2fa9e406ahrens * CDDL HEADER START
3fa9e406ahrens *
4fa9e406ahrens * The contents of this file are subject to the terms of the
5ea8dc4beschrock * Common Development and Distribution License (the "License").
6ea8dc4beschrock * You may not use this file except in compliance with the License.
7fa9e406ahrens *
8fa9e406ahrens * You can obtain a copy of the license at usr/src/OPENSOLARIS.LICENSE
9fa9e406ahrens * or http://www.opensolaris.org/os/licensing.
10fa9e406ahrens * See the License for the specific language governing permissions
11fa9e406ahrens * and limitations under the License.
12fa9e406ahrens *
13fa9e406ahrens * When distributing Covered Code, include this CDDL HEADER in each
14fa9e406ahrens * file and include the License file at usr/src/OPENSOLARIS.LICENSE.
15fa9e406ahrens * If applicable, add the following below this CDDL HEADER, with the
16fa9e406ahrens * fields enclosed by brackets "[]" replaced with your own identifying
17fa9e406ahrens * information: Portions Copyright [yyyy] [name of copyright owner]
18fa9e406ahrens *
19fa9e406ahrens * CDDL HEADER END
20fa9e406ahrens */
2398d1cbfGeorge Wilson * Copyright (c) 2005, 2010, Oracle and/or its affiliates. All rights reserved.
240ce4bbcMatthew Ahrens * Copyright (c) 2011, 2019 by Delphix. All rights reserved.
251437283Hans Rosenfeld * Copyright (c) 2015, Nexenta Systems, Inc.  All rights reserved.
26bc9014eJustin Gibbs * Copyright (c) 2014 Spectra Logic Corporation, All rights reserved.
2745818eeMatthew Ahrens * Copyright 2013 Saso Kiselkov. All rights reserved.
28c3d26abMatthew Ahrens * Copyright (c) 2014 Integros [integros.com]
29c8811bdToomas Soome * Copyright 2016 Toomas Soome <tsoome@me.com>
3082f63c3Jerry Jelinek * Copyright 2018 Joyent, Inc.
31663207aDon Brady * Copyright (c) 2017, Intel Corporation.
321702cceAlek Pinchuk * Copyright (c) 2017 Datto Inc.
330fb055eAndy Fiddaman * Copyright 2018 OmniOS Community Edition (OmniOSce) Association.
345aeb947Garrett D'Amore */
373e30c24Will Andrews * SPA: Storage Pool Allocator
383e30c24Will Andrews *
39fa9e406ahrens * This file contains all the routines used when modifying on-disk SPA state.
40fa9e406ahrens * This includes opening, importing, destroying, exporting a pool, and syncing a
41fa9e406ahrens * pool.
42fa9e406ahrens */
44fa9e406ahrens#include <sys/zfs_context.h>
45ea8dc4beschrock#include <sys/fm/fs/zfs.h>
46fa9e406ahrens#include <sys/spa_impl.h>
47fa9e406ahrens#include <sys/zio.h>
48fa9e406ahrens#include <sys/zio_checksum.h>
49fa9e406ahrens#include <sys/dmu.h>
50fa9e406ahrens#include <sys/dmu_tx.h>
51fa9e406ahrens#include <sys/zap.h>
52fa9e406ahrens#include <sys/zil.h>
53b24ab67Jeff Bonwick#include <sys/ddt.h>
54fa9e406ahrens#include <sys/vdev_impl.h>
555cabbc6Prashanth Sreenivasa#include <sys/vdev_removal.h>
565cabbc6Prashanth Sreenivasa#include <sys/vdev_indirect_mapping.h>
575cabbc6Prashanth Sreenivasa#include <sys/vdev_indirect_births.h>
58094e47eGeorge Wilson#include <sys/vdev_initialize.h>
59084fd14Brian Behlendorf#include <sys/vdev_trim.h>
60fa9e406ahrens#include <sys/metaslab.h>
6188ecc94George Wilson#include <sys/metaslab_impl.h>
62e0f1c0aOlaf Faaland#include <sys/mmp.h>
63fa9e406ahrens#include <sys/uberblock_impl.h>
64fa9e406ahrens#include <sys/txg.h>
65fa9e406ahrens#include <sys/avl.h>
665cabbc6Prashanth Sreenivasa#include <sys/bpobj.h>
67fa9e406ahrens#include <sys/dmu_traverse.h>
68b1b8ab3lling#include <sys/dmu_objset.h>
69fa9e406ahrens#include <sys/unique.h>
70fa9e406ahrens#include <sys/dsl_pool.h>
71b1b8ab3lling#include <sys/dsl_dataset.h>
72fa9e406ahrens#include <sys/dsl_dir.h>
73fa9e406ahrens#include <sys/dsl_prop.h>
74b1b8ab3lling#include <sys/dsl_synctask.h>
75fa9e406ahrens#include <sys/fs/zfs.h>
76fa94a07brendan#include <sys/arc.h>
77fa9e406ahrens#include <sys/callb.h>
789517395ek#include <sys/systeminfo.h>
79e7cbe64gw#include <sys/spa_boot.h>
80573ca77George Wilson#include <sys/zfs_ioctl.h>
813f9d6adLin Ling#include <sys/dsl_scan.h>
82ad135b5Christopher Siden#include <sys/zfeature.h>
833b2aab1Matthew Ahrens#include <sys/dsl_destroy.h>
84770499eDan Kimmel#include <sys/abd.h>
865679c89jv#ifdef	_KERNEL
87dedec47Jack Meng#include <sys/bootprops.h>
8835a5a35Jonathan Adams#include <sys/callb.h>
8935a5a35Jonathan Adams#include <sys/cpupart.h>
9035a5a35Jonathan Adams#include <sys/pool.h>
9135a5a35Jonathan Adams#include <sys/sysdc.h>
9235a5a35Jonathan Adams#include <sys/zone.h>
935679c89jv#endif	/* _KERNEL */
95990b485lling#include "zfs_prop.h"
96b7b9745perrin#include "zfs_comutil.h"
983cb69f7Will Andrews/*
993cb69f7Will Andrews * The interval, in seconds, at which failed configuration cache file writes
1003cb69f7Will Andrews * should be retried.
1013cb69f7Will Andrews */
1025cabbc6Prashanth Sreenivasaint zfs_ccw_retry_interval = 300;
1033cb69f7Will Andrews
10435a5a35Jonathan Adamstypedef enum zti_modes {
105ec94d32Adam Leventhal	ZTI_MODE_FIXED,			/* value is # of threads (min 1) */
106ec94d32Adam Leventhal	ZTI_MODE_BATCH,			/* cpu-intensive; value is ignored */
107ec94d32Adam Leventhal	ZTI_MODE_NULL,			/* don't create a taskq */
108ec94d32Adam Leventhal	ZTI_NMODES
10935a5a35Jonathan Adams} zti_modes_t;
111ec94d32Adam Leventhal#define	ZTI_P(n, q)	{ ZTI_MODE_FIXED, (n), (q) }
112ec94d32Adam Leventhal#define	ZTI_BATCH	{ ZTI_MODE_BATCH, 0, 1 }
113ec94d32Adam Leventhal#define	ZTI_NULL	{ ZTI_MODE_NULL, 0, 0 }
1142e0c549Jonathan Adams
115ec94d32Adam Leventhal#define	ZTI_N(n)	ZTI_P(n, 1)
116ec94d32Adam Leventhal#define	ZTI_ONE		ZTI_N(1)
1172e0c549Jonathan Adams
1182e0c549Jonathan Adamstypedef struct zio_taskq_info {
119ec94d32Adam Leventhal	zti_modes_t zti_mode;
12080eb36fGeorge Wilson	uint_t zti_value;
121ec94d32Adam Leventhal	uint_t zti_count;
1222e0c549Jonathan Adams} zio_taskq_info_t;
1232e0c549Jonathan Adams
1242e0c549Jonathan Adamsstatic const char *const zio_taskq_types[ZIO_TASKQ_TYPES] = {
12535a5a35Jonathan Adams	"issue", "issue_high", "intr", "intr_high"
1262e0c549Jonathan Adams};
1272e0c549Jonathan Adams
12880eb36fGeorge Wilson/*
129ec94d32Adam Leventhal * This table defines the taskq settings for each ZFS I/O type. When
130ec94d32Adam Leventhal * initializing a pool, we use this table to create an appropriately sized
131ec94d32Adam Leventhal * taskq. Some operations are low volume and therefore have a small, static
132ec94d32Adam Leventhal * number of threads assigned to their taskqs using the ZTI_N(#) or ZTI_ONE
133ec94d32Adam Leventhal * macros. Other operations process a large amount of data; the ZTI_BATCH
134ec94d32Adam Leventhal * macro causes us to create a taskq oriented for throughput. Some operations
135084fd14Brian Behlendorf * are so high frequency and short-lived that the taskq itself can become a
136ec94d32Adam Leventhal * point of lock contention. The ZTI_P(#, #) macro indicates that we need an
137ec94d32Adam Leventhal * additional degree of parallelism specified by the number of threads per-
138ec94d32Adam Leventhal * taskq and the number of taskqs; when dispatching an event in this case, the
139ec94d32Adam Leventhal * particular taskq is chosen at random.
140ec94d32Adam Leventhal *
141ec94d32Adam Leventhal * The different taskq priorities are to handle the different contexts (issue
142ec94d32Adam Leventhal * and interrupt) and then to reserve threads for ZIO_PRIORITY_NOW I/Os that
143ec94d32Adam Leventhal * need to be handled with minimum delay.
14480eb36fGeorge Wilson */
14580eb36fGeorge Wilsonconst zio_taskq_info_t zio_taskqs[ZIO_TYPES][ZIO_TASKQ_TYPES] = {
14680eb36fGeorge Wilson	/* ISSUE	ISSUE_HIGH	INTR		INTR_HIGH */
147ec94d32Adam Leventhal	{ ZTI_ONE,	ZTI_NULL,	ZTI_ONE,	ZTI_NULL }, /* NULL */
1481b497abAdam H. Leventhal	{ ZTI_N(8),	ZTI_NULL,	ZTI_P(12, 8),	ZTI_NULL }, /* READ */
149ec94d32Adam Leventhal	{ ZTI_BATCH,	ZTI_N(5),	ZTI_N(8),	ZTI_N(5) }, /* WRITE */
150ec94d32Adam Leventhal	{ ZTI_P(12, 8),	ZTI_NULL,	ZTI_ONE,	ZTI_NULL }, /* FREE */
151ec94d32Adam Leventhal	{ ZTI_ONE,	ZTI_NULL,	ZTI_ONE,	ZTI_NULL }, /* CLAIM */
152ec94d32Adam Leventhal	{ ZTI_ONE,	ZTI_NULL,	ZTI_ONE,	ZTI_NULL }, /* IOCTL */
153084fd14Brian Behlendorf	{ ZTI_N(4),	ZTI_NULL,	ZTI_ONE,	ZTI_NULL }, /* TRIM */
1542e0c549Jonathan Adams};
1552e0c549Jonathan Adams
1563b2aab1Matthew Ahrensstatic void spa_sync_version(void *arg, dmu_tx_t *tx);
1573b2aab1Matthew Ahrensstatic void spa_sync_props(void *arg, dmu_tx_t *tx);
15889a89ebllingstatic boolean_t spa_has_active_shared_spare(spa_t *spa);
1598671400Serapheim Dimitropoulosstatic int spa_load_impl(spa_t *spa, spa_import_type_t type, char **ereport);
160cb04b87Mark J Musantestatic void spa_vdev_resilver_done(spa_t *spa);
16269962b5Matthew Ahrensuint_t		zio_taskq_batch_pct = 75;	/* 1 thread per cpu in pset */
16335a5a35Jonathan Adamsid_t		zio_taskq_psrset_bind = PS_NONE;
16435a5a35Jonathan Adamsboolean_t	zio_taskq_sysdc = B_TRUE;	/* use SDC scheduling class */
16535a5a35Jonathan Adamsuint_t		zio_taskq_basedc = 80;		/* base duty cycle */
16635a5a35Jonathan Adams
16735a5a35Jonathan Adamsboolean_t	spa_create_process = B_TRUE;	/* no process ==> no sysdc */
16801f55e4George Wilsonextern int	zfs_sync_pass_deferred_free;
16935a5a35Jonathan Adams
17035a5a35Jonathan Adams/*
171e144c4ePavel Zakharov * Report any spa_load_verify errors found, but do not fail spa_load.
172e144c4ePavel Zakharov * This is used by zdb to analyze non-idle pools.
173e144c4ePavel Zakharov */
174e144c4ePavel Zakharovboolean_t	spa_load_verify_dryrun = B_FALSE;
175e144c4ePavel Zakharov
176e144c4ePavel Zakharov/*
17735a5a35Jonathan Adams * This (illegal) pool name is used when temporarily importing a spa_t in order
17835a5a35Jonathan Adams * to get the vdev stats associated with the imported devices.
17935a5a35Jonathan Adams */
18035a5a35Jonathan Adams#define	TRYIMPORT_NAME	"$import"
18135a5a35Jonathan Adams
1836f79381Pavel Zakharov * For debugging purposes: print out vdev tree during pool import.
1846f79381Pavel Zakharov */
1856f79381Pavel Zakharovboolean_t	spa_load_print_vdev_tree = B_FALSE;
1866f79381Pavel Zakharov
1876f79381Pavel Zakharov/*
1886f79381Pavel Zakharov * A non-zero value for zfs_max_missing_tvds means that we allow importing
1896f79381Pavel Zakharov * pools with missing top-level vdevs. This is strictly intended for advanced
1906f79381Pavel Zakharov * pool recovery cases since missing data is almost inevitable. Pools with
1916f79381Pavel Zakharov * missing devices can only be imported read-only for safety reasons, and their
1926f79381Pavel Zakharov * fail-mode will be automatically set to "continue".
1936f79381Pavel Zakharov *
1946f79381Pavel Zakharov * With 1 missing vdev we should be able to import the pool and mount all
1956f79381Pavel Zakharov * datasets. User data that was not modified after the missing device has been
1966f79381Pavel Zakharov * added should be recoverable. This means that snapshots created prior to the
1976f79381Pavel Zakharov * addition of that device should be completely intact.
1986f79381Pavel Zakharov *
1996f79381Pavel Zakharov * With 2 missing vdevs, some datasets may fail to mount since there are
2006f79381Pavel Zakharov * dataset statistics that are stored as regular metadata. Some data might be
2016f79381Pavel Zakharov * recoverable if those vdevs were added recently.
2026f79381Pavel Zakharov *
2036f79381Pavel Zakharov * With 3 or more missing vdevs, the pool is severely damaged and MOS entries
2046f79381Pavel Zakharov * may be missing entirely. Chances of data recovery are very low. Note that
2056f79381Pavel Zakharov * there are also risks of performing an inadvertent rewind as we might be
2066f79381Pavel Zakharov * missing all the vdevs with the latest uberblocks.
2076f79381Pavel Zakharov */
2086f79381Pavel Zakharovuint64_t	zfs_max_missing_tvds = 0;
2096f79381Pavel Zakharov
2106f79381Pavel Zakharov/*
2116f79381Pavel Zakharov * The parameters below are similar to zfs_max_missing_tvds but are only
2126f79381Pavel Zakharov * intended for a preliminary open of the pool with an untrusted config which
2136f79381Pavel Zakharov * might be incomplete or out-dated.
2146f79381Pavel Zakharov *
2156f79381Pavel Zakharov * We are more tolerant for pools opened from a cachefile since we could have
2166f79381Pavel Zakharov * an out-dated cachefile where a device removal was not registered.
2176f79381Pavel Zakharov * We could have set the limit arbitrarily high but in the case where devices
2186f79381Pavel Zakharov * are really missing we would want to return the proper error codes; we chose
2196f79381Pavel Zakharov * SPA_DVAS_PER_BP - 1 so that some copies of the MOS would still be available
2206f79381Pavel Zakharov * and we get a chance to retrieve the trusted config.
2216f79381Pavel Zakharov */
2226f79381Pavel Zakharovuint64_t	zfs_max_missing_tvds_cachefile = SPA_DVAS_PER_BP - 1;
2238671400Serapheim Dimitropoulos
2246f79381Pavel Zakharov/*
2256f79381Pavel Zakharov * In the case where config was assembled by scanning device paths (/dev/dsks
2266f79381Pavel Zakharov * by default) we are less tolerant since all the existing devices should have
2276f79381Pavel Zakharov * been detected and we want spa_load to return the right error codes.
2286f79381Pavel Zakharov */
2296f79381Pavel Zakharovuint64_t	zfs_max_missing_tvds_scan = 0;
2306f79381Pavel Zakharov
2316f79381Pavel Zakharov/*
2328671400Serapheim Dimitropoulos * Debugging aid that pauses spa_sync() towards the end.
2338671400Serapheim Dimitropoulos */
2348671400Serapheim Dimitropoulosboolean_t	zfs_pause_spa_sync = B_FALSE;
2358671400Serapheim Dimitropoulos
2368671400Serapheim Dimitropoulos/*
237990b485lling * ==========================================================================
238990b485lling * SPA properties routines
239990b485lling * ==========================================================================
240990b485lling */
243990b485lling * Add a (source=src, propname=propval) list to an nvlist.
244990b485lling */
2459d82f4fllingstatic void
246990b485llingspa_prop_add_list(nvlist_t *nvl, zpool_prop_t prop, char *strval,
247990b485lling    uint64_t intval, zprop_source_t src)
249990b485lling	const char *propname = zpool_prop_to_name(prop);
250990b485lling	nvlist_t *propval;
2529d82f4flling	VERIFY(nvlist_alloc(&propval, NV_UNIQUE_NAME, KM_SLEEP) == 0);
2539d82f4flling	VERIFY(nvlist_add_uint64(propval, ZPROP_SOURCE, src) == 0);
2559d82f4flling	if (strval != NULL)
2569d82f4flling		VERIFY(nvlist_add_string(propval, ZPROP_VALUE, strval) == 0);
2579d82f4flling	else
2589d82f4flling		VERIFY(nvlist_add_uint64(propval, ZPROP_VALUE, intval) == 0);
2609d82f4flling	VERIFY(nvlist_add_nvlist(nvl, propname, propval) == 0);
261990b485lling	nvlist_free(propval);
265990b485lling * Get property values from the spa configuration.
266990b485lling */
2679d82f4fllingstatic void
268990b485llingspa_prop_get_config(spa_t *spa, nvlist_t **nvp)
2704263d13George Wilson	vdev_t *rvd = spa->spa_root_vdev;
271ad135b5Christopher Siden	dsl_pool_t *pool = spa->spa_dsl_pool;
2722e4c998George Wilson	uint64_t size, alloc, cap, version;
273990b485lling	zprop_source_t src = ZPROP_SRC_NONE;
274c5904d1eschrock	spa_config_dirent_t *dp;
2752e4c998George Wilson	metaslab_class_t *mc = spa_normal_class(spa);
277e14bb32Jeff Bonwick	ASSERT(MUTEX_HELD(&spa->spa_props_lock));
278e14bb32Jeff Bonwick
2794263d13George Wilson	if (rvd != NULL) {
280663207aDon Brady		alloc = metaslab_class_get_alloc(mc);
281663207aDon Brady		alloc += metaslab_class_get_alloc(spa_special_class(spa));
282663207aDon Brady		alloc += metaslab_class_get_alloc(spa_dedup_class(spa));
283663207aDon Brady
284663207aDon Brady		size = metaslab_class_get_space(mc);
285663207aDon Brady		size += metaslab_class_get_space(spa_special_class(spa));
286663207aDon Brady		size += metaslab_class_get_space(spa_dedup_class(spa));
287663207aDon Brady
288379c004Eric Schrock		spa_prop_add_list(*nvp, ZPOOL_PROP_NAME, spa_name(spa), 0, src);
289379c004Eric Schrock		spa_prop_add_list(*nvp, ZPOOL_PROP_SIZE, NULL, size, src);
290485bbbfGeorge Wilson		spa_prop_add_list(*nvp, ZPOOL_PROP_ALLOCATED, NULL, alloc, src);
291485bbbfGeorge Wilson		spa_prop_add_list(*nvp, ZPOOL_PROP_FREE, NULL,
292485bbbfGeorge Wilson		    size - alloc, src);
2938671400Serapheim Dimitropoulos		spa_prop_add_list(*nvp, ZPOOL_PROP_CHECKPOINT, NULL,
2948671400Serapheim Dimitropoulos		    spa->spa_checkpoint_info.sci_dspace, src);
2954263d13George Wilson
2962e4c998George Wilson		spa_prop_add_list(*nvp, ZPOOL_PROP_FRAGMENTATION, NULL,
2972e4c998George Wilson		    metaslab_class_fragmentation(mc), src);
2982e4c998George Wilson		spa_prop_add_list(*nvp, ZPOOL_PROP_EXPANDSZ, NULL,
2992e4c998George Wilson		    metaslab_class_expandable_space(mc), src);
300f9af39bGeorge Wilson		spa_prop_add_list(*nvp, ZPOOL_PROP_READONLY, NULL,
301f9af39bGeorge Wilson		    (spa_mode(spa) == FREAD), src);
302379c004Eric Schrock
303485bbbfGeorge Wilson		cap = (size == 0) ? 0 : (alloc * 100 / size);
304379c004Eric Schrock		spa_prop_add_list(*nvp, ZPOOL_PROP_CAPACITY, NULL, cap, src);
305379c004Eric Schrock
306b24ab67Jeff Bonwick		spa_prop_add_list(*nvp, ZPOOL_PROP_DEDUPRATIO, NULL,
307b24ab67Jeff Bonwick		    ddt_get_pool_dedup_ratio(spa), src);
308b24ab67Jeff Bonwick
309379c004Eric Schrock		spa_prop_add_list(*nvp, ZPOOL_PROP_HEALTH, NULL,
3104263d13George Wilson		    rvd->vdev_state, src);
311379c004Eric Schrock
312379c004Eric Schrock		version = spa_version(spa);
313379c004Eric Schrock		if (version == zpool_prop_default_numeric(ZPOOL_PROP_VERSION))
314379c004Eric Schrock			src = ZPROP_SRC_DEFAULT;
315379c004Eric Schrock		else
316379c004Eric Schrock			src = ZPROP_SRC_LOCAL;
317379c004Eric Schrock		spa_prop_add_list(*nvp, ZPOOL_PROP_VERSION, NULL, version, src);
318379c004Eric Schrock	}
320ad135b5Christopher Siden	if (pool != NULL) {
321ad135b5Christopher Siden		/*
322ad135b5Christopher Siden		 * The $FREE directory was introduced in SPA_VERSION_DEADLISTS,
323ad135b5Christopher Siden		 * when opening pools before this version freedir will be NULL.
324ad135b5Christopher Siden		 */
3257fd05acMatthew Ahrens		if (pool->dp_free_dir != NULL) {
326ad135b5Christopher Siden			spa_prop_add_list(*nvp, ZPOOL_PROP_FREEING, NULL,
327c137962Justin T. Gibbs			    dsl_dir_phys(pool->dp_free_dir)->dd_used_bytes,
328c137962Justin T. Gibbs			    src);
329ad135b5Christopher Siden		} else {
330ad135b5Christopher Siden			spa_prop_add_list(*nvp, ZPOOL_PROP_FREEING,
331ad135b5Christopher Siden			    NULL, 0, src);
332ad135b5Christopher Siden		}
3337fd05acMatthew Ahrens
3347fd05acMatthew Ahrens		if (pool->dp_leak_dir != NULL) {
3357fd05acMatthew Ahrens			spa_prop_add_list(*nvp, ZPOOL_PROP_LEAKED, NULL,
336c137962Justin T. Gibbs			    dsl_dir_phys(pool->dp_leak_dir)->dd_used_bytes,
337c137962Justin T. Gibbs			    src);
3387fd05acMatthew Ahrens		} else {
3397fd05acMatthew Ahrens			spa_prop_add_list(*nvp, ZPOOL_PROP_LEAKED,
3407fd05acMatthew Ahrens			    NULL, 0, src);
3417fd05acMatthew Ahrens		}
342ad135b5Christopher Siden	}
343ad135b5Christopher Siden
3449d82f4flling	spa_prop_add_list(*nvp, ZPOOL_PROP_GUID, NULL, spa_guid(spa), src);
3468704186Dan McDonald	if (spa->spa_comment != NULL) {
3478704186Dan McDonald		spa_prop_add_list(*nvp, ZPOOL_PROP_COMMENT, spa->spa_comment,
3488704186Dan McDonald		    0, ZPROP_SRC_LOCAL);
3498704186Dan McDonald	}
3508704186Dan McDonald
3519d82f4flling	if (spa->spa_root != NULL)
3529d82f4flling		spa_prop_add_list(*nvp, ZPOOL_PROP_ALTROOT, spa->spa_root,
3539d82f4flling		    0, ZPROP_SRC_LOCAL);
355b515258Matthew Ahrens	if (spa_feature_is_enabled(spa, SPA_FEATURE_LARGE_BLOCKS)) {
356b515258Matthew Ahrens		spa_prop_add_list(*nvp, ZPOOL_PROP_MAXBLOCKSIZE, NULL,
357b515258Matthew Ahrens		    MIN(zfs_max_recordsize, SPA_MAXBLOCKSIZE), ZPROP_SRC_NONE);
358b515258Matthew Ahrens	} else {
359b515258Matthew Ahrens		spa_prop_add_list(*nvp, ZPOOL_PROP_MAXBLOCKSIZE, NULL,
360b515258Matthew Ahrens		    SPA_OLD_MAXBLOCKSIZE, ZPROP_SRC_NONE);
361b515258Matthew Ahrens	}
362b515258Matthew Ahrens
36354811daToomas Soome	if (spa_feature_is_enabled(spa, SPA_FEATURE_LARGE_DNODE)) {
36454811daToomas Soome		spa_prop_add_list(*nvp, ZPOOL_PROP_MAXDNODESIZE, NULL,
36554811daToomas Soome		    DNODE_MAX_SIZE, ZPROP_SRC_NONE);
36654811daToomas Soome	} else {
36754811daToomas Soome		spa_prop_add_list(*nvp, ZPOOL_PROP_MAXDNODESIZE, NULL,
36854811daToomas Soome		    DNODE_MIN_SIZE, ZPROP_SRC_NONE);
36954811daToomas Soome	}
37054811daToomas Soome
371c5904d1eschrock	if ((dp = list_head(&spa->spa_config_list)) != NULL) {
372c5904d1eschrock		if (dp->scd_path == NULL) {
3739d82f4flling			spa_prop_add_list(*nvp, ZPOOL_PROP_CACHEFILE,
374c5904d1eschrock			    "none", 0, ZPROP_SRC_LOCAL);
375c5904d1eschrock		} else if (strcmp(dp->scd_path, spa_config_path) != 0) {
3769d82f4flling			spa_prop_add_list(*nvp, ZPOOL_PROP_CACHEFILE,
377c5904d1eschrock			    dp->scd_path, 0, ZPROP_SRC_LOCAL);
3782f8aaabeschrock		}
3792f8aaabeschrock	}
383990b485lling * Get zpool property values.
384990b485lling */
386990b485llingspa_prop_get(spa_t *spa, nvlist_t **nvp)
388b24ab67Jeff Bonwick	objset_t *mos = spa->spa_meta_objset;
389990b485lling	zap_cursor_t zc;
390990b485lling	zap_attribute_t za;
391990b485lling	int err;
3939d82f4flling	VERIFY(nvlist_alloc(nvp, NV_UNIQUE_NAME, KM_SLEEP) == 0);
395e14bb32Jeff Bonwick	mutex_enter(&spa->spa_props_lock);
396e14bb32Jeff Bonwick
397990b485lling	/*
398990b485lling	 * Get properties from the spa config.
399990b485lling	 */
4009d82f4flling	spa_prop_get_config(spa, nvp);
402990b485lling	/* If no pool property object, no more prop to get. */
403afee20eGeorge Wilson	if (mos == NULL || spa->spa_pool_props_object == 0) {
404990b485lling		mutex_exit(&spa->spa_props_lock);
405990b485lling		return (0);
406990b485lling	}
408990b485lling	/*
409990b485lling	 * Get properties from the MOS pool property object.
410990b485lling	 */
411990b485lling	for (zap_cursor_init(&zc, mos, spa->spa_pool_props_object);
412990b485lling	    (err = zap_cursor_retrieve(&zc, &za)) == 0;
413990b485lling	    zap_cursor_advance(&zc)) {
414990b485lling		uint64_t intval = 0;
415990b485lling		char *strval = NULL;
416990b485lling		zprop_source_t src = ZPROP_SRC_DEFAULT;
417990b485lling		zpool_prop_t prop;
4194ae5f5fAlan Somers		if ((prop = zpool_name_to_prop(za.za_name)) == ZPOOL_PROP_INVAL)
420990b485lling			continue;
422990b485lling		switch (za.za_integer_length) {
423990b485lling		case 8:
424990b485lling			/* integer property */
425990b485lling			if (za.za_first_integer !=
426990b485lling			    zpool_prop_default_numeric(prop))
427990b485lling				src = ZPROP_SRC_LOCAL;
429990b485lling			if (prop == ZPOOL_PROP_BOOTFS) {
430990b485lling				dsl_pool_t *dp;
431990b485lling				dsl_dataset_t *ds = NULL;
433990b485lling				dp = spa_get_dsl(spa);
4343b2aab1Matthew Ahrens				dsl_pool_config_enter(dp, FTAG);
435094e47eGeorge Wilson				err = dsl_dataset_hold_obj(dp,
436094e47eGeorge Wilson				    za.za_first_integer, FTAG, &ds);
437094e47eGeorge Wilson				if (err != 0) {
4383b2aab1Matthew Ahrens					dsl_pool_config_exit(dp, FTAG);
439990b485lling					break;
440990b485lling				}
4429adfa60Matthew Ahrens				strval = kmem_alloc(ZFS_MAX_DATASET_NAME_LEN,
443990b485lling				    KM_SLEEP);
444990b485lling				dsl_dataset_name(ds, strval);
445745cd3cmaybee				dsl_dataset_rele(ds, FTAG);
4463b2aab1Matthew Ahrens				dsl_pool_config_exit(dp, FTAG);
447990b485lling			} else {
448990b485lling				strval = NULL;
449990b485lling				intval = za.za_first_integer;
450990b485lling			}
4529d82f4flling			spa_prop_add_list(*nvp, prop, strval, intval, src);
454990b485lling			if (strval != NULL)
4559adfa60Matthew Ahrens				kmem_free(strval, ZFS_MAX_DATASET_NAME_LEN);
457990b485lling			break;
459990b485lling		case 1:
460990b485lling			/* string property */
461990b485lling			strval = kmem_alloc(za.za_num_integers, KM_SLEEP);
462990b485lling			err = zap_lookup(mos, spa->spa_pool_props_object,
463990b485lling			    za.za_name, 1, za.za_num_integers, strval);
464990b485lling			if (err) {
465990b485lling				kmem_free(strval, za.za_num_integers);
466990b485lling				break;
467990b485lling			}
4689d82f4flling			spa_prop_add_list(*nvp, prop, strval, 0, src);
469990b485lling			kmem_free(strval, za.za_num_integers);
470990b485lling			break;
472990b485lling		default:
473990b485lling			break;
474990b485lling		}
475990b485lling	}
476990b485lling	zap_cursor_fini(&zc);
477990b485lling	mutex_exit(&spa->spa_props_lock);
479990b485lling	if (err && err != ENOENT) {
480990b485lling		nvlist_free(*nvp);
4819d82f4flling		*nvp = NULL;
482990b485lling		return (err);
483990b485lling	}
485990b485lling	return (0);
489990b485lling * Validate the given pool properties nvlist and modify the list
490990b485lling * for the property values to be set.
491990b485lling */
492990b485llingstatic int
493990b485llingspa_prop_validate(spa_t *spa, nvlist_t *props)
495990b485lling	nvpair_t *elem;
496990b485lling	int error = 0, reset_bootfs = 0;
497d5285caGeorge Wilson	uint64_t objnum = 0;
498ad135b5Christopher Siden	boolean_t has_feature = B_FALSE;
500990b485lling	elem = NULL;
501990b485lling	while ((elem = nvlist_next_nvpair(props, elem)) != NULL) {
502990b485lling		uint64_t intval;
503ad135b5Christopher Siden		char *strval, *slash, *check, *fname;
504ad135b5Christopher Siden		const char *propname = nvpair_name(elem);
505ad135b5Christopher Siden		zpool_prop_t prop = zpool_name_to_prop(propname);
506ad135b5Christopher Siden
507ad135b5Christopher Siden		switch (prop) {
5084ae5f5fAlan Somers		case ZPOOL_PROP_INVAL:
509ad135b5Christopher Siden			if (!zpool_prop_feature(propname)) {
510be6fd75Matthew Ahrens				error = SET_ERROR(EINVAL);
511ad135b5Christopher Siden				break;
512ad135b5Christopher Siden			}
514ad135b5Christopher Siden			/*
515ad135b5Christopher Siden			 * Sanitize the input.
516ad135b5Christopher Siden			 */
517ad135b5Christopher Siden			if (nvpair_type(elem) != DATA_TYPE_UINT64) {
518be6fd75Matthew Ahrens				error = SET_ERROR(EINVAL);
519ad135b5Christopher Siden				break;
520ad135b5Christopher Siden			}
522ad135b5Christopher Siden			if (nvpair_value_uint64(elem, &intval) != 0) {
523be6fd75Matthew Ahrens				error = SET_ERROR(EINVAL);
524ad135b5Christopher Siden				break;
525ad135b5Christopher Siden			}
526ad135b5Christopher Siden
527ad135b5Christopher Siden			if (intval != 0) {
528be6fd75Matthew Ahrens				error = SET_ERROR(EINVAL);
529ad135b5Christopher Siden				break;
530ad135b5Christopher Siden			}
531ad135b5Christopher Siden
532ad135b5Christopher Siden			fname = strchr(propname, '@') + 1;
533ad135b5Christopher Siden			if (zfeature_lookup_name(fname, NULL) != 0) {
534be6fd75Matthew Ahrens				error = SET_ERROR(EINVAL);
535ad135b5Christopher Siden				break;
536ad135b5Christopher Siden			}
537ad135b5Christopher Siden
538ad135b5Christopher Siden			has_feature = B_TRUE;
539ad135b5Christopher Siden			break;
541990b485lling		case ZPOOL_PROP_VERSION:
542990b485lling			error = nvpair_value_uint64(elem, &intval);
543990b485lling			if (!error &&
544ad135b5Christopher Siden			    (intval < spa_version(spa) ||
545ad135b5Christopher Siden			    intval > SPA_VERSION_BEFORE_FEATURES ||
546ad135b5Christopher Siden			    has_feature))
547be6fd75Matthew Ahrens				error = SET_ERROR(EINVAL);
548990b485lling			break;
550990b485lling		case ZPOOL_PROP_DELEGATION:
551990b485lling		case ZPOOL_PROP_AUTOREPLACE:
552d5b5bb2Rich Morris		case ZPOOL_PROP_LISTSNAPS:
553573ca77George Wilson		case ZPOOL_PROP_AUTOEXPAND:
554084fd14Brian Behlendorf		case ZPOOL_PROP_AUTOTRIM:
555990b485lling			error = nvpair_value_uint64(elem, &intval);
556990b485lling			if (!error && intval > 1)
557be6fd75Matthew Ahrens				error = SET_ERROR(EINVAL);
558990b485lling			break;
560e0f1c0aOlaf Faaland		case ZPOOL_PROP_MULTIHOST:
561e0f1c0aOlaf Faaland			error = nvpair_value_uint64(elem, &intval);
562e0f1c0aOlaf Faaland			if (!error && intval > 1)
563e0f1c0aOlaf Faaland				error = SET_ERROR(EINVAL);
564e0f1c0aOlaf Faaland
565e0f1c0aOlaf Faaland			if (!error && !spa_get_hostid())
566e0f1c0aOlaf Faaland				error = SET_ERROR(ENOTSUP);
567e0f1c0aOlaf Faaland
568e0f1c0aOlaf Faaland			break;
569e0f1c0aOlaf Faaland
570990b485lling		case ZPOOL_PROP_BOOTFS:
57125f89eeJeff Bonwick			/*
57225f89eeJeff Bonwick			 * If the pool version is less than SPA_VERSION_BOOTFS,
57325f89eeJeff Bonwick			 * or the pool is still being created (version == 0),
57425f89eeJeff Bonwick			 * the bootfs property cannot be set.
57525f89eeJeff Bonwick			 */
576990b485lling			if (spa_version(spa) < SPA_VERSION_BOOTFS) {
577be6fd75Matthew Ahrens				error = SET_ERROR(ENOTSUP);
578990b485lling				break;
579990b485lling			}
581990b485lling			/*
58215e6edfgw			 * Make sure the vdev config is bootable
583990b485lling			 */
58415e6edfgw			if (!vdev_is_bootable(spa->spa_root_vdev)) {
585be6fd75Matthew Ahrens				error = SET_ERROR(ENOTSUP);
586990b485lling				break;
587990b485lling			}
589990b485lling			reset_bootfs = 1;
591990b485lling			error = nvpair_value_string(elem, &strval);
593990b485lling			if (!error) {
594ad135b5Christopher Siden				objset_t *os;
595b515258Matthew Ahrens				uint64_t propval;
597990b485lling				if (strval == NULL || strval[0] == '\0') {
598990b485lling					objnum = zpool_prop_default_numeric(
599990b485lling					    ZPOOL_PROP_BOOTFS);
600990b485lling					break;
601990b485lling				}
603094e47eGeorge Wilson				error = dmu_objset_hold(strval, FTAG, &os);
604094e47eGeorge Wilson				if (error != 0)
605990b485lling					break;
607b515258Matthew Ahrens				/*
608b515258Matthew Ahrens				 * Must be ZPL, and its property settings
60954811daToomas Soome				 * must be supported.
610b515258Matthew Ahrens				 */
611503ad85Matthew Ahrens
612503ad85Matthew Ahrens				if (dmu_objset_type(os) != DMU_OST_ZFS) {
613be6fd75Matthew Ahrens					error = SET_ERROR(ENOTSUP);
6143b2aab1Matthew Ahrens				} else if ((error =
6153b2aab1Matthew Ahrens				    dsl_prop_get_int_ds(dmu_objset_ds(os),
61615e6edfgw				    zfs_prop_to_name(ZFS_PROP_COMPRESSION),
617b515258Matthew Ahrens				    &propval)) == 0 &&
618b515258Matthew Ahrens				    !BOOTFS_COMPRESS_VALID(propval)) {
619b515258Matthew Ahrens					error = SET_ERROR(ENOTSUP);
62015e6edfgw				} else {
62115e6edfgw					objnum = dmu_objset_id(os);
62215e6edfgw				}
623503ad85Matthew Ahrens				dmu_objset_rele(os, FTAG);
624990b485lling			}
625990b485lling			break;
626e14bb32Jeff Bonwick
6270a4e951gw		case ZPOOL_PROP_FAILUREMODE:
6280a4e951gw			error = nvpair_value_uint64(elem, &intval);
6290a4e951gw			if (!error && (intval < ZIO_FAILURE_MODE_WAIT ||
6300a4e951gw			    intval > ZIO_FAILURE_MODE_PANIC))
631be6fd75Matthew Ahrens				error = SET_ERROR(EINVAL);
6330a4e951gw			/*
6340a4e951gw			 * This is a special case which only occurs when
6350a4e951gw			 * the pool has completely failed. This allows
6360a4e951gw			 * the user to change the in-core failmode property
6370a4e951gw			 * without syncing it out to disk (I/Os might
6380a4e951gw			 * currently be blocked). We do this by returning
6390a4e951gw			 * EIO to the caller (spa_prop_set) to trick it
6400a4e951gw			 * into thinking we encountered a property validation
6410a4e951gw			 * error.
6420a4e951gw			 */
643e14bb32Jeff Bonwick			if (!error && spa_suspended(spa)) {
6440a4e951gw				spa->spa_failmode = intval;
645be6fd75Matthew Ahrens				error = SET_ERROR(EIO);
6460a4e951gw			}
6470a4e951gw			break;
6492f8aaabeschrock		case ZPOOL_PROP_CACHEFILE:
6502f8aaabeschrock			if ((error = nvpair_value_string(elem, &strval)) != 0)
6512f8aaabeschrock				break;
6532f8aaabeschrock			if (strval[0] == '\0')
6542f8aaabeschrock				break;
6562f8aaabeschrock			if (strcmp(strval, "none") == 0)
6572f8aaabeschrock				break;
6592f8aaabeschrock			if (strval[0] != '/') {
660be6fd75Matthew Ahrens				error = SET_ERROR(EINVAL);
6612f8aaabeschrock				break;
6622f8aaabeschrock			}
6642f8aaabeschrock			slash = strrchr(strval, '/');
6652f8aaabeschrock			ASSERT(slash != NULL);
6672f8aaabeschrock			if (slash[1] == '\0' || strcmp(slash, "/.") == 0 ||
6682f8aaabeschrock			    strcmp(slash, "/..") == 0)
669be6fd75Matthew Ahrens				error = SET_ERROR(EINVAL);
6702f8aaabeschrock			break;
671b24ab67Jeff Bonwick
6728704186Dan McDonald		case ZPOOL_PROP_COMMENT:
6738704186Dan McDonald			if ((error = nvpair_value_string(elem, &strval)) != 0)
6748704186Dan McDonald				break;
6758704186Dan McDonald			for (check = strval; *check != '\0'; check++) {
6768704186Dan McDonald				/*
6778704186Dan McDonald				 * The kernel doesn't have an easy isprint()
6788704186Dan McDonald				 * check.  For this kernel check, we merely
6798704186Dan McDonald				 * check ASCII apart from DEL.  Fix this if
6808704186Dan McDonald				 * there is an easy-to-use kernel isprint().
6818704186Dan McDonald				 */
6828704186Dan McDonald				if (*check >= 0x7f) {
683be6fd75Matthew Ahrens					error = SET_ERROR(EINVAL);
6848704186Dan McDonald					break;
6858704186Dan McDonald				}
6868704186Dan McDonald			}
6878704186Dan McDonald			if (strlen(strval) > ZPROP_MAX_COMMENT)
6888704186Dan McDonald				error = E2BIG;
6898704186Dan McDonald			break;
6908704186Dan McDonald
691b24ab67Jeff Bonwick		case ZPOOL_PROP_DEDUPDITTO:
692b24ab67Jeff Bonwick			if (spa_version(spa) < SPA_VERSION_DEDUP)
693be6fd75Matthew Ahrens				error = SET_ERROR(ENOTSUP);
694b24ab67Jeff Bonwick			else
695b24ab67Jeff Bonwick				error = nvpair_value_uint64(elem, &intval);
696b24ab67Jeff Bonwick			if (error == 0 &&
697b24ab67Jeff Bonwick			    intval != 0 && intval < ZIO_DEDUPDITTO_MIN)
698be6fd75Matthew Ahrens				error = SET_ERROR(EINVAL);
699b24ab67Jeff Bonwick			break;
700990b485lling		}
702990b485lling		if (error)
703990b485lling			break;
704990b485lling	}
706990b485lling	if (!error && reset_bootfs) {
707990b485lling		error = nvlist_remove(props,
708990b485lling		    zpool_prop_to_name(ZPOOL_PROP_BOOTFS), DATA_TYPE_STRING);
710990b485lling		if (!error) {
711990b485lling			error = nvlist_add_uint64(props,
712990b485lling			    zpool_prop_to_name(ZPOOL_PROP_BOOTFS), objnum);
713990b485lling		}
714990b485lling	}
716990b485lling	return (error);
719379c004Eric Schrockvoid
720379c004Eric Schrockspa_configfile_set(spa_t *spa, nvlist_t *nvp, boolean_t need_sync)
721379c004Eric Schrock{
722379c004Eric Schrock	char *cachefile;
723379c004Eric Schrock	spa_config_dirent_t *dp;
724379c004Eric Schrock
725379c004Eric Schrock	if (nvlist_lookup_string(nvp, zpool_prop_to_name(ZPOOL_PROP_CACHEFILE),
726379c004Eric Schrock	    &cachefile) != 0)
727379c004Eric Schrock		return;
728379c004Eric Schrock
729379c004Eric Schrock	dp = kmem_alloc(sizeof (spa_config_dirent_t),
730379c004Eric Schrock	    KM_SLEEP);
731379c004Eric Schrock
732379c004Eric Schrock	if (cachefile[0] == '\0')
733379c004Eric Schrock		dp->scd_path = spa_strdup(spa_config_path);
734379c004Eric Schrock	else if (strcmp(cachefile, "none") == 0)
735379c004Eric Schrock		dp->scd_path = NULL;
736379c004Eric Schrock	else
737379c004Eric Schrock		dp->scd_path = spa_strdup(cachefile);
738379c004Eric Schrock
739379c004Eric Schrock	list_insert_head(&spa->spa_config_list, dp);
740379c004Eric Schrock	if (need_sync)
741379c004Eric Schrock		spa_async_request(spa, SPA_ASYNC_CONFIG_UPDATE);
742379c004Eric Schrock}
743379c004Eric Schrock
745990b485llingspa_prop_set(spa_t *spa, nvlist_t *nvp)
747990b485lling	int error;
748ad135b5Christopher Siden	nvpair_t *elem = NULL;
749379c004Eric Schrock	boolean_t need_sync = B_FALSE;
751990b485lling	if ((error = spa_prop_validate(spa, nvp)) != 0)
752990b485lling		return (error);
754379c004Eric Schrock	while ((elem = nvlist_next_nvpair(nvp, elem)) != NULL) {
755ad135b5Christopher Siden		zpool_prop_t prop = zpool_name_to_prop(nvpair_name(elem));
756379c004Eric Schrock
757f9af39bGeorge Wilson		if (prop == ZPOOL_PROP_CACHEFILE ||
758f9af39bGeorge Wilson		    prop == ZPOOL_PROP_ALTROOT ||
759f9af39bGeorge Wilson		    prop == ZPOOL_PROP_READONLY)
760379c004Eric Schrock			continue;
761379c004Eric Schrock
7624ae5f5fAlan Somers		if (prop == ZPOOL_PROP_VERSION || prop == ZPOOL_PROP_INVAL) {
763ad135b5Christopher Siden			uint64_t ver;
764ad135b5Christopher Siden
765ad135b5Christopher Siden			if (prop == ZPOOL_PROP_VERSION) {
766ad135b5Christopher Siden				VERIFY(nvpair_value_uint64(elem, &ver) == 0);
767ad135b5Christopher Siden			} else {
768ad135b5Christopher Siden				ASSERT(zpool_prop_feature(nvpair_name(elem)));
769ad135b5Christopher Siden				ver = SPA_VERSION_FEATURES;
770ad135b5Christopher Siden				need_sync = B_TRUE;
771ad135b5Christopher Siden			}
772ad135b5Christopher Siden
773ad135b5Christopher Siden			/* Save time if the version is already set. */
774ad135b5Christopher Siden			if (ver == spa_version(spa))
775ad135b5Christopher Siden				continue;
776ad135b5Christopher Siden