We've wandered into the QAPI vs. QOM swamp.  Cc: Paolo.

Eduardo Habkost <ehabk...@redhat.com> writes:

> On Wed, May 08, 2019 at 11:16:50AM +0200, Markus Armbruster wrote:
>> Eduardo Habkost <ehabk...@redhat.com> writes:
>> 
>> > On Tue, May 07, 2019 at 07:07:04AM +0200, Markus Armbruster wrote:
>> >> Eduardo Habkost <ehabk...@redhat.com> writes:
>> >> 
>> >> > This series adds machine type deprecation information to the
>> >> > output of the `query-machines` QMP command.  With this, libvirt
>> >> > and management software will be able to show this information to
>> >> > users and/or suggest changes to VM configuration to avoid
>> >> > deprecated machine types.
>> >> 
>> >> This overlaps with something I want to try, namely using Kevin's
>> >> proposed QAPI feature flags for deprecation markings.  Let's compare the
>> >> two.
>> >> 
>> >> To mark something as deprecated with your patches, you add a
>> >> @support-status member somewhere, where "somewhere" is related to
>> >> "something" by "provides information on".
>> >> 
>> >> Example: MachineInfo (returned by query-machines) provides information
>> >> on possible values of -machine parameter type.  If -machine was
>> >> QAPIfied, it would provide information on possible values of a QAPI
>> >> object type's member.  The type might be anonymous.  The member should
>> >> be an enum (we currently use 'str' in MachineInfo).
>> >
>> > QAPIfying -machine, -cpu, and -device would be wonderful.
>> >
>> >> 
>> >> Example: say we want to deprecate block driver "vfat",
>> >> i.e. BlockdevDriver member @vfat.  Type BlockdevDriver is used in
>> >> multiple places; let's ignore all but BlockdevOptions.  We need to add
>> >> @support-status to something that provides information on
>> >> BlockdevDriver, or maybe on BlockdevOptions.  There is no ad hoc query
>> >> providing information on either of the two, because QAPI/QMP
>> >> introspection has been sufficient.  What now?
>> >> 
>> >> Can we add deprecation information to (general) QAPI/QMP introspection
>> >
>> > Yes, we can.  I think it's a good idea.  But:
>> >
>> >> instead of ad hoc queries?
>> >
>> > I'm not sure about the "instead of" part.  I don't want perfect
>> > to be the enemy of done, and I don't want QAPIfication of
>> > -machine to be a requirement to start reporting machine type
>> > deprecation information.
>> 
>> Valid point.  Still, I believe we should at least try to predict how the
>> pieces we create now would fit with the pieces we plan to create later
>> on.
>
> Sure.
>
>> 
>> Note that full QAPIfication of -machine isn't necessary to make QAPI
>> feature "deprecated" work for machine types.  Turning MachineInfo member
>> @name into an enum, so we can tack "deprecated" onto its values, would
>> suffice.
>> 
>> Such a QAPIfication of machine types is still hard: QOM types are
>> defined at compile time just like the QAPI schema, but their definition
>> is distributed, and collected into one place only at run time.  I
>> discussed this on slide 39 of my "QEMU interface introspection: From
>> hacks to solutions" talk (KVM Form 2015).  Just for device_add, but it's
>> just a special case of QOM.  Choices listed there:
>> 
>> * Collect drivers at compile time? Hard...
>> * Make QAPI schema dynamic? Hard...
>> * Forgo driver-specific arguments in schema?
>>   Defeats introspection...
>> 
>> I'd like to add to the last item:
>> 
>>   Provide QOM introspection on par with QAPI schema introspection
>> 
>> The QOM introspection we have (qom-list-types etc. is not on par.
>
> Agreed, but do we really want to do it?  We have been avoiding
> exposing QOM internals to the outside on purpose.  I believe
> there are at least two reasons for that:
>
> 1) Not every QOM type/property is supposed to be visible to the
>    outside

True.

However, the parts of QOM exposed via device_add and object-add are
definitely part of the stable external interface (unless explicitly
marked unstable).

>            (and nobody really knows what's the full set of
>    supported external QOM interfaces);

Also true.  And terrible.

> 2) QAPI is our preferred interface interface specification/introspection
>    mechanism.

When preferences and requirements collide, preferences tend to get run
over.

The QAPI schema is *declarative*: the schema declares QAPI objects and
properties.  We generate C from the schema, which we then compile and
link into QEMU.

QOM is by design *imperative*: we execute compiled C at QEMU run-time to
define QOM objects and properties.  Maximizes flexibility.  See also
Turing tarpit.

No matter how much we'd prefer to use QAPI to specify external
interfaces to QOM, we can't without making QAPI much more dynamic or QOM
much more static.  Either is hard.  Quite possibly infeasible.

We could try to extend QAPI/QMP introspection to somehow merge in
additional information at run-time[1].  Could be regarded as a limited
way to make QAPI more dynamic.  This is in the "vague idea, not sure
it's feasible" stage.

We could try to rearchitect QOM so that you can optionally specify QOM
stuff in the QAPI schema, then require that for QOM stuff that's part of
a stable external interface.  Same "vague idea" stage, feasibility even
more doubtful.

If I remember correctly, Paolo suggested to abandon the idea to have
query-qmp-schema cover device_add as infeasible.  Instead, cover it
separately.

I think this separate introspection mechanism should be as similar to
query-qmp-schema as practical.  It should cover not just device_add, but
also object-add, and whatever other external interface to QOM we deem
stable.

Should there be more stable external interfaces that can't be defined in
the QAPI schema, we might want to cover them in this second
introspection mechanism, too.

>> Back to exposing machine type deprecation.
>> 
>> I'm doubtful your proposed solution can be applied widely.  It relies on
>> adding @support-status to something that provides information on
>> whatever is deprecated.  The initial use is with a something that is an
>> ad hoc query, namely query-machines.  To use it, the management
>> application needs to understand what query-machines' @support-status
>> applies to.  Certainly feasible.  But I fear every use will be a special
>> case.  Furthermore, a suitable ad hoc query need not exist.  What then?
>> Create suitable ad hoc queries just for communicating deprecation?
>> 
>> Instead, I'd like us to think about a more genral solution.  Or perhaps
>> two: one for properly QAPIfied stuff, and one for QOM.
>
> Should we really spend our time designing a second solution, if
> we could build this on top of QAPI abstractions?  Making the QAPI
> schema dynamic might be hard, but reinventing QAPI and
> maintaining the two systems in parallel seems harder.

I'd love to see a practical way forward that keeps QAPI/QMP
introspection the only game in town.

>> >> Kevin's proposed QAPI feature flags[*] extend the QAPI language so that
>> >> struct types can optionally have a list of feature flags, which are
>> >> strings.  Struct types suffice for his immediate needs.  I'd like to use
>> >> feature flags to mark deprecation by tacking a "deprecated" feature onto
>> >> whatever is deprecated.  This obviously needs feature support for
>> >> everything we want to be able to deprecate: commands, and events, as
>> >> well as members of enum and object types.
>> >> 
>> >> Example: to deprecate block driver "vfat", add feature "deprecated" to
>> >> BlockdevDriver member @vfat.
>> >> 
>> >> Unlike your patches, this does not require finding a "somewhere" that
>> >> provides information on "something".  You simply tack "deprecated" right
>> >> onto "something".
>> >> 
>> >> Your patches provide more information, however: human-readable messages.
>> >
>> > It also includes a machine-friendly suggested alternative (which
>> > I think is even more important that the human-readable message).
>> 
>> I agree we should point to a preferred replacement whenever we deprecate
>> something.
>> 
>> We have to do it in documentation.  And we generally do, in
>> qemu-deprecated.texi.
>> 
>> How useful would doing it in QMP as well be?  Depends on what management
>> applications can do with the additional information.
>
> I expect it to be useful for things that have obvious
> replacements, like old machine type or CPU model versions.

I doubt a management application should apply suggested replacements
automatically, and I doubt libvirt would.  Not even when QEMU developers
deem them "obvious".

>> > We could extend QAPI introspection to return that if necessary,
>> > right?
>> 
>> I'm confident we can come up with *something*.  It might kill the neat
>> and simple "use QAPI features to communicate deprecation" idea, though.
>
> If something is important enough to be communicated through
> stderr, it's important enough to be communicated through QMP.

Mostly.  Differences are due to the different consumers.

stderr is primarily for human users.  We print stuff useful to human
users.

QMP is primarily for machines, secondarily for the humans building these
machines.  We send stuff useful to the machines themselves, and stuff
the machines can use to be more useful for their users (which may be
machines or humans).  We can also send stuff to help the humans building
the machines.

In any case, the information we provide is limited by the cost to
provide it.

> Is that enough reason to provide something more complex?

We need to consider cost / benefit.

On benefit, I'd like to know what libvirt would do with the additional
information beyond logging it.

Is the additional information you propose to provide static or dynamic?

By "static", I mean each occurence of a feature in the QAPI schema is
tied to one fixed instance of "additional information".

> Do we need QAPI features to be just strings?  Can't they be a
> more complex type, like a QAPI alternate?

Adds complexity.

We currently imagine QAPI features enum-like, i.e. a list of strings,
optionally with conditions.  The conditions are evaluated at QAPI
generation time, and not visible in introspection.

This is probably the stupidest solution that could possibly work.  The
structure of features is trivial.

More expressive solutions include:

* List of 'any'.  Feels like a bad idea, because it's completely
  unstructured.

* List of some 'QapiFeatures' object type.  Lets us expose the variable
  structure of features in introspection.

* List of some 'QapiFeatures' alternate type.  Like the previous, but
  permits coding simple feature flags as strings.

All of the more expressive solutions I listed treat the additional
information as dynamic.  Overly general in case the information is
actually always static.

>> >> Food for thought :)
>> >> 
>> >> 
>> >> [*] Hiding in
>> >> Subject: [PATCH 0/4] file-posix: Add dynamic-auto-read-only QAPI feature
>> >> Date: Mon,  8 Apr 2019 16:35:39 +0200
>> >> Message-Id: <20190408143543.3982-1-kw...@redhat.com>


[1] Special case of "merge additional information into QAPI/QMP
introspection at run-time, relegated to a footnote, because I think it's
of mostly historical interest now.

Qdev was designed to be declarative, but the declarations always got
collected only at run-time.  It has since been rebased onto imperative
QOM.  Since you can mix declarative qdev and imperative QOM, the
combination is effectively imperative.

We could collect the declarative parts of qdev at compile-time somehow,
and fold them into QAPI introspection.  That's the "Collect drives at
compile time" item from the slide I quoted.  I think this idea has
become pretty much worthless, since it would cover device_add only in
part, and object-add not at all.

Reply via email to