Summary: Consider the following WAL with 4 batch entries prefixed with their sequence at time of memtable insert. [1: BEGIN_PREPARE, PUT, PUT, PUT, PUT, END_PREPARE(a)] [1: BEGIN_PREPARE, PUT, PUT, PUT, PUT, END_PREPARE(b)] [4: COMMIT(a)] [7: COMMIT(b)] The first two batches do not consume any sequence numbers so are both prefixed with seq=1. For 2pc commit, memtable insertion takes place before COMMIT batch is written to WAL. We can see that sequence number consumption takes place between WAL entries giving us the seemingly sparse sequence prefix for WAL entries. This is a valid WAL. Because with 2PC markers one WriteBatch points to another batch containing its inserts a writebatch can consume more or less sequence numbers than the number of sequence consuming entries that it contains. We can see that, given the entries in the WAL, 6 sequence ids were consumed. Yet on recovery the maximum sequence consumed would be 7 + 3 (the number of sequence numbers consumed by COMMIT(b)) So, now upon recovery we must track the actual consumption of sequence numbers. In the provided scenario there will be no sequence gaps, but it is possible to produce a sequence gap. This should not be a problem though. correct? Test Plan: provided test. Reviewers: sdong Subscribers: andrewkr, leveldb, dhruba, hermanlee4 Differential Revision: https://reviews.facebook.net/D57645main
parent
8a66c85e90
commit
a657ee9a9c
@ -0,0 +1,312 @@ |
||||
// Copyright (c) 2011-present, Facebook, Inc. All rights reserved.
|
||||
// This source code is licensed under the BSD-style license found in the
|
||||
// LICENSE file in the root directory of this source tree. An additional grant
|
||||
// of patent rights can be found in the PATENTS file in the same directory.
|
||||
//
|
||||
// Copyright 2014 The LevelDB Authors. All rights reserved.
|
||||
// Use of this source code is governed by a BSD-style license that can be
|
||||
// found in the LICENSE file. See the AUTHORS file for names of contributors.
|
||||
|
||||
// This test uses a custom Env to keep track of the state of a filesystem as of
|
||||
// the last "sync". It then checks for data loss errors by purposely dropping
|
||||
// file data (or entire files) not protected by a "sync".
|
||||
|
||||
#include "util/fault_injection_test_env.h" |
||||
#include <utility> |
||||
|
||||
namespace rocksdb { |
||||
|
||||
// Assume a filename, and not a directory name like "/foo/bar/"
|
||||
std::string GetDirName(const std::string filename) { |
||||
size_t found = filename.find_last_of("/\\"); |
||||
if (found == std::string::npos) { |
||||
return ""; |
||||
} else { |
||||
return filename.substr(0, found); |
||||
} |
||||
} |
||||
|
||||
// A basic file truncation function suitable for this test.
|
||||
Status Truncate(Env* env, const std::string& filename, uint64_t length) { |
||||
unique_ptr<SequentialFile> orig_file; |
||||
const EnvOptions options; |
||||
Status s = env->NewSequentialFile(filename, &orig_file, options); |
||||
if (!s.ok()) { |
||||
fprintf(stderr, "Cannot truncate file %s: %s\n", filename.c_str(), |
||||
s.ToString().c_str()); |
||||
return s; |
||||
} |
||||
|
||||
std::unique_ptr<char[]> scratch(new char[length]); |
||||
rocksdb::Slice result; |
||||
s = orig_file->Read(length, &result, scratch.get()); |
||||
#ifdef OS_WIN |
||||
orig_file.reset(); |
||||
#endif |
||||
if (s.ok()) { |
||||
std::string tmp_name = GetDirName(filename) + "/truncate.tmp"; |
||||
unique_ptr<WritableFile> tmp_file; |
||||
s = env->NewWritableFile(tmp_name, &tmp_file, options); |
||||
if (s.ok()) { |
||||
s = tmp_file->Append(result); |
||||
if (s.ok()) { |
||||
s = env->RenameFile(tmp_name, filename); |
||||
} else { |
||||
fprintf(stderr, "Cannot rename file %s to %s: %s\n", tmp_name.c_str(), |
||||
filename.c_str(), s.ToString().c_str()); |
||||
env->DeleteFile(tmp_name); |
||||
} |
||||
} |
||||
} |
||||
if (!s.ok()) { |
||||
fprintf(stderr, "Cannot truncate file %s: %s\n", filename.c_str(), |
||||
s.ToString().c_str()); |
||||
} |
||||
|
||||
return s; |
||||
} |
||||
|
||||
// Trim the tailing "/" in the end of `str`
|
||||
std::string TrimDirname(const std::string& str) { |
||||
size_t found = str.find_last_not_of("/"); |
||||
if (found == std::string::npos) { |
||||
return str; |
||||
} |
||||
return str.substr(0, found + 1); |
||||
} |
||||
|
||||
// Return pair <parent directory name, file name> of a full path.
|
||||
std::pair<std::string, std::string> GetDirAndName(const std::string& name) { |
||||
std::string dirname = GetDirName(name); |
||||
std::string fname = name.substr(dirname.size() + 1); |
||||
return std::make_pair(dirname, fname); |
||||
} |
||||
|
||||
Status FileState::DropUnsyncedData(Env* env) const { |
||||
ssize_t sync_pos = pos_at_last_sync_ == -1 ? 0 : pos_at_last_sync_; |
||||
return Truncate(env, filename_, sync_pos); |
||||
} |
||||
|
||||
Status FileState::DropRandomUnsyncedData(Env* env, Random* rand) const { |
||||
ssize_t sync_pos = pos_at_last_sync_ == -1 ? 0 : pos_at_last_sync_; |
||||
assert(pos_ >= sync_pos); |
||||
int range = static_cast<int>(pos_ - sync_pos); |
||||
uint64_t truncated_size = |
||||
static_cast<uint64_t>(sync_pos) + rand->Uniform(range); |
||||
return Truncate(env, filename_, truncated_size); |
||||
} |
||||
|
||||
Status TestDirectory::Fsync() { |
||||
env_->SyncDir(dirname_); |
||||
return dir_->Fsync(); |
||||
} |
||||
|
||||
TestWritableFile::TestWritableFile(const std::string& fname, |
||||
unique_ptr<WritableFile>&& f, |
||||
FaultInjectionTestEnv* env) |
||||
: state_(fname), |
||||
target_(std::move(f)), |
||||
writable_file_opened_(true), |
||||
env_(env) { |
||||
assert(target_ != nullptr); |
||||
state_.pos_ = 0; |
||||
} |
||||
|
||||
TestWritableFile::~TestWritableFile() { |
||||
if (writable_file_opened_) { |
||||
Close(); |
||||
} |
||||
} |
||||
|
||||
Status TestWritableFile::Append(const Slice& data) { |
||||
if (!env_->IsFilesystemActive()) { |
||||
return Status::Corruption("Not Active"); |
||||
} |
||||
Status s = target_->Append(data); |
||||
if (s.ok()) { |
||||
state_.pos_ += data.size(); |
||||
} |
||||
return s; |
||||
} |
||||
|
||||
Status TestWritableFile::Close() { |
||||
writable_file_opened_ = false; |
||||
Status s = target_->Close(); |
||||
if (s.ok()) { |
||||
env_->WritableFileClosed(state_); |
||||
} |
||||
return s; |
||||
} |
||||
|
||||
Status TestWritableFile::Flush() { |
||||
Status s = target_->Flush(); |
||||
if (s.ok() && env_->IsFilesystemActive()) { |
||||
state_.pos_at_last_flush_ = state_.pos_; |
||||
} |
||||
return s; |
||||
} |
||||
|
||||
Status TestWritableFile::Sync() { |
||||
if (!env_->IsFilesystemActive()) { |
||||
return Status::OK(); |
||||
} |
||||
// No need to actual sync.
|
||||
state_.pos_at_last_sync_ = state_.pos_; |
||||
return Status::OK(); |
||||
} |
||||
|
||||
Status FaultInjectionTestEnv::NewDirectory(const std::string& name, |
||||
unique_ptr<Directory>* result) { |
||||
unique_ptr<Directory> r; |
||||
Status s = target()->NewDirectory(name, &r); |
||||
assert(s.ok()); |
||||
if (!s.ok()) { |
||||
return s; |
||||
} |
||||
result->reset(new TestDirectory(this, TrimDirname(name), r.release())); |
||||
return Status::OK(); |
||||
} |
||||
|
||||
Status FaultInjectionTestEnv::NewWritableFile(const std::string& fname, |
||||
unique_ptr<WritableFile>* result, |
||||
const EnvOptions& soptions) { |
||||
if (!IsFilesystemActive()) { |
||||
return Status::Corruption("Not Active"); |
||||
} |
||||
// Not allow overwriting files
|
||||
Status s = target()->FileExists(fname); |
||||
if (s.ok()) { |
||||
return Status::Corruption("File already exists."); |
||||
} else if (!s.IsNotFound()) { |
||||
assert(s.IsIOError()); |
||||
return s; |
||||
} |
||||
s = target()->NewWritableFile(fname, result, soptions); |
||||
if (s.ok()) { |
||||
result->reset(new TestWritableFile(fname, std::move(*result), this)); |
||||
// WritableFileWriter* file is opened
|
||||
// again then it will be truncated - so forget our saved state.
|
||||
UntrackFile(fname); |
||||
MutexLock l(&mutex_); |
||||
open_files_.insert(fname); |
||||
auto dir_and_name = GetDirAndName(fname); |
||||
auto& list = dir_to_new_files_since_last_sync_[dir_and_name.first]; |
||||
list.insert(dir_and_name.second); |
||||
} |
||||
return s; |
||||
} |
||||
|
||||
Status FaultInjectionTestEnv::DeleteFile(const std::string& f) { |
||||
if (!IsFilesystemActive()) { |
||||
return Status::Corruption("Not Active"); |
||||
} |
||||
Status s = EnvWrapper::DeleteFile(f); |
||||
if (!s.ok()) { |
||||
fprintf(stderr, "Cannot delete file %s: %s\n", f.c_str(), |
||||
s.ToString().c_str()); |
||||
} |
||||
assert(s.ok()); |
||||
if (s.ok()) { |
||||
UntrackFile(f); |
||||
} |
||||
return s; |
||||
} |
||||
|
||||
Status FaultInjectionTestEnv::RenameFile(const std::string& s, |
||||
const std::string& t) { |
||||
if (!IsFilesystemActive()) { |
||||
return Status::Corruption("Not Active"); |
||||
} |
||||
Status ret = EnvWrapper::RenameFile(s, t); |
||||
|
||||
if (ret.ok()) { |
||||
MutexLock l(&mutex_); |
||||
if (db_file_state_.find(s) != db_file_state_.end()) { |
||||
db_file_state_[t] = db_file_state_[s]; |
||||
db_file_state_.erase(s); |
||||
} |
||||
|
||||
auto sdn = GetDirAndName(s); |
||||
auto tdn = GetDirAndName(t); |
||||
if (dir_to_new_files_since_last_sync_[sdn.first].erase(sdn.second) != 0) { |
||||
auto& tlist = dir_to_new_files_since_last_sync_[tdn.first]; |
||||
assert(tlist.find(tdn.second) == tlist.end()); |
||||
tlist.insert(tdn.second); |
||||
} |
||||
} |
||||
|
||||
return ret; |
||||
} |
||||
|
||||
void FaultInjectionTestEnv::WritableFileClosed(const FileState& state) { |
||||
MutexLock l(&mutex_); |
||||
if (open_files_.find(state.filename_) != open_files_.end()) { |
||||
db_file_state_[state.filename_] = state; |
||||
open_files_.erase(state.filename_); |
||||
} |
||||
} |
||||
|
||||
// For every file that is not fully synced, make a call to `func` with
|
||||
// FileState of the file as the parameter.
|
||||
Status FaultInjectionTestEnv::DropFileData( |
||||
std::function<Status(Env*, FileState)> func) { |
||||
Status s; |
||||
MutexLock l(&mutex_); |
||||
for (std::map<std::string, FileState>::const_iterator it = |
||||
db_file_state_.begin(); |
||||
s.ok() && it != db_file_state_.end(); ++it) { |
||||
const FileState& state = it->second; |
||||
if (!state.IsFullySynced()) { |
||||
s = func(target(), state); |
||||
} |
||||
} |
||||
return s; |
||||
} |
||||
|
||||
Status FaultInjectionTestEnv::DropUnsyncedFileData() { |
||||
return DropFileData([&](Env* env, const FileState& state) { |
||||
return state.DropUnsyncedData(env); |
||||
}); |
||||
} |
||||
|
||||
Status FaultInjectionTestEnv::DropRandomUnsyncedFileData(Random* rnd) { |
||||
return DropFileData([&](Env* env, const FileState& state) { |
||||
return state.DropRandomUnsyncedData(env, rnd); |
||||
}); |
||||
} |
||||
|
||||
Status FaultInjectionTestEnv::DeleteFilesCreatedAfterLastDirSync() { |
||||
// Because DeleteFile access this container make a copy to avoid deadlock
|
||||
std::map<std::string, std::set<std::string>> map_copy; |
||||
{ |
||||
MutexLock l(&mutex_); |
||||
map_copy.insert(dir_to_new_files_since_last_sync_.begin(), |
||||
dir_to_new_files_since_last_sync_.end()); |
||||
} |
||||
|
||||
for (auto& pair : map_copy) { |
||||
for (std::string name : pair.second) { |
||||
Status s = DeleteFile(pair.first + "/" + name); |
||||
if (!s.ok()) { |
||||
return s; |
||||
} |
||||
} |
||||
} |
||||
return Status::OK(); |
||||
} |
||||
void FaultInjectionTestEnv::ResetState() { |
||||
MutexLock l(&mutex_); |
||||
db_file_state_.clear(); |
||||
dir_to_new_files_since_last_sync_.clear(); |
||||
SetFilesystemActiveNoLock(true); |
||||
} |
||||
|
||||
void FaultInjectionTestEnv::UntrackFile(const std::string& f) { |
||||
MutexLock l(&mutex_); |
||||
auto dir_and_name = GetDirAndName(f); |
||||
dir_to_new_files_since_last_sync_[dir_and_name.first].erase( |
||||
dir_and_name.second); |
||||
db_file_state_.erase(f); |
||||
open_files_.erase(f); |
||||
} |
||||
} // namespace rocksdb
|
@ -0,0 +1,158 @@ |
||||
// Copyright (c) 2011-present, Facebook, Inc. All rights reserved.
|
||||
// This source code is licensed under the BSD-style license found in the
|
||||
// LICENSE file in the root directory of this source tree. An additional grant
|
||||
// of patent rights can be found in the PATENTS file in the same directory.
|
||||
//
|
||||
// Copyright 2014 The LevelDB Authors. All rights reserved.
|
||||
// Use of this source code is governed by a BSD-style license that can be
|
||||
// found in the LICENSE file. See the AUTHORS file for names of contributors.
|
||||
|
||||
// This test uses a custom Env to keep track of the state of a filesystem as of
|
||||
// the last "sync". It then checks for data loss errors by purposely dropping
|
||||
// file data (or entire files) not protected by a "sync".
|
||||
|
||||
#ifndef UTIL_FAULT_INJECTION_TEST_ENV_H_ |
||||
#define UTIL_FAULT_INJECTION_TEST_ENV_H_ |
||||
|
||||
#include <map> |
||||
#include <set> |
||||
#include <string> |
||||
|
||||
#include "db/filename.h" |
||||
#include "db/version_set.h" |
||||
#include "rocksdb/db.h" |
||||
#include "rocksdb/env.h" |
||||
#include "util/mock_env.h" |
||||
#include "util/mutexlock.h" |
||||
|
||||
namespace rocksdb { |
||||
|
||||
class TestWritableFile; |
||||
class FaultInjectionTestEnv; |
||||
|
||||
struct FileState { |
||||
std::string filename_; |
||||
ssize_t pos_; |
||||
ssize_t pos_at_last_sync_; |
||||
ssize_t pos_at_last_flush_; |
||||
|
||||
explicit FileState(const std::string& filename) |
||||
: filename_(filename), |
||||
pos_(-1), |
||||
pos_at_last_sync_(-1), |
||||
pos_at_last_flush_(-1) {} |
||||
|
||||
FileState() : pos_(-1), pos_at_last_sync_(-1), pos_at_last_flush_(-1) {} |
||||
|
||||
bool IsFullySynced() const { return pos_ <= 0 || pos_ == pos_at_last_sync_; } |
||||
|
||||
Status DropUnsyncedData(Env* env) const; |
||||
|
||||
Status DropRandomUnsyncedData(Env* env, Random* rand) const; |
||||
}; |
||||
|
||||
// A wrapper around WritableFileWriter* file
|
||||
// is written to or sync'ed.
|
||||
class TestWritableFile : public WritableFile { |
||||
public: |
||||
explicit TestWritableFile(const std::string& fname, |
||||
unique_ptr<WritableFile>&& f, |
||||
FaultInjectionTestEnv* env); |
||||
virtual ~TestWritableFile(); |
||||
virtual Status Append(const Slice& data) override; |
||||
virtual Status Truncate(uint64_t size) override { |
||||
return target_->Truncate(size); |
||||
} |
||||
virtual Status Close() override; |
||||
virtual Status Flush() override; |
||||
virtual Status Sync() override; |
||||
virtual bool IsSyncThreadSafe() const override { return true; } |
||||
|
||||
private: |
||||
FileState state_; |
||||
unique_ptr<WritableFile> target_; |
||||
bool writable_file_opened_; |
||||
FaultInjectionTestEnv* env_; |
||||
}; |
||||
|
||||
class TestDirectory : public Directory { |
||||
public: |
||||
explicit TestDirectory(FaultInjectionTestEnv* env, std::string dirname, |
||||
Directory* dir) |
||||
: env_(env), dirname_(dirname), dir_(dir) {} |
||||
~TestDirectory() {} |
||||
|
||||
virtual Status Fsync() override; |
||||
|
||||
private: |
||||
FaultInjectionTestEnv* env_; |
||||
std::string dirname_; |
||||
unique_ptr<Directory> dir_; |
||||
}; |
||||
|
||||
class FaultInjectionTestEnv : public EnvWrapper { |
||||
public: |
||||
explicit FaultInjectionTestEnv(Env* base) |
||||
: EnvWrapper(base), filesystem_active_(true) {} |
||||
virtual ~FaultInjectionTestEnv() {} |
||||
|
||||
Status NewDirectory(const std::string& name, |
||||
unique_ptr<Directory>* result) override; |
||||
|
||||
Status NewWritableFile(const std::string& fname, |
||||
unique_ptr<WritableFile>* result, |
||||
const EnvOptions& soptions) override; |
||||
|
||||
virtual Status DeleteFile(const std::string& f) override; |
||||
|
||||
virtual Status RenameFile(const std::string& s, |
||||
const std::string& t) override; |
||||
|
||||
void WritableFileClosed(const FileState& state); |
||||
|
||||
// For every file that is not fully synced, make a call to `func` with
|
||||
// FileState of the file as the parameter.
|
||||
Status DropFileData(std::function<Status(Env*, FileState)> func); |
||||
|
||||
Status DropUnsyncedFileData(); |
||||
|
||||
Status DropRandomUnsyncedFileData(Random* rnd); |
||||
|
||||
Status DeleteFilesCreatedAfterLastDirSync(); |
||||
|
||||
void ResetState(); |
||||
|
||||
void UntrackFile(const std::string& f); |
||||
|
||||
void SyncDir(const std::string& dirname) { |
||||
MutexLock l(&mutex_); |
||||
dir_to_new_files_since_last_sync_.erase(dirname); |
||||
} |
||||
|
||||
// Setting the filesystem to inactive is the test equivalent to simulating a
|
||||
// system reset. Setting to inactive will freeze our saved filesystem state so
|
||||
// that it will stop being recorded. It can then be reset back to the state at
|
||||
// the time of the reset.
|
||||
bool IsFilesystemActive() { |
||||
MutexLock l(&mutex_); |
||||
return filesystem_active_; |
||||
} |
||||
void SetFilesystemActiveNoLock(bool active) { filesystem_active_ = active; } |
||||
void SetFilesystemActive(bool active) { |
||||
MutexLock l(&mutex_); |
||||
SetFilesystemActiveNoLock(active); |
||||
} |
||||
void AssertNoOpenFile() { assert(open_files_.empty()); } |
||||
|
||||
private: |
||||
port::Mutex mutex_; |
||||
std::map<std::string, FileState> db_file_state_; |
||||
std::set<std::string> open_files_; |
||||
std::unordered_map<std::string, std::set<std::string>> |
||||
dir_to_new_files_since_last_sync_; |
||||
bool filesystem_active_; // Record flushes, syncs, writes
|
||||
}; |
||||
|
||||
} // namespace rocksdb
|
||||
|
||||
#endif // UTIL_FAULT_INJECTION_TEST_ENV_H_
|
Loading…
Reference in new issue