Line data Source code
1 : /*-------------------------------------------------------------------------
2 : *
3 : * autovacuum.c
4 : *
5 : * PostgreSQL Integrated Autovacuum Daemon
6 : *
7 : * The autovacuum system is structured in two different kinds of processes: the
8 : * autovacuum launcher and the autovacuum worker. The launcher is an
9 : * always-running process, started by the postmaster when the autovacuum GUC
10 : * parameter is set. The launcher schedules autovacuum workers to be started
11 : * when appropriate. The workers are the processes which execute the actual
12 : * vacuuming; they connect to a database as determined in the launcher, and
13 : * once connected they examine the catalogs to select the tables to vacuum.
14 : *
15 : * The autovacuum launcher cannot start the worker processes by itself,
16 : * because doing so would cause robustness issues (namely, failure to shut
17 : * them down on exceptional conditions, and also, since the launcher is
18 : * connected to shared memory and is thus subject to corruption there, it is
19 : * not as robust as the postmaster). So it leaves that task to the postmaster.
20 : *
21 : * There is an autovacuum shared memory area, where the launcher stores
22 : * information about the database it wants vacuumed. When it wants a new
23 : * worker to start, it sets a flag in shared memory and sends a signal to the
24 : * postmaster. Then postmaster knows nothing more than it must start a worker;
25 : * so it forks a new child, which turns into a worker. This new process
26 : * connects to shared memory, and there it can inspect the information that the
27 : * launcher has set up.
28 : *
29 : * If the fork() call fails in the postmaster, it sets a flag in the shared
30 : * memory area, and sends a signal to the launcher. The launcher, upon
31 : * noticing the flag, can try starting the worker again by resending the
32 : * signal. Note that the failure can only be transient (fork failure due to
33 : * high load, memory pressure, too many processes, etc); more permanent
34 : * problems, like failure to connect to a database, are detected later in the
35 : * worker and dealt with just by having the worker exit normally. The launcher
36 : * will launch a new worker again later, per schedule.
37 : *
38 : * When the worker is done vacuuming it sends SIGUSR2 to the launcher. The
39 : * launcher then wakes up and is able to launch another worker, if the schedule
40 : * is so tight that a new worker is needed immediately. At this time the
41 : * launcher can also balance the settings for the various remaining workers'
42 : * cost-based vacuum delay feature.
43 : *
44 : * Note that there can be more than one worker in a database concurrently.
45 : * They will store the table they are currently vacuuming in shared memory, so
46 : * that other workers avoid being blocked waiting for the vacuum lock for that
47 : * table. They will also fetch the last time the table was vacuumed from
48 : * pgstats just before vacuuming each table, to avoid vacuuming a table that
49 : * was just finished being vacuumed by another worker and thus is no longer
50 : * noted in shared memory. However, there is a small window (due to not yet
51 : * holding the relation lock) during which a worker may choose a table that was
52 : * already vacuumed; this is a bug in the current design.
53 : *
54 : * Portions Copyright (c) 1996-2026, PostgreSQL Global Development Group
55 : * Portions Copyright (c) 1994, Regents of the University of California
56 : *
57 : *
58 : * IDENTIFICATION
59 : * src/backend/postmaster/autovacuum.c
60 : *
61 : *-------------------------------------------------------------------------
62 : */
63 : #include "postgres.h"
64 :
65 : #include <signal.h>
66 : #include <sys/time.h>
67 : #include <unistd.h>
68 :
69 : #include "access/heapam.h"
70 : #include "access/htup_details.h"
71 : #include "access/multixact.h"
72 : #include "access/reloptions.h"
73 : #include "access/tableam.h"
74 : #include "access/transam.h"
75 : #include "access/xact.h"
76 : #include "catalog/dependency.h"
77 : #include "catalog/namespace.h"
78 : #include "catalog/pg_database.h"
79 : #include "catalog/pg_namespace.h"
80 : #include "commands/vacuum.h"
81 : #include "common/int.h"
82 : #include "lib/ilist.h"
83 : #include "libpq/pqsignal.h"
84 : #include "miscadmin.h"
85 : #include "nodes/makefuncs.h"
86 : #include "pgstat.h"
87 : #include "postmaster/autovacuum.h"
88 : #include "postmaster/interrupt.h"
89 : #include "postmaster/postmaster.h"
90 : #include "storage/aio_subsys.h"
91 : #include "storage/bufmgr.h"
92 : #include "storage/ipc.h"
93 : #include "storage/fd.h"
94 : #include "storage/latch.h"
95 : #include "storage/lmgr.h"
96 : #include "storage/pmsignal.h"
97 : #include "storage/proc.h"
98 : #include "storage/procsignal.h"
99 : #include "storage/smgr.h"
100 : #include "tcop/tcopprot.h"
101 : #include "utils/fmgroids.h"
102 : #include "utils/fmgrprotos.h"
103 : #include "utils/guc_hooks.h"
104 : #include "utils/injection_point.h"
105 : #include "utils/lsyscache.h"
106 : #include "utils/memutils.h"
107 : #include "utils/ps_status.h"
108 : #include "utils/rel.h"
109 : #include "utils/snapmgr.h"
110 : #include "utils/syscache.h"
111 : #include "utils/timeout.h"
112 : #include "utils/timestamp.h"
113 : #include "utils/wait_event.h"
114 :
115 :
116 : /*
117 : * GUC parameters
118 : */
119 : bool autovacuum_start_daemon = false;
120 : int autovacuum_worker_slots;
121 : int autovacuum_max_workers;
122 : int autovacuum_work_mem = -1;
123 : int autovacuum_naptime;
124 : int autovacuum_vac_thresh;
125 : int autovacuum_vac_max_thresh;
126 : double autovacuum_vac_scale;
127 : int autovacuum_vac_ins_thresh;
128 : double autovacuum_vac_ins_scale;
129 : int autovacuum_anl_thresh;
130 : double autovacuum_anl_scale;
131 : int autovacuum_freeze_max_age;
132 : int autovacuum_multixact_freeze_max_age;
133 :
134 : double autovacuum_vac_cost_delay;
135 : int autovacuum_vac_cost_limit;
136 :
137 : int Log_autovacuum_min_duration = 600000;
138 : int Log_autoanalyze_min_duration = 600000;
139 :
140 : /* the minimum allowed time between two awakenings of the launcher */
141 : #define MIN_AUTOVAC_SLEEPTIME 100.0 /* milliseconds */
142 : #define MAX_AUTOVAC_SLEEPTIME 300 /* seconds */
143 :
144 : /*
145 : * Variables to save the cost-related storage parameters for the current
146 : * relation being vacuumed by this autovacuum worker. Using these, we can
147 : * ensure we don't overwrite the values of vacuum_cost_delay and
148 : * vacuum_cost_limit after reloading the configuration file. They are
149 : * initialized to "invalid" values to indicate that no cost-related storage
150 : * parameters were specified and will be set in do_autovacuum() after checking
151 : * the storage parameters in table_recheck_autovac().
152 : */
153 : static double av_storage_param_cost_delay = -1;
154 : static int av_storage_param_cost_limit = -1;
155 :
156 : /* Flags set by signal handlers */
157 : static volatile sig_atomic_t got_SIGUSR2 = false;
158 :
159 : /* Comparison points for determining whether freeze_max_age is exceeded */
160 : static TransactionId recentXid;
161 : static MultiXactId recentMulti;
162 :
163 : /* Default freeze ages to use for autovacuum (varies by database) */
164 : static int default_freeze_min_age;
165 : static int default_freeze_table_age;
166 : static int default_multixact_freeze_min_age;
167 : static int default_multixact_freeze_table_age;
168 :
169 : /* Memory context for long-lived data */
170 : static MemoryContext AutovacMemCxt;
171 :
172 : /* struct to keep track of databases in launcher */
173 : typedef struct avl_dbase
174 : {
175 : Oid adl_datid; /* hash key -- must be first */
176 : TimestampTz adl_next_worker;
177 : int adl_score;
178 : dlist_node adl_node;
179 : } avl_dbase;
180 :
181 : /* struct to keep track of databases in worker */
182 : typedef struct avw_dbase
183 : {
184 : Oid adw_datid;
185 : char *adw_name;
186 : TransactionId adw_frozenxid;
187 : MultiXactId adw_minmulti;
188 : PgStat_StatDBEntry *adw_entry;
189 : } avw_dbase;
190 :
191 : /* struct to keep track of tables to vacuum and/or analyze, in 1st pass */
192 : typedef struct av_relation
193 : {
194 : Oid ar_toastrelid; /* hash key - must be first */
195 : Oid ar_relid;
196 : bool ar_hasrelopts;
197 : AutoVacOpts ar_reloptions; /* copy of AutoVacOpts from the main table's
198 : * reloptions, or NULL if none */
199 : } av_relation;
200 :
201 : /* struct to keep track of tables to vacuum and/or analyze, after rechecking */
202 : typedef struct autovac_table
203 : {
204 : Oid at_relid;
205 : VacuumParams at_params;
206 : double at_storage_param_vac_cost_delay;
207 : int at_storage_param_vac_cost_limit;
208 : bool at_dobalance;
209 : bool at_sharedrel;
210 : char *at_relname;
211 : char *at_nspname;
212 : char *at_datname;
213 : } autovac_table;
214 :
215 : /*-------------
216 : * This struct holds information about a single worker's whereabouts. We keep
217 : * an array of these in shared memory, sized according to
218 : * autovacuum_worker_slots.
219 : *
220 : * wi_links entry into free list or running list
221 : * wi_dboid OID of the database this worker is supposed to work on
222 : * wi_tableoid OID of the table currently being vacuumed, if any
223 : * wi_sharedrel flag indicating whether table is marked relisshared
224 : * wi_proc pointer to PGPROC of the running worker, NULL if not started
225 : * wi_launchtime Time at which this worker was launched
226 : * wi_dobalance Whether this worker should be included in balance calculations
227 : *
228 : * All fields are protected by AutovacuumLock, except for wi_tableoid and
229 : * wi_sharedrel which are protected by AutovacuumScheduleLock (note these
230 : * two fields are read-only for everyone except that worker itself).
231 : *-------------
232 : */
233 : typedef struct WorkerInfoData
234 : {
235 : dlist_node wi_links;
236 : Oid wi_dboid;
237 : Oid wi_tableoid;
238 : PGPROC *wi_proc;
239 : TimestampTz wi_launchtime;
240 : pg_atomic_flag wi_dobalance;
241 : bool wi_sharedrel;
242 : } WorkerInfoData;
243 :
244 : typedef struct WorkerInfoData *WorkerInfo;
245 :
246 : /*
247 : * Possible signals received by the launcher from remote processes. These are
248 : * stored atomically in shared memory so that other processes can set them
249 : * without locking.
250 : */
251 : typedef enum
252 : {
253 : AutoVacForkFailed, /* failed trying to start a worker */
254 : AutoVacRebalance, /* rebalance the cost limits */
255 : } AutoVacuumSignal;
256 :
257 : #define AutoVacNumSignals (AutoVacRebalance + 1)
258 :
259 : /*
260 : * Autovacuum workitem array, stored in AutoVacuumShmem->av_workItems. This
261 : * list is mostly protected by AutovacuumLock, except that if an item is
262 : * marked 'active' other processes must not modify the work-identifying
263 : * members.
264 : */
265 : typedef struct AutoVacuumWorkItem
266 : {
267 : AutoVacuumWorkItemType avw_type;
268 : bool avw_used; /* below data is valid */
269 : bool avw_active; /* being processed */
270 : Oid avw_database;
271 : Oid avw_relation;
272 : BlockNumber avw_blockNumber;
273 : } AutoVacuumWorkItem;
274 :
275 : #define NUM_WORKITEMS 256
276 :
277 : /*-------------
278 : * The main autovacuum shmem struct. On shared memory we store this main
279 : * struct and the array of WorkerInfo structs. This struct keeps:
280 : *
281 : * av_signal set by other processes to indicate various conditions
282 : * av_launcherpid the PID of the autovacuum launcher
283 : * av_freeWorkers the WorkerInfo freelist
284 : * av_runningWorkers the WorkerInfo non-free queue
285 : * av_startingWorker pointer to WorkerInfo currently being started (cleared by
286 : * the worker itself as soon as it's up and running)
287 : * av_workItems work item array
288 : * av_nworkersForBalance the number of autovacuum workers to use when
289 : * calculating the per worker cost limit
290 : *
291 : * This struct is protected by AutovacuumLock, except for av_signal and parts
292 : * of the worker list (see above).
293 : *-------------
294 : */
295 : typedef struct
296 : {
297 : sig_atomic_t av_signal[AutoVacNumSignals];
298 : pid_t av_launcherpid;
299 : dclist_head av_freeWorkers;
300 : dlist_head av_runningWorkers;
301 : WorkerInfo av_startingWorker;
302 : AutoVacuumWorkItem av_workItems[NUM_WORKITEMS];
303 : pg_atomic_uint32 av_nworkersForBalance;
304 : } AutoVacuumShmemStruct;
305 :
306 : static AutoVacuumShmemStruct *AutoVacuumShmem;
307 :
308 : /*
309 : * the database list (of avl_dbase elements) in the launcher, and the context
310 : * that contains it
311 : */
312 : static dlist_head DatabaseList = DLIST_STATIC_INIT(DatabaseList);
313 : static MemoryContext DatabaseListCxt = NULL;
314 :
315 : /*
316 : * Dummy pointer to persuade Valgrind that we've not leaked the array of
317 : * avl_dbase structs. Make it global to ensure the compiler doesn't
318 : * optimize it away.
319 : */
320 : #ifdef USE_VALGRIND
321 : extern avl_dbase *avl_dbase_array;
322 : avl_dbase *avl_dbase_array;
323 : #endif
324 :
325 : /* Pointer to my own WorkerInfo, valid on each worker */
326 : static WorkerInfo MyWorkerInfo = NULL;
327 :
328 : static Oid do_start_worker(void);
329 : static void ProcessAutoVacLauncherInterrupts(void);
330 : pg_noreturn static void AutoVacLauncherShutdown(void);
331 : static void launcher_determine_sleep(bool canlaunch, bool recursing,
332 : struct timeval *nap);
333 : static void launch_worker(TimestampTz now);
334 : static List *get_database_list(void);
335 : static void rebuild_database_list(Oid newdb);
336 : static int db_comparator(const void *a, const void *b);
337 : static void autovac_recalculate_workers_for_balance(void);
338 :
339 : static void do_autovacuum(void);
340 : static void FreeWorkerInfo(int code, Datum arg);
341 :
342 : static autovac_table *table_recheck_autovac(Oid relid, HTAB *table_toast_map,
343 : TupleDesc pg_class_desc,
344 : int effective_multixact_freeze_max_age);
345 : static void recheck_relation_needs_vacanalyze(Oid relid, AutoVacOpts *avopts,
346 : Form_pg_class classForm,
347 : int effective_multixact_freeze_max_age,
348 : bool *dovacuum, bool *doanalyze, bool *wraparound);
349 : static void relation_needs_vacanalyze(Oid relid, AutoVacOpts *relopts,
350 : Form_pg_class classForm,
351 : PgStat_StatTabEntry *tabentry,
352 : int effective_multixact_freeze_max_age,
353 : bool *dovacuum, bool *doanalyze, bool *wraparound);
354 :
355 : static void autovacuum_do_vac_analyze(autovac_table *tab,
356 : BufferAccessStrategy bstrategy);
357 : static AutoVacOpts *extract_autovac_opts(HeapTuple tup,
358 : TupleDesc pg_class_desc);
359 : static void perform_work_item(AutoVacuumWorkItem *workitem);
360 : static void autovac_report_activity(autovac_table *tab);
361 : static void autovac_report_workitem(AutoVacuumWorkItem *workitem,
362 : const char *nspname, const char *relname);
363 : static void avl_sigusr2_handler(SIGNAL_ARGS);
364 : static bool av_worker_available(void);
365 : static void check_av_worker_gucs(void);
366 :
367 :
368 :
369 : /********************************************************************
370 : * AUTOVACUUM LAUNCHER CODE
371 : ********************************************************************/
372 :
373 : /*
374 : * Main entry point for the autovacuum launcher process.
375 : */
376 : void
377 454 : AutoVacLauncherMain(const void *startup_data, size_t startup_data_len)
378 : {
379 : sigjmp_buf local_sigjmp_buf;
380 :
381 : Assert(startup_data_len == 0);
382 :
383 : /* Release postmaster's working memory context */
384 454 : if (PostmasterContext)
385 : {
386 454 : MemoryContextDelete(PostmasterContext);
387 454 : PostmasterContext = NULL;
388 : }
389 :
390 454 : init_ps_display(NULL);
391 :
392 454 : ereport(DEBUG1,
393 : (errmsg_internal("autovacuum launcher started")));
394 :
395 454 : if (PostAuthDelay)
396 0 : pg_usleep(PostAuthDelay * 1000000L);
397 :
398 : Assert(GetProcessingMode() == InitProcessing);
399 :
400 : /*
401 : * Set up signal handlers. We operate on databases much like a regular
402 : * backend, so we use the same signal handling. See equivalent code in
403 : * tcop/postgres.c.
404 : */
405 454 : pqsignal(SIGHUP, SignalHandlerForConfigReload);
406 454 : pqsignal(SIGINT, StatementCancelHandler);
407 454 : pqsignal(SIGTERM, SignalHandlerForShutdownRequest);
408 : /* SIGQUIT handler was already set up by InitPostmasterChild */
409 :
410 454 : InitializeTimeouts(); /* establishes SIGALRM handler */
411 :
412 454 : pqsignal(SIGPIPE, SIG_IGN);
413 454 : pqsignal(SIGUSR1, procsignal_sigusr1_handler);
414 454 : pqsignal(SIGUSR2, avl_sigusr2_handler);
415 454 : pqsignal(SIGFPE, FloatExceptionHandler);
416 454 : pqsignal(SIGCHLD, SIG_DFL);
417 :
418 : /*
419 : * Create a per-backend PGPROC struct in shared memory. We must do this
420 : * before we can use LWLocks or access any shared memory.
421 : */
422 454 : InitProcess();
423 :
424 : /* Early initialization */
425 454 : BaseInit();
426 :
427 454 : InitPostgres(NULL, InvalidOid, NULL, InvalidOid, 0, NULL);
428 :
429 454 : SetProcessingMode(NormalProcessing);
430 :
431 : /*
432 : * Create a memory context that we will do all our work in. We do this so
433 : * that we can reset the context during error recovery and thereby avoid
434 : * possible memory leaks.
435 : */
436 454 : AutovacMemCxt = AllocSetContextCreate(TopMemoryContext,
437 : "Autovacuum Launcher",
438 : ALLOCSET_DEFAULT_SIZES);
439 454 : MemoryContextSwitchTo(AutovacMemCxt);
440 :
441 : /*
442 : * If an exception is encountered, processing resumes here.
443 : *
444 : * This code is a stripped down version of PostgresMain error recovery.
445 : *
446 : * Note that we use sigsetjmp(..., 1), so that the prevailing signal mask
447 : * (to wit, BlockSig) will be restored when longjmp'ing to here. Thus,
448 : * signals other than SIGQUIT will be blocked until we complete error
449 : * recovery. It might seem that this policy makes the HOLD_INTERRUPTS()
450 : * call redundant, but it is not since InterruptPending might be set
451 : * already.
452 : */
453 454 : if (sigsetjmp(local_sigjmp_buf, 1) != 0)
454 : {
455 : /* since not using PG_TRY, must reset error stack by hand */
456 0 : error_context_stack = NULL;
457 :
458 : /* Prevents interrupts while cleaning up */
459 0 : HOLD_INTERRUPTS();
460 :
461 : /* Forget any pending QueryCancel or timeout request */
462 0 : disable_all_timeouts(false);
463 0 : QueryCancelPending = false; /* second to avoid race condition */
464 :
465 : /* Report the error to the server log */
466 0 : EmitErrorReport();
467 :
468 : /* Abort the current transaction in order to recover */
469 0 : AbortCurrentTransaction();
470 :
471 : /*
472 : * Release any other resources, for the case where we were not in a
473 : * transaction.
474 : */
475 0 : LWLockReleaseAll();
476 0 : pgstat_report_wait_end();
477 0 : pgaio_error_cleanup();
478 0 : UnlockBuffers();
479 : /* this is probably dead code, but let's be safe: */
480 0 : if (AuxProcessResourceOwner)
481 0 : ReleaseAuxProcessResources(false);
482 0 : AtEOXact_Buffers(false);
483 0 : AtEOXact_SMgr();
484 0 : AtEOXact_Files(false);
485 0 : AtEOXact_HashTables(false);
486 :
487 : /*
488 : * Now return to normal top-level context and clear ErrorContext for
489 : * next time.
490 : */
491 0 : MemoryContextSwitchTo(AutovacMemCxt);
492 0 : FlushErrorState();
493 :
494 : /* Flush any leaked data in the top-level context */
495 0 : MemoryContextReset(AutovacMemCxt);
496 :
497 : /* don't leave dangling pointers to freed memory */
498 0 : DatabaseListCxt = NULL;
499 0 : dlist_init(&DatabaseList);
500 :
501 : /* Now we can allow interrupts again */
502 0 : RESUME_INTERRUPTS();
503 :
504 : /* if in shutdown mode, no need for anything further; just go away */
505 0 : if (ShutdownRequestPending)
506 0 : AutoVacLauncherShutdown();
507 :
508 : /*
509 : * Sleep at least 1 second after any error. We don't want to be
510 : * filling the error logs as fast as we can.
511 : */
512 0 : pg_usleep(1000000L);
513 : }
514 :
515 : /* We can now handle ereport(ERROR) */
516 454 : PG_exception_stack = &local_sigjmp_buf;
517 :
518 : /* must unblock signals before calling rebuild_database_list */
519 454 : sigprocmask(SIG_SETMASK, &UnBlockSig, NULL);
520 :
521 : /*
522 : * Set always-secure search path. Launcher doesn't connect to a database,
523 : * so this has no effect.
524 : */
525 454 : SetConfigOption("search_path", "", PGC_SUSET, PGC_S_OVERRIDE);
526 :
527 : /*
528 : * Force zero_damaged_pages OFF in the autovac process, even if it is set
529 : * in postgresql.conf. We don't really want such a dangerous option being
530 : * applied non-interactively.
531 : */
532 454 : SetConfigOption("zero_damaged_pages", "false", PGC_SUSET, PGC_S_OVERRIDE);
533 :
534 : /*
535 : * Force settable timeouts off to avoid letting these settings prevent
536 : * regular maintenance from being executed.
537 : */
538 454 : SetConfigOption("statement_timeout", "0", PGC_SUSET, PGC_S_OVERRIDE);
539 454 : SetConfigOption("transaction_timeout", "0", PGC_SUSET, PGC_S_OVERRIDE);
540 454 : SetConfigOption("lock_timeout", "0", PGC_SUSET, PGC_S_OVERRIDE);
541 454 : SetConfigOption("idle_in_transaction_session_timeout", "0",
542 : PGC_SUSET, PGC_S_OVERRIDE);
543 :
544 : /*
545 : * Force default_transaction_isolation to READ COMMITTED. We don't want
546 : * to pay the overhead of serializable mode, nor add any risk of causing
547 : * deadlocks or delaying other transactions.
548 : */
549 454 : SetConfigOption("default_transaction_isolation", "read committed",
550 : PGC_SUSET, PGC_S_OVERRIDE);
551 :
552 : /*
553 : * Even when system is configured to use a different fetch consistency,
554 : * for autovac we always want fresh stats.
555 : */
556 454 : SetConfigOption("stats_fetch_consistency", "none", PGC_SUSET, PGC_S_OVERRIDE);
557 :
558 : /*
559 : * In emergency mode, just start a worker (unless shutdown was requested)
560 : * and go away.
561 : */
562 454 : if (!AutoVacuumingActive())
563 : {
564 0 : if (!ShutdownRequestPending)
565 0 : do_start_worker();
566 0 : proc_exit(0); /* done */
567 : }
568 :
569 454 : AutoVacuumShmem->av_launcherpid = MyProcPid;
570 :
571 : /*
572 : * Create the initial database list. The invariant we want this list to
573 : * keep is that it's ordered by decreasing next_worker. As soon as an
574 : * entry is updated to a higher time, it will be moved to the front (which
575 : * is correct because the only operation is to add autovacuum_naptime to
576 : * the entry, and time always increases).
577 : */
578 454 : rebuild_database_list(InvalidOid);
579 :
580 : /* loop until shutdown request */
581 5405 : while (!ShutdownRequestPending)
582 : {
583 : struct timeval nap;
584 5405 : TimestampTz current_time = 0;
585 : bool can_launch;
586 :
587 : /*
588 : * This loop is a bit different from the normal use of WaitLatch,
589 : * because we'd like to sleep before the first launch of a child
590 : * process. So it's WaitLatch, then ResetLatch, then check for
591 : * wakening conditions.
592 : */
593 :
594 5405 : launcher_determine_sleep(av_worker_available(), false, &nap);
595 :
596 : /*
597 : * Wait until naptime expires or we get some type of signal (all the
598 : * signal handlers will wake us by calling SetLatch).
599 : */
600 5405 : (void) WaitLatch(MyLatch,
601 : WL_LATCH_SET | WL_TIMEOUT | WL_EXIT_ON_PM_DEATH,
602 5405 : (nap.tv_sec * 1000L) + (nap.tv_usec / 1000L),
603 : WAIT_EVENT_AUTOVACUUM_MAIN);
604 :
605 5402 : ResetLatch(MyLatch);
606 :
607 5402 : ProcessAutoVacLauncherInterrupts();
608 :
609 : /*
610 : * a worker finished, or postmaster signaled failure to start a worker
611 : */
612 4951 : if (got_SIGUSR2)
613 : {
614 2981 : got_SIGUSR2 = false;
615 :
616 : /* rebalance cost limits, if needed */
617 2981 : if (AutoVacuumShmem->av_signal[AutoVacRebalance])
618 : {
619 1449 : LWLockAcquire(AutovacuumLock, LW_EXCLUSIVE);
620 1449 : AutoVacuumShmem->av_signal[AutoVacRebalance] = false;
621 1449 : autovac_recalculate_workers_for_balance();
622 1449 : LWLockRelease(AutovacuumLock);
623 : }
624 :
625 2981 : if (AutoVacuumShmem->av_signal[AutoVacForkFailed])
626 : {
627 : /*
628 : * If the postmaster failed to start a new worker, we sleep
629 : * for a little while and resend the signal. The new worker's
630 : * state is still in memory, so this is sufficient. After
631 : * that, we restart the main loop.
632 : *
633 : * XXX should we put a limit to the number of times we retry?
634 : * I don't think it makes much sense, because a future start
635 : * of a worker will continue to fail in the same way.
636 : */
637 0 : AutoVacuumShmem->av_signal[AutoVacForkFailed] = false;
638 0 : pg_usleep(1000000L); /* 1s */
639 0 : SendPostmasterSignal(PMSIGNAL_START_AUTOVAC_WORKER);
640 1561 : continue;
641 : }
642 : }
643 :
644 : /*
645 : * There are some conditions that we need to check before trying to
646 : * start a worker. First, we need to make sure that there is a worker
647 : * slot available. Second, we need to make sure that no other worker
648 : * failed while starting up.
649 : */
650 :
651 4951 : current_time = GetCurrentTimestamp();
652 4951 : LWLockAcquire(AutovacuumLock, LW_SHARED);
653 :
654 4951 : can_launch = av_worker_available();
655 :
656 4951 : if (AutoVacuumShmem->av_startingWorker != NULL)
657 : {
658 : int waittime;
659 28 : WorkerInfo worker = AutoVacuumShmem->av_startingWorker;
660 :
661 : /*
662 : * We can't launch another worker when another one is still
663 : * starting up (or failed while doing so), so just sleep for a bit
664 : * more; that worker will wake us up again as soon as it's ready.
665 : * We will only wait autovacuum_naptime seconds (up to a maximum
666 : * of 60 seconds) for this to happen however. Note that failure
667 : * to connect to a particular database is not a problem here,
668 : * because the worker removes itself from the startingWorker
669 : * pointer before trying to connect. Problems detected by the
670 : * postmaster (like fork() failure) are also reported and handled
671 : * differently. The only problems that may cause this code to
672 : * fire are errors in the earlier sections of AutoVacWorkerMain,
673 : * before the worker removes the WorkerInfo from the
674 : * startingWorker pointer.
675 : */
676 28 : waittime = Min(autovacuum_naptime, 60) * 1000;
677 28 : if (TimestampDifferenceExceeds(worker->wi_launchtime, current_time,
678 : waittime))
679 : {
680 0 : LWLockRelease(AutovacuumLock);
681 0 : LWLockAcquire(AutovacuumLock, LW_EXCLUSIVE);
682 :
683 : /*
684 : * No other process can put a worker in starting mode, so if
685 : * startingWorker is still INVALID after exchanging our lock,
686 : * we assume it's the same one we saw above (so we don't
687 : * recheck the launch time).
688 : */
689 0 : if (AutoVacuumShmem->av_startingWorker != NULL)
690 : {
691 0 : worker = AutoVacuumShmem->av_startingWorker;
692 0 : worker->wi_dboid = InvalidOid;
693 0 : worker->wi_tableoid = InvalidOid;
694 0 : worker->wi_sharedrel = false;
695 0 : worker->wi_proc = NULL;
696 0 : worker->wi_launchtime = 0;
697 0 : dclist_push_head(&AutoVacuumShmem->av_freeWorkers,
698 : &worker->wi_links);
699 0 : AutoVacuumShmem->av_startingWorker = NULL;
700 0 : ereport(WARNING,
701 : errmsg("autovacuum worker took too long to start; canceled"));
702 : }
703 : }
704 : else
705 28 : can_launch = false;
706 : }
707 4951 : LWLockRelease(AutovacuumLock); /* either shared or exclusive */
708 :
709 : /* if we can't do anything, just go back to sleep */
710 4951 : if (!can_launch)
711 1561 : continue;
712 :
713 : /* We're OK to start a new worker */
714 :
715 3390 : if (dlist_is_empty(&DatabaseList))
716 : {
717 : /*
718 : * Special case when the list is empty: start a worker right away.
719 : * This covers the initial case, when no database is in pgstats
720 : * (thus the list is empty). Note that the constraints in
721 : * launcher_determine_sleep keep us from starting workers too
722 : * quickly (at most once every autovacuum_naptime when the list is
723 : * empty).
724 : */
725 2 : launch_worker(current_time);
726 : }
727 : else
728 : {
729 : /*
730 : * because rebuild_database_list constructs a list with most
731 : * distant adl_next_worker first, we obtain our database from the
732 : * tail of the list.
733 : */
734 : avl_dbase *avdb;
735 :
736 3388 : avdb = dlist_tail_element(avl_dbase, adl_node, &DatabaseList);
737 :
738 : /*
739 : * launch a worker if next_worker is right now or it is in the
740 : * past
741 : */
742 3388 : if (TimestampDifferenceExceeds(avdb->adl_next_worker,
743 : current_time, 0))
744 1493 : launch_worker(current_time);
745 : }
746 : }
747 :
748 0 : AutoVacLauncherShutdown();
749 : }
750 :
751 : /*
752 : * Process any new interrupts.
753 : */
754 : static void
755 5402 : ProcessAutoVacLauncherInterrupts(void)
756 : {
757 : /* the normal shutdown case */
758 5402 : if (ShutdownRequestPending)
759 450 : AutoVacLauncherShutdown();
760 :
761 4952 : if (ConfigReloadPending)
762 : {
763 50 : int autovacuum_max_workers_prev = autovacuum_max_workers;
764 :
765 50 : ConfigReloadPending = false;
766 50 : ProcessConfigFile(PGC_SIGHUP);
767 :
768 : /* shutdown requested in config file? */
769 50 : if (!AutoVacuumingActive())
770 1 : AutoVacLauncherShutdown();
771 :
772 : /*
773 : * If autovacuum_max_workers changed, emit a WARNING if
774 : * autovacuum_worker_slots < autovacuum_max_workers. If it didn't
775 : * change, skip this to avoid too many repeated log messages.
776 : */
777 49 : if (autovacuum_max_workers_prev != autovacuum_max_workers)
778 0 : check_av_worker_gucs();
779 :
780 : /* rebuild the list in case the naptime changed */
781 49 : rebuild_database_list(InvalidOid);
782 : }
783 :
784 : /* Process barrier events */
785 4951 : if (ProcSignalBarrierPending)
786 42 : ProcessProcSignalBarrier();
787 :
788 : /* Perform logging of memory contexts of this process */
789 4951 : if (LogMemoryContextPending)
790 0 : ProcessLogMemoryContextInterrupt();
791 :
792 : /* Process sinval catchup interrupts that happened while sleeping */
793 4951 : ProcessCatchupInterrupt();
794 4951 : }
795 :
796 : /*
797 : * Perform a normal exit from the autovac launcher.
798 : */
799 : static void
800 451 : AutoVacLauncherShutdown(void)
801 : {
802 451 : ereport(DEBUG1,
803 : (errmsg_internal("autovacuum launcher shutting down")));
804 451 : AutoVacuumShmem->av_launcherpid = 0;
805 :
806 451 : proc_exit(0); /* done */
807 : }
808 :
809 : /*
810 : * Determine the time to sleep, based on the database list.
811 : *
812 : * The "canlaunch" parameter indicates whether we can start a worker right now,
813 : * for example due to the workers being all busy. If this is false, we will
814 : * cause a long sleep, which will be interrupted when a worker exits.
815 : */
816 : static void
817 5487 : launcher_determine_sleep(bool canlaunch, bool recursing, struct timeval *nap)
818 : {
819 : /*
820 : * We sleep until the next scheduled vacuum. We trust that when the
821 : * database list was built, care was taken so that no entries have times
822 : * in the past; if the first entry has too close a next_worker value, or a
823 : * time in the past, we will sleep a small nominal time.
824 : */
825 5487 : if (!canlaunch)
826 : {
827 2866 : nap->tv_sec = autovacuum_naptime;
828 2866 : nap->tv_usec = 0;
829 : }
830 2621 : else if (!dlist_is_empty(&DatabaseList))
831 : {
832 2591 : TimestampTz current_time = GetCurrentTimestamp();
833 : TimestampTz next_wakeup;
834 : avl_dbase *avdb;
835 : long secs;
836 : int usecs;
837 :
838 2591 : avdb = dlist_tail_element(avl_dbase, adl_node, &DatabaseList);
839 :
840 2591 : next_wakeup = avdb->adl_next_worker;
841 2591 : TimestampDifference(current_time, next_wakeup, &secs, &usecs);
842 :
843 2591 : nap->tv_sec = secs;
844 2591 : nap->tv_usec = usecs;
845 : }
846 : else
847 : {
848 : /* list is empty, sleep for whole autovacuum_naptime seconds */
849 30 : nap->tv_sec = autovacuum_naptime;
850 30 : nap->tv_usec = 0;
851 : }
852 :
853 : /*
854 : * If the result is exactly zero, it means a database had an entry with
855 : * time in the past. Rebuild the list so that the databases are evenly
856 : * distributed again, and recalculate the time to sleep. This can happen
857 : * if there are more tables needing vacuum than workers, and they all take
858 : * longer to vacuum than autovacuum_naptime.
859 : *
860 : * We only recurse once. rebuild_database_list should always return times
861 : * in the future, but it seems best not to trust too much on that.
862 : */
863 5487 : if (nap->tv_sec == 0 && nap->tv_usec == 0 && !recursing)
864 : {
865 82 : rebuild_database_list(InvalidOid);
866 82 : launcher_determine_sleep(canlaunch, true, nap);
867 82 : return;
868 : }
869 :
870 : /* The smallest time we'll allow the launcher to sleep. */
871 5405 : if (nap->tv_sec <= 0 && nap->tv_usec <= MIN_AUTOVAC_SLEEPTIME * 1000)
872 : {
873 250 : nap->tv_sec = 0;
874 250 : nap->tv_usec = MIN_AUTOVAC_SLEEPTIME * 1000;
875 : }
876 :
877 : /*
878 : * If the sleep time is too large, clamp it to an arbitrary maximum (plus
879 : * any fractional seconds, for simplicity). This avoids an essentially
880 : * infinite sleep in strange cases like the system clock going backwards a
881 : * few years.
882 : */
883 5405 : if (nap->tv_sec > MAX_AUTOVAC_SLEEPTIME)
884 9 : nap->tv_sec = MAX_AUTOVAC_SLEEPTIME;
885 : }
886 :
887 : /*
888 : * Build an updated DatabaseList. It must only contain databases that appear
889 : * in pgstats, and must be sorted by next_worker from highest to lowest,
890 : * distributed regularly across the next autovacuum_naptime interval.
891 : *
892 : * Receives the Oid of the database that made this list be generated (we call
893 : * this the "new" database, because when the database was already present on
894 : * the list, we expect that this function is not called at all). The
895 : * preexisting list, if any, will be used to preserve the order of the
896 : * databases in the autovacuum_naptime period. The new database is put at the
897 : * end of the interval. The actual values are not saved, which should not be
898 : * much of a problem.
899 : */
900 : static void
901 600 : rebuild_database_list(Oid newdb)
902 : {
903 : List *dblist;
904 : ListCell *cell;
905 : MemoryContext newcxt;
906 : MemoryContext oldcxt;
907 : MemoryContext tmpcxt;
908 : HASHCTL hctl;
909 : int score;
910 : int nelems;
911 : HTAB *dbhash;
912 : dlist_iter iter;
913 :
914 600 : newcxt = AllocSetContextCreate(AutovacMemCxt,
915 : "Autovacuum database list",
916 : ALLOCSET_DEFAULT_SIZES);
917 600 : tmpcxt = AllocSetContextCreate(newcxt,
918 : "Autovacuum database list (tmp)",
919 : ALLOCSET_DEFAULT_SIZES);
920 600 : oldcxt = MemoryContextSwitchTo(tmpcxt);
921 :
922 : /*
923 : * Implementing this is not as simple as it sounds, because we need to put
924 : * the new database at the end of the list; next the databases that were
925 : * already on the list, and finally (at the tail of the list) all the
926 : * other databases that are not on the existing list.
927 : *
928 : * To do this, we build an empty hash table of scored databases. We will
929 : * start with the lowest score (zero) for the new database, then
930 : * increasing scores for the databases in the existing list, in order, and
931 : * lastly increasing scores for all databases gotten via
932 : * get_database_list() that are not already on the hash.
933 : *
934 : * Then we will put all the hash elements into an array, sort the array by
935 : * score, and finally put the array elements into the new doubly linked
936 : * list.
937 : */
938 600 : hctl.keysize = sizeof(Oid);
939 600 : hctl.entrysize = sizeof(avl_dbase);
940 600 : hctl.hcxt = tmpcxt;
941 600 : dbhash = hash_create("autovacuum db hash", 20, &hctl, /* magic number here
942 : * FIXME */
943 : HASH_ELEM | HASH_BLOBS | HASH_CONTEXT);
944 :
945 : /* start by inserting the new database */
946 600 : score = 0;
947 600 : if (OidIsValid(newdb))
948 : {
949 : avl_dbase *db;
950 : PgStat_StatDBEntry *entry;
951 :
952 : /* only consider this database if it has a pgstat entry */
953 15 : entry = pgstat_fetch_stat_dbentry(newdb);
954 15 : if (entry != NULL)
955 : {
956 : /* we assume it isn't found because the hash was just created */
957 12 : db = hash_search(dbhash, &newdb, HASH_ENTER, NULL);
958 :
959 : /* hash_search already filled in the key */
960 12 : db->adl_score = score++;
961 : /* next_worker is filled in later */
962 : }
963 : }
964 :
965 : /* Now insert the databases from the existing list */
966 955 : dlist_foreach(iter, &DatabaseList)
967 : {
968 355 : avl_dbase *avdb = dlist_container(avl_dbase, adl_node, iter.cur);
969 : avl_dbase *db;
970 : bool found;
971 : PgStat_StatDBEntry *entry;
972 :
973 : /*
974 : * skip databases with no stat entries -- in particular, this gets rid
975 : * of dropped databases
976 : */
977 355 : entry = pgstat_fetch_stat_dbentry(avdb->adl_datid);
978 355 : if (entry == NULL)
979 0 : continue;
980 :
981 355 : db = hash_search(dbhash, &(avdb->adl_datid), HASH_ENTER, &found);
982 :
983 355 : if (!found)
984 : {
985 : /* hash_search already filled in the key */
986 355 : db->adl_score = score++;
987 : /* next_worker is filled in later */
988 : }
989 : }
990 :
991 : /* finally, insert all qualifying databases not previously inserted */
992 600 : dblist = get_database_list();
993 2716 : foreach(cell, dblist)
994 : {
995 2116 : avw_dbase *avdb = lfirst(cell);
996 : avl_dbase *db;
997 : bool found;
998 : PgStat_StatDBEntry *entry;
999 :
1000 : /* only consider databases with a pgstat entry */
1001 2116 : entry = pgstat_fetch_stat_dbentry(avdb->adw_datid);
1002 2116 : if (entry == NULL)
1003 1082 : continue;
1004 :
1005 1034 : db = hash_search(dbhash, &(avdb->adw_datid), HASH_ENTER, &found);
1006 : /* only update the score if the database was not already on the hash */
1007 1034 : if (!found)
1008 : {
1009 : /* hash_search already filled in the key */
1010 667 : db->adl_score = score++;
1011 : /* next_worker is filled in later */
1012 : }
1013 : }
1014 600 : nelems = score;
1015 :
1016 : /* from here on, the allocated memory belongs to the new list */
1017 600 : MemoryContextSwitchTo(newcxt);
1018 600 : dlist_init(&DatabaseList);
1019 :
1020 600 : if (nelems > 0)
1021 : {
1022 : TimestampTz current_time;
1023 : int millis_increment;
1024 : avl_dbase *dbary;
1025 : avl_dbase *db;
1026 : HASH_SEQ_STATUS seq;
1027 : int i;
1028 :
1029 : /* put all the hash elements into an array */
1030 572 : dbary = palloc(nelems * sizeof(avl_dbase));
1031 : /* keep Valgrind quiet */
1032 : #ifdef USE_VALGRIND
1033 : avl_dbase_array = dbary;
1034 : #endif
1035 :
1036 572 : i = 0;
1037 572 : hash_seq_init(&seq, dbhash);
1038 1606 : while ((db = hash_seq_search(&seq)) != NULL)
1039 1034 : memcpy(&(dbary[i++]), db, sizeof(avl_dbase));
1040 :
1041 : /* sort the array */
1042 572 : qsort(dbary, nelems, sizeof(avl_dbase), db_comparator);
1043 :
1044 : /*
1045 : * Determine the time interval between databases in the schedule. If
1046 : * we see that the configured naptime would take us to sleep times
1047 : * lower than our min sleep time (which launcher_determine_sleep is
1048 : * coded not to allow), silently use a larger naptime (but don't touch
1049 : * the GUC variable).
1050 : */
1051 572 : millis_increment = 1000.0 * autovacuum_naptime / nelems;
1052 572 : if (millis_increment <= MIN_AUTOVAC_SLEEPTIME)
1053 0 : millis_increment = MIN_AUTOVAC_SLEEPTIME * 1.1;
1054 :
1055 572 : current_time = GetCurrentTimestamp();
1056 :
1057 : /*
1058 : * move the elements from the array into the dlist, setting the
1059 : * next_worker while walking the array
1060 : */
1061 1606 : for (i = 0; i < nelems; i++)
1062 : {
1063 1034 : db = &(dbary[i]);
1064 :
1065 1034 : current_time = TimestampTzPlusMilliseconds(current_time,
1066 : millis_increment);
1067 1034 : db->adl_next_worker = current_time;
1068 :
1069 : /* later elements should go closer to the head of the list */
1070 1034 : dlist_push_head(&DatabaseList, &db->adl_node);
1071 : }
1072 : }
1073 :
1074 : /* all done, clean up memory */
1075 600 : if (DatabaseListCxt != NULL)
1076 146 : MemoryContextDelete(DatabaseListCxt);
1077 600 : MemoryContextDelete(tmpcxt);
1078 600 : DatabaseListCxt = newcxt;
1079 600 : MemoryContextSwitchTo(oldcxt);
1080 600 : }
1081 :
1082 : /* qsort comparator for avl_dbase, using adl_score */
1083 : static int
1084 699 : db_comparator(const void *a, const void *b)
1085 : {
1086 1398 : return pg_cmp_s32(((const avl_dbase *) a)->adl_score,
1087 699 : ((const avl_dbase *) b)->adl_score);
1088 : }
1089 :
1090 : /*
1091 : * do_start_worker
1092 : *
1093 : * Bare-bones procedure for starting an autovacuum worker from the launcher.
1094 : * It determines what database to work on, sets up shared memory stuff and
1095 : * signals postmaster to start the worker. It fails gracefully if invoked when
1096 : * autovacuum_workers are already active.
1097 : *
1098 : * Return value is the OID of the database that the worker is going to process,
1099 : * or InvalidOid if no worker was actually started.
1100 : */
1101 : static Oid
1102 1495 : do_start_worker(void)
1103 : {
1104 : List *dblist;
1105 : ListCell *cell;
1106 : TransactionId xidForceLimit;
1107 : MultiXactId multiForceLimit;
1108 : bool for_xid_wrap;
1109 : bool for_multi_wrap;
1110 : avw_dbase *avdb;
1111 : TimestampTz current_time;
1112 1495 : bool skipit = false;
1113 1495 : Oid retval = InvalidOid;
1114 : MemoryContext tmpcxt,
1115 : oldcxt;
1116 :
1117 : /* return quickly when there are no free workers */
1118 1495 : LWLockAcquire(AutovacuumLock, LW_SHARED);
1119 1495 : if (!av_worker_available())
1120 : {
1121 0 : LWLockRelease(AutovacuumLock);
1122 0 : return InvalidOid;
1123 : }
1124 1495 : LWLockRelease(AutovacuumLock);
1125 :
1126 : /*
1127 : * Create and switch to a temporary context to avoid leaking the memory
1128 : * allocated for the database list.
1129 : */
1130 1495 : tmpcxt = AllocSetContextCreate(CurrentMemoryContext,
1131 : "Autovacuum start worker (tmp)",
1132 : ALLOCSET_DEFAULT_SIZES);
1133 1495 : oldcxt = MemoryContextSwitchTo(tmpcxt);
1134 :
1135 : /* Get a list of databases */
1136 1495 : dblist = get_database_list();
1137 :
1138 : /*
1139 : * Determine the oldest datfrozenxid/relfrozenxid that we will allow to
1140 : * pass without forcing a vacuum. (This limit can be tightened for
1141 : * particular tables, but not loosened.)
1142 : */
1143 1495 : recentXid = ReadNextTransactionId();
1144 1495 : xidForceLimit = recentXid - autovacuum_freeze_max_age;
1145 : /* ensure it's a "normal" XID, else TransactionIdPrecedes misbehaves */
1146 : /* this can cause the limit to go backwards by 3, but that's OK */
1147 1495 : if (xidForceLimit < FirstNormalTransactionId)
1148 0 : xidForceLimit -= FirstNormalTransactionId;
1149 :
1150 : /* Also determine the oldest datminmxid we will consider. */
1151 1495 : recentMulti = ReadNextMultiXactId();
1152 1495 : multiForceLimit = recentMulti - MultiXactMemberFreezeThreshold();
1153 1495 : if (multiForceLimit < FirstMultiXactId)
1154 0 : multiForceLimit -= FirstMultiXactId;
1155 :
1156 : /*
1157 : * Choose a database to connect to. We pick the database that was least
1158 : * recently auto-vacuumed, or one that needs vacuuming to prevent Xid
1159 : * wraparound-related data loss. If any db at risk of Xid wraparound is
1160 : * found, we pick the one with oldest datfrozenxid, independently of
1161 : * autovacuum times; similarly we pick the one with the oldest datminmxid
1162 : * if any is in MultiXactId wraparound. Note that those in Xid wraparound
1163 : * danger are given more priority than those in multi wraparound danger.
1164 : *
1165 : * Note that a database with no stats entry is not considered, except for
1166 : * Xid wraparound purposes. The theory is that if no one has ever
1167 : * connected to it since the stats were last initialized, it doesn't need
1168 : * vacuuming.
1169 : *
1170 : * XXX This could be improved if we had more info about whether it needs
1171 : * vacuuming before connecting to it. Perhaps look through the pgstats
1172 : * data for the database's tables? One idea is to keep track of the
1173 : * number of new and dead tuples per database in pgstats. However it
1174 : * isn't clear how to construct a metric that measures that and not cause
1175 : * starvation for less busy databases.
1176 : */
1177 1495 : avdb = NULL;
1178 1495 : for_xid_wrap = false;
1179 1495 : for_multi_wrap = false;
1180 1495 : current_time = GetCurrentTimestamp();
1181 6045 : foreach(cell, dblist)
1182 : {
1183 4550 : avw_dbase *tmp = lfirst(cell);
1184 : dlist_iter iter;
1185 :
1186 : /* Check to see if this one is at risk of wraparound */
1187 4550 : if (TransactionIdPrecedes(tmp->adw_frozenxid, xidForceLimit))
1188 : {
1189 4104 : if (avdb == NULL ||
1190 1627 : TransactionIdPrecedes(tmp->adw_frozenxid,
1191 : avdb->adw_frozenxid))
1192 929 : avdb = tmp;
1193 2477 : for_xid_wrap = true;
1194 3549 : continue;
1195 : }
1196 2073 : else if (for_xid_wrap)
1197 76 : continue; /* ignore not-at-risk DBs */
1198 1997 : else if (MultiXactIdPrecedes(tmp->adw_minmulti, multiForceLimit))
1199 : {
1200 0 : if (avdb == NULL ||
1201 0 : MultiXactIdPrecedes(tmp->adw_minmulti, avdb->adw_minmulti))
1202 0 : avdb = tmp;
1203 0 : for_multi_wrap = true;
1204 0 : continue;
1205 : }
1206 1997 : else if (for_multi_wrap)
1207 0 : continue; /* ignore not-at-risk DBs */
1208 :
1209 : /* Find pgstat entry if any */
1210 1997 : tmp->adw_entry = pgstat_fetch_stat_dbentry(tmp->adw_datid);
1211 :
1212 : /*
1213 : * Skip a database with no pgstat entry; it means it hasn't seen any
1214 : * activity.
1215 : */
1216 1997 : if (!tmp->adw_entry)
1217 68 : continue;
1218 :
1219 : /*
1220 : * Also, skip a database that appears on the database list as having
1221 : * been processed recently (less than autovacuum_naptime seconds ago).
1222 : * We do this so that we don't select a database which we just
1223 : * selected, but that pgstat hasn't gotten around to updating the last
1224 : * autovacuum time yet.
1225 : */
1226 1929 : skipit = false;
1227 :
1228 4028 : dlist_reverse_foreach(iter, &DatabaseList)
1229 : {
1230 3995 : avl_dbase *dbp = dlist_container(avl_dbase, adl_node, iter.cur);
1231 :
1232 3995 : if (dbp->adl_datid == tmp->adw_datid)
1233 : {
1234 : /*
1235 : * Skip this database if its next_worker value falls between
1236 : * the current time and the current time plus naptime.
1237 : */
1238 1896 : if (!TimestampDifferenceExceeds(dbp->adl_next_worker,
1239 928 : current_time, 0) &&
1240 928 : !TimestampDifferenceExceeds(current_time,
1241 : dbp->adl_next_worker,
1242 : autovacuum_naptime * 1000))
1243 928 : skipit = true;
1244 :
1245 1896 : break;
1246 : }
1247 : }
1248 1929 : if (skipit)
1249 928 : continue;
1250 :
1251 : /*
1252 : * Remember the db with oldest autovac time. (If we are here, both
1253 : * tmp->entry and db->entry must be non-null.)
1254 : */
1255 1001 : if (avdb == NULL ||
1256 358 : tmp->adw_entry->last_autovac_time < avdb->adw_entry->last_autovac_time)
1257 748 : avdb = tmp;
1258 : }
1259 :
1260 : /* Found a database -- process it */
1261 1495 : if (avdb != NULL)
1262 : {
1263 : WorkerInfo worker;
1264 : dlist_node *wptr;
1265 :
1266 1493 : LWLockAcquire(AutovacuumLock, LW_EXCLUSIVE);
1267 :
1268 : /*
1269 : * Get a worker entry from the freelist. We checked above, so there
1270 : * really should be a free slot.
1271 : */
1272 1493 : wptr = dclist_pop_head_node(&AutoVacuumShmem->av_freeWorkers);
1273 :
1274 1493 : worker = dlist_container(WorkerInfoData, wi_links, wptr);
1275 1493 : worker->wi_dboid = avdb->adw_datid;
1276 1493 : worker->wi_proc = NULL;
1277 1493 : worker->wi_launchtime = GetCurrentTimestamp();
1278 :
1279 1493 : AutoVacuumShmem->av_startingWorker = worker;
1280 :
1281 1493 : LWLockRelease(AutovacuumLock);
1282 :
1283 1493 : SendPostmasterSignal(PMSIGNAL_START_AUTOVAC_WORKER);
1284 :
1285 1493 : retval = avdb->adw_datid;
1286 : }
1287 2 : else if (skipit)
1288 : {
1289 : /*
1290 : * If we skipped all databases on the list, rebuild it, because it
1291 : * probably contains a dropped database.
1292 : */
1293 0 : rebuild_database_list(InvalidOid);
1294 : }
1295 :
1296 1495 : MemoryContextSwitchTo(oldcxt);
1297 1495 : MemoryContextDelete(tmpcxt);
1298 :
1299 1495 : return retval;
1300 : }
1301 :
1302 : /*
1303 : * launch_worker
1304 : *
1305 : * Wrapper for starting a worker from the launcher. Besides actually starting
1306 : * it, update the database list to reflect the next time that another one will
1307 : * need to be started on the selected database. The actual database choice is
1308 : * left to do_start_worker.
1309 : *
1310 : * This routine is also expected to insert an entry into the database list if
1311 : * the selected database was previously absent from the list.
1312 : */
1313 : static void
1314 1495 : launch_worker(TimestampTz now)
1315 : {
1316 : Oid dbid;
1317 : dlist_iter iter;
1318 :
1319 1495 : dbid = do_start_worker();
1320 1495 : if (OidIsValid(dbid))
1321 : {
1322 1493 : bool found = false;
1323 :
1324 : /*
1325 : * Walk the database list and update the corresponding entry. If the
1326 : * database is not on the list, we'll recreate the list.
1327 : */
1328 3094 : dlist_foreach(iter, &DatabaseList)
1329 : {
1330 3079 : avl_dbase *avdb = dlist_container(avl_dbase, adl_node, iter.cur);
1331 :
1332 3079 : if (avdb->adl_datid == dbid)
1333 : {
1334 1478 : found = true;
1335 :
1336 : /*
1337 : * add autovacuum_naptime seconds to the current time, and use
1338 : * that as the new "next_worker" field for this database.
1339 : */
1340 1478 : avdb->adl_next_worker =
1341 1478 : TimestampTzPlusMilliseconds(now, autovacuum_naptime * 1000);
1342 :
1343 1478 : dlist_move_head(&DatabaseList, iter.cur);
1344 1478 : break;
1345 : }
1346 : }
1347 :
1348 : /*
1349 : * If the database was not present in the database list, we rebuild
1350 : * the list. It's possible that the database does not get into the
1351 : * list anyway, for example if it's a database that doesn't have a
1352 : * pgstat entry, but this is not a problem because we don't want to
1353 : * schedule workers regularly into those in any case.
1354 : */
1355 1493 : if (!found)
1356 15 : rebuild_database_list(dbid);
1357 : }
1358 1495 : }
1359 :
1360 : /*
1361 : * Called from postmaster to signal a failure to fork a process to become
1362 : * worker. The postmaster should kill(SIGUSR2) the launcher shortly
1363 : * after calling this function.
1364 : */
1365 : void
1366 0 : AutoVacWorkerFailed(void)
1367 : {
1368 0 : AutoVacuumShmem->av_signal[AutoVacForkFailed] = true;
1369 0 : }
1370 :
1371 : /* SIGUSR2: a worker is up and running, or just finished, or failed to fork */
1372 : static void
1373 2985 : avl_sigusr2_handler(SIGNAL_ARGS)
1374 : {
1375 2985 : got_SIGUSR2 = true;
1376 2985 : SetLatch(MyLatch);
1377 2985 : }
1378 :
1379 :
1380 : /********************************************************************
1381 : * AUTOVACUUM WORKER CODE
1382 : ********************************************************************/
1383 :
1384 : /*
1385 : * Main entry point for autovacuum worker processes.
1386 : */
1387 : void
1388 1499 : AutoVacWorkerMain(const void *startup_data, size_t startup_data_len)
1389 : {
1390 : sigjmp_buf local_sigjmp_buf;
1391 : Oid dbid;
1392 :
1393 : Assert(startup_data_len == 0);
1394 :
1395 : /* Release postmaster's working memory context */
1396 1499 : if (PostmasterContext)
1397 : {
1398 1499 : MemoryContextDelete(PostmasterContext);
1399 1499 : PostmasterContext = NULL;
1400 : }
1401 :
1402 1499 : init_ps_display(NULL);
1403 :
1404 : Assert(GetProcessingMode() == InitProcessing);
1405 :
1406 : /*
1407 : * Set up signal handlers. We operate on databases much like a regular
1408 : * backend, so we use the same signal handling. See equivalent code in
1409 : * tcop/postgres.c.
1410 : */
1411 1499 : pqsignal(SIGHUP, SignalHandlerForConfigReload);
1412 :
1413 : /*
1414 : * SIGINT is used to signal canceling the current table's vacuum; SIGTERM
1415 : * means abort and exit cleanly, and SIGQUIT means abandon ship.
1416 : */
1417 1499 : pqsignal(SIGINT, StatementCancelHandler);
1418 1499 : pqsignal(SIGTERM, die);
1419 : /* SIGQUIT handler was already set up by InitPostmasterChild */
1420 :
1421 1499 : InitializeTimeouts(); /* establishes SIGALRM handler */
1422 :
1423 1499 : pqsignal(SIGPIPE, SIG_IGN);
1424 1499 : pqsignal(SIGUSR1, procsignal_sigusr1_handler);
1425 1499 : pqsignal(SIGUSR2, SIG_IGN);
1426 1499 : pqsignal(SIGFPE, FloatExceptionHandler);
1427 1499 : pqsignal(SIGCHLD, SIG_DFL);
1428 :
1429 : /*
1430 : * Create a per-backend PGPROC struct in shared memory. We must do this
1431 : * before we can use LWLocks or access any shared memory.
1432 : */
1433 1499 : InitProcess();
1434 :
1435 : /* Early initialization */
1436 1499 : BaseInit();
1437 :
1438 : /*
1439 : * If an exception is encountered, processing resumes here.
1440 : *
1441 : * Unlike most auxiliary processes, we don't attempt to continue
1442 : * processing after an error; we just clean up and exit. The autovac
1443 : * launcher is responsible for spawning another worker later.
1444 : *
1445 : * Note that we use sigsetjmp(..., 1), so that the prevailing signal mask
1446 : * (to wit, BlockSig) will be restored when longjmp'ing to here. Thus,
1447 : * signals other than SIGQUIT will be blocked until we exit. It might
1448 : * seem that this policy makes the HOLD_INTERRUPTS() call redundant, but
1449 : * it is not since InterruptPending might be set already.
1450 : */
1451 1499 : if (sigsetjmp(local_sigjmp_buf, 1) != 0)
1452 : {
1453 : /* since not using PG_TRY, must reset error stack by hand */
1454 0 : error_context_stack = NULL;
1455 :
1456 : /* Prevents interrupts while cleaning up */
1457 0 : HOLD_INTERRUPTS();
1458 :
1459 : /* Report the error to the server log */
1460 0 : EmitErrorReport();
1461 :
1462 : /*
1463 : * We can now go away. Note that because we called InitProcess, a
1464 : * callback was registered to do ProcKill, which will clean up
1465 : * necessary state.
1466 : */
1467 0 : proc_exit(0);
1468 : }
1469 :
1470 : /* We can now handle ereport(ERROR) */
1471 1499 : PG_exception_stack = &local_sigjmp_buf;
1472 :
1473 1499 : sigprocmask(SIG_SETMASK, &UnBlockSig, NULL);
1474 :
1475 : /*
1476 : * Set always-secure search path, so malicious users can't redirect user
1477 : * code (e.g. pg_index.indexprs). (That code runs in a
1478 : * SECURITY_RESTRICTED_OPERATION sandbox, so malicious users could not
1479 : * take control of the entire autovacuum worker in any case.)
1480 : */
1481 1499 : SetConfigOption("search_path", "", PGC_SUSET, PGC_S_OVERRIDE);
1482 :
1483 : /*
1484 : * Force zero_damaged_pages OFF in the autovac process, even if it is set
1485 : * in postgresql.conf. We don't really want such a dangerous option being
1486 : * applied non-interactively.
1487 : */
1488 1499 : SetConfigOption("zero_damaged_pages", "false", PGC_SUSET, PGC_S_OVERRIDE);
1489 :
1490 : /*
1491 : * Force settable timeouts off to avoid letting these settings prevent
1492 : * regular maintenance from being executed.
1493 : */
1494 1499 : SetConfigOption("statement_timeout", "0", PGC_SUSET, PGC_S_OVERRIDE);
1495 1499 : SetConfigOption("transaction_timeout", "0", PGC_SUSET, PGC_S_OVERRIDE);
1496 1499 : SetConfigOption("lock_timeout", "0", PGC_SUSET, PGC_S_OVERRIDE);
1497 1499 : SetConfigOption("idle_in_transaction_session_timeout", "0",
1498 : PGC_SUSET, PGC_S_OVERRIDE);
1499 :
1500 : /*
1501 : * Force default_transaction_isolation to READ COMMITTED. We don't want
1502 : * to pay the overhead of serializable mode, nor add any risk of causing
1503 : * deadlocks or delaying other transactions.
1504 : */
1505 1499 : SetConfigOption("default_transaction_isolation", "read committed",
1506 : PGC_SUSET, PGC_S_OVERRIDE);
1507 :
1508 : /*
1509 : * Force synchronous replication off to allow regular maintenance even if
1510 : * we are waiting for standbys to connect. This is important to ensure we
1511 : * aren't blocked from performing anti-wraparound tasks.
1512 : */
1513 1499 : if (synchronous_commit > SYNCHRONOUS_COMMIT_LOCAL_FLUSH)
1514 1499 : SetConfigOption("synchronous_commit", "local",
1515 : PGC_SUSET, PGC_S_OVERRIDE);
1516 :
1517 : /*
1518 : * Even when system is configured to use a different fetch consistency,
1519 : * for autovac we always want fresh stats.
1520 : */
1521 1499 : SetConfigOption("stats_fetch_consistency", "none", PGC_SUSET, PGC_S_OVERRIDE);
1522 :
1523 : /*
1524 : * Get the info about the database we're going to work on.
1525 : */
1526 1499 : LWLockAcquire(AutovacuumLock, LW_EXCLUSIVE);
1527 :
1528 : /*
1529 : * beware of startingWorker being INVALID; this should normally not
1530 : * happen, but if a worker fails after forking and before this, the
1531 : * launcher might have decided to remove it from the queue and start
1532 : * again.
1533 : */
1534 1499 : if (AutoVacuumShmem->av_startingWorker != NULL)
1535 : {
1536 1499 : MyWorkerInfo = AutoVacuumShmem->av_startingWorker;
1537 1499 : dbid = MyWorkerInfo->wi_dboid;
1538 1499 : MyWorkerInfo->wi_proc = MyProc;
1539 :
1540 : /* insert into the running list */
1541 1499 : dlist_push_head(&AutoVacuumShmem->av_runningWorkers,
1542 1499 : &MyWorkerInfo->wi_links);
1543 :
1544 : /*
1545 : * remove from the "starting" pointer, so that the launcher can start
1546 : * a new worker if required
1547 : */
1548 1499 : AutoVacuumShmem->av_startingWorker = NULL;
1549 1499 : LWLockRelease(AutovacuumLock);
1550 :
1551 1499 : on_shmem_exit(FreeWorkerInfo, 0);
1552 :
1553 : /* wake up the launcher */
1554 1499 : if (AutoVacuumShmem->av_launcherpid != 0)
1555 1499 : kill(AutoVacuumShmem->av_launcherpid, SIGUSR2);
1556 : }
1557 : else
1558 : {
1559 : /* no worker entry for me, go away */
1560 0 : elog(WARNING, "autovacuum worker started without a worker entry");
1561 0 : dbid = InvalidOid;
1562 0 : LWLockRelease(AutovacuumLock);
1563 : }
1564 :
1565 1499 : if (OidIsValid(dbid))
1566 : {
1567 : char dbname[NAMEDATALEN];
1568 :
1569 : /*
1570 : * Report autovac startup to the cumulative stats system. We
1571 : * deliberately do this before InitPostgres, so that the
1572 : * last_autovac_time will get updated even if the connection attempt
1573 : * fails. This is to prevent autovac from getting "stuck" repeatedly
1574 : * selecting an unopenable database, rather than making any progress
1575 : * on stuff it can connect to.
1576 : */
1577 1499 : pgstat_report_autovac(dbid);
1578 :
1579 : /*
1580 : * Connect to the selected database, specifying no particular user,
1581 : * and ignoring datallowconn. Collect the database's name for
1582 : * display.
1583 : *
1584 : * Note: if we have selected a just-deleted database (due to using
1585 : * stale stats info), we'll fail and exit here.
1586 : */
1587 1499 : InitPostgres(NULL, dbid, NULL, InvalidOid,
1588 : INIT_PG_OVERRIDE_ALLOW_CONNS,
1589 : dbname);
1590 1499 : SetProcessingMode(NormalProcessing);
1591 1499 : set_ps_display(dbname);
1592 1499 : ereport(DEBUG1,
1593 : (errmsg_internal("autovacuum: processing database \"%s\"", dbname)));
1594 :
1595 1499 : if (PostAuthDelay)
1596 0 : pg_usleep(PostAuthDelay * 1000000L);
1597 :
1598 : /* And do an appropriate amount of work */
1599 1499 : recentXid = ReadNextTransactionId();
1600 1499 : recentMulti = ReadNextMultiXactId();
1601 1499 : do_autovacuum();
1602 : }
1603 :
1604 : /* All done, go away */
1605 1498 : proc_exit(0);
1606 : }
1607 :
1608 : /*
1609 : * Return a WorkerInfo to the free list
1610 : */
1611 : static void
1612 1499 : FreeWorkerInfo(int code, Datum arg)
1613 : {
1614 1499 : if (MyWorkerInfo != NULL)
1615 : {
1616 1499 : LWLockAcquire(AutovacuumLock, LW_EXCLUSIVE);
1617 :
1618 1499 : dlist_delete(&MyWorkerInfo->wi_links);
1619 1499 : MyWorkerInfo->wi_dboid = InvalidOid;
1620 1499 : MyWorkerInfo->wi_tableoid = InvalidOid;
1621 1499 : MyWorkerInfo->wi_sharedrel = false;
1622 1499 : MyWorkerInfo->wi_proc = NULL;
1623 1499 : MyWorkerInfo->wi_launchtime = 0;
1624 1499 : pg_atomic_clear_flag(&MyWorkerInfo->wi_dobalance);
1625 1499 : dclist_push_head(&AutoVacuumShmem->av_freeWorkers,
1626 1499 : &MyWorkerInfo->wi_links);
1627 : /* not mine anymore */
1628 1499 : MyWorkerInfo = NULL;
1629 :
1630 : /*
1631 : * now that we're inactive, cause a rebalancing of the surviving
1632 : * workers
1633 : */
1634 1499 : AutoVacuumShmem->av_signal[AutoVacRebalance] = true;
1635 1499 : LWLockRelease(AutovacuumLock);
1636 : }
1637 1499 : }
1638 :
1639 : /*
1640 : * Update vacuum cost-based delay-related parameters for autovacuum workers and
1641 : * backends executing VACUUM or ANALYZE using the value of relevant GUCs and
1642 : * global state. This must be called during setup for vacuum and after every
1643 : * config reload to ensure up-to-date values.
1644 : */
1645 : void
1646 209050 : VacuumUpdateCosts(void)
1647 : {
1648 209050 : if (MyWorkerInfo)
1649 : {
1650 200432 : if (av_storage_param_cost_delay >= 0)
1651 0 : vacuum_cost_delay = av_storage_param_cost_delay;
1652 200432 : else if (autovacuum_vac_cost_delay >= 0)
1653 200432 : vacuum_cost_delay = autovacuum_vac_cost_delay;
1654 : else
1655 : /* fall back to VacuumCostDelay */
1656 0 : vacuum_cost_delay = VacuumCostDelay;
1657 :
1658 200432 : AutoVacuumUpdateCostLimit();
1659 : }
1660 : else
1661 : {
1662 : /* Must be explicit VACUUM or ANALYZE */
1663 8618 : vacuum_cost_delay = VacuumCostDelay;
1664 8618 : vacuum_cost_limit = VacuumCostLimit;
1665 : }
1666 :
1667 : /*
1668 : * If configuration changes are allowed to impact VacuumCostActive, make
1669 : * sure it is updated.
1670 : */
1671 209050 : if (VacuumFailsafeActive)
1672 : Assert(!VacuumCostActive);
1673 209050 : else if (vacuum_cost_delay > 0)
1674 200432 : VacuumCostActive = true;
1675 : else
1676 : {
1677 8618 : VacuumCostActive = false;
1678 8618 : VacuumCostBalance = 0;
1679 : }
1680 :
1681 : /*
1682 : * Since the cost logging requires a lock, avoid rendering the log message
1683 : * in case we are using a message level where the log wouldn't be emitted.
1684 : */
1685 209050 : if (MyWorkerInfo && message_level_is_interesting(DEBUG2))
1686 : {
1687 : Oid dboid,
1688 : tableoid;
1689 :
1690 : Assert(!LWLockHeldByMe(AutovacuumLock));
1691 :
1692 0 : LWLockAcquire(AutovacuumLock, LW_SHARED);
1693 0 : dboid = MyWorkerInfo->wi_dboid;
1694 0 : tableoid = MyWorkerInfo->wi_tableoid;
1695 0 : LWLockRelease(AutovacuumLock);
1696 :
1697 0 : elog(DEBUG2,
1698 : "Autovacuum VacuumUpdateCosts(db=%u, rel=%u, dobalance=%s, cost_limit=%d, cost_delay=%g active=%s failsafe=%s)",
1699 : dboid, tableoid, pg_atomic_unlocked_test_flag(&MyWorkerInfo->wi_dobalance) ? "no" : "yes",
1700 : vacuum_cost_limit, vacuum_cost_delay,
1701 : vacuum_cost_delay > 0 ? "yes" : "no",
1702 : VacuumFailsafeActive ? "yes" : "no");
1703 : }
1704 209050 : }
1705 :
1706 : /*
1707 : * Update vacuum_cost_limit with the correct value for an autovacuum worker,
1708 : * given the value of other relevant cost limit parameters and the number of
1709 : * workers across which the limit must be balanced. Autovacuum workers must
1710 : * call this regularly in case av_nworkersForBalance has been updated by
1711 : * another worker or by the autovacuum launcher. They must also call it after a
1712 : * config reload.
1713 : */
1714 : void
1715 203436 : AutoVacuumUpdateCostLimit(void)
1716 : {
1717 203436 : if (!MyWorkerInfo)
1718 0 : return;
1719 :
1720 : /*
1721 : * note: in cost_limit, zero also means use value from elsewhere, because
1722 : * zero is not a valid value.
1723 : */
1724 :
1725 203436 : if (av_storage_param_cost_limit > 0)
1726 0 : vacuum_cost_limit = av_storage_param_cost_limit;
1727 : else
1728 : {
1729 : int nworkers_for_balance;
1730 :
1731 203436 : if (autovacuum_vac_cost_limit > 0)
1732 0 : vacuum_cost_limit = autovacuum_vac_cost_limit;
1733 : else
1734 203436 : vacuum_cost_limit = VacuumCostLimit;
1735 :
1736 : /* Only balance limit if no cost-related storage parameters specified */
1737 203436 : if (pg_atomic_unlocked_test_flag(&MyWorkerInfo->wi_dobalance))
1738 0 : return;
1739 :
1740 : Assert(vacuum_cost_limit > 0);
1741 :
1742 203436 : nworkers_for_balance = pg_atomic_read_u32(&AutoVacuumShmem->av_nworkersForBalance);
1743 :
1744 : /* There is at least 1 autovac worker (this worker) */
1745 203436 : if (nworkers_for_balance <= 0)
1746 0 : elog(ERROR, "nworkers_for_balance must be > 0");
1747 :
1748 203436 : vacuum_cost_limit = Max(vacuum_cost_limit / nworkers_for_balance, 1);
1749 : }
1750 : }
1751 :
1752 : /*
1753 : * autovac_recalculate_workers_for_balance
1754 : * Recalculate the number of workers to consider, given cost-related
1755 : * storage parameters and the current number of active workers.
1756 : *
1757 : * Caller must hold the AutovacuumLock in at least shared mode to access
1758 : * worker->wi_proc.
1759 : */
1760 : static void
1761 101665 : autovac_recalculate_workers_for_balance(void)
1762 : {
1763 : dlist_iter iter;
1764 : int orig_nworkers_for_balance;
1765 101665 : int nworkers_for_balance = 0;
1766 :
1767 : Assert(LWLockHeldByMe(AutovacuumLock));
1768 :
1769 101665 : orig_nworkers_for_balance =
1770 101665 : pg_atomic_read_u32(&AutoVacuumShmem->av_nworkersForBalance);
1771 :
1772 320350 : dlist_foreach(iter, &AutoVacuumShmem->av_runningWorkers)
1773 : {
1774 218685 : WorkerInfo worker = dlist_container(WorkerInfoData, wi_links, iter.cur);
1775 :
1776 437370 : if (worker->wi_proc == NULL ||
1777 218685 : pg_atomic_unlocked_test_flag(&worker->wi_dobalance))
1778 3400 : continue;
1779 :
1780 215285 : nworkers_for_balance++;
1781 : }
1782 :
1783 101665 : if (nworkers_for_balance != orig_nworkers_for_balance)
1784 1902 : pg_atomic_write_u32(&AutoVacuumShmem->av_nworkersForBalance,
1785 : nworkers_for_balance);
1786 101665 : }
1787 :
1788 : /*
1789 : * get_database_list
1790 : * Return a list of all databases found in pg_database.
1791 : *
1792 : * The list and associated data is allocated in the caller's memory context,
1793 : * which is in charge of ensuring that it's properly cleaned up afterwards.
1794 : *
1795 : * Note: this is the only function in which the autovacuum launcher uses a
1796 : * transaction. Although we aren't attached to any particular database and
1797 : * therefore can't access most catalogs, we do have enough infrastructure
1798 : * to do a seqscan on pg_database.
1799 : */
1800 : static List *
1801 2095 : get_database_list(void)
1802 : {
1803 2095 : List *dblist = NIL;
1804 : Relation rel;
1805 : TableScanDesc scan;
1806 : HeapTuple tup;
1807 : MemoryContext resultcxt;
1808 :
1809 : /* This is the context that we will allocate our output data in */
1810 2095 : resultcxt = CurrentMemoryContext;
1811 :
1812 : /*
1813 : * Start a transaction so we can access pg_database.
1814 : */
1815 2095 : StartTransactionCommand();
1816 :
1817 2095 : rel = table_open(DatabaseRelationId, AccessShareLock);
1818 2095 : scan = table_beginscan_catalog(rel, 0, NULL);
1819 :
1820 8768 : while (HeapTupleIsValid(tup = heap_getnext(scan, ForwardScanDirection)))
1821 : {
1822 6673 : Form_pg_database pgdatabase = (Form_pg_database) GETSTRUCT(tup);
1823 : avw_dbase *avdb;
1824 : MemoryContext oldcxt;
1825 :
1826 : /*
1827 : * If database has partially been dropped, we can't, nor need to,
1828 : * vacuum it.
1829 : */
1830 6673 : if (database_is_invalid_form(pgdatabase))
1831 : {
1832 7 : elog(DEBUG2,
1833 : "autovacuum: skipping invalid database \"%s\"",
1834 : NameStr(pgdatabase->datname));
1835 7 : continue;
1836 : }
1837 :
1838 : /*
1839 : * Allocate our results in the caller's context, not the
1840 : * transaction's. We do this inside the loop, and restore the original
1841 : * context at the end, so that leaky things like heap_getnext() are
1842 : * not called in a potentially long-lived context.
1843 : */
1844 6666 : oldcxt = MemoryContextSwitchTo(resultcxt);
1845 :
1846 6666 : avdb = palloc_object(avw_dbase);
1847 :
1848 6666 : avdb->adw_datid = pgdatabase->oid;
1849 6666 : avdb->adw_name = pstrdup(NameStr(pgdatabase->datname));
1850 6666 : avdb->adw_frozenxid = pgdatabase->datfrozenxid;
1851 6666 : avdb->adw_minmulti = pgdatabase->datminmxid;
1852 : /* this gets set later: */
1853 6666 : avdb->adw_entry = NULL;
1854 :
1855 6666 : dblist = lappend(dblist, avdb);
1856 6666 : MemoryContextSwitchTo(oldcxt);
1857 : }
1858 :
1859 2095 : table_endscan(scan);
1860 2095 : table_close(rel, AccessShareLock);
1861 :
1862 2095 : CommitTransactionCommand();
1863 :
1864 : /* Be sure to restore caller's memory context */
1865 2095 : MemoryContextSwitchTo(resultcxt);
1866 :
1867 2095 : return dblist;
1868 : }
1869 :
1870 : /*
1871 : * Process a database table-by-table
1872 : *
1873 : * Note that CHECK_FOR_INTERRUPTS is supposed to be used in certain spots in
1874 : * order not to ignore shutdown commands for too long.
1875 : */
1876 : static void
1877 1499 : do_autovacuum(void)
1878 : {
1879 : Relation classRel;
1880 : HeapTuple tuple;
1881 : TableScanDesc relScan;
1882 : Form_pg_database dbForm;
1883 1499 : List *table_oids = NIL;
1884 1499 : List *orphan_oids = NIL;
1885 : HASHCTL ctl;
1886 : HTAB *table_toast_map;
1887 : ListCell *volatile cell;
1888 : BufferAccessStrategy bstrategy;
1889 : ScanKeyData key;
1890 : TupleDesc pg_class_desc;
1891 : int effective_multixact_freeze_max_age;
1892 1499 : bool did_vacuum = false;
1893 1499 : bool found_concurrent_worker = false;
1894 : int i;
1895 :
1896 : /*
1897 : * StartTransactionCommand and CommitTransactionCommand will automatically
1898 : * switch to other contexts. We need this one to keep the list of
1899 : * relations to vacuum/analyze across transactions.
1900 : */
1901 1499 : AutovacMemCxt = AllocSetContextCreate(TopMemoryContext,
1902 : "Autovacuum worker",
1903 : ALLOCSET_DEFAULT_SIZES);
1904 1499 : MemoryContextSwitchTo(AutovacMemCxt);
1905 :
1906 : /* Start a transaction so our commands have one to play into. */
1907 1499 : StartTransactionCommand();
1908 :
1909 : /*
1910 : * This injection point is put in a transaction block to work with a wait
1911 : * that uses a condition variable.
1912 : */
1913 1499 : INJECTION_POINT("autovacuum-worker-start", NULL);
1914 :
1915 : /*
1916 : * Compute the multixact age for which freezing is urgent. This is
1917 : * normally autovacuum_multixact_freeze_max_age, but may be less if
1918 : * multixact members are bloated.
1919 : */
1920 1498 : effective_multixact_freeze_max_age = MultiXactMemberFreezeThreshold();
1921 :
1922 : /*
1923 : * Find the pg_database entry and select the default freeze ages. We use
1924 : * zero in template and nonconnectable databases, else the system-wide
1925 : * default.
1926 : */
1927 1498 : tuple = SearchSysCache1(DATABASEOID, ObjectIdGetDatum(MyDatabaseId));
1928 1498 : if (!HeapTupleIsValid(tuple))
1929 0 : elog(ERROR, "cache lookup failed for database %u", MyDatabaseId);
1930 1498 : dbForm = (Form_pg_database) GETSTRUCT(tuple);
1931 :
1932 1498 : if (dbForm->datistemplate || !dbForm->datallowconn)
1933 : {
1934 498 : default_freeze_min_age = 0;
1935 498 : default_freeze_table_age = 0;
1936 498 : default_multixact_freeze_min_age = 0;
1937 498 : default_multixact_freeze_table_age = 0;
1938 : }
1939 : else
1940 : {
1941 1000 : default_freeze_min_age = vacuum_freeze_min_age;
1942 1000 : default_freeze_table_age = vacuum_freeze_table_age;
1943 1000 : default_multixact_freeze_min_age = vacuum_multixact_freeze_min_age;
1944 1000 : default_multixact_freeze_table_age = vacuum_multixact_freeze_table_age;
1945 : }
1946 :
1947 1498 : ReleaseSysCache(tuple);
1948 :
1949 : /* StartTransactionCommand changed elsewhere */
1950 1498 : MemoryContextSwitchTo(AutovacMemCxt);
1951 :
1952 1498 : classRel = table_open(RelationRelationId, AccessShareLock);
1953 :
1954 : /* create a copy so we can use it after closing pg_class */
1955 1498 : pg_class_desc = CreateTupleDescCopy(RelationGetDescr(classRel));
1956 :
1957 : /* create hash table for toast <-> main relid mapping */
1958 1498 : ctl.keysize = sizeof(Oid);
1959 1498 : ctl.entrysize = sizeof(av_relation);
1960 :
1961 1498 : table_toast_map = hash_create("TOAST to main relid map",
1962 : 100,
1963 : &ctl,
1964 : HASH_ELEM | HASH_BLOBS);
1965 :
1966 : /*
1967 : * Scan pg_class to determine which tables to vacuum.
1968 : *
1969 : * We do this in two passes: on the first one we collect the list of plain
1970 : * relations and materialized views, and on the second one we collect
1971 : * TOAST tables. The reason for doing the second pass is that during it we
1972 : * want to use the main relation's pg_class.reloptions entry if the TOAST
1973 : * table does not have any, and we cannot obtain it unless we know
1974 : * beforehand what's the main table OID.
1975 : *
1976 : * We need to check TOAST tables separately because in cases with short,
1977 : * wide tables there might be proportionally much more activity in the
1978 : * TOAST table than in its parent.
1979 : */
1980 1498 : relScan = table_beginscan_catalog(classRel, 0, NULL);
1981 :
1982 : /*
1983 : * On the first pass, we collect main tables to vacuum, and also the main
1984 : * table relid to TOAST relid mapping.
1985 : */
1986 683546 : while ((tuple = heap_getnext(relScan, ForwardScanDirection)) != NULL)
1987 : {
1988 682048 : Form_pg_class classForm = (Form_pg_class) GETSTRUCT(tuple);
1989 : PgStat_StatTabEntry *tabentry;
1990 : AutoVacOpts *relopts;
1991 : Oid relid;
1992 : bool dovacuum;
1993 : bool doanalyze;
1994 : bool wraparound;
1995 :
1996 682048 : if (classForm->relkind != RELKIND_RELATION &&
1997 569567 : classForm->relkind != RELKIND_MATVIEW)
1998 569526 : continue;
1999 :
2000 112522 : relid = classForm->oid;
2001 :
2002 : /*
2003 : * Check if it is a temp table (presumably, of some other backend's).
2004 : * We cannot safely process other backends' temp tables.
2005 : */
2006 112522 : if (classForm->relpersistence == RELPERSISTENCE_TEMP)
2007 : {
2008 : /*
2009 : * We just ignore it if the owning backend is still active and
2010 : * using the temporary schema. Also, for safety, ignore it if the
2011 : * namespace doesn't exist or isn't a temp namespace after all.
2012 : */
2013 0 : if (checkTempNamespaceStatus(classForm->relnamespace) == TEMP_NAMESPACE_IDLE)
2014 : {
2015 : /*
2016 : * The table seems to be orphaned -- although it might be that
2017 : * the owning backend has already deleted it and exited; our
2018 : * pg_class scan snapshot is not necessarily up-to-date
2019 : * anymore, so we could be looking at a committed-dead entry.
2020 : * Remember it so we can try to delete it later.
2021 : */
2022 0 : orphan_oids = lappend_oid(orphan_oids, relid);
2023 : }
2024 0 : continue;
2025 : }
2026 :
2027 : /* Fetch reloptions and the pgstat entry for this table */
2028 112522 : relopts = extract_autovac_opts(tuple, pg_class_desc);
2029 112522 : tabentry = pgstat_fetch_stat_tabentry_ext(classForm->relisshared,
2030 : relid);
2031 :
2032 : /* Check if it needs vacuum or analyze */
2033 112522 : relation_needs_vacanalyze(relid, relopts, classForm, tabentry,
2034 : effective_multixact_freeze_max_age,
2035 : &dovacuum, &doanalyze, &wraparound);
2036 :
2037 : /* Relations that need work are added to table_oids */
2038 112522 : if (dovacuum || doanalyze)
2039 64516 : table_oids = lappend_oid(table_oids, relid);
2040 :
2041 : /*
2042 : * Remember TOAST associations for the second pass. Note: we must do
2043 : * this whether or not the table is going to be vacuumed, because we
2044 : * don't automatically vacuum toast tables along the parent table.
2045 : */
2046 112522 : if (OidIsValid(classForm->reltoastrelid))
2047 : {
2048 : av_relation *hentry;
2049 : bool found;
2050 :
2051 126900 : hentry = hash_search(table_toast_map,
2052 63450 : &classForm->reltoastrelid,
2053 : HASH_ENTER, &found);
2054 :
2055 63450 : if (!found)
2056 : {
2057 : /* hash_search already filled in the key */
2058 63450 : hentry->ar_relid = relid;
2059 63450 : hentry->ar_hasrelopts = false;
2060 63450 : if (relopts != NULL)
2061 : {
2062 1322 : hentry->ar_hasrelopts = true;
2063 1322 : memcpy(&hentry->ar_reloptions, relopts,
2064 : sizeof(AutoVacOpts));
2065 : }
2066 : }
2067 : }
2068 :
2069 : /* Release stuff to avoid per-relation leakage */
2070 112522 : if (relopts)
2071 1358 : pfree(relopts);
2072 112522 : if (tabentry)
2073 109891 : pfree(tabentry);
2074 : }
2075 :
2076 1498 : table_endscan(relScan);
2077 :
2078 : /* second pass: check TOAST tables */
2079 1498 : ScanKeyInit(&key,
2080 : Anum_pg_class_relkind,
2081 : BTEqualStrategyNumber, F_CHAREQ,
2082 : CharGetDatum(RELKIND_TOASTVALUE));
2083 :
2084 1498 : relScan = table_beginscan_catalog(classRel, 1, &key);
2085 64948 : while ((tuple = heap_getnext(relScan, ForwardScanDirection)) != NULL)
2086 : {
2087 63450 : Form_pg_class classForm = (Form_pg_class) GETSTRUCT(tuple);
2088 : PgStat_StatTabEntry *tabentry;
2089 : Oid relid;
2090 : AutoVacOpts *relopts;
2091 63450 : bool free_relopts = false;
2092 : bool dovacuum;
2093 : bool doanalyze;
2094 : bool wraparound;
2095 :
2096 : /*
2097 : * We cannot safely process other backends' temp tables, so skip 'em.
2098 : */
2099 63450 : if (classForm->relpersistence == RELPERSISTENCE_TEMP)
2100 0 : continue;
2101 :
2102 63450 : relid = classForm->oid;
2103 :
2104 : /*
2105 : * fetch reloptions -- if this toast table does not have them, try the
2106 : * main rel
2107 : */
2108 63450 : relopts = extract_autovac_opts(tuple, pg_class_desc);
2109 63450 : if (relopts)
2110 2 : free_relopts = true;
2111 : else
2112 : {
2113 : av_relation *hentry;
2114 : bool found;
2115 :
2116 63448 : hentry = hash_search(table_toast_map, &relid, HASH_FIND, &found);
2117 63448 : if (found && hentry->ar_hasrelopts)
2118 1320 : relopts = &hentry->ar_reloptions;
2119 : }
2120 :
2121 : /* Fetch the pgstat entry for this table */
2122 63450 : tabentry = pgstat_fetch_stat_tabentry_ext(classForm->relisshared,
2123 : relid);
2124 :
2125 63450 : relation_needs_vacanalyze(relid, relopts, classForm, tabentry,
2126 : effective_multixact_freeze_max_age,
2127 : &dovacuum, &doanalyze, &wraparound);
2128 :
2129 : /* ignore analyze for toast tables */
2130 63450 : if (dovacuum)
2131 36279 : table_oids = lappend_oid(table_oids, relid);
2132 :
2133 : /* Release stuff to avoid leakage */
2134 63450 : if (free_relopts)
2135 2 : pfree(relopts);
2136 63450 : if (tabentry)
2137 61532 : pfree(tabentry);
2138 : }
2139 :
2140 1498 : table_endscan(relScan);
2141 1498 : table_close(classRel, AccessShareLock);
2142 :
2143 : /*
2144 : * Recheck orphan temporary tables, and if they still seem orphaned, drop
2145 : * them. We'll eat a transaction per dropped table, which might seem
2146 : * excessive, but we should only need to do anything as a result of a
2147 : * previous backend crash, so this should not happen often enough to
2148 : * justify "optimizing". Using separate transactions ensures that we
2149 : * don't bloat the lock table if there are many temp tables to be dropped,
2150 : * and it ensures that we don't lose work if a deletion attempt fails.
2151 : */
2152 1498 : foreach(cell, orphan_oids)
2153 : {
2154 0 : Oid relid = lfirst_oid(cell);
2155 : Form_pg_class classForm;
2156 : ObjectAddress object;
2157 :
2158 : /*
2159 : * Check for user-requested abort.
2160 : */
2161 0 : CHECK_FOR_INTERRUPTS();
2162 :
2163 : /*
2164 : * Try to lock the table. If we can't get the lock immediately,
2165 : * somebody else is using (or dropping) the table, so it's not our
2166 : * concern anymore. Having the lock prevents race conditions below.
2167 : */
2168 0 : if (!ConditionalLockRelationOid(relid, AccessExclusiveLock))
2169 0 : continue;
2170 :
2171 : /*
2172 : * Re-fetch the pg_class tuple and re-check whether it still seems to
2173 : * be an orphaned temp table. If it's not there or no longer the same
2174 : * relation, ignore it.
2175 : */
2176 0 : tuple = SearchSysCacheCopy1(RELOID, ObjectIdGetDatum(relid));
2177 0 : if (!HeapTupleIsValid(tuple))
2178 : {
2179 : /* be sure to drop useless lock so we don't bloat lock table */
2180 0 : UnlockRelationOid(relid, AccessExclusiveLock);
2181 0 : continue;
2182 : }
2183 0 : classForm = (Form_pg_class) GETSTRUCT(tuple);
2184 :
2185 : /*
2186 : * Make all the same tests made in the loop above. In event of OID
2187 : * counter wraparound, the pg_class entry we have now might be
2188 : * completely unrelated to the one we saw before.
2189 : */
2190 0 : if (!((classForm->relkind == RELKIND_RELATION ||
2191 0 : classForm->relkind == RELKIND_MATVIEW) &&
2192 0 : classForm->relpersistence == RELPERSISTENCE_TEMP))
2193 : {
2194 0 : UnlockRelationOid(relid, AccessExclusiveLock);
2195 0 : continue;
2196 : }
2197 :
2198 0 : if (checkTempNamespaceStatus(classForm->relnamespace) != TEMP_NAMESPACE_IDLE)
2199 : {
2200 0 : UnlockRelationOid(relid, AccessExclusiveLock);
2201 0 : continue;
2202 : }
2203 :
2204 : /*
2205 : * Try to lock the temp namespace, too. Even though we have lock on
2206 : * the table itself, there's a risk of deadlock against an incoming
2207 : * backend trying to clean out the temp namespace, in case this table
2208 : * has dependencies (such as sequences) that the backend's
2209 : * performDeletion call might visit in a different order. If we can
2210 : * get AccessShareLock on the namespace, that's sufficient to ensure
2211 : * we're not running concurrently with RemoveTempRelations. If we
2212 : * can't, back off and let RemoveTempRelations do its thing.
2213 : */
2214 0 : if (!ConditionalLockDatabaseObject(NamespaceRelationId,
2215 : classForm->relnamespace, 0,
2216 : AccessShareLock))
2217 : {
2218 0 : UnlockRelationOid(relid, AccessExclusiveLock);
2219 0 : continue;
2220 : }
2221 :
2222 : /* OK, let's delete it */
2223 0 : ereport(LOG,
2224 : (errmsg("autovacuum: dropping orphan temp table \"%s.%s.%s\"",
2225 : get_database_name(MyDatabaseId),
2226 : get_namespace_name(classForm->relnamespace),
2227 : NameStr(classForm->relname))));
2228 :
2229 : /*
2230 : * Deletion might involve TOAST table access, so ensure we have a
2231 : * valid snapshot.
2232 : */
2233 0 : PushActiveSnapshot(GetTransactionSnapshot());
2234 :
2235 0 : object.classId = RelationRelationId;
2236 0 : object.objectId = relid;
2237 0 : object.objectSubId = 0;
2238 0 : performDeletion(&object, DROP_CASCADE,
2239 : PERFORM_DELETION_INTERNAL |
2240 : PERFORM_DELETION_QUIETLY |
2241 : PERFORM_DELETION_SKIP_EXTENSIONS);
2242 :
2243 : /*
2244 : * To commit the deletion, end current transaction and start a new
2245 : * one. Note this also releases the locks we took.
2246 : */
2247 0 : PopActiveSnapshot();
2248 0 : CommitTransactionCommand();
2249 0 : StartTransactionCommand();
2250 :
2251 : /* StartTransactionCommand changed current memory context */
2252 0 : MemoryContextSwitchTo(AutovacMemCxt);
2253 : }
2254 :
2255 : /*
2256 : * Optionally, create a buffer access strategy object for VACUUM to use.
2257 : * We use the same BufferAccessStrategy object for all tables VACUUMed by
2258 : * this worker to prevent autovacuum from blowing out shared buffers.
2259 : *
2260 : * VacuumBufferUsageLimit being set to 0 results in
2261 : * GetAccessStrategyWithSize returning NULL, effectively meaning we can
2262 : * use up to all of shared buffers.
2263 : *
2264 : * If we later enter failsafe mode on any of the tables being vacuumed, we
2265 : * will cease use of the BufferAccessStrategy only for that table.
2266 : *
2267 : * XXX should we consider adding code to adjust the size of this if
2268 : * VacuumBufferUsageLimit changes?
2269 : */
2270 1498 : bstrategy = GetAccessStrategyWithSize(BAS_VACUUM, VacuumBufferUsageLimit);
2271 :
2272 : /*
2273 : * create a memory context to act as fake PortalContext, so that the
2274 : * contexts created in the vacuum code are cleaned up for each table.
2275 : */
2276 1498 : PortalContext = AllocSetContextCreate(AutovacMemCxt,
2277 : "Autovacuum Portal",
2278 : ALLOCSET_DEFAULT_SIZES);
2279 :
2280 : /*
2281 : * Perform operations on collected tables.
2282 : */
2283 102293 : foreach(cell, table_oids)
2284 : {
2285 100795 : Oid relid = lfirst_oid(cell);
2286 : HeapTuple classTup;
2287 : autovac_table *tab;
2288 : bool isshared;
2289 : bool skipit;
2290 : dlist_iter iter;
2291 :
2292 100795 : CHECK_FOR_INTERRUPTS();
2293 :
2294 : /*
2295 : * Check for config changes before processing each collected table.
2296 : */
2297 100795 : if (ConfigReloadPending)
2298 : {
2299 0 : ConfigReloadPending = false;
2300 0 : ProcessConfigFile(PGC_SIGHUP);
2301 :
2302 : /*
2303 : * You might be tempted to bail out if we see autovacuum is now
2304 : * disabled. Must resist that temptation -- this might be a
2305 : * for-wraparound emergency worker, in which case that would be
2306 : * entirely inappropriate.
2307 : */
2308 : }
2309 :
2310 : /*
2311 : * Find out whether the table is shared or not. (It's slightly
2312 : * annoying to fetch the syscache entry just for this, but in typical
2313 : * cases it adds little cost because table_recheck_autovac would
2314 : * refetch the entry anyway. We could buy that back by copying the
2315 : * tuple here and passing it to table_recheck_autovac, but that
2316 : * increases the odds of that function working with stale data.)
2317 : */
2318 100795 : classTup = SearchSysCache1(RELOID, ObjectIdGetDatum(relid));
2319 100795 : if (!HeapTupleIsValid(classTup))
2320 579 : continue; /* somebody deleted the rel, forget it */
2321 100794 : isshared = ((Form_pg_class) GETSTRUCT(classTup))->relisshared;
2322 100794 : ReleaseSysCache(classTup);
2323 :
2324 : /*
2325 : * Hold schedule lock from here until we've claimed the table. We
2326 : * also need the AutovacuumLock to walk the worker array, but that one
2327 : * can just be a shared lock.
2328 : */
2329 100794 : LWLockAcquire(AutovacuumScheduleLock, LW_EXCLUSIVE);
2330 100794 : LWLockAcquire(AutovacuumLock, LW_SHARED);
2331 :
2332 : /*
2333 : * Check whether the table is being vacuumed concurrently by another
2334 : * worker.
2335 : */
2336 100794 : skipit = false;
2337 319004 : dlist_foreach(iter, &AutoVacuumShmem->av_runningWorkers)
2338 : {
2339 218788 : WorkerInfo worker = dlist_container(WorkerInfoData, wi_links, iter.cur);
2340 :
2341 : /* ignore myself */
2342 218788 : if (worker == MyWorkerInfo)
2343 100543 : continue;
2344 :
2345 : /* ignore workers in other databases (unless table is shared) */
2346 118245 : if (!worker->wi_sharedrel && worker->wi_dboid != MyDatabaseId)
2347 2 : continue;
2348 :
2349 118243 : if (worker->wi_tableoid == relid)
2350 : {
2351 578 : skipit = true;
2352 578 : found_concurrent_worker = true;
2353 578 : break;
2354 : }
2355 : }
2356 100794 : LWLockRelease(AutovacuumLock);
2357 100794 : if (skipit)
2358 : {
2359 578 : LWLockRelease(AutovacuumScheduleLock);
2360 578 : continue;
2361 : }
2362 :
2363 : /*
2364 : * Store the table's OID in shared memory before releasing the
2365 : * schedule lock, so that other workers don't try to vacuum it
2366 : * concurrently. (We claim it here so as not to hold
2367 : * AutovacuumScheduleLock while rechecking the stats.)
2368 : */
2369 100216 : MyWorkerInfo->wi_tableoid = relid;
2370 100216 : MyWorkerInfo->wi_sharedrel = isshared;
2371 100216 : LWLockRelease(AutovacuumScheduleLock);
2372 :
2373 : /*
2374 : * Check whether pgstat data still says we need to vacuum this table.
2375 : * It could have changed if something else processed the table while
2376 : * we weren't looking. This doesn't entirely close the race condition,
2377 : * but it is very small.
2378 : */
2379 100216 : MemoryContextSwitchTo(AutovacMemCxt);
2380 100216 : tab = table_recheck_autovac(relid, table_toast_map, pg_class_desc,
2381 : effective_multixact_freeze_max_age);
2382 100216 : if (tab == NULL)
2383 : {
2384 : /* someone else vacuumed the table, or it went away */
2385 0 : LWLockAcquire(AutovacuumScheduleLock, LW_EXCLUSIVE);
2386 0 : MyWorkerInfo->wi_tableoid = InvalidOid;
2387 0 : MyWorkerInfo->wi_sharedrel = false;
2388 0 : LWLockRelease(AutovacuumScheduleLock);
2389 0 : continue;
2390 : }
2391 :
2392 : /*
2393 : * Save the cost-related storage parameter values in global variables
2394 : * for reference when updating vacuum_cost_delay and vacuum_cost_limit
2395 : * during vacuuming this table.
2396 : */
2397 100216 : av_storage_param_cost_delay = tab->at_storage_param_vac_cost_delay;
2398 100216 : av_storage_param_cost_limit = tab->at_storage_param_vac_cost_limit;
2399 :
2400 : /*
2401 : * We only expect this worker to ever set the flag, so don't bother
2402 : * checking the return value. We shouldn't have to retry.
2403 : */
2404 100216 : if (tab->at_dobalance)
2405 100216 : pg_atomic_test_set_flag(&MyWorkerInfo->wi_dobalance);
2406 : else
2407 0 : pg_atomic_clear_flag(&MyWorkerInfo->wi_dobalance);
2408 :
2409 100216 : LWLockAcquire(AutovacuumLock, LW_SHARED);
2410 100216 : autovac_recalculate_workers_for_balance();
2411 100216 : LWLockRelease(AutovacuumLock);
2412 :
2413 : /*
2414 : * We wait until this point to update cost delay and cost limit
2415 : * values, even though we reloaded the configuration file above, so
2416 : * that we can take into account the cost-related storage parameters.
2417 : */
2418 100216 : VacuumUpdateCosts();
2419 :
2420 :
2421 : /* clean up memory before each iteration */
2422 100216 : MemoryContextReset(PortalContext);
2423 :
2424 : /*
2425 : * Save the relation name for a possible error message, to avoid a
2426 : * catalog lookup in case of an error. If any of these return NULL,
2427 : * then the relation has been dropped since last we checked; skip it.
2428 : * Note: they must live in a long-lived memory context because we call
2429 : * vacuum and analyze in different transactions.
2430 : */
2431 :
2432 100216 : tab->at_relname = get_rel_name(tab->at_relid);
2433 100216 : tab->at_nspname = get_namespace_name(get_rel_namespace(tab->at_relid));
2434 100216 : tab->at_datname = get_database_name(MyDatabaseId);
2435 100216 : if (!tab->at_relname || !tab->at_nspname || !tab->at_datname)
2436 0 : goto deleted;
2437 :
2438 : /*
2439 : * We will abort vacuuming the current table if something errors out,
2440 : * and continue with the next one in schedule; in particular, this
2441 : * happens if we are interrupted with SIGINT.
2442 : */
2443 100216 : PG_TRY();
2444 : {
2445 : /* Use PortalContext for any per-table allocations */
2446 100216 : MemoryContextSwitchTo(PortalContext);
2447 :
2448 : /* have at it */
2449 100216 : autovacuum_do_vac_analyze(tab, bstrategy);
2450 :
2451 : /*
2452 : * Clear a possible query-cancel signal, to avoid a late reaction
2453 : * to an automatically-sent signal because of vacuuming the
2454 : * current table (we're done with it, so it would make no sense to
2455 : * cancel at this point.)
2456 : */
2457 100216 : QueryCancelPending = false;
2458 : }
2459 0 : PG_CATCH();
2460 : {
2461 : /*
2462 : * Abort the transaction, start a new one, and proceed with the
2463 : * next table in our list.
2464 : */
2465 0 : HOLD_INTERRUPTS();
2466 0 : if (tab->at_params.options & VACOPT_VACUUM)
2467 0 : errcontext("automatic vacuum of table \"%s.%s.%s\"",
2468 : tab->at_datname, tab->at_nspname, tab->at_relname);
2469 : else
2470 0 : errcontext("automatic analyze of table \"%s.%s.%s\"",
2471 : tab->at_datname, tab->at_nspname, tab->at_relname);
2472 0 : EmitErrorReport();
2473 :
2474 : /* this resets ProcGlobal->statusFlags[i] too */
2475 0 : AbortOutOfAnyTransaction();
2476 0 : FlushErrorState();
2477 0 : MemoryContextReset(PortalContext);
2478 :
2479 : /* restart our transaction for the following operations */
2480 0 : StartTransactionCommand();
2481 0 : RESUME_INTERRUPTS();
2482 : }
2483 100216 : PG_END_TRY();
2484 :
2485 : /* Make sure we're back in AutovacMemCxt */
2486 100216 : MemoryContextSwitchTo(AutovacMemCxt);
2487 :
2488 100216 : did_vacuum = true;
2489 :
2490 : /* ProcGlobal->statusFlags[i] are reset at the next end of xact */
2491 :
2492 : /* be tidy */
2493 100216 : deleted:
2494 100216 : if (tab->at_datname != NULL)
2495 100216 : pfree(tab->at_datname);
2496 100216 : if (tab->at_nspname != NULL)
2497 100216 : pfree(tab->at_nspname);
2498 100216 : if (tab->at_relname != NULL)
2499 100216 : pfree(tab->at_relname);
2500 100216 : pfree(tab);
2501 :
2502 : /*
2503 : * Remove my info from shared memory. We set wi_dobalance on the
2504 : * assumption that we are more likely than not to vacuum a table with
2505 : * no cost-related storage parameters next, so we want to claim our
2506 : * share of I/O as soon as possible to avoid thrashing the global
2507 : * balance.
2508 : */
2509 100216 : LWLockAcquire(AutovacuumScheduleLock, LW_EXCLUSIVE);
2510 100216 : MyWorkerInfo->wi_tableoid = InvalidOid;
2511 100216 : MyWorkerInfo->wi_sharedrel = false;
2512 100216 : LWLockRelease(AutovacuumScheduleLock);
2513 100216 : pg_atomic_test_set_flag(&MyWorkerInfo->wi_dobalance);
2514 : }
2515 :
2516 1498 : list_free(table_oids);
2517 :
2518 : /*
2519 : * Perform additional work items, as requested by backends.
2520 : */
2521 1498 : LWLockAcquire(AutovacuumLock, LW_EXCLUSIVE);
2522 384986 : for (i = 0; i < NUM_WORKITEMS; i++)
2523 : {
2524 383488 : AutoVacuumWorkItem *workitem = &AutoVacuumShmem->av_workItems[i];
2525 :
2526 383488 : if (!workitem->avw_used)
2527 383482 : continue;
2528 6 : if (workitem->avw_active)
2529 0 : continue;
2530 6 : if (workitem->avw_database != MyDatabaseId)
2531 0 : continue;
2532 :
2533 : /* claim this one, and release lock while performing it */
2534 6 : workitem->avw_active = true;
2535 6 : LWLockRelease(AutovacuumLock);
2536 :
2537 6 : PushActiveSnapshot(GetTransactionSnapshot());
2538 6 : perform_work_item(workitem);
2539 6 : if (ActiveSnapshotSet()) /* transaction could have aborted */
2540 6 : PopActiveSnapshot();
2541 :
2542 : /*
2543 : * Check for config changes before acquiring lock for further jobs.
2544 : */
2545 6 : CHECK_FOR_INTERRUPTS();
2546 6 : if (ConfigReloadPending)
2547 : {
2548 0 : ConfigReloadPending = false;
2549 0 : ProcessConfigFile(PGC_SIGHUP);
2550 0 : VacuumUpdateCosts();
2551 : }
2552 :
2553 6 : LWLockAcquire(AutovacuumLock, LW_EXCLUSIVE);
2554 :
2555 : /* and mark it done */
2556 6 : workitem->avw_active = false;
2557 6 : workitem->avw_used = false;
2558 : }
2559 1498 : LWLockRelease(AutovacuumLock);
2560 :
2561 : /*
2562 : * We leak table_toast_map here (among other things), but since we're
2563 : * going away soon, it's not a problem normally. But when using Valgrind,
2564 : * release some stuff to reduce complaints about leaked storage.
2565 : */
2566 : #ifdef USE_VALGRIND
2567 : hash_destroy(table_toast_map);
2568 : FreeTupleDesc(pg_class_desc);
2569 : if (bstrategy)
2570 : pfree(bstrategy);
2571 : #endif
2572 :
2573 : /* Run the rest in xact context, mainly to avoid Valgrind leak warnings */
2574 1498 : MemoryContextSwitchTo(TopTransactionContext);
2575 :
2576 : /*
2577 : * Update pg_database.datfrozenxid, and truncate pg_xact if possible. We
2578 : * only need to do this once, not after each table.
2579 : *
2580 : * Even if we didn't vacuum anything, it may still be important to do
2581 : * this, because one indirect effect of vac_update_datfrozenxid() is to
2582 : * update TransamVariables->xidVacLimit. That might need to be done even
2583 : * if we haven't vacuumed anything, because relations with older
2584 : * relfrozenxid values or other databases with older datfrozenxid values
2585 : * might have been dropped, allowing xidVacLimit to advance.
2586 : *
2587 : * However, it's also important not to do this blindly in all cases,
2588 : * because when autovacuum=off this will restart the autovacuum launcher.
2589 : * If we're not careful, an infinite loop can result, where workers find
2590 : * no work to do and restart the launcher, which starts another worker in
2591 : * the same database that finds no work to do. To prevent that, we skip
2592 : * this if (1) we found no work to do and (2) we skipped at least one
2593 : * table due to concurrent autovacuum activity. In that case, the other
2594 : * worker has already done it, or will do so when it finishes.
2595 : */
2596 1498 : if (did_vacuum || !found_concurrent_worker)
2597 1498 : vac_update_datfrozenxid();
2598 :
2599 : /* Finally close out the last transaction. */
2600 1498 : CommitTransactionCommand();
2601 1498 : }
2602 :
2603 : /*
2604 : * Execute a previously registered work item.
2605 : */
2606 : static void
2607 6 : perform_work_item(AutoVacuumWorkItem *workitem)
2608 : {
2609 6 : char *cur_datname = NULL;
2610 6 : char *cur_nspname = NULL;
2611 6 : char *cur_relname = NULL;
2612 :
2613 : /*
2614 : * Note we do not store table info in MyWorkerInfo, since this is not
2615 : * vacuuming proper.
2616 : */
2617 :
2618 : /*
2619 : * Save the relation name for a possible error message, to avoid a catalog
2620 : * lookup in case of an error. If any of these return NULL, then the
2621 : * relation has been dropped since last we checked; skip it.
2622 : */
2623 : Assert(CurrentMemoryContext == AutovacMemCxt);
2624 :
2625 6 : cur_relname = get_rel_name(workitem->avw_relation);
2626 6 : cur_nspname = get_namespace_name(get_rel_namespace(workitem->avw_relation));
2627 6 : cur_datname = get_database_name(MyDatabaseId);
2628 6 : if (!cur_relname || !cur_nspname || !cur_datname)
2629 0 : goto deleted2;
2630 :
2631 6 : autovac_report_workitem(workitem, cur_nspname, cur_relname);
2632 :
2633 : /* clean up memory before each work item */
2634 6 : MemoryContextReset(PortalContext);
2635 :
2636 : /*
2637 : * We will abort the current work item if something errors out, and
2638 : * continue with the next one; in particular, this happens if we are
2639 : * interrupted with SIGINT. Note that this means that the work item list
2640 : * can be lossy.
2641 : */
2642 6 : PG_TRY();
2643 : {
2644 : /* Use PortalContext for any per-work-item allocations */
2645 6 : MemoryContextSwitchTo(PortalContext);
2646 :
2647 : /*
2648 : * Have at it. Functions called here are responsible for any required
2649 : * user switch and sandbox.
2650 : */
2651 6 : switch (workitem->avw_type)
2652 : {
2653 6 : case AVW_BRINSummarizeRange:
2654 6 : DirectFunctionCall2(brin_summarize_range,
2655 : ObjectIdGetDatum(workitem->avw_relation),
2656 : Int64GetDatum((int64) workitem->avw_blockNumber));
2657 6 : break;
2658 0 : default:
2659 0 : elog(WARNING, "unrecognized work item found: type %d",
2660 : workitem->avw_type);
2661 0 : break;
2662 : }
2663 :
2664 : /*
2665 : * Clear a possible query-cancel signal, to avoid a late reaction to
2666 : * an automatically-sent signal because of vacuuming the current table
2667 : * (we're done with it, so it would make no sense to cancel at this
2668 : * point.)
2669 : */
2670 6 : QueryCancelPending = false;
2671 : }
2672 0 : PG_CATCH();
2673 : {
2674 : /*
2675 : * Abort the transaction, start a new one, and proceed with the next
2676 : * table in our list.
2677 : */
2678 0 : HOLD_INTERRUPTS();
2679 0 : errcontext("processing work entry for relation \"%s.%s.%s\"",
2680 : cur_datname, cur_nspname, cur_relname);
2681 0 : EmitErrorReport();
2682 :
2683 : /* this resets ProcGlobal->statusFlags[i] too */
2684 0 : AbortOutOfAnyTransaction();
2685 0 : FlushErrorState();
2686 0 : MemoryContextReset(PortalContext);
2687 :
2688 : /* restart our transaction for the following operations */
2689 0 : StartTransactionCommand();
2690 0 : RESUME_INTERRUPTS();
2691 : }
2692 6 : PG_END_TRY();
2693 :
2694 : /* Make sure we're back in AutovacMemCxt */
2695 6 : MemoryContextSwitchTo(AutovacMemCxt);
2696 :
2697 : /* We intentionally do not set did_vacuum here */
2698 :
2699 : /* be tidy */
2700 6 : deleted2:
2701 6 : if (cur_datname)
2702 6 : pfree(cur_datname);
2703 6 : if (cur_nspname)
2704 6 : pfree(cur_nspname);
2705 6 : if (cur_relname)
2706 6 : pfree(cur_relname);
2707 6 : }
2708 :
2709 : /*
2710 : * extract_autovac_opts
2711 : *
2712 : * Given a relation's pg_class tuple, return a palloc'd copy of the
2713 : * AutoVacOpts portion of reloptions, if set; otherwise, return NULL.
2714 : *
2715 : * Note: callers do not have a relation lock on the table at this point,
2716 : * so the table could have been dropped, and its catalog rows gone, after
2717 : * we acquired the pg_class row. If pg_class had a TOAST table, this would
2718 : * be a risk; fortunately, it doesn't.
2719 : */
2720 : static AutoVacOpts *
2721 276188 : extract_autovac_opts(HeapTuple tup, TupleDesc pg_class_desc)
2722 : {
2723 : bytea *relopts;
2724 : AutoVacOpts *av;
2725 :
2726 : Assert(((Form_pg_class) GETSTRUCT(tup))->relkind == RELKIND_RELATION ||
2727 : ((Form_pg_class) GETSTRUCT(tup))->relkind == RELKIND_MATVIEW ||
2728 : ((Form_pg_class) GETSTRUCT(tup))->relkind == RELKIND_TOASTVALUE);
2729 :
2730 276188 : relopts = extractRelOptions(tup, pg_class_desc, NULL);
2731 276188 : if (relopts == NULL)
2732 273818 : return NULL;
2733 :
2734 2370 : av = palloc_object(AutoVacOpts);
2735 2370 : memcpy(av, &(((StdRdOptions *) relopts)->autovacuum), sizeof(AutoVacOpts));
2736 2370 : pfree(relopts);
2737 :
2738 2370 : return av;
2739 : }
2740 :
2741 :
2742 : /*
2743 : * table_recheck_autovac
2744 : *
2745 : * Recheck whether a table still needs vacuum or analyze. Return value is a
2746 : * valid autovac_table pointer if it does, NULL otherwise.
2747 : *
2748 : * Note that the returned autovac_table does not have the name fields set.
2749 : */
2750 : static autovac_table *
2751 100216 : table_recheck_autovac(Oid relid, HTAB *table_toast_map,
2752 : TupleDesc pg_class_desc,
2753 : int effective_multixact_freeze_max_age)
2754 : {
2755 : Form_pg_class classForm;
2756 : HeapTuple classTup;
2757 : bool dovacuum;
2758 : bool doanalyze;
2759 100216 : autovac_table *tab = NULL;
2760 : bool wraparound;
2761 : AutoVacOpts *avopts;
2762 100216 : bool free_avopts = false;
2763 :
2764 : /* fetch the relation's relcache entry */
2765 100216 : classTup = SearchSysCacheCopy1(RELOID, ObjectIdGetDatum(relid));
2766 100216 : if (!HeapTupleIsValid(classTup))
2767 0 : return NULL;
2768 100216 : classForm = (Form_pg_class) GETSTRUCT(classTup);
2769 :
2770 : /*
2771 : * Get the applicable reloptions. If it is a TOAST table, try to get the
2772 : * main table reloptions if the toast table itself doesn't have.
2773 : */
2774 100216 : avopts = extract_autovac_opts(classTup, pg_class_desc);
2775 100216 : if (avopts)
2776 1010 : free_avopts = true;
2777 99206 : else if (classForm->relkind == RELKIND_TOASTVALUE &&
2778 : table_toast_map != NULL)
2779 : {
2780 : av_relation *hentry;
2781 : bool found;
2782 :
2783 36037 : hentry = hash_search(table_toast_map, &relid, HASH_FIND, &found);
2784 36037 : if (found && hentry->ar_hasrelopts)
2785 987 : avopts = &hentry->ar_reloptions;
2786 : }
2787 :
2788 100216 : recheck_relation_needs_vacanalyze(relid, avopts, classForm,
2789 : effective_multixact_freeze_max_age,
2790 : &dovacuum, &doanalyze, &wraparound);
2791 :
2792 : /* OK, it needs something done */
2793 100216 : if (doanalyze || dovacuum)
2794 : {
2795 : int freeze_min_age;
2796 : int freeze_table_age;
2797 : int multixact_freeze_min_age;
2798 : int multixact_freeze_table_age;
2799 : int log_vacuum_min_duration;
2800 : int log_analyze_min_duration;
2801 :
2802 : /*
2803 : * Calculate the vacuum cost parameters and the freeze ages. If there
2804 : * are options set in pg_class.reloptions, use them; in the case of a
2805 : * toast table, try the main table too. Otherwise use the GUC
2806 : * defaults, autovacuum's own first and plain vacuum second.
2807 : */
2808 :
2809 : /* -1 in autovac setting means use log_autovacuum_min_duration */
2810 1997 : log_vacuum_min_duration = (avopts && avopts->log_vacuum_min_duration >= 0)
2811 : ? avopts->log_vacuum_min_duration
2812 102213 : : Log_autovacuum_min_duration;
2813 :
2814 : /* -1 in autovac setting means use log_autoanalyze_min_duration */
2815 1997 : log_analyze_min_duration = (avopts && avopts->log_analyze_min_duration >= 0)
2816 : ? avopts->log_analyze_min_duration
2817 102213 : : Log_autoanalyze_min_duration;
2818 :
2819 : /* these do not have autovacuum-specific settings */
2820 1997 : freeze_min_age = (avopts && avopts->freeze_min_age >= 0)
2821 : ? avopts->freeze_min_age
2822 102213 : : default_freeze_min_age;
2823 :
2824 1997 : freeze_table_age = (avopts && avopts->freeze_table_age >= 0)
2825 : ? avopts->freeze_table_age
2826 102213 : : default_freeze_table_age;
2827 :
2828 102213 : multixact_freeze_min_age = (avopts &&
2829 1997 : avopts->multixact_freeze_min_age >= 0)
2830 : ? avopts->multixact_freeze_min_age
2831 102213 : : default_multixact_freeze_min_age;
2832 :
2833 102213 : multixact_freeze_table_age = (avopts &&
2834 1997 : avopts->multixact_freeze_table_age >= 0)
2835 : ? avopts->multixact_freeze_table_age
2836 102213 : : default_multixact_freeze_table_age;
2837 :
2838 100216 : tab = palloc_object(autovac_table);
2839 100216 : tab->at_relid = relid;
2840 100216 : tab->at_sharedrel = classForm->relisshared;
2841 :
2842 : /*
2843 : * Select VACUUM options. Note we don't say VACOPT_PROCESS_TOAST, so
2844 : * that vacuum() skips toast relations. Also note we tell vacuum() to
2845 : * skip vac_update_datfrozenxid(); we'll do that separately.
2846 : */
2847 100216 : tab->at_params.options =
2848 100216 : (dovacuum ? (VACOPT_VACUUM |
2849 : VACOPT_PROCESS_MAIN |
2850 100216 : VACOPT_SKIP_DATABASE_STATS) : 0) |
2851 100216 : (doanalyze ? VACOPT_ANALYZE : 0) |
2852 100216 : (!wraparound ? VACOPT_SKIP_LOCKED : 0);
2853 :
2854 : /*
2855 : * index_cleanup and truncate are unspecified at first in autovacuum.
2856 : * They will be filled in with usable values using their reloptions
2857 : * (or reloption defaults) later.
2858 : */
2859 100216 : tab->at_params.index_cleanup = VACOPTVALUE_UNSPECIFIED;
2860 100216 : tab->at_params.truncate = VACOPTVALUE_UNSPECIFIED;
2861 : /* As of now, we don't support parallel vacuum for autovacuum */
2862 100216 : tab->at_params.nworkers = -1;
2863 100216 : tab->at_params.freeze_min_age = freeze_min_age;
2864 100216 : tab->at_params.freeze_table_age = freeze_table_age;
2865 100216 : tab->at_params.multixact_freeze_min_age = multixact_freeze_min_age;
2866 100216 : tab->at_params.multixact_freeze_table_age = multixact_freeze_table_age;
2867 100216 : tab->at_params.is_wraparound = wraparound;
2868 100216 : tab->at_params.log_vacuum_min_duration = log_vacuum_min_duration;
2869 100216 : tab->at_params.log_analyze_min_duration = log_analyze_min_duration;
2870 100216 : tab->at_params.toast_parent = InvalidOid;
2871 :
2872 : /*
2873 : * Later, in vacuum_rel(), we check reloptions for any
2874 : * vacuum_max_eager_freeze_failure_rate override.
2875 : */
2876 100216 : tab->at_params.max_eager_freeze_failure_rate = vacuum_max_eager_freeze_failure_rate;
2877 100216 : tab->at_storage_param_vac_cost_limit = avopts ?
2878 100216 : avopts->vacuum_cost_limit : 0;
2879 100216 : tab->at_storage_param_vac_cost_delay = avopts ?
2880 100216 : avopts->vacuum_cost_delay : -1;
2881 100216 : tab->at_relname = NULL;
2882 100216 : tab->at_nspname = NULL;
2883 100216 : tab->at_datname = NULL;
2884 :
2885 : /*
2886 : * If any of the cost delay parameters has been set individually for
2887 : * this table, disable the balancing algorithm.
2888 : */
2889 100216 : tab->at_dobalance =
2890 102213 : !(avopts && (avopts->vacuum_cost_limit > 0 ||
2891 102213 : avopts->vacuum_cost_delay >= 0));
2892 : }
2893 :
2894 100216 : if (free_avopts)
2895 1010 : pfree(avopts);
2896 100216 : heap_freetuple(classTup);
2897 100216 : return tab;
2898 : }
2899 :
2900 : /*
2901 : * recheck_relation_needs_vacanalyze
2902 : *
2903 : * Subroutine for table_recheck_autovac.
2904 : *
2905 : * Fetch the pgstat of a relation and recheck whether a relation
2906 : * needs to be vacuumed or analyzed.
2907 : */
2908 : static void
2909 100216 : recheck_relation_needs_vacanalyze(Oid relid,
2910 : AutoVacOpts *avopts,
2911 : Form_pg_class classForm,
2912 : int effective_multixact_freeze_max_age,
2913 : bool *dovacuum,
2914 : bool *doanalyze,
2915 : bool *wraparound)
2916 : {
2917 : PgStat_StatTabEntry *tabentry;
2918 :
2919 : /* fetch the pgstat table entry */
2920 100216 : tabentry = pgstat_fetch_stat_tabentry_ext(classForm->relisshared,
2921 : relid);
2922 :
2923 100216 : relation_needs_vacanalyze(relid, avopts, classForm, tabentry,
2924 : effective_multixact_freeze_max_age,
2925 : dovacuum, doanalyze, wraparound);
2926 :
2927 : /* Release tabentry to avoid leakage */
2928 100216 : if (tabentry)
2929 99711 : pfree(tabentry);
2930 :
2931 : /* ignore ANALYZE for toast tables */
2932 100216 : if (classForm->relkind == RELKIND_TOASTVALUE)
2933 36037 : *doanalyze = false;
2934 100216 : }
2935 :
2936 : /*
2937 : * relation_needs_vacanalyze
2938 : *
2939 : * Check whether a relation needs to be vacuumed or analyzed; return each into
2940 : * "dovacuum" and "doanalyze", respectively. Also return whether the vacuum is
2941 : * being forced because of Xid or multixact wraparound.
2942 : *
2943 : * relopts is a pointer to the AutoVacOpts options (either for itself in the
2944 : * case of a plain table, or for either itself or its parent table in the case
2945 : * of a TOAST table), NULL if none; tabentry is the pgstats entry, which can be
2946 : * NULL.
2947 : *
2948 : * A table needs to be vacuumed if the number of dead tuples exceeds a
2949 : * threshold. This threshold is calculated as
2950 : *
2951 : * threshold = vac_base_thresh + vac_scale_factor * reltuples
2952 : * if (threshold > vac_max_thresh)
2953 : * threshold = vac_max_thresh;
2954 : *
2955 : * For analyze, the analysis done is that the number of tuples inserted,
2956 : * deleted and updated since the last analyze exceeds a threshold calculated
2957 : * in the same fashion as above. Note that the cumulative stats system stores
2958 : * the number of tuples (both live and dead) that there were as of the last
2959 : * analyze. This is asymmetric to the VACUUM case.
2960 : *
2961 : * We also force vacuum if the table's relfrozenxid is more than freeze_max_age
2962 : * transactions back, and if its relminmxid is more than
2963 : * multixact_freeze_max_age multixacts back.
2964 : *
2965 : * A table whose autovacuum_enabled option is false is
2966 : * automatically skipped (unless we have to vacuum it due to freeze_max_age).
2967 : * Thus autovacuum can be disabled for specific tables. Also, when the cumulative
2968 : * stats system does not have data about a table, it will be skipped.
2969 : *
2970 : * A table whose vac_base_thresh value is < 0 takes the base value from the
2971 : * autovacuum_vacuum_threshold GUC variable. Similarly, a vac_scale_factor
2972 : * value < 0 is substituted with the value of
2973 : * autovacuum_vacuum_scale_factor GUC variable. Ditto for analyze.
2974 : */
2975 : static void
2976 276188 : relation_needs_vacanalyze(Oid relid,
2977 : AutoVacOpts *relopts,
2978 : Form_pg_class classForm,
2979 : PgStat_StatTabEntry *tabentry,
2980 : int effective_multixact_freeze_max_age,
2981 : /* output params below */
2982 : bool *dovacuum,
2983 : bool *doanalyze,
2984 : bool *wraparound)
2985 : {
2986 : bool force_vacuum;
2987 : bool av_enabled;
2988 :
2989 : /* constants from reloptions or GUC variables */
2990 : int vac_base_thresh,
2991 : vac_max_thresh,
2992 : vac_ins_base_thresh,
2993 : anl_base_thresh;
2994 : float4 vac_scale_factor,
2995 : vac_ins_scale_factor,
2996 : anl_scale_factor;
2997 :
2998 : /* thresholds calculated from above constants */
2999 : float4 vacthresh,
3000 : vacinsthresh,
3001 : anlthresh;
3002 :
3003 : /* number of vacuum (resp. analyze) tuples at this time */
3004 : float4 vactuples,
3005 : instuples,
3006 : anltuples;
3007 :
3008 : /* freeze parameters */
3009 : int freeze_max_age;
3010 : int multixact_freeze_max_age;
3011 : TransactionId xidForceLimit;
3012 : TransactionId relfrozenxid;
3013 : MultiXactId multiForceLimit;
3014 :
3015 : Assert(classForm != NULL);
3016 : Assert(OidIsValid(relid));
3017 :
3018 : /*
3019 : * Determine vacuum/analyze equation parameters. We have two possible
3020 : * sources: the passed reloptions (which could be a main table or a toast
3021 : * table), or the autovacuum GUC variables.
3022 : */
3023 :
3024 : /* -1 in autovac setting means use plain vacuum_scale_factor */
3025 4677 : vac_scale_factor = (relopts && relopts->vacuum_scale_factor >= 0)
3026 0 : ? relopts->vacuum_scale_factor
3027 280865 : : autovacuum_vac_scale;
3028 :
3029 4677 : vac_base_thresh = (relopts && relopts->vacuum_threshold >= 0)
3030 : ? relopts->vacuum_threshold
3031 280865 : : autovacuum_vac_thresh;
3032 :
3033 : /* -1 is used to disable max threshold */
3034 4677 : vac_max_thresh = (relopts && relopts->vacuum_max_threshold >= -1)
3035 : ? relopts->vacuum_max_threshold
3036 280865 : : autovacuum_vac_max_thresh;
3037 :
3038 4677 : vac_ins_scale_factor = (relopts && relopts->vacuum_ins_scale_factor >= 0)
3039 0 : ? relopts->vacuum_ins_scale_factor
3040 280865 : : autovacuum_vac_ins_scale;
3041 :
3042 : /* -1 is used to disable insert vacuums */
3043 4677 : vac_ins_base_thresh = (relopts && relopts->vacuum_ins_threshold >= -1)
3044 : ? relopts->vacuum_ins_threshold
3045 280865 : : autovacuum_vac_ins_thresh;
3046 :
3047 4677 : anl_scale_factor = (relopts && relopts->analyze_scale_factor >= 0)
3048 0 : ? relopts->analyze_scale_factor
3049 280865 : : autovacuum_anl_scale;
3050 :
3051 4677 : anl_base_thresh = (relopts && relopts->analyze_threshold >= 0)
3052 : ? relopts->analyze_threshold
3053 280865 : : autovacuum_anl_thresh;
3054 :
3055 4677 : freeze_max_age = (relopts && relopts->freeze_max_age >= 0)
3056 0 : ? Min(relopts->freeze_max_age, autovacuum_freeze_max_age)
3057 280865 : : autovacuum_freeze_max_age;
3058 :
3059 4677 : multixact_freeze_max_age = (relopts && relopts->multixact_freeze_max_age >= 0)
3060 0 : ? Min(relopts->multixact_freeze_max_age, effective_multixact_freeze_max_age)
3061 280865 : : effective_multixact_freeze_max_age;
3062 :
3063 276188 : av_enabled = (relopts ? relopts->enabled : true);
3064 :
3065 : /* Force vacuum if table is at risk of wraparound */
3066 276188 : xidForceLimit = recentXid - freeze_max_age;
3067 276188 : if (xidForceLimit < FirstNormalTransactionId)
3068 0 : xidForceLimit -= FirstNormalTransactionId;
3069 276188 : relfrozenxid = classForm->relfrozenxid;
3070 552376 : force_vacuum = (TransactionIdIsNormal(relfrozenxid) &&
3071 276188 : TransactionIdPrecedes(relfrozenxid, xidForceLimit));
3072 276188 : if (!force_vacuum)
3073 : {
3074 75782 : MultiXactId relminmxid = classForm->relminmxid;
3075 :
3076 75782 : multiForceLimit = recentMulti - multixact_freeze_max_age;
3077 75782 : if (multiForceLimit < FirstMultiXactId)
3078 0 : multiForceLimit -= FirstMultiXactId;
3079 151564 : force_vacuum = MultiXactIdIsValid(relminmxid) &&
3080 75782 : MultiXactIdPrecedes(relminmxid, multiForceLimit);
3081 : }
3082 276188 : *wraparound = force_vacuum;
3083 :
3084 : /* User disabled it in pg_class.reloptions? (But ignore if at risk) */
3085 276188 : if (!av_enabled && !force_vacuum)
3086 : {
3087 642 : *doanalyze = false;
3088 642 : *dovacuum = false;
3089 642 : return;
3090 : }
3091 :
3092 : /*
3093 : * If we found stats for the table, and autovacuum is currently enabled,
3094 : * make a threshold-based decision whether to vacuum and/or analyze. If
3095 : * autovacuum is currently disabled, we must be here for anti-wraparound
3096 : * vacuuming only, so don't vacuum (or analyze) anything that's not being
3097 : * forced.
3098 : */
3099 275546 : if (tabentry && AutoVacuumingActive())
3100 270492 : {
3101 270492 : float4 pcnt_unfrozen = 1;
3102 270492 : float4 reltuples = classForm->reltuples;
3103 270492 : int32 relpages = classForm->relpages;
3104 270492 : int32 relallfrozen = classForm->relallfrozen;
3105 :
3106 270492 : vactuples = tabentry->dead_tuples;
3107 270492 : instuples = tabentry->ins_since_vacuum;
3108 270492 : anltuples = tabentry->mod_since_analyze;
3109 :
3110 : /* If the table hasn't yet been vacuumed, take reltuples as zero */
3111 270492 : if (reltuples < 0)
3112 1409 : reltuples = 0;
3113 :
3114 : /*
3115 : * If we have data for relallfrozen, calculate the unfrozen percentage
3116 : * of the table to modify insert scale factor. This helps us decide
3117 : * whether or not to vacuum an insert-heavy table based on the number
3118 : * of inserts to the more "active" part of the table.
3119 : */
3120 270492 : if (relpages > 0 && relallfrozen > 0)
3121 : {
3122 : /*
3123 : * It could be the stats were updated manually and relallfrozen >
3124 : * relpages. Clamp relallfrozen to relpages to avoid nonsensical
3125 : * calculations.
3126 : */
3127 98579 : relallfrozen = Min(relallfrozen, relpages);
3128 98579 : pcnt_unfrozen = 1 - ((float4) relallfrozen / relpages);
3129 : }
3130 :
3131 270492 : vacthresh = (float4) vac_base_thresh + vac_scale_factor * reltuples;
3132 270492 : if (vac_max_thresh >= 0 && vacthresh > (float4) vac_max_thresh)
3133 0 : vacthresh = (float4) vac_max_thresh;
3134 :
3135 270492 : vacinsthresh = (float4) vac_ins_base_thresh +
3136 270492 : vac_ins_scale_factor * reltuples * pcnt_unfrozen;
3137 270492 : anlthresh = (float4) anl_base_thresh + anl_scale_factor * reltuples;
3138 :
3139 270492 : if (vac_ins_base_thresh >= 0)
3140 270492 : elog(DEBUG3, "%s: vac: %.0f (threshold %.0f), ins: %.0f (threshold %.0f), anl: %.0f (threshold %.0f)",
3141 : NameStr(classForm->relname),
3142 : vactuples, vacthresh, instuples, vacinsthresh, anltuples, anlthresh);
3143 : else
3144 0 : elog(DEBUG3, "%s: vac: %.0f (threshold %.0f), ins: (disabled), anl: %.0f (threshold %.0f)",
3145 : NameStr(classForm->relname),
3146 : vactuples, vacthresh, anltuples, anlthresh);
3147 :
3148 : /* Determine if this table needs vacuum or analyze. */
3149 341453 : *dovacuum = force_vacuum || (vactuples > vacthresh) ||
3150 70961 : (vac_ins_base_thresh >= 0 && instuples > vacinsthresh);
3151 270492 : *doanalyze = (anltuples > anlthresh);
3152 : }
3153 : else
3154 : {
3155 : /*
3156 : * Skip a table not found in stat hash, unless we have to force vacuum
3157 : * for anti-wrap purposes. If it's not acted upon, there's no need to
3158 : * vacuum it.
3159 : */
3160 5054 : *dovacuum = force_vacuum;
3161 5054 : *doanalyze = false;
3162 : }
3163 :
3164 : /* ANALYZE refuses to work with pg_statistic */
3165 275546 : if (relid == StatisticRelationId)
3166 2370 : *doanalyze = false;
3167 : }
3168 :
3169 : /*
3170 : * autovacuum_do_vac_analyze
3171 : * Vacuum and/or analyze the specified table
3172 : *
3173 : * We expect the caller to have switched into a memory context that won't
3174 : * disappear at transaction commit.
3175 : */
3176 : static void
3177 100216 : autovacuum_do_vac_analyze(autovac_table *tab, BufferAccessStrategy bstrategy)
3178 : {
3179 : RangeVar *rangevar;
3180 : VacuumRelation *rel;
3181 : List *rel_list;
3182 : MemoryContext vac_context;
3183 : MemoryContext old_context;
3184 :
3185 : /* Let pgstat know what we're doing */
3186 100216 : autovac_report_activity(tab);
3187 :
3188 : /* Create a context that vacuum() can use as cross-transaction storage */
3189 100216 : vac_context = AllocSetContextCreate(CurrentMemoryContext,
3190 : "Vacuum",
3191 : ALLOCSET_DEFAULT_SIZES);
3192 :
3193 : /* Set up one VacuumRelation target, identified by OID, for vacuum() */
3194 100216 : old_context = MemoryContextSwitchTo(vac_context);
3195 100216 : rangevar = makeRangeVar(tab->at_nspname, tab->at_relname, -1);
3196 100216 : rel = makeVacuumRelation(rangevar, tab->at_relid, NIL);
3197 100216 : rel_list = list_make1(rel);
3198 100216 : MemoryContextSwitchTo(old_context);
3199 :
3200 100216 : vacuum(rel_list, tab->at_params, bstrategy, vac_context, true);
3201 :
3202 100216 : MemoryContextDelete(vac_context);
3203 100216 : }
3204 :
3205 : /*
3206 : * autovac_report_activity
3207 : * Report to pgstat what autovacuum is doing
3208 : *
3209 : * We send a SQL string corresponding to what the user would see if the
3210 : * equivalent command was to be issued manually.
3211 : *
3212 : * Note we assume that we are going to report the next command as soon as we're
3213 : * done with the current one, and exit right after the last one, so we don't
3214 : * bother to report "<IDLE>" or some such.
3215 : */
3216 : static void
3217 100216 : autovac_report_activity(autovac_table *tab)
3218 : {
3219 : #define MAX_AUTOVAC_ACTIV_LEN (NAMEDATALEN * 2 + 56)
3220 : char activity[MAX_AUTOVAC_ACTIV_LEN];
3221 : int len;
3222 :
3223 : /* Report the command and possible options */
3224 100216 : if (tab->at_params.options & VACOPT_VACUUM)
3225 100033 : snprintf(activity, MAX_AUTOVAC_ACTIV_LEN,
3226 : "autovacuum: VACUUM%s",
3227 100033 : tab->at_params.options & VACOPT_ANALYZE ? " ANALYZE" : "");
3228 : else
3229 183 : snprintf(activity, MAX_AUTOVAC_ACTIV_LEN,
3230 : "autovacuum: ANALYZE");
3231 :
3232 : /*
3233 : * Report the qualified name of the relation.
3234 : */
3235 100216 : len = strlen(activity);
3236 :
3237 100216 : snprintf(activity + len, MAX_AUTOVAC_ACTIV_LEN - len,
3238 : " %s.%s%s", tab->at_nspname, tab->at_relname,
3239 100216 : tab->at_params.is_wraparound ? " (to prevent wraparound)" : "");
3240 :
3241 : /* Set statement_timestamp() to current time for pg_stat_activity */
3242 100216 : SetCurrentStatementStartTimestamp();
3243 :
3244 100216 : pgstat_report_activity(STATE_RUNNING, activity);
3245 100216 : }
3246 :
3247 : /*
3248 : * autovac_report_workitem
3249 : * Report to pgstat that autovacuum is processing a work item
3250 : */
3251 : static void
3252 6 : autovac_report_workitem(AutoVacuumWorkItem *workitem,
3253 : const char *nspname, const char *relname)
3254 : {
3255 : char activity[MAX_AUTOVAC_ACTIV_LEN + 12 + 2];
3256 : char blk[12 + 2];
3257 : int len;
3258 :
3259 6 : switch (workitem->avw_type)
3260 : {
3261 6 : case AVW_BRINSummarizeRange:
3262 6 : snprintf(activity, MAX_AUTOVAC_ACTIV_LEN,
3263 : "autovacuum: BRIN summarize");
3264 6 : break;
3265 : }
3266 :
3267 : /*
3268 : * Report the qualified name of the relation, and the block number if any
3269 : */
3270 6 : len = strlen(activity);
3271 :
3272 6 : if (BlockNumberIsValid(workitem->avw_blockNumber))
3273 6 : snprintf(blk, sizeof(blk), " %u", workitem->avw_blockNumber);
3274 : else
3275 0 : blk[0] = '\0';
3276 :
3277 6 : snprintf(activity + len, MAX_AUTOVAC_ACTIV_LEN - len,
3278 : " %s.%s%s", nspname, relname, blk);
3279 :
3280 : /* Set statement_timestamp() to current time for pg_stat_activity */
3281 6 : SetCurrentStatementStartTimestamp();
3282 :
3283 6 : pgstat_report_activity(STATE_RUNNING, activity);
3284 6 : }
3285 :
3286 : /*
3287 : * AutoVacuumingActive
3288 : * Check GUC vars and report whether the autovacuum process should be
3289 : * running.
3290 : */
3291 : bool
3292 314806 : AutoVacuumingActive(void)
3293 : {
3294 314806 : if (!autovacuum_start_daemon || !pgstat_track_counts)
3295 5202 : return false;
3296 309604 : return true;
3297 : }
3298 :
3299 : /*
3300 : * Request one work item to the next autovacuum run processing our database.
3301 : * Return false if the request can't be recorded.
3302 : */
3303 : bool
3304 6 : AutoVacuumRequestWork(AutoVacuumWorkItemType type, Oid relationId,
3305 : BlockNumber blkno)
3306 : {
3307 : int i;
3308 6 : bool result = false;
3309 :
3310 6 : LWLockAcquire(AutovacuumLock, LW_EXCLUSIVE);
3311 :
3312 : /*
3313 : * Locate an unused work item and fill it with the given data.
3314 : */
3315 21 : for (i = 0; i < NUM_WORKITEMS; i++)
3316 : {
3317 21 : AutoVacuumWorkItem *workitem = &AutoVacuumShmem->av_workItems[i];
3318 :
3319 21 : if (workitem->avw_used)
3320 15 : continue;
3321 :
3322 6 : workitem->avw_used = true;
3323 6 : workitem->avw_active = false;
3324 6 : workitem->avw_type = type;
3325 6 : workitem->avw_database = MyDatabaseId;
3326 6 : workitem->avw_relation = relationId;
3327 6 : workitem->avw_blockNumber = blkno;
3328 6 : result = true;
3329 :
3330 : /* done */
3331 6 : break;
3332 : }
3333 :
3334 6 : LWLockRelease(AutovacuumLock);
3335 :
3336 6 : return result;
3337 : }
3338 :
3339 : /*
3340 : * autovac_init
3341 : * This is called at postmaster initialization.
3342 : *
3343 : * All we do here is annoy the user if he got it wrong.
3344 : */
3345 : void
3346 952 : autovac_init(void)
3347 : {
3348 952 : if (!autovacuum_start_daemon)
3349 124 : return;
3350 828 : else if (!pgstat_track_counts)
3351 0 : ereport(WARNING,
3352 : (errmsg("autovacuum not started because of misconfiguration"),
3353 : errhint("Enable the \"track_counts\" option.")));
3354 : else
3355 828 : check_av_worker_gucs();
3356 : }
3357 :
3358 : /*
3359 : * AutoVacuumShmemSize
3360 : * Compute space needed for autovacuum-related shared memory
3361 : */
3362 : Size
3363 3387 : AutoVacuumShmemSize(void)
3364 : {
3365 : Size size;
3366 :
3367 : /*
3368 : * Need the fixed struct and the array of WorkerInfoData.
3369 : */
3370 3387 : size = sizeof(AutoVacuumShmemStruct);
3371 3387 : size = MAXALIGN(size);
3372 3387 : size = add_size(size, mul_size(autovacuum_worker_slots,
3373 : sizeof(WorkerInfoData)));
3374 3387 : return size;
3375 : }
3376 :
3377 : /*
3378 : * AutoVacuumShmemInit
3379 : * Allocate and initialize autovacuum-related shared memory
3380 : */
3381 : void
3382 1180 : AutoVacuumShmemInit(void)
3383 : {
3384 : bool found;
3385 :
3386 1180 : AutoVacuumShmem = (AutoVacuumShmemStruct *)
3387 1180 : ShmemInitStruct("AutoVacuum Data",
3388 : AutoVacuumShmemSize(),
3389 : &found);
3390 :
3391 1180 : if (!IsUnderPostmaster)
3392 : {
3393 : WorkerInfo worker;
3394 : int i;
3395 :
3396 : Assert(!found);
3397 :
3398 1180 : AutoVacuumShmem->av_launcherpid = 0;
3399 1180 : dclist_init(&AutoVacuumShmem->av_freeWorkers);
3400 1180 : dlist_init(&AutoVacuumShmem->av_runningWorkers);
3401 1180 : AutoVacuumShmem->av_startingWorker = NULL;
3402 1180 : memset(AutoVacuumShmem->av_workItems, 0,
3403 : sizeof(AutoVacuumWorkItem) * NUM_WORKITEMS);
3404 :
3405 1180 : worker = (WorkerInfo) ((char *) AutoVacuumShmem +
3406 : MAXALIGN(sizeof(AutoVacuumShmemStruct)));
3407 :
3408 : /* initialize the WorkerInfo free list */
3409 14223 : for (i = 0; i < autovacuum_worker_slots; i++)
3410 : {
3411 13043 : dclist_push_head(&AutoVacuumShmem->av_freeWorkers,
3412 13043 : &worker[i].wi_links);
3413 13043 : pg_atomic_init_flag(&worker[i].wi_dobalance);
3414 : }
3415 :
3416 1180 : pg_atomic_init_u32(&AutoVacuumShmem->av_nworkersForBalance, 0);
3417 :
3418 : }
3419 : else
3420 : Assert(found);
3421 1180 : }
3422 :
3423 : /*
3424 : * GUC check_hook for autovacuum_work_mem
3425 : */
3426 : bool
3427 1224 : check_autovacuum_work_mem(int *newval, void **extra, GucSource source)
3428 : {
3429 : /*
3430 : * -1 indicates fallback.
3431 : *
3432 : * If we haven't yet changed the boot_val default of -1, just let it be.
3433 : * Autovacuum will look to maintenance_work_mem instead.
3434 : */
3435 1224 : if (*newval == -1)
3436 1222 : return true;
3437 :
3438 : /*
3439 : * We clamp manually-set values to at least 64kB. Since
3440 : * maintenance_work_mem is always set to at least this value, do the same
3441 : * here.
3442 : */
3443 2 : if (*newval < 64)
3444 2 : *newval = 64;
3445 :
3446 2 : return true;
3447 : }
3448 :
3449 : /*
3450 : * Returns whether there is a free autovacuum worker slot available.
3451 : */
3452 : static bool
3453 11851 : av_worker_available(void)
3454 : {
3455 : int free_slots;
3456 : int reserved_slots;
3457 :
3458 11851 : free_slots = dclist_count(&AutoVacuumShmem->av_freeWorkers);
3459 :
3460 11851 : reserved_slots = autovacuum_worker_slots - autovacuum_max_workers;
3461 11851 : reserved_slots = Max(0, reserved_slots);
3462 :
3463 11851 : return free_slots > reserved_slots;
3464 : }
3465 :
3466 : /*
3467 : * Emits a WARNING if autovacuum_worker_slots < autovacuum_max_workers.
3468 : */
3469 : static void
3470 828 : check_av_worker_gucs(void)
3471 : {
3472 828 : if (autovacuum_worker_slots < autovacuum_max_workers)
3473 0 : ereport(WARNING,
3474 : (errcode(ERRCODE_INVALID_PARAMETER_VALUE),
3475 : errmsg("\"autovacuum_max_workers\" (%d) should be less than or equal to \"autovacuum_worker_slots\" (%d)",
3476 : autovacuum_max_workers, autovacuum_worker_slots),
3477 : errdetail("The server will only start up to \"autovacuum_worker_slots\" (%d) autovacuum workers at a given time.",
3478 : autovacuum_worker_slots)));
3479 828 : }
|
