xref: /freebsd/sbin/fsck_ffs/main.c (revision 0b8224d1)

/*-
 * SPDX-License-Identifier: BSD-3-Clause
 *
 * Copyright (c) 1980, 1986, 1993
 *	The Regents of the University of California.  All rights reserved.
 *
 * Redistribution and use in source and binary forms, with or without
 * modification, are permitted provided that the following conditions
 * are met:
 * 1. Redistributions of source code must retain the above copyright
 *    notice, this list of conditions and the following disclaimer.
 * 2. Redistributions in binary form must reproduce the above copyright
 *    notice, this list of conditions and the following disclaimer in the
 *    documentation and/or other materials provided with the distribution.
 * 3. Neither the name of the University nor the names of its contributors
 *    may be used to endorse or promote products derived from this software
 *    without specific prior written permission.
 *
 * THIS SOFTWARE IS PROVIDED BY THE REGENTS AND CONTRIBUTORS ``AS IS'' AND
 * ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE
 * IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE
 * ARE DISCLAIMED.  IN NO EVENT SHALL THE REGENTS OR CONTRIBUTORS BE LIABLE
 * FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL
 * DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS
 * OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION)
 * HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT
 * LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY
 * OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF
 * SUCH DAMAGE.
 */

#define _WANT_P_OSREL
#include <sys/param.h>
#include <sys/file.h>
#include <sys/mount.h>
#include <sys/resource.h>
#include <sys/stat.h>
#include <sys/sysctl.h>
#include <sys/uio.h>
#include <sys/disklabel.h>

#include <ufs/ufs/dinode.h>
#include <ufs/ffs/fs.h>

#include <err.h>
#include <errno.h>
#include <fstab.h>
#include <grp.h>
#include <inttypes.h>
#include <mntopts.h>
#include <paths.h>
#include <stdint.h>
#include <string.h>
#include <time.h>

#include "fsck.h"

static int  restarts;
static char snapname[BUFSIZ];	/* when doing snapshots, the name of the file */

static void usage(void) __dead2;
static intmax_t argtoimax(int flag, const char *req, const char *str, int base);
static int checkfilesys(char *filesys);
static int setup_bkgrdchk(struct statfs *mntp, int sbrdfailed, char **filesys);

int
main(int argc, char *argv[])
{
	int ch;
	struct rlimit rlimit;
	struct itimerval itimerval;
	int fsret;
	int ret = 0;

	sync();
	skipclean = 1;
	inoopt = 0;
	while ((ch = getopt(argc, argv, "b:Bc:CdEfFm:npRrSyZz")) != -1) {
		switch (ch) {
		case 'b':
			skipclean = 0;
			bflag = argtoimax('b', "number", optarg, 10);
			printf("Alternate super block location: %jd\n", bflag);
			break;

		case 'B':
			bkgrdflag = 1;
			break;

		case 'c':
			skipclean = 0;
			cvtlevel = argtoimax('c', "conversion level", optarg,
			    10);
			if (cvtlevel < 3)
				errx(EEXIT, "cannot do level %d conversion",
				    cvtlevel);
			break;

		case 'd':
			debug++;
			break;

		case 'E':
			Eflag++;
			break;

		case 'f':
			skipclean = 0;
			break;

		case 'F':
			bkgrdcheck = 1;
			break;

		case 'm':
			lfmode = argtoimax('m', "mode", optarg, 8);
			if (lfmode &~ 07777)
				errx(EEXIT, "bad mode to -m: %o", lfmode);
			printf("** lost+found creation mode %o\n", lfmode);
			break;

		case 'n':
			nflag++;
			yflag = 0;
			break;

		case 'p':
			preen++;
			/*FALLTHROUGH*/

		case 'C':
			ckclean++;
			break;

		case 'R':
			wantrestart = 1;
			break;
		case 'r':
			inoopt++;
			break;

		case 'S':
			surrender = 1;
			break;

		case 'y':
			yflag++;
			nflag = 0;
			break;

		case 'Z':
			Zflag++;
			break;

		case 'z':
			zflag++;
			break;

		default:
			usage();
		}
	}
	argc -= optind;
	argv += optind;

	if (!argc)
		usage();

	if (bkgrdflag && cvtlevel > 0) {
		pfatal("CANNOT CONVERT A SNAPSHOT\n");
		exit(EEXIT);
	}

	if (signal(SIGINT, SIG_IGN) != SIG_IGN)
		(void)signal(SIGINT, catch);
	if (ckclean)
		(void)signal(SIGQUIT, catchquit);
	signal(SIGINFO, infohandler);
	if (bkgrdflag) {
		signal(SIGALRM, alarmhandler);
		itimerval.it_interval.tv_sec = 5;
		itimerval.it_interval.tv_usec = 0;
		itimerval.it_value.tv_sec = 5;
		itimerval.it_value.tv_usec = 0;
		setitimer(ITIMER_REAL, &itimerval, NULL);
	}
	/*
	 * Push up our allowed memory limit so we can cope
	 * with huge file systems.
	 */
	if (getrlimit(RLIMIT_DATA, &rlimit) == 0) {
		rlimit.rlim_cur = rlimit.rlim_max;
		(void)setrlimit(RLIMIT_DATA, &rlimit);
	}
	while (argc > 0) {
		if ((fsret = checkfilesys(*argv)) == ERESTART)
			continue;
		ret |= fsret;
		argc--;
		argv++;
	}

	if (returntosingle)
		ret = 2;
	exit(ret);
}

static intmax_t
argtoimax(int flag, const char *req, const char *str, int base)
{
	char *cp;
	intmax_t ret;

	ret = strtoimax(str, &cp, base);
	if (cp == str || *cp)
		errx(EEXIT, "-%c flag requires a %s", flag, req);
	return (ret);
}

/*
 * Check the specified file system.
 */
/* ARGSUSED */
static int
checkfilesys(char *filesys)
{
	ufs2_daddr_t n_ffree, n_bfree;
	struct dups *dp;
	struct statfs *mntp;
	intmax_t blks, files;
	size_t size;
	int sbreadfailed, ofsmodified;

	fsutilinit();
	fsckinit();

	cdevname = filesys;
	if (debug && ckclean)
		pwarn("starting\n");
	/*
	 * Make best effort to get the disk name. Check first to see
	 * if it is listed among the mounted file systems. Failing that
	 * check to see if it is listed in /etc/fstab.
	 */
	mntp = getmntpoint(filesys);
	if (mntp != NULL)
		filesys = mntp->f_mntfromname;
	else
		filesys = blockcheck(filesys);
	/*
	 * If -F flag specified, check to see whether a background check
	 * is possible and needed. If possible and needed, exit with
	 * status zero. Otherwise exit with status non-zero. A non-zero
	 * exit status will cause a foreground check to be run.
	 */
	sblock_init();
	sbreadfailed = 0;
	if (openfilesys(filesys) == 0 || readsb() == 0)
		sbreadfailed = 1;
	if (bkgrdcheck) {
		if (sbreadfailed)
			exit(3);	/* Cannot read superblock */
		if ((sblock.fs_flags & FS_NEEDSFSCK) == FS_NEEDSFSCK)
			exit(4);	/* Earlier background failed */
		if ((sblock.fs_flags & FS_SUJ) == FS_SUJ) {
			maxino = sblock.fs_ncg * sblock.fs_ipg;
			maxfsblock = sblock.fs_size;
			bufinit();
			preen = 1;
			if (suj_check(filesys) == 0)
				exit(4); /* Journal good, run it now */
		}
		if ((sblock.fs_flags & FS_DOSOFTDEP) == 0)
			exit(5);	/* Not running soft updates */
		size = MIBSIZE;
		if (sysctlnametomib("vfs.ffs.adjrefcnt", adjrefcnt, &size) < 0)
			exit(6);	/* Lacks kernel support */
		if ((mntp == NULL && sblock.fs_clean == 1) ||
		    (mntp != NULL && (sblock.fs_flags & FS_UNCLEAN) == 0))
			exit(7);	/* Filesystem clean, report it now */
		exit(0);
	}
	if (ckclean && skipclean) {
		/*
		 * If file system is gjournaled, check it here.
		 */
		if (sbreadfailed)
			exit(3);	/* Cannot read superblock */
		if (bkgrdflag == 0 &&
		    (nflag || (fswritefd = open(filesys, O_WRONLY)) < 0)) {
			fswritefd = -1;
			if (preen)
				pfatal("NO WRITE ACCESS");
			printf(" (NO WRITE)");
		}
		if ((sblock.fs_flags & FS_GJOURNAL) != 0) {
			if (sblock.fs_clean == 1) {
				pwarn("FILE SYSTEM CLEAN; SKIPPING CHECKS\n");
				exit(0);
			}
			if ((sblock.fs_flags &
			    (FS_UNCLEAN | FS_NEEDSFSCK)) == 0) {
				bufinit();
				gjournal_check(filesys);
				if (chkdoreload(mntp, pwarn) == 0)
					exit(0);
				exit(4);
			} else {
				pfatal("FULL FSCK NEEDED, CANNOT RUN FAST "
				    "FSCK\n");
			}
		}
		close(fswritefd);
		fswritefd = -1;
	}
	if (bkgrdflag) {
		switch (setup_bkgrdchk(mntp, sbreadfailed, &filesys)) {
		case -1: /* filesystem clean */
			goto clean;
		case 0: /* cannot do background, give up */
			exit(EEXIT);
		case 1: /* doing background check, preen rules apply */
			preen = 1;
			break;
		}
	}

	switch (setup(filesys)) {
	case 0:
		if (preen)
			pfatal("CAN'T CHECK FILE SYSTEM.");
		return (EEXIT);
	case -1:
	clean:
		pwarn("clean, %ld free ", (long)(sblock.fs_cstotal.cs_nffree +
		    sblock.fs_frag * sblock.fs_cstotal.cs_nbfree));
		printf("(%jd frags, %jd blocks, %.1f%% fragmentation)\n",
		    (intmax_t)sblock.fs_cstotal.cs_nffree,
		    (intmax_t)sblock.fs_cstotal.cs_nbfree,
		    sblock.fs_cstotal.cs_nffree * 100.0 / sblock.fs_dsize);
		return (0);
	}
	/*
	 * Determine if we can and should do journal recovery.
	 */
	if (bkgrdflag == 0 && (sblock.fs_flags & FS_SUJ) == FS_SUJ) {
		if ((sblock.fs_flags & FS_NEEDSFSCK) != FS_NEEDSFSCK &&
		    skipclean) {
			sujrecovery = 1;
			if (suj_check(filesys) == 0) {
				pwarn("\n**** FILE SYSTEM MARKED CLEAN ****\n");
				if (chkdoreload(mntp, pwarn) == 0)
					exit(0);
				exit(4);
			}
			sujrecovery = 0;
			pwarn("Skipping journal, "
			    "falling through to full fsck\n");
		}
		if (fswritefd != -1) {
			/*
			 * Write the superblock so we don't try to recover the
			 * journal on another pass. If this is the only change
			 * to the filesystem, we do not want it to be called
			 * out as modified.
			 */
			sblock.fs_mtime = time(NULL);
			sbdirty();
			ofsmodified = fsmodified;
			flush(fswritefd, &sblk);
			fsmodified = ofsmodified;
		}
	}
	/*
	 * If the filesystem was run on an old kernel that did not
	 * support check hashes, clear the check-hash flags so that
	 * we do not try to verify them.
	 */
	if ((sblock.fs_flags & FS_METACKHASH) == 0)
		sblock.fs_metackhash = 0;
	/*
	 * If we are running on a kernel that can provide check hashes
	 * that are not yet enabled for the filesystem and we are
	 * running manually without the -y flag, offer to add any
	 * supported check hashes that are not already enabled.
	 */
	ckhashadd = 0;
	if (preen == 0 && yflag == 0 && sblock.fs_magic != FS_UFS1_MAGIC &&
	    fswritefd != -1 && getosreldate() >= P_OSREL_CK_CYLGRP) {
		if ((sblock.fs_metackhash & CK_CYLGRP) == 0 &&
		    reply("ADD CYLINDER GROUP CHECK-HASH PROTECTION") != 0) {
			ckhashadd |= CK_CYLGRP;
			sblock.fs_metackhash |= CK_CYLGRP;
		}
		if ((sblock.fs_metackhash & CK_SUPERBLOCK) == 0 &&
		    getosreldate() >= P_OSREL_CK_SUPERBLOCK &&
		    reply("ADD SUPERBLOCK CHECK-HASH PROTECTION") != 0) {
			ckhashadd |= CK_SUPERBLOCK;
			sblock.fs_metackhash |= CK_SUPERBLOCK;
		}
		if ((sblock.fs_metackhash & CK_INODE) == 0 &&
		    getosreldate() >= P_OSREL_CK_INODE &&
		    reply("ADD INODE CHECK-HASH PROTECTION") != 0) {
			ckhashadd |= CK_INODE;
			sblock.fs_metackhash |= CK_INODE;
		}
#ifdef notyet
		if ((sblock.fs_metackhash & CK_INDIR) == 0 &&
		    getosreldate() >= P_OSREL_CK_INDIR &&
		    reply("ADD INDIRECT BLOCK CHECK-HASH PROTECTION") != 0) {
			ckhashadd |= CK_INDIR;
			sblock.fs_metackhash |= CK_INDIR;
		}
		if ((sblock.fs_metackhash & CK_DIR) == 0 &&
		    getosreldate() >= P_OSREL_CK_DIR &&
		    reply("ADD DIRECTORY CHECK-HASH PROTECTION") != 0) {
			ckhashadd |= CK_DIR;
			sblock.fs_metackhash |= CK_DIR;
		}
#endif /* notyet */
		if (ckhashadd != 0) {
			sblock.fs_flags |= FS_METACKHASH;
			sbdirty();
		}
	}
	/*
	 * Cleared if any questions answered no. Used to decide if
	 * the superblock should be marked clean.
	 */
	resolved = 1;
	/*
	 * 1: scan inodes tallying blocks used
	 */
	if (preen == 0 || debug) {
		printf("** Last Mounted on %s\n", sblock.fs_fsmnt);
		if (mntp != NULL && mntp->f_flags & MNT_ROOTFS)
			printf("** Root file system\n");
		printf("** Phase 1 - Check Blocks and Sizes\n");
	}
	clock_gettime(CLOCK_REALTIME_PRECISE, &startprog);
	pass1();
	IOstats("Pass1");

	/*
	 * 1b: locate first references to duplicates, if any
	 */
	if (duplist) {
		if (preen || usedsoftdep)
			pfatal("INTERNAL ERROR: DUPS WITH %s%s%s",
			    preen ? "-p" : "",
			    (preen && usedsoftdep) ? " AND " : "",
			    usedsoftdep ? "SOFTUPDATES" : "");
		if (preen == 0 || debug)
			printf("** Phase 1b - Rescan For More DUPS\n");
		pass1b();
		IOstats("Pass1b");
	}

	/*
	 * 2: traverse directories from root to mark all connected directories
	 */
	if (preen == 0 || debug)
		printf("** Phase 2 - Check Pathnames\n");
	pass2();
	IOstats("Pass2");

	/*
	 * 3: scan inodes looking for disconnected directories
	 */
	if (preen == 0 || debug)
		printf("** Phase 3 - Check Connectivity\n");
	pass3();
	IOstats("Pass3");

	/*
	 * 4: scan inodes looking for disconnected files; check reference counts
	 */
	if (preen == 0 || debug)
		printf("** Phase 4 - Check Reference Counts\n");
	pass4();
	IOstats("Pass4");

	/*
	 * 5: check and repair resource counts in cylinder groups
	 */
	if (preen == 0 || debug)
		printf("** Phase 5 - Check Cyl groups\n");
	snapflush(std_checkblkavail);
	if (cgheader_corrupt) {
		printf("PHASE 5 SKIPPED DUE TO CORRUPT CYLINDER GROUP "
		    "HEADER(S)\n\n");
	} else {
		pass5();
		IOstats("Pass5");
	}

	/*
	 * print out summary statistics
	 */
	n_ffree = sblock.fs_cstotal.cs_nffree;
	n_bfree = sblock.fs_cstotal.cs_nbfree;
	files = maxino - UFS_ROOTINO - sblock.fs_cstotal.cs_nifree - n_files;
	blks = n_blks +
	    sblock.fs_ncg * (cgdmin(&sblock, 0) - cgsblock(&sblock, 0));
	blks += cgsblock(&sblock, 0) - cgbase(&sblock, 0);
	blks += howmany(sblock.fs_cssize, sblock.fs_fsize);
	blks = maxfsblock - (n_ffree + sblock.fs_frag * n_bfree) - blks;
	if (bkgrdflag && (files > 0 || blks > 0)) {
		countdirs = sblock.fs_cstotal.cs_ndir - countdirs;
		pwarn("Reclaimed: %ld directories, %jd files, %jd fragments\n",
		    countdirs, files - countdirs, blks);
	}
	pwarn("%ld files, %jd used, %ju free ",
	    (long)n_files, (intmax_t)n_blks,
	    (uintmax_t)n_ffree + sblock.fs_frag * n_bfree);
	printf("(%ju frags, %ju blocks, %.1f%% fragmentation)\n",
	    (uintmax_t)n_ffree, (uintmax_t)n_bfree,
	    n_ffree * 100.0 / sblock.fs_dsize);
	if (debug) {
		if (files < 0)
			printf("%jd inodes missing\n", -files);
		if (blks < 0)
			printf("%jd blocks missing\n", -blks);
		if (duplist != NULL) {
			printf("The following duplicate blocks remain:");
			for (dp = duplist; dp; dp = dp->next)
				printf(" %jd,", (intmax_t)dp->dup);
			printf("\n");
		}
	}
	duplist = (struct dups *)0;
	muldup = (struct dups *)0;
	inocleanup();
	if (fsmodified) {
		sblock.fs_time = time(NULL);
		sbdirty();
	}
	if (cvtlevel && (sblk.b_flags & B_DIRTY) != 0) {
		/*
		 * Write out the duplicate super blocks
		 */
		if (sbput(fswritefd, &sblock, sblock.fs_ncg) == 0)
			fsmodified = 1;
	}
	if (rerun)
		resolved = 0;

	/*
	 * Check to see if the file system is mounted read-write.
	 */
	if (bkgrdflag == 0 && mntp != NULL && (mntp->f_flags & MNT_RDONLY) == 0)
		resolved = 0;
	ckfini(resolved);

	if (fsmodified && !preen)
		printf("\n***** FILE SYSTEM WAS MODIFIED *****\n");
	if (rerun) {
		if (wantrestart && (restarts++ < 10) &&
		    (preen || reply("RESTART")))
			return (ERESTART);
		printf("\n***** PLEASE RERUN FSCK *****\n");
	}
	if (chkdoreload(mntp, pwarn) != 0) {
		if (!fsmodified)
			return (0);
		if (!preen)
			printf("\n***** REBOOT NOW *****\n");
		sync();
		return (4);
	}
	return (rerun ? ERERUN : 0);
}

/*
 * If we are to do a background check:
 *	Get the mount point information of the file system
 *	If already clean, return -1
 *	Check that kernel supports background fsck
 *	Find or create the snapshot directory
 *	Create the snapshot file
 *	Open snapshot
 *	If anything fails print reason and return 0 which exits
 */
static int
setup_bkgrdchk(struct statfs *mntp, int sbreadfailed, char **filesys)
{
	struct stat snapdir;
	struct group *grp;
	struct iovec *iov;
	char errmsg[255];
	int iovlen;
	size_t size;

	/* Get the mount point information of the file system */
	if (mntp == NULL) {
		pwarn("NOT MOUNTED, CANNOT RUN IN BACKGROUND\n");
		return (0);
	}
	if ((mntp->f_flags & MNT_RDONLY) != 0) {
		pwarn("MOUNTED READ-ONLY, CANNOT RUN IN BACKGROUND\n");
		return (0);
	}
	if ((mntp->f_flags & MNT_SOFTDEP) == 0) {
		pwarn("NOT USING SOFT UPDATES, CANNOT RUN IN BACKGROUND\n");
		return (0);
	}
	if (sbreadfailed) {
		pwarn("SUPERBLOCK READ FAILED, CANNOT RUN IN BACKGROUND\n");
		return (0);
	}
	if ((sblock.fs_flags & FS_NEEDSFSCK) != 0) {
		pwarn("FULL FSCK NEEDED, CANNOT RUN IN BACKGROUND\n");
		return (0);
	}
	if (skipclean && ckclean &&
	   (sblock.fs_flags & (FS_UNCLEAN|FS_NEEDSFSCK)) == 0) {
		/*
		 * file system is clean;
		 * skip snapshot and report it clean
		 */
		pwarn("FILE SYSTEM CLEAN; SKIPPING CHECKS\n");
		return (-1);
	}
	/* Check that kernel supports background fsck */
	size = MIBSIZE;
	if (sysctlnametomib("vfs.ffs.adjrefcnt", adjrefcnt, &size) < 0||
	    sysctlnametomib("vfs.ffs.adjblkcnt", adjblkcnt, &size) < 0||
	    sysctlnametomib("vfs.ffs.setsize", setsize, &size) < 0 ||
	    sysctlnametomib("vfs.ffs.freefiles", freefiles, &size) < 0||
	    sysctlnametomib("vfs.ffs.freedirs", freedirs, &size) < 0 ||
	    sysctlnametomib("vfs.ffs.freeblks", freeblks, &size) < 0) {
		pwarn("KERNEL LACKS BACKGROUND FSCK SUPPORT\n");
		return (0);
	}
	/*
	 * When kernel lacks runtime bgfsck superblock summary
	 * adjustment functionality, it does not mean we can not
	 * continue, as old kernels will recompute the summary at
	 * mount time. However, it will be an unexpected softupdates
	 * inconsistency if it turns out that the summary is still
	 * incorrect. Set a flag so subsequent operation can know this.
	 */
	bkgrdsumadj = 1;
	if (sysctlnametomib("vfs.ffs.adjndir", adjndir, &size) < 0 ||
	   sysctlnametomib("vfs.ffs.adjnbfree", adjnbfree, &size) < 0 ||
	   sysctlnametomib("vfs.ffs.adjnifree", adjnifree, &size) < 0 ||
	   sysctlnametomib("vfs.ffs.adjnffree", adjnffree, &size) < 0 ||
	   sysctlnametomib("vfs.ffs.adjnumclusters", adjnumclusters,
	   &size) < 0) {
		bkgrdsumadj = 0;
		pwarn("KERNEL LACKS RUNTIME SUPERBLOCK SUMMARY ADJUSTMENT "
		    "SUPPORT\n");
	}
	/* Find or create the snapshot directory */
	snprintf(snapname, sizeof snapname, "%s/.snap", mntp->f_mntonname);
	if (stat(snapname, &snapdir) < 0) {
		if (errno != ENOENT) {
			pwarn("CANNOT FIND SNAPSHOT DIRECTORY %s: %s, CANNOT "
			    "RUN IN BACKGROUND\n", snapname, strerror(errno));
			return (0);
		}
		if ((grp = getgrnam("operator")) == NULL ||
			   mkdir(snapname, 0770) < 0 ||
			   chown(snapname, -1, grp->gr_gid) < 0 ||
			   chmod(snapname, 0770) < 0) {
			pwarn("CANNOT CREATE SNAPSHOT DIRECTORY %s: %s, "
			    "CANNOT RUN IN BACKGROUND\n", snapname,
			    strerror(errno));
			return (0);
		}
	} else if (!S_ISDIR(snapdir.st_mode)) {
		pwarn("%s IS NOT A DIRECTORY, CANNOT RUN IN BACKGROUND\n",
		    snapname);
		return (0);
	}
	/* Create the snapshot file */
	iov = NULL;
	iovlen = 0;
	errmsg[0] = '\0';
	snprintf(snapname, sizeof snapname, "%s/.snap/fsck_snapshot",
	    mntp->f_mntonname);
	build_iovec(&iov, &iovlen, "fstype", "ffs", 4);
	build_iovec(&iov, &iovlen, "from", snapname, (size_t)-1);
	build_iovec(&iov, &iovlen, "fspath", mntp->f_mntonname, (size_t)-1);
	build_iovec(&iov, &iovlen, "errmsg", errmsg, sizeof(errmsg));
	build_iovec(&iov, &iovlen, "update", NULL, 0);
	build_iovec(&iov, &iovlen, "snapshot", NULL, 0);
	/* Create snapshot, removing old snapshot if it exists */
	while (nmount(iov, iovlen, mntp->f_flags) < 0) {
		if (errno == EEXIST && unlink(snapname) == 0)
			continue;
		pwarn("CANNOT CREATE SNAPSHOT %s: %s %s\n", snapname,
		    strerror(errno), errmsg);
		return (0);
	}
	/* Open snapshot */
	if (openfilesys(snapname) == 0) {
		unlink(snapname);
		pwarn("CANNOT OPEN SNAPSHOT %s: %s, CANNOT RUN IN "
		    "BACKGROUND\n", snapname, strerror(errno));
		return (0);
	}
	/* Immediately unlink snapshot so that it will be deleted when closed */
	unlink(snapname);
	free(sblock.fs_csp);
	free(sblock.fs_si);
	if (readsb() == 0) {
		pwarn("CANNOT READ SNAPSHOT SUPERBLOCK\n");
		return (0);
	}
	*filesys = snapname;
	cmd.version = FFS_CMD_VERSION;
	cmd.handle = fsreadfd;
	return (1);
}

static void
usage(void)
{
	(void) fprintf(stderr,
"usage: %s [-BCdEFfnpRrSyZ] [-b block] [-c level] [-m mode] filesystem ...\n",
	    getprogname());
	exit(1);
}

void
infohandler(int sig __unused)
{
	got_siginfo = 1;
}

void
alarmhandler(int sig __unused)
{
	got_sigalarm = 1;
}