From: Pavel Machek <pavel@ucw.cz>
To: "H. Peter Anvin" <hpa@zytor.com>
Cc: Dave Hansen <dave.hansen@intel.com>,
Fam Zheng <fam.zheng@bytedance.com>,
linux-kernel@vger.kernel.org, Lukasz Luba <lukasz.luba@arm.com>,
linyongting@bytedance.com, songmuchun@bytedance.com,
satish.kumar@bytedance.com, Borislav Petkov <bp@alien8.de>,
Thomas Gleixner <tglx@linutronix.de>,
yuanzhu@bytedance.com, Ingo Molnar <mingo@redhat.com>,
Daniel Lezcano <daniel.lezcano@linaro.org>,
Zhang Rui <rui.zhang@intel.com>,
fam@euphon.net, x86@kernel.org, liangma@bytedance.com,
Dave Hansen <dave.hansen@linux.intel.com>,
"Rafael J. Wysocki" <rafael@kernel.org>,
guojinhui.liam@bytedance.com, linux-pm@vger.kernel.org,
Thom Hughes <thom.hughes@bytedance.com>
Subject: Re: [RFC 0/5] parker: PARtitioned KERnel
Date: Wed, 22 Oct 2025 14:11:19 +0200 [thread overview]
Message-ID: <aPjJ53F8kBV0/wLH@duo.ucw.cz> (raw)
In-Reply-To: <AEC34AE1-AEB5-4678-AC9D-39155E97D86C@zytor.com>
[-- Attachment #1: Type: text/plain, Size: 1882 bytes --]
On Wed 2025-09-24 12:01:52, H. Peter Anvin wrote:
> On September 24, 2025 8:22:54 AM PDT, Dave Hansen <dave.hansen@intel.com> wrote:
> >On 9/23/25 08:31, Fam Zheng wrote:
> >> In terms of fault isolation or security, all kernel instances share
> >> the same domain, as there is no supervising mechanism. A kernel bug
> >> in any partition can cause problems for the whole physical machine.
> >> This is a tradeoff for low-overhead / low-complexity, but hope in
> >> the future we can take advantage of some hardware mechanism to
> >> introduce some isolation.
> >I just don't think this is approach is viable. The buck needs to stop
> >_somewhere_. You can't just have a bunch of different kernels, with
> >nothing in charge of the system as a whole.
> >
> >Just think of bus locks. They affect the whole system. What if one
> >kernel turns off split lock detection? Or has a different rate limit
> >than the others? What if one kernel is a big fan of WBINVD? How about
> >when they use resctrl to partition an L3 cache? How about microcode updates?
> >
> >I'd just guess that there are a few hundred problems like that. Maybe more.
> >
> >I'm not saying this won't be useful for a handful of folks in a tightly
> >controlled environment. But I just don't think it has a place in
> >mainline where it needs to work for everyone.
>
> Again, this comes down to why a partitioning top level hypervisor is The Right Thing[TM].
>
> IBM mainframes are, again, the archetype here, having done it
> standard since VM/370 in 1972. This was running on machines with a
> *maximum* of 4 MB memory.
Is there a good resource on IBM mainframes, prefferably written in
language that can be understood by mostly x86 kernel hacker?
BR,
Pavel
--
I don't work for Nazis and criminals, and neither should you.
Boycott Putin, Trump, Netanyahu and Musk!
[-- Attachment #2: signature.asc --]
[-- Type: application/pgp-signature, Size: 195 bytes --]
next prev parent reply other threads:[~2025-10-22 12:11 UTC|newest]
Thread overview: 18+ messages / expand[flat|nested] mbox.gz Atom feed top
2025-09-23 15:31 [RFC 0/5] parker: PARtitioned KERnel Fam Zheng
2025-09-23 15:31 ` [RFC 1/5] x86/boot/e820: Fix memmap to parse with 1 argument Fam Zheng
2025-09-23 15:31 ` [RFC 2/5] x86/smpboot: Export wakeup_secondary_cpu_via_init Fam Zheng
2025-09-23 15:31 ` [RFC 3/5] x86/parker: Introduce parker kerfs interface Fam Zheng
2025-09-23 15:31 ` [RFC 4/5] x86/parker: Add parker initialisation code Fam Zheng
2025-09-23 15:31 ` [RFC 5/5] x86/apic: Make Parker instance use physical APIC Fam Zheng
2025-09-23 19:46 ` [RFC 0/5] parker: PARtitioned KERnel H. Peter Anvin
2025-09-24 15:22 ` Dave Hansen
2025-09-24 16:21 ` [External] " Fam Zheng
2025-09-24 18:32 ` Dave Hansen
[not found] ` <CABgc4wRgpYNARf+7MhsadfXjDJ0Vd01OoqnVdrW3m6dXMzQSaQ@mail.gmail.com>
2025-09-24 20:13 ` Fam Zheng
2025-09-24 19:01 ` H. Peter Anvin
[not found] ` <CABgc4wTjc9nxmB16LkxiOL5gYO9K8kr46OqM=asyUkX7cT50Sg@mail.gmail.com>
2025-09-24 20:14 ` Fam Zheng
2025-09-24 22:13 ` H. Peter Anvin
2025-09-25 7:26 ` [External] " Fam Zheng
2025-09-25 15:32 ` H. Peter Anvin
2025-10-22 12:11 ` Pavel Machek [this message]
2025-10-23 1:26 ` H. Peter Anvin
Reply instructions:
You may reply publicly to this message via plain-text email
using any one of the following methods:
* Save the following mbox file, import it into your mail client,
and reply-to-all from there: mbox
Avoid top-posting and favor interleaved quoting:
https://en.wikipedia.org/wiki/Posting_style#Interleaved_style
* Reply using the --to, --cc, and --in-reply-to
switches of git-send-email(1):
git send-email \
--in-reply-to=aPjJ53F8kBV0/wLH@duo.ucw.cz \
--to=pavel@ucw.cz \
--cc=bp@alien8.de \
--cc=daniel.lezcano@linaro.org \
--cc=dave.hansen@intel.com \
--cc=dave.hansen@linux.intel.com \
--cc=fam.zheng@bytedance.com \
--cc=fam@euphon.net \
--cc=guojinhui.liam@bytedance.com \
--cc=hpa@zytor.com \
--cc=liangma@bytedance.com \
--cc=linux-kernel@vger.kernel.org \
--cc=linux-pm@vger.kernel.org \
--cc=linyongting@bytedance.com \
--cc=lukasz.luba@arm.com \
--cc=mingo@redhat.com \
--cc=rafael@kernel.org \
--cc=rui.zhang@intel.com \
--cc=satish.kumar@bytedance.com \
--cc=songmuchun@bytedance.com \
--cc=tglx@linutronix.de \
--cc=thom.hughes@bytedance.com \
--cc=x86@kernel.org \
--cc=yuanzhu@bytedance.com \
/path/to/YOUR_REPLY
https://kernel.org/pub/software/scm/git/docs/git-send-email.html
* If your mail client supports setting the In-Reply-To header
via mailto: links, try the mailto: link
Be sure your reply has a Subject: header at the top and a blank line
before the message body.
This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox