49fac6101d
a new firmware command. NVMe controllers may support up to 7 firmware slots for storing of different firmware revisions. This new firmware command supports firmware replacement (i.e. firmware download) with or without immediate activation, or activation of a previously stored firmware image. It also supports selection of the firmware slot during replacement operations, using IDENTIFY information from the controller to check that the specified slot is valid. Newly activated firmware does not take effect until the new controller reset, either via a reboot or separate 'nvmecontrol reset' command to the same controller. Submitted by: Joe Golio <joseph.golio@emc.com> Obtained from: EMC / Isilon Storage Division MFC after: 3 days
336 lines
8.4 KiB
C
336 lines
8.4 KiB
C
/*-
|
|
* Copyright (c) 2013 EMC Corp.
|
|
* All rights reserved.
|
|
*
|
|
* Copyright (C) 2012-2013 Intel Corporation
|
|
* All rights reserved.
|
|
*
|
|
* Redistribution and use in source and binary forms, with or without
|
|
* modification, are permitted provided that the following conditions
|
|
* are met:
|
|
* 1. Redistributions of source code must retain the above copyright
|
|
* notice, this list of conditions and the following disclaimer.
|
|
* 2. Redistributions in binary form must reproduce the above copyright
|
|
* notice, this list of conditions and the following disclaimer in the
|
|
* documentation and/or other materials provided with the distribution.
|
|
*
|
|
* THIS SOFTWARE IS PROVIDED BY THE AUTHOR AND CONTRIBUTORS ``AS IS'' AND
|
|
* ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE
|
|
* IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE
|
|
* ARE DISCLAIMED. IN NO EVENT SHALL THE AUTHOR OR CONTRIBUTORS BE LIABLE
|
|
* FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL
|
|
* DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS
|
|
* OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION)
|
|
* HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT
|
|
* LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY
|
|
* OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF
|
|
* SUCH DAMAGE.
|
|
*/
|
|
|
|
#include <sys/cdefs.h>
|
|
__FBSDID("$FreeBSD$");
|
|
|
|
#include <sys/param.h>
|
|
#include <sys/ioccom.h>
|
|
#include <sys/stat.h>
|
|
#include <sys/types.h>
|
|
|
|
#include <ctype.h>
|
|
#include <errno.h>
|
|
#include <fcntl.h>
|
|
#include <stdbool.h>
|
|
#include <stddef.h>
|
|
#include <stdio.h>
|
|
#include <stdlib.h>
|
|
#include <string.h>
|
|
#include <sysexits.h>
|
|
#include <unistd.h>
|
|
|
|
#include "nvmecontrol.h"
|
|
|
|
static int
|
|
slot_has_valid_firmware(int fd, int slot)
|
|
{
|
|
struct nvme_firmware_page fw;
|
|
int has_fw = false;
|
|
|
|
read_logpage(fd, NVME_LOG_FIRMWARE_SLOT,
|
|
NVME_GLOBAL_NAMESPACE_TAG, &fw, sizeof(fw));
|
|
|
|
if (fw.revision[slot-1] != 0LLU)
|
|
has_fw = true;
|
|
|
|
return (has_fw);
|
|
}
|
|
|
|
static void
|
|
read_image_file(char *path, void **buf, ssize_t *size)
|
|
{
|
|
struct stat sb;
|
|
int fd;
|
|
|
|
*size = 0;
|
|
*buf = NULL;
|
|
|
|
if ((fd = open(path, O_RDONLY)) < 0) {
|
|
fprintf(stderr, "Unable to open '%s'.\n", path);
|
|
exit(EX_IOERR);
|
|
}
|
|
if (fstat(fd, &sb) < 0) {
|
|
fprintf(stderr, "Unable to stat '%s'.\n", path);
|
|
close(fd);
|
|
exit(EX_IOERR);
|
|
}
|
|
if ((*buf = malloc(sb.st_size)) == NULL) {
|
|
fprintf(stderr, "Unable to malloc %zd bytes.\n",
|
|
sb.st_size);
|
|
close(fd);
|
|
exit(EX_IOERR);
|
|
}
|
|
if ((*size = read(fd, *buf, sb.st_size)) < 0) {
|
|
fprintf(stderr, "Error reading '%s', errno=%d (%s)\n",
|
|
path, errno, strerror(errno));
|
|
close(fd);
|
|
exit(EX_IOERR);
|
|
}
|
|
if (*size != sb.st_size) {
|
|
fprintf(stderr, "Error reading '%s', "
|
|
"read %zd bytes, requested %zd bytes\n",
|
|
path, *size, sb.st_size);
|
|
close(fd);
|
|
exit(EX_IOERR);
|
|
}
|
|
}
|
|
|
|
static void
|
|
update_firmware(int fd, uint8_t *payload, uint32_t payload_size)
|
|
{
|
|
struct nvme_pt_command pt;
|
|
size_t size;
|
|
void *chunk;
|
|
uint32_t off, resid;
|
|
int exit_code = EX_OK;
|
|
|
|
off = 0;
|
|
resid = payload_size;
|
|
|
|
if ((chunk = malloc((size_t)NVME_MAX_XFER_SIZE)) == NULL) {
|
|
printf("Unable to malloc %d bytes.\n", NVME_MAX_XFER_SIZE);
|
|
exit(EX_IOERR);
|
|
}
|
|
|
|
while (resid > 0) {
|
|
size = (resid >= NVME_MAX_XFER_SIZE) ?
|
|
NVME_MAX_XFER_SIZE : resid;
|
|
memcpy(chunk, payload + off, size);
|
|
|
|
memset(&pt, 0, sizeof(pt));
|
|
pt.cmd.opc = NVME_OPC_FIRMWARE_IMAGE_DOWNLOAD;
|
|
pt.cmd.cdw10 = (size / sizeof(uint32_t)) - 1;
|
|
pt.cmd.cdw11 = (off / sizeof(uint32_t));
|
|
pt.buf = chunk;
|
|
pt.len = size;
|
|
pt.is_read = 0;
|
|
|
|
if (ioctl(fd, NVME_PASSTHROUGH_CMD, &pt) < 0) {
|
|
printf("Firmware image download request failed. "
|
|
"errno=%d (%s)\n",
|
|
errno, strerror(errno));
|
|
exit_code = EX_IOERR;
|
|
break;
|
|
}
|
|
|
|
if (nvme_completion_is_error(&pt.cpl)) {
|
|
printf("Passthrough command returned error.\n");
|
|
exit_code = EX_IOERR;
|
|
break;
|
|
}
|
|
|
|
resid -= size;
|
|
off += size;
|
|
}
|
|
|
|
if (exit_code != EX_OK)
|
|
exit(exit_code);
|
|
}
|
|
|
|
static void
|
|
activate_firmware(int fd, int slot, int activate_action)
|
|
{
|
|
struct nvme_pt_command pt;
|
|
|
|
memset(&pt, 0, sizeof(pt));
|
|
pt.cmd.opc = NVME_OPC_FIRMWARE_ACTIVATE;
|
|
pt.cmd.cdw10 = (activate_action << 3) | slot;
|
|
pt.is_read = 0;
|
|
|
|
if (ioctl(fd, NVME_PASSTHROUGH_CMD, &pt) < 0) {
|
|
printf("Firmware activate request failed. errno=%d (%s)\n",
|
|
errno, strerror(errno));
|
|
exit(EX_IOERR);
|
|
}
|
|
|
|
if (nvme_completion_is_error(&pt.cpl)) {
|
|
printf("Passthrough command returned error.\n");
|
|
exit(EX_IOERR);
|
|
}
|
|
}
|
|
|
|
static void
|
|
firmware_usage(void)
|
|
{
|
|
fprintf(stderr, "usage:\n");
|
|
fprintf(stderr, FIRMWARE_USAGE);
|
|
exit(EX_USAGE);
|
|
}
|
|
|
|
void
|
|
firmware(int argc, char *argv[])
|
|
{
|
|
int fd = -1, slot = 0;
|
|
int a_flag, s_flag, f_flag;
|
|
char ch, *p, *image = NULL;
|
|
char *controller = NULL, prompt[64];
|
|
void *buf = NULL;
|
|
ssize_t size;
|
|
struct nvme_controller_data cdata;
|
|
|
|
a_flag = s_flag = f_flag = false;
|
|
|
|
while ((ch = getopt(argc, argv, "af:s:")) != -1) {
|
|
switch (ch) {
|
|
case 'a':
|
|
a_flag = true;
|
|
break;
|
|
case 's':
|
|
slot = strtol(optarg, &p, 0);
|
|
if (p != NULL && *p != '\0') {
|
|
fprintf(stderr,
|
|
"\"%s\" not valid slot.\n",
|
|
optarg);
|
|
firmware_usage();
|
|
} else if (slot == 0) {
|
|
fprintf(stderr,
|
|
"0 is not a valid slot number. "
|
|
"Slot numbers start at 1.\n");
|
|
firmware_usage();
|
|
} else if (slot > 7) {
|
|
fprintf(stderr,
|
|
"Slot number %s specified which is "
|
|
"greater than max allowed slot number of "
|
|
"7.\n", optarg);
|
|
firmware_usage();
|
|
}
|
|
s_flag = true;
|
|
break;
|
|
case 'f':
|
|
image = optarg;
|
|
f_flag = true;
|
|
break;
|
|
}
|
|
}
|
|
|
|
/* Check that a controller (and not a namespace) was specified. */
|
|
if (optind >= argc || strstr(argv[optind], NVME_NS_PREFIX) != NULL)
|
|
firmware_usage();
|
|
|
|
if (!f_flag && !a_flag) {
|
|
fprintf(stderr,
|
|
"Neither a replace ([-f path_to_firmware]) nor "
|
|
"activate ([-a]) firmware image action\n"
|
|
"was specified.\n");
|
|
firmware_usage();
|
|
}
|
|
|
|
if (!f_flag && a_flag && slot == 0) {
|
|
fprintf(stderr,
|
|
"Slot number to activate not specified.\n");
|
|
firmware_usage();
|
|
}
|
|
|
|
controller = argv[optind];
|
|
open_dev(controller, &fd, 1, 1);
|
|
read_controller_data(fd, &cdata);
|
|
|
|
if (cdata.oacs.firmware == 0) {
|
|
fprintf(stderr,
|
|
"Controller does not support firmware "
|
|
"activate/download.\n");
|
|
exit(EX_IOERR);
|
|
}
|
|
|
|
if (f_flag && slot == 1 && cdata.frmw.slot1_ro) {
|
|
fprintf(stderr, "Slot %d is marked as read only.\n", slot);
|
|
exit(EX_IOERR);
|
|
}
|
|
|
|
if (slot > cdata.frmw.num_slots) {
|
|
fprintf(stderr,
|
|
"Slot %d was specified but controller only "
|
|
"supports %d firmware slots.\n",
|
|
slot, cdata.frmw.num_slots);
|
|
exit(EX_IOERR);
|
|
}
|
|
|
|
if (!slot_has_valid_firmware(fd, slot)) {
|
|
fprintf(stderr,
|
|
"Slot %d does not contain valid firmware.\n"
|
|
"Try 'nvmecontrol logpage -p 3 %s' to get a list "
|
|
"of available firmware images.\n",
|
|
slot, controller);
|
|
exit(EX_IOERR);
|
|
}
|
|
|
|
if (f_flag && a_flag)
|
|
printf("You are about to download and activate "
|
|
"firmware image (%s) to controller %s.\n"
|
|
"This may damage your controller and/or "
|
|
"overwrite an existing firmware image.\n",
|
|
image, controller);
|
|
else if (a_flag)
|
|
printf("You are about to activate a new firmware "
|
|
"image on controller %s.\n"
|
|
"This may damage your controller.\n",
|
|
controller);
|
|
else if (f_flag)
|
|
printf("You are about to download firmware image "
|
|
"(%s) to controller %s.\n"
|
|
"This may damage your controller and/or "
|
|
"overwrite an existing firmware image.\n",
|
|
image, controller);
|
|
|
|
printf("Are you sure you want to continue? (yes/no) ");
|
|
while (1) {
|
|
fgets(prompt, sizeof(prompt), stdin);
|
|
if (strncasecmp(prompt, "yes", 3) == 0)
|
|
break;
|
|
if (strncasecmp(prompt, "no", 2) == 0)
|
|
exit(EX_OK);
|
|
printf("Please answer \"yes\" or \"no\". ");
|
|
}
|
|
|
|
if (f_flag) {
|
|
read_image_file(image, &buf, &size);
|
|
update_firmware(fd, buf, size);
|
|
if (a_flag)
|
|
activate_firmware(fd, slot,
|
|
NVME_AA_REPLACE_ACTIVATE);
|
|
else
|
|
activate_firmware(fd, slot,
|
|
NVME_AA_REPLACE_NO_ACTIVATE);
|
|
} else {
|
|
activate_firmware(fd, slot, NVME_AA_ACTIVATE);
|
|
}
|
|
|
|
if (a_flag) {
|
|
printf("New firmware image activated and will take "
|
|
"effect after next controller reset.\n"
|
|
"Controller reset can be initiated via "
|
|
"'nvmecontrol reset %s'\n",
|
|
controller);
|
|
}
|
|
|
|
close(fd);
|
|
exit(EX_OK);
|
|
}
|