diff --git a/lib/common/watchdog.c b/lib/common/watchdog.c
index 4c4abc1e2c..7e14349531 100644
--- a/lib/common/watchdog.c
+++ b/lib/common/watchdog.c
@@ -1,277 +1,284 @@
/*
* Copyright (C) 2013 Lars Marowsky-Bree <lmb@suse.com>
* 2014 Andrew Beekhof <andrew@beekhof.net>
*
* This source code is licensed under the GNU Lesser General Public License
* version 2.1 or later (LGPLv2.1+) WITHOUT ANY WARRANTY.
*/
#include <crm_internal.h>
#include <sched.h>
#include <sys/ioctl.h>
#include <sys/reboot.h>
#include <sys/types.h>
#include <sys/stat.h>
#include <unistd.h>
#include <ctype.h>
#include <dirent.h>
#ifdef _POSIX_MEMLOCK
# include <sys/mman.h>
#endif
static int sbd_pid = 0;
enum pcmk_panic_flags
{
pcmk_panic_none = 0x00,
pcmk_panic_delay = 0x01,
pcmk_panic_kdump = 0x02,
pcmk_panic_shutdown = 0x04,
};
#define SYSRQ "/proc/sys/kernel/sysrq"
void
sysrq_init(void)
{
static bool need_init = true;
FILE* procf;
int c;
if(need_init) {
need_init = false;
} else {
return;
}
procf = fopen(SYSRQ, "r");
if (!procf) {
crm_perror(LOG_ERR, "Cannot open "SYSRQ" for read");
return;
}
if (fscanf(procf, "%d", &c) != 1) {
crm_perror(LOG_ERR, "Parsing "SYSRQ" failed");
c = 0;
}
fclose(procf);
if (c == 1)
return;
/* 8 for debugging dumps of processes, 128 for reboot/poweroff */
c |= 136;
procf = fopen(SYSRQ, "w");
if (!procf) {
crm_perror(LOG_ERR, "Cannot write to "SYSRQ);
return;
}
fprintf(procf, "%d", c);
fclose(procf);
return;
}
static void
sysrq_trigger(char t)
{
FILE *procf;
sysrq_init();
procf = fopen("/proc/sysrq-trigger", "a");
if (!procf) {
crm_perror(LOG_ERR, "Opening sysrq-trigger failed");
return;
}
crm_info("sysrq-trigger: %c", t);
fprintf(procf, "%c\n", t);
fclose(procf);
return;
}
static void
pcmk_panic_local(void)
{
int rc = pcmk_ok;
uid_t uid = geteuid();
pid_t ppid = getppid();
if(uid != 0 && ppid > 1) {
/* We're a non-root pacemaker daemon (cib, crmd, pengine,
* attrd, etc) with the original pacemakerd parent
*
* Of these, only crmd is likely to be initiating resets
*/
do_crm_log_always(LOG_EMERG, "Signaling parent %d to panic", ppid);
crm_exit(pcmk_err_panic);
return;
} else if (uid != 0) {
/*
* No permissions and no pacemakerd parent to escalate to
* Track down the new pacakerd process and send a signal instead
*/
union sigval signal_value;
memset(&signal_value, 0, sizeof(signal_value));
ppid = crm_procfs_pid_of("pacemakerd");
do_crm_log_always(LOG_EMERG, "Signaling pacemakerd(%d) to panic", ppid);
if(ppid > 1 && sigqueue(ppid, SIGQUIT, signal_value) < 0) {
crm_perror(LOG_EMERG, "Cannot signal pacemakerd(%d) to panic", ppid);
}
/* The best we can do now is die */
crm_exit(pcmk_err_panic);
return;
}
/* We're either pacemakerd, or a pacemaker daemon running as root */
if (safe_str_eq("crash", getenv("PCMK_panic_action"))) {
sysrq_trigger('c');
} else {
sysrq_trigger('b');
}
/* reboot(RB_HALT_SYSTEM); rc = errno; */
reboot(RB_AUTOBOOT);
rc = errno;
do_crm_log_always(LOG_EMERG, "Reboot failed, escalating to %d: %s (%d)", ppid, pcmk_strerror(rc), rc);
if(ppid > 1) {
/* child daemon */
exit(pcmk_err_panic);
} else {
/* pacemakerd or orphan child */
exit(DAEMON_RESPAWN_STOP);
}
}
static void
pcmk_panic_sbd(void)
{
union sigval signal_value;
pid_t ppid = getppid();
do_crm_log_always(LOG_EMERG, "Signaling sbd(%d) to panic", sbd_pid);
memset(&signal_value, 0, sizeof(signal_value));
/* TODO: Arrange for a slightly less brutal option? */
if(sigqueue(sbd_pid, SIGKILL, signal_value) < 0) {
crm_perror(LOG_EMERG, "Cannot signal SBD(%d) to terminate", sbd_pid);
pcmk_panic_local();
}
if(ppid > 1) {
/* child daemon */
exit(pcmk_err_panic);
} else {
/* pacemakerd or orphan child */
exit(DAEMON_RESPAWN_STOP);
}
}
void
pcmk_panic(const char *origin)
{
static struct qb_log_callsite *panic_cs = NULL;
if (panic_cs == NULL) {
panic_cs = qb_log_callsite_get(__func__, __FILE__, "panic-delay", LOG_TRACE, __LINE__, crm_trace_nonlog);
}
/* Ensure sbd_pid is set */
(void)pcmk_locate_sbd();
if (panic_cs && panic_cs->targets) {
/* getppid() == 1 means our original parent no longer exists */
do_crm_log_always(LOG_EMERG,
"Shutting down instead of panicking the node: origin=%s, sbd=%d, parent=%d",
origin, sbd_pid, getppid());
crm_exit(DAEMON_RESPAWN_STOP);
return;
}
if(sbd_pid > 1) {
do_crm_log_always(LOG_EMERG, "Signaling sbd(%d) to panic the system: %s", sbd_pid, origin);
pcmk_panic_sbd();
} else {
do_crm_log_always(LOG_EMERG, "Panicking the system directly: %s", origin);
pcmk_panic_local();
}
}
pid_t
pcmk_locate_sbd(void)
{
char *pidfile = NULL;
char *sbd_path = NULL;
if(sbd_pid > 1) {
return sbd_pid;
}
/* Look for the pid file */
pidfile = crm_strdup_printf("%s/sbd.pid", HA_STATE_DIR);
sbd_path = crm_strdup_printf("%s/sbd", SBIN_DIR);
/* Read the pid file */
CRM_ASSERT(pidfile);
sbd_pid = crm_pidfile_inuse(pidfile, 0, sbd_path);
if(sbd_pid > 0) {
crm_trace("SBD detected at pid=%d (file)", sbd_pid);
} else {
/* Fall back to /proc for systems that support it */
sbd_pid = crm_procfs_pid_of("sbd");
crm_trace("SBD detected at pid=%d (proc)", sbd_pid);
}
if(sbd_pid < 0) {
sbd_pid = 0;
crm_trace("SBD not detected");
}
free(pidfile);
free(sbd_path);
return sbd_pid;
}
long
crm_get_sbd_timeout(void)
{
const char *env_value = getenv("SBD_WATCHDOG_TIMEOUT");
long sbd_timeout = crm_get_msec(env_value);
return sbd_timeout;
}
gboolean
check_sbd_timeout(const char *value)
{
- long sbd_timeout = crm_get_sbd_timeout();
- long st_timeout = crm_get_msec(value);
+ long st_timeout = value? crm_get_msec(value) : 0;
- if(value == NULL || st_timeout <= 0) {
- crm_notice("Watchdog may be enabled but stonith-watchdog-timeout is disabled: %s", value);
+ if (st_timeout <= 0) {
+ crm_debug("Watchdog may be enabled but stonith-watchdog-timeout is disabled (%s)",
+ value? value : "default");
- } else if(pcmk_locate_sbd() == 0) {
- do_crm_log_always(LOG_EMERG, "Shutting down: stonith-watchdog-timeout is configured (%ldms) but SBD is not active", st_timeout);
+ } else if (pcmk_locate_sbd() == 0) {
+ do_crm_log_always(LOG_EMERG,
+ "Shutting down: stonith-watchdog-timeout configured (%s) but SBD not active",
+ value);
crm_exit(DAEMON_RESPAWN_STOP);
return FALSE;
- } else if(st_timeout < sbd_timeout) {
- do_crm_log_always(LOG_EMERG, "Shutting down: stonith-watchdog-timeout (%ldms) is too short (must be greater than %ldms)",
- st_timeout, sbd_timeout);
- crm_exit(DAEMON_RESPAWN_STOP);
- return FALSE;
+ } else {
+ long sbd_timeout = crm_get_sbd_timeout();
+
+ if (st_timeout < sbd_timeout) {
+ do_crm_log_always(LOG_EMERG,
+ "Shutting down: stonith-watchdog-timeout (%s) too short (must be >%ldms)",
+ value, sbd_timeout);
+ crm_exit(DAEMON_RESPAWN_STOP);
+ return FALSE;
+ }
+ crm_info("Watchdog configured with stonith-watchdog-timeout %s and SBD timeout %ldms",
+ value, sbd_timeout);
}
-
- crm_info("Watchdog functionality is consistent: %s delay exceeds timeout of %ldms", value, sbd_timeout);
return TRUE;
}