users

users@lists.genode.org

2285 discussions

Secure GUI Programs
by Nobody III 14 Jan '16

14 Jan '16

I've been thinking about writing graphical utilities (e.g. a file manager), but I'm not sure whether I should be using Qt. Can I consider Qt secure for things such as rendering filenames from untrusted filesystem servers? If not, what do you suggest? Also, is there a file manager anyone has already started making? Another question: for previews/thumbnails (e.g. for icons), is it reasonably efficient to render the preview for each file in its own process, or should I batch them together?

2 1

Verifiable repository integrity
by Christian Helmuth 13 Jan '16

13 Jan '16

Hi everybody, some days ago, the Genode Labs team had a coffee break discussion about possible means for developers to verify the integrity of the official Genode repository. In the following, I want to explain the current state and put up for discussion what could be improved with some effort. In November 2011, our Git repository on GitHub superseded the Sourceforge Subversion repository and tar archives as main source-code distribution channel. The release history is easily replicable by following Git tags. In 2012, we had a discussion in our issue tracker [1] about signing the release tags and integrated this step in our work flow shortly after. As a result the integrity of a release can be checked by verifying the corresponding Git tag since Genode 12.05. At this time, the interest into our Sourceforge archives already almost vanished, so we never bothered to apply these integrity measures there too. In the above-mentioned discussion, someone brought up Git's support for "signed commits" from the background that each release adds about 250 commits to the repository in three months. This is also the reason why more and more developers intrepidly base their work on the Genode master branch. With signed commits in place, developers may always verify the integrity of the upstream repository revision used (see [3] for an article about Git signed commits). To me this sounds tempting and represents the natural continuation of our open development history. Our current work flow includes two branches of the Genode repository: staging and master. The complete rationale can be found in Section 5.5.1 of [2]. The staging branch is the entrance hall for all contributions to Genode from the community and the core team members alike. Bug fixes, topic branches, and other improvements have to pass our nightly autopilot testing and a thorough review by Norman and me on staging before entering our master branch. As we apply the Git rebase work flow the master history is a linear series of commits with no parallel development branches and merge points. Before a batch of commits from staging is added to master original commits and potential fixup commits are squashed into reasonable commits for master. The work flow explained above does not support the preservation of commit signatures by the author of the original commit because of cherry-picking and potential squashes. Also, the integrity of the master branch is more "you get what the core team reviewed" than "this is what the author committed originally". In my opinion a batch of commits should be signed by the reviewer when added to the master branch. Unfortunately, the Git tool itself does not include an easily usable tool for signing all commits of such a batch before pushing the updated master branch. But, we could sign just the head of batch and get a verifiable update step with git commit --gpg-sign --amend --no-edit && git push origin HEAD:master Among other options the signatures can be checked by git log --show-signature and the head of master would always show "gpg: Good signature...". Does this proposal make sense to you resp. does the explained approach represent the intended improvement for developers caring about upstream repository integrity? [1] Issue 138 https://github.com/genodelabs/genode/issues/138 [2] Genode Foundations http://genode.org/documentation/genode-foundations-15-05.pdf [3] https://mikegerwitz.com/papers/git-horror-story Regards -- Christian Helmuth Genode Labs http://www.genode-labs.com/ · http://genode.org/ https://twitter.com/GenodeLabs · /ˈdʒiː.nəʊd/ Genode Labs GmbH · Amtsgericht Dresden · HRB 28424 · Sitz Dresden Geschäftsführer: Dr.-Ing. Norman Feske, Christian Helmuth

1 0

FOSDEM 2016
by Norman Feske 11 Jan '16

11 Jan '16

Hello everyone, hereby, I'd like to remind you of FOSDEM 2016, which takes place during 30 and 31 of January in Brussels. See https://fosdem.org/2016/ to learn more about the world's biggest gathering of open-source and free-software enthusiasts. This year, Genode will show a strong presence again. On Saturday, Emery, Martin, and me will contribute to the microkernel devroom (https://fosdem.org/2016/schedule/track/microkernels/). On Sunday, I'm taking the opportunity to present the Turmvilla scenario at the desktops devroom. Below, you can find the summary of the Genode-related parts of the FOSDEM schedule. Saturday, January 30 -------------------- Microkernel devroom (K.4.601) at *10:40* Norman Feske "An exploration of the seL4 kernel from Genode's perspective" https://fosdem.org/2016/schedule/event/microkernels_genode_sel4/ Microkernel devroom (K.4.601) at *14:10* Emery Hemingway "Porting Nix to Genode - Package management without a canonical file system" https://fosdem.org/2016/schedule/event/microkernels_genode_nix/ Microkernel devroom (K.4.601) at *15:55* Martin Stein "Genode's TrustZone demo on the USB Armory" https://fosdem.org/2016/schedule/event/microkernels_genode_usb_armory/ Sunday, January 31 ------------------ Desktops devroom (K.4.401) at *10:20* Norman Feske "Genode as Desktop OS" https://fosdem.org/2016/schedule/event/genode_as_a_desktop_os/ -- Dr.-Ing. Norman Feske Genode Labs http://www.genode-labs.com · http://genode.org Genode Labs GmbH · Amtsgericht Dresden · HRB 28424 · Sitz Dresden Geschäftsführer: Dr.-Ing. Norman Feske, Christian Helmuth

2 1

Genode Hack'n'Hike 2016
by Martin Stein 11 Jan '16

11 Jan '16

Hello everyone, The Hack'n'Hike 2016 is approaching. During the 27th - 30th of May we'll gather again in a cosy accommodation to enjoy outdoor activities, collaborative hacking, and relaxation. For everyone who's interested in getting involved with the community, catching up, or just hanging out with the Genode crowd - feel welcome to join us in the Gutshaus Heeselicht: Gutshaus Heeselicht [3], Hofestr. 1a, 01833 Stolpen, district Heeselicht Germany [4] There is still room for more participants. Genode Labs sponsors the event. So your participation/accommodation is free. *To simplify organization for us, please let us know till the 26th of January if you like to join in*. You can do so by writing to [1] or commenting on [2]. However, if you don't know by now whether you can participate, you may join us later as well. For further information, please have a look at [2]. Also if you have suggestions or questions regarding the Hack'n'Hike, don't hesitate to write to the above locations. Best regards, Martin [1] hacknhike@...1... [2] https://github.com/genodelabs/genode/issues/1544 [3] http://www.gutshaus-heeselicht.de [4] https://www.google.de/maps/place/Gutshaus+Heeselicht/@51.0057638,14.0968323…

1 0

tz_vmm demo on imx53qsb
by Joseph Lee 11 Jan '16

11 Jan '16

Hi everyone, i am currently trying to run trustzone demo on imx53 Quick Start Board (qsb). In which i want to run Android OS in the normal world. i followed the instruction in this link ( https://github.com/skalk/genode/blob/i.MX53_tablet_demo/os/src/server/vmm/i…) and built the uImage successfully. I put the uImage on the SD card partition (/dev/mmcblk0p1). However, when try to boot the uImage, it gets stuck after displaying the following outputs. I have attached the whole log messages. FYI, the SD card has two partitions(/dev/mmcblk0p1 and /dev/mmcblk0p2) with ext4 format. mmc0: new high speed SDHC card at address 0007 mmcblk0: mmc0:0007 SD32G 28.9 GiB mmcblk0: p1 p2 init: cannot open '/initlogo.rle' EXT4-fs (mmcblk0p2): mounted filesystem with ordered data mode. Opts: (null) EXT4-fs (mmcblk0p2): re-mounted. Opts: (null) init: Unable to open persistent property directory /data/property errno: 2 init: cannot find '/system/bin/sh', disabling 'console' init: cannot find '/system/bin/servicemanager', disabling 'servicemanager' init: cannot find '/system/bin/vold', disabling 'vold' init: cannot find '/system/bin/netd', disabling 'netd' init: cannot find '/system/bin/dispd', disabling 'dispd' init: cannot find '/system/bin/debuggerd', disabling 'debuggerd' init: cannot find '/system/bin/app_process', disabling 'zygote' init: cannot find '/system/bin/mediaserver', disabling 'media' init: cannot find '/system/bin/dbus-daemon', disabling 'dbus' init: cannot find '/system/bin/installd', disabling 'installd' init: cannot find '/system/etc/install-recovery.sh', disabling 'flash_recovery' init: cannot find '/system/bin/keystore', disabling 'keystore' init: cannot find '/system/bin/rild', disabling 'ril-daemon' init: cannot find '/system/bin/magd', disabling 'magd' init: cannot find '/system/bin/wlan_tool', disabling 'wlan_tool' could you please let me know what is missing? thank you!

2 6

Genode, TrustZone and Android on i.mx6
by Vincent Raes 08 Jan '16

08 Jan '16

Hello, I am currently working on a TrustZone demo using Genode in the Secure world and an Android OS in the Normal world on the SABRElite board. I've succesfully got the Genode 15.08 base-hw kernel working on the board but I am running in some issues with the Normal world. For this I am using an Android distribution customised for the SABRElite, provided by the SoC distributor. One major problem is that I'm unable to get any output from the Android OS when it is booted by Genode. When booting Android using u-boot, there is output as expected. This supports the idea that the used Device Tree Blob is correct. The command line options for the kernel are provided during its compilation. This seems to work since booting with u-boot gets output on the specified ports. When booting with Genode however, there is no output whatsoever. The location of the DTB in the memory is passed to the Normal world using the r2 register, which as far as I know is all that needs to be done. Any input on this would be much appreciated since you can probably imagine that debugging the Normal world kernel without output is a grueling task For now there exists a workaround for debugging using kernel output, thanks to the Secure world. The current debug procedure consists of entering the *smc *command in the code to check whether the Normal world reaches this portion of code. This has allowed me to get the kernel itself running but here I ran into another issue, being the L2 cache used in the SABRElite board. The Linux kernel tries to configure which can't really be done from the Normal world. It can however make calls to the Secure world to configure the restricted registers. Once the cache is actually enabled, Genode immediately stops though. I imagine this is caused by the fact that Genode does not expect the L2 cache to actually work. Are there any pointers to correctly configure the L2 cache in Genode to keep it executing after the cache's activation? Alternatively, is it possible to run Android without the L2 cache and how would one best go about achieving this? Best regards, Vincent

2 1

[Beginner] Running L4Linux as a Server above Fiasco.OC
by Nourhan Mohamed 07 Jan '16

07 Jan '16

Dear all, I was trying to run l4linux as a server above Fiasco.OC using the Features>Make Linux as Server from the l4linux menuconfig in foc_pbxa9 build folder. However, the compilation terminates with error because it can't see some header file. Any ideas what might have gone wrong BR, Nourhan

2 2

My website running Genode
by Guido Witmond 01 Jan '16

01 Jan '16

Hi Genodians, With the release 15.11 I've build a new working Genode system with lighttpd on top of the Fiasco kernel, the only kernel that likes my hardware. I've solved the 256Kb problem a while ago. However, there is one issue with lightttp remaining. It has an artificial limit on urls or filenames. It doesn't like this one: http://eccentric-authentication.org/blog/2014/03/26/how-to-design-a-distrib… . It gives a 404, while nginx on linux serves the contents. As it's probably lighttpd. I'll check that out. There is another issue, the whole site stops responding after a little time. Clicking new urls just give timeouts. Please advice how to proceed. I've attached the generated config file. With regards, Guido Witmond.

3 5

vbox_usb_run bin/nic_drv missing
by a3an 23 Dec '15

23 Dec '15

Hi, I am using the vbox_usb_run script from Alexander Boettcher to create a VirtualBox/win7 image on a usb stick. At the end of "make -C build/nova_x86_64 run/vbox_usb" I get a nessage suggesting that bin/drv_nic cannot be found. I am sure to have missed a make prepare run of something, I cannot find out what. Could you give me a hint ? Thanks, Adrian Schuur adrian@...376...:~/test/usb/genode-vbox_usb_run$ make -C build/nova_x86_64 run/vbox_usb make: Entering directory `/home/adrian/test/usb/genode-vbox_usb_run/build/nova_x86_64' including /home/adrian/test/usb/genode-vbox_usb_run/tool/run/boot_dir/nova including /home/adrian/test/usb/genode-vbox_usb_run/tool/run/image/disk including /home/adrian/test/usb/genode-vbox_usb_run/repos/ports/run/vbox_usb.run building targets: server/input_merger drivers/nic drivers/audio server/nitpicker app/vbox_pointer server/nit_fb server/report_rom core init virtualbox server/part_blk server/rump_fs drivers/ahci drivers/framebuffer drivers/timer drivers/input drivers/usb drivers/rtc drivers/platform drivers/acpi server/report_rom drivers/platform/x86/device_pd spawn make server/input_merger drivers/nic drivers/audio server/nitpicker app/vbox_pointer server/nit_fb server/report_rom core init virtualbox server/part_blk server/rump_fs drivers/ahci drivers/framebuffer drivers/timer drivers/input drivers/usb drivers/rtc drivers/platform drivers/acpi server/report_rom drivers/platform/x86/device_pd make[1]: Entering directory `/home/adrian/test/usb/genode-vbox_usb_run/build/nova_x86_64' Makefile:115: target `server/report_rom' given more than once in the same rule. checking library dependencies... Skip target drivers/audio/linux because it requires linux Skip target drivers/framebuffer/exynos5 because it requires exynos5 Skip target drivers/framebuffer/imx53 because it requires imx53 Skip target drivers/framebuffer/omap4 because it requires omap4 Skip target drivers/framebuffer/pl11x/pbxa9 because it requires pl11x platform_pbxa9 Skip target drivers/framebuffer/pl11x/vpb926 because it requires pl11x platform_vpb926 Skip target drivers/framebuffer/rpi because it requires platform_rpi Skip target drivers/framebuffer/sdl because it requires linux sdl Skip target drivers/input/imx53 because it requires imx53 Skip target drivers/input/ps2/pl050 because it requires pl050 Skip target drivers/nic/lan9118 because it requires lan9118 Skip target drivers/nic/linux because it requires linux Skip target drivers/platform/arndale because it requires platform_arndale Skip target drivers/platform/imx53 because it requires imx53 Skip target drivers/platform/odroid_x2 because it requires platform_odroid_x2 Skip target drivers/platform/rpi because it requires platform_rpi Library platform Library cxx Library syscall Library startup Library base-common Library core Program core/core COMPILE version.o LINK core Library base Program drivers/acpi/x86/acpi_drv Library server Library config Library ahci_platform Program drivers/ahci/ahci_drv Library blit Library x86emu Program drivers/framebuffer/vesa/fb_drv Program drivers/input/dummy/dummy_input_drv Program drivers/input/ps2/x86/ps2_drv Program drivers/platform/x86/device_pd/device_pd Program drivers/platform/x86/platform_drv Program drivers/rtc/x86/rtc_drv Library alarm Library timer Program drivers/timer/timer Library libc-setjmp Library usb Program drivers/usb/usb_drv Library init_pd_args Program init/init Program server/input_merger/input_merger Program server/nit_fb/nit_fb Program server/nitpicker/nitpicker Program server/part_blk/part_blk Program server/report_rom/report_rom Library ldso-startup Library timed_semaphore Library ld CC=/usr/local/genode-gcc/bin/genode-x86-gcc BUILD_CC=cc BUILD_AR=ar BUILD_NM=nm BUILD_OBJCOPY=objcopy AR=/usr/local/genode-gcc/bin/genode-x86-ar NM=/usr/local/genode-gcc/bin/genode-x86-nm OBJCOPY=/usr/local/genode-gcc/bin/genode-x86-objcopy CC_TARGET=genode-x86-gcc /home/adrian/test/usb/genode-vbox_usb_run/contrib/dde_rump-8719ed349bf425eb570d0ee7f16acf980b44adb4/src/lib/dde_rump/buildrump.sh -k -V'MAKEVERBOSE=0' -V'NOGCCERROR=1' -V'RUMP_LOCKS_UP=yes' -s /home/adrian/test/usb/genode-vbox_usb_run/contrib/dde_rump-8719ed349bf425eb570d0ee7f16acf980b44adb4/src/lib/dde_rump/src -T /home/adrian/test/usb/genode-vbox_usb_run/build/nova_x86_64/var/libcache/rump/tools -o /home/adrian/test/usb/genode-vbox_usb_run/build/nova_x86_64/var/libcache/rump/obj -d /home/adrian/test/usb/genode-vbox_usb_run/build/nova_x86_64/var/libcache/rump setupdest >> buildrump.sh ran successfully Library rump Library rump_fs Program server/rump_fs/rump_fs Library libc-string Library libc-locale Library libc-stdlib Library libc-stdio Library libc-gen Library libc-gdtoa Library libc-inet Library libc-stdtime Library libc-regex Library libc-compat Library vfs Library libc Library libm Library config_args Library stdcxx Library virtualbox-bios Library virtualbox-recompiler Library virtualbox-runtime Library virtualbox-vmm Library virtualbox-devices Library virtualbox-drivers Library virtualbox-storage Library virtualbox-zlib Library virtualbox-liblzf Library virtualbox-hwaccl Library virtualbox-xml Library virtualbox-main Library pthread Library libc_terminal Library libc_lock_pipe Library libiconv Program virtualbox/virtualbox Program app/vbox_pointer/vbox_pointer make[1]: `server/report_rom' is up to date. make[1]: Leaving directory `/home/adrian/test/usb/genode-vbox_usb_run/build/nova_x86_64' genode build completed cp: cannot stat âbin/nic_drvâ: No such file or directory while executing "exec cp bin/$binary [run_dir]/genode" (procedure "copy_and_strip_genode_binaries_to_run_dir" line 4) invoked from within "copy_and_strip_genode_binaries_to_run_dir $binaries" (procedure "run_boot_dir" line 6) invoked from within "run_boot_dir $binaries" (procedure "build_boot_image" line 2) invoked from within "build_boot_image $boot_modules" (file "/home/adrian/test/usb/genode-vbox_usb_run/repos/ports/run/vbox_win.inc" line 196) invoked from within "source ${genode_dir}/repos/ports/run/vbox_win.inc" (file "/home/adrian/test/usb/genode-vbox_usb_run/repos/ports/run/vbox_usb.run" line 59) invoked from within "source $include_name" ("foreach" body line 6) invoked from within "foreach include_name [get_cmd_arg --include ""] { # first check if the include name is absolute if {[string first "/" $include_name] == 0} { puts ..." (file "/home/adrian/test/usb/genode-vbox_usb_run/tool/run/run" line 636) make: *** [run/vbox_usb] Error 1 make: Leaving directory `/home/adrian/test/usb/genode-vbox_usb_run/build/nova_x86_64' adrian@...376...:~/test/usb/genode-vbox_usb_run$

4 5

Dataspace Allocation Size and Quota
by Georg Guba 22 Dec '15

22 Dec '15

Hi all, I'm trying to allocate a dataspace dynamically at runtime and transfer quota accordingly. However, it seems the allocation always requires more quota than the actual allocation size. E.g. Genode::Ram_connection ram; ram.ref_account(Genode::env()->ram_session_cap()); Genode::Ram_dataspace_capability ds; Genode::env()->ram_session()->transfer_quota(ram.cap(), 32*1024); PDBG("Quota: %d/%d\n", ram.used(), ram.quota()); ds = ram.alloc(28*1024); PDBG("Quota: %d/%d\n", ram.used(), ram.quota()); This shows 0/32769 on the first print and 28672/32769 on the second which is exactly what you'd expect. Allocating 29 KiB with a 32 KiB quota, however, will throw a Quota_exceeded exception, still printing 0/32769 on the first print. It seems you need about 4 KiB of spare quota but I can't seem to find any doc on this. How much quota should I actually reserve for simple allocations like this and why isn't it simply the same as the actual allocation size? I'd like to avoid magic numbers and wasteful allocation if possible. Cheers, Georg

3 2

Jump to page:

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

2011

2010

2009

2008

users