xref: /openbmc/qemu/block/replication.c (revision 372b69f5)
1 /*
2  * Replication Block filter
3  *
4  * Copyright (c) 2016 HUAWEI TECHNOLOGIES CO., LTD.
5  * Copyright (c) 2016 Intel Corporation
6  * Copyright (c) 2016 FUJITSU LIMITED
7  *
8  * Author:
9  *   Wen Congyang <wency@cn.fujitsu.com>
10  *
11  * This work is licensed under the terms of the GNU GPL, version 2 or later.
12  * See the COPYING file in the top-level directory.
13  */
14 
15 #include "qemu/osdep.h"
16 #include "qemu/module.h"
17 #include "qemu/option.h"
18 #include "block/nbd.h"
19 #include "block/blockjob.h"
20 #include "block/block_int.h"
21 #include "block/block_backup.h"
22 #include "sysemu/block-backend.h"
23 #include "qapi/error.h"
24 #include "qapi/qmp/qdict.h"
25 #include "block/replication.h"
26 
27 typedef enum {
28     BLOCK_REPLICATION_NONE,             /* block replication is not started */
29     BLOCK_REPLICATION_RUNNING,          /* block replication is running */
30     BLOCK_REPLICATION_FAILOVER,         /* failover is running in background */
31     BLOCK_REPLICATION_FAILOVER_FAILED,  /* failover failed */
32     BLOCK_REPLICATION_DONE,             /* block replication is done */
33 } ReplicationStage;
34 
35 typedef struct BDRVReplicationState {
36     ReplicationMode mode;
37     ReplicationStage stage;
38     BlockJob *commit_job;
39     BdrvChild *hidden_disk;
40     BdrvChild *secondary_disk;
41     BlockJob *backup_job;
42     char *top_id;
43     ReplicationState *rs;
44     Error *blocker;
45     bool orig_hidden_read_only;
46     bool orig_secondary_read_only;
47     int error;
48 } BDRVReplicationState;
49 
50 static void replication_start(ReplicationState *rs, ReplicationMode mode,
51                               Error **errp);
52 static void replication_do_checkpoint(ReplicationState *rs, Error **errp);
53 static void replication_get_error(ReplicationState *rs, Error **errp);
54 static void replication_stop(ReplicationState *rs, bool failover,
55                              Error **errp);
56 
57 #define REPLICATION_MODE        "mode"
58 #define REPLICATION_TOP_ID      "top-id"
59 static QemuOptsList replication_runtime_opts = {
60     .name = "replication",
61     .head = QTAILQ_HEAD_INITIALIZER(replication_runtime_opts.head),
62     .desc = {
63         {
64             .name = REPLICATION_MODE,
65             .type = QEMU_OPT_STRING,
66         },
67         {
68             .name = REPLICATION_TOP_ID,
69             .type = QEMU_OPT_STRING,
70         },
71         { /* end of list */ }
72     },
73 };
74 
75 static ReplicationOps replication_ops = {
76     .start = replication_start,
77     .checkpoint = replication_do_checkpoint,
78     .get_error = replication_get_error,
79     .stop = replication_stop,
80 };
81 
82 static int replication_open(BlockDriverState *bs, QDict *options,
83                             int flags, Error **errp)
84 {
85     int ret;
86     BDRVReplicationState *s = bs->opaque;
87     QemuOpts *opts = NULL;
88     const char *mode;
89     const char *top_id;
90 
91     ret = bdrv_open_file_child(NULL, options, "file", bs, errp);
92     if (ret < 0) {
93         return ret;
94     }
95 
96     ret = -EINVAL;
97     opts = qemu_opts_create(&replication_runtime_opts, NULL, 0, &error_abort);
98     if (!qemu_opts_absorb_qdict(opts, options, errp)) {
99         goto fail;
100     }
101 
102     mode = qemu_opt_get(opts, REPLICATION_MODE);
103     if (!mode) {
104         error_setg(errp, "Missing the option mode");
105         goto fail;
106     }
107 
108     if (!strcmp(mode, "primary")) {
109         s->mode = REPLICATION_MODE_PRIMARY;
110         top_id = qemu_opt_get(opts, REPLICATION_TOP_ID);
111         if (top_id) {
112             error_setg(errp,
113                        "The primary side does not support option top-id");
114             goto fail;
115         }
116     } else if (!strcmp(mode, "secondary")) {
117         s->mode = REPLICATION_MODE_SECONDARY;
118         top_id = qemu_opt_get(opts, REPLICATION_TOP_ID);
119         s->top_id = g_strdup(top_id);
120         if (!s->top_id) {
121             error_setg(errp, "Missing the option top-id");
122             goto fail;
123         }
124     } else {
125         error_setg(errp,
126                    "The option mode's value should be primary or secondary");
127         goto fail;
128     }
129 
130     s->rs = replication_new(bs, &replication_ops);
131 
132     ret = 0;
133 
134 fail:
135     qemu_opts_del(opts);
136     return ret;
137 }
138 
139 static void replication_close(BlockDriverState *bs)
140 {
141     BDRVReplicationState *s = bs->opaque;
142     Job *commit_job;
143     GLOBAL_STATE_CODE();
144 
145     if (s->stage == BLOCK_REPLICATION_RUNNING) {
146         replication_stop(s->rs, false, NULL);
147     }
148     if (s->stage == BLOCK_REPLICATION_FAILOVER) {
149         commit_job = &s->commit_job->job;
150         assert(commit_job->aio_context == qemu_get_current_aio_context());
151         job_cancel_sync(commit_job, false);
152     }
153 
154     if (s->mode == REPLICATION_MODE_SECONDARY) {
155         g_free(s->top_id);
156     }
157 
158     replication_remove(s->rs);
159 }
160 
161 static void replication_child_perm(BlockDriverState *bs, BdrvChild *c,
162                                    BdrvChildRole role,
163                                    BlockReopenQueue *reopen_queue,
164                                    uint64_t perm, uint64_t shared,
165                                    uint64_t *nperm, uint64_t *nshared)
166 {
167     if (role & BDRV_CHILD_PRIMARY) {
168         *nperm = BLK_PERM_CONSISTENT_READ;
169     } else {
170         *nperm = 0;
171     }
172 
173     if ((bs->open_flags & (BDRV_O_INACTIVE | BDRV_O_RDWR)) == BDRV_O_RDWR) {
174         *nperm |= BLK_PERM_WRITE;
175     }
176     *nshared = BLK_PERM_CONSISTENT_READ
177                | BLK_PERM_WRITE
178                | BLK_PERM_WRITE_UNCHANGED;
179     return;
180 }
181 
182 static int64_t coroutine_fn GRAPH_RDLOCK
183 replication_co_getlength(BlockDriverState *bs)
184 {
185     return bdrv_co_getlength(bs->file->bs);
186 }
187 
188 static int replication_get_io_status(BDRVReplicationState *s)
189 {
190     switch (s->stage) {
191     case BLOCK_REPLICATION_NONE:
192         return -EIO;
193     case BLOCK_REPLICATION_RUNNING:
194         return 0;
195     case BLOCK_REPLICATION_FAILOVER:
196         return s->mode == REPLICATION_MODE_PRIMARY ? -EIO : 0;
197     case BLOCK_REPLICATION_FAILOVER_FAILED:
198         return s->mode == REPLICATION_MODE_PRIMARY ? -EIO : 1;
199     case BLOCK_REPLICATION_DONE:
200         /*
201          * active commit job completes, and active disk and secondary_disk
202          * is swapped, so we can operate bs->file directly
203          */
204         return s->mode == REPLICATION_MODE_PRIMARY ? -EIO : 0;
205     default:
206         abort();
207     }
208 }
209 
210 static int replication_return_value(BDRVReplicationState *s, int ret)
211 {
212     if (s->mode == REPLICATION_MODE_SECONDARY) {
213         return ret;
214     }
215 
216     if (ret < 0) {
217         s->error = ret;
218         ret = 0;
219     }
220 
221     return ret;
222 }
223 
224 static int coroutine_fn GRAPH_RDLOCK
225 replication_co_readv(BlockDriverState *bs, int64_t sector_num,
226                      int remaining_sectors, QEMUIOVector *qiov)
227 {
228     BDRVReplicationState *s = bs->opaque;
229     int ret;
230 
231     if (s->mode == REPLICATION_MODE_PRIMARY) {
232         /* We only use it to forward primary write requests */
233         return -EIO;
234     }
235 
236     ret = replication_get_io_status(s);
237     if (ret < 0) {
238         return ret;
239     }
240 
241     ret = bdrv_co_preadv(bs->file, sector_num * BDRV_SECTOR_SIZE,
242                          remaining_sectors * BDRV_SECTOR_SIZE, qiov, 0);
243 
244     return replication_return_value(s, ret);
245 }
246 
247 static int coroutine_fn GRAPH_RDLOCK
248 replication_co_writev(BlockDriverState *bs, int64_t sector_num,
249                       int remaining_sectors, QEMUIOVector *qiov, int flags)
250 {
251     BDRVReplicationState *s = bs->opaque;
252     QEMUIOVector hd_qiov;
253     uint64_t bytes_done = 0;
254     BdrvChild *top = bs->file;
255     BdrvChild *base = s->secondary_disk;
256     BdrvChild *target;
257     int ret;
258     int64_t n;
259 
260     ret = replication_get_io_status(s);
261     if (ret < 0) {
262         goto out;
263     }
264 
265     if (ret == 0) {
266         ret = bdrv_co_pwritev(top, sector_num * BDRV_SECTOR_SIZE,
267                               remaining_sectors * BDRV_SECTOR_SIZE, qiov, 0);
268         return replication_return_value(s, ret);
269     }
270 
271     /*
272      * Failover failed, only write to active disk if the sectors
273      * have already been allocated in active disk/hidden disk.
274      */
275     qemu_iovec_init(&hd_qiov, qiov->niov);
276     while (remaining_sectors > 0) {
277         int64_t count;
278 
279         ret = bdrv_co_is_allocated_above(top->bs, base->bs, false,
280                                          sector_num * BDRV_SECTOR_SIZE,
281                                          remaining_sectors * BDRV_SECTOR_SIZE,
282                                          &count);
283         if (ret < 0) {
284             goto out1;
285         }
286 
287         assert(QEMU_IS_ALIGNED(count, BDRV_SECTOR_SIZE));
288         n = count >> BDRV_SECTOR_BITS;
289         qemu_iovec_reset(&hd_qiov);
290         qemu_iovec_concat(&hd_qiov, qiov, bytes_done, count);
291 
292         target = ret ? top : base;
293         ret = bdrv_co_pwritev(target, sector_num * BDRV_SECTOR_SIZE,
294                               n * BDRV_SECTOR_SIZE, &hd_qiov, 0);
295         if (ret < 0) {
296             goto out1;
297         }
298 
299         remaining_sectors -= n;
300         sector_num += n;
301         bytes_done += count;
302     }
303 
304 out1:
305     qemu_iovec_destroy(&hd_qiov);
306 out:
307     return ret;
308 }
309 
310 static void GRAPH_UNLOCKED
311 secondary_do_checkpoint(BlockDriverState *bs, Error **errp)
312 {
313     BDRVReplicationState *s = bs->opaque;
314     BdrvChild *active_disk = bs->file;
315     Error *local_err = NULL;
316     int ret;
317 
318     GRAPH_RDLOCK_GUARD_MAINLOOP();
319 
320     if (!s->backup_job) {
321         error_setg(errp, "Backup job was cancelled unexpectedly");
322         return;
323     }
324 
325     backup_do_checkpoint(s->backup_job, &local_err);
326     if (local_err) {
327         error_propagate(errp, local_err);
328         return;
329     }
330 
331     if (!active_disk->bs->drv) {
332         error_setg(errp, "Active disk %s is ejected",
333                    active_disk->bs->node_name);
334         return;
335     }
336 
337     ret = bdrv_make_empty(active_disk, errp);
338     if (ret < 0) {
339         return;
340     }
341 
342     if (!s->hidden_disk->bs->drv) {
343         error_setg(errp, "Hidden disk %s is ejected",
344                    s->hidden_disk->bs->node_name);
345         return;
346     }
347 
348     ret = bdrv_make_empty(s->hidden_disk, errp);
349     if (ret < 0) {
350         return;
351     }
352 }
353 
354 /* This function is supposed to be called twice:
355  * first with writable = true, then with writable = false.
356  * The first call puts s->hidden_disk and s->secondary_disk in
357  * r/w mode, and the second puts them back in their original state.
358  */
359 static void reopen_backing_file(BlockDriverState *bs, bool writable,
360                                 Error **errp)
361 {
362     BDRVReplicationState *s = bs->opaque;
363     BdrvChild *hidden_disk, *secondary_disk;
364     BlockReopenQueue *reopen_queue = NULL;
365 
366     /*
367      * s->hidden_disk and s->secondary_disk may not be set yet, as they will
368      * only be set after the children are writable.
369      */
370     hidden_disk = bs->file->bs->backing;
371     secondary_disk = hidden_disk->bs->backing;
372 
373     if (writable) {
374         s->orig_hidden_read_only = bdrv_is_read_only(hidden_disk->bs);
375         s->orig_secondary_read_only = bdrv_is_read_only(secondary_disk->bs);
376     }
377 
378     if (s->orig_hidden_read_only) {
379         QDict *opts = qdict_new();
380         qdict_put_bool(opts, BDRV_OPT_READ_ONLY, !writable);
381         reopen_queue = bdrv_reopen_queue(reopen_queue, hidden_disk->bs,
382                                          opts, true);
383     }
384 
385     if (s->orig_secondary_read_only) {
386         QDict *opts = qdict_new();
387         qdict_put_bool(opts, BDRV_OPT_READ_ONLY, !writable);
388         reopen_queue = bdrv_reopen_queue(reopen_queue, secondary_disk->bs,
389                                          opts, true);
390     }
391 
392     if (reopen_queue) {
393         AioContext *ctx = bdrv_get_aio_context(bs);
394         if (ctx != qemu_get_aio_context()) {
395             aio_context_release(ctx);
396         }
397         bdrv_reopen_multiple(reopen_queue, errp);
398         if (ctx != qemu_get_aio_context()) {
399             aio_context_acquire(ctx);
400         }
401     }
402 }
403 
404 static void backup_job_cleanup(BlockDriverState *bs)
405 {
406     BDRVReplicationState *s = bs->opaque;
407     BlockDriverState *top_bs;
408 
409     s->backup_job = NULL;
410 
411     top_bs = bdrv_lookup_bs(s->top_id, s->top_id, NULL);
412     if (!top_bs) {
413         return;
414     }
415     bdrv_op_unblock_all(top_bs, s->blocker);
416     error_free(s->blocker);
417     reopen_backing_file(bs, false, NULL);
418 }
419 
420 static void backup_job_completed(void *opaque, int ret)
421 {
422     BlockDriverState *bs = opaque;
423     BDRVReplicationState *s = bs->opaque;
424 
425     if (s->stage != BLOCK_REPLICATION_FAILOVER) {
426         /* The backup job is cancelled unexpectedly */
427         s->error = -EIO;
428     }
429 
430     backup_job_cleanup(bs);
431 }
432 
433 static bool GRAPH_RDLOCK
434 check_top_bs(BlockDriverState *top_bs, BlockDriverState *bs)
435 {
436     BdrvChild *child;
437 
438     /* The bs itself is the top_bs */
439     if (top_bs == bs) {
440         return true;
441     }
442 
443     /* Iterate over top_bs's children */
444     QLIST_FOREACH(child, &top_bs->children, next) {
445         if (child->bs == bs || check_top_bs(child->bs, bs)) {
446             return true;
447         }
448     }
449 
450     return false;
451 }
452 
453 static void replication_start(ReplicationState *rs, ReplicationMode mode,
454                               Error **errp)
455 {
456     BlockDriverState *bs = rs->opaque;
457     BDRVReplicationState *s;
458     BlockDriverState *top_bs;
459     BdrvChild *active_disk, *hidden_disk, *secondary_disk;
460     int64_t active_length, hidden_length, disk_length;
461     AioContext *aio_context;
462     Error *local_err = NULL;
463     BackupPerf perf = { .use_copy_range = true, .max_workers = 1 };
464 
465     GLOBAL_STATE_CODE();
466 
467     aio_context = bdrv_get_aio_context(bs);
468     aio_context_acquire(aio_context);
469     s = bs->opaque;
470 
471     if (s->stage == BLOCK_REPLICATION_DONE ||
472         s->stage == BLOCK_REPLICATION_FAILOVER) {
473         /*
474          * This case happens when a secondary is promoted to primary.
475          * Ignore the request because the secondary side of replication
476          * doesn't have to do anything anymore.
477          */
478         aio_context_release(aio_context);
479         return;
480     }
481 
482     if (s->stage != BLOCK_REPLICATION_NONE) {
483         error_setg(errp, "Block replication is running or done");
484         aio_context_release(aio_context);
485         return;
486     }
487 
488     if (s->mode != mode) {
489         error_setg(errp, "The parameter mode's value is invalid, needs %d,"
490                    " but got %d", s->mode, mode);
491         aio_context_release(aio_context);
492         return;
493     }
494 
495     switch (s->mode) {
496     case REPLICATION_MODE_PRIMARY:
497         break;
498     case REPLICATION_MODE_SECONDARY:
499         active_disk = bs->file;
500         if (!active_disk || !active_disk->bs || !active_disk->bs->backing) {
501             error_setg(errp, "Active disk doesn't have backing file");
502             aio_context_release(aio_context);
503             return;
504         }
505 
506         hidden_disk = active_disk->bs->backing;
507         if (!hidden_disk->bs || !hidden_disk->bs->backing) {
508             error_setg(errp, "Hidden disk doesn't have backing file");
509             aio_context_release(aio_context);
510             return;
511         }
512 
513         bdrv_graph_rdlock_main_loop();
514         secondary_disk = hidden_disk->bs->backing;
515         if (!secondary_disk->bs || !bdrv_has_blk(secondary_disk->bs)) {
516             error_setg(errp, "The secondary disk doesn't have block backend");
517             bdrv_graph_rdunlock_main_loop();
518             aio_context_release(aio_context);
519             return;
520         }
521         bdrv_graph_rdunlock_main_loop();
522 
523         /* verify the length */
524         active_length = bdrv_getlength(active_disk->bs);
525         hidden_length = bdrv_getlength(hidden_disk->bs);
526         disk_length = bdrv_getlength(secondary_disk->bs);
527         if (active_length < 0 || hidden_length < 0 || disk_length < 0 ||
528             active_length != hidden_length || hidden_length != disk_length) {
529             error_setg(errp, "Active disk, hidden disk, secondary disk's length"
530                        " are not the same");
531             aio_context_release(aio_context);
532             return;
533         }
534 
535         /* Must be true, or the bdrv_getlength() calls would have failed */
536         assert(active_disk->bs->drv && hidden_disk->bs->drv);
537 
538         bdrv_graph_rdlock_main_loop();
539         if (!active_disk->bs->drv->bdrv_make_empty ||
540             !hidden_disk->bs->drv->bdrv_make_empty) {
541             error_setg(errp,
542                        "Active disk or hidden disk doesn't support make_empty");
543             aio_context_release(aio_context);
544             bdrv_graph_rdunlock_main_loop();
545             return;
546         }
547         bdrv_graph_rdunlock_main_loop();
548 
549         /* reopen the backing file in r/w mode */
550         reopen_backing_file(bs, true, &local_err);
551         if (local_err) {
552             error_propagate(errp, local_err);
553             aio_context_release(aio_context);
554             return;
555         }
556 
557         bdrv_graph_wrlock(bs);
558 
559         bdrv_ref(hidden_disk->bs);
560         s->hidden_disk = bdrv_attach_child(bs, hidden_disk->bs, "hidden disk",
561                                            &child_of_bds, BDRV_CHILD_DATA,
562                                            &local_err);
563         if (local_err) {
564             error_propagate(errp, local_err);
565             bdrv_graph_wrunlock();
566             aio_context_release(aio_context);
567             return;
568         }
569 
570         bdrv_ref(secondary_disk->bs);
571         s->secondary_disk = bdrv_attach_child(bs, secondary_disk->bs,
572                                               "secondary disk", &child_of_bds,
573                                               BDRV_CHILD_DATA, &local_err);
574         if (local_err) {
575             error_propagate(errp, local_err);
576             bdrv_graph_wrunlock();
577             aio_context_release(aio_context);
578             return;
579         }
580 
581         /* start backup job now */
582         error_setg(&s->blocker,
583                    "Block device is in use by internal backup job");
584 
585         top_bs = bdrv_lookup_bs(s->top_id, s->top_id, NULL);
586         if (!top_bs || !bdrv_is_root_node(top_bs) ||
587             !check_top_bs(top_bs, bs)) {
588             error_setg(errp, "No top_bs or it is invalid");
589             bdrv_graph_wrunlock();
590             reopen_backing_file(bs, false, NULL);
591             aio_context_release(aio_context);
592             return;
593         }
594         bdrv_op_block_all(top_bs, s->blocker);
595         bdrv_op_unblock(top_bs, BLOCK_OP_TYPE_DATAPLANE, s->blocker);
596 
597         bdrv_graph_wrunlock();
598 
599         s->backup_job = backup_job_create(
600                                 NULL, s->secondary_disk->bs, s->hidden_disk->bs,
601                                 0, MIRROR_SYNC_MODE_NONE, NULL, 0, false, NULL,
602                                 &perf,
603                                 BLOCKDEV_ON_ERROR_REPORT,
604                                 BLOCKDEV_ON_ERROR_REPORT, JOB_INTERNAL,
605                                 backup_job_completed, bs, NULL, &local_err);
606         if (local_err) {
607             error_propagate(errp, local_err);
608             backup_job_cleanup(bs);
609             aio_context_release(aio_context);
610             return;
611         }
612         job_start(&s->backup_job->job);
613         break;
614     default:
615         aio_context_release(aio_context);
616         abort();
617     }
618 
619     s->stage = BLOCK_REPLICATION_RUNNING;
620 
621     if (s->mode == REPLICATION_MODE_SECONDARY) {
622         secondary_do_checkpoint(bs, errp);
623     }
624 
625     s->error = 0;
626     aio_context_release(aio_context);
627 }
628 
629 static void replication_do_checkpoint(ReplicationState *rs, Error **errp)
630 {
631     BlockDriverState *bs = rs->opaque;
632     BDRVReplicationState *s;
633     AioContext *aio_context;
634 
635     aio_context = bdrv_get_aio_context(bs);
636     aio_context_acquire(aio_context);
637     s = bs->opaque;
638 
639     if (s->stage == BLOCK_REPLICATION_DONE ||
640         s->stage == BLOCK_REPLICATION_FAILOVER) {
641         /*
642          * This case happens when a secondary was promoted to primary.
643          * Ignore the request because the secondary side of replication
644          * doesn't have to do anything anymore.
645          */
646         aio_context_release(aio_context);
647         return;
648     }
649 
650     if (s->mode == REPLICATION_MODE_SECONDARY) {
651         secondary_do_checkpoint(bs, errp);
652     }
653     aio_context_release(aio_context);
654 }
655 
656 static void replication_get_error(ReplicationState *rs, Error **errp)
657 {
658     BlockDriverState *bs = rs->opaque;
659     BDRVReplicationState *s;
660     AioContext *aio_context;
661 
662     aio_context = bdrv_get_aio_context(bs);
663     aio_context_acquire(aio_context);
664     s = bs->opaque;
665 
666     if (s->stage == BLOCK_REPLICATION_NONE) {
667         error_setg(errp, "Block replication is not running");
668         aio_context_release(aio_context);
669         return;
670     }
671 
672     if (s->error) {
673         error_setg(errp, "I/O error occurred");
674         aio_context_release(aio_context);
675         return;
676     }
677     aio_context_release(aio_context);
678 }
679 
680 static void replication_done(void *opaque, int ret)
681 {
682     BlockDriverState *bs = opaque;
683     BDRVReplicationState *s = bs->opaque;
684 
685     if (ret == 0) {
686         s->stage = BLOCK_REPLICATION_DONE;
687 
688         bdrv_graph_wrlock(NULL);
689         bdrv_unref_child(bs, s->secondary_disk);
690         s->secondary_disk = NULL;
691         bdrv_unref_child(bs, s->hidden_disk);
692         s->hidden_disk = NULL;
693         bdrv_graph_wrunlock();
694 
695         s->error = 0;
696     } else {
697         s->stage = BLOCK_REPLICATION_FAILOVER_FAILED;
698         s->error = -EIO;
699     }
700 }
701 
702 static void replication_stop(ReplicationState *rs, bool failover, Error **errp)
703 {
704     BlockDriverState *bs = rs->opaque;
705     BDRVReplicationState *s;
706     AioContext *aio_context;
707 
708     aio_context = bdrv_get_aio_context(bs);
709     aio_context_acquire(aio_context);
710     s = bs->opaque;
711 
712     if (s->stage == BLOCK_REPLICATION_DONE ||
713         s->stage == BLOCK_REPLICATION_FAILOVER) {
714         /*
715          * This case happens when a secondary was promoted to primary.
716          * Ignore the request because the secondary side of replication
717          * doesn't have to do anything anymore.
718          */
719         aio_context_release(aio_context);
720         return;
721     }
722 
723     if (s->stage != BLOCK_REPLICATION_RUNNING) {
724         error_setg(errp, "Block replication is not running");
725         aio_context_release(aio_context);
726         return;
727     }
728 
729     switch (s->mode) {
730     case REPLICATION_MODE_PRIMARY:
731         s->stage = BLOCK_REPLICATION_DONE;
732         s->error = 0;
733         break;
734     case REPLICATION_MODE_SECONDARY:
735         /*
736          * This BDS will be closed, and the job should be completed
737          * before the BDS is closed, because we will access hidden
738          * disk, secondary disk in backup_job_completed().
739          */
740         if (s->backup_job) {
741             aio_context_release(aio_context);
742             job_cancel_sync(&s->backup_job->job, true);
743             aio_context_acquire(aio_context);
744         }
745 
746         if (!failover) {
747             secondary_do_checkpoint(bs, errp);
748             s->stage = BLOCK_REPLICATION_DONE;
749             aio_context_release(aio_context);
750             return;
751         }
752 
753         s->stage = BLOCK_REPLICATION_FAILOVER;
754         s->commit_job = commit_active_start(
755                             NULL, bs->file->bs, s->secondary_disk->bs,
756                             JOB_INTERNAL, 0, BLOCKDEV_ON_ERROR_REPORT,
757                             NULL, replication_done, bs, true, errp);
758         break;
759     default:
760         aio_context_release(aio_context);
761         abort();
762     }
763     aio_context_release(aio_context);
764 }
765 
766 static const char *const replication_strong_runtime_opts[] = {
767     REPLICATION_MODE,
768     REPLICATION_TOP_ID,
769 
770     NULL
771 };
772 
773 static BlockDriver bdrv_replication = {
774     .format_name                = "replication",
775     .instance_size              = sizeof(BDRVReplicationState),
776 
777     .bdrv_open                  = replication_open,
778     .bdrv_close                 = replication_close,
779     .bdrv_child_perm            = replication_child_perm,
780 
781     .bdrv_co_getlength          = replication_co_getlength,
782     .bdrv_co_readv              = replication_co_readv,
783     .bdrv_co_writev             = replication_co_writev,
784 
785     .is_filter                  = true,
786 
787     .strong_runtime_opts        = replication_strong_runtime_opts,
788 };
789 
790 static void bdrv_replication_init(void)
791 {
792     bdrv_register(&bdrv_replication);
793 }
794 
795 block_init(bdrv_replication_init);
796