All of lore.kernel.org
 help / color / mirror / Atom feed
From: Dave Young <dyoung-H+wXaHxf7aLQT0dZR+AlfA@public.gmane.org>
To: Vivek Goyal <vgoyal-H+wXaHxf7aLQT0dZR+AlfA@public.gmane.org>
Cc: kexec-TuqUDEhatI4ANWPb/1PvSmm0pvjS0E/A@public.gmane.org,
	Daniel J Walsh <dwalsh-H+wXaHxf7aLQT0dZR+AlfA@public.gmane.org>,
	eparis-H+wXaHxf7aLQT0dZR+AlfA@public.gmane.org,
	Harald Hoyer <harald-H+wXaHxf7aLQT0dZR+AlfA@public.gmane.org>,
	initramfs-u79uwXL29TY76Z2rM5mHXA@public.gmane.org
Subject: Re: EFI kdump without acpi_rsdp
Date: Thu, 08 Aug 2013 14:12:54 +0800	[thread overview]
Message-ID: <520336E6.1050302@redhat.com> (raw)
In-Reply-To: <51FB07E3.6000105-H+wXaHxf7aLQT0dZR+AlfA@public.gmane.org>

On 08/02/2013 09:14 AM, Dave Young wrote:
> On 08/01/2013 09:27 PM, Vivek Goyal wrote:
>> On Thu, Aug 01, 2013 at 10:12:25AM +0800, Dave Young wrote:
>>> On 08/01/2013 04:55 AM, Vivek Goyal wrote:
>>>> On Wed, Jul 31, 2013 at 04:48:00PM -0400, Vivek Goyal wrote:
>>>>> On Wed, Jul 31, 2013 at 04:42:27PM -0400, Vivek Goyal wrote:
>>>>>
>>>>> [..]
>>>>>> This system is behaving strangely. Yesterday I tried everything and it 
>>>>>> did not work and today both 3.9 and 3.10 kernel seem to work (with
>>>>>> acpi_rsdp=). I am upgrading kexec-tools now and will try again. If
>>>>>> that works, then will try without acpi_rsdp.
>>>>>>
>>>>>> Well, with 3.10 kernel boots up device showsup but dump saving fails.
>>>>>> Looks like makedumpfile bailed out.
>>>>>>
>>>>>> Hopefully upgrading kexec-tools will fix it.
>>>>>
>>>>> Well now OOM killer trigger while loading selinux policy. Red flags,
>>>>> memory utilization of various components has gone up and even 128MB
>>>>> does not seem to be sufficient.
>>>>
>>>> I upgraded from kexec-tools-2.0.3-71.fc19.x86_64 to
>>>> kexec-tools-2.0.4-5.fc19.x86_64 and memory problem started happening. Have
>>>> we done any significant change in kexec-tools which contributes to this.
>>>
>>
>> [ CC harald and initramfs list]
>>> The main contribute is Harald enabled 98selinux. Chaowang said selinux
>>> will use ~50M memory as the peak for load_policy. That is too much..
>>
>> Hi Dave,
>>
>> Have few questions. 
>>
>> - I upgraded kexec-tools package and not dracut. So how did memory usage
>>   go up.
> 
> It's strange, I don't think we have anything which use much memory.
> 
>>
>> - Were we not always loading selinux polity in initramfs. Otherwise I will
>>   see relabeling happen when I boot back to first kernel. And In my
>>   testing I did not see any relabeling happen. (I will make sure I was
>>   not testing with selinux disabled).
> 
> Should always load selinux in initramfs unless rootfs mounting fails.
> 
>>
>> - 50MB for selinux policy sounds too much. In RHEL6 this usage was around
>>   30MB and I remember in early fedora days it had dropped down to 18MB.
>>   Daniel, Eric, does selinux policy load memory consumption has to be
>>   this much. We reserve 128MB and 50MB is a huge chunk of that.
>>
>>>
>>> Ccing selinux peole Daniel and Eric. I wonder if there's a way we can
>>> use in kdump initrd for minimum memory footprint. Because we will not
>>> switch_root, so it will not influence the normal 1st kernel selinux.
>>
>> I did not understand above statement Dave. Are you saying that we
>> can save vmcore on root filesystem without loading selinux policy and
>> still avoid relabeling in first kernel when it boots back. How?
> 
> Dracut will always mount rootfs so mostly we need not relabel in 1st
> kernel because chroot load_policy in 2nd kernel will work unless rootfs
> mounting fails.
> 
> I ever tested loading minimum policy in RHEL6, it use much less memory
> than targeted policy.  Our target is simply label like file
> /sysroot/var/crash/*/vmcore. I'm wondering if there's similar method we
> can reduce memory usage in capture kernel.

Clarify a bit this, I means if there's a minimum way to use in initramfs
to enable selinux without 'chroot load_policy'.

> 
>>
>> Thanks
>> Vivek
>> --
>> To unsubscribe from this list: send the line "unsubscribe initramfs" in
>> the body of a message to majordomo-u79uwXL29TY76Z2rM5mHXA@public.gmane.org
>> More majordomo info at  http://vger.kernel.org/majordomo-info.html
>>
> 
> 


-- 
Thanks
Dave


      parent reply	other threads:[~2013-08-08  6:12 UTC|newest]

Thread overview: 3+ messages / expand[flat|nested]  mbox.gz  Atom feed  top
     [not found] <51F75AF2.9070805@redhat.com>
     [not found] ` <20130730200222.GD16769@redhat.com>
     [not found]   ` <20130730204046.GE24730@redhat.com>
     [not found]     ` <51F87E6B.6080301@redhat.com>
     [not found]       ` <20130731204227.GG1577@redhat.com>
     [not found]         ` <20130731204800.GH1577@redhat.com>
     [not found]           ` <20130731205522.GI1577@redhat.com>
     [not found]             ` <51F9C409.4020000@redhat.com>
     [not found]               ` <51F9C409.4020000-H+wXaHxf7aLQT0dZR+AlfA@public.gmane.org>
2013-08-01 13:27                 ` EFI kdump without acpi_rsdp Vivek Goyal
     [not found]                   ` <20130801132712.GB15235-H+wXaHxf7aLQT0dZR+AlfA@public.gmane.org>
2013-08-02  1:14                     ` Dave Young
     [not found]                       ` <51FB07E3.6000105-H+wXaHxf7aLQT0dZR+AlfA@public.gmane.org>
2013-08-08  6:12                         ` Dave Young [this message]

Reply instructions:

You may reply publicly to this message via plain-text email
using any one of the following methods:

* Save the following mbox file, import it into your mail client,
  and reply-to-all from there: mbox

  Avoid top-posting and favor interleaved quoting:
  https://en.wikipedia.org/wiki/Posting_style#Interleaved_style

* Reply using the --to, --cc, and --in-reply-to
  switches of git-send-email(1):

  git send-email \
    --in-reply-to=520336E6.1050302@redhat.com \
    --to=dyoung-h+wxahxf7alqt0dzr+alfa@public.gmane.org \
    --cc=dwalsh-H+wXaHxf7aLQT0dZR+AlfA@public.gmane.org \
    --cc=eparis-H+wXaHxf7aLQT0dZR+AlfA@public.gmane.org \
    --cc=harald-H+wXaHxf7aLQT0dZR+AlfA@public.gmane.org \
    --cc=initramfs-u79uwXL29TY76Z2rM5mHXA@public.gmane.org \
    --cc=kexec-TuqUDEhatI4ANWPb/1PvSmm0pvjS0E/A@public.gmane.org \
    --cc=vgoyal-H+wXaHxf7aLQT0dZR+AlfA@public.gmane.org \
    /path/to/YOUR_REPLY

  https://kernel.org/pub/software/scm/git/docs/git-send-email.html

* If your mail client supports setting the In-Reply-To header
  via mailto: links, try the mailto: link
Be sure your reply has a Subject: header at the top and a blank line before the message body.
This is an external index of several public inboxes,
see mirroring instructions on how to clone and mirror
all data and code used by this external index.