// Copyright 2019 Intel Corporation. All Rights Reserved. // SPDX-License-Identifier: Apache-2.0 use std::sync::atomic::AtomicBool; use std::sync::{Arc, Barrier, Mutex}; use std::{result, thread}; use seccompiler::SeccompAction; use serde::{Deserialize, Serialize}; use serde_with::{serde_as, Bytes}; use vhost::vhost_user::message::{VhostUserProtocolFeatures, VhostUserVirtioFeatures}; use vhost::vhost_user::{FrontendReqHandler, VhostUserFrontend, VhostUserFrontendReqHandler}; use virtio_queue::Queue; use vm_memory::{ByteValued, GuestMemoryAtomic}; use vm_migration::protocol::MemoryRangeTable; use vm_migration::{Migratable, MigratableError, Pausable, Snapshot, Snapshottable, Transportable}; use vmm_sys_util::eventfd::EventFd; use super::vu_common_ctrl::VhostUserHandle; use super::{Error, Result, DEFAULT_VIRTIO_FEATURES}; use crate::seccomp_filters::Thread; use crate::thread_helper::spawn_virtio_thread; use crate::vhost_user::VhostUserCommon; use crate::{ ActivateResult, GuestMemoryMmap, GuestRegionMmap, MmapRegion, UserspaceMapping, VirtioCommon, VirtioDevice, VirtioDeviceType, VirtioInterrupt, VirtioSharedMemoryList, VIRTIO_F_IOMMU_PLATFORM, }; const NUM_QUEUE_OFFSET: usize = 1; const DEFAULT_QUEUE_NUMBER: usize = 2; #[derive(Serialize, Deserialize)] pub struct State { pub avail_features: u64, pub acked_features: u64, pub config: VirtioFsConfig, pub acked_protocol_features: u64, pub vu_num_queues: usize, pub backend_req_support: bool, } struct BackendReqHandler {} impl VhostUserFrontendReqHandler for BackendReqHandler {} pub const VIRTIO_FS_TAG_LEN: usize = 36; #[serde_as] #[derive(Copy, Clone, Serialize, Deserialize)] #[repr(C, packed)] pub struct VirtioFsConfig { #[serde_as(as = "Bytes")] pub tag: [u8; VIRTIO_FS_TAG_LEN], pub num_request_queues: u32, } impl Default for VirtioFsConfig { fn default() -> Self { VirtioFsConfig { tag: [0; VIRTIO_FS_TAG_LEN], num_request_queues: 0, } } } // SAFETY: only a series of integers unsafe impl ByteValued for VirtioFsConfig {} pub struct Fs { common: VirtioCommon, vu_common: VhostUserCommon, id: String, config: VirtioFsConfig, // Hold ownership of the memory that is allocated for the device // which will be automatically dropped when the device is dropped cache: Option<(VirtioSharedMemoryList, MmapRegion)>, seccomp_action: SeccompAction, guest_memory: Option>, epoll_thread: Option>, exit_evt: EventFd, iommu: bool, } impl Fs { /// Create a new virtio-fs device. #[allow(clippy::too_many_arguments)] pub fn new( id: String, path: &str, tag: &str, req_num_queues: usize, queue_size: u16, cache: Option<(VirtioSharedMemoryList, MmapRegion)>, seccomp_action: SeccompAction, exit_evt: EventFd, iommu: bool, state: Option, ) -> Result { // Calculate the actual number of queues needed. let num_queues = NUM_QUEUE_OFFSET + req_num_queues; // Connect to the vhost-user socket. let mut vu = VhostUserHandle::connect_vhost_user(false, path, num_queues as u64, false)?; let ( avail_features, acked_features, acked_protocol_features, vu_num_queues, config, paused, ) = if let Some(state) = state { info!("Restoring vhost-user-fs {}", id); vu.set_protocol_features_vhost_user( state.acked_features, state.acked_protocol_features, )?; ( state.avail_features, state.acked_features, state.acked_protocol_features, state.vu_num_queues, state.config, true, ) } else { // Filling device and vring features VMM supports. let avail_features = DEFAULT_VIRTIO_FEATURES; let avail_protocol_features = VhostUserProtocolFeatures::MQ | VhostUserProtocolFeatures::CONFIGURE_MEM_SLOTS | VhostUserProtocolFeatures::REPLY_ACK | VhostUserProtocolFeatures::INFLIGHT_SHMFD | VhostUserProtocolFeatures::LOG_SHMFD; let (acked_features, acked_protocol_features) = vu.negotiate_features_vhost_user(avail_features, avail_protocol_features)?; let backend_num_queues = if acked_protocol_features & VhostUserProtocolFeatures::MQ.bits() != 0 { vu.socket_handle() .get_queue_num() .map_err(Error::VhostUserGetQueueMaxNum)? as usize } else { DEFAULT_QUEUE_NUMBER }; if num_queues > backend_num_queues { error!( "vhost-user-fs requested too many queues ({}) since the backend only supports {}\n", num_queues, backend_num_queues ); return Err(Error::BadQueueNum); } // Create virtio-fs device configuration. let mut config = VirtioFsConfig::default(); let tag_bytes_slice = tag.as_bytes(); let len = if tag_bytes_slice.len() < config.tag.len() { tag_bytes_slice.len() } else { config.tag.len() }; config.tag[..len].copy_from_slice(tag_bytes_slice[..len].as_ref()); config.num_request_queues = req_num_queues as u32; ( acked_features, // If part of the available features that have been acked, the // PROTOCOL_FEATURES bit must be already set through the VIRTIO // acked features as we know the guest would never ack it, thus // the feature would be lost. acked_features & VhostUserVirtioFeatures::PROTOCOL_FEATURES.bits(), acked_protocol_features, num_queues, config, false, ) }; Ok(Fs { common: VirtioCommon { device_type: VirtioDeviceType::Fs as u32, avail_features, acked_features, queue_sizes: vec![queue_size; num_queues], paused_sync: Some(Arc::new(Barrier::new(2))), min_queues: 1, paused: Arc::new(AtomicBool::new(paused)), ..Default::default() }, vu_common: VhostUserCommon { vu: Some(Arc::new(Mutex::new(vu))), acked_protocol_features, socket_path: path.to_string(), vu_num_queues, ..Default::default() }, id, config, cache, seccomp_action, guest_memory: None, epoll_thread: None, exit_evt, iommu, }) } fn state(&self) -> State { State { avail_features: self.common.avail_features, acked_features: self.common.acked_features, config: self.config, acked_protocol_features: self.vu_common.acked_protocol_features, vu_num_queues: self.vu_common.vu_num_queues, backend_req_support: false, } } } impl Drop for Fs { fn drop(&mut self) { if let Some(kill_evt) = self.common.kill_evt.take() { // Ignore the result because there is nothing we can do about it. let _ = kill_evt.write(1); } self.common.wait_for_epoll_threads(); if let Some(thread) = self.epoll_thread.take() { if let Err(e) = thread.join() { error!("Error joining thread: {:?}", e); } } } } impl VirtioDevice for Fs { fn device_type(&self) -> u32 { self.common.device_type } fn queue_max_sizes(&self) -> &[u16] { &self.common.queue_sizes } fn features(&self) -> u64 { let mut features = self.common.avail_features; if self.iommu { features |= 1u64 << VIRTIO_F_IOMMU_PLATFORM; } features } fn ack_features(&mut self, value: u64) { self.common.ack_features(value) } fn read_config(&self, offset: u64, data: &mut [u8]) { self.read_config_from_slice(self.config.as_slice(), offset, data); } fn activate( &mut self, mem: GuestMemoryAtomic, interrupt_cb: Arc, queues: Vec<(usize, Queue, EventFd)>, ) -> ActivateResult { self.common.activate(&queues, &interrupt_cb)?; self.guest_memory = Some(mem.clone()); let backend_req_handler: Option> = None; // Run a dedicated thread for handling potential reconnections with // the backend. let (kill_evt, pause_evt) = self.common.dup_eventfds(); let mut handler = self.vu_common.activate( mem, queues, interrupt_cb, self.common.acked_features, backend_req_handler, kill_evt, pause_evt, )?; let paused = self.common.paused.clone(); let paused_sync = self.common.paused_sync.clone(); let mut epoll_threads = Vec::new(); spawn_virtio_thread( &self.id, &self.seccomp_action, Thread::VirtioVhostFs, &mut epoll_threads, &self.exit_evt, move || handler.run(paused, paused_sync.unwrap()), )?; self.epoll_thread = Some(epoll_threads.remove(0)); event!("virtio-device", "activated", "id", &self.id); Ok(()) } fn reset(&mut self) -> Option> { // We first must resume the virtio thread if it was paused. if self.common.pause_evt.take().is_some() { self.common.resume().ok()?; } if let Some(vu) = &self.vu_common.vu { if let Err(e) = vu.lock().unwrap().reset_vhost_user() { error!("Failed to reset vhost-user daemon: {:?}", e); return None; } } if let Some(kill_evt) = self.common.kill_evt.take() { // Ignore the result because there is nothing we can do about it. let _ = kill_evt.write(1); } event!("virtio-device", "reset", "id", &self.id); // Return the interrupt Some(self.common.interrupt_cb.take().unwrap()) } fn shutdown(&mut self) { self.vu_common.shutdown() } fn get_shm_regions(&self) -> Option { self.cache.as_ref().map(|cache| cache.0.clone()) } fn set_shm_regions( &mut self, shm_regions: VirtioSharedMemoryList, ) -> std::result::Result<(), crate::Error> { if let Some(cache) = self.cache.as_mut() { cache.0 = shm_regions; Ok(()) } else { Err(crate::Error::SetShmRegionsNotSupported) } } fn add_memory_region( &mut self, region: &Arc, ) -> std::result::Result<(), crate::Error> { self.vu_common.add_memory_region(&self.guest_memory, region) } fn userspace_mappings(&self) -> Vec { let mut mappings = Vec::new(); if let Some(cache) = self.cache.as_ref() { mappings.push(UserspaceMapping { host_addr: cache.0.host_addr, mem_slot: cache.0.mem_slot, addr: cache.0.addr, len: cache.0.len, mergeable: false, }) } mappings } } impl Pausable for Fs { fn pause(&mut self) -> result::Result<(), MigratableError> { self.vu_common.pause()?; self.common.pause() } fn resume(&mut self) -> result::Result<(), MigratableError> { self.common.resume()?; if let Some(epoll_thread) = &self.epoll_thread { epoll_thread.thread().unpark(); } self.vu_common.resume() } } impl Snapshottable for Fs { fn id(&self) -> String { self.id.clone() } fn snapshot(&mut self) -> std::result::Result { self.vu_common.snapshot(&self.state()) } } impl Transportable for Fs {} impl Migratable for Fs { fn start_dirty_log(&mut self) -> std::result::Result<(), MigratableError> { self.vu_common.start_dirty_log(&self.guest_memory) } fn stop_dirty_log(&mut self) -> std::result::Result<(), MigratableError> { self.vu_common.stop_dirty_log() } fn dirty_log(&mut self) -> std::result::Result { self.vu_common.dirty_log(&self.guest_memory) } fn start_migration(&mut self) -> std::result::Result<(), MigratableError> { self.vu_common.start_migration() } fn complete_migration(&mut self) -> std::result::Result<(), MigratableError> { self.vu_common .complete_migration(self.common.kill_evt.take()) } }