Re: mdadm: Patch to restrict --size when shrinking unless forced
From: NeilBrown <hidden>
Date: 2017-10-09 01:36:53
On Sun, Oct 08 2017, John Stoffel wrote:
quoted
quoted
quoted
quoted
quoted
"NeilBrown" == NeilBrown [off-list ref] writes:NeilBrown> On Sun, Oct 08 2017, John Stoffel wrote:quoted
quoted
quoted
quoted
quoted
quoted
quoted
"NeilBrown" == NeilBrown [off-list ref] writes:NeilBrown> On Wed, Oct 04 2017, John Stoffel wrote:quoted
quoted
quoted
quoted
Since Eli had such a horrible experience where he shrunk the individual component raid device size, instead of growing the overall raid by adding a device, I came up with this hacky patch to warn you when you are about to shoot yourself in the foot. The idea is it will warn you and exit unless you pass in the --force (or -f) switch when using the command. For example, on a set of loop devices: # cat /proc/mdstat Personalities : [linear] [raid0] [raid1] [raid10] [raid6] [raid5] [raid4] [multipath] [faulty] md99 : active raid6 loop4p1[4] loop3p1[3] loop2p1[2] loop1p1[1] loop0p1[0] 606720 blocks super 1.2 level 6, 512k chunk, algorithm 2 [5/5] [UUUUU] # ./mdadm --grow /dev/md99 --size 128 mdadm: Cannot set device size smaller than current component_size of /dev/md99 array. Use -f to force change. # ./mdadm --grow /dev/md99 --size 128 -f mdadm: component size of /dev/md99 has been set to 0KNeilBrown> I'm not sure I like this. NeilBrown> The reason that mdadm will quietly accept a size change like this is NeilBrown> that it is trivial to revert - just set the same to a big number and all NeilBrown> your data is still there.quoted
quoted
This is wrong, because if you use --grow --size ### with a small enough number, it destroys the MD raid superblock.NeilBrown> If that is true, then it is a kernel bug and should be fixed in the kernel. That's a better solution of course. I'll see if I can figure this out, but my testing will be slower... :-)quoted
quoted
So again, I think the --force option is *critical* here. Or we need to block the size change from going smaller than the superblock size. Here's my test, where I just warn if the size is going to be smaller: # ./mdadm --grow /dev/md99 --size 128 mdadm: setting raid component device size from 202240 to 128 in array /dev/md99, this may need to be reverted if new size is smaller. mdadm: component size of /dev/md99 has been set to 0K # ./mdadm --grow /dev/md99 --size 202240 mdadm: setting raid component device size from 0 to 202240 in array /dev/md99, this may need to be reverted if new size is smaller. mdadm: Cannot set device size in this type of array. # mdadm -E /dev/md99 mdadm: No md superblock detected on /dev/md99. So I think this argues for a much stronger check, and/or the --force option when shrinking. I'll re-spin my patch series into two chunks, one just the message if changing size. The second to require the --force option.NeilBrown> Why don't you like my suggestion that you should need to reduce the NeilBrown> --array-size first? Ok, so assuming at RAID6 with 4 x 100mb loop devices: mdadm --create /dev/md99 --name md99 --level 6 -n 4 /dev/loop?p1 Now we have a 200mb visible size array, using 100mb on each disk. I want to shrink them by 50mb each: mdadm --grow md## --array-size 100m So now the array should be just using the first 50mb on each loop device. mdadm --grow md## --size 50m Then we've shrunk each loop device to 50m. So since the docs say that the --array-size does't change anything, the only way to make a --array-size change permanent is using --size ## correct?
Yes.
But doesn't mdadm --grow md99 -size 0 imply that we *exapand* the array component sizes, along with the --array_size of the array?
Does it? "mdadm --grow .. --size max" certainly means that. Maybe "--size 0" has the same effect, but in then "0" is a special case.
When does that change become permanent?
As you say, when you set "--size".
This is the part of mdadm management that gets wonky in my mind. We
make it too difficult for the SysAdmin to know what has to happen
here.
And looking at the mdadm man page:
-z, --size= Amount (in Kibibytes) of space to use from each
drive in RAID levels 1/4/5/6. This must be a multiple of the chunk
size, and must leave about 128Kb of space at the end of the drive for
the RAID superblock. If this is not specified (as it normally is not)
the smallest drive (or partition) sets the size, though if there is a
vari‐ ance among the drives of greater than 1%, a warning is issued.
This is the possible error we're seeing, since setting a --size of 128
is *way* too small. We need at least 128k * num_devices.Why is this "*way* too small"?? It is too small precisely if there is a meaningful chunk size, and if the chunk size is > 128k. num_devices has nothing to do with this. Where it says "leave 128K as the end of the drive" it means that the given size should be at least 128K less than that actual size of the partition/device.
So now I know what to check in the kernel... The _about_ is the worrying phrase, we should be able to be more precise here, and show how to figure this number from the mdadm -E or -D commands.
The 128K is for 0.90 metadata. The precise number here is "size of device/partition, rounded down to a multiple of 64K, with 64K then subtracted". For 1.0, the hard number if like that but with 4K, except that it is nice to leave extra space for bitmaps etc. If you ask mdadm to make the --size larger than it can support - i.e. large enough that there would be no space for the metadata - mdadm will not let you. So I don't think there is a need to spell out a precise number. Anything that works should be acceptable. NeilBrown
Thanks again for all your work on this Neil, you've been amazing, truly! Thanks, John -- To unsubscribe from this list: send the line "unsubscribe linux-raid" in the body of a message to majordomo@vger.kernel.org More majordomo info at http://vger.kernel.org/majordomo-info.html
Attachments
- signature.asc [application/pgp-signature] 832 bytes