users

users@lists.genode.org

2285 discussions

Config update timing
by Nobody III 27 Feb '18

27 Feb '18

What guarantees are there regarding config update timing? For example, if a process requires a policy change to get access to a required service, is the server guaranteed to get the config update before the service request? When we bring in a filesystem, e.g. ram_fs, how does that affect things? It seems that the chain of asynchronous notifications would destroy timing guarantees.

2 1

Fiasco.OC development version available on github
by Matthias Lange 21 Feb '18

21 Feb '18

Hi, Kernkonzept proudly announces the availability of a development version of the Fiasco.OC microkernel on github [1]. It features a detailed history and will be updated regularly. Those interested in exploring the latest changes can amend the latest L4Re snapshot release (see [2]) with this development version. We plan to release development versions of the build system and selected userspace components in the weeks ahead. So, let us know what you think. Cheers, Matthias. [1] https://github.com/kernkonzept/fiasco [2] https://l4re.org/download.html -- Matthias Lange, matthias.lange@...272..., +49-351-41 888 614 Kernkonzept GmbH. Sitz: Dresden. Amtsgericht Dresden, HRB 31129. GeschÃ¤ftsfÃ¼hrer: Dr.-Ing. Michael Hohmuth

1 0

Re: Beginner : VMM with genode
by jony jony 19 Feb '18

19 Feb '18

i'm using an ubuntu virtual machine, and booted through dual boot genode on a nova kernel , the interface that shows is very basic and only has launchpad , i want to use a virtual machine monitor on top of genode to run virtual machines , i copied the files ob repos/ports/run/*run on the / folder and the following changes were made root@...115...:/# ls bin initrd.img.old root sys boot iso run tmp cdrom lib sbin tz_vmm.run dev lib64 seoul-auto.run usr etc lost+found seoul-disc.run var genode-17.11 media seoul-fancy.run vmlinuz home mnt seoul-genode.run vmlinuz.old hypervisor NRE seoul-kernelbuild.run image.elf.gz opt seoul-net.run initrd.img proc src root@...115...:/# cat /etc/grub.d/49_genode1 #!/bin/sh -e echo "Genode@...153..." cat << EOF menuentry "Genode@...153..." { insmod ext2 multiboot /hypervisor module /seoul-auto.run module /seoul-disc.run module /seoul-fancy.run module /seoul-genode.run module /seoul-kernelbuild.run module /seoul-net.run #menuentry 'Genode on NOVA' { # insmod multiboot2 # insmod gzio # multiboot2 /boot/bender # module2 /hypervisor hypervisor iommu serial novpid novga module /image.elf.gz image.elf } root@...115...:/# but once i try to boot genode1nova , i can't launch it thank you 2018-02-10 9:23 GMT+00:00 Alexander Boettcher < alexander.boettcher@...1...>: > Hello, > > first, please, send to the mailing list. > > If you look into the repos/os/run/vmm.run file there are two asserts in > the beginning of the file. Namely you need the base-hw kernel and the > Arndale ARM board to run this scenario. If you don't have such a board > next to you, it is of no use for you. > > The VMMs we support on x86 are Seoul and Virtualbox. Both got ported to > Genode, thats why they are located in the port repository. So, if you > look into > > repos/ports/run/*.run > > you will find some seoul*.run scenarios and virtualbox.run. > > Again, send your questions to the mailing list, since others may also > benefit from the conversation. > > Cheers. > > > On 09.02.2018 12:09, jony jony wrote: > > Hello, i'm sorry for the late answer ,i gave up for a while , > > I managed to run genode using the demo on a virtual machine , would the > vmm > > be able to run on the virtual machine too ? , i tried it on a nested vm > and > > a message "require hw" appears , if its possible to run it on the virtual > > machine , can you please guide me through the steps i need to follow . > > here's the content of the run folder > > run# ls > > ahci_bench.run init.run rtc.run > > ahci_blk.run init_smp.run sd_card_bench.run > > audio_out_click.run input_filter.run sd_card.run > > blk_cache.run input.run signal.run > > blk.run kdb_uart_drv.run tar_rom.run > > bomb.run loader.run terminal_crosslink.run > > clipboard.run lx_block.run thread_join.run > > cpufreq.run mixer.run timed_semaphore.run > > cpu_quota.run nic_loopback.run timeout.run > > demo.run panda_uart4_echo.run timer_accuracy.run > > dynamic_config_loader.run part_blk_gpt.run timer.run > > dynamic_config.run part_blk.inc trace.run > > dynamic_config_slave.run part_blk.run tz_vmm.run > > fault_detection.run pci.run uart.run > > fb_bench.run pointer.run usb_block.run > > framebuffer.run ram_fs_chunk.run vfs_stress_fs.run > > fs_log.run report_rom.run vfs_stress_ram.run > > fs_report.run resource_request.run vmm.run > > fs_rom_update.run resource_yield.run weak_ptr.run > > gpio_drv.run rom_blk.run xml_generator.run > > gpio_led.run rom_filter.run xml_node.run > > gpio_signal.run rom_to_file.run > > > > thank you > > > > 2018-01-15 19:50 GMT+00:00 Alexander Boettcher < > > alexander.boettcher@...1...>: > > > >> Hello, > >> > >> On 11.01.2018 15:00, jony jony wrote: > >>> I'm new at genode , i just booted genode 17.11 with a nova kernel based > >> on > >>> the demo from the hard disk, i was wondering how can i run a seoul or > >> xbox > >>> vmm on top of genode since genode only has the launchpad in the demo > and > >> i > >>> don't think i can do much with that. I want to be able to use genode > >> freely > >> > >> please look for *.run files, which build and configure a scenario (as > >> the demo.run file you already used). You will find e.g. virtualbox.run > >> and some seoul*.run files. They may serve as starting point to > >> experiment with. > >> > >> Please also consult the Genode Foundations book, which describes the > >> framework and also run mechanism in more detail. > >> > >> Cheers, > >> > >> -- > >> Alexander Boettcher > >> Genode Labs > >> > >> http://www.genode-labs.com - http://www.genode.org > >> > >> Genode Labs GmbH - Amtsgericht Dresden - HRB 28424 - Sitz Dresden > >> Geschäftsführer: Dr.-Ing. Norman Feske, Christian Helmuth > >> > > > > -- > Alexander Boettcher > Genode Labs > > http://www.genode-labs.com - http://www.genode.org > > Genode Labs GmbH - Amtsgericht Dresden - HRB 28424 - Sitz Dresden > Geschäftsführer: Dr.-Ing. Norman Feske, Christian Helmuth >

3 3

Bender and GRUB "legacy"
by Valery V. Sedletski 19 Feb '18

19 Feb '18

Hi, I tried to boot Genode scenarios from my bootable flash stick. It uses GRUB 1 "Legacy".Â Tried to boot Genode/Nova with bender with GRUB "legacy" (actually, GRUB4DOS). I have the following entries in menu.lst: titleÂ Sculpt scenario (Genode/Nova) kernel /genode/bender module /genode/hypervisor hypervisor iommu serial novpid novga module /genode/sculpt/image.elf image.elf This scenario just hangs when booting. Does this work with GRUB2 only? In GRUB2, I see loading the "multiboot2.mod" module. Is this a new version of Multiboot protocol? Could Bender work with older version of multiboot protocol? Or, is it possible to use Genode/Nova without Bender somehow with GRUB1? Also, is it possible for Genode build system to avoid assembling all modules into image.elf, so I could load them separately as multiple modules? (at least, older Genode versions did so) 10nx in advance! WBR, valery

1 0

Problem building vmm; Error: Hash sum check for acpica failed
by jony jony 19 Feb '18

19 Feb '18

I'm trying to use a vmm on nova , and i can execute the following command due to an integrity problem i guess. I need help solving this problem I tried to build the vmm , the same goes with tz_vmm , using the command root@...115...:/genode-17.11/nova_build_dir# make run=vmm i'm guessing since there is a makefile its already compiled , and it worked using the demo and terminal_crosslink ( even though i couldn't really launch terminal_crosslink) it shows few lines but at the end i get the error : Error: Ports not prepared or outdated: acpica bzip2 ccid curl drm e2fsprogs-lib exfat expat fatfs freetype fribidi fuse-ext2 gmp icu jbig2dec jitterentropy jpeg libav libc libiconv libpng libssh libusb lua lwip mesa mpc mpfr mupdf ncurses ntfs-3g openjpeg openssl pcg-c pcre pcsc-lite python qemu-usb qoost qt5 readline rust sdl sdl_image sdl_mixer sdl_net sdl_ttf stdcxx zlib You can prepare respectively update them as follows: /genode-17.11/tool/ports/prepare_port acpica bzip2 ccid curl drm e2fsprogs-lib exfat expat fatfs freetype fribidi fuse-ext2 gmp icu jbig2dec jitterentropy jpeg libav libc libiconv libpng libssh libusb lua lwip mesa mpc mpfr mupdf ncurses ntfs-3g openjpeg openssl pcg-c pcre pcsc-lite python qemu-usb qoost qt5 readline rust sdl sdl_image sdl_mixer sdl_net sdl_ttf stdcxx zlib make[1]: *** [check_ports] Error 1 make: *** [gen_deps_and_build_targets] Error 2 i tried running the command but i get the following error message: root@...115...:/genode-17.11/nova_build_dir# /genode-17.11/tool/ports/prepare_port acpica bzip2 ccid curl drm e2fsprogs-lib exfat expat fatfs freetype fribidi fuse-ext2 gmp icu jbig2dec jitterentropy jpeg libav libc libiconv libpng libssh libusb lua lwip mesa mpc mpfr mupdf ncurses ntfs-3g openjpeg openssl pcg-c pcre pcsc-lite python qemu-usb qoost qt5 readline rust sdl sdl_image sdl_mixer sdl_net sdl_ttf stdcxx zlib Error: Hash sum check for acpica failed make[2]: *** [acpica.file] Error 1 make[1]: *** [_install_in_port_dir] Error 2 make: *** [acpica] Error 2 I'll be waiting for you answer Thank you

2 2

init stuck on PD session from platform_drv
by Boris Mulder 19 Feb '18

19 Feb '18

Hi all, I have a scenario with many inits on top of each other, and somewhere lives the wifi_drv. When I add another init called 'init_wifi' on top so I can try to kill/restart the wifi_drv, the system hangs and I get the following log: [init -> init_system -> init_user -> init_wifi] child "wifi_drv" [init -> init_system -> init_user -> init_wifi] RAM quota: 130816K [init -> init_system -> init_user -> init_wifi] cap quota: 168 [init -> init_system -> init_user -> init_wifi] ELF binary: wifi_drv [init -> init_system -> init_user -> init_wifi] priority: 0 [init -> init_system -> init_user -> init_wifi] provides service Nic [init -> init_system -> init_user -> init_wifi] child "nic_dump" announces service "Nic" Error: corrupted string [init -> init_system -> init_user -> init_wifi -> wifi_drv] Reload wpa_supplicant configuration [init] Warning: re-attempted PD session request 2 times (args: virt_space=0, phys_start=0x0, phys_size=0x100000000, diag=0, label="platform_drv -> init_system -> init_user -> init_wifi -> wifi_drv -> ", cap_quota=13) [init] Warning: re-attempted PD session request 4 times (args: virt_space=0, phys_start=0x0, phys_size=0x100000000, diag=0, label="platform_drv -> init_system -> init_user -> init_wifi -> wifi_drv -> ", cap_quota=13) [init] Warning: re-attempted PD session request 8 times (args: virt_space=0, phys_start=0x0, phys_size=0x100000000, diag=0, label="platform_drv -> init_system -> init_user -> init_wifi -> wifi_drv -> ", cap_quota=13) [init] Warning: re-attempted PD session request 16 times (args: virt_space=0, phys_start=0x0, phys_size=0x100000000, diag=0, label="platform_drv -> init_system -> init_user -> init_wifi -> wifi_drv -> ", cap_quota=13) etcetera, with double retries each time. Now when this happens the whole system hangs, nothing else is working anymore. As soon as the wifi_drv is started, this problem occurs. When I did not have init_wifi and the wifi_drv was running on top of init_user, everything worked fine. Of course, I adjusted all the routes and policies (of the platform_drv) accordingly. Could the label be too long for core to handle perhaps, or is something else happening? What do these error messages mean and why do they pop up now and not with one init less? -- Met vriendelijke groet / kind regards, Boris Mulder Cyber Security Labs B.V. | Gooimeer 6-31 | 1411 DD Naarden | The Netherlands +31 35 631 3253 (office)

2 3

24-bit or 32-bit framebuffers
by Nobody III 16 Feb '18

16 Feb '18

Genode's Framebuffer session interface seems to only support 16-bit color. Why don't we have support for 24-bit or 32-bit color? Even VESA supports 24-bit color, so it seems like adding driver support is likely trivial.

2 1

process execution from libc
by Nobody III 12 Feb '18

12 Feb '18

Many programs and libraries call other processes. For example, libarchive uses external programs for most of its compression filters, including gzip, bzip2, and xz. Any IDE (e.g. Qt Creator) needs to call an external compiler and the program being written. Genode doesn't seem to have this feature, except in noux, making it unavailable to multi-threaded programs. How can we make this work? Here are the main options I see: 1. extend noux with the features needed (primarily pthreads and access to Genode services such as Nitpicker) to support modern posix applications 2. extend libc with noux-like functionality, including a way to create child processes In issue #1837 (https://github.com/genodelabs/genode/issues/1837), Norman Feske voiced his opposition to the first option, with the following argument: "In the context of Genode, the only benefit we would get from adding pthread support to Noux would be the support of programs that rely on both fork and pthreads, and that are not portable enough to support a non-POSIX backend. I argue that this applies to very few programs. Should we sacrifice the simplicity of Noux to the few programs that fall in this category? Personally, I would not open this can of worms." However, fork() followed by execve() seems to be the standard method of executing external processes on POSIX systems. This is the method used in libarchive, and more importantly in Qt 5. Multithreading is required in Qt applications (unless you compile Qt with QT_NO_THREAD, and multithreading isn't used anywhere in the application code), so in order for a Qt-based IDE or archive manager to work, we need fork() and execve(), or else another method of running and monitoring external libc-based programs. As far as I can tell, here are the required tasks for each option: Option 1 (extend noux): 1. modify noux to support pthreads 2. modify noux to provide access to Nitpicker (and probably other external services) Option 2 (extend libc): 1. add functions to run libc programs as child processes with argument handling, stdin/stdout redirection, process control via PIDs (much like in noux) 2. patch ported programs and libraries (e.g. Qt, libarchive) to use that function For option 2, we could create our own functions, or we could implement posix_spawn() or vfork() and execve(). I'm leaning toward option 2 with vfork() and execve(), because it should work as a libc plugin, and posix_spawn() and popen() use those functions under the hood. Here's my pseudocode: /* simple vfork()/execve() pseudocode that doesn't actually create a new process when vfork() is called */ /* this excludes the required PID system and create_child() function */ int vfork() { enter_vfork(); if (in_vfork) return 0; else return pid; } int execve(...) { if (!in_vfork) fail; create_child(pid, ...); /* possibly under noux */ exit_vfork(); } void enter_vfork() { suspend_other_threads(); save_pid(); in_vfork = 1; generate_pid(); save_program_counter(); } void exit_vfork() { in_vfork = 0; restore_pid(); resume_other_threads(); restore_program_counter(); } Am I missing something? Any thoughts or suggestions?

2 3

Question regarding #define
by Stefan 12 Feb '18

12 Feb '18

Hello all, I’m trying to port a library to Genode and would like to set a specific preprocessor #define. The source is situated in contrib/TheSource and there is a source directory under repos/libports/src/lib/TheSource but I do not see the connection between those. How can one set a special preprocessor #define for a .cc file without touching the code? Is there a possibility to set the #define in the .mk-file? Thanks in advance! Stefan

2 1

residual data in dataspaces
by Boris Mulder 12 Feb '18

12 Feb '18

Hello, We often use cryptographic data such as keys in our code. Some of these data are provided by a component that reads them from a file or from user input. Other components use these keys to encrypt or decrypt data such as network traffic, or maybe other keys. For example, a component asks a user for a password, then the password is used to derive a key, the component puts it in a dataspace accessible as a ROM module by a network encryption component, which is then used to encrypt network packets. It is a good idea to leave traces of residual data in as little places as possible, to reduce the number of sensitive memory locations to a minimum in order to reduce attack vectors. So it would be nice if in the example, the network component could ask the password component to clear the key from the dataspace once it is done with this key. Currently, the ROM session has no way of doing this; besides, there might be complications such as other clients accessing the dataspace. It would be nice to have this functionality somehow, so we have thought of some possibilities: * introducing a new session which wraps a rom/ram-dataspace and clears it after reading, or if the client(s) have issued a clear request at the server, after which the data is overwritten by zeroes or random; * extending the ROM-session in such a way How do you feel about this topic? -- Met vriendelijke groet / kind regards, Boris Mulder Cyber Security Labs B.V. | Gooimeer 6-31 | 1411 DD Naarden | The Netherlands +31 35 631 3253 (office)

1 0

Jump to page:

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

2011

2010

2009

2008

users