linux-kernel - Re: [PATCH v2 1/4] erofs: add file-backed mount support

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [<thread-prev] [thread-next>] [day] [month] [year] [list]

Message-ID: <34e86448-65fa-447d-b5d9-1897b2a53ff6@linux.alibaba.com>
Date: Tue, 24 Sep 2024 17:29:14 +0800
From: Gao Xiang <hsiangkao@...ux.alibaba.com>
To: Geert Uytterhoeven <geert@...ux-m68k.org>
Cc: linux-erofs@...ts.ozlabs.org, LKML <linux-kernel@...r.kernel.org>,
 Al Viro <viro@...iv.linux.org.uk>, Christian Brauner <brauner@...nel.org>,
 Jan Kara <jack@...e.cz>, Linux FS Devel <linux-fsdevel@...r.kernel.org>
Subject: Re: [PATCH v2 1/4] erofs: add file-backed mount support

Hi Geert,

On 2024/9/24 17:21, Geert Uytterhoeven wrote:
> Hi Gao,
> 
> CC vfs
> 
> On Fri, Aug 30, 2024 at 5:29 AM Gao Xiang <hsiangkao@...ux.alibaba.com> wrote:
>> It actually has been around for years: For containers and other sandbox
>> use cases, there will be thousands (and even more) of authenticated
>> (sub)images running on the same host, unlike OS images.
>>
>> Of course, all scenarios can use the same EROFS on-disk format, but
>> bdev-backed mounts just work well for OS images since golden data is
>> dumped into real block devices.  However, it's somewhat hard for
>> container runtimes to manage and isolate so many unnecessary virtual
>> block devices safely and efficiently [1]: they just look like a burden
>> to orchestrators and file-backed mounts are preferred indeed.  There
>> were already enough attempts such as Incremental FS, the original
>> ComposeFS and PuzzleFS acting in the same way for immutable fses.  As
>> for current EROFS users, ComposeFS, containerd and Android APEXs will
>> be directly benefited from it.
>>
>> On the other hand, previous experimental feature "erofs over fscache"
>> was once also intended to provide a similar solution (inspired by
>> Incremental FS discussion [2]), but the following facts show file-backed
>> mounts will be a better approach:
>>   - Fscache infrastructure has recently been moved into new Netfslib
>>     which is an unexpected dependency to EROFS really, although it
>>     originally claims "it could be used for caching other things such as
>>     ISO9660 filesystems too." [3]
>>
>>   - It takes an unexpectedly long time to upstream Fscache/Cachefiles
>>     enhancements.  For example, the failover feature took more than
>>     one year, and the deamonless feature is still far behind now;
>>
>>   - Ongoing HSM "fanotify pre-content hooks" [4] together with this will
>>     perfectly supersede "erofs over fscache" in a simpler way since
>>     developers (mainly containerd folks) could leverage their existing
>>     caching mechanism entirely in userspace instead of strictly following
>>     the predefined in-kernel caching tree hierarchy.
>>
>> After "fanotify pre-content hooks" lands upstream to provide the same
>> functionality, "erofs over fscache" will be removed then (as an EROFS
>> internal improvement and EROFS will not have to bother with on-demand
>> fetching and/or caching improvements anymore.)
>>
>> [1] https://github.com/containers/storage/pull/2039
>> [2] https://lore.kernel.org/r/CAOQ4uxjbVxnubaPjVaGYiSwoGDTdpWbB=w_AeM6YM=zVixsUfQ@mail.gmail.com
>> [3] https://docs.kernel.org/filesystems/caching/fscache.html
>> [4] https://lore.kernel.org/r/cover.1723670362.git.josef@toxicpanda.com
>>
>> Closes: https://github.com/containers/composefs/issues/144
>> Signed-off-by: Gao Xiang <hsiangkao@...ux.alibaba.com>
> 
> Thanks for your patch, which is now commit fb176750266a3d7f
> ("erofs: add file-backed mount support").
> 
>> ---
>> v2:
>>   - should use kill_anon_super();
>>   - add O_LARGEFILE to support large files.
>>
>>   fs/erofs/Kconfig    | 17 ++++++++++
>>   fs/erofs/data.c     | 35 ++++++++++++---------
>>   fs/erofs/inode.c    |  5 ++-
>>   fs/erofs/internal.h | 11 +++++--
>>   fs/erofs/super.c    | 76 +++++++++++++++++++++++++++++----------------
>>   5 files changed, 100 insertions(+), 44 deletions(-)
>>
>> diff --git a/fs/erofs/Kconfig b/fs/erofs/Kconfig
>> index 7dcdce660cac..1428d0530e1c 100644
>> --- a/fs/erofs/Kconfig
>> +++ b/fs/erofs/Kconfig
>> @@ -74,6 +74,23 @@ config EROFS_FS_SECURITY
>>
>>            If you are not using a security module, say N.
>>
>> +config EROFS_FS_BACKED_BY_FILE
>> +       bool "File-backed EROFS filesystem support"
>> +       depends on EROFS_FS
>> +       default y
> 
> I am a bit reluctant to have this default to y, without an ack from
> the VFS maintainers.

It don't touch any VFS stuffs so I didn't cc -fsdevel.

Okay, if VFS maintainers have any objection of this, I could turn
it into "default n", if not, I tend to leave it as "y" since I
believe it shouldn't be any risk of this feature (since EROFS is
only an immutable filesystem and I don't think out a context which
could be risky) with clear use cases and I've clearly documented
and showed in the commit message and upstream pull request.

Thanks,
Gao Xiang