summaryrefslogtreecommitdiff
path: root/init/init.c
diff options
context:
space:
mode:
authorJustus Winter <4winter@informatik.uni-hamburg.de>2013-09-17 13:44:44 +0200
committerJustus Winter <4winter@informatik.uni-hamburg.de>2014-11-21 05:48:19 +0100
commit0224d569030e6838c63cf946ae7321be923afc23 (patch)
tree3a494a651c1861a9f955626c02c1d9e8771c24c3 /init/init.c
parentbf7ce656b71123926f0fcb32e4b9577b395da76e (diff)
startup: rename /hurd/init to /hurd/startup
This patch series splits /hurd/init into two programs. As a first step, this patch renames /hurd/init to /hurd/startup. It is called startup because it speaks the startup protocol. * startup: Rename init to startup. Adjust accordingly. * Makefile (prog-subdirs): Likewise. * doc/hurd.texi (Server Bootstrap): Likewise. * hurd/paths.h (_HURD_STARTUP): Likewise. * libdiskfs/boot-start.c (diskfs_boot_init_program): Likewise. * libdiskfs/opts-std-startup.c (startup_options): Likewise.
Diffstat (limited to 'init/init.c')
-rw-r--r--init/init.c1593
1 files changed, 0 insertions, 1593 deletions
diff --git a/init/init.c b/init/init.c
deleted file mode 100644
index 6bc6701a..00000000
--- a/init/init.c
+++ /dev/null
@@ -1,1593 +0,0 @@
-/* Start and maintain hurd core servers and system run state
-
- Copyright (C) 1993, 1994, 1995, 1996, 1997, 1998, 1999, 2000, 2001, 2002,
- 2005, 2008, 2013 Free Software Foundation, Inc.
- This file is part of the GNU Hurd.
-
- The GNU Hurd is free software; you can redistribute it and/or modify
- it under the terms of the GNU General Public License as published by
- the Free Software Foundation; either version 2, or (at your option)
- any later version.
-
- The GNU Hurd is distributed in the hope that it will be useful,
- but WITHOUT ANY WARRANTY; without even the implied warranty of
- MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
- GNU General Public License for more details.
-
- You should have received a copy of the GNU General Public License
- along with the GNU Hurd; see the file COPYING. If not, write to
- the Free Software Foundation, 675 Mass Ave, Cambridge, MA 02139, USA. */
-
-/* Written by Michael I. Bushnell and Roland McGrath. */
-
-/* This is probably more include files than I've ever seen before for
- one file. */
-#include <hurd.h>
-#include <hurd/fs.h>
-#include <hurd/fsys.h>
-#include <device/device.h>
-#include <stdio.h>
-#include <assert.h>
-#include <hurd/paths.h>
-#include <sys/reboot.h>
-#include <sys/file.h>
-#include <unistd.h>
-#include <string.h>
-#include <mach/notify.h>
-#include <stdlib.h>
-#include <hurd/msg.h>
-#include <hurd/term.h>
-#include <hurd/fshelp.h>
-#include <paths.h>
-#include <sys/mman.h>
-#include <hurd/msg_server.h>
-#include <wire.h>
-#include <sys/wait.h>
-#include <error.h>
-#include <hurd/msg_reply.h>
-#include <argz.h>
-#include <maptime.h>
-#include <version.h>
-#include <argp.h>
-#include <pids.h>
-
-#include "startup_notify_U.h"
-#include "startup_reply_U.h"
-#include "startup_S.h"
-#include "notify_S.h"
-#include "mung_msg_S.h"
-
-/* host_reboot flags for when we crash. */
-static int crash_flags = RB_AUTOBOOT;
-
-#define BOOT(flags) ((flags & RB_HALT) ? "halt" : "reboot")
-
-
-const char *argp_program_version = STANDARD_HURD_VERSION (init);
-
-static struct argp_option
-options[] =
-{
- {"single-user", 's', 0, 0, "Startup system in single-user mode"},
- {"query", 'q', 0, 0, "Ask for the names of servers to start"},
- {"init-name", 'n', 0, 0 },
- {"crash-debug", 'H', 0, 0, "On system crash, go to kernel debugger"},
- {"debug", 'd', 0, 0 },
- {"fake-boot", 'f', 0, 0, "This hurd hasn't been booted on the raw machine"},
- {0, 'x', 0, OPTION_HIDDEN},
- {0}
-};
-
-static char doc[] = "Start and maintain hurd core servers and system run state";
-
-static int booted; /* Set when the core servers are up. */
-
-/* This structure keeps track of each notified task. */
-struct ntfy_task
- {
- mach_port_t notify_port;
- struct ntfy_task *next;
- char *name;
- };
-
-/* This structure keeps track of each registered essential task. */
-struct ess_task
- {
- struct ess_task *next;
- task_t task_port;
- char *name;
- };
-
-/* These are linked lists of all of the registered items. */
-static struct ess_task *ess_tasks;
-static struct ntfy_task *ntfy_tasks;
-
-
-/* Our receive right */
-static mach_port_t startup;
-
-/* Ports to the kernel */
-static mach_port_t host_priv, device_master;
-
-/* Args to bootstrap, expressed as flags */
-static int bootstrap_args = 0;
-
-/* Stored information for returning proc and auth startup messages. */
-static mach_port_t procreply, authreply;
-static mach_msg_type_name_t procreplytype, authreplytype;
-
-/* Our ports to auth and proc. */
-static mach_port_t authserver;
-static mach_port_t procserver;
-
-/* Our bootstrap port, on which we call fsys_getpriv and fsys_init. */
-static mach_port_t bootport;
-
-/* Set iff we are a `fake' bootstrap. */
-static int fakeboot;
-
-/* The tasks of auth and proc and the bootstrap filesystem. */
-static task_t authtask, proctask, fstask;
-
-static mach_port_t default_ports[INIT_PORT_MAX];
-static mach_port_t default_dtable[3];
-static int default_ints[INIT_INT_MAX];
-
-static char **global_argv;
-static char *startup_envz;
-static size_t startup_envz_len;
-
-void launch_system (void);
-void process_signal (int signo);
-
-/** Utility functions **/
-
-/* Read a string from stdin into BUF. */
-static int
-getstring (char *buf, size_t bufsize)
-{
- if (fgets (buf, bufsize, stdin) != NULL && buf[0] != '\0')
- {
- size_t len = strlen (buf);
- if (buf[len - 1] == '\n' || buf[len - 1] == '\r')
- buf[len - 1] = '\0';
- return 1;
- }
- return 0;
-}
-
-
-/** System shutdown **/
-
-/* Reboot the microkernel. */
-void
-reboot_mach (int flags)
-{
- if (fakeboot)
- {
- printf ("%s: Would %s Mach with flags %#x\n",
- program_invocation_short_name, BOOT (flags), flags);
- fflush (stdout);
- exit (1);
- }
- else
- {
- error_t err;
- printf ("%s: %sing Mach (flags %#x)...\n",
- program_invocation_short_name, BOOT (flags), flags);
- fflush (stdout);
- sleep (5);
- while ((err = host_reboot (host_priv, flags)))
- error (0, err, "reboot");
- for (;;);
- }
-}
-
-/* Reboot the microkernel, specifying that this is a crash. */
-void
-crash_mach (void)
-{
- reboot_mach (crash_flags);
-}
-
-/* Notify all tasks that have requested shutdown notifications */
-void
-notify_shutdown (const char *msg)
-{
- struct ntfy_task *n;
-
- for (n = ntfy_tasks; n != NULL; n = n->next)
- {
- error_t err;
- printf ("%s: notifying %s of %s...",
- program_invocation_short_name, n->name, msg);
- fflush (stdout);
- err = startup_dosync (n->notify_port, 60000); /* 1 minute to reply */
- if (err == MACH_SEND_INVALID_DEST)
- puts ("(no longer present)");
- else if (err)
- puts (strerror (err));
- else
- puts ("done");
- fflush (stdout);
- }
-}
-
-/* Reboot the Hurd. */
-void
-reboot_system (int flags)
-{
- notify_shutdown ("shutdown");
-
- if (fakeboot)
- {
- pid_t *pp;
- size_t npids = 0;
- error_t err;
- int ind;
-
- err = proc_getallpids (procserver, &pp, &npids);
- if (err == MACH_SEND_INVALID_DEST)
- {
- procbad:
- /* The procserver must have died. Give up. */
- error (0, 0, "Can't simulate crash; proc has died");
- reboot_mach (flags);
- }
- for (ind = 0; ind < npids; ind++)
- {
- task_t task;
-
- err = proc_pid2task (procserver, pp[ind], &task);
- if (err == MACH_SEND_INVALID_DEST)
- goto procbad;
- else if (err)
- {
- error (0, err, "Getting task for pid %d", pp[ind]);
- continue;
- }
-
- /* Postpone self so we can finish; postpone proc
- so that we can finish. */
- if (task != mach_task_self () && task != proctask)
- {
- struct procinfo *pi = 0;
- size_t pisize = 0;
- char *noise;
- size_t noise_len = 0;
- int flags;
- err = proc_getprocinfo (procserver, pp[ind], &flags,
- (int **)&pi, &pisize,
- &noise, &noise_len);
- if (err == MACH_SEND_INVALID_DEST)
- goto procbad;
- if (err)
- {
- error (0, err, "Getting procinfo for pid %d", pp[ind]);
- continue;
- }
- if (!(pi->state & PI_NOPARENT))
- {
- printf ("%s: Killing pid %d\n",
- program_invocation_short_name, pp[ind]);
- fflush (stdout);
- task_terminate (task);
- }
- if (noise_len > 0)
- munmap (noise, noise_len);
- }
- }
- printf ("%s: Killing proc server\n", program_invocation_short_name);
- fflush (stdout);
- task_terminate (proctask);
- printf ("%s: Exiting", program_invocation_short_name);
- fflush (stdout);
- }
- reboot_mach (flags);
-}
-
-/* Reboot the Hurd, specifying that this is a crash. */
-void
-crash_system (void)
-{
- reboot_system (crash_flags);
-}
-
-
-
-/* Request a dead-name notification sent to our port. */
-static void
-request_dead_name (mach_port_t name)
-{
- mach_port_t prev;
- mach_port_request_notification (mach_task_self (), name,
- MACH_NOTIFY_DEAD_NAME, 1, startup,
- MACH_MSG_TYPE_MAKE_SEND_ONCE, &prev);
- if (prev != MACH_PORT_NULL)
- mach_port_deallocate (mach_task_self (), prev);
-}
-
-/* Record an essential task in the list. */
-static error_t
-record_essential_task (const char *name, task_t task)
-{
- struct ess_task *et;
- /* Record this task as essential. */
- et = malloc (sizeof (struct ess_task));
- if (et == NULL)
- return ENOMEM;
- et->task_port = task;
- et->name = strdup (name);
- if (et->name == NULL)
- {
- free (et);
- return ENOMEM;
- }
- et->next = ess_tasks;
- ess_tasks = et;
-
- /* Dead-name notification on the task port will tell us when it dies. */
- request_dead_name (task);
-
-#if 0
- /* Taking over the exception port will give us a better chance
- if the task tries to get wedged on a fault. */
- task_set_special_port (task, TASK_EXCEPTION_PORT, startup);
-#endif
-
- return 0;
-}
-
-
-/** Starting programs **/
-
-/* Run SERVER, giving it INIT_PORT_MAX initial ports from PORTS.
- Set TASK to be the task port of the new image. */
-void
-run (const char *server, mach_port_t *ports, task_t *task)
-{
- char buf[BUFSIZ];
- const char *prog = server;
-
- if (bootstrap_args & RB_INITNAME)
- {
- printf ("Server file name (default %s): ", server);
- if (getstring (buf, sizeof (buf)))
- prog = buf;
- }
-
- while (1)
- {
- file_t file;
- error_t err;
-
- file = file_name_lookup (prog, O_EXEC, 0);
- if (file == MACH_PORT_NULL)
- error (0, errno, "%s", prog);
- else
- {
- task_create (mach_task_self (),
-#ifdef KERN_INVALID_LEDGER
- NULL, 0, /* OSF Mach */
-#endif
- 0, task);
- if (bootstrap_args & RB_KDB)
- {
- printf ("Pausing for %s\n", prog);
- getchar ();
- }
- err = file_exec (file, *task, 0,
- (char *)prog, strlen (prog) + 1, /* Args. */
- startup_envz, startup_envz_len,
- default_dtable, MACH_MSG_TYPE_COPY_SEND, 3,
- ports, MACH_MSG_TYPE_COPY_SEND, INIT_PORT_MAX,
- default_ints, INIT_INT_MAX,
- NULL, 0, NULL, 0);
- if (!err)
- break;
-
- error (0, err, "%s", prog);
- }
-
- printf ("File name for server %s (or nothing to reboot): ", server);
- if (getstring (buf, sizeof (buf)))
- prog = buf;
- else
- crash_system ();
- }
-
-#if 0
- printf ("started %s\n", prog);
- fflush (stdout);
-#endif
-
- /* Dead-name notification on the task port will tell us when it dies,
- so we can crash if we don't make it to a fully bootstrapped Hurd. */
- request_dead_name (*task);
-}
-
-/* Run FILENAME as root with ARGS as its argv (length ARGLEN). Return
- the task that we started. If CTTY is set, then make that the
- controlling terminal of the new process and put it in its own login
- collection. If SETSID is set, put it in a new session. Return
- 0 if the task was not created successfully. */
-pid_t
-run_for_real (char *filename, char *args, int arglen, mach_port_t ctty,
- int setsid)
-{
- file_t file;
- error_t err;
- task_t task;
- char *progname;
- int pid;
-
-#if 0
- char buf[512];
- do
- {
- printf ("File name [%s]: ", filename);
- if (getstring (buf, sizeof (buf)) && *buf)
- filename = buf;
- file = file_name_lookup (filename, O_EXEC, 0);
- if (file == MACH_PORT_NULL)
- error (0, errno, "%s", filename);
- }
- while (file == MACH_PORT_NULL);
-#else
- file = file_name_lookup (filename, O_EXEC, 0);
- if (file == MACH_PORT_NULL)
- {
- error (0, errno, "%s", filename);
- return 0;
- }
-#endif
-
- task_create (mach_task_self (),
-#ifdef KERN_INVALID_LEDGER
- NULL, 0, /* OSF Mach */
-#endif
- 0, &task);
- proc_child (procserver, task);
- proc_task2pid (procserver, task, &pid);
- proc_task2proc (procserver, task, &default_ports[INIT_PORT_PROC]);
- proc_mark_exec (default_ports[INIT_PORT_PROC]);
- if (setsid)
- proc_setsid (default_ports[INIT_PORT_PROC]);
- if (ctty != MACH_PORT_NULL)
- {
- term_getctty (ctty, &default_ports[INIT_PORT_CTTYID]);
- io_mod_owner (ctty, -pid);
- proc_make_login_coll (default_ports[INIT_PORT_PROC]);
- }
- if (bootstrap_args & RB_KDB)
- {
- printf ("Pausing for %s\n", filename);
- getchar ();
- }
- progname = strrchr (filename, '/');
- if (progname)
- ++progname;
- else
- progname = filename;
- err = file_exec (file, task, 0,
- args, arglen,
- startup_envz, startup_envz_len,
- default_dtable, MACH_MSG_TYPE_COPY_SEND, 3,
- default_ports, MACH_MSG_TYPE_COPY_SEND,
- INIT_PORT_MAX,
- default_ints, INIT_INT_MAX,
- NULL, 0, NULL, 0);
- mach_port_deallocate (mach_task_self (), default_ports[INIT_PORT_PROC]);
- mach_port_deallocate (mach_task_self (), task);
- if (ctty != MACH_PORT_NULL)
- {
- mach_port_deallocate (mach_task_self (),
- default_ports[INIT_PORT_CTTYID]);
- default_ports[INIT_PORT_CTTYID] = MACH_PORT_NULL;
- }
- mach_port_deallocate (mach_task_self (), file);
- if (err)
- {
- error (0, err, "Cannot execute %s", filename);
- return 0;
- }
- return pid;
-}
-
-
-/** Main program and setup **/
-
-static int
-demuxer (mach_msg_header_t *inp,
- mach_msg_header_t *outp)
-{
- extern int notify_server (), startup_server (), msg_server ();
-
- return (notify_server (inp, outp) ||
- msg_server (inp, outp) ||
- startup_server (inp, outp));
-}
-
-static int
-parse_opt (int key, char *arg, struct argp_state *state)
-{
- switch (key)
- {
- case 'q': bootstrap_args |= RB_ASKNAME; break;
- case 's': bootstrap_args |= RB_SINGLE; break;
- case 'd': bootstrap_args |= RB_KDB; break;
- case 'n': bootstrap_args |= RB_INITNAME; break;
- case 'f': fakeboot = 1; break;
- case 'H': crash_flags = RB_DEBUGGER; break;
- case 'x': /* NOP */ break;
- default: return ARGP_ERR_UNKNOWN;
- }
- return 0;
-}
-
-int
-main (int argc, char **argv, char **envp)
-{
- volatile int err;
- int i;
- int flags;
- mach_port_t consdev;
- struct argp argp = { options, parse_opt, 0, doc };
-
- /* Parse the arguments. We don't want the vector reordered, we
- should pass on to our child the exact arguments we got and just
- ignore any arguments that aren't flags for us. ARGP_NO_ERRS
- suppresses --help and --version, so we only use that option if we
- are booting. */
- flags = ARGP_IN_ORDER;
- if (getpid () == 0)
- flags |= ARGP_NO_ERRS;
- argp_parse (&argp, argc, argv, flags, 0, 0);
-
- if (getpid () > 0)
- error (2, 0, "can only be run by bootstrap filesystem");
-
- global_argv = argv;
-
- /* Fetch a port to the bootstrap filesystem, the host priv and
- master device ports, and the console. */
- if (task_get_bootstrap_port (mach_task_self (), &bootport)
- || fsys_getpriv (bootport, &host_priv, &device_master, &fstask)
- || device_open (device_master, D_WRITE, "console", &consdev))
- crash_mach ();
-
- wire_task_self ();
-
- /* Clear our bootstrap port so our children don't inherit it. */
- task_set_bootstrap_port (mach_task_self (), MACH_PORT_NULL);
-
- stderr = stdout = mach_open_devstream (consdev, "w");
- stdin = mach_open_devstream (consdev, "r");
- if (stdout == NULL || stdin == NULL)
- crash_mach ();
- setbuf (stdout, NULL);
-
- err = argz_create (envp, &startup_envz, &startup_envz_len);
- assert_perror (err);
-
- /* At this point we can use assert to check for errors. */
- err = mach_port_allocate (mach_task_self (),
- MACH_PORT_RIGHT_RECEIVE, &startup);
- assert_perror (err);
- err = mach_port_insert_right (mach_task_self (), startup, startup,
- MACH_MSG_TYPE_MAKE_SEND);
- assert_perror (err);
-
- /* Crash if the boot filesystem task dies. */
- request_dead_name (fstask);
-
- /* Set up the set of ports we will pass to the programs we exec. */
- for (i = 0; i < INIT_PORT_MAX; i++)
- switch (i)
- {
- case INIT_PORT_CRDIR:
- default_ports[i] = getcrdir ();
- break;
- case INIT_PORT_CWDIR:
- default_ports[i] = getcwdir ();
- break;
- default:
- default_ports[i] = MACH_PORT_NULL;
- break;
- }
-
- default_dtable[0] = getdport (0);
- default_dtable[1] = getdport (1);
- default_dtable[2] = getdport (2);
-
- /* All programs we start should ignore job control stop signals.
- That way Posix.1 B.2.2.2 is satisfied where it says that programs
- not run under job control shells are protected. */
- default_ints[INIT_SIGIGN] = (sigmask (SIGTSTP)
- | sigmask (SIGTTIN)
- | sigmask (SIGTTOU));
-
- default_ports[INIT_PORT_BOOTSTRAP] = startup;
- run ("/hurd/proc", default_ports, &proctask);
- printf (" proc");
- fflush (stdout);
- run ("/hurd/auth", default_ports, &authtask);
- printf (" auth");
- fflush (stdout);
- default_ports[INIT_PORT_BOOTSTRAP] = MACH_PORT_NULL;
-
- /* Wait for messages. When both auth and proc have started, we
- run launch_system which does the rest of the boot. */
- while (1)
- {
- err = mach_msg_server (demuxer, 0, startup);
- assert_perror (err);
- }
-}
-
-void
-launch_core_servers (void)
-{
- mach_port_t old;
- mach_port_t authproc, fsproc, procproc;
- error_t err;
-
- /* Reply to the proc and auth servers. */
- startup_procinit_reply (procreply, procreplytype, 0,
- mach_task_self (), authserver,
- host_priv, MACH_MSG_TYPE_COPY_SEND,
- device_master, MACH_MSG_TYPE_COPY_SEND);
- if (!fakeboot)
- {
- mach_port_deallocate (mach_task_self (), device_master);
- device_master = 0;
- }
-
- /* Mark us as important. */
- proc_mark_important (procserver);
- proc_mark_exec (procserver);
-
- /* Declare that the filesystem and auth are our children. */
- proc_child (procserver, fstask);
- proc_child (procserver, authtask);
-
- proc_task2proc (procserver, authtask, &authproc);
- proc_mark_important (authproc);
- proc_mark_exec (authproc);
- startup_authinit_reply (authreply, authreplytype, 0, authproc,
- MACH_MSG_TYPE_COPY_SEND);
- mach_port_deallocate (mach_task_self (), authproc);
-
- /* Give the library our auth and proc server ports. */
- _hurd_port_set (&_hurd_ports[INIT_PORT_AUTH], authserver);
- _hurd_port_set (&_hurd_ports[INIT_PORT_PROC], procserver);
-
- /* Do NOT run _hurd_proc_init! That will start signals, which we do not
- want. We listen to our own message port. Tell the proc server where
- our args and environment are. */
- proc_set_arg_locations (procserver,
- (vm_address_t) global_argv, (vm_address_t) environ);
-
- default_ports[INIT_PORT_AUTH] = authserver;
-
- /* Declare that the proc server is our child. */
- proc_child (procserver, proctask);
- err = proc_task2proc (procserver, proctask, &procproc);
- if (!err)
- {
- proc_mark_important (procproc);
- proc_mark_exec (procproc);
- mach_port_deallocate (mach_task_self (), procproc);
- }
-
- proc_register_version (procserver, host_priv, "init", "", HURD_VERSION);
-
- /* Get the bootstrap filesystem's proc server port.
- We must do this before calling proc_setmsgport below. */
- proc_task2proc (procserver, fstask, &fsproc);
- proc_mark_important (fsproc);
- proc_mark_exec (fsproc);
-
-#if 0
- printf ("Init has completed.\n");
- fflush (stdout);
-#endif
- printf (".\n");
- fflush (stdout);
-
- /* Tell the proc server our msgport. Be sure to do this after we are all
- done making requests of proc. Once we have done this RPC, proc
- assumes it can send us requests, so we cannot block on proc again
- before accepting more RPC requests! However, we must do this before
- calling fsys_init, because fsys_init blocks on exec_init, and
- exec_init will block waiting on our message port. */
- proc_setmsgport (procserver, startup, &old);
- if (old != MACH_PORT_NULL)
- mach_port_deallocate (mach_task_self (), old);
-
- /* Give the bootstrap FS its proc and auth ports. */
- err = fsys_init (bootport, fsproc, MACH_MSG_TYPE_COPY_SEND, authserver);
- mach_port_deallocate (mach_task_self (), fsproc);
- if (err)
- error (0, err, "fsys_init"); /* Not necessarily fatal. */
-}
-
-/* Set up the initial value of the standard exec data. */
-void
-init_stdarrays ()
-{
- auth_t nullauth;
- mach_port_t pt;
- mach_port_t ref;
- mach_port_t *std_port_array;
- int *std_int_array;
- int i;
-
- std_port_array = alloca (sizeof (mach_port_t) * INIT_PORT_MAX);
- std_int_array = alloca (sizeof (int) * INIT_INT_MAX);
-
- bzero (std_port_array, sizeof (mach_port_t) * INIT_PORT_MAX);
- bzero (std_int_array, sizeof (int) * INIT_INT_MAX);
-
- __USEPORT (AUTH, auth_makeauth (port, 0, MACH_MSG_TYPE_COPY_SEND, 0,
- 0, 0, 0, 0, 0, 0, 0, 0, &nullauth));
-
- /* MAKE_SEND is safe in these transactions because we destroy REF
- ourselves each time. */
- pt = getcwdir ();
- ref = mach_reply_port ();
- io_reauthenticate (pt, ref, MACH_MSG_TYPE_MAKE_SEND);
- auth_user_authenticate (nullauth, ref, MACH_MSG_TYPE_MAKE_SEND,
- &std_port_array[INIT_PORT_CWDIR]);
- mach_port_destroy (mach_task_self (), ref);
- mach_port_deallocate (mach_task_self (), pt);
-
- pt = getcrdir ();
- ref = mach_reply_port ();
- io_reauthenticate (pt, ref, MACH_MSG_TYPE_MAKE_SEND);
- auth_user_authenticate (nullauth, ref, MACH_MSG_TYPE_MAKE_SEND,
- &std_port_array[INIT_PORT_CRDIR]);
- mach_port_destroy (mach_task_self (), ref);
- mach_port_deallocate (mach_task_self (), pt);
-
- std_port_array[INIT_PORT_AUTH] = nullauth;
-
- std_int_array[INIT_UMASK] = CMASK;
-
- __USEPORT (PROC, proc_setexecdata (port, std_port_array,
- MACH_MSG_TYPE_COPY_SEND, INIT_PORT_MAX,
- std_int_array, INIT_INT_MAX));
- for (i = 0; i < INIT_PORT_MAX; i++)
- mach_port_deallocate (mach_task_self (), std_port_array[i]);
-}
-
-/* Frobnicate the kernel task and the proc server's idea of it (PID 2),
- so the kernel command line can be read as for a normal Hurd process. */
-
-void
-frob_kernel_process (void)
-{
- error_t err;
- int argc, i;
- char *argz, *entry;
- size_t argzlen;
- size_t windowsz;
- vm_address_t mine, his;
- task_t task;
- process_t proc, kbs;
-
- err = proc_pid2task (procserver, HURD_PID_KERNEL, &task);
- if (err)
- {
- error (0, err, "cannot get kernel task port");
- return;
- }
- err = proc_task2proc (procserver, task, &proc);
- if (err)
- {
- error (0, err, "cannot get kernel task's proc server port");
- mach_port_deallocate (mach_task_self (), task);
- return;
- }
-
- /* Mark the kernel task as an essential task so that we or the proc server
- never want to task_terminate it. */
- proc_mark_important (proc);
-
- err = record_essential_task ("kernel", task);
- assert_perror (err);
-
- err = task_get_bootstrap_port (task, &kbs);
- assert_perror (err);
- if (kbs == MACH_PORT_NULL)
- {
- /* The kernel task has no bootstrap port set, so we are presumably
- the first Hurd to boot. Install the kernel task's proc port from
- this Hurd's proc server as the task bootstrap port. Additional
- Hurds will see this. */
-
- err = task_set_bootstrap_port (task, proc);
- if (err)
- error (0, err, "cannot set kernel task's bootstrap port");
-
- if (fakeboot)
- error (0, 0, "warning: --fake-boot specified but I see no other Hurd");
- }
- else
- {
- /* The kernel task has a bootstrap port set. Perhaps it is its proc
- server port from another Hurd. If so, propagate the kernel
- argument locations from that Hurd rather than diddling with the
- kernel task ourselves. */
-
- vm_address_t kargv, kenvp;
- err = proc_get_arg_locations (kbs, &kargv, &kenvp);
- mach_port_deallocate (mach_task_self (), kbs);
- if (err)
- error (0, err, "kernel task bootstrap port (ignoring)");
- else
- {
- err = proc_set_arg_locations (proc, kargv, kenvp);
- if (err)
- error (0, err, "cannot propagate original kernel command line");
- else
- {
- mach_port_deallocate (mach_task_self (), proc);
- mach_port_deallocate (mach_task_self (), task);
- if (! fakeboot)
- error (0, 0, "warning: "
- "I see another Hurd, but --fake-boot was not given");
- return;
- }
- }
- }
-
- /* Our arguments make up the multiboot command line used to boot the
- kernel. We'll write into the kernel task a page containing a
- canonical argv array and argz of those words. */
-
- err = argz_create (&global_argv[1], &argz, &argzlen);
- assert_perror (err);
- argc = argz_count (argz, argzlen);
-
- windowsz = round_page (((argc + 1) * sizeof (char *)) + argzlen);
-
- mine = (vm_address_t) mmap (0, windowsz, PROT_READ|PROT_WRITE,
- MAP_ANON, 0, 0);
- assert (mine != -1);
- err = vm_allocate (task, &his, windowsz, 1);
- if (err)
- {
- error (0, err, "cannot allocate %Zu bytes in kernel task", windowsz);
- free (argz);
- mach_port_deallocate (mach_task_self (), proc);
- mach_port_deallocate (mach_task_self (), task);
- munmap ((caddr_t) mine, windowsz);
- return;
- }
-
- for (i = 0, entry = argz; entry != NULL;
- ++i, entry = argz_next (argz, argzlen, entry))
- ((char **) mine)[i] = ((char *) &((char **) his)[argc + 1]
- + (entry - argz));
- ((char **) mine)[argc] = NULL;
- memcpy (&((char **) mine)[argc + 1], argz, argzlen);
-
- free (argz);
-
- /* We have the data all set up in our copy, now just write it over. */
- err = vm_write (task, his, mine, windowsz);
- mach_port_deallocate (mach_task_self (), task);
- munmap ((caddr_t) mine, windowsz);
- if (err)
- {
- error (0, err, "cannot write command line into kernel task");
- return;
- }
-
- /* The argument vector is set up in the kernel task at address HIS.
- Finally, we can inform the proc server where to find it. */
- err = proc_set_arg_locations (proc, his, his + (argc * sizeof (char *)));
- mach_port_deallocate (mach_task_self (), proc);
- if (err)
- error (0, err, "proc_set_arg_locations for kernel task");
-}
-
-/** Running userland. **/
-
-/* In the "split-init" setup, we just run a single program (usually
- /libexec/runsystem) that is not expected to ever exit (or stop).
- If it does exit (or can't be started), we go to an emergency single-user
- shell as a fallback. */
-
-
-static pid_t child_pid; /* PID of the child we run */
-static task_t child_task; /* and its (original) task port */
-
-error_t send_signal (mach_port_t msgport, int signal, mach_port_t refport,
- mach_msg_timeout_t);
-
-static void launch_something (const char *why);
-
-
-/* SIGNO has arrived and has been validated. Do whatever work it
- implies. */
-void
-process_signal (int signo)
-{
- if (signo == SIGCHLD)
- {
- /* A child died. Find its status. */
- int status;
- pid_t pid;
-
- while (1)
- {
- pid = waitpid (WAIT_ANY, &status, WNOHANG | WUNTRACED);
- if (pid <= 0)
- break; /* No more children. */
-
- /* Since we are init, orphaned processes get reparented to us and
- alas, all our adopted children eventually die. Woe is us. We
- just need to reap the zombies to relieve the proc server of
- its burden, and then we can forget about the little varmints. */
-
- if (pid == child_pid)
- {
- /* The big magilla bit the dust. */
-
- char *desc = 0;
-
- mach_port_deallocate (mach_task_self (), child_task);
- child_task = MACH_PORT_NULL;
- child_pid = -1;
-
- if (WIFSIGNALED (status))
- asprintf (&desc, "terminated abnormally (%s)",
- strsignal (WTERMSIG (status)));
- else if (WIFSTOPPED (status))
- asprintf (&desc, "stopped abnormally (%s)",
- strsignal (WTERMSIG (status)));
- else if (WEXITSTATUS (status) == 0)
- desc = strdup ("finished");
- else
- asprintf (&desc, "exited with status %d",
- WEXITSTATUS (status));
-
- {
- char buf[40];
- snprintf (buf, sizeof buf, "%d", status);
- setenv ("STATUS", buf, 1);
- }
-
- launch_something (desc);
- free (desc);
- }
- }
- }
- else
- {
- /* Pass the signal on to the child. */
- task_t task;
- error_t err;
-
- err = proc_pid2task (procserver, child_pid, &task);
- if (err)
- {
- error (0, err, "proc_pid2task on %d", child_pid);
- task = child_task;
- }
- else
- {
- mach_port_deallocate (mach_task_self (), child_task);
- child_task = task;
- }
-
- if (signo == SIGKILL)
- {
- err = task_terminate (task);
- if (err != MACH_SEND_INVALID_DEST)
- error (0, err, "task_terminate");
- }
- else
- {
- mach_port_t msgport;
- err = proc_getmsgport (procserver, child_pid, &msgport);
- if (err)
- error (0, err, "proc_getmsgport");
- else
- {
- err = send_signal (msgport, signo, task,
- 500); /* Block only half a second. */
- mach_port_deallocate (mach_task_self (), msgport);
- if (err)
- {
- error (0, err, "cannot send %s to child %d",
- strsignal (signo), child_pid);
- err = task_terminate (task);
- if (err != MACH_SEND_INVALID_DEST)
- error (0, err, "task_terminate");
- }
- }
- }
- }
-}
-
-/* Start the child program PROG. It is run via /libexec/console-run
- with the given additional arguments. */
-static int
-start_child (const char *prog, char **progargs)
-{
- file_t file;
- error_t err;
- char *args;
- size_t arglen;
-
- if (progargs == 0)
- {
- const char *argv[] = { "/libexec/console-run", prog, 0 };
- err = argz_create ((char **) argv, &args, &arglen);
- }
- else
- {
- int argc = 0;
- while (progargs[argc] != 0)
- ++argc;
- {
- const char *argv[2 + argc + 1];
- argv[0] = "/libexec/console-run";
- argv[1] = prog;
- argv[2 + argc] = 0;
- while (argc-- > 0)
- argv[2 + argc] = progargs[argc];
- err = argz_create ((char **) argv, &args, &arglen);
- }
- }
- assert_perror (err);
-
- file = file_name_lookup (args, O_EXEC, 0);
- if (file == MACH_PORT_NULL)
- {
- error (0, errno, "%s", args);
- free (args);
- return -1;
- }
-
- task_create (mach_task_self (),
-#ifdef KERN_INVALID_LEDGER
- NULL, 0, /* OSF Mach */
-#endif
- 0, &child_task);
- proc_set_init_task (procserver, child_task);
- proc_task2pid (procserver, child_task, &child_pid);
- proc_task2proc (procserver, child_task, &default_ports[INIT_PORT_PROC]);
-
- if (bootstrap_args & RB_KDB)
- {
- printf ("Pausing for %s\n", args);
- getchar ();
- }
-
- err = file_exec (file, child_task, 0,
- args, arglen,
- startup_envz, startup_envz_len,
- NULL, MACH_MSG_TYPE_COPY_SEND, 0, /* No fds. */
- default_ports, MACH_MSG_TYPE_COPY_SEND, INIT_PORT_MAX,
- default_ints, INIT_INT_MAX,
- NULL, 0, NULL, 0);
- proc_mark_important (default_ports[INIT_PORT_PROC]);
- mach_port_deallocate (mach_task_self (), default_ports[INIT_PORT_PROC]);
- mach_port_deallocate (mach_task_self (), file);
- if (err)
- {
- error (0, err, "Cannot execute %s", args);
- free (args);
- return -1;
- }
- free (args);
- return 0;
-}
-
-static void
-launch_something (const char *why)
-{
- file_t something;
- static unsigned int try;
- static const char *const tries[] =
- {
- "/libexec/runsystem",
- _PATH_BSHELL,
- "/bin/shd", /* XXX */
- };
-
- if (why)
- error (0, 0, "%s %s", tries[try - 1], why);
-
- something = file_name_lookup (tries[try], O_EXEC, 0);
- if (something != MACH_PORT_NULL)
- {
- mach_port_deallocate (mach_task_self (), something);
- if (try == 0 && start_child (tries[try++], &global_argv[1]) == 0)
- return;
- }
- else
- try++;
-
- while (try < sizeof tries / sizeof tries[0])
- {
- something = file_name_lookup (tries[try], O_EXEC, 0);
- if (something != MACH_PORT_NULL)
- {
- mach_port_deallocate (mach_task_self (), something);
- if (start_child (tries[try++], NULL) == 0)
- return;
- }
- }
-
- crash_system ();
-}
-
-void
-launch_system (void)
-{
- launch_something (0);
-}
-
-/** RPC servers **/
-
-kern_return_t
-S_startup_procinit (startup_t server,
- mach_port_t reply,
- mach_msg_type_name_t reply_porttype,
- process_t proc,
- mach_port_t *startuptask,
- auth_t *auth,
- mach_port_t *priv,
- mach_msg_type_name_t *hostprivtype,
- mach_port_t *dev,
- mach_msg_type_name_t *devtype)
-{
- if (procserver)
- /* Only one proc server. */
- return EPERM;
-
- procserver = proc;
-
- procreply = reply;
- procreplytype = reply_porttype;
-
- /* Save the reply port until we get startup_authinit. */
- if (authserver)
- launch_core_servers ();
-
- return MIG_NO_REPLY;
-}
-
-/* Called by the auth server when it starts up. */
-
-kern_return_t
-S_startup_authinit (startup_t server,
- mach_port_t reply,
- mach_msg_type_name_t reply_porttype,
- mach_port_t auth,
- mach_port_t *proc,
- mach_msg_type_name_t *proctype)
-{
- if (authserver)
- /* Only one auth server. */
- return EPERM;
-
- authserver = auth;
-
- /* Save the reply port until we get startup_procinit. */
- authreply = reply;
- authreplytype = reply_porttype;
-
- if (procserver)
- launch_core_servers ();
-
- return MIG_NO_REPLY;
-}
-
-
-kern_return_t
-S_startup_essential_task (mach_port_t server,
- mach_port_t reply,
- mach_msg_type_name_t replytype,
- task_t task,
- mach_port_t excpt,
- char *name,
- mach_port_t credential)
-{
- static int authinit, procinit, execinit;
- int fail;
-
- /* Always deallocate the extra reference this message carries. */
- if (MACH_PORT_VALID (credential))
- mach_port_deallocate (mach_task_self (), credential);
-
- if (credential != host_priv)
- return EPERM;
-
- fail = record_essential_task (name, task);
- if (fail)
- return fail;
-
- if (!booted)
- {
- if (!strcmp (name, "auth"))
- authinit = 1;
- else if (!strcmp (name, "exec"))
- {
- execinit = 1;
- mach_port_t execproc;
- proc_task2proc (procserver, task, &execproc);
- proc_mark_important (execproc);
- }
- else if (!strcmp (name, "proc"))
- procinit = 1;
-
- if (authinit && execinit && procinit)
- {
- /* Reply to this RPC, after that everything
- is ready for real startup to begin. */
- startup_essential_task_reply (reply, replytype, 0);
-
- init_stdarrays ();
- frob_kernel_process ();
-
- launch_system ();
-
- booted = 1;
-
- return MIG_NO_REPLY;
- }
- }
-
- return 0;
-}
-
-kern_return_t
-S_startup_request_notification (mach_port_t server,
- mach_port_t notify,
- char *name)
-{
- struct ntfy_task *nt;
-
- request_dead_name (notify);
-
- /* Note that the ntfy_tasks list is kept in inverse order of the
- calls; this is important. We need later notification requests
- to get executed first. */
- nt = malloc (sizeof (struct ntfy_task));
- nt->notify_port = notify;
- nt->next = ntfy_tasks;
- ntfy_tasks = nt;
- nt->name = malloc (strlen (name) + 1);
- strcpy (nt->name, name);
- return 0;
-}
-
-kern_return_t
-do_mach_notify_dead_name (mach_port_t notify,
- mach_port_t name)
-{
- struct ntfy_task *nt, *pnt;
- struct ess_task *et;
-
- assert (notify == startup);
-
- /* Deallocate the extra reference the notification carries. */
- mach_port_deallocate (mach_task_self (), name);
-
- for (et = ess_tasks; et != NULL; et = et->next)
- if (et->task_port == name)
- /* An essential task has died. */
- {
- error (0, 0, "Crashing system; essential task %s died", et->name);
- crash_system ();
- }
-
- for (nt = ntfy_tasks, pnt = NULL; nt != NULL; pnt = nt, nt = nt->next)
- if (nt->notify_port == name)
- {
- /* Someone who wanted to be notified is gone. */
- mach_port_deallocate (mach_task_self (), name);
- if (pnt != NULL)
- pnt->next = nt->next;
- else
- ntfy_tasks = nt->next;
- free (nt);
-
- return 0;
- }
-
- if (! booted)
- {
- /* The system has not come up yet, so essential tasks are not yet
- registered. But the essential servers involved in the bootstrap
- handshake might crash before completing it, so we have requested
- dead-name notification on those tasks. */
- static const struct { task_t *taskp; const char *name; } boots[] =
- {
- {&fstask, "bootstrap filesystem"},
- {&authtask, "auth"},
- {&proctask, "proc"},
- };
- size_t i;
- for (i = 0; i < sizeof boots / sizeof boots[0]; ++i)
- if (name == *boots[i].taskp)
- {
- error (0, 0, "Crashing system; %s server died during bootstrap",
- boots[i].name);
- crash_mach ();
- }
- error (0, 0, "BUG! Unexpected dead-name notification (name %#zx)",
- name);
- crash_mach ();
- }
-
- return 0;
-}
-
-kern_return_t
-S_startup_reboot (mach_port_t server,
- mach_port_t refpt,
- int code)
-{
- if (refpt != host_priv)
- return EPERM;
-
- reboot_system (code);
- for (;;);
-}
-
-/* Stubs for unused notification RPCs. */
-
-kern_return_t
-do_mach_notify_port_destroyed (mach_port_t notify,
- mach_port_t rights)
-{
- return EOPNOTSUPP;
-}
-
-kern_return_t
-do_mach_notify_send_once (mach_port_t notify)
-{
- return EOPNOTSUPP;
-}
-
-kern_return_t
-do_mach_notify_no_senders (mach_port_t port, mach_port_mscount_t mscount)
-{
- return EOPNOTSUPP;
-}
-
-kern_return_t
-do_mach_notify_port_deleted (mach_port_t notify,
- mach_port_t name)
-{
- return EOPNOTSUPP;
-}
-
-kern_return_t
-do_mach_notify_msg_accepted (mach_port_t notify,
- mach_port_t name)
-{
- return EOPNOTSUPP;
-}
-
-/* msg server */
-
-kern_return_t
-S_msg_sig_post_untraced (mach_port_t msgport,
- mach_port_t reply, mach_msg_type_name_t reply_type,
- int signo, natural_t sigcode, mach_port_t refport)
-{
- if (refport != mach_task_self ())
- return EPERM;
- mach_port_deallocate (mach_task_self (), refport);
-
- /* Reply immediately */
- msg_sig_post_untraced_reply (reply, reply_type, 0);
-
- process_signal (signo);
- return MIG_NO_REPLY;
-}
-
-kern_return_t
-S_msg_sig_post (mach_port_t msgport,
- mach_port_t reply, mach_msg_type_name_t reply_type,
- int signo, natural_t sigcode, mach_port_t refport)
-{
- if (refport != mach_task_self ())
- return EPERM;
- mach_port_deallocate (mach_task_self (), refport);
-
- /* Reply immediately */
- msg_sig_post_reply (reply, reply_type, 0);
-
- process_signal (signo);
- return MIG_NO_REPLY;
-}
-
-
-/* For the rest of the msg functions, just call the C library's
- internal server stubs usually run in the signal thread. */
-
-kern_return_t
-S_msg_proc_newids (mach_port_t process,
- mach_port_t task,
- pid_t ppid,
- pid_t pgrp,
- int orphaned)
-{ return _S_msg_proc_newids (process, task, ppid, pgrp, orphaned); }
-
-
-kern_return_t
-S_msg_add_auth (mach_port_t process,
- auth_t auth)
-{ return _S_msg_add_auth (process, auth); }
-
-
-kern_return_t
-S_msg_del_auth (mach_port_t process,
- mach_port_t task,
- intarray_t uids,
- mach_msg_type_number_t uidsCnt,
- intarray_t gids,
- mach_msg_type_number_t gidsCnt)
-{ return _S_msg_del_auth (process, task, uids, uidsCnt, gids, gidsCnt); }
-
-
-kern_return_t
-S_msg_get_init_port (mach_port_t process,
- mach_port_t refport,
- int which,
- mach_port_t *port,
- mach_msg_type_name_t *portPoly)
-{ return _S_msg_get_init_port (process, refport, which, port, portPoly); }
-
-
-kern_return_t
-S_msg_set_init_port (mach_port_t process,
- mach_port_t refport,
- int which,
- mach_port_t port)
-{ return _S_msg_set_init_port (process, refport, which, port); }
-
-
-kern_return_t
-S_msg_get_init_ports (mach_port_t process,
- mach_port_t refport,
- portarray_t *ports,
- mach_msg_type_name_t *portsPoly,
- mach_msg_type_number_t *portsCnt)
-{ return _S_msg_get_init_ports (process, refport, ports, portsPoly, portsCnt); }
-
-
-kern_return_t
-S_msg_set_init_ports (mach_port_t process,
- mach_port_t refport,
- portarray_t ports,
- mach_msg_type_number_t portsCnt)
-{ return _S_msg_set_init_ports (process, refport, ports, portsCnt); }
-
-
-kern_return_t
-S_msg_get_init_int (mach_port_t process,
- mach_port_t refport,
- int which,
- int *value)
-{ return _S_msg_get_init_int (process, refport, which, value); }
-
-
-kern_return_t
-S_msg_set_init_int (mach_port_t process,
- mach_port_t refport,
- int which,
- int value)
-{ return _S_msg_set_init_int (process, refport, which, value); }
-
-
-kern_return_t
-S_msg_get_init_ints (mach_port_t process,
- mach_port_t refport,
- intarray_t *values,
- mach_msg_type_number_t *valuesCnt)
-{ return _S_msg_get_init_ints (process, refport, values, valuesCnt); }
-
-
-kern_return_t
-S_msg_set_init_ints (mach_port_t process,
- mach_port_t refport,
- intarray_t values,
- mach_msg_type_number_t valuesCnt)
-{ return _S_msg_set_init_ints (process, refport, values, valuesCnt); }
-
-
-kern_return_t
-S_msg_get_dtable (mach_port_t process,
- mach_port_t refport,
- portarray_t *dtable,
- mach_msg_type_name_t *dtablePoly,
- mach_msg_type_number_t *dtableCnt)
-{ return _S_msg_get_dtable (process, refport, dtable, dtablePoly, dtableCnt); }
-
-
-kern_return_t
-S_msg_set_dtable (mach_port_t process,
- mach_port_t refport,
- portarray_t dtable,
- mach_msg_type_number_t dtableCnt)
-{ return _S_msg_set_dtable (process, refport, dtable, dtableCnt); }
-
-
-kern_return_t
-S_msg_get_fd (mach_port_t process,
- mach_port_t refport,
- int fd,
- mach_port_t *port,
- mach_msg_type_name_t *portPoly)
-{ return _S_msg_get_fd (process, refport, fd, port, portPoly); }
-
-
-kern_return_t
-S_msg_set_fd (mach_port_t process,
- mach_port_t refport,
- int fd,
- mach_port_t port)
-{ return _S_msg_set_fd (process, refport, fd, port); }
-
-
-kern_return_t
-S_msg_get_environment (mach_port_t process,
- data_t *value,
- mach_msg_type_number_t *valueCnt)
-{ return _S_msg_get_environment (process, value, valueCnt); }
-
-
-kern_return_t
-S_msg_set_environment (mach_port_t process,
- mach_port_t refport,
- data_t value,
- mach_msg_type_number_t valueCnt)
-{ return _S_msg_set_environment (process, refport, value, valueCnt); }
-
-
-kern_return_t
-S_msg_get_env_variable (mach_port_t process,
- string_t variable,
- data_t *value,
- mach_msg_type_number_t *valueCnt)
-{ return _S_msg_get_env_variable (process, variable, value, valueCnt); }
-
-
-kern_return_t
-S_msg_set_env_variable (mach_port_t process,
- mach_port_t refport,
- string_t variable,
- string_t value,
- boolean_t replace)
-{ return _S_msg_set_env_variable (process, refport, variable, value, replace); }
-
-error_t
-S_msg_describe_ports (mach_port_t process,
- mach_port_t refport,
- mach_port_array_t names,
- mach_msg_type_number_t namesCnt,
- data_t *descriptions,
- mach_msg_type_number_t *descriptionsCnt)
-{
- return _S_msg_describe_ports (process, refport, names, namesCnt,
- descriptions, descriptionsCnt);
-}
-
-error_t
-S_msg_report_wait (mach_port_t process, thread_t thread,
- string_t desc, mach_msg_id_t *rpc)
-{
- *desc = 0;
- *rpc = 0;
- return 0;
-}