From mboxrd@z Thu Jan 1 00:00:00 1970 Return-path: Received: from e39.co.us.ibm.com ([32.97.110.160]) by merlin.infradead.org with esmtps (Exim 4.76 #1 (Red Hat Linux)) id 1TfX8E-0001XT-Hj for kexec@lists.infradead.org; Mon, 03 Dec 2012 14:36:27 +0000 Received: from /spool/local by e39.co.us.ibm.com with IBM ESMTP SMTP Gateway: Authorized Use Only! Violators will be prosecuted for from ; Mon, 3 Dec 2012 07:36:24 -0700 Received: from d03relay05.boulder.ibm.com (d03relay05.boulder.ibm.com [9.17.195.107]) by d03dlp03.boulder.ibm.com (Postfix) with ESMTP id 13D1919D8041 for ; Mon, 3 Dec 2012 07:36:20 -0700 (MST) Received: from d03av04.boulder.ibm.com (d03av04.boulder.ibm.com [9.17.195.170]) by d03relay05.boulder.ibm.com (8.13.8/8.13.8/NCO v10.0) with ESMTP id qB3Ea8Nh200966 for ; Mon, 3 Dec 2012 07:36:09 -0700 Received: from d03av04.boulder.ibm.com (loopback [127.0.0.1]) by d03av04.boulder.ibm.com (8.14.4/8.13.1/NCO v10.0 AVout) with ESMTP id qB3Ea4DD019860 for ; Mon, 3 Dec 2012 07:36:05 -0700 Message-ID: <50BCB8CA.3030909@linux.vnet.ibm.com> Date: Mon, 03 Dec 2012 20:05:54 +0530 From: Aravinda Prasad MIME-Version: 1.0 Subject: Re: [PATCH v2 0/7] makedumpfile security key filtering with eppic References: <348117236.32179739.1352989665917.JavaMail.root@redhat.com> <20121115155557.GF2529@redhat.com> <50A60CF2.6010309@linux.vnet.ibm.com> <20121116143649.GA4515@redhat.com> <20121120184755.01bc3c780dc226fe32f06e66@mxc.nes.nec.co.jp> <50AC809E.9060907@linux.vnet.ibm.com> <20121121135721.GB13114@redhat.com> <50AE5D89.2090101@linux.vnet.ibm.com> <20121126140448.GA28057@redhat.com> <50BC4073.7060402@linux.vnet.ibm.com> <20121203132059.GC24836@redhat.com> In-Reply-To: <20121203132059.GC24836@redhat.com> List-Id: List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: 7bit Sender: kexec-bounces@lists.infradead.org Errors-To: kexec-bounces+dwmw2=infradead.org@lists.infradead.org To: Vivek Goyal Cc: ananth@in.ibm.com, mahesh@linux.vnet.ibm.com, kexec@lists.infradead.org, LChouinard@s2sys.com, tachibana@mxm.nes.nec.co.jp, Atsushi Kumagai , anderson@redhat.com, buendgen@de.ibm.com On 2012-12-03 18:50, Vivek Goyal wrote: > On Mon, Dec 03, 2012 at 11:32:27AM +0530, Aravinda Prasad wrote: >> >> >> On 2012-11-26 19:34, Vivek Goyal wrote: >> >>> On Thu, Nov 22, 2012 at 10:44:49PM +0530, Aravinda Prasad wrote: >>> >>> [..] >>>> Customers who want to filter their dump would certainly prefer a single >>>> tool and a single shot to throw away pages, scrub data and then >>>> compress, split or send the resulting dump to some target using ssh. >>>> This important functionality is lost if scrubbing is not part of >>>> makedumpfile and a separate tool is developed which just does scrubbing. >>> >>> Customers do filtering from initramfs context. It is not practical to >>> save TB of memory and filter it later. And we just concluded that is >>> it not practical to do scrubbing from initramfs due to need of vmlinux. >>> >>> So doing filtering and doing scrubbing will not happen at the same >>> time practically. So bloating size of makedumpfile does not make >>> sense to me. >>> >> >> >> Another approach is to dynamically load libeppic library - similar way >> how crash does it. No major changes will be done to makedumpfile code, >> except the addition of --eppic flag. Upon specifying --eppic flag >> makedumpfile will dlopen libeppic.so, which will have functionality to >> scrub the specified data. This will prevent makedumpfile bloat and will >> not affect the size of initramfs as --eppic is only specified during >> post processing. The distribution should build and ship libeppic.so and >> the procedure for building .so will be similar to what we have in crash. > > It will still show up in dynamic library dependencing using ldd. We will > have to put some hack to exclude the leppic despite the fact that > makedumpfile is dependent on it. > > In F18, now we use dracut to build kdump initramfs. On command line we > specify any extra binaries to be included and makedumpfile is one of > those. Dracut will determine all the dependencies and automatically pull > these in. So even if we don't use --eppic flag, dracult will pull in > eppic shared library anyway. I think ldd or dracut will not be able to make out that we are dependent on libeppic.so as we will be using the dlopen("libeppic.so, ...) call to dynamically load. No extra flags will be added to Makefile to specify -leppic while building makedumpfile. Hence, from my understanding, while building kdump initramfs, dracut cannot determine that we are dependent on eppic > > Thanks > Vivek > -- Regards, Aravinda _______________________________________________ kexec mailing list kexec@lists.infradead.org http://lists.infradead.org/mailman/listinfo/kexec