|
|
|
|
/*-------------------------------------------------------------------------
|
|
|
|
|
*
|
|
|
|
|
* fd.h
|
|
|
|
|
* Virtual file descriptor definitions.
|
|
|
|
|
*
|
|
|
|
|
*
|
|
|
|
|
* Portions Copyright (c) 1996-2016, PostgreSQL Global Development Group
|
|
|
|
|
* Portions Copyright (c) 1994, Regents of the University of California
|
|
|
|
|
*
|
|
|
|
|
* src/include/storage/fd.h
|
|
|
|
|
*
|
|
|
|
|
*-------------------------------------------------------------------------
|
|
|
|
|
*/
|
|
|
|
|
|
|
|
|
|
/*
|
|
|
|
|
* calls:
|
|
|
|
|
*
|
|
|
|
|
* File {Close, Read, Write, Seek, Tell, Sync}
|
Add OpenTransientFile, with automatic cleanup at end-of-xact.
Files opened with BasicOpenFile or PathNameOpenFile are not automatically
cleaned up on error. That puts unnecessary burden on callers that only want
to keep the file open for a short time. There is AllocateFile, but that
returns a buffered FILE * stream, which in many cases is not the nicest API
to work with. So add function called OpenTransientFile, which returns a
unbuffered fd that's cleaned up like the FILE* returned by AllocateFile().
This plugs a few rare fd leaks in error cases:
1. copy_file() - fixed by by using OpenTransientFile instead of BasicOpenFile
2. XLogFileInit() - fixed by adding close() calls to the error cases. Can't
use OpenTransientFile here because the fd is supposed to persist over
transaction boundaries.
3. lo_import/lo_export - fixed by using OpenTransientFile instead of
PathNameOpenFile.
In addition to plugging those leaks, this replaces many BasicOpenFile() calls
with OpenTransientFile() that were not leaking, because the code meticulously
closed the file on error. That wasn't strictly necessary, but IMHO it's good
for robustness.
The same leaks exist in older versions, but given the rarity of the issues,
I'm not backpatching this. Not yet, anyway - it might be good to backpatch
later, after this mechanism has had some more testing in master branch.
13 years ago
|
|
|
* {Path Name Open, Allocate, Free} File
|
|
|
|
|
*
|
|
|
|
|
* These are NOT JUST RENAMINGS OF THE UNIX ROUTINES.
|
|
|
|
|
* Use them for all file activity...
|
|
|
|
|
*
|
|
|
|
|
* File fd;
|
Add OpenTransientFile, with automatic cleanup at end-of-xact.
Files opened with BasicOpenFile or PathNameOpenFile are not automatically
cleaned up on error. That puts unnecessary burden on callers that only want
to keep the file open for a short time. There is AllocateFile, but that
returns a buffered FILE * stream, which in many cases is not the nicest API
to work with. So add function called OpenTransientFile, which returns a
unbuffered fd that's cleaned up like the FILE* returned by AllocateFile().
This plugs a few rare fd leaks in error cases:
1. copy_file() - fixed by by using OpenTransientFile instead of BasicOpenFile
2. XLogFileInit() - fixed by adding close() calls to the error cases. Can't
use OpenTransientFile here because the fd is supposed to persist over
transaction boundaries.
3. lo_import/lo_export - fixed by using OpenTransientFile instead of
PathNameOpenFile.
In addition to plugging those leaks, this replaces many BasicOpenFile() calls
with OpenTransientFile() that were not leaking, because the code meticulously
closed the file on error. That wasn't strictly necessary, but IMHO it's good
for robustness.
The same leaks exist in older versions, but given the rarity of the issues,
I'm not backpatching this. Not yet, anyway - it might be good to backpatch
later, after this mechanism has had some more testing in master branch.
13 years ago
|
|
|
* fd = PathNameOpenFile("foo", O_RDONLY, 0600);
|
|
|
|
|
*
|
|
|
|
|
* AllocateFile();
|
|
|
|
|
* FreeFile();
|
|
|
|
|
*
|
|
|
|
|
* Use AllocateFile, not fopen, if you need a stdio file (FILE*); then
|
|
|
|
|
* use FreeFile, not fclose, to close it. AVOID using stdio for files
|
|
|
|
|
* that you intend to hold open for any length of time, since there is
|
|
|
|
|
* no way for them to share kernel file descriptors with other files.
|
|
|
|
|
*
|
|
|
|
|
* Likewise, use AllocateDir/FreeDir, not opendir/closedir, to allocate
|
Add OpenTransientFile, with automatic cleanup at end-of-xact.
Files opened with BasicOpenFile or PathNameOpenFile are not automatically
cleaned up on error. That puts unnecessary burden on callers that only want
to keep the file open for a short time. There is AllocateFile, but that
returns a buffered FILE * stream, which in many cases is not the nicest API
to work with. So add function called OpenTransientFile, which returns a
unbuffered fd that's cleaned up like the FILE* returned by AllocateFile().
This plugs a few rare fd leaks in error cases:
1. copy_file() - fixed by by using OpenTransientFile instead of BasicOpenFile
2. XLogFileInit() - fixed by adding close() calls to the error cases. Can't
use OpenTransientFile here because the fd is supposed to persist over
transaction boundaries.
3. lo_import/lo_export - fixed by using OpenTransientFile instead of
PathNameOpenFile.
In addition to plugging those leaks, this replaces many BasicOpenFile() calls
with OpenTransientFile() that were not leaking, because the code meticulously
closed the file on error. That wasn't strictly necessary, but IMHO it's good
for robustness.
The same leaks exist in older versions, but given the rarity of the issues,
I'm not backpatching this. Not yet, anyway - it might be good to backpatch
later, after this mechanism has had some more testing in master branch.
13 years ago
|
|
|
* open directories (DIR*), and OpenTransientFile/CloseTransient File for an
|
|
|
|
|
* unbuffered file descriptor.
|
|
|
|
|
*/
|
|
|
|
|
#ifndef FD_H
|
|
|
|
|
#define FD_H
|
|
|
|
|
|
|
|
|
|
#include <dirent.h>
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
/*
|
|
|
|
|
* FileSeek uses the standard UNIX lseek(2) flags.
|
|
|
|
|
*/
|
|
|
|
|
|
|
|
|
|
typedef char *FileName;
|
|
|
|
|
|
|
|
|
|
typedef int File;
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
/* GUC parameter */
|
|
|
|
|
extern int max_files_per_process;
|
|
|
|
|
|
|
|
|
|
/*
|
|
|
|
|
* This is private to fd.c, but exported for save/restore_backend_variables()
|
|
|
|
|
*/
|
|
|
|
|
extern int max_safe_fds;
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
/*
|
|
|
|
|
* prototypes for functions in fd.c
|
|
|
|
|
*/
|
|
|
|
|
|
|
|
|
|
/* Operations on virtual Files --- equivalent to Unix kernel file ops */
|
|
|
|
|
extern File PathNameOpenFile(FileName fileName, int fileFlags, int fileMode);
|
|
|
|
|
extern File OpenTemporaryFile(bool interXact);
|
|
|
|
|
extern void FileClose(File file);
|
|
|
|
|
extern int FilePrefetch(File file, off_t offset, int amount);
|
|
|
|
|
extern int FileRead(File file, char *buffer, int amount);
|
|
|
|
|
extern int FileWrite(File file, char *buffer, int amount);
|
|
|
|
|
extern int FileSync(File file);
|
|
|
|
|
extern off_t FileSeek(File file, off_t offset, int whence);
|
|
|
|
|
extern int FileTruncate(File file, off_t offset);
|
|
|
|
|
extern char *FilePathName(File file);
|
|
|
|
|
extern int FileGetRawDesc(File file);
|
|
|
|
|
extern int FileGetRawFlags(File file);
|
|
|
|
|
extern int FileGetRawMode(File file);
|
|
|
|
|
|
|
|
|
|
/* Operations that allow use of regular stdio --- USE WITH CAUTION */
|
|
|
|
|
extern FILE *AllocateFile(const char *name, const char *mode);
|
|
|
|
|
extern int FreeFile(FILE *file);
|
|
|
|
|
|
Add support for piping COPY to/from an external program.
This includes backend "COPY TO/FROM PROGRAM '...'" syntax, and corresponding
psql \copy syntax. Like with reading/writing files, the backend version is
superuser-only, and in the psql version, the program is run in the client.
In the passing, the psql \copy STDIN/STDOUT syntax is subtly changed: if you
the stdin/stdout is quoted, it's now interpreted as a filename. For example,
"\copy foo from 'stdin'" now reads from a file called 'stdin', not from
standard input. Before this, there was no way to specify a filename called
stdin, stdout, pstdin or pstdout.
This creates a new function in pgport, wait_result_to_str(), which can
be used to convert the exit status of a process, as returned by wait(3),
to a human-readable string.
Etsuro Fujita, reviewed by Amit Kapila.
13 years ago
|
|
|
/* Operations that allow use of pipe streams (popen/pclose) */
|
|
|
|
|
extern FILE *OpenPipeStream(const char *command, const char *mode);
|
|
|
|
|
extern int ClosePipeStream(FILE *file);
|
|
|
|
|
|
|
|
|
|
/* Operations to allow use of the <dirent.h> library routines */
|
|
|
|
|
extern DIR *AllocateDir(const char *dirname);
|
|
|
|
|
extern struct dirent *ReadDir(DIR *dir, const char *dirname);
|
|
|
|
|
extern int FreeDir(DIR *dir);
|
|
|
|
|
|
Add OpenTransientFile, with automatic cleanup at end-of-xact.
Files opened with BasicOpenFile or PathNameOpenFile are not automatically
cleaned up on error. That puts unnecessary burden on callers that only want
to keep the file open for a short time. There is AllocateFile, but that
returns a buffered FILE * stream, which in many cases is not the nicest API
to work with. So add function called OpenTransientFile, which returns a
unbuffered fd that's cleaned up like the FILE* returned by AllocateFile().
This plugs a few rare fd leaks in error cases:
1. copy_file() - fixed by by using OpenTransientFile instead of BasicOpenFile
2. XLogFileInit() - fixed by adding close() calls to the error cases. Can't
use OpenTransientFile here because the fd is supposed to persist over
transaction boundaries.
3. lo_import/lo_export - fixed by using OpenTransientFile instead of
PathNameOpenFile.
In addition to plugging those leaks, this replaces many BasicOpenFile() calls
with OpenTransientFile() that were not leaking, because the code meticulously
closed the file on error. That wasn't strictly necessary, but IMHO it's good
for robustness.
The same leaks exist in older versions, but given the rarity of the issues,
I'm not backpatching this. Not yet, anyway - it might be good to backpatch
later, after this mechanism has had some more testing in master branch.
13 years ago
|
|
|
/* Operations to allow use of a plain kernel FD, with automatic cleanup */
|
|
|
|
|
extern int OpenTransientFile(FileName fileName, int fileFlags, int fileMode);
|
|
|
|
|
extern int CloseTransientFile(int fd);
|
|
|
|
|
|
|
|
|
|
/* If you've really really gotta have a plain kernel FD, use this */
|
|
|
|
|
extern int BasicOpenFile(FileName fileName, int fileFlags, int fileMode);
|
|
|
|
|
|
|
|
|
|
/* Miscellaneous support routines */
|
|
|
|
|
extern void InitFileAccess(void);
|
|
|
|
|
extern void set_max_safe_fds(void);
|
|
|
|
|
extern void closeAllVfds(void);
|
|
|
|
|
extern void SetTempTablespaces(Oid *tableSpaces, int numSpaces);
|
|
|
|
|
extern bool TempTablespacesAreSet(void);
|
|
|
|
|
extern Oid GetNextTempTableSpace(void);
|
|
|
|
|
extern void AtEOXact_Files(void);
|
|
|
|
|
extern void AtEOSubXact_Files(bool isCommit, SubTransactionId mySubid,
|
|
|
|
|
SubTransactionId parentSubid);
|
|
|
|
|
extern void RemovePgTempFiles(void);
|
|
|
|
|
|
|
|
|
|
extern int pg_fsync(int fd);
|
|
|
|
|
extern int pg_fsync_no_writethrough(int fd);
|
|
|
|
|
extern int pg_fsync_writethrough(int fd);
|
|
|
|
|
extern int pg_fdatasync(int fd);
|
|
|
|
|
extern int pg_flush_data(int fd, off_t offset, off_t amount);
|
|
|
|
|
extern void fsync_fname(char *fname, bool isdir);
|
Fix fsync-at-startup code to not treat errors as fatal.
Commit 2ce439f3379aed857517c8ce207485655000fc8e introduced a rather serious
regression, namely that if its scan of the data directory came across any
un-fsync-able files, it would fail and thereby prevent database startup.
Worse yet, symlinks to such files also caused the problem, which meant that
crash restart was guaranteed to fail on certain common installations such
as older Debian.
After discussion, we agreed that (1) failure to start is worse than any
consequence of not fsync'ing is likely to be, therefore treat all errors
in this code as nonfatal; (2) we should not chase symlinks other than
those that are expected to exist, namely pg_xlog/ and tablespace links
under pg_tblspc/. The latter restriction avoids possibly fsync'ing a
much larger part of the filesystem than intended, if the user has left
random symlinks hanging about in the data directory.
This commit takes care of that and also does some code beautification,
mainly moving the relevant code into fd.c, which seems a much better place
for it than xlog.c, and making sure that the conditional compilation for
the pre_sync_fname pass has something to do with whether pg_flush_data
works.
I also relocated the call site in xlog.c down a few lines; it seems a
bit silly to be doing this before ValidateXLOGDirectoryStructure().
The similar logic in initdb.c ought to be made to match this, but that
change is noncritical and will be dealt with separately.
Back-patch to all active branches, like the prior commit.
Abhijit Menon-Sen and Tom Lane
10 years ago
|
|
|
extern void SyncDataDirectory(void);
|
|
|
|
|
|
|
|
|
|
/* Filename components for OpenTemporaryFile */
|
|
|
|
|
#define PG_TEMP_FILES_DIR "pgsql_tmp"
|
|
|
|
|
#define PG_TEMP_FILE_PREFIX "pgsql_tmp"
|
|
|
|
|
|
|
|
|
|
#endif /* FD_H */
|
