Now, we can not only cleanup monitor data, logs and crashes but the disks too. As part of the cleanupPolicy CR spec, we have a new setting called sanitizeDisk which holds more details: * method: indicates if the entire disk should be sanitized or simply ceph's metadata. Possible choices are 'complete' or 'quick' (default) * dataSource: indicate where to get random bytes from to write on the disk. Possible choices are 'zero' (default) or 'random' Using random sources will consume entropy from the system and will take much more time then the zero source * iteration: overwrite N times instead of the default (1). Takes an integer value See the documentation for more details. Signed-off-by: Sébastien Han <seb@redhat.com>
190 lines
5.6 KiB
Go
190 lines
5.6 KiB
Go
/*
|
||
Copyright 2020 The Rook Authors. All rights reserved.
|
||
|
||
Licensed under the Apache License, Version 2.0 (the "License");
|
||
you may not use this file except in compliance with the License.
|
||
You may obtain a copy of the License at
|
||
|
||
http://www.apache.org/licenses/LICENSE-2.0
|
||
|
||
Unless required by applicable law or agreed to in writing, software
|
||
distributed under the License is distributed on an "AS IS" BASIS,
|
||
WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
|
||
See the License for the specific language governing permissions and
|
||
limitations under the License.
|
||
*/
|
||
|
||
package cleanup
|
||
|
||
import (
|
||
"fmt"
|
||
"strconv"
|
||
"strings"
|
||
"sync"
|
||
|
||
"github.com/coreos/pkg/capnslog"
|
||
cephv1 "github.com/rook/rook/pkg/apis/ceph.rook.io/v1"
|
||
"github.com/rook/rook/pkg/clusterd"
|
||
"github.com/rook/rook/pkg/daemon/ceph/client"
|
||
"github.com/rook/rook/pkg/daemon/ceph/osd"
|
||
oposd "github.com/rook/rook/pkg/operator/ceph/cluster/osd"
|
||
)
|
||
|
||
const (
|
||
shredUtility = "shred"
|
||
shredBS = "10M" // Shred's block size
|
||
)
|
||
|
||
var (
|
||
logger = capnslog.NewPackageLogger("github.com/rook/rook", "cleanup")
|
||
)
|
||
|
||
// DiskSanitizer is simple struct to old the context to execute the commands
|
||
type DiskSanitizer struct {
|
||
context *clusterd.Context
|
||
clusterInfo *client.ClusterInfo
|
||
sanitizeDisksSpec *cephv1.SanitizeDisksSpec
|
||
}
|
||
|
||
// NewDiskSanitizer is function that returns a full filled DiskSanitizer object
|
||
func NewDiskSanitizer(context *clusterd.Context, clusterInfo *client.ClusterInfo, sanitizeDisksSpec *cephv1.SanitizeDisksSpec) *DiskSanitizer {
|
||
return &DiskSanitizer{
|
||
context: context,
|
||
clusterInfo: clusterInfo,
|
||
sanitizeDisksSpec: sanitizeDisksSpec,
|
||
}
|
||
}
|
||
|
||
// StartSanitizeDisks main entrypoint of the cleanup package
|
||
func (s *DiskSanitizer) StartSanitizeDisks() {
|
||
// LVM based OSDs
|
||
osdLVMList, err := osd.GetCephVolumeLVMOSDs(s.context, s.clusterInfo, s.clusterInfo.FSID, "", false, false)
|
||
if err != nil {
|
||
logger.Errorf("failed to list lvm osd(s). %v", err)
|
||
} else {
|
||
// Start the sanitizing sequence
|
||
s.sanitizeLVMDisk(osdLVMList)
|
||
}
|
||
|
||
// Raw based OSDs
|
||
osdRawList, err := osd.GetCephVolumeRawOSDs(s.context, s.clusterInfo, s.clusterInfo.FSID, "", "", false)
|
||
if err != nil {
|
||
logger.Errorf("failed to list raw osd(s). %v", err)
|
||
} else {
|
||
// Start the sanitizing sequence
|
||
s.sanitizeRawDisk(osdRawList)
|
||
}
|
||
}
|
||
|
||
func (s *DiskSanitizer) sanitizeRawDisk(osdRawList []oposd.OSDInfo) {
|
||
// Initialize work group to wait for completion of all the go routine
|
||
var wg sync.WaitGroup
|
||
|
||
for _, osd := range osdRawList {
|
||
logger.Infof("sanitizing osd %d disk %q", osd.ID, osd.BlockPath)
|
||
|
||
// Increment the wait group counter
|
||
wg.Add(1)
|
||
|
||
// Put each sanitize in a go routine to speed things up
|
||
go s.executeSanitizeCommand(osd.BlockPath, &wg)
|
||
}
|
||
|
||
wg.Wait()
|
||
}
|
||
|
||
func (s *DiskSanitizer) sanitizeLVMDisk(osdLVMList []oposd.OSDInfo) {
|
||
// Initialize work group to wait for completion of all the go routine
|
||
var wg sync.WaitGroup
|
||
pvs := []string{}
|
||
|
||
for _, osd := range osdLVMList {
|
||
// Increment the wait group counter
|
||
wg.Add(1)
|
||
|
||
// Lookup the PV associated to the LV
|
||
pvs = append(pvs, s.returnPVDevice(osd.BlockPath)[0])
|
||
|
||
// run c-v
|
||
go s.wipeLVM(osd.ID, &wg)
|
||
}
|
||
// Wait for ceph-volume to finish before wiping the remaining Physical Volume data
|
||
wg.Wait()
|
||
|
||
var wg2 sync.WaitGroup
|
||
// // purge remaining LVM2 metadata from PV
|
||
for _, pv := range pvs {
|
||
wg2.Add(1)
|
||
go s.executeSanitizeCommand(pv, &wg2)
|
||
}
|
||
wg2.Wait()
|
||
}
|
||
|
||
func (s *DiskSanitizer) wipeLVM(osdID int, wg *sync.WaitGroup) {
|
||
// On return, notify the WaitGroup that we’re done
|
||
defer wg.Done()
|
||
|
||
output, err := s.context.Executor.ExecuteCommandWithCombinedOutput("stdbuf", "-oL", "ceph-volume", "lvm", "zap", "--osd-id", strconv.Itoa(osdID), "--destroy")
|
||
if err != nil {
|
||
logger.Errorf("failed to sanitize osd %d. %s. %v", osdID, output, err)
|
||
}
|
||
|
||
logger.Infof("%s\n", output)
|
||
logger.Infof("successfully sanitized lvm osd %d", osdID)
|
||
}
|
||
|
||
func (s *DiskSanitizer) returnPVDevice(disk string) []string {
|
||
output, err := s.context.Executor.ExecuteCommandWithOutput("lvs", disk, "-o", "seg_pe_ranges", "--noheadings")
|
||
if err != nil {
|
||
logger.Errorf("failed to execute lvs command. %v", err)
|
||
return []string{}
|
||
}
|
||
|
||
logger.Infof("output: %s", output)
|
||
return strings.Split(output, ":")
|
||
}
|
||
|
||
func (s *DiskSanitizer) buildDataSource() string {
|
||
return fmt.Sprintf("/dev/%s", s.sanitizeDisksSpec.DataSource.String())
|
||
}
|
||
|
||
func (s *DiskSanitizer) buildShredArgs(disk string) []string {
|
||
var shredArgs []string
|
||
|
||
// If data source is not zero, then let's add zeros at the end of the pass
|
||
if s.sanitizeDisksSpec.DataSource != cephv1.SanitizeDataSourceZero {
|
||
shredArgs = append(shredArgs, "--zero")
|
||
}
|
||
|
||
// If this is a quick pass let's just overwrite the first 10MB
|
||
if s.sanitizeDisksSpec.Method == cephv1.SanitizeMethodQuick {
|
||
shredArgs = append(shredArgs, fmt.Sprintf("--size=%s", shredBS))
|
||
}
|
||
|
||
// If the data source for randomness is zero
|
||
if s.sanitizeDisksSpec.DataSource == cephv1.SanitizeDataSourceZero {
|
||
shredArgs = append(shredArgs, fmt.Sprintf("--random-source=%s", s.buildDataSource()))
|
||
}
|
||
|
||
shredArgs = append(shredArgs, []string{
|
||
"--force",
|
||
"--verbose",
|
||
fmt.Sprintf("--iterations=%s", strconv.Itoa(int(s.sanitizeDisksSpec.Iteration))),
|
||
disk}...)
|
||
|
||
return shredArgs
|
||
}
|
||
|
||
func (s *DiskSanitizer) executeSanitizeCommand(disk string, wg *sync.WaitGroup) {
|
||
// On return, notify the WaitGroup that we’re done
|
||
defer wg.Done()
|
||
|
||
output, err := s.context.Executor.ExecuteCommandWithCombinedOutput(shredUtility, s.buildShredArgs(disk)...)
|
||
if err != nil {
|
||
logger.Errorf("failed to sanitize osd disk %q. %s. %v", disk, output, err)
|
||
}
|
||
|
||
logger.Infof("%s\n", output)
|
||
logger.Infof("successfully sanitized osd disk %q", disk)
|
||
}
|