
1014 		localization = HAMMER_DEF_LOCALIZATION +
1015 				VTOI(dvp)->obj_localization;
1016 	} else {
1017 		localization = HAMMER_DEF_LOCALIZATION;
1018 	}
1019 
1020 	/*
1021 	 * Lookup the requested HAMMER inode.  The structure must be
1022 	 * left unlocked while we manipulate the related vnode to avoid
1023 	 * a deadlock.
1024 	 */
1025 	ip = hammer_get_inode(&trans, NULL, ino,
1026 			      hmp->asof, localization,
1027 			      0, &error);
1028 	if (ip == NULL) {
1029 		*vpp = NULL;
1030 	} else {
1031 		error = hammer_get_vnode(ip, vpp);
1032 		hammer_rel_inode(ip, 0);
1033 	}
1034 	hammer_done_transaction(&trans);
1035 	lwkt_reltoken(&hmp->fs_token);
1036 	return (error);
1037 }
1038 
1039 /*
1040  * Return the root vnode for the filesystem.
1041  *
1042  * HAMMER stores the root vnode in the hammer_mount structure so
1043  * getting it is easy.
1044  */
1045 static int
1046 hammer_vfs_root(struct mount *mp, struct vnode **vpp)
1047 {
1048 	int error;
1049 
1050 	error = hammer_vfs_vget(mp, NULL, 1, vpp);
1051 	return (error);
1052 }
1053 
1054 static int
1055 hammer_vfs_statfs(struct mount *mp, struct statfs *sbp, struct ucred *cred)
1056 {
1057 	struct hammer_mount *hmp = (void *)mp->mnt_data;
1058 	hammer_volume_t volume;
1059 	hammer_volume_ondisk_t ondisk;
1060 	int error;
1061 	int64_t bfree;
1062 	int64_t breserved;
1063 
1064 	lwkt_gettoken(&hmp->fs_token);
1065 	volume = hammer_get_root_volume(hmp, &error);
1066 	if (error) {
1067 		lwkt_reltoken(&hmp->fs_token);
1068 		return(error);
1069 	}
1070 	ondisk = volume->ondisk;
1071 
1072 	/*
1073 	 * Basic stats
1074 	 */
1075 	_hammer_checkspace(hmp, HAMMER_CHKSPC_WRITE, &breserved);
1076 	mp->mnt_stat.f_files = ondisk->vol0_stat_inodes;
1077 	bfree = ondisk->vol0_stat_freebigblocks * HAMMER_BIGBLOCK_SIZE;
1078 	hammer_rel_volume(volume, 0);
1079 
1080 	mp->mnt_stat.f_bfree = (bfree - breserved) / HAMMER_BUFSIZE;
1081 	mp->mnt_stat.f_bavail = mp->mnt_stat.f_bfree;
1082 	if (mp->mnt_stat.f_files < 0)
1083 		mp->mnt_stat.f_files = 0;
1084 
1085 	*sbp = mp->mnt_stat;
1086 	lwkt_reltoken(&hmp->fs_token);
1087 	return(0);
1088 }
1089 
1090 static int
1091 hammer_vfs_statvfs(struct mount *mp, struct statvfs *sbp, struct ucred *cred)
1092 {
1093 	struct hammer_mount *hmp = (void *)mp->mnt_data;
1094 	hammer_volume_t volume;
1095 	hammer_volume_ondisk_t ondisk;
1096 	int error;
1097 	int64_t bfree;
1098 	int64_t breserved;
1099 
1100 	lwkt_gettoken(&hmp->fs_token);
1101 	volume = hammer_get_root_volume(hmp, &error);
1102 	if (error) {
1103 		lwkt_reltoken(&hmp->fs_token);
1104 		return(error);
1105 	}
1106 	ondisk = volume->ondisk;
1107 
1108 	/*
1109 	 * Basic stats
1110 	 */
1111 	_hammer_checkspace(hmp, HAMMER_CHKSPC_WRITE, &breserved);
1112 	mp->mnt_vstat.f_files = ondisk->vol0_stat_inodes;
1113 	bfree = ondisk->vol0_stat_freebigblocks * HAMMER_BIGBLOCK_SIZE;
1114 	hammer_rel_volume(volume, 0);
1115 
1116 	mp->mnt_vstat.f_bfree = (bfree - breserved) / HAMMER_BUFSIZE;
1117 	mp->mnt_vstat.f_bavail = mp->mnt_vstat.f_bfree;
1118 	if (mp->mnt_vstat.f_files < 0)
1119 		mp->mnt_vstat.f_files = 0;
1120 	*sbp = mp->mnt_vstat;
1121 	lwkt_reltoken(&hmp->fs_token);
1122 	return(0);
1123 }
1124 
1125 /*
1126  * Sync the filesystem.  Currently we have to run it twice, the second
1127  * one will advance the undo start index to the end index, so if a crash
1128  * occurs no undos will be run on mount.
1129  *
1130  * We do not sync the filesystem if we are called from a panic.  If we did
1131  * we might end up blowing up a sync that was already in progress.
1132  */
1133 static int
1134 hammer_vfs_sync(struct mount *mp, int waitfor)
1135 {
1136 	struct hammer_mount *hmp = (void *)mp->mnt_data;
1137 	int error;
1138 
1139 	lwkt_gettoken(&hmp->fs_token);
1140 	if (panicstr == NULL) {
1141 		error = hammer_sync_hmp(hmp, waitfor);
1142 	} else {
1143 		error = EIO;
1144 	}
1145 	lwkt_reltoken(&hmp->fs_token);
1146 	return (error);
1147 }
1148 
1149 /*
1150  * Convert a vnode to a file handle.
1151  *
1152  * Accesses read-only fields on already-referenced structures so
1153  * no token is needed.
1154  */
1155 static int
1156 hammer_vfs_vptofh(struct vnode *vp, struct fid *fhp)
1157 {
1158 	hammer_inode_t ip;
1159 
1160 	KKASSERT(MAXFIDSZ >= 16);
1161 	ip = VTOI(vp);
1162 	fhp->fid_len = offsetof(struct fid, fid_data[16]);
1163 	fhp->fid_ext = ip->obj_localization >> 16;
1164 	bcopy(&ip->obj_id, fhp->fid_data + 0, sizeof(ip->obj_id));
1165 	bcopy(&ip->obj_asof, fhp->fid_data + 8, sizeof(ip->obj_asof));
1166 	return(0);
1167 }
1168 
1169 
1170 /*
1171  * Convert a file handle back to a vnode.
1172  *
1173  * Use rootvp to enforce PFS isolation when a PFS is exported via a
1174  * null mount.
1175  */
1176 static int
1177 hammer_vfs_fhtovp(struct mount *mp, struct vnode *rootvp,
1178 		  struct fid *fhp, struct vnode **vpp)
1179 {
1180 	hammer_mount_t hmp = (void *)mp->mnt_data;
1181 	struct hammer_transaction trans;
1182 	struct hammer_inode *ip;
1183 	struct hammer_inode_info info;
1184 	int error;
1185 	u_int32_t localization;
1186 
1187 	bcopy(fhp->fid_data + 0, &info.obj_id, sizeof(info.obj_id));
1188 	bcopy(fhp->fid_data + 8, &info.obj_asof, sizeof(info.obj_asof));
1189 	if (rootvp)
1190 		localization = VTOI(rootvp)->obj_localization;
1191 	else
1192 		localization = (u_int32_t)fhp->fid_ext << 16;
1193 
1194 	lwkt_gettoken(&hmp->fs_token);
1195 	hammer_simple_transaction(&trans, hmp);
1196 
1197 	/*
1198 	 * Get/allocate the hammer_inode structure.  The structure must be
1199 	 * unlocked while we manipulate the related vnode to avoid a
1200 	 * deadlock.
1201 	 */
1202 	ip = hammer_get_inode(&trans, NULL, info.obj_id,
1203 			      info.obj_asof, localization, 0, &error);
1204 	if (ip) {
1205 		error = hammer_get_vnode(ip, vpp);
1206 		hammer_rel_inode(ip, 0);
1207 	} else {
1208 		*vpp = NULL;
1209 	}
1210 	hammer_done_transaction(&trans);
1211 	lwkt_reltoken(&hmp->fs_token);
1212 	return (error);
1213 }
1214 
1215 static int
1216 hammer_vfs_checkexp(struct mount *mp, struct sockaddr *nam,
1217 		    int *exflagsp, struct ucred **credanonp)
1218 {
1219 	hammer_mount_t hmp = (void *)mp->mnt_data;
1220 	struct netcred *np;
1221 	int error;
1222 
1223 	lwkt_gettoken(&hmp->fs_token);
1224 	np = vfs_export_lookup(mp, &hmp->export, nam);
1225 	if (np) {
1226 		*exflagsp = np->netc_exflags;
1227 		*credanonp = &np->netc_anon;
1228 		error = 0;
1229 	} else {
1230 		error = EACCES;
1231 	}
1232 	lwkt_reltoken(&hmp->fs_token);
1233 	return (error);
1234 
1235 }
1236 
1237 int
1238 hammer_vfs_export(struct mount *mp, int op, const struct export_args *export)
1239 {
1240 	hammer_mount_t hmp = (void *)mp->mnt_data;
1241 	int error;
1242 
1243 	lwkt_gettoken(&hmp->fs_token);
1244 
1245 	switch(op) {
1246 	case MOUNTCTL_SET_EXPORT:
1247 		error = vfs_export(mp, &hmp->export, export);
1248 		break;
1249 	default:
1250 		error = EOPNOTSUPP;
1251 		break;
1252 	}
1253 	lwkt_reltoken(&hmp->fs_token);
1254 
1255 	return(error);
1256 }
1257 
1258