Files
msm-5.15/tools/testing/selftests/filesystems/fuse/test_bpf.c
Daniel Rosenberg f5f4199c10 ANDROID: fuse-bpf v1.1
These patches extend FUSE to be able to act as a stacked filesystem. This
allows pure passthrough, where the fuse file system simply reflects the lower
filesystem, and also allows optional pre and post filtering in BPF and/or the
userspace daemon as needed. This can dramatically reduce or even eliminate
transitions to and from userspace.

See https://lwn.net/Articles/915717/

Note that this patch set has been extensively tested in
common-android13-5.10

This is a squash of these changes cherry-picked from common-android13-5.10

ANDROID: fuse-bpf: Make compile and pass test
ANDROID: fuse-bpf: set error_in to ENOENT in negative lookup
ANDROID: fuse-bpf: Add ability to run ranges of tests to fuse_test
ANDROID: fuse-bpf: Add test for lookup postfilter
ANDROID: fuse-bpf: readddir postfilter fixes
ANDROID: fix kernelci error in fs/fuse/dir.c
ANDROID: fuse-bpf: Fix RCU/reference issue
ANDROID: fuse-bpf: Always call revalidate for backing
ANDROID: fuse-bpf: Adjust backing handle funcs
ANDROID: fuse-bpf: Fix revalidate error path and backing handling
ANDROID: fuse-bpf: Fix use of get_fuse_inode
ANDROID: fuse: Don't use readdirplus w/ nodeid 0
ANDROID: fuse-bpf: Introduce readdirplus test case for fuse bpf
ANDROID: fuse-bpf: Make sure force_again flag is false by default
ANDROID: fuse-bpf: Make inodes with backing_fd reachable for regular FUSE fuse_iget
Revert "ANDROID: fuse-bpf: use target instead of parent inode to execute backing revalidate"
ANDROID: fuse-bpf: use target instead of parent inode to execute backing revalidate
ANDROID: fuse-bpf: Fix misuse of args.out_args
ANDROID: fuse-bpf: Fix non-fusebpf build
ANDROID: fuse-bpf: Use fuse_bpf_args in uapi
ANDROID: fuse-bpf: Fix read_iter
ANDROID: fuse-bpf: Use cache and refcount
ANDROID: fuse-bpf: Rename iocb_fuse to iocb_orig
ANDROID: fuse-bpf: Fix fixattr in rename
ANDROID: fuse-bpf: Fix readdir
ANDROID: fuse-bpf: Fix lseek return value for offset 0
ANDROID: fuse-bpf: fix read_iter and write_iter
ANDROID: fuse-bpf: fix special devices
ANDROID: fuse-bpf: support FUSE_LSEEK
ANDROID: fuse-bpf: Add support for FUSE_COPY_FILE_RANGE
ANDROID: fuse-bpf: Report errors to finalize
ANDROID: fuse-bpf: Avoid reusing uint64_t for file
ANDROID: fuse-bpf: Fix CONFIG_FUSE_BPF typo in FUSE_FSYNCDIR
ANDROID: fuse-bpf: Move fd operations to be synchronous
ANDROID: fuse-bpf: Invalidate if lower is unhashed
ANDROID: fuse-bpf: Move bpf earlier in fuse_permission
ANDROID: fuse-bpf: Update attributes on file write
ANDROID: fuse: allow mounting with no userspace daemon
ANDROID: fuse-bpf: Support FUSE_STATFS
ANDROID: fuse-bpf: Fix filldir
ANDROID: fuse-bpf: fix fuse_create_open_finalize
ANDROID: fuse: add bpf support for removexattr
ANDROID: fuse-bpf: Fix truncate
ANDROID: fuse-bpf: Support inotify
ANDROID: fuse-bpf: Make compile with CONFIG_FUSE but no CONFIG_FUSE_BPF
ANDROID: fuse-bpf: Fix perms on readdir
ANDROID: fuse: Fix umasking in backing
ANDROID: fs/fuse: Backing move returns EXDEV if TO not backed
ANDROID: bpf-fuse: Fix Setattr
ANDROID: fuse-bpf: Check if mkdir dentry setup
ANDROID: fuse-bpf: Close backing fds in fuse_dentry_revalidate
ANDROID: fuse-bpf: Close backing-fd on both paths
ANDROID: fuse-bpf: Partial fix for mmap'd files
ANDROID: fuse-bpf: Restore a missing const
ANDROID: Add fuse-bpf self tests
ANDROID: Add FUSE_BPF to gki_defconfig
ANDROID: fuse-bpf v1
ANDROID: fuse: Move functions in preparation for fuse-bpf

Bug: 202785178
Test: test_fuse passes on linux.
      On cuttlefish,
      atest android.scopedstorage.cts.host.ScopedStorageHostTest
      passes with fuse-bpf enabled and disabled
Change-Id: Idb099c281f9b39ff2c46fa3ebc63e508758416ee
Signed-off-by: Paul Lawrence <paullawrence@google.com>
Signed-off-by: Daniel Rosenberg <drosen@google.com>
2023-02-17 22:10:50 +00:00

508 lines
12 KiB
C

// SPDX-License-Identifier: GPL-2.0 OR BSD-3-Clause
// Copyright (c) 2022 Google LLC
#include "test_fuse_bpf.h"
SEC("test_readdir_redact")
/* return FUSE_BPF_BACKING to use backing fs, 0 to pass to usermode */
int readdir_test(struct fuse_bpf_args *fa)
{
switch (fa->opcode) {
case FUSE_READDIR | FUSE_PREFILTER: {
const struct fuse_read_in *fri = fa->in_args[0].value;
bpf_printk("readdir %d", fri->fh);
return FUSE_BPF_BACKING | FUSE_BPF_POST_FILTER;
}
case FUSE_READDIR | FUSE_POSTFILTER: {
const struct fuse_read_in *fri = fa->in_args[0].value;
bpf_printk("readdir postfilter %x", fri->fh);
return FUSE_BPF_USER_FILTER;
}
default:
bpf_printk("opcode %d", fa->opcode);
return FUSE_BPF_BACKING;
}
}
SEC("test_trace")
/* return FUSE_BPF_BACKING to use backing fs, 0 to pass to usermode */
int trace_test(struct fuse_bpf_args *fa)
{
switch (fa->opcode) {
case FUSE_LOOKUP | FUSE_PREFILTER: {
/* real and partial use backing file */
const char *name = fa->in_args[0].value;
bool backing = false;
if (strcmp(name, "real") == 0 || strcmp(name, "partial") == 0)
backing = true;
if (strcmp(name, "dir") == 0)
backing = true;
if (strcmp(name, "dir2") == 0)
backing = true;
if (strcmp(name, "file1") == 0)
backing = true;
if (strcmp(name, "file2") == 0)
backing = true;
bpf_printk("lookup %s %d", name, backing);
return backing ? FUSE_BPF_BACKING | FUSE_BPF_POST_FILTER : 0;
}
case FUSE_LOOKUP | FUSE_POSTFILTER: {
const char *name = fa->in_args[0].value;
struct fuse_entry_out *feo = fa->out_args[0].value;
if (strcmp(name, "real") == 0)
feo->nodeid = 5;
else if (strcmp(name, "partial") == 0)
feo->nodeid = 6;
bpf_printk("post-lookup %s %d", name, feo->nodeid);
return 0;
}
case FUSE_ACCESS | FUSE_PREFILTER: {
bpf_printk("Access: %d", fa->nodeid);
return FUSE_BPF_BACKING;
}
case FUSE_CREATE | FUSE_PREFILTER:
bpf_printk("Create: %d", fa->nodeid);
return FUSE_BPF_BACKING;
case FUSE_MKNOD | FUSE_PREFILTER: {
const struct fuse_mknod_in *fmi = fa->in_args[0].value;
const char *name = fa->in_args[1].value;
bpf_printk("mknod %s %x %x", name, fmi->rdev | fmi->mode, fmi->umask);
return FUSE_BPF_BACKING;
}
case FUSE_MKDIR | FUSE_PREFILTER: {
const struct fuse_mkdir_in *fmi = fa->in_args[0].value;
const char *name = fa->in_args[1].value;
bpf_printk("mkdir %s %x %x", name, fmi->mode, fmi->umask);
return FUSE_BPF_BACKING;
}
case FUSE_RMDIR | FUSE_PREFILTER: {
const char *name = fa->in_args[0].value;
bpf_printk("rmdir %s", name);
return FUSE_BPF_BACKING;
}
case FUSE_RENAME | FUSE_PREFILTER: {
const char *oldname = fa->in_args[1].value;
const char *newname = fa->in_args[2].value;
bpf_printk("rename from %s", oldname);
bpf_printk("rename to %s", newname);
return FUSE_BPF_BACKING;
}
case FUSE_RENAME2 | FUSE_PREFILTER: {
const struct fuse_rename2_in *fri = fa->in_args[0].value;
uint32_t flags = fri->flags;
const char *oldname = fa->in_args[1].value;
const char *newname = fa->in_args[2].value;
bpf_printk("rename(%x) from %s", flags, oldname);
bpf_printk("rename to %s", newname);
return FUSE_BPF_BACKING;
}
case FUSE_UNLINK | FUSE_PREFILTER: {
const char *name = fa->in_args[0].value;
bpf_printk("unlink %s", name);
return FUSE_BPF_BACKING;
}
case FUSE_LINK | FUSE_PREFILTER: {
const struct fuse_link_in *fli = fa->in_args[0].value;
const char *link_name = fa->in_args[1].value;
bpf_printk("link %d %s", fli->oldnodeid, link_name);
return FUSE_BPF_BACKING;
}
case FUSE_SYMLINK | FUSE_PREFILTER: {
const char *link_name = fa->in_args[0].value;
const char *link_dest = fa->in_args[1].value;
bpf_printk("symlink from %s", link_name);
bpf_printk("symlink to %s", link_dest);
return FUSE_BPF_BACKING;
}
case FUSE_READLINK | FUSE_PREFILTER: {
const char *link_name = fa->in_args[0].value;
bpf_printk("readlink from", link_name);
return FUSE_BPF_BACKING;
}
case FUSE_OPEN | FUSE_PREFILTER: {
int backing = 0;
switch (fa->nodeid) {
case 5:
backing = FUSE_BPF_BACKING;
break;
case 6:
backing = FUSE_BPF_BACKING | FUSE_BPF_POST_FILTER;
break;
default:
break;
}
bpf_printk("open %d %d", fa->nodeid, backing);
return backing;
}
case FUSE_OPEN | FUSE_POSTFILTER:
bpf_printk("open postfilter");
return FUSE_BPF_USER_FILTER;
case FUSE_READ | FUSE_PREFILTER: {
const struct fuse_read_in *fri = fa->in_args[0].value;
bpf_printk("read %llu %llu", fri->fh, fri->offset);
if (fri->fh == 1 && fri->offset == 0)
return 0;
return FUSE_BPF_BACKING;
}
case FUSE_GETATTR | FUSE_PREFILTER: {
/* real and partial use backing file */
int backing = 0;
switch (fa->nodeid) {
case 1:
case 5:
case 6:
/*
* TODO: Find better solution
* Add 100 to stop clang compiling to jump table which bpf hates
*/
case 100:
backing = FUSE_BPF_BACKING;
break;
}
bpf_printk("getattr %d %d", fa->nodeid, backing);
return backing;
}
case FUSE_SETATTR | FUSE_PREFILTER: {
/* real and partial use backing file */
int backing = 0;
switch (fa->nodeid) {
case 1:
case 5:
case 6:
/* TODO See above */
case 100:
backing = FUSE_BPF_BACKING;
break;
}
bpf_printk("setattr %d %d", fa->nodeid, backing);
return backing;
}
case FUSE_OPENDIR | FUSE_PREFILTER: {
int backing = 0;
switch (fa->nodeid) {
case 1:
backing = FUSE_BPF_BACKING | FUSE_BPF_POST_FILTER;
break;
}
bpf_printk("opendir %d %d", fa->nodeid, backing);
return backing;
}
case FUSE_OPENDIR | FUSE_POSTFILTER: {
struct fuse_open_out *foo = fa->out_args[0].value;
foo->fh = 2;
bpf_printk("opendir postfilter");
return 0;
}
case FUSE_READDIR | FUSE_PREFILTER: {
const struct fuse_read_in *fri = fa->in_args[0].value;
int backing = 0;
if (fri->fh == 2)
backing = FUSE_BPF_BACKING | FUSE_BPF_POST_FILTER;
bpf_printk("readdir %d %d", fri->fh, backing);
return backing;
}
case FUSE_READDIR | FUSE_POSTFILTER: {
const struct fuse_read_in *fri = fa->in_args[0].value;
int backing = 0;
if (fri->fh == 2)
backing = FUSE_BPF_USER_FILTER | FUSE_BPF_BACKING |
FUSE_BPF_POST_FILTER;
bpf_printk("readdir postfilter %d %d", fri->fh, backing);
return backing;
}
case FUSE_FLUSH | FUSE_PREFILTER: {
const struct fuse_flush_in *ffi = fa->in_args[0].value;
bpf_printk("Flush %d", ffi->fh);
return FUSE_BPF_BACKING;
}
case FUSE_GETXATTR | FUSE_PREFILTER: {
const struct fuse_flush_in *ffi = fa->in_args[0].value;
const char *name = fa->in_args[1].value;
bpf_printk("getxattr %d %s", ffi->fh, name);
return FUSE_BPF_BACKING;
}
case FUSE_LISTXATTR | FUSE_PREFILTER: {
const struct fuse_flush_in *ffi = fa->in_args[0].value;
const char *name = fa->in_args[1].value;
bpf_printk("listxattr %d %s", ffi->fh, name);
return FUSE_BPF_BACKING;
}
case FUSE_SETXATTR | FUSE_PREFILTER: {
const struct fuse_flush_in *ffi = fa->in_args[0].value;
const char *name = fa->in_args[1].value;
unsigned int size = fa->in_args[2].size;
bpf_printk("setxattr %d %s %u", ffi->fh, name, size);
return FUSE_BPF_BACKING;
}
case FUSE_REMOVEXATTR | FUSE_PREFILTER: {
const char *name = fa->in_args[0].value;
bpf_printk("removexattr %s", name);
return FUSE_BPF_BACKING;
}
case FUSE_CANONICAL_PATH | FUSE_PREFILTER: {
bpf_printk("canonical_path");
return FUSE_BPF_BACKING;
}
case FUSE_STATFS | FUSE_PREFILTER: {
bpf_printk("statfs");
return FUSE_BPF_BACKING;
}
case FUSE_LSEEK | FUSE_PREFILTER: {
const struct fuse_lseek_in *fli = fa->in_args[0].value;
bpf_printk("lseek type:%d, offset:%lld", fli->whence, fli->offset);
return FUSE_BPF_BACKING;
}
default:
bpf_printk("Unknown opcode %d", fa->opcode);
return 0;
}
}
SEC("test_hidden")
int trace_hidden(struct fuse_bpf_args *fa)
{
switch (fa->opcode) {
case FUSE_LOOKUP | FUSE_PREFILTER: {
const char *name = fa->in_args[0].value;
bpf_printk("Lookup: %s", name);
if (!strcmp(name, "show"))
return FUSE_BPF_BACKING;
if (!strcmp(name, "hide"))
return -ENOENT;
return FUSE_BPF_BACKING;
}
case FUSE_ACCESS | FUSE_PREFILTER: {
bpf_printk("Access: %d", fa->nodeid);
return FUSE_BPF_BACKING;
}
case FUSE_CREATE | FUSE_PREFILTER:
bpf_printk("Create: %d", fa->nodeid);
return FUSE_BPF_BACKING;
case FUSE_WRITE | FUSE_PREFILTER:
// TODO: Clang combines similar printk calls, causing BPF to complain
// bpf_printk("Write: %d", fa->nodeid);
return FUSE_BPF_BACKING;
case FUSE_FLUSH | FUSE_PREFILTER: {
// const struct fuse_flush_in *ffi = fa->in_args[0].value;
// bpf_printk("Flush %d", ffi->fh);
return FUSE_BPF_BACKING;
}
case FUSE_RELEASE | FUSE_PREFILTER: {
// const struct fuse_release_in *fri = fa->in_args[0].value;
// bpf_printk("Release %d", fri->fh);
return FUSE_BPF_BACKING;
}
case FUSE_FALLOCATE | FUSE_PREFILTER:
// bpf_printk("fallocate %d", fa->nodeid);
return FUSE_BPF_BACKING;
case FUSE_CANONICAL_PATH | FUSE_PREFILTER: {
return FUSE_BPF_BACKING;
}
default:
bpf_printk("Unknown opcode: %d", fa->opcode);
return 0;
}
}
SEC("test_simple")
int trace_simple(struct fuse_bpf_args *fa)
{
if (fa->opcode & FUSE_PREFILTER)
bpf_printk("prefilter opcode: %d",
fa->opcode & FUSE_OPCODE_FILTER);
else if (fa->opcode & FUSE_POSTFILTER)
bpf_printk("postfilter opcode: %d",
fa->opcode & FUSE_OPCODE_FILTER);
else
bpf_printk("*** UNKNOWN *** opcode: %d", fa->opcode);
return FUSE_BPF_BACKING;
}
SEC("test_passthrough")
int trace_daemon(struct fuse_bpf_args *fa)
{
switch (fa->opcode) {
case FUSE_LOOKUP | FUSE_PREFILTER: {
const char *name = fa->in_args[0].value;
bpf_printk("Lookup prefilter: %lx %s", fa->nodeid, name);
return FUSE_BPF_BACKING | FUSE_BPF_POST_FILTER;
}
case FUSE_LOOKUP | FUSE_POSTFILTER: {
const char *name = fa->in_args[0].value;
struct fuse_entry_bpf_out *febo = fa->out_args[1].value;
bpf_printk("Lookup postfilter: %lx %s %lu", fa->nodeid, name);
febo->bpf_action = FUSE_ACTION_REMOVE;
return FUSE_BPF_USER_FILTER;
}
default:
if (fa->opcode & FUSE_PREFILTER)
bpf_printk("prefilter opcode: %d",
fa->opcode & FUSE_OPCODE_FILTER);
else if (fa->opcode & FUSE_POSTFILTER)
bpf_printk("postfilter opcode: %d",
fa->opcode & FUSE_OPCODE_FILTER);
else
bpf_printk("*** UNKNOWN *** opcode: %d", fa->opcode);
return FUSE_BPF_BACKING;
}
}
SEC("test_error")
/* return FUSE_BPF_BACKING to use backing fs, 0 to pass to usermode */
int error_test(struct fuse_bpf_args *fa)
{
switch (fa->opcode) {
case FUSE_MKDIR | FUSE_PREFILTER: {
bpf_printk("mkdir");
return FUSE_BPF_BACKING | FUSE_BPF_POST_FILTER;
}
case FUSE_MKDIR | FUSE_POSTFILTER: {
bpf_printk("mkdir postfilter");
if (fa->error_in == -EEXIST)
return -EPERM;
return 0;
}
case FUSE_LOOKUP | FUSE_PREFILTER: {
const char *name = fa->in_args[0].value;
bpf_printk("lookup prefilter %s", name);
return FUSE_BPF_BACKING | FUSE_BPF_POST_FILTER;
}
case FUSE_LOOKUP | FUSE_POSTFILTER: {
const char *name = fa->in_args[0].value;
bpf_printk("lookup postfilter %s %d", name, fa->error_in);
if (strcmp(name, "doesnotexist") == 0/* && fa->error_in == -EEXIST*/) {
bpf_printk("lookup postfilter doesnotexist");
return FUSE_BPF_USER_FILTER;
}
bpf_printk("meh");
return 0;
}
default:
if (fa->opcode & FUSE_PREFILTER)
bpf_printk("prefilter opcode: %d",
fa->opcode & FUSE_OPCODE_FILTER);
else if (fa->opcode & FUSE_POSTFILTER)
bpf_printk("postfilter opcode: %d",
fa->opcode & FUSE_OPCODE_FILTER);
else
bpf_printk("*** UNKNOWN *** opcode: %d", fa->opcode);
return FUSE_BPF_BACKING;
}
}
SEC("test_readdirplus")
int readdirplus_test(struct fuse_bpf_args *fa)
{
switch (fa->opcode) {
case FUSE_READDIR | FUSE_PREFILTER: {
return 0;
}
}
return FUSE_BPF_BACKING;
}
SEC("test_lookup_postfilter")
int lookuppostfilter_test(struct fuse_bpf_args *fa)
{
switch (fa->opcode) {
case FUSE_LOOKUP | FUSE_PREFILTER:
return FUSE_BPF_BACKING | FUSE_BPF_POST_FILTER;
case FUSE_LOOKUP | FUSE_POSTFILTER:
return FUSE_BPF_USER_FILTER;
default:
return FUSE_BPF_BACKING;
}
}