From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: X-Spam-Checker-Version: SpamAssassin 3.4.0 (2014-02-07) on aws-us-west-2-korg-lkml-1.web.codeaurora.org X-Spam-Level: X-Spam-Status: No, score=-15.7 required=3.0 tests=BAYES_00,DKIM_SIGNED, DKIM_VALID,DKIM_VALID_AU,FREEMAIL_FORGED_FROMDOMAIN,FREEMAIL_FROM, HEADER_FROM_DIFFERENT_DOMAINS,INCLUDES_CR_TRAILER,INCLUDES_PATCH, MAILING_LIST_MULTI,SPF_HELO_NONE,SPF_PASS,URIBL_BLOCKED,USER_AGENT_GIT autolearn=unavailable autolearn_force=no version=3.4.0 Received: from mail.kernel.org (mail.kernel.org [198.145.29.99]) by smtp.lore.kernel.org (Postfix) with ESMTP id 80239C4708F for ; Fri, 4 Jun 2021 12:08:29 +0000 (UTC) Received: from vger.kernel.org (vger.kernel.org [23.128.96.18]) by mail.kernel.org (Postfix) with ESMTP id 646E76140C for ; Fri, 4 Jun 2021 12:08:29 +0000 (UTC) Received: (majordomo@vger.kernel.org) by vger.kernel.org via listexpand id S230153AbhFDMKO (ORCPT ); Fri, 4 Jun 2021 08:10:14 -0400 Received: from lindbergh.monkeyblade.net ([23.128.96.19]:44896 "EHLO lindbergh.monkeyblade.net" rhost-flags-OK-OK-OK-OK) by vger.kernel.org with ESMTP id S229740AbhFDMKL (ORCPT ); Fri, 4 Jun 2021 08:10:11 -0400 Received: from mail-pj1-x1041.google.com (mail-pj1-x1041.google.com [IPv6:2607:f8b0:4864:20::1041]) by lindbergh.monkeyblade.net (Postfix) with ESMTPS id 56C6CC06174A; Fri, 4 Jun 2021 05:08:12 -0700 (PDT) Received: by mail-pj1-x1041.google.com with SMTP id h12-20020a17090aa88cb029016400fd8ad8so5731122pjq.3; Fri, 04 Jun 2021 05:08:12 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20161025; h=from:to:cc:subject:date:message-id:in-reply-to:references :mime-version:content-transfer-encoding; bh=Y1fhKNQPzXtJhRv5rrBkcgSNlwzQ1AXzHclXNThq8jA=; b=cMlmLd7meJnRpYYF2kWUgXTwGXsBkeB2Kuc9vOhxGsDaGOtpFsoi9L6X20cFdvZ6aj qbS2sAyQ0aqiShnsE8+WKHmBV5hRhtGLZfnisA2hOr/8D3jZdGJ/xSNaaqmfJJaJxMWZ /4yXVHtsQbHu4ijVKDelyFc9VTkMxy+REjPjxFko6d+4brrF/WzbDb11wxNG1KSObJo3 lv0pSHQm1W6v2wtOtmZK3NXJ0dfYs2NIqqcxEWw0NyBCUXrfaJfr1/3lJqtfqeFro+fr E8gIJ0+1L0AOh9aq3azNbKi27mX8h1nPHXlPoVnQyuo+qbs9pepTG3pssmZWY17on0cl q8Bw== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:from:to:cc:subject:date:message-id:in-reply-to :references:mime-version:content-transfer-encoding; bh=Y1fhKNQPzXtJhRv5rrBkcgSNlwzQ1AXzHclXNThq8jA=; b=frU8S3HVZ1rzBh1dn3eWZWP07t6lnYonIx5Y+0URZecdQ4BP7nf9/wlT5q0sONo9de ZzfFVFibRqxWtiGDHGfHCrrlQDHIPNlYyB9tq5Khdgj89ZodGzBxsd61P67Zrm0mV+qH jQIh4bNs3xSvooVF31FuZt+2mBFC0RSEkhRI83GgT05p/3saKOvYqxrsa4H94TgxlguZ JZ6phgMRfml6SdaaomySAGnCfX3/KMxiUKc/Qa5pInZsMoBjYcWqqajkB+4IHq0p1+Jg Pqcn30bmMkSwUAiV9PojD9S4BRiOUXVaRXVbV2n4dPepexIZ3LhuuMLWmgiUG3oM7S4g UlcA== X-Gm-Message-State: AOAM530b8tCOQIWyDOxd+R/6JiYScY5Dfizj9YmIDGMQIXaH4aaxK3xT G9119qJNDTvd4NifhgHyCWY= X-Google-Smtp-Source: ABdhPJxPJn8/eZcMdrot5QKT3UnRkI5uaAlqYX6pGypF5t+dCtK0dTqbkjHJ9LMo6GAPO8FAXodd4w== X-Received: by 2002:a17:902:e9cb:b029:101:cebc:b8d with SMTP id 11-20020a170902e9cbb0290101cebc0b8dmr4044563plk.5.1622808491899; Fri, 04 Jun 2021 05:08:11 -0700 (PDT) Received: from localhost.localdomain ([178.236.46.205]) by smtp.gmail.com with ESMTPSA id ev11sm4779146pjb.36.2021.06.04.05.08.03 (version=TLS1_3 cipher=TLS_AES_256_GCM_SHA384 bits=256/256); Fri, 04 Jun 2021 05:08:11 -0700 (PDT) From: menglong8.dong@gmail.com X-Google-Original-From: dong.menglong@zte.com.cn To: christian.brauner@ubuntu.com Cc: viro@zeniv.linux.org.uk, keescook@chromium.org, samitolvanen@google.com, ojeda@kernel.org, johan@kernel.org, elver@google.com, masahiroy@kernel.org, dong.menglong@zte.com.cn, joe@perches.com, axboe@kernel.dk, hare@suse.de, jack@suse.cz, gregkh@linuxfoundation.org, tj@kernel.org, song@kernel.org, neilb@suse.de, akpm@linux-foundation.org, f.fainelli@gmail.com, arnd@arndb.de, palmerdabbelt@google.com, wangkefeng.wang@huawei.com, linux@rasmusvillemoes.dk, brho@google.com, mhiramat@kernel.org, rostedt@goodmis.org, vbabka@suse.cz, pmladek@suse.com, glider@google.com, chris@chrisdown.name, ebiederm@xmission.com, jojing64@gmail.com, geert@linux-m68k.org, mingo@kernel.org, terrelln@fb.com, linux-fsdevel@vger.kernel.org, linux-kernel@vger.kernel.org, mcgrof@kernel.org, jeyu@kernel.org, bhelgaas@google.com, josh@joshtriplett.org Subject: [PATCH v5 2/3] init/do_mounts.c: create second mount for initramfs Date: Fri, 4 Jun 2021 05:07:26 -0700 Message-Id: <20210604120727.58410-3-dong.menglong@zte.com.cn> X-Mailer: git-send-email 2.25.1 In-Reply-To: <20210604120727.58410-1-dong.menglong@zte.com.cn> References: <20210604120727.58410-1-dong.menglong@zte.com.cn> MIME-Version: 1.0 Content-Transfer-Encoding: 8bit Precedence: bulk List-ID: X-Mailing-List: linux-kernel@vger.kernel.org From: Menglong Dong If using container platforms such as Docker, upon initialization it wants to use pivot_root() so that currently mounted devices do not propagate to containers. An example of value in this is that a USB device connected prior to the creation of a containers on the host gets disconnected after a container is created; if the USB device was mounted on containers, but already removed and umounted on the host, the mount point will not go away until all containers unmount the USB device. Another reason for container platforms such as Docker to use pivot_root is that upon initialization the net-namspace is mounted under /var/run/docker/netns/ on the host by dockerd. Without pivot_root Docker must either wait to create the network namespace prior to the creation of containers or simply deal with leaking this to each container. pivot_root is supported if the rootfs is a initrd or block device, but it's not supported if the rootfs uses an initramfs (tmpfs). This means container platforms today must resort to using block devices if they want to pivot_root from the rootfs. A workaround to use chroot() is not a clean viable option given every container will have a duplicate of every mount point on the host. In order to support using container platforms such as Docker on all the supported rootfs types we must extend Linux to support pivot_root on initramfs as well. This patch does the work to do just that. pivot_root will unmount the mount of the rootfs from its parent mount and mount the new root to it. However, when it comes to initramfs, it donesn't work, because the root filesystem has not parent mount, which makes initramfs not supported by pivot_root. In order to make pivot_root supported on initramfs, we create a second mount with type of rootfs before unpacking cpio, and change root to this mount after unpacking. While mounting the second rootfs, 'rootflags' is passed, and it means that we can set options for the mount of rootfs in boot cmd now. For example, the size of tmpfs can be set with 'rootflags=size=1024M'. Signed-off-by: Menglong Dong --- init/do_mounts.c | 49 +++++++++++++++++++++++++++++++++++++++++++++--- init/do_mounts.h | 17 ++++++++++++++++- init/initramfs.c | 9 ++++++++- usr/Kconfig | 10 ++++++++++ 4 files changed, 80 insertions(+), 5 deletions(-) diff --git a/init/do_mounts.c b/init/do_mounts.c index a78e44ee6adb..b13a412b8d94 100644 --- a/init/do_mounts.c +++ b/init/do_mounts.c @@ -617,6 +617,51 @@ void __init prepare_namespace(void) init_chroot("."); } +static inline __init bool is_tmpfs_enabled(void) +{ + return IS_ENABLED(CONFIG_TMPFS) && !saved_root_name[0] && + (!root_fs_names || strstr(root_fs_names, "tmpfs")); +} + +#ifdef CONFIG_INITRAMFS_MOUNT + +/* + * Give systems running from the initramfs and making use of pivot_root a + * proper mount so it can be umounted during pivot_root. + */ +int __init prepare_mount_rootfs(void) +{ + char *rootfs = is_tmpfs_enabled() ? "tmpfs" : "ramfs"; + + return do_mount_root(rootfs, rootfs, + root_mountflags & ~MS_RDONLY, + root_mount_data); +} + +/* + * Revert to previous mount by chdir to '/' and unmounting the second + * mount. + */ +void __init revert_mount_rootfs(void) +{ + init_chdir("/"); + init_umount(".", MNT_DETACH); +} + +/* + * Change root to the new rootfs that mounted in prepare_mount_rootfs() + * if cpio is unpacked successfully and 'ramdisk_execute_command' exist. + */ +void __init finish_mount_rootfs(void) +{ + init_mount(".", "/", NULL, MS_MOVE, NULL); + if (likely(ramdisk_exec_exist())) + init_chroot("."); + else + revert_mount_rootfs(); +} +#endif + static bool is_tmpfs; static int rootfs_init_fs_context(struct fs_context *fc) { @@ -634,7 +679,5 @@ struct file_system_type rootfs_fs_type = { void __init init_rootfs(void) { - if (IS_ENABLED(CONFIG_TMPFS) && !saved_root_name[0] && - (!root_fs_names || strstr(root_fs_names, "tmpfs"))) - is_tmpfs = true; + is_tmpfs = is_tmpfs_enabled(); } diff --git a/init/do_mounts.h b/init/do_mounts.h index 7a29ac3e427b..ae4ab306caa9 100644 --- a/init/do_mounts.h +++ b/init/do_mounts.h @@ -10,9 +10,24 @@ #include #include +extern int root_mountflags; + void mount_block_root(char *name, int flags); void mount_root(void); -extern int root_mountflags; + +#ifdef CONFIG_INITRAMFS_MOUNT + +int prepare_mount_rootfs(void); +void finish_mount_rootfs(void); +void revert_mount_rootfs(void); + +#else + +static inline int prepare_mount_rootfs(void) { return 0; } +static inline void finish_mount_rootfs(void) { } +static inline void revert_mount_rootfs(void) { } + +#endif static inline __init int create_dev(char *name, dev_t dev) { diff --git a/init/initramfs.c b/init/initramfs.c index af27abc59643..f49d29de4fd9 100644 --- a/init/initramfs.c +++ b/init/initramfs.c @@ -16,6 +16,8 @@ #include #include +#include "do_mounts.h" + static ssize_t __init xwrite(struct file *file, const char *p, size_t count, loff_t *pos) { @@ -682,15 +684,20 @@ static void __init do_populate_rootfs(void *unused, async_cookie_t cookie) else printk(KERN_INFO "Unpacking initramfs...\n"); + if (prepare_mount_rootfs()) + panic("Failed to mount rootfs"); + err = unpack_to_rootfs((char *)initrd_start, initrd_end - initrd_start); if (err) { + revert_mount_rootfs(); #ifdef CONFIG_BLK_DEV_RAM populate_initrd_image(err); #else printk(KERN_EMERG "Initramfs unpacking failed: %s\n", err); #endif + } else { + finish_mount_rootfs(); } - done: /* * If the initrd region is overlapped with crashkernel reserved region, diff --git a/usr/Kconfig b/usr/Kconfig index 8bbcf699fe3b..4f6ac12eafe9 100644 --- a/usr/Kconfig +++ b/usr/Kconfig @@ -52,6 +52,16 @@ config INITRAMFS_ROOT_GID If you are not sure, leave it set to "0". +config INITRAMFS_MOUNT + bool "Create second mount to make pivot_root() supported" + default y + help + Before unpacking cpio, create a second mount and make it become + the root filesystem. Therefore, initramfs will be supported by + pivot_root(). + + If container platforms is used with initramfs, say Y. + config RD_GZIP bool "Support initial ramdisk/ramfs compressed using gzip" default y -- 2.32.0.rc0