freebsd-dev/stand/libsa
Kirk McKusick fb14e73cb4 Normally when an attempt is made to mount a UFS/FFS filesystem whose
superblock has a check-hash error, an error message noting the
superblock check-hash failure is printed and the mount fails. The
administrator then runs fsck to repair the filesystem and when
successful, the filesystem can once again be mounted.

This approach fails if the filesystem in question is a root filesystem
from which you are trying to boot. Here, the loader fails when trying
to access the filesystem to get the kernel to boot. So it is necessary
to allow the loader to ignore the superblock check-hash error and make
a best effort to read the kernel. The filesystem may be suffiently
corrupted that the read attempt fails, but there is no harm in trying
since the loader makes no attempt to write to the filesystem.

Once the kernel is loaded and starts to run, it attempts to mount its
root filesystem. Once again, failure means that it breaks to its prompt
to ask where to get its root filesystem. Unless you have an alternate
root filesystem, you are stuck.

Since the root filesystem is initially mounted read-only, it is
safe to make an attempt to mount the root filesystem with the failed
superblock check-hash. Thus, when asked to mount a root filesystem
with a failed superblock check-hash, the kernel prints a warning
message that the root filesystem superblock check-hash needs repair,
but notes that it is ignoring the error and proceeding. It does
mark the filesystem as needing an fsck which prevents it from being
enabled for writing until fsck has been run on it. The net effect
is that the reboot fails to single user, but at least at that point
the administrator has the tools at hand to fix the problem.

Reported by:    Rick Macklem (rmacklem@)
Discussed with: Warner Losh (imp@)
Sponsored by:   Netflix
2018-12-06 00:09:39 +00:00
..
amd64
geli Use if rather than case for a simple boolean. gcc thinks blks is 2018-07-13 18:19:33 +00:00
i386
mips
powerpc
sparc64
zfs Eliminate duplicated code and struct member definitions in the handoff 2018-12-03 03:58:30 +00:00
__main.c
abort.c Implement abort() as a call to panic. 2018-01-26 17:13:04 +00:00
arp.c The libstand's panic() appends its own '\n' to the message, so that users of the API 2018-11-29 18:37:48 +00:00
assert.c The libstand's panic() appends its own '\n' to the message, so that users of the API 2018-11-29 18:37:48 +00:00
bcd.c
bootp.c libsa: bootp is using pointers with different sign 2018-08-01 12:06:39 +00:00
bootp.h libsa: bootp is using pointers with different sign 2018-08-01 12:06:39 +00:00
bootparam.c Prefer uintXX_t to u_intXX_t 2018-03-13 16:33:00 +00:00
bootparam.h
bzipfs.c The libstand's panic() appends its own '\n' to the message, so that users of the API 2018-11-29 18:37:48 +00:00
cd9660.c libsa: dereferencing type-punned pointer in cd9660 2018-08-02 06:22:10 +00:00
cd9660read.c libsa: dereferencing type-punned pointer in cd9660 2018-08-02 06:22:10 +00:00
close.c libsa: remobe unneeded check before free() 2018-06-14 09:10:34 +00:00
closeall.c
crc32_libkern.c Fix stand/ build after r339671. 2018-10-23 23:11:38 +00:00
crc32.c
crc32.h
dev.c
dosfs.c libsa: dos_checksum() should take unsigned chars 2018-08-07 10:48:36 +00:00
dosfs.h Prefer uintXX_t to u_intXX_t 2018-03-13 16:33:00 +00:00
environment.c getenv does not return tainted data in the boot loader. Attempt to 2018-01-23 18:01:36 +00:00
ether.c
ext2fs.c Prefer uintXX_t to u_intXX_t 2018-03-13 16:33:00 +00:00
fstat.c
getopt.c
gets.c libsa: exit on EOF in ngets 2018-08-09 02:55:48 +00:00
globals.c
gpt.c Remove the 'mini libstand in libstand' that util.[ch] provided. These 2017-12-15 23:16:53 +00:00
gpt.h
gzipfs.c libsa: gzipfs.c converts pointers to integer types with different sign 2018-08-07 10:53:51 +00:00
in_cksum.c
inet_ntoa.c
ioctl.c
iodesc.h
ip.c Remove unnecessary include from libstand. 2018-10-31 19:59:20 +00:00
libsa.3 libsa(3): Correct statement about FS Write-support, name change 2018-06-09 14:24:16 +00:00
lseek.c
Makefile Fix stand/ build after r339671. 2018-10-23 23:11:38 +00:00
Makefile.depend
nandfs.c Revert r313780 (UFS_ prefix) 2018-03-17 12:59:55 +00:00
net.c Remove unnecessary include from libstand. 2018-10-31 19:59:20 +00:00
net.h Prefer uintXX_t to u_intXX_t 2018-03-13 16:33:00 +00:00
netif.c The libstand's panic() appends its own '\n' to the message, so that users of the API 2018-11-29 18:37:48 +00:00
netif.h
nfs.c libsa: assignment to char * from u_char * 2018-08-01 12:14:10 +00:00
nfsv2.h
nullfs.c libsa: replace remaining _write callbacks by null_write 2018-02-27 12:53:25 +00:00
open.c libsa: open() should use NULL instead of typecasted 0 2018-06-14 16:11:50 +00:00
pager.c
panic.c Split panic routine 2018-01-26 17:13:00 +00:00
pkgfs.c pkgfs_init: Initialize pkg 2018-08-15 21:13:10 +00:00
printf.c Make the v*printf() functions in libsa return int instead of void. 2018-06-05 17:18:10 +00:00
qdivrem.c
quad.h
random.c Fix random() and srandom() prototypes to match the standard. 2017-12-02 00:07:19 +00:00
rarp.c libsa: Consolidate tftp sendrecv into net.c sendrecv 2018-02-15 19:49:15 +00:00
read.c libsa: f_rabuf could be NULL 2018-06-14 09:06:53 +00:00
readdir.c
rpc.c Prefer uintXX_t to u_intXX_t 2018-03-13 16:33:00 +00:00
rpc.h
rpcv2.h
saioctl.h
sbrk.c The libstand's panic() appends its own '\n' to the message, so that users of the API 2018-11-29 18:37:48 +00:00
splitfs.c
stand.h Make the v*printf() functions in libsa return int instead of void. 2018-06-05 17:18:10 +00:00
stat.c
strcasecmp.c
strdup.c
strerror.c
tftp.c libsa: cstyle cleanup tftp.c 2018-11-01 22:13:18 +00:00
tftp.h
twiddle.c
udp.c Remove unnecessary include from libstand. 2018-10-31 19:59:20 +00:00
ufs.c Normally when an attempt is made to mount a UFS/FFS filesystem whose 2018-12-06 00:09:39 +00:00
ufsread.c
uuid_from_string.c
uuid_to_string.c
write.c libsa: cstyle cleanup for open/close/read/write sources 2018-06-14 08:58:10 +00:00
xlocale_private.h Kill copies of strtol and strtoul. Use the ones that are in libc, 2018-01-31 04:29:00 +00:00
zalloc_defs.h
zalloc_malloc.c
zalloc_mem.h
zalloc_protos.h
zalloc.c