On Thu, 6 Jul 2023 at 04:04, 运辉崔 <cuiyunhui@xxxxxxxxxxxxx> wrote: > > Hi Palmer, > > On Wed, Jul 5, 2023 at 10:17 PM Palmer Dabbelt <palmer@xxxxxxxxxxx> wrote: > > > > On Wed, 05 Jul 2023 04:42:47 PDT (-0700), cuiyunhui@xxxxxxxxxxxxx wrote: > > > Here's version 3 of patch series. > > > > > > V1: The FFI (FDT FIRMWARE INTERFACE) scheme has reached a > > > consensus with the Maintainers. > > > Please refer to: > > > https://patches.linaro.org/project/linux-acpi/patch/20230426034001.16-1-cuiyunhui@xxxxxxxxxxxxx/ > > > > From looking at that thread it seems that the consensus is this is a bad > > idea? Sorry if I'm just missing something... > > > > First of all, Coreboot does not support EFI, Ron has expressed, as follows: > "I am wondering if we can focus on risc-v here, and not drag in ARM, > b/c the ARM ACPI+UEFI ship has sailed. I had that discussion in 2013 > ;-) and it's clear we don't want to redo it. > In general, in my world, because of the many problems that come with > UEFI (security, code quality, performance), we'd like to avoid > requiring a dependency on UEFI just to get ACPI on RISC-V. It also > seems, from other discussions I'm having, that there is some belief > that ACPI will be wanted on RISC-V. It would be nice to separate those > pieces on RISC-V; certainly they were separate for a very long time in > the x86 world (we had ACPI+SMM on coreboot laptops without UEFI for > example)." > There appears to be a bit of cargo cult going on here. I agree that the traditional BIOS vendors did a terrible job pivoting to (U)EFI when it became a requirement for booting Windows on x86 PCs, and coreboot did an excellent job providing a retrofit alternative that was more secure and robust. However, it makes sense to distinguish between a) the UEFI specification b) the UEFI reference implementation (edk2) c) commercial implementations created by BIOS vendors for x86 PC OEMs that do not perform any testing beyond booting Windows. coreboot decided not to implement EFI at all, which on x86 means booting in a mode that is similar to BIOS boot. Given how the ACPI and DMTF (for SMBIOS) specifications were already under development when UEFI was being rolled out on x86, those specs contain provisions defining how to obtain the ACPI and SMBIOS tables by scanning regions of memory and looking for magic strings. But this is only defined for x86, and only works on x86 because all x86 machines are essentially PCs with a highly uniform system topology. The ARM case is very different, and while I am no expect on RISC-V, the following probably applies to it as well: - there is no need to work around buggy proprietary firmware that can boot Windows but not Linux - there is no 'prior art' when it comes to pre-EFI boot interfaces except for embedded style bare metal boot where all initialization is done by the kernel (e.g., PCI enumeration and resource assignment etc), and this is fundamentally arch specific - ACPI is a rich firmware interface, and the ACPI specification layers it on top of UEFI so the OS can make certain assumptions about the extent to which the platform has been initialized by the time it hands over. This is why the maintainers of the arm64 and RISC-V ports appear to agree that ACPI will only be supported when booting from firmware that implements the EFI specification. Note that this does not impose any requirement at all regarding which EFI implementation is going to be used: suggestions have been made on the thread to use a) a coreboot specific minimal EFI shim that describes the firmware tables and the EFI memory map, b) the UPL payload for coreboot, and c) U-Boot's EFI implementation. I will also note that booting according to the EFI spec is not fundamentally more secure or faster: I have done some experiments on arm64 comparing bare metal boot with EFI boot using a minimal implementation in Rust, for booting virtual machines under KVM. Due to cache maintenance overhead and execution with the MMU disabled, bare metal boot is actually slightly slower. And due to the fact that the minimal EFI firmware enables the MMU and caches straight out of reset, it is also arguably more secure, given that all memory permission based protections and other page table based hardening measures (e.g., BTI) are always enabled. In summary, I think it may be time to stop extrapolating from bad experiences with buggy proprietary x86 PC firmware created by traditional BIOS vendors for booting Windows (and nothing else) 15+ years ago. The situation is very different for non-x86 Linux architectures, where we are trying hard to beat some sense into the fragmented embedded ecosystem, where every SoC vendor used to have its own fork of u-boot that booted in a slightly different manner, requiring a lot of effort on the part of the distros to track all those moving targets. > Then, a consensus was reached with Ard, that FFI can be applied to RISC-V. > For the record, I would not characterize this as consensus. What I said was - SMBIOS has very little significance to the kernel itself or impact on its internal operation, and so it can be exposed via DT in a generic manner; - ACPI without UEFI on non-x86 is a) a bad idea, and b) fundamentally broken on arm64. So b) is out of the question, but it is not up to me to decide whether or not the RISC-V maintainers should entertain bad ideas.
