From: Timo Kokkonen <timo.kokkonen@offcode.fi> To: Guenter Roeck <linux@roeck-us.net>, Boris Brezillon <boris.brezillon@free-electrons.com> Cc: Nicolas Ferre <nicolas.ferre@atmel.com>, linux-arm-kernel@lists.infradead.org, linux-watchdog@vger.kernel.org, alexandre.belloni@free-electrons.com Subject: Re: [PATCH] at91sam9_wdt: Allow watchdog to reset device at early boot Date: Fri, 28 Nov 2014 08:40:53 +0200 [thread overview] Message-ID: <547818F5.2010307@offcode.fi> (raw) In-Reply-To: <54777C18.3010609@roeck-us.net> Hi Guenter, Boris, On 27.11.2014 21:31, Guenter Roeck wrote: > On 11/27/2014 11:06 AM, Boris Brezillon wrote: >> Hi Guenter, >> >> On Thu, 27 Nov 2014 09:23:30 -0800 >> Guenter Roeck <linux@roeck-us.net> wrote: >> >>> On 11/27/2014 01:22 AM, Nicolas Ferre wrote: >>>> On 27/11/2014 07:53, Timo Kokkonen wrote: >>>>> Hi, >>>>> >>>>> On 21.11.2014 14:23, Timo Kokkonen wrote: >>>>>> By default the driver will start a kernel timer which keeps on >>>>>> kicking >>>>>> the watchdog HW until user space has opened the watchdog >>>>>> device. Usually this is desirable as the watchdog HW is running by >>>>>> default and the user space may not have any watchdog daemon >>>>>> running at >>>>>> all. >>>>>> >>>>>> However, on production systems it may be mandatory that also early >>>>>> crashes and lockups will lead to a watchdog reset, even if they >>>>>> happen >>>>>> before the user space has opened the watchdog device. >>>>>> >>>>>> To resolve the issue, add a new device tree property >>>>>> "enable-early-reset" which will prevent the kernel timer from pinging >>>>>> the watchdog HW on behalf of user space. The default is still to use >>>>>> kernel timer, but more strict behavior can be enabled via the device >>>>>> tree property. >>>>>> >>>>>> Signed-off-by: Timo Kokkonen <timo.kokkonen@offcode.fi> >>>>> >>>>> I forgot to put the PATCHv2 on the subject line.. But anyway, any >>>>> thoughts about it? Is there something that should be done to get it >>>>> forward? >>>> >>>> Sorry for not having come back to you quickly. >>>> >>>> The only thing that tend to prevent me from taking this patch is the >>>> fact that this DT property is mostly a software, Linux-specific one... >>>> Which is somehow not covered by the DT. >>>> This might explain as well why this property is not present on other >>>> SoCs. >>>> >>>> Can we have other people's advices? >>>> >>> >>> We have been thinking about a more generic (infrastructure based) >>> solution >>> for the problem at hand, but that was a bit more complex and would >>> specify >>> the actual timeout during boot, not just a boolean like suggested here. >> >> Can't we keep the same timeout (the one specified in the timeout-sec >> property) ? >> > That doesn't take into account systems where - for whatever reason - > the initial timeout needs to be longer. I do not think it is a good idea > to unnecessarily limit functionality. We may make the additional timeout > optional - in that case timeout-sec could be used as default. How about a property called early-keepalive-sec that, when set above zero, specifies the timeout how long the device is kept alive by the driver. And if set to zero, it just uses what ever defaults there are and lets the HW run until user space wakes up or device resets. >>> >>> As for DT not supposed to be used for configuration, that is really a >>> tricky problem which is hard to solve. I seem to recall, though, that >>> it may be now acceptable under certain conditions. A module parameter >>> might be easier. >> >> I'm not a big fan of passing these kind information through module >> params, cause it's kind of hard to assign parameters when you have >> multiple device instances (it might not be applicable to watchdog >> devices though). >> Moreover, adding more module parameters will just expand the cmdline >> and make it less and less readable. >> > Agreed but ... > >> Anyway, this is not my call to make :-). > > it isn't us who restrict the DT scope (though of course timeout-sec > _is_ configuration, but that was before things got more restrictive). The way I see it this new property we are talking about is no different in principle to the ones we already have there. We are just filling in the gap between boot loader and user space to enable consistent behaviour through out the entire boot up sequence. There are dozens of devices that already hack around this one way or another. DT bindings is simply the most convenient and flexible way to do it. -Timo
WARNING: multiple messages have this Message-ID (diff)
From: timo.kokkonen@offcode.fi (Timo Kokkonen) To: linux-arm-kernel@lists.infradead.org Subject: [PATCH] at91sam9_wdt: Allow watchdog to reset device at early boot Date: Fri, 28 Nov 2014 08:40:53 +0200 [thread overview] Message-ID: <547818F5.2010307@offcode.fi> (raw) In-Reply-To: <54777C18.3010609@roeck-us.net> Hi Guenter, Boris, On 27.11.2014 21:31, Guenter Roeck wrote: > On 11/27/2014 11:06 AM, Boris Brezillon wrote: >> Hi Guenter, >> >> On Thu, 27 Nov 2014 09:23:30 -0800 >> Guenter Roeck <linux@roeck-us.net> wrote: >> >>> On 11/27/2014 01:22 AM, Nicolas Ferre wrote: >>>> On 27/11/2014 07:53, Timo Kokkonen wrote: >>>>> Hi, >>>>> >>>>> On 21.11.2014 14:23, Timo Kokkonen wrote: >>>>>> By default the driver will start a kernel timer which keeps on >>>>>> kicking >>>>>> the watchdog HW until user space has opened the watchdog >>>>>> device. Usually this is desirable as the watchdog HW is running by >>>>>> default and the user space may not have any watchdog daemon >>>>>> running at >>>>>> all. >>>>>> >>>>>> However, on production systems it may be mandatory that also early >>>>>> crashes and lockups will lead to a watchdog reset, even if they >>>>>> happen >>>>>> before the user space has opened the watchdog device. >>>>>> >>>>>> To resolve the issue, add a new device tree property >>>>>> "enable-early-reset" which will prevent the kernel timer from pinging >>>>>> the watchdog HW on behalf of user space. The default is still to use >>>>>> kernel timer, but more strict behavior can be enabled via the device >>>>>> tree property. >>>>>> >>>>>> Signed-off-by: Timo Kokkonen <timo.kokkonen@offcode.fi> >>>>> >>>>> I forgot to put the PATCHv2 on the subject line.. But anyway, any >>>>> thoughts about it? Is there something that should be done to get it >>>>> forward? >>>> >>>> Sorry for not having come back to you quickly. >>>> >>>> The only thing that tend to prevent me from taking this patch is the >>>> fact that this DT property is mostly a software, Linux-specific one... >>>> Which is somehow not covered by the DT. >>>> This might explain as well why this property is not present on other >>>> SoCs. >>>> >>>> Can we have other people's advices? >>>> >>> >>> We have been thinking about a more generic (infrastructure based) >>> solution >>> for the problem at hand, but that was a bit more complex and would >>> specify >>> the actual timeout during boot, not just a boolean like suggested here. >> >> Can't we keep the same timeout (the one specified in the timeout-sec >> property) ? >> > That doesn't take into account systems where - for whatever reason - > the initial timeout needs to be longer. I do not think it is a good idea > to unnecessarily limit functionality. We may make the additional timeout > optional - in that case timeout-sec could be used as default. How about a property called early-keepalive-sec that, when set above zero, specifies the timeout how long the device is kept alive by the driver. And if set to zero, it just uses what ever defaults there are and lets the HW run until user space wakes up or device resets. >>> >>> As for DT not supposed to be used for configuration, that is really a >>> tricky problem which is hard to solve. I seem to recall, though, that >>> it may be now acceptable under certain conditions. A module parameter >>> might be easier. >> >> I'm not a big fan of passing these kind information through module >> params, cause it's kind of hard to assign parameters when you have >> multiple device instances (it might not be applicable to watchdog >> devices though). >> Moreover, adding more module parameters will just expand the cmdline >> and make it less and less readable. >> > Agreed but ... > >> Anyway, this is not my call to make :-). > > it isn't us who restrict the DT scope (though of course timeout-sec > _is_ configuration, but that was before things got more restrictive). The way I see it this new property we are talking about is no different in principle to the ones we already have there. We are just filling in the gap between boot loader and user space to enable consistent behaviour through out the entire boot up sequence. There are dozens of devices that already hack around this one way or another. DT bindings is simply the most convenient and flexible way to do it. -Timo
next prev parent reply other threads:[~2014-11-28 6:41 UTC|newest] Thread overview: 110+ messages / expand[flat|nested] mbox.gz Atom feed top 2014-10-23 10:40 [PATCH] at91sam9_wdt: Allow watchdog to reset device at early boot Timo Kokkonen 2014-10-23 10:40 ` Timo Kokkonen 2014-11-12 8:20 ` Timo Kokkonen 2014-11-12 8:20 ` Timo Kokkonen 2014-11-13 9:12 ` Nicolas Ferre 2014-11-13 9:12 ` Nicolas Ferre 2014-11-14 8:40 ` Timo Kokkonen 2014-11-14 8:40 ` Timo Kokkonen 2014-11-21 12:23 ` Timo Kokkonen 2014-11-21 12:23 ` Timo Kokkonen 2014-11-27 6:53 ` Timo Kokkonen 2014-11-27 6:53 ` Timo Kokkonen 2014-11-27 9:22 ` Nicolas Ferre 2014-11-27 9:22 ` Nicolas Ferre 2014-11-27 17:23 ` Guenter Roeck 2014-11-27 17:23 ` Guenter Roeck 2014-11-27 19:06 ` Boris Brezillon 2014-11-27 19:06 ` Boris Brezillon 2014-11-27 19:31 ` Guenter Roeck 2014-11-27 19:31 ` Guenter Roeck 2014-11-28 0:30 ` Alexandre Belloni 2014-11-28 0:30 ` Alexandre Belloni 2014-11-28 6:40 ` Timo Kokkonen [this message] 2014-11-28 6:40 ` Timo Kokkonen 2014-11-27 19:00 ` Boris Brezillon 2014-11-27 19:00 ` Boris Brezillon 2014-11-28 6:42 ` Timo Kokkonen 2014-11-28 6:42 ` Timo Kokkonen 2014-12-05 12:57 ` Timo Kokkonen 2014-12-05 12:57 ` Timo Kokkonen 2014-12-05 14:12 ` Boris Brezillon 2014-12-05 14:12 ` Boris Brezillon 2014-12-05 18:42 ` Timo Kokkonen 2014-12-05 18:42 ` Timo Kokkonen 2014-12-05 19:02 ` Guenter Roeck 2014-12-05 19:02 ` Guenter Roeck 2014-12-05 20:32 ` Timo Kokkonen 2014-12-05 20:32 ` Timo Kokkonen 2014-12-05 21:39 ` Guenter Roeck 2014-12-05 21:39 ` Guenter Roeck 2014-12-06 10:11 ` Timo Kokkonen 2014-12-06 10:11 ` Timo Kokkonen 2015-01-13 14:53 ` Guenter Roeck 2015-01-13 14:53 ` Guenter Roeck 2015-01-14 6:09 ` Timo Kokkonen 2015-01-14 6:09 ` Timo Kokkonen 2015-02-18 12:57 ` [PATCHv3 0/2] watchdog: Introduce "early-timeout-sec" property Timo Kokkonen 2015-02-18 12:57 ` Timo Kokkonen 2015-02-18 12:57 ` [PATCH 1/2] devicetree: Document generic watchdog properties Timo Kokkonen 2015-02-18 12:57 ` Timo Kokkonen 2015-02-18 12:57 ` [PATCH 2/2] at91sam9_wdt: Allow watchdog to reset device at early boot Timo Kokkonen 2015-02-18 12:57 ` Timo Kokkonen 2015-02-18 13:21 ` Boris Brezillon 2015-02-18 13:21 ` Boris Brezillon 2015-02-18 13:59 ` Guenter Roeck 2015-02-18 13:59 ` Guenter Roeck 2015-02-18 14:17 ` Boris Brezillon 2015-02-18 14:17 ` Boris Brezillon 2015-02-18 14:50 ` Guenter Roeck 2015-02-18 14:50 ` Guenter Roeck 2015-02-18 16:00 ` Alexandre Belloni 2015-02-18 16:00 ` Alexandre Belloni 2015-02-18 17:50 ` Guenter Roeck 2015-02-18 17:50 ` Guenter Roeck 2015-02-18 20:21 ` Boris Brezillon 2015-02-18 20:21 ` Boris Brezillon 2015-02-19 6:02 ` Timo Kokkonen 2015-02-19 6:02 ` Timo Kokkonen 2015-02-18 21:11 ` Rob Herring 2015-02-18 21:11 ` Rob Herring 2015-02-19 6:14 ` Timo Kokkonen 2015-02-19 6:14 ` Timo Kokkonen 2015-02-20 14:06 ` Rob Herring 2015-02-20 14:06 ` Rob Herring 2015-02-20 16:28 ` Guenter Roeck 2015-02-20 16:28 ` Guenter Roeck 2015-02-20 19:43 ` Boris Brezillon 2015-02-20 19:43 ` Boris Brezillon 2015-02-20 20:04 ` Guenter Roeck 2015-02-20 20:04 ` Guenter Roeck 2015-02-20 7:48 ` Jean-Christophe PLAGNIOL-VILLARD 2015-02-20 7:48 ` Jean-Christophe PLAGNIOL-VILLARD 2015-02-20 7:51 ` Boris Brezillon 2015-02-20 7:51 ` Boris Brezillon 2015-02-20 16:33 ` Jean-Christophe PLAGNIOL-VILLARD 2015-02-20 16:33 ` Jean-Christophe PLAGNIOL-VILLARD 2015-02-20 17:16 ` Boris Brezillon 2015-02-20 17:16 ` Boris Brezillon 2015-02-20 18:06 ` Guenter Roeck 2015-02-20 18:06 ` Guenter Roeck 2015-02-23 7:29 ` Timo Kokkonen 2015-02-23 7:29 ` Timo Kokkonen 2015-02-23 8:51 ` Boris Brezillon 2015-02-23 8:51 ` Boris Brezillon 2015-02-23 9:11 ` Timo Kokkonen 2015-02-23 9:11 ` Timo Kokkonen 2015-02-23 16:19 ` Guenter Roeck 2015-02-23 16:19 ` Guenter Roeck 2015-02-23 17:10 ` Rob Herring 2015-02-23 17:10 ` Rob Herring 2015-02-23 17:43 ` Guenter Roeck 2015-02-23 17:43 ` Guenter Roeck 2015-02-20 8:00 ` Timo Kokkonen 2015-02-20 8:00 ` Timo Kokkonen 2015-02-20 16:09 ` Guenter Roeck 2015-02-20 16:09 ` Guenter Roeck 2015-02-18 13:16 ` [PATCHv3 0/2] watchdog: Introduce "early-timeout-sec" property Boris Brezillon 2015-02-18 13:16 ` Boris Brezillon 2015-02-18 13:51 ` Timo Kokkonen 2015-02-18 13:51 ` Timo Kokkonen
Reply instructions: You may reply publicly to this message via plain-text email using any one of the following methods: * Save the following mbox file, import it into your mail client, and reply-to-all from there: mbox Avoid top-posting and favor interleaved quoting: https://en.wikipedia.org/wiki/Posting_style#Interleaved_style * Reply using the --to, --cc, and --in-reply-to switches of git-send-email(1): git send-email \ --in-reply-to=547818F5.2010307@offcode.fi \ --to=timo.kokkonen@offcode.fi \ --cc=alexandre.belloni@free-electrons.com \ --cc=boris.brezillon@free-electrons.com \ --cc=linux-arm-kernel@lists.infradead.org \ --cc=linux-watchdog@vger.kernel.org \ --cc=linux@roeck-us.net \ --cc=nicolas.ferre@atmel.com \ /path/to/YOUR_REPLY https://kernel.org/pub/software/scm/git/docs/git-send-email.html * If your mail client supports setting the In-Reply-To header via mailto: links, try the mailto: linkBe sure your reply has a Subject: header at the top and a blank line before the message body.
This is an external index of several public inboxes, see mirroring instructions on how to clone and mirror all data and code used by this external index.