All of lore.kernel.org
 help / color / mirror / Atom feed
From: Daniel Kiper <dkiper@net-space.pl>
To: Patrick Steinhardt <ps@pks.im>
Cc: Daniel Axtens <dja@axtens.net>,
	grub-devel@gnu.org, rashmica.g@gmail.com, alastair@d-silva.org,
	nayna@linux.ibm.com, chris.coulson@canonical.com,
	hanson.char@gmail.com, hchar@amazon.com, javierm@redhat.com,
	leif@nuviainc.com, phcoder@gmail.com, pjones@redhat.com,
	pmenzel@molgen.mpg.de, stefanb@linux.ibm.com, xnox@ubuntu.com
Subject: Re: [PATCH v2 02/22] ieee1275: claim more memory
Date: Wed, 21 Jul 2021 16:45:32 +0200	[thread overview]
Message-ID: <20210721144532.y4lutwqg5mwr3dko@tomti.i.net-space.pl> (raw)
In-Reply-To: <YPEEGFjUJAFE4/tc@ncase>

On Fri, Jul 16, 2021 at 05:59:20AM +0200, Patrick Steinhardt wrote:
> On Thu, Jul 15, 2021 at 11:51:04PM +0200, Daniel Kiper wrote:
> > CC-in a few people who can be interested in this...
> >
> > On Wed, Jun 30, 2021 at 06:40:11PM +1000, Daniel Axtens wrote:
> > > On powerpc-ieee1275, we are running out of memory trying to verify
> > > anything. This is because:
> > >
> > >  - we have to load an entire file into memory to verify it. This is
> > >    extremely difficult to change with appended signatures.
> > >  - We only have 32MB of heap.
> > >  - Distro kernels are now often around 30MB.
> > >
> > > So we want to claim more memory from OpenFirmware for our heap.
> >
> > AFAICT it is common problem in the GRUB right now. Please take a look at
> > [1], [2]. It would be nice to find general solution for all. Of course
> > if possible. So, if somebody could take a look at memory management in
> > the GRUB and propose a solution for the problem that would be perfect.
> > Any volunteers?
> >
> > Daniel
> >
> > [1] https://lists.gnu.org/archive/html/grub-devel/2020-06/msg00009.html
> > [2] https://lists.gnu.org/archive/html/grub-devel/2021-01/msg00031.html
>
> I think that my [1] should solve the issue generically. Instead of
> bumping any of the static limits we have in place, we just drop them
> altogether in favor of dynamically requesting additional EFI regions
> whenever we realize that the currently mapped regions cannot satisfy our
> needs. Like this, we can lower the initially requested regions, but
> scale them to the specific needs if need be.
>
> I had planned to revisit this patch series much earlier, but somehow I
> didn't yet find the time. Any comments on my approach would be welcome
> though, and if we agree that this may be a viable route to go down then
> I'd be happy to further pursue it.

Patrick, thanks a lot! I will take a look at the [1] patchset next week.

Daniel A., Stefan, may I ask you to take a look at the [1] too and tell
us how it will work in your cases?

Daniel

[1] https://lists.gnu.org/archive/html/grub-devel/2020-06/msg00009.html


  reply	other threads:[~2021-07-21 14:46 UTC|newest]

Thread overview: 56+ messages / expand[flat|nested]  mbox.gz  Atom feed  top
2021-06-30  8:40 [PATCH v2 00/22] appended signature secure boot support Daniel Axtens
2021-06-30  8:40 ` [PATCH v2 01/22] ieee1275: drop HEAP_MAX_ADDR, HEAP_MIN_SIZE Daniel Axtens
2021-07-12 12:33   ` Stefan Berger
2021-07-14 16:21   ` Daniel Kiper
2021-06-30  8:40 ` [PATCH v2 02/22] ieee1275: claim more memory Daniel Axtens
2021-07-12 12:35   ` Stefan Berger
2021-07-15 21:51   ` Daniel Kiper
2021-07-16  3:59     ` Patrick Steinhardt
2021-07-21 14:45       ` Daniel Kiper [this message]
2021-07-21 15:24         ` Stefan Berger
2021-07-22 17:11         ` Stefan Berger
2021-07-28 11:17       ` Daniel Kiper
2021-06-30  8:40 ` [PATCH v2 03/22] ieee1275: request memory with ibm, client-architecture-support Daniel Axtens
2021-07-12 12:40   ` Stefan Berger
2021-06-30  8:40 ` [PATCH v2 04/22] Add suport for signing grub with an appended signature Daniel Axtens
2021-07-12 12:43   ` Stefan Berger
2021-06-30  8:40 ` [PATCH v2 05/22] docs/grub: Document signing grub under UEFI Daniel Axtens
2021-07-12 12:44   ` Stefan Berger
2021-06-30  8:40 ` [PATCH v2 06/22] docs/grub: Document signing grub with an appended signature Daniel Axtens
2021-07-12 12:46   ` Stefan Berger
2021-06-30  8:40 ` [PATCH v2 07/22] dl: provide a fake grub_dl_set_persistent for the emu target Daniel Axtens
2021-07-12 12:48   ` Stefan Berger
2021-06-30  8:40 ` [PATCH v2 08/22] pgp: factor out rsa_pad Daniel Axtens
2021-07-12 12:52   ` Stefan Berger
2021-06-30  8:40 ` [PATCH v2 09/22] crypto: move storage for grub_crypto_pk_* to crypto.c Daniel Axtens
2021-07-12 12:54   ` Stefan Berger
2021-06-30  8:40 ` [PATCH v2 10/22] posix_wrap: tweaks in preparation for libtasn1 Daniel Axtens
2021-07-12 12:56   ` Stefan Berger
2021-06-30  8:40 ` [PATCH v2 11/22] libtasn1: import libtasn1-4.16.0 Daniel Axtens
2021-07-20 21:46   ` Stefan Berger
2021-06-30  8:40 ` [PATCH v2 12/22] libtasn1: disable code not needed in grub Daniel Axtens
2021-07-20 21:47   ` Stefan Berger
2021-06-30  8:40 ` [PATCH v2 13/22] libtasn1: changes for grub compatibility Daniel Axtens
2021-07-12 13:04   ` Stefan Berger
2022-04-21  6:16     ` Daniel Axtens
2021-06-30  8:40 ` [PATCH v2 14/22] libtasn1: compile into asn1 module Daniel Axtens
2021-07-12 13:05   ` Stefan Berger
2021-06-30  8:40 ` [PATCH v2 15/22] test_asn1: test module for libtasn1 Daniel Axtens
2021-07-12 19:35   ` Stefan Berger
2021-06-30  8:40 ` [PATCH v2 16/22] grub-install: support embedding x509 certificates Daniel Axtens
2021-07-12 20:24   ` Stefan Berger
2021-06-30  8:40 ` [PATCH v2 17/22] appended signatures: import GNUTLS's ASN.1 description files Daniel Axtens
2021-07-19 21:09   ` Stefan Berger
2021-06-30  8:40 ` [PATCH v2 18/22] appended signatures: parse PKCS#7 signedData and X.509 certificates Daniel Axtens
2021-07-19 22:02   ` Stefan Berger
2022-04-21  6:36     ` Daniel Axtens
2021-06-30  8:40 ` [PATCH v2 19/22] appended signatures: support verifying appended signatures Daniel Axtens
2021-07-20  1:31   ` Stefan Berger
2022-04-21  7:10     ` Daniel Axtens
2021-06-30  8:40 ` [PATCH v2 20/22] appended signatures: verification tests Daniel Axtens
2021-07-20 12:49   ` Stefan Berger
2021-06-30  8:40 ` [PATCH v2 21/22] appended signatures: documentation Daniel Axtens
2021-07-19 22:24   ` Stefan Berger
2022-04-21  7:15     ` Daniel Axtens
2021-06-30  8:40 ` [PATCH v2 22/22] ieee1275: enter lockdown based on /ibm,secure-boot Daniel Axtens
2021-07-19 22:08   ` Stefan Berger

Reply instructions:

You may reply publicly to this message via plain-text email
using any one of the following methods:

* Save the following mbox file, import it into your mail client,
  and reply-to-all from there: mbox

  Avoid top-posting and favor interleaved quoting:
  https://en.wikipedia.org/wiki/Posting_style#Interleaved_style

* Reply using the --to, --cc, and --in-reply-to
  switches of git-send-email(1):

  git send-email \
    --in-reply-to=20210721144532.y4lutwqg5mwr3dko@tomti.i.net-space.pl \
    --to=dkiper@net-space.pl \
    --cc=alastair@d-silva.org \
    --cc=chris.coulson@canonical.com \
    --cc=dja@axtens.net \
    --cc=grub-devel@gnu.org \
    --cc=hanson.char@gmail.com \
    --cc=hchar@amazon.com \
    --cc=javierm@redhat.com \
    --cc=leif@nuviainc.com \
    --cc=nayna@linux.ibm.com \
    --cc=phcoder@gmail.com \
    --cc=pjones@redhat.com \
    --cc=pmenzel@molgen.mpg.de \
    --cc=ps@pks.im \
    --cc=rashmica.g@gmail.com \
    --cc=stefanb@linux.ibm.com \
    --cc=xnox@ubuntu.com \
    /path/to/YOUR_REPLY

  https://kernel.org/pub/software/scm/git/docs/git-send-email.html

* If your mail client supports setting the In-Reply-To header
  via mailto: links, try the mailto: link
Be sure your reply has a Subject: header at the top and a blank line before the message body. 
This is an external index of several public inboxes,
see mirroring instructions on how to clone and mirror
all data and code used by this external index.