[PATCH 14/20] f2fs: support subpage blocks in fs-verity enablement
From: Daeho Jeong
Date: Mon Nov 02 2026 - 16:32:59 EST
From: Daeho Jeong <daehojeong@xxxxxxxxxx>
Check verity per block. While enabling verity, dirty and write back
only the data blocks below i_size in the folios before the verity
metadata. Remove the -EOPNOTSUPP checks. The changes for enabling
verity also apply to large folios when the block size equals PAGE_SIZE.
Signed-off-by: Daeho Jeong <daehojeong@xxxxxxxxxx>
---
fs/f2fs/data.c | 15 ++++++++-------
fs/f2fs/f2fs.h | 5 +++++
fs/f2fs/file.c | 3 ---
fs/f2fs/verity.c | 8 --------
4 files changed, 13 insertions(+), 18 deletions(-)
diff --git a/fs/f2fs/data.c b/fs/f2fs/data.c
index 929a2beef379..a23fd4b01a4c 100644
--- a/fs/f2fs/data.c
+++ b/fs/f2fs/data.c
@@ -1671,7 +1671,7 @@ int f2fs_reserve_block(struct dnode_of_data *dn, pgoff_t index)
static inline struct fsverity_info *f2fs_need_verity(const struct inode *inode,
pgoff_t idx)
{
- if (idx < DIV_ROUND_UP(inode->i_size, PAGE_SIZE))
+ if (idx < F2FS_BLK_ALIGN(F2FS_SB(inode->i_sb), inode->i_size))
return fsverity_get_info(inode);
return NULL;
}
@@ -2924,11 +2924,11 @@ struct f2fs_folio_state *f2fs_ffs_find_or_alloc(struct folio *folio)
pgoff_t first_lblk = f2fs_folio_lblk(sbi, folio);
pgoff_t valid_blocks = 0;
- if (f2fs_verity_in_progress(inode))
- valid_blocks = nr_blocks;
- else if (first_lblk < last_lblk)
+ if (first_lblk < last_lblk)
valid_blocks = min_t(pgoff_t, nr_blocks,
last_lblk - first_lblk);
+ else if (f2fs_verity_in_progress(inode))
+ valid_blocks = nr_blocks;
if (valid_blocks)
bitmap_set(ffs->state, nr_blocks, valid_blocks);
@@ -3657,7 +3657,7 @@ static int f2fs_read_data_folio(struct file *file, struct folio *folio)
return ret;
}
- vi = f2fs_need_verity(inode, folio->index);
+ vi = f2fs_need_verity(inode, f2fs_folio_lblk(F2FS_I_SB(inode), folio));
if (vi)
fsverity_readahead(vi, folio->index, folio_nr_pages(folio));
return f2fs_mpage_readpages(inode, vi, NULL, folio);
@@ -3677,7 +3677,8 @@ static void f2fs_readahead(struct readahead_control *rac)
if (f2fs_has_inline_data(inode))
return;
- vi = f2fs_need_verity(inode, readahead_index(rac));
+ vi = f2fs_need_verity(inode, F2FS_BYTES_TO_BLK(F2FS_I_SB(inode),
+ readahead_pos(rac)));
if (vi)
fsverity_readahead(vi, readahead_index(rac),
readahead_count(rac));
@@ -4717,7 +4718,7 @@ static int f2fs_write_cache_folios(struct address_space *mapping,
op_locked = true;
}
- if (!verity_in_progress) {
+ if (!verity_in_progress || end_pos <= f2fs_verity_metadata_pos(inode)) {
poff = offset_in_folio(folio, isize);
end_index = isize >> PAGE_SHIFT;
diff --git a/fs/f2fs/f2fs.h b/fs/f2fs/f2fs.h
index 8e3224eacdb5..8e38d46c446c 100644
--- a/fs/f2fs/f2fs.h
+++ b/fs/f2fs/f2fs.h
@@ -5345,6 +5345,11 @@ static inline bool f2fs_allow_multi_device_dio(struct f2fs_sb_info *sbi,
return sbi->aligned_blksize;
}
+static inline loff_t f2fs_verity_metadata_pos(const struct inode *inode)
+{
+ return round_up(i_size_read(inode), 65536);
+}
+
#ifdef CONFIG_F2FS_FAULT_INJECTION
extern int f2fs_build_fault_attr(struct f2fs_sb_info *sbi, unsigned long rate,
unsigned long type, enum fault_option fo);
diff --git a/fs/f2fs/file.c b/fs/f2fs/file.c
index 29cfc0e2719a..1c440b5fa9bd 100644
--- a/fs/f2fs/file.c
+++ b/fs/f2fs/file.c
@@ -4273,9 +4273,6 @@ static int f2fs_ioc_enable_verity(struct file *filp, unsigned long arg)
{
struct inode *inode = file_inode(filp);
- if (f2fs_has_subpage_blocks(F2FS_I_SB(inode)))
- return -EOPNOTSUPP;
-
f2fs_update_time(F2FS_I_SB(inode), REQ_TIME);
if (!f2fs_sb_has_verity(F2FS_I_SB(inode))) {
diff --git a/fs/f2fs/verity.c b/fs/f2fs/verity.c
index af1b7f21c1d8..5f579d0b917b 100644
--- a/fs/f2fs/verity.c
+++ b/fs/f2fs/verity.c
@@ -32,11 +32,6 @@
#define F2FS_VERIFY_VER (1)
-static inline loff_t f2fs_verity_metadata_pos(const struct inode *inode)
-{
- return round_up(inode->i_size, 65536);
-}
-
/*
* Write some verity metadata to the inode for FS_IOC_ENABLE_VERITY.
* kernel_write() can't be used because the file descriptor is readonly.
@@ -94,9 +89,6 @@ static int f2fs_begin_enable_verity(struct file *filp)
struct inode *inode = file_inode(filp);
int err;
- if (f2fs_has_subpage_blocks(F2FS_I_SB(inode)))
- return -EOPNOTSUPP;
-
if (f2fs_verity_in_progress(inode))
return -EBUSY;
--
2.56.0.317.g454f8302e1-goog