Vivek Goyal <vgoyal@xxxxxxxxxx> writes: > On Mon, Jul 28, 2008 at 09:24:46AM +0300, Muli Ben-Yehuda wrote: >> >> With an isolation-capable IOMMU (such as Calgary, VT-d and AMD's >> IOMMU) on the I/O path, as long as we want to keep DMAs running and >> going through to memory, we need to keep the IOMMU running, with the >> same set of permissions and translation tables. If we don't mind DMAs >> failing, we need to gracefully handle IOMMU DMA faults (where >> possible---Calgary can't do it at the moment). What we do instead with >> Calgary (c.f., the patch that instigated this discussion) is a hack, >> we "reinitialize" the IOMMU with the old IOMMU's translation tables so >> that DMAs continue working. >> > > Hi Muli, > > Agree, using old kernel's TCE tables is a hack. As Eric pointed out, > is there a reason why swiotlb will not work here? (I guess using > swiotlb will mean disabling iommu and that will again fault if > DMA is going on). > > So one of the solutions, as eric suggested, will be to reserve some > entries in first kernel and then pass that info to second kernel and > let second kernel use thos entries for setting up DMA and let the > DMA's of first kernel run untouched. > > This patch is effectively doing that (using previous kernel's TCE table), > except the fact that there are no gurantees that there are free table > entries when kdump kernel wants to perform a DMA of its own. Should > probably work though in most of the cases. > >> My preference would be to have stopped all DMAs in the old kernel, >> which would've made this nastiness go away. Can you explain in simple >> words why we can't or won't do that? > > Is there a reliable way of stopping all ongoing DMAs after kernel crash? When I investigated this there was no reliable way to stop DMAs from devices, in a generic way, and a callback to each device in the system in the kexec on panic path is less reliable then simply avoiding running out of regions where those DMAs are running. So it would be quite reasonable to drop all in flight DMA at the iommu. We do need a way to allow the drivers in the kernel running after the panic to use DMA. Which is where the idea of reserving a region of the iommu comes from. Eric -- To unsubscribe from this list: send the line "unsubscribe linux-ia64" in the body of a message to majordomo@xxxxxxxxxxxxxxx More majordomo info at http://vger.kernel.org/majordomo-info.html
![]() |