Hi, On Thu, Mar 23, 2023 at 03:35:30PM +0000, Aidan MacDonald wrote: > > Stephen Boyd <sboyd@xxxxxxxxxx> writes: > > > Quoting Maxime Ripard (2022-11-09 03:00:45) > >> On Mon, Nov 07, 2022 at 08:57:22PM +0000, Aidan MacDonald wrote: > >> > > >> > Maxime Ripard <maxime@xxxxxxxxxx> writes: > >> > > >> > > Hi, > >> > > > >> > > On Fri, Nov 04, 2022 at 05:35:29PM +0000, Aidan MacDonald wrote: > >> > > >> > Assigning the parent clock in the DT works once, at boot, but going off > >> > what you wrote in the commit message, if the clock driver has a > >> > .determine_rate() implementation that *can* reparent clocks then it > >> > probably *will* reparent them, and the DT assignment will be lost. > >> > >> Yes, indeed, but assigned-clock-parents never provided any sort of > >> guarantee on whether or not the clock was allowed to reparent or not. > >> It's just a one-off thing, right before probe, and a clk_set_parent() > >> call at probe will override that just fine. > >> > >> Just like assigned-clock-rates isn't permanent. > >> > >> > What I'm suggesting is a runtime constraint that the clock subsystem > >> > would enforce, and actively prevent drivers from changing the parent. > >> > Either explicitly with clk_set_parent() or due to .determine_rate(). > >> > > >> > That way you could write a .determine_rate() implementation that *can* > >> > select a better parent, but if the DT applies a constraint to fix the > >> > clock to a particular parent, the clock subsystem will force that parent > >> > to be used so you can be sure the clock is never reparented by accident. > >> > >> Yeah, that sounds like a good idea, and CLK_SET_RATE_NO_REPARENT isn't > >> too far off from this, it's just ignored by clk_set_parent() for now. I > >> guess we could rename CLK_SET_RATE_NO_REPARENT to CLK_NO_REPARENT, make > >> clk_set_parent handle it, and set that flag whenever > >> assigned-clock-parents is set on a clock. > >> > >> It's out of scope for this series though, and I certainly don't want to > >> deal with all the regressions it might create :) > >> > > > > This sounds like a new dt binding that says the assigned parent should > > never change. It sounds sort of like gpio hogs. A clock-hogs binding? > > Ideally we want the clock driver to be able to reparent clocks freely > to get the best rate. But we also need some control over that to stop > consumers from being reparented in undesired ways. Eg. you might want > to make sure the GPU gets its own PLL so it can be reclocked easily, > and putting another device on the GPU's PLL could prevent that. > > The only way to achieve this today is (1) never do any reparenting in > the clock driver; and (2) use assigned-clock-parents in the DT to set > up the entire clock tree manually. > > Maxime said that (2) is basically wrong -- if assigned-clock-parents > provides no guarantee on what the OS does "after boot" then the OS is > pretty much free to ignore it. I didn't really say it's wrong, just that it never provided the guarantee you expect it to provide. I can't really say whether it's an issue or not on your platform. It's mostly unrelated to this series though, none of these patches affect that behavior in one way or the other. > My suggestion: add a per-clock bitmap to keep track of which parents > are allowed. Any operation that would select a parent clock not on the > whitelist should fail. Automatic reparenting should only select from > clocks on the whitelist. And we need new DT bindings for controlling > the whitelist, for example: > > clock-parents-0 = <&clk1>, <&pll_c>; > clock-parents-1 = <&clk2>, <&pll_a>, <&pll_b>; > > This means that clk1 can only have pll_c as a parent, while clk2 can > have pll_a or pll_b as parents. By default every clock will be able > to use any parent, so a list is only needed if the machine needs a > more restrictive policy. > > assigned-clock-parents should disable automatic reparenting, but allow > explicit clk_set_parent(). This will allow clock drivers to start doing > reparenting without breaking old DTs. I'm generally not a fan of putting all these policies in the device tree. Do you have an example where it wouldn't be possible to do exactly this from the driver itself? Maxime
Attachment:
signature.asc
Description: PGP signature
