--- /dev/null
+#!/bin/bash
+
+set -ex
+
+FIRST_DAMAGE="first-damage.sh"
+FS=cephfs
+METADATA_POOL=cephfs_meta
+
+function usage {
+ printf '%s: [--fs=<fs_name>] [--metadata-pool=<pool>] [--first-damage=</path/to/first-damage.sh>]\n'
+ exit 1
+}
+
+
+function create {
+ mkdir dir
+ DIR_INODE=$(stat -c '%i' dir)
+ touch dir/a
+ mkdir dir/.snap/1
+ mkdir dir/.snap/2
+ # two snaps
+ rm dir/a
+ mkdir dir/.snap/3
+ # not present in HEAD
+ touch dir/a
+ mkdir dir/.snap/4
+ # one snap
+ rm dir/a
+ touch dir/a
+ mkdir dir/.snap/5
+ # unlink then create
+ rm dir/a
+ touch dir/a
+ # unlink then create, HEAD not snapped
+ ls dir/.snap/*/
+}
+
+function flush {
+ ceph tell mds."$FS":0 flush journal
+}
+
+function damage {
+ local IS=$(printf '%llx.%08llx' "$DIR_INODE" 0)
+ local LS=$(ceph tell mds."$FS":0 dump snaps | jq .last_created)
+
+ local T=$(mktemp -p /tmp)
+
+ # nuke snap 1 version of "a"
+ rados --pool="$METADATA_POOL" getomapval "$IS" a_$(printf %x $((LS-4))) "$T"
+ printf '\xff\xff\xff\xf0' | dd of="$T" count=4 bs=1
+ rados --pool="$METADATA_POOL" setomapval "$IS" a_$(printf %x $((LS-4))) --input-file="$T"
+
+ # nuke snap 4 version of "a"
+ rados --pool="$METADATA_POOL" getomapval "$IS" a_$(printf %x $((LS-1))) "$T"
+ printf '\xff\xff\xff\xff' | dd of="$T" count=4 bs=1
+ rados --pool="$METADATA_POOL" setomapval "$IS" a_$(printf %x $((LS-1))) --input-file="$T"
+
+ rm -f "$T"
+}
+
+function recover {
+ # drop client cache -- approx. umount without unmounting for test
+ echo 3 | sudo tee /proc/sys/vm/drop_caches
+ flush
+ ceph fs fail "$FS"
+ sleep 5
+ cephfs-journal-tool --rank="$FS":0 event recover_dentries summary
+ cephfs-journal-tool --rank="$FS":0 journal reset
+ $FIRST_DAMAGE "$METADATA_POOL"
+ $FIRST_DAMAGE --remove "$METADATA_POOL"
+ ceph fs set "$FS" joinable true
+}
+
+function check {
+ stat dir || exit 1
+ for i in `seq 1 5`; do
+ stat dir/.snap/$i || exit 2
+ done
+ stat dir/.snap/2/a || exit 3
+ stat dir/.snap/5/a || exit 4
+ if stat dir/.snap/1/a; then
+ echo should be gone
+ exit 5
+ fi
+ if stat dir/.snap/3/a; then
+ echo should not ever exist
+ exit 6
+ fi
+ if stat dir/.snap/4/a; then
+ echo should be gone
+ exit 7
+ fi
+}
+
+function cleanup {
+ rmdir dir/.snap/*
+ rm -rf dir
+}
+
+function main {
+ eval set -- $(getopt --name "$0" --options '' --longoptions 'help,fs:,metadata-pool:,first-damage:' -- "$@")
+
+ while [ "$#" -gt 0 ]; do
+ echo "$*"
+ echo "$1"
+ case "$1" in
+ -h|--help)
+ usage
+ ;;
+ --fs)
+ FS="$2"
+ shift 2
+ ;;
+ --metadata-pool)
+ METADATA_POOL="$2"
+ shift 2
+ ;;
+ --first-damage)
+ FIRST_DAMAGE="$2"
+ shift 2
+ ;;
+ --)
+ shift
+ break
+ ;;
+ *)
+ usage
+ ;;
+ esac
+ done
+
+ create
+
+ # flush dentries/inodes to omap
+ (cd / && flush)
+
+ (cd / && damage)
+
+ (cd / && recover)
+
+ check
+
+ cleanup
+}
+
+main "$@"