kernel-fxtec-pro1x/fs/verity
Eric Biggers 9630eacb1e fs-verity: implement readahead for FS_IOC_ENABLE_VERITY
When it builds the first level of the Merkle tree, FS_IOC_ENABLE_VERITY
sequentially reads each page of the file using read_mapping_page().
This works fine if the file's data is already in pagecache, which should
normally be the case, since this ioctl is normally used immediately
after writing out the file.

But in any other case this implementation performs very poorly, since
only one page is read at a time.

Fix this by implementing readahead using the functions from
mm/readahead.c.

This improves performance in the uncached case by about 20x, as seen in
the following benchmarks done on a 250MB file (on x86_64 with SHA-NI):

    FS_IOC_ENABLE_VERITY uncached (before) 3.299s
    FS_IOC_ENABLE_VERITY uncached (after)  0.160s
    FS_IOC_ENABLE_VERITY cached            0.147s
    sha256sum uncached                     0.191s
    sha256sum cached                       0.145s

Note: we could instead switch to kernel_read().  But that would mean
we'd no longer be hashing the data directly from the pagecache, which is
a nice optimization of its own.  And using kernel_read() would require
allocating another temporary buffer, hashing the data and tree pages
separately, and explicitly zero-padding the last page -- so it wouldn't
really be any simpler than direct pagecache access, at least for now.

Link: https://lore.kernel.org/r/20200106205410.136707-1-ebiggers@kernel.org
Reviewed-by: Theodore Ts'o <tytso@mit.edu>
Signed-off-by: Eric Biggers <ebiggers@google.com>
2020-02-13 15:14:14 -08:00
..
enable.c fs-verity: implement readahead for FS_IOC_ENABLE_VERITY 2020-02-13 15:14:14 -08:00
fsverity_private.h fs-verity: support builtin file signatures 2019-09-23 14:11:56 -07:00
hash_algs.c fs-verity: add SHA-512 support 2019-09-23 14:11:56 -07:00
init.c fs-verity: support builtin file signatures 2019-09-23 14:11:56 -07:00
Kconfig fs-verity: support builtin file signatures 2019-09-23 14:11:56 -07:00
Makefile fs-verity: support builtin file signatures 2019-09-23 14:11:56 -07:00
measure.c fs-verity: implement FS_IOC_MEASURE_VERITY ioctl 2019-09-23 14:11:56 -07:00
open.c fs-verity: support builtin file signatures 2019-09-23 14:11:56 -07:00
signature.c fs-verity: support builtin file signatures 2019-09-23 14:11:56 -07:00
verify.c fs-verity: support builtin file signatures 2019-09-23 14:11:56 -07:00