ELC2019: Static Partitioning Made Simple
1 like4,197 views
The document discusses static partitioning configurations using Xen hypervisor without a privileged dom0, focusing on use cases such as mixed criticality, safety, and security. It describes the boot process, advantages like faster startup and lower complexity, and challenges including lack of monitoring and missing PV drivers. It concludes with a status update on implementation progress and future tasks related to dom0-less system capabilities.
![© Copyright 2019 Xilinx
Dom0-less Device Assignment
˃ Configured via a nested device tree snippet
domU1 {
[…]
module@a000000 {
compatible = "multiboot,kernel", "multiboot,module";
reg = <0xa000000 0xffffff>;
bootargs = "console=ttyAMA0";
};
module@b0000000 {
compatible = "multiboot,ramdisk","multiboot,module";
reg = <0xb000000 0xffffff>;
};
module@c000000 {
compatible = "multiboot,device-tree", "multiboot,module";
reg = <0xc000000 0xffffff>;
};
};](https://image.slidesharecdn.com/dom0less-elc2019-190822020120/85/ELC2019-Static-Partitioning-Made-Simple-18-320.jpg)
![© Copyright 2019 Xilinx
Dom0-less Device Assignment
˃ Configured via a nested device tree snippet
the device tree node of the device to assign
same as for regular DomUs
Special properties:
‒ xen,path: path to the device node in the main DT
‒ xen,reg: memory to remap
/dts-v1/;
/ {
#address-cells= <0x2>;
#size-cells = <0x1>;
passthrough {
compatible = "simple-bus";
ranges;
#address-cells = <0x2>;
#size-cells = <0x1>;
ethernet@ff0e0000 {
compatible = "cdns,zynqmp-gem";
status = "okay";
xen,path= "/amba/ethernet@ff0e0000";
xen,reg= <0x0 0xff0e00000x10000x0 0xff0e0000>;
reg = <0x0 0xff0e0000 0x1000>;
clock-names = "pclk","hclk", "tx_clk", "rx_clk";
#address-cells = <0x1>;
#size-cells = <0x0>;
[…]](https://image.slidesharecdn.com/dom0less-elc2019-190822020120/85/ELC2019-Static-Partitioning-Made-Simple-19-320.jpg)
ELC2019: Static Partitioning Made Simple
- 1. © Copyright 2019 Xilinx Stefano Stabellini – ELC August 2019 Static Partitioning with Xen Dom0-less Xen configurations
- 2. © Copyright 2019 Xilinx Static Partitioning
- 3. © Copyright 2019 Xilinx Static Partitioning
- 4. © Copyright 2019 Xilinx Static Partitioning
- 5. © Copyright 2019 Xilinx Static Partitioning: the use-case ˃ Mixed Criticality ˃ Safety ˃ Security ˃ Real-Time ˃ Fault isolation ˃ Compartmentalization ˃ Multiple OSes
- 6. © Copyright 2019 Xilinx Static Partitioning with Xen: the goal U-Boot Xen DomU DomU DomU Hardware Partition CPU + Devices Hardware Partition CPU + Devices Hardware Partition CPU + Devices DomU Hardware Partition CPU + Devices
- 7. © Copyright 2019 Xilinx Static Partitioning with Xen: the goal U-Boot Xen DomU DomU DomU Hardware Partition CPU + Devices Hardware Partition CPU + Devices Hardware Partition CPU + Devices DomU Hardware Partition CPU + Devices Type1 hypervisor A great match to setup static partitions
- 8. © Copyright 2019 Xilinx
- 9. © Copyright 2019 Xilinx Traditional Xen System: Configuration and Boot >> 9 U-Boot Xen Dom0 DomU 1 DomU 2 CPU0 CPU1 CPU2 boots xl
- 10. © Copyright 2019 Xilinx The problem ˃ Requires Dom0 Dom0 is privileged Dom0 is typically Linux ˃ Boot Time total > xen + dom0_kernel + dom0_user ˃ Safety Certifications non-Linux Dom0 exit Dom0 after boot ˃ Complexity build-time complexity ‒ Yocto rootfs build runtime flexibility ‒ Monitoring ‒ VMs restart
- 11. © Copyright 2019 Xilinx Introducing Dom0-less
- 12. © Copyright 2019 Xilinx Dom0-less System Configuration and Boot >> 12 U-Boot Xen Dom0 DomU 1 DomU 2 CPU CPU CPU loads into memoryloads into memory
- 13. © Copyright 2019 Xilinx Dom0-less System Configuration and Boot >> 13 U-Boot Xen Dom0 DomU 1 DomU 2 CPU CPU CPU boots boots
- 14. © Copyright 2019 Xilinx Dom0-less System Configuration and Boot >> 14 U-Boot Xen Dom0 DomU 1 DomU 2 CPU CPU CPU Dom0DomU 3 CPU xl Frontend Backend Dom0-less VMs
- 15. © Copyright 2019 Xilinx U-Boot + Device Tree protocol ˃ Load all the required binaries via U-Boot commands tftpb 0x4000000 dom0less/mpsoc.dtb tftpb 0x80000 dom0less/Image-dom0 tftpb 0x5000000 dom0less/uXen tftpb 0xd000000 dom0less/dom0-ramdisk.cpio.uboot tftpb 0xa000000 dom0less/Image-domU tftpb 0xb000000 dom0less/domU-ramdisk.cpio bootm 0x5000000 0xd000000 0x4000000
- 16. © Copyright 2019 Xilinx U-Boot + Device Tree protocol ˃ Advertise and configure Dom0-less VMs via Device Tree domU1 { compatible = "xen,domain"; memory = <0x0 0x20000>; cpus = 1; vpl011; module@a000000 { compatible = "multiboot,kernel", "multiboot,module"; reg = <0xa000000 0xffffff>; bootargs = "console=ttyAMA0"; }; module@b0000000 { compatible = "multiboot,ramdisk","multiboot,module"; reg = <0xb000000 0xffffff>; }; };
- 17. © Copyright 2019 Xilinx Dom0-less Device Assignment >> 17 U-Boot Xen Dom0 DomU 1 DomU 2 CPU CPU CPU boots boots Network Card Other Devices
- 18. © Copyright 2019 Xilinx Dom0-less Device Assignment ˃ Configured via a nested device tree snippet domU1 { […] module@a000000 { compatible = "multiboot,kernel", "multiboot,module"; reg = <0xa000000 0xffffff>; bootargs = "console=ttyAMA0"; }; module@b0000000 { compatible = "multiboot,ramdisk","multiboot,module"; reg = <0xb000000 0xffffff>; }; module@c000000 { compatible = "multiboot,device-tree", "multiboot,module"; reg = <0xc000000 0xffffff>; }; };
- 19. © Copyright 2019 Xilinx Dom0-less Device Assignment ˃ Configured via a nested device tree snippet the device tree node of the device to assign same as for regular DomUs Special properties: ‒ xen,path: path to the device node in the main DT ‒ xen,reg: memory to remap /dts-v1/; / { #address-cells= <0x2>; #size-cells = <0x1>; passthrough { compatible = "simple-bus"; ranges; #address-cells = <0x2>; #size-cells = <0x1>; ethernet@ff0e0000 { compatible = "cdns,zynqmp-gem"; status = "okay"; xen,path= "/amba/ethernet@ff0e0000"; xen,reg= <0x0 0xff0e00000x10000x0 0xff0e0000>; reg = <0x0 0xff0e0000 0x1000>; clock-names = "pclk","hclk", "tx_clk", "rx_clk"; #address-cells = <0x1>; #size-cells = <0x0>; […]
- 20. © Copyright 2019 Xilinx True Dom0-less >> 20 U-Boot Xen DomU 1 DomU 2 CPU CPU boots boots Network Card PL Block boots
- 21. © Copyright 2019 Xilinx Static Partitioning with Xen U-Boot Xen DomU DomU DomU Hardware Partition CPU + Devices Hardware Partition CPU + Devices Hardware Partition CPU + Devices DomU Hardware Partition CPU + Devices Type1 hypervisor A great match to setup static partitions
- 22. © Copyright 2019 Xilinx More than static partitioning >> 22 U-Boot Xen Dom0 DomU 1 Safety Critical DomU 2 Safety Critical CPU CPU CPU boots boots DomU 3 Non-Critical CPU xl Network Card PL Block
- 23. © Copyright 2019 Xilinx Dom0-less Pros & Cons Pros: ˃ Much faster startup times total ~= xen + domU ˃ Enable static partitioning configurations Excellent for small systems Easier to certify ˃ Lower Complexity No need for the Xen tools Does not require Yocto, just cross-build Xen No need for Xen support in Dom0-less VMs, no need for CONFIG_XEN Cons: ˃ No monitoring and restarting DomUs without Dom0 ˃ No PV frontends/backends without Dom0
- 24. © Copyright 2019 Xilinx Dom0-less and PV drivers >> 24 U-Boot Xen DomU 1 DomU 2 CPU CPU boots boots Network Card Netfront boots Netback Doesn’t work today!
- 25. © Copyright 2019 Xilinx Status & TODO ˃ DONE basic Dom0-less booting upstream in Xen 4.12 device assignment implemented and sent to the list (not upstream) ˃ TODO True Dom0-less Shared memory and interrupts for VM-to-VM communications PV frontends/backends drivers for Dom0-less VMs
- 26. © Copyright 2019 Xilinx Demos
- 27. © Copyright 2019 Xilinx True Dom0-less >> 27 U-Boot Xen DomU 1 DomU 2 CPU CPU boots boots Network Card UART TTC boots
- 28. © Copyright 2019 Xilinx Dom0-less and PVCalls >> 28 U-Boot Xen Dom0 DomU 1 DomU 2 CPU CPU CPU boots boots DomU 3 CPU xl Frontend Backend Network Card
- 29. © Copyright 2019 Xilinx Dom0-less and PVCalls >> 29 U-Boot Xen Dom0 DomU 1 DomU 2 CPU CPU CPU boots DomU 3 CPU xl Frontend Backend Network Card Private Network
- 30. © Copyright 2019 Xilinx Questions?
- 31. © Copyright 2019 Xilinx Adaptable. Intelligent.
- 32. © Copyright 2019 Xilinx Slides Parking Lot
- 33. © Copyright 2019 Xilinx Traditional Xen System Configuration and Boot >> 33 U-Boot Xen Dom0 DomU 1 DomU 2 CPU0 CPU1 CPU2 boots xl quit