SYSTEM ARCHITECTURE COUNCIL Platform Software ARC --------------------------------- PSARC Regular Meeting time: Wednesdays 10:00-1:00pm in MPK17-3507.
06-17-2009 MEETING MINUTES ============================================================================ Send CORRECTIONS, additions, deletions to psarc-coord at sun.com. Minutes are archived in sac.Eng:/sac/export/sac/Minutes/PSARC. Co-Chair(s): James Carlson: Yes Tim Marsland: no ATTENDEES - Members: (6 active members) Kais Belgaied: Yes Mark Carlson: Yes Garrett D'Amore: Yes Richard Matthews: Yes Darren Moffat: no (on sabbatical) Sebastien Roy: Yes Glenn Skinner: Yes Bill Sommerfeld: no (on sabbatical) Gary Winiger: Yes (on sabbatical) STAFF - Asa Romberger (PM): Yes ATTENDEES - Interns: Frank Che no David Chieu no Charles Debardeleben: no Peter Dennis: no James Falkner: no (on sabbatical) Daniel Hain: no Michael Haines: no Alan Hargreaves: no Phil Harman: no Cecilia Hu: no Wyllys Ingersoll: no Alec Muffett: no (on sabbatical) Darren Reed: no Dean Roehrich no Ienup Sung: no Phi Tran no Brian Utterback: no James Walker Yes Mark Martin Yes (external) Don Cragun no (external) Guests: -- GUESTS -- Wesley Shao Yes Govinda Tatti Yes Colin Zou Yes Scott Carter Yes Robin Fu Yes Evan Yan Yes Not all names are captured. Please send email to Asa.Romberger at Sun.com, if you attended the meeting and your name is missing from the list. --------------------------------------------------------------------------- MEETING SUMMARY: ================ AGENDA 4:00-4:10 Open ARC Business (use open dial in above) 4:10-4:55 Open Inception 2008/181 Solaris Hotplug Framework Submitter: Colin Zou Owner: Garrett D'Amore Exposure: open 4:55-5:40 Open Commitment 2007/596 RBridges: Routing Bridges Submitter: James Carlson Owner: James Carlson Exposure: open 5:45-5:55 Closed ARC Business (use closed dial in above) --------------------------------------------------------------------------- Solaris Hotplug Framework (2008/181) IAM ====== Name: Solaris Hotplug Framework Submitter: Colin Zou Owner: Garrett D'Amore Intern: Phi Tran Interest: govinda.tatti at sun.com Status: submitted Exposure: open SUMMARY ======= The main goal of this project is to provide a generic common Solaris hotplug framework, a foundation which can support hotplug functionality for any hotpluggable bus. The key features include: o A state machine based, bus independent hotplug framework which will interact with other frameworks (such as PM, FMA and Devfs). It will manage the hotplug slot states, interact with bus specific hotplug controller modules and configuators (including kernel driven auto-configuration), deliver hotplug events through the Device Contract, LDI and Sysevent frameworks, and handle all user initiated hotplug operations. o Well defined, common interfaces to the physical and virtual hotplug controller drivers. This will simplify writing a new driver with hotplug controller functionality, because drivers can implement their hotplug requirements by calling into the new framework. o DDI hotplug interfaces for leaf device drivers to support features such as surprise removal, hot replacement, dynamic resource re-balance etc., and framework notification of any asynchronous events such as errors and brute force user operations. At the same time, the new hotplug framework will be compatible with existing DDI compliant leaf device drivers. o A new resource allocator, which will manage bus resources through device tree and provides support for dynamic resource re-balance operations. o Generic hotplug management interfaces, so that various types of management applications, including GUIs, can be written to these interfaces. The project will deliver a new GUI based hotplug tool and may also modify cfgadm or deliver a new command line (CLI) tool. o A hotplug daemon to deliver hotplug events to all hotplug aware applications and userland modules through Device Contract and Sysevent frameworks. o Support for PCI (SHPC based) and PCI Express hotplug functionality under the new Solaris Hotplug Framework. In addition, a set of new features will be supported such as surprise removal, hot replacement, power fault, hotplug FMA, and hotplug operation on an individual device or function in addition to slot or attachment point. Please note that the old or proprietary hotplug functionality will not be migrated to new hotplug framework. o Support hotplug under virtual environment like IOV, Ldoms, Xen etc. Supporting hotplug for virtualized devices requires a virtual hotplug controller driver. These virtual HPC drivers may use different interfaces or methods for accessing physical/IOV compliant devices (v/s para-virtualized (PV) devices). The project will be implemented and delivered in multiple phases due to the priority of some key features & time constraints. For clarification of the big picture, all phases are presented here. However, the scope of ARC review requested for this case is limited to the first phase. The full definition of other phases including resources and schedules are not known at this time. Subsequent ARC cases will be submitted when subsequent project phases commence. o Phase-I: Support existing standard PCI, Native and ACPI based PCI Express hotplug functionality under the new Solaris Hotplug Framework along with several new key features such as: - New hotplug DDI interfaces for leaf drivers - New resource allocator interfaces - Kernel initiated auto-configuration - Hotplug events through device contract, LDI and sysevent frameworks - Dynamic resource re-balance - Surprise removal, hot replacement, hotplug FMA - Modified cfgadm or new userland admin tool (CLI) o Phase-II: - Support hotplug under virtual environments such as IOV, Ldoms, Xen - Support for a GUI admin tool Please note that the virtual hotplug support may get delivered as part of phase-I if required (based on its priority and resource availability). o Phase-III: - Support for Express Card ISSUES ====== gw-99 Sorry for the late and parochial issues, but I'm still officially on sabbatical. And I still seem to be the first in the fine. gw-1 How does this play with devkit, device allocation, SunRay? gw-2 This project seems to require administrative audit, yet there is no mention. See the 20 Questions (and Solaris Audit Policy). gw-3 What is the method context for the service? Are there any properties? Is this enabled by the profile? Is there any reason to ever disable it manually? gw-4 Root is not a privilege (nor is uid 0 special) why isn't this authorization driven? Just how are you doing access control? Access control decisions also require audit. gw-5 I'm dubious about the Patch binding. Verify with the Solaris Evaluations and Trusted Extensions project teams that this is appropriate for a Patch. The manager is Craig Payne. gw-6 What would be the meaning of "remote clients". INET sockets should be avoided as they add an attack vector. I'm still dubious about doors being complex. gw-7 What is the compelling reason that RBAC must be postponed? How is the project complete without meeting the Solaris Policies? Is a PAC waver going to be requested? gw-99a userland: RBAC is not authentication, in this case it is authorization based access control. THE NEXT STEP ============= work with Owner and return for Commitment --------------------------------------------------------------------------- RBridges: Routing Bridges (2007/596) IAM ==== Name: RBridges: Routing Bridges Submitter: James Carlson Owner: James Carlson Intern: Sebastien Roy Interest: Status: commitment scheduled 06/17/2009 Comment: inception held 12/12/2007 Exposure: open SUMMARY ======= The RBridges product provides Solaris with bridging functionality, including a new protocol (under development in the IETF) that will replace Spanning Tree Protocol, and also with IS-IS routing for IP networks. ISSUES ======= PSARC 2007/596: RBridges: Routing Bridges Submitter: James Carlson Owner: NONE Issues for inception (12/12/2007): kb-01 The crossbow project is exposing a MAC client API for adding extra packet receivers (such snoop instances) and sumit packets for transmission at the MAC level (not DLS, which is being removed from the datapath). RBridges should communicate with to the Crossbow project to see if the MAC client API is sufficient for RBriges needs. VOTE ==== Approve - 5 Deny - 0 Abstain - 0 Not Participating (NP) - 3 THE NEXT STEP ============= approved =========================================================================== Fast Tracks: ============ Case (Timeout) Exposure Title 2009/312 (06/12/09) open Configurable Boot Archive Updates approved 2009/328 (06/10/09) open nss_ldap should support AD-style groups approved 2009/329 (06/10/09) open HIDIOCKM[GS]DIRECT ioctls for the USB HID driver approved 2009/340 (06/17/09) open Interrupt affinity interfaces and PCITool enhancements approved 2009/346 (06/16/09) open EOF UCB Device Names approved 2009/347 (06/17/09) open cryptoadm(1M) enhancement for FIPS-140 mode approved 2009/348 (06/17/09) open Security Labels for ZFS approved 2009/350 (06/18/09) open Pipe Viewer (pv) approved 2009/351 (06/18/09) open sysbench let it run 2009/352 (06/19/09) open Abandon the use of snapshots in mntfs. approved 2009/353 (06/19/09) open ssh config update approved 2009/355 (06/22/09) open GNU coreutils 7.4 approved 2009/356 (06/21/09) open disktype let it run 2009/357 (06/13/09) open jedit approved 2009/362 (06/23/09) open XDM-AUTHORIZATION-1 support in libXdmcp approved Other Business: =============== Jim Carlson is leaving Sun Garrett D'Amore will be the new ARC Chair No intern volunteered for next week's case 2009/364 dladm and flowsadm We will get one next week. Next Meeting: ============= 06/24/2009 10:00-10:10 Open ARC Business (use open dial in above) 10:00-10:55 Open Inception 2009/364 dladm and flowsadm Submitter: Shrikrishna Khare Owner: Kais Belgaied Exposure: open 11:00-11:10 Closed ARC Business (use closed dial in above) 45 min AVAILABLE