On Thu, Oct 24, 2019 at 05:05:45PM +0300, Boaz Harrosh wrote: > On 24/10/2019 10:34, Dave Chinner wrote: > > On Thu, Oct 24, 2019 at 05:31:13AM +0300, Boaz Harrosh wrote: > <> > > > > The on disk DAX flag is inherited from the parent directory at > > create time. Hence an admin only need to set it on the data > > directory of the application when first configuring it, and > > everything the app creates will be configured for DAX access > > automatically. > > > > Yes I said that as well. You said "it must be set between creation and first write", stating the requirement for an on-disk flag to work. I'm decribing how that requirement is actually implemented. i.e. what you are stating is something we actually implemented years ago... > > I also seem > > to recall that there was a need to take some vm level lock to really > > prevent page fault races, and that we can't safely take that in a > > safe combination with all the filesystem locks we need. > > > > We do not really care with page fault races in the Kernel as long Oh yes we do. A write fault is a 2-part operation - a read fault to populate the pte and mapping, then a write fault (->page_mkwrite) to do all the filesystem work needed to dirty the page and pte. The read fault sets up the state for the write fault, and if we change the aops between these two operations, then the ->page_mkwrite implementation goes kaboom. This isn't a theoretical problem - this is exactly the race condition that lead us to disabling the flag in the first place. There is no serialisation between the read and write parts of the page fault iand the filesystem changing the DAX flag and ops vector, and so fixing this problem requires hold yet more locks in the filesystem path to completely lock out page fault processing on the inode's mapping. > as I protect the xarray access and these are protected well if we > take truncate locking. But we have a bigger problem that you pointed > out with the change of the operations vector pointer. > > I was thinking about this last night. One way to do this is with > file-exclusive-lock. Correct me if I'm wrong: > file-exclusive-readwrite-lock means any other openers will fail and > if there are openers already the lock will fail. Which is what we want > no? The filesystem ioctls and page faults have no visibility of file locks. They don't know and can't find out in a sane manner that an inode has a single -user- reference. And it introduces a new problem for any application using the fssetxattr() ioctl - accidentally not setting the S_DAX flag to be unmodified will now fail, and that means such a change breaks existing applications. Sure, you can say they are "buggy applications", but the fact is this user API change breaks them. Hence I don't think we can change the user API for setting/clearing this flag like this. Cheers, Dave. -- Dave Chinner david@xxxxxxxxxxxxx
