Statistics
| Branch: | Tag: | Revision:

root / lib / locking.py @ 7260cfbe

History | View | Annotate | Download (39.5 kB)

1
#
2
#
3

    
4
# Copyright (C) 2006, 2007 Google Inc.
5
#
6
# This program is free software; you can redistribute it and/or modify
7
# it under the terms of the GNU General Public License as published by
8
# the Free Software Foundation; either version 2 of the License, or
9
# (at your option) any later version.
10
#
11
# This program is distributed in the hope that it will be useful, but
12
# WITHOUT ANY WARRANTY; without even the implied warranty of
13
# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the GNU
14
# General Public License for more details.
15
#
16
# You should have received a copy of the GNU General Public License
17
# along with this program; if not, write to the Free Software
18
# Foundation, Inc., 51 Franklin Street, Fifth Floor, Boston, MA
19
# 02110-1301, USA.
20

    
21
"""Module implementing the Ganeti locking code."""
22

    
23
# pylint: disable-msg=W0212
24

    
25
# W0212 since e.g. LockSet methods use (a lot) the internals of
26
# SharedLock
27

    
28
import os
29
import select
30
import threading
31
import time
32
import errno
33

    
34
from ganeti import errors
35
from ganeti import utils
36

    
37

    
38
def ssynchronized(lock, shared=0):
39
  """Shared Synchronization decorator.
40

41
  Calls the function holding the given lock, either in exclusive or shared
42
  mode. It requires the passed lock to be a SharedLock (or support its
43
  semantics).
44

45
  """
46
  def wrap(fn):
47
    def sync_function(*args, **kwargs):
48
      lock.acquire(shared=shared)
49
      try:
50
        return fn(*args, **kwargs)
51
      finally:
52
        lock.release()
53
    return sync_function
54
  return wrap
55

    
56

    
57
class RunningTimeout(object):
58
  """Class to calculate remaining timeout when doing several operations.
59

60
  """
61
  __slots__ = [
62
    "_allow_negative",
63
    "_start_time",
64
    "_time_fn",
65
    "_timeout",
66
    ]
67

    
68
  def __init__(self, timeout, allow_negative, _time_fn=time.time):
69
    """Initializes this class.
70

71
    @type timeout: float
72
    @param timeout: Timeout duration
73
    @type allow_negative: bool
74
    @param allow_negative: Whether to return values below zero
75
    @param _time_fn: Time function for unittests
76

77
    """
78
    object.__init__(self)
79

    
80
    if timeout is not None and timeout < 0.0:
81
      raise ValueError("Timeout must not be negative")
82

    
83
    self._timeout = timeout
84
    self._allow_negative = allow_negative
85
    self._time_fn = _time_fn
86

    
87
    self._start_time = None
88

    
89
  def Remaining(self):
90
    """Returns the remaining timeout.
91

92
    """
93
    if self._timeout is None:
94
      return None
95

    
96
    # Get start time on first calculation
97
    if self._start_time is None:
98
      self._start_time = self._time_fn()
99

    
100
    # Calculate remaining time
101
    remaining_timeout = self._start_time + self._timeout - self._time_fn()
102

    
103
    if not self._allow_negative:
104
      # Ensure timeout is always >= 0
105
      return max(0.0, remaining_timeout)
106

    
107
    return remaining_timeout
108

    
109

    
110
class _SingleNotifyPipeConditionWaiter(object):
111
  """Helper class for SingleNotifyPipeCondition
112

113
  """
114
  __slots__ = [
115
    "_fd",
116
    "_poller",
117
    ]
118

    
119
  def __init__(self, poller, fd):
120
    """Constructor for _SingleNotifyPipeConditionWaiter
121

122
    @type poller: select.poll
123
    @param poller: Poller object
124
    @type fd: int
125
    @param fd: File descriptor to wait for
126

127
    """
128
    object.__init__(self)
129
    self._poller = poller
130
    self._fd = fd
131

    
132
  def __call__(self, timeout):
133
    """Wait for something to happen on the pipe.
134

135
    @type timeout: float or None
136
    @param timeout: Timeout for waiting (can be None)
137

138
    """
139
    running_timeout = RunningTimeout(timeout, True)
140

    
141
    while True:
142
      remaining_time = running_timeout.Remaining()
143

    
144
      if remaining_time is not None and remaining_time < 0.0:
145
        break
146

    
147
      try:
148
        result = self._poller.poll(remaining_time)
149
      except EnvironmentError, err:
150
        if err.errno != errno.EINTR:
151
          raise
152
        result = None
153

    
154
      # Check whether we were notified
155
      if result and result[0][0] == self._fd:
156
        break
157

    
158

    
159
class _BaseCondition(object):
160
  """Base class containing common code for conditions.
161

162
  Some of this code is taken from python's threading module.
163

164
  """
165
  __slots__ = [
166
    "_lock",
167
    "acquire",
168
    "release",
169
    ]
170

    
171
  def __init__(self, lock):
172
    """Constructor for _BaseCondition.
173

174
    @type lock: threading.Lock
175
    @param lock: condition base lock
176

177
    """
178
    object.__init__(self)
179

    
180
    # Recursive locks are not supported
181
    assert not hasattr(lock, "_acquire_restore")
182
    assert not hasattr(lock, "_release_save")
183

    
184
    self._lock = lock
185

    
186
    # Export the lock's acquire() and release() methods
187
    self.acquire = lock.acquire
188
    self.release = lock.release
189

    
190
  def _is_owned(self):
191
    """Check whether lock is owned by current thread.
192

193
    """
194
    if self._lock.acquire(0):
195
      self._lock.release()
196
      return False
197

    
198
    return True
199

    
200
  def _check_owned(self):
201
    """Raise an exception if the current thread doesn't own the lock.
202

203
    """
204
    if not self._is_owned():
205
      raise RuntimeError("cannot work with un-aquired lock")
206

    
207

    
208
class SingleNotifyPipeCondition(_BaseCondition):
209
  """Condition which can only be notified once.
210

211
  This condition class uses pipes and poll, internally, to be able to wait for
212
  notification with a timeout, without resorting to polling. It is almost
213
  compatible with Python's threading.Condition, with the following differences:
214
    - notifyAll can only be called once, and no wait can happen after that
215
    - notify is not supported, only notifyAll
216

217
  """
218

    
219
  __slots__ = _BaseCondition.__slots__ + [
220
    "_poller",
221
    "_read_fd",
222
    "_write_fd",
223
    "_nwaiters",
224
    "_notified",
225
    ]
226

    
227
  _waiter_class = _SingleNotifyPipeConditionWaiter
228

    
229
  def __init__(self, lock):
230
    """Constructor for SingleNotifyPipeCondition
231

232
    """
233
    _BaseCondition.__init__(self, lock)
234
    self._nwaiters = 0
235
    self._notified = False
236
    self._read_fd = None
237
    self._write_fd = None
238
    self._poller = None
239

    
240
  def _check_unnotified(self):
241
    """Throws an exception if already notified.
242

243
    """
244
    if self._notified:
245
      raise RuntimeError("cannot use already notified condition")
246

    
247
  def _Cleanup(self):
248
    """Cleanup open file descriptors, if any.
249

250
    """
251
    if self._read_fd is not None:
252
      os.close(self._read_fd)
253
      self._read_fd = None
254

    
255
    if self._write_fd is not None:
256
      os.close(self._write_fd)
257
      self._write_fd = None
258
    self._poller = None
259

    
260
  def wait(self, timeout=None):
261
    """Wait for a notification.
262

263
    @type timeout: float or None
264
    @param timeout: Waiting timeout (can be None)
265

266
    """
267
    self._check_owned()
268
    self._check_unnotified()
269

    
270
    self._nwaiters += 1
271
    try:
272
      if self._poller is None:
273
        (self._read_fd, self._write_fd) = os.pipe()
274
        self._poller = select.poll()
275
        self._poller.register(self._read_fd, select.POLLHUP)
276

    
277
      wait_fn = self._waiter_class(self._poller, self._read_fd)
278
      self.release()
279
      try:
280
        # Wait for notification
281
        wait_fn(timeout)
282
      finally:
283
        # Re-acquire lock
284
        self.acquire()
285
    finally:
286
      self._nwaiters -= 1
287
      if self._nwaiters == 0:
288
        self._Cleanup()
289

    
290
  def notifyAll(self): # pylint: disable-msg=C0103
291
    """Close the writing side of the pipe to notify all waiters.
292

293
    """
294
    self._check_owned()
295
    self._check_unnotified()
296
    self._notified = True
297
    if self._write_fd is not None:
298
      os.close(self._write_fd)
299
      self._write_fd = None
300

    
301

    
302
class PipeCondition(_BaseCondition):
303
  """Group-only non-polling condition with counters.
304

305
  This condition class uses pipes and poll, internally, to be able to wait for
306
  notification with a timeout, without resorting to polling. It is almost
307
  compatible with Python's threading.Condition, but only supports notifyAll and
308
  non-recursive locks. As an additional features it's able to report whether
309
  there are any waiting threads.
310

311
  """
312
  __slots__ = _BaseCondition.__slots__ + [
313
    "_nwaiters",
314
    "_single_condition",
315
    ]
316

    
317
  _single_condition_class = SingleNotifyPipeCondition
318

    
319
  def __init__(self, lock):
320
    """Initializes this class.
321

322
    """
323
    _BaseCondition.__init__(self, lock)
324
    self._nwaiters = 0
325
    self._single_condition = self._single_condition_class(self._lock)
326

    
327
  def wait(self, timeout=None):
328
    """Wait for a notification.
329

330
    @type timeout: float or None
331
    @param timeout: Waiting timeout (can be None)
332

333
    """
334
    self._check_owned()
335

    
336
    # Keep local reference to the pipe. It could be replaced by another thread
337
    # notifying while we're waiting.
338
    my_condition = self._single_condition
339

    
340
    assert self._nwaiters >= 0
341
    self._nwaiters += 1
342
    try:
343
      my_condition.wait(timeout)
344
    finally:
345
      assert self._nwaiters > 0
346
      self._nwaiters -= 1
347

    
348
  def notifyAll(self): # pylint: disable-msg=C0103
349
    """Notify all currently waiting threads.
350

351
    """
352
    self._check_owned()
353
    self._single_condition.notifyAll()
354
    self._single_condition = self._single_condition_class(self._lock)
355

    
356
  def has_waiting(self):
357
    """Returns whether there are active waiters.
358

359
    """
360
    self._check_owned()
361

    
362
    return bool(self._nwaiters)
363

    
364

    
365
class _CountingCondition(object):
366
  """Wrapper for Python's built-in threading.Condition class.
367

368
  This wrapper keeps a count of active waiters. We can't access the internal
369
  "__waiters" attribute of threading.Condition because it's not thread-safe.
370

371
  """
372
  __slots__ = [
373
    "_cond",
374
    "_nwaiters",
375
    ]
376

    
377
  def __init__(self, lock):
378
    """Initializes this class.
379

380
    """
381
    object.__init__(self)
382
    self._cond = threading.Condition(lock=lock)
383
    self._nwaiters = 0
384

    
385
  def notifyAll(self): # pylint: disable-msg=C0103
386
    """Notifies the condition.
387

388
    """
389
    return self._cond.notifyAll()
390

    
391
  def wait(self, timeout=None):
392
    """Waits for the condition to be notified.
393

394
    @type timeout: float or None
395
    @param timeout: Waiting timeout (can be None)
396

397
    """
398
    assert self._nwaiters >= 0
399

    
400
    self._nwaiters += 1
401
    try:
402
      return self._cond.wait(timeout=timeout)
403
    finally:
404
      self._nwaiters -= 1
405

    
406
  def has_waiting(self):
407
    """Returns whether there are active waiters.
408

409
    """
410
    return bool(self._nwaiters)
411

    
412

    
413
class SharedLock(object):
414
  """Implements a shared lock.
415

416
  Multiple threads can acquire the lock in a shared way, calling
417
  acquire_shared().  In order to acquire the lock in an exclusive way threads
418
  can call acquire_exclusive().
419

420
  The lock prevents starvation but does not guarantee that threads will acquire
421
  the shared lock in the order they queued for it, just that they will
422
  eventually do so.
423

424
  """
425
  __slots__ = [
426
    "__active_shr_c",
427
    "__inactive_shr_c",
428
    "__deleted",
429
    "__exc",
430
    "__lock",
431
    "__pending",
432
    "__shr",
433
    ]
434

    
435
  __condition_class = PipeCondition
436

    
437
  def __init__(self):
438
    """Construct a new SharedLock.
439

440
    """
441
    object.__init__(self)
442

    
443
    # Internal lock
444
    self.__lock = threading.Lock()
445

    
446
    # Queue containing waiting acquires
447
    self.__pending = []
448

    
449
    # Active and inactive conditions for shared locks
450
    self.__active_shr_c = self.__condition_class(self.__lock)
451
    self.__inactive_shr_c = self.__condition_class(self.__lock)
452

    
453
    # Current lock holders
454
    self.__shr = set()
455
    self.__exc = None
456

    
457
    # is this lock in the deleted state?
458
    self.__deleted = False
459

    
460
  def __check_deleted(self):
461
    """Raises an exception if the lock has been deleted.
462

463
    """
464
    if self.__deleted:
465
      raise errors.LockError("Deleted lock")
466

    
467
  def __is_sharer(self):
468
    """Is the current thread sharing the lock at this time?
469

470
    """
471
    return threading.currentThread() in self.__shr
472

    
473
  def __is_exclusive(self):
474
    """Is the current thread holding the lock exclusively at this time?
475

476
    """
477
    return threading.currentThread() == self.__exc
478

    
479
  def __is_owned(self, shared=-1):
480
    """Is the current thread somehow owning the lock at this time?
481

482
    This is a private version of the function, which presumes you're holding
483
    the internal lock.
484

485
    """
486
    if shared < 0:
487
      return self.__is_sharer() or self.__is_exclusive()
488
    elif shared:
489
      return self.__is_sharer()
490
    else:
491
      return self.__is_exclusive()
492

    
493
  def _is_owned(self, shared=-1):
494
    """Is the current thread somehow owning the lock at this time?
495

496
    @param shared:
497
        - < 0: check for any type of ownership (default)
498
        - 0: check for exclusive ownership
499
        - > 0: check for shared ownership
500

501
    """
502
    self.__lock.acquire()
503
    try:
504
      return self.__is_owned(shared=shared)
505
    finally:
506
      self.__lock.release()
507

    
508
  def _count_pending(self):
509
    """Returns the number of pending acquires.
510

511
    @rtype: int
512

513
    """
514
    self.__lock.acquire()
515
    try:
516
      return len(self.__pending)
517
    finally:
518
      self.__lock.release()
519

    
520
  def __do_acquire(self, shared):
521
    """Actually acquire the lock.
522

523
    """
524
    if shared:
525
      self.__shr.add(threading.currentThread())
526
    else:
527
      self.__exc = threading.currentThread()
528

    
529
  def __can_acquire(self, shared):
530
    """Determine whether lock can be acquired.
531

532
    """
533
    if shared:
534
      return self.__exc is None
535
    else:
536
      return len(self.__shr) == 0 and self.__exc is None
537

    
538
  def __is_on_top(self, cond):
539
    """Checks whether the passed condition is on top of the queue.
540

541
    The caller must make sure the queue isn't empty.
542

543
    """
544
    return self.__pending[0] == cond
545

    
546
  def __acquire_unlocked(self, shared, timeout):
547
    """Acquire a shared lock.
548

549
    @param shared: whether to acquire in shared mode; by default an
550
        exclusive lock will be acquired
551
    @param timeout: maximum waiting time before giving up
552

553
    """
554
    self.__check_deleted()
555

    
556
    # We cannot acquire the lock if we already have it
557
    assert not self.__is_owned(), "double acquire() on a non-recursive lock"
558

    
559
    # Check whether someone else holds the lock or there are pending acquires.
560
    if not self.__pending and self.__can_acquire(shared):
561
      # Apparently not, can acquire lock directly.
562
      self.__do_acquire(shared)
563
      return True
564

    
565
    if shared:
566
      wait_condition = self.__active_shr_c
567

    
568
      # Check if we're not yet in the queue
569
      if wait_condition not in self.__pending:
570
        self.__pending.append(wait_condition)
571
    else:
572
      wait_condition = self.__condition_class(self.__lock)
573
      # Always add to queue
574
      self.__pending.append(wait_condition)
575

    
576
    try:
577
      # Wait until we become the topmost acquire in the queue or the timeout
578
      # expires.
579
      while not (self.__is_on_top(wait_condition) and
580
                 self.__can_acquire(shared)):
581
        # Wait for notification
582
        wait_condition.wait(timeout)
583
        self.__check_deleted()
584

    
585
        # A lot of code assumes blocking acquires always succeed. Loop
586
        # internally for that case.
587
        if timeout is not None:
588
          break
589

    
590
      if self.__is_on_top(wait_condition) and self.__can_acquire(shared):
591
        self.__do_acquire(shared)
592
        return True
593
    finally:
594
      # Remove condition from queue if there are no more waiters
595
      if not wait_condition.has_waiting() and not self.__deleted:
596
        self.__pending.remove(wait_condition)
597

    
598
    return False
599

    
600
  def acquire(self, shared=0, timeout=None, test_notify=None):
601
    """Acquire a shared lock.
602

603
    @type shared: int
604
    @param shared: whether to acquire in shared mode; by default an
605
        exclusive lock will be acquired
606
    @type timeout: float
607
    @param timeout: maximum waiting time before giving up
608
    @type test_notify: callable or None
609
    @param test_notify: Special callback function for unittesting
610

611
    """
612
    self.__lock.acquire()
613
    try:
614
      # We already got the lock, notify now
615
      if __debug__ and callable(test_notify):
616
        test_notify()
617

    
618
      return self.__acquire_unlocked(shared, timeout)
619
    finally:
620
      self.__lock.release()
621

    
622
  def release(self):
623
    """Release a Shared Lock.
624

625
    You must have acquired the lock, either in shared or in exclusive mode,
626
    before calling this function.
627

628
    """
629
    self.__lock.acquire()
630
    try:
631
      assert self.__is_exclusive() or self.__is_sharer(), \
632
        "Cannot release non-owned lock"
633

    
634
      # Autodetect release type
635
      if self.__is_exclusive():
636
        self.__exc = None
637
      else:
638
        self.__shr.remove(threading.currentThread())
639

    
640
      # Notify topmost condition in queue
641
      if self.__pending:
642
        first_condition = self.__pending[0]
643
        first_condition.notifyAll()
644

    
645
        if first_condition == self.__active_shr_c:
646
          self.__active_shr_c = self.__inactive_shr_c
647
          self.__inactive_shr_c = first_condition
648

    
649
    finally:
650
      self.__lock.release()
651

    
652
  def delete(self, timeout=None):
653
    """Delete a Shared Lock.
654

655
    This operation will declare the lock for removal. First the lock will be
656
    acquired in exclusive mode if you don't already own it, then the lock
657
    will be put in a state where any future and pending acquire() fail.
658

659
    @type timeout: float
660
    @param timeout: maximum waiting time before giving up
661

662
    """
663
    self.__lock.acquire()
664
    try:
665
      assert not self.__is_sharer(), "Cannot delete() a lock while sharing it"
666

    
667
      self.__check_deleted()
668

    
669
      # The caller is allowed to hold the lock exclusively already.
670
      acquired = self.__is_exclusive()
671

    
672
      if not acquired:
673
        acquired = self.__acquire_unlocked(0, timeout)
674

    
675
        assert self.__is_exclusive() and not self.__is_sharer(), \
676
          "Lock wasn't acquired in exclusive mode"
677

    
678
      if acquired:
679
        self.__deleted = True
680
        self.__exc = None
681

    
682
        # Notify all acquires. They'll throw an error.
683
        while self.__pending:
684
          self.__pending.pop().notifyAll()
685

    
686
      return acquired
687
    finally:
688
      self.__lock.release()
689

    
690

    
691
# Whenever we want to acquire a full LockSet we pass None as the value
692
# to acquire.  Hide this behind this nicely named constant.
693
ALL_SET = None
694

    
695

    
696
class _AcquireTimeout(Exception):
697
  """Internal exception to abort an acquire on a timeout.
698

699
  """
700

    
701

    
702
class LockSet:
703
  """Implements a set of locks.
704

705
  This abstraction implements a set of shared locks for the same resource type,
706
  distinguished by name. The user can lock a subset of the resources and the
707
  LockSet will take care of acquiring the locks always in the same order, thus
708
  preventing deadlock.
709

710
  All the locks needed in the same set must be acquired together, though.
711

712
  """
713
  def __init__(self, members=None):
714
    """Constructs a new LockSet.
715

716
    @param members: initial members of the set
717

718
    """
719
    # Used internally to guarantee coherency.
720
    self.__lock = SharedLock()
721

    
722
    # The lockdict indexes the relationship name -> lock
723
    # The order-of-locking is implied by the alphabetical order of names
724
    self.__lockdict = {}
725

    
726
    if members is not None:
727
      for name in members:
728
        self.__lockdict[name] = SharedLock()
729

    
730
    # The owner dict contains the set of locks each thread owns. For
731
    # performance each thread can access its own key without a global lock on
732
    # this structure. It is paramount though that *no* other type of access is
733
    # done to this structure (eg. no looping over its keys). *_owner helper
734
    # function are defined to guarantee access is correct, but in general never
735
    # do anything different than __owners[threading.currentThread()], or there
736
    # will be trouble.
737
    self.__owners = {}
738

    
739
  def _is_owned(self):
740
    """Is the current thread a current level owner?"""
741
    return threading.currentThread() in self.__owners
742

    
743
  def _add_owned(self, name=None):
744
    """Note the current thread owns the given lock"""
745
    if name is None:
746
      if not self._is_owned():
747
        self.__owners[threading.currentThread()] = set()
748
    else:
749
      if self._is_owned():
750
        self.__owners[threading.currentThread()].add(name)
751
      else:
752
        self.__owners[threading.currentThread()] = set([name])
753

    
754
  def _del_owned(self, name=None):
755
    """Note the current thread owns the given lock"""
756

    
757
    assert not (name is None and self.__lock._is_owned()), \
758
           "Cannot hold internal lock when deleting owner status"
759

    
760
    if name is not None:
761
      self.__owners[threading.currentThread()].remove(name)
762

    
763
    # Only remove the key if we don't hold the set-lock as well
764
    if (not self.__lock._is_owned() and
765
        not self.__owners[threading.currentThread()]):
766
      del self.__owners[threading.currentThread()]
767

    
768
  def _list_owned(self):
769
    """Get the set of resource names owned by the current thread"""
770
    if self._is_owned():
771
      return self.__owners[threading.currentThread()].copy()
772
    else:
773
      return set()
774

    
775
  def _release_and_delete_owned(self):
776
    """Release and delete all resources owned by the current thread"""
777
    for lname in self._list_owned():
778
      self.__lockdict[lname].release()
779
      self._del_owned(name=lname)
780

    
781
  def __names(self):
782
    """Return the current set of names.
783

784
    Only call this function while holding __lock and don't iterate on the
785
    result after releasing the lock.
786

787
    """
788
    return self.__lockdict.keys()
789

    
790
  def _names(self):
791
    """Return a copy of the current set of elements.
792

793
    Used only for debugging purposes.
794

795
    """
796
    # If we don't already own the set-level lock acquired
797
    # we'll get it and note we need to release it later.
798
    release_lock = False
799
    if not self.__lock._is_owned():
800
      release_lock = True
801
      self.__lock.acquire(shared=1)
802
    try:
803
      result = self.__names()
804
    finally:
805
      if release_lock:
806
        self.__lock.release()
807
    return set(result)
808

    
809
  def acquire(self, names, timeout=None, shared=0, test_notify=None):
810
    """Acquire a set of resource locks.
811

812
    @param names: the names of the locks which shall be acquired
813
        (special lock names, or instance/node names)
814
    @param shared: whether to acquire in shared mode; by default an
815
        exclusive lock will be acquired
816
    @type timeout: float or None
817
    @param timeout: Maximum time to acquire all locks
818
    @type test_notify: callable or None
819
    @param test_notify: Special callback function for unittesting
820

821
    @return: Set of all locks successfully acquired or None in case of timeout
822

823
    @raise errors.LockError: when any lock we try to acquire has
824
        been deleted before we succeed. In this case none of the
825
        locks requested will be acquired.
826

827
    """
828
    assert timeout is None or timeout >= 0.0
829

    
830
    # Check we don't already own locks at this level
831
    assert not self._is_owned(), "Cannot acquire locks in the same set twice"
832

    
833
    # We need to keep track of how long we spent waiting for a lock. The
834
    # timeout passed to this function is over all lock acquires.
835
    running_timeout = RunningTimeout(timeout, False)
836

    
837
    try:
838
      if names is not None:
839
        # Support passing in a single resource to acquire rather than many
840
        if isinstance(names, basestring):
841
          names = [names]
842
        else:
843
          names = sorted(names)
844

    
845
        return self.__acquire_inner(names, False, shared,
846
                                    running_timeout.Remaining, test_notify)
847

    
848
      else:
849
        # If no names are given acquire the whole set by not letting new names
850
        # being added before we release, and getting the current list of names.
851
        # Some of them may then be deleted later, but we'll cope with this.
852
        #
853
        # We'd like to acquire this lock in a shared way, as it's nice if
854
        # everybody else can use the instances at the same time. If are
855
        # acquiring them exclusively though they won't be able to do this
856
        # anyway, though, so we'll get the list lock exclusively as well in
857
        # order to be able to do add() on the set while owning it.
858
        if not self.__lock.acquire(shared=shared,
859
                                   timeout=running_timeout.Remaining()):
860
          raise _AcquireTimeout()
861
        try:
862
          # note we own the set-lock
863
          self._add_owned()
864

    
865
          return self.__acquire_inner(self.__names(), True, shared,
866
                                      running_timeout.Remaining, test_notify)
867
        except:
868
          # We shouldn't have problems adding the lock to the owners list, but
869
          # if we did we'll try to release this lock and re-raise exception.
870
          # Of course something is going to be really wrong, after this.
871
          self.__lock.release()
872
          self._del_owned()
873
          raise
874

    
875
    except _AcquireTimeout:
876
      return None
877

    
878
  def __acquire_inner(self, names, want_all, shared, timeout_fn, test_notify):
879
    """Inner logic for acquiring a number of locks.
880

881
    @param names: Names of the locks to be acquired
882
    @param want_all: Whether all locks in the set should be acquired
883
    @param shared: Whether to acquire in shared mode
884
    @param timeout_fn: Function returning remaining timeout
885
    @param test_notify: Special callback function for unittesting
886

887
    """
888
    acquire_list = []
889

    
890
    # First we look the locks up on __lockdict. We have no way of being sure
891
    # they will still be there after, but this makes it a lot faster should
892
    # just one of them be the already wrong
893
    for lname in utils.UniqueSequence(names):
894
      try:
895
        lock = self.__lockdict[lname] # raises KeyError if lock is not there
896
        acquire_list.append((lname, lock))
897
      except KeyError:
898
        if want_all:
899
          # We are acquiring all the set, it doesn't matter if this particular
900
          # element is not there anymore.
901
          continue
902

    
903
        raise errors.LockError("Non-existing lock in set (%s)" % lname)
904

    
905
    # This will hold the locknames we effectively acquired.
906
    acquired = set()
907

    
908
    try:
909
      # Now acquire_list contains a sorted list of resources and locks we
910
      # want.  In order to get them we loop on this (private) list and
911
      # acquire() them.  We gave no real guarantee they will still exist till
912
      # this is done but .acquire() itself is safe and will alert us if the
913
      # lock gets deleted.
914
      for (lname, lock) in acquire_list:
915
        if __debug__ and callable(test_notify):
916
          test_notify_fn = lambda: test_notify(lname)
917
        else:
918
          test_notify_fn = None
919

    
920
        timeout = timeout_fn()
921

    
922
        try:
923
          # raises LockError if the lock was deleted
924
          acq_success = lock.acquire(shared=shared, timeout=timeout,
925
                                     test_notify=test_notify_fn)
926
        except errors.LockError:
927
          if want_all:
928
            # We are acquiring all the set, it doesn't matter if this
929
            # particular element is not there anymore.
930
            continue
931

    
932
          raise errors.LockError("Non-existing lock in set (%s)" % lname)
933

    
934
        if not acq_success:
935
          # Couldn't get lock or timeout occurred
936
          if timeout is None:
937
            # This shouldn't happen as SharedLock.acquire(timeout=None) is
938
            # blocking.
939
            raise errors.LockError("Failed to get lock %s" % lname)
940

    
941
          raise _AcquireTimeout()
942

    
943
        try:
944
          # now the lock cannot be deleted, we have it!
945
          self._add_owned(name=lname)
946
          acquired.add(lname)
947

    
948
        except:
949
          # We shouldn't have problems adding the lock to the owners list, but
950
          # if we did we'll try to release this lock and re-raise exception.
951
          # Of course something is going to be really wrong after this.
952
          if lock._is_owned():
953
            lock.release()
954
          raise
955

    
956
    except:
957
      # Release all owned locks
958
      self._release_and_delete_owned()
959
      raise
960

    
961
    return acquired
962

    
963
  def release(self, names=None):
964
    """Release a set of resource locks, at the same level.
965

966
    You must have acquired the locks, either in shared or in exclusive mode,
967
    before releasing them.
968

969
    @param names: the names of the locks which shall be released
970
        (defaults to all the locks acquired at that level).
971

972
    """
973
    assert self._is_owned(), "release() on lock set while not owner"
974

    
975
    # Support passing in a single resource to release rather than many
976
    if isinstance(names, basestring):
977
      names = [names]
978

    
979
    if names is None:
980
      names = self._list_owned()
981
    else:
982
      names = set(names)
983
      assert self._list_owned().issuperset(names), (
984
               "release() on unheld resources %s" %
985
               names.difference(self._list_owned()))
986

    
987
    # First of all let's release the "all elements" lock, if set.
988
    # After this 'add' can work again
989
    if self.__lock._is_owned():
990
      self.__lock.release()
991
      self._del_owned()
992

    
993
    for lockname in names:
994
      # If we are sure the lock doesn't leave __lockdict without being
995
      # exclusively held we can do this...
996
      self.__lockdict[lockname].release()
997
      self._del_owned(name=lockname)
998

    
999
  def add(self, names, acquired=0, shared=0):
1000
    """Add a new set of elements to the set
1001

1002
    @param names: names of the new elements to add
1003
    @param acquired: pre-acquire the new resource?
1004
    @param shared: is the pre-acquisition shared?
1005

1006
    """
1007
    # Check we don't already own locks at this level
1008
    assert not self._is_owned() or self.__lock._is_owned(shared=0), \
1009
      "Cannot add locks if the set is only partially owned, or shared"
1010

    
1011
    # Support passing in a single resource to add rather than many
1012
    if isinstance(names, basestring):
1013
      names = [names]
1014

    
1015
    # If we don't already own the set-level lock acquired in an exclusive way
1016
    # we'll get it and note we need to release it later.
1017
    release_lock = False
1018
    if not self.__lock._is_owned():
1019
      release_lock = True
1020
      self.__lock.acquire()
1021

    
1022
    try:
1023
      invalid_names = set(self.__names()).intersection(names)
1024
      if invalid_names:
1025
        # This must be an explicit raise, not an assert, because assert is
1026
        # turned off when using optimization, and this can happen because of
1027
        # concurrency even if the user doesn't want it.
1028
        raise errors.LockError("duplicate add() (%s)" % invalid_names)
1029

    
1030
      for lockname in names:
1031
        lock = SharedLock()
1032

    
1033
        if acquired:
1034
          lock.acquire(shared=shared)
1035
          # now the lock cannot be deleted, we have it!
1036
          try:
1037
            self._add_owned(name=lockname)
1038
          except:
1039
            # We shouldn't have problems adding the lock to the owners list,
1040
            # but if we did we'll try to release this lock and re-raise
1041
            # exception.  Of course something is going to be really wrong,
1042
            # after this.  On the other hand the lock hasn't been added to the
1043
            # __lockdict yet so no other threads should be pending on it. This
1044
            # release is just a safety measure.
1045
            lock.release()
1046
            raise
1047

    
1048
        self.__lockdict[lockname] = lock
1049

    
1050
    finally:
1051
      # Only release __lock if we were not holding it previously.
1052
      if release_lock:
1053
        self.__lock.release()
1054

    
1055
    return True
1056

    
1057
  def remove(self, names):
1058
    """Remove elements from the lock set.
1059

1060
    You can either not hold anything in the lockset or already hold a superset
1061
    of the elements you want to delete, exclusively.
1062

1063
    @param names: names of the resource to remove.
1064

1065
    @return: a list of locks which we removed; the list is always
1066
        equal to the names list if we were holding all the locks
1067
        exclusively
1068

1069
    """
1070
    # Support passing in a single resource to remove rather than many
1071
    if isinstance(names, basestring):
1072
      names = [names]
1073

    
1074
    # If we own any subset of this lock it must be a superset of what we want
1075
    # to delete. The ownership must also be exclusive, but that will be checked
1076
    # by the lock itself.
1077
    assert not self._is_owned() or self._list_owned().issuperset(names), (
1078
      "remove() on acquired lockset while not owning all elements")
1079

    
1080
    removed = []
1081

    
1082
    for lname in names:
1083
      # Calling delete() acquires the lock exclusively if we don't already own
1084
      # it, and causes all pending and subsequent lock acquires to fail. It's
1085
      # fine to call it out of order because delete() also implies release(),
1086
      # and the assertion above guarantees that if we either already hold
1087
      # everything we want to delete, or we hold none.
1088
      try:
1089
        self.__lockdict[lname].delete()
1090
        removed.append(lname)
1091
      except (KeyError, errors.LockError):
1092
        # This cannot happen if we were already holding it, verify:
1093
        assert not self._is_owned(), "remove failed while holding lockset"
1094
      else:
1095
        # If no LockError was raised we are the ones who deleted the lock.
1096
        # This means we can safely remove it from lockdict, as any further or
1097
        # pending delete() or acquire() will fail (and nobody can have the lock
1098
        # since before our call to delete()).
1099
        #
1100
        # This is done in an else clause because if the exception was thrown
1101
        # it's the job of the one who actually deleted it.
1102
        del self.__lockdict[lname]
1103
        # And let's remove it from our private list if we owned it.
1104
        if self._is_owned():
1105
          self._del_owned(name=lname)
1106

    
1107
    return removed
1108

    
1109

    
1110
# Locking levels, must be acquired in increasing order.
1111
# Current rules are:
1112
#   - at level LEVEL_CLUSTER resides the Big Ganeti Lock (BGL) which must be
1113
#   acquired before performing any operation, either in shared or in exclusive
1114
#   mode. acquiring the BGL in exclusive mode is discouraged and should be
1115
#   avoided.
1116
#   - at levels LEVEL_NODE and LEVEL_INSTANCE reside node and instance locks.
1117
#   If you need more than one node, or more than one instance, acquire them at
1118
#   the same time.
1119
LEVEL_CLUSTER = 0
1120
LEVEL_INSTANCE = 1
1121
LEVEL_NODE = 2
1122

    
1123
LEVELS = [LEVEL_CLUSTER,
1124
          LEVEL_INSTANCE,
1125
          LEVEL_NODE]
1126

    
1127
# Lock levels which are modifiable
1128
LEVELS_MOD = [LEVEL_NODE, LEVEL_INSTANCE]
1129

    
1130
LEVEL_NAMES = {
1131
  LEVEL_CLUSTER: "cluster",
1132
  LEVEL_INSTANCE: "instance",
1133
  LEVEL_NODE: "node",
1134
  }
1135

    
1136
# Constant for the big ganeti lock
1137
BGL = 'BGL'
1138

    
1139

    
1140
class GanetiLockManager:
1141
  """The Ganeti Locking Library
1142

1143
  The purpose of this small library is to manage locking for ganeti clusters
1144
  in a central place, while at the same time doing dynamic checks against
1145
  possible deadlocks. It will also make it easier to transition to a different
1146
  lock type should we migrate away from python threads.
1147

1148
  """
1149
  _instance = None
1150

    
1151
  def __init__(self, nodes=None, instances=None):
1152
    """Constructs a new GanetiLockManager object.
1153

1154
    There should be only a GanetiLockManager object at any time, so this
1155
    function raises an error if this is not the case.
1156

1157
    @param nodes: list of node names
1158
    @param instances: list of instance names
1159

1160
    """
1161
    assert self.__class__._instance is None, \
1162
           "double GanetiLockManager instance"
1163

    
1164
    self.__class__._instance = self
1165

    
1166
    # The keyring contains all the locks, at their level and in the correct
1167
    # locking order.
1168
    self.__keyring = {
1169
      LEVEL_CLUSTER: LockSet([BGL]),
1170
      LEVEL_NODE: LockSet(nodes),
1171
      LEVEL_INSTANCE: LockSet(instances),
1172
    }
1173

    
1174
  def _names(self, level):
1175
    """List the lock names at the given level.
1176

1177
    This can be used for debugging/testing purposes.
1178

1179
    @param level: the level whose list of locks to get
1180

1181
    """
1182
    assert level in LEVELS, "Invalid locking level %s" % level
1183
    return self.__keyring[level]._names()
1184

    
1185
  def _is_owned(self, level):
1186
    """Check whether we are owning locks at the given level
1187

1188
    """
1189
    return self.__keyring[level]._is_owned()
1190

    
1191
  is_owned = _is_owned
1192

    
1193
  def _list_owned(self, level):
1194
    """Get the set of owned locks at the given level
1195

1196
    """
1197
    return self.__keyring[level]._list_owned()
1198

    
1199
  def _upper_owned(self, level):
1200
    """Check that we don't own any lock at a level greater than the given one.
1201

1202
    """
1203
    # This way of checking only works if LEVELS[i] = i, which we check for in
1204
    # the test cases.
1205
    return utils.any((self._is_owned(l) for l in LEVELS[level + 1:]))
1206

    
1207
  def _BGL_owned(self): # pylint: disable-msg=C0103
1208
    """Check if the current thread owns the BGL.
1209

1210
    Both an exclusive or a shared acquisition work.
1211

1212
    """
1213
    return BGL in self.__keyring[LEVEL_CLUSTER]._list_owned()
1214

    
1215
  @staticmethod
1216
  def _contains_BGL(level, names): # pylint: disable-msg=C0103
1217
    """Check if the level contains the BGL.
1218

1219
    Check if acting on the given level and set of names will change
1220
    the status of the Big Ganeti Lock.
1221

1222
    """
1223
    return level == LEVEL_CLUSTER and (names is None or BGL in names)
1224

    
1225
  def acquire(self, level, names, timeout=None, shared=0):
1226
    """Acquire a set of resource locks, at the same level.
1227

1228
    @param level: the level at which the locks shall be acquired;
1229
        it must be a member of LEVELS.
1230
    @param names: the names of the locks which shall be acquired
1231
        (special lock names, or instance/node names)
1232
    @param shared: whether to acquire in shared mode; by default
1233
        an exclusive lock will be acquired
1234
    @type timeout: float
1235
    @param timeout: Maximum time to acquire all locks
1236

1237
    """
1238
    assert level in LEVELS, "Invalid locking level %s" % level
1239

    
1240
    # Check that we are either acquiring the Big Ganeti Lock or we already own
1241
    # it. Some "legacy" opcodes need to be sure they are run non-concurrently
1242
    # so even if we've migrated we need to at least share the BGL to be
1243
    # compatible with them. Of course if we own the BGL exclusively there's no
1244
    # point in acquiring any other lock, unless perhaps we are half way through
1245
    # the migration of the current opcode.
1246
    assert (self._contains_BGL(level, names) or self._BGL_owned()), (
1247
            "You must own the Big Ganeti Lock before acquiring any other")
1248

    
1249
    # Check we don't own locks at the same or upper levels.
1250
    assert not self._upper_owned(level), ("Cannot acquire locks at a level"
1251
           " while owning some at a greater one")
1252

    
1253
    # Acquire the locks in the set.
1254
    return self.__keyring[level].acquire(names, shared=shared, timeout=timeout)
1255

    
1256
  def release(self, level, names=None):
1257
    """Release a set of resource locks, at the same level.
1258

1259
    You must have acquired the locks, either in shared or in exclusive
1260
    mode, before releasing them.
1261

1262
    @param level: the level at which the locks shall be released;
1263
        it must be a member of LEVELS
1264
    @param names: the names of the locks which shall be released
1265
        (defaults to all the locks acquired at that level)
1266

1267
    """
1268
    assert level in LEVELS, "Invalid locking level %s" % level
1269
    assert (not self._contains_BGL(level, names) or
1270
            not self._upper_owned(LEVEL_CLUSTER)), (
1271
            "Cannot release the Big Ganeti Lock while holding something"
1272
            " at upper levels (%r)" %
1273
            (utils.CommaJoin(["%s=%r" % (LEVEL_NAMES[i], self._list_owned(i))
1274
                              for i in self.__keyring.keys()]), ))
1275

    
1276
    # Release will complain if we don't own the locks already
1277
    return self.__keyring[level].release(names)
1278

    
1279
  def add(self, level, names, acquired=0, shared=0):
1280
    """Add locks at the specified level.
1281

1282
    @param level: the level at which the locks shall be added;
1283
        it must be a member of LEVELS_MOD.
1284
    @param names: names of the locks to acquire
1285
    @param acquired: whether to acquire the newly added locks
1286
    @param shared: whether the acquisition will be shared
1287

1288
    """
1289
    assert level in LEVELS_MOD, "Invalid or immutable level %s" % level
1290
    assert self._BGL_owned(), ("You must own the BGL before performing other"
1291
           " operations")
1292
    assert not self._upper_owned(level), ("Cannot add locks at a level"
1293
           " while owning some at a greater one")
1294
    return self.__keyring[level].add(names, acquired=acquired, shared=shared)
1295

    
1296
  def remove(self, level, names):
1297
    """Remove locks from the specified level.
1298

1299
    You must either already own the locks you are trying to remove
1300
    exclusively or not own any lock at an upper level.
1301

1302
    @param level: the level at which the locks shall be removed;
1303
        it must be a member of LEVELS_MOD
1304
    @param names: the names of the locks which shall be removed
1305
        (special lock names, or instance/node names)
1306

1307
    """
1308
    assert level in LEVELS_MOD, "Invalid or immutable level %s" % level
1309
    assert self._BGL_owned(), ("You must own the BGL before performing other"
1310
           " operations")
1311
    # Check we either own the level or don't own anything from here
1312
    # up. LockSet.remove() will check the case in which we don't own
1313
    # all the needed resources, or we have a shared ownership.
1314
    assert self._is_owned(level) or not self._upper_owned(level), (
1315
           "Cannot remove locks at a level while not owning it or"
1316
           " owning some at a greater one")
1317
    return self.__keyring[level].remove(names)