[lkml]   [2002]   [Nov]   [5]   [last100]   RSS Feed
Views: [wrap][no wrap]   [headers]  [forward] 
Messages in this thread
    SubjectRe: [lkcd-devel] Re: What's left over.
    Alexander Viro <> writes:

    > On Tue, 5 Nov 2002, Werner Almesberger wrote:
    > > Now, if we assume that it's okay for kexec to use a system call,
    > > the next question is whether kexec should indeed use it, i.e.
    > > whether a system call makes sense for what it is trying to do.
    > > Since there are no device files or network elements naturally
    > > involved here (i.e. other major kernel function interfaces),
    > > the answer seems to be "yes".
    > That's not obvious. By the same logics, we would need syscalls for
    > turning off overcommit, etc., etc.
    > FWIW, I suspect that
    > open("/proc/image", O_EXCL|O_WRONLY);
    > bunch of lseek()/write()
    > close()
    > would be more natural - definitely easier to understand than arguments of
    > your sys_kexec(). It's easy to switch from your code to that - you
    > put initialization into ->open(), pulling segments from userland into
    > ->write(), use default ->lseek() and do actual work on ->close() if
    > no errors had happened. file->private_data will point to intermediate
    > state you need.
    > After all, that's what happens - you form an image, writing to it user-supplied
    > data from given buffers at given offsets and when you are done with that you
    > commit the changes. IMO special syscall is less natural match for that
    > than sequence above - commit-on-close is not something unusual, so it matches
    > the semantics of all syscalls involved...

    First take a look at a ELF header. There is a one to one mapping between
    the arguments to kexec and the segments found there.

    Second lseek()/write() pairs do not have the capacity to specify holes/bss
    segments kexec does, so it would not be a 1 to 1 transform. But I can
    live without holes.

    Third I am not fully certain it makes sense to implement a function that will
    boot into a user specified image remotely. If the export process has
    too many capabilities we could be in trouble.

    Are you arguing for more /proc files? Where does the magic file come
    from? I cannot request the allocation of a device number because the
    allocation was frozen before 2.4 started. Though char 1 minor 11
    seems the obvious choice. Or should it be a magic file in sysfs
    instead of procfs? All of the require the code to live someplace
    where I need to allocate a place in the namespace. So there is no
    inherent advantage over a system call. And unless someone exports the
    hooks to properly shutdown the system to modules it is useless.

    Given that this is a seldom used system function I agree that it does not
    need to be optimized.

    I do not have any problem with changing the interface to something
    more palatable to other kernel developers. But I will only do it for
    one of two reasons. My patch will never get accepted in any
    reasonable time frame and it makes maintenance easier for me. Or
    makes the interface palatable for acceptance, into the kernel.
    Neither position currently appears apparent.

    Now to dig into the heart of the issue.

    I could write the new kernel image into /dev/mem and just jump to
    it. Because that is really all I want an interface to do. There
    are several practical problems, with something quite that simple.

    No kernel shutdown code is run, so I am left with processors flying
    all over the place, devices doing all manner of things, after their
    device drivers have walked away. Something needs to put the system in
    a quiescent state. The fix I call the reboot notifiers, and
    device_shutdown. (And then implement a bunch of ->shutdown() methods)

    As we all know writing to /dev/mem is not safe because the memory is
    being use for other things. So I need a way to safely use memory
    during the transition, from one kernel to another.

    Personally I would love to be able to allocate one big contiguous
    buffer that the kernel is not using and neither is the image I will
    eventually load. Then I could just memcpy from that buffer and I
    would be done.

    Alas memory management in the kernel is done in pages, and can be
    fragmented after running for many moons. So I need to allocate all of
    my memory in pages, and I need to let the kernel know where it will
    all eventually live so I can correctly order the memcpy operations.

    Once all the memory copying is sorted out I need to jump to the new
    kernel (a kernel being anything that runs without an OS). Logically
    all you should have to do is do a single jump instruction but in
    practice there is much more that has to be done. The kernel when it
    loads up looks around and enables all sorts of cpu optimizations so
    the kernel runs as well as possible on the processor. The new kernel
    image needs to be given a least common denominator interface so it can
    enable what it is prepared to take advantage of. In addition to what
    the normal shutdown path can accomplish on x86 this involves disabling
    page, changing the gdt, and changing the idt, and possibly disabling
    SMP. It should be possible to enhance device_shutdown so it can
    properly disable SMP though if that will happen still remains in the


    So kexec needs:

    - An allocated slot in some namespace.
    - The ability to request the kernel devices shut themselves down.
    - Buffers that are safe to use.
    - The ability to transition the cpu into a state that is suitable
    for jumping to another kernel.
    - Awareness of it's existence.

    To some extent every piece of this is intimately tied to the kernel
    implementation, from the ability to modify page tables, when jumping
    to a new kernel, to the best algorithm for finding a safe memory
    buffer, to the proper way to shutdown devices this week, and being
    intimately tied to the kernel the code needs to find a home in the


    To unsubscribe from this list: send the line "unsubscribe linux-kernel" in
    the body of a message to
    More majordomo info at
    Please read the FAQ at

     \ /
      Last update: 2005-03-22 13:30    [W:0.029 / U:68.980 seconds]
    ©2003-2017 Jasper Spaans. hosted at Digital OceanAdvertise on this site