replacing umlaute and fixing address in headers Haldeneggsteig -> Universitaetsstrasse

Signed-off-by: Reto Achermann <reto.achermann@inf.ethz.ch>

libbarrelfish: endpoints: refactor to make EP management invocations unnecessary.

This commit implements endpoint_identify using cap_direct_identify and
endpoint_set_iftype using cap_mint.

Signed-off-by: Simon Gerber <simon.gerber@inf.ethz.ch>

Early cnode allocation: only provide 64 16kB RAM caps per domain for early cnode allocator

This allows us to decrease CORE_DATA_PAGES to 1100 (from 2200), because
we don't need to allocate as many 16kB regions for the monitor on each
core.

Signed-off-by: Simon Gerber <simon.gerber@inf.ethz.ch>

libbarrelfish: early cn allocator: move state to ram_alloc_state

Each dispatcher is provided with a L2 CNode filled with 16kB RAM
capabilities for the purpose of allocating more L2 CNodes before the
connection with the memory server is established.

The first implementation of this early_cn allocator simply used a static
local variable to keep track of which 16kB RAM caps have been handed out
yet. Naturally, this does not work correctly in combination with domain
spanning.

To fix this allocator in the presence of spanned domains, this commit
moves the "next free" indicator into the ram allocator state (struct
ram_alloc_state).

Signed-off-by: Simon Gerber <simon.gerber@inf.ethz.ch>

libbf: use cap_direct_identify for frame_identify and co and replace calls to debug_cap_identify where appropriate

Signed-off-by: Simon Gerber <simon.gerber@inf.ethz.ch>

T384: x86_64: change shadow page tables to have dedicated cnodes for mapping caps

Signed-off-by: Simon Gerber <simon.gerber@inf.ethz.ch>

libbarrelfish: cnode_create_l2: add DEBUG_ERR on slot_alloc_root() error

Signed-off-by: Simon Gerber <simon.gerber@inf.ethz.ch>

UMP: added endpoint creation with iftype

Signed-off-by: Roni Häcki <roni.haecki@inf.ethz.ch>

libbarrelfish: vnode_create fixed for ARMv7 (reverted back)

Signed-off-by: Roni Häcki <roni.haecki@inf.ethz.ch>

monitor: support for registering revoke notifications

Signed-off-by: Reto Achermann <reto.achermann@inf.ethz.ch>

caps: implementing support to identify and map endpoint caps

Signed-off-by: Reto Achermann <reto.achermann@inf.ethz.ch>

libbarrelfish: add explicit TRACE-points around capop RPCs

Signed-off-by: Simon Gerber <simon.gerber@inf.ethz.ch>

libbarrelfish: add explicit TRACE-points around capop RPCs

Signed-off-by: Simon Gerber <simon.gerber@inf.ethz.ch>

capops: retype: if src and dest root cnode are identical only send one copy to monitor

Signed-off-by: Simon Gerber <simon.gerber@inf.ethz.ch>

capops: retype: if src and dest root cnode are identical only send one copy to monitor

Signed-off-by: Simon Gerber <simon.gerber@inf.ethz.ch>

libbf,retype: add TRACE-points around actual monitor RPC

Signed-off-by: Simon Gerber <simon.gerber@inf.ethz.ch>

libbf,retype: add TRACE-points around actual monitor RPC

Signed-off-by: Simon Gerber <simon.gerber@inf.ethz.ch>

capops: retype: if src and dest root cnode are identical only send one copy to monitor

Signed-off-by: Simon Gerber <simon.gerber@inf.ethz.ch>

libbarrelfish: distops: retry getting monitor RPC client if it is currently NULL

Signed-off-by: Simon Gerber <simon.gerber@inf.ethz.ch>

Revert "remove unsave uses of __builtin_return_address()"

This reverts commit 69c768b411bd4ff6056756f0a3d588bb3486e735.

Squash the warning instead, to keep return address printing

Signed-off-by: Reto Achermann <reto.achermann@inf.ethz.ch>

remove unsave uses of __builtin_return_address()

calls to __builtin_return_address with values greather than 0 are
unsave. See https://gcc.gnu.org/ml/gcc-patches/2015-06/msg00886.html

Signed-off-by: Reto Achermann <reto.achermann@inf.ethz.ch>

Add spawn, spawn_with_caps and span calls to the Process Manager API.

The process manager keeps local domain state and forwards valid requests to
spawnds, acting as a proxy for spawning & spanning. Requests are validated as
per the Span-Stop-Cleanup state machine at https://goo.gl/6JuJj2.

Spawnd has been enriched with several asynchronous API calls, in order for
the process manager to serve requests non-blockingly. Specifically, clients of
the process management service issue RPCs to the process manager server
(blockingly), but the latter forwards requests to spawnd asynchronously, hence
it is able to serve multiple clients at the same time.

The client code for spanning uses libbarrelfish/domain.h to create the new
dispatcher for the remote core.

Bug: if the first dispatcher exits main(), dispatchers spanned on other cores
will pagefault.

Signed-off-by: Razvan Damachi <razvan.damachi@gmail.com>

Create "ProcessManager" and "Domain" capabilities.

The ProcessManager capability is created by the CPU driver at startup and given
to init, where it will be passed on to the monitor and then the process manager
subsequently.

The Domain capability is an ID-like cap retypeable from the ProcessManager cap
above. The process management server can hence use the ProcessManager cap to
create Domain caps and give them to spawnd instances, to facilitate identifying
domains locally and globally.

Signed-off-by: Razvan Damachi <razvan.damachi@gmail.com>

flounder: merging rpc client with a binding layer

Signed-off-by: Adam Turowski <adam.turowski@inf.ethz.ch>

IRQ: Allow retyping of IRQSrc capability

Signed-off-by: Lukas Humbel <lukas.humbel@inf.ethz.ch>

Use generated OBJSIZE_* constants instead of hard-coded values.

This requires more cleanup of code that still requires sizes in bits, e.g.
the memory server.

Signed-off-by: Moritz Hoffmann <moritz.hoffmann@inf.ethz.ch>

T258: refactor creation of new cspaces to make it cleaner

This removes the need for manual updating of cnoderefs in libspawndomain. We
introduce a new function cnode_create_l1() for creating new L1 cnodes in L2
slots in our cspace, and rewrite cnode_create_foreign() to
cnode_create_foreign_l2() which takes a capref to an L1 cnode and a slot in
the L1 cnode for where to put the new L2 cnode.

Signed-off-by: Simon Gerber <simon.gerber@inf.ethz.ch>

T243: capability types and kernel code now accurately reflects ARMv7 12/8/12 bit virtual address split

Signed-off-by: Simon Gerber <simon.gerber@inf.ethz.ch>

T258: armv7: fix call stack in cnode_create()

Signed-off-by: Simon Gerber <simon.gerber@inf.ethz.ch>

T258: libbarrelfish: Remove commented-out debugging code in cap_retype

Signed-off-by: Simon Gerber <simon.gerber@inf.ethz.ch>

T258: Add call stack to cnode_create()

Signed-off-by: Simon Gerber <simon.gerber@inf.ethz.ch>

T274: Fix remote retype

Properly propagate source and destiation root cnode throughout monitor retype
code and fix kernel code for monitor cap creation and monitor retype.

Signed-off-by: Simon Gerber <simon.gerber@inf.ethz.ch>

IRQ: Kaluga start driver with IRQ caps.

Signed-off-by: Lukas Humbel <lukas.humbel@inf.ethz.ch>

T258: remove stale comments and commented out code and rename retype tests

Signed-off-by: Simon Gerber <simon.gerber@inf.ethz.ch>

T266: Resizing root cnode enabled for libmm slot allocator

Signed-off-by: Simon Gerber <simon.gerber@inf.ethz.ch>

T273: pass correct root cnode for distributed capability operations

Signed-off-by: Simon Gerber <simon.gerber@inf.ethz.ch>

T273: x86_64: distributed capability operations updated to new cspace layout

Signed-off-by: Simon Gerber <simon.gerber@inf.ethz.ch>

T258, T264, T270: Implement two-level cspace layout using L1/L2 CNode objects.

distops functionality is NYI.

This commit also makes the root cnodes explicit for sys_map(), closes T270.

Notable changes:
* LRPC LMP endpoints are regular capabilities in L2 cnode, no longer in root
cnode.
* Capability operations take a capability address for the root cnode relative
to which capability addresses are to be resolved. The root cnode capability
address must be resolvable in the current domains cspace.

Closes T264.

Signed-off-by: Simon Gerber <simon.gerber@inf.ethz.ch>

T258: rewrite domain creation to stay inside two level cspace layout

* kernel/startup.c: create CNodes that match two level cspace layout for
initial domain.
* lib/spawndomain: create two-level CSpace for new domain, and keep CN caps
in slots where we can edit the CNode contents (e.g. put L1 CNode of new
domain into L1 CNode of spawning domain.
* lib/barrelfish & KPI: edit caprefs and #defines for Root CNode and other
well-defined CNodes to reflect new sizes.

Signed-off-by: Simon Gerber <simon.gerber@inf.ethz.ch>

T258: implement cnode_create_l2()

cnode_create_l2() creates a level two cnode in a slot in the root cnode and
returns a capref and cnoderef to that cnode.

Signed-off-by: Simon Gerber <simon.gerber@inf.ethz.ch>

T264: Add simple creation tests for L1/L2 CNodes

Signed-off-by: Simon Gerber <simon.gerber@inf.ethz.ch>

T263: Refactor retype() to allow object sizes < BASE_PAGE_SIZE for non-mappable types

This also removes the warning print about allocating RAM caps < BASE_PAGE_BITS
in mem_serv, and reverts dispatcher creation to allocate RAM caps of size
OBJBITS_DISPATCHER, rather than BASE_PAGE_BITS.

Closes T263.

Signed-off-by: Simon Gerber <simon.gerber@inf.ethz.ch>

T191: x86_64: refactor retype2 back to retype

Signed-off-by: Simon Gerber <simon.gerber@inf.ethz.ch>

T191: change all of user space to call new retype directly; turn off count = 0 behaviour in kernel

Signed-off-by: Simon Gerber <simon.gerber@inf.ethz.ch>

T191: update monitor capops retype

Signed-off-by: Simon Gerber <simon.gerber@inf.ethz.ch>

T191: call invoke_cnode_retype2 with count = 0 from cap_retype()

This uses the new retype code internally whenever cap_retype() (old API) is called.

caps_retype2() emulates the old behaviour (i.e. split whole source region into
equally-sized regions of objsize) if called with count == 0. This is not
intended to be long term behaviour, but to allow us to remove the old
kernel-side implementation without fixing all call sites first.

Signed-off-by: Simon Gerber <simon.gerber@inf.ethz.ch>

T191: fix simple test

T191: Implement prototype for new retype

The new retype call takes an offset into the source cap and a count of objects
to create. This is different from the old call that just took a source and
created as many new objects as fit into that source (determined by source size
and requested size for new objects).

Currently available as `cap_retype2(dest_start, src, offset, new_type, objsize, count);`

Note that this is not used anywhere yet.

Signed-off-by: Simon Gerber <simon.gerber@inf.ethz.ch>

Clean merge of HP's ARMv8 code

This adds support for an ARMv8 core running in the GEM5 simulator

Signed-off-by: David Cock <david.cock@inf.ethz.ch>

Merge of upstream arrakis code.

This merge includes the following:
* VT-d (IOMMU) support
* VMX (Intel CPU virtualization) support
* Parallel hake build
* MegaRAID driver
* Subways fast packet forwarding application
* Identify physical address of VNodes
* libstorage (VSIC & VSA support)
* POSIX support: poll, uname, nanosleep, fsync, poll, pthread attributes, syslog, wait3, ...
* TenaciousD (persistent data structures: log & queue)
* Hack to skip boot RAM when it's too large
* Arranet: Support for raw IP sockets, interrupts
* Removal of colorful debug output
* MegaRAID blockdevfs support
* Arrakis compile wrappers for Autoconf
* Patches to binutils & GCC to build Arrakis C++ applications

Signed-off-by: Simon Gerber <simon.gerber@inf.ethz.ch>
Signed-off-by: Simon Peter <simpeter@cs.washington.edu>
Signed-off-by: Oleg Godunok <ogodunok@gmail.com>
Signed-off-by: Antoine Kaufmann <antoinek@cs.washington.edu>
Signed-off-by: Jialin Li <lijl@cs.washington.edu>
Signed-off-by: Dalton Black <dalton.m.black@gmail.com>
Signed-off-by: Taesoo Kim <taesoo@uw.edu>

Make kernel create IPI cap which is passed to monitor.

This replaces the create_cap invocation in the monitor that creates an IPI cap
when someone requests a copy of it.

kernel: 4x size of supercn to handle larger amounts of RAM.

Reverted and applied Simon's patch to solve the supercn problem.

added entries to gitignore

Addition of a second supercn.

It turned out that running Barrelfish on machines with lots of RAM will
results in a error during booting that the supercn has no more space
left. As soon as supercn0 has no space left, the allocator will switch
to the second supercn1 to store the capabilities.

Also memserver will get both endpoints and switches automatically to the
next supercn while building up the memory allocator. The maximum size
bits are extended to 40.

The offsets are adapted to support 1024GB physical memory.

The implementation has been tested on qemu prior commit.

Added code from two Bulk Transfer Distributed Systems Lab projects:

1) Reto Achermann, Antoine Kaufmann. Bulk Transfer over Network
2) Added code from two Bulk Transfer Distributed Systems Labs projects

The reports are available from the Barrelfish website.

kernel: 4x size of supercn to handle larger amounts of RAM.

Mark's capabilities merged with upstream.

Test Plan: Run all harness tests

Reviewers: zgerd

Differential Revision: https://code.systems.ethz.ch/D1

Keep cptrs right-shifted throughout capops.

Removed some remaining printfs from capability operations.

Fixed cptr alignment in various places.

Added and fixed various debug printfs related to cap operations.

Catch NULL monitor rpc client in cap monitor rpcs.

Fixed direct comparison of errvals without err_no.

terminal: Add flounder interfaces for new terminal interface as well as static
slot for session id.

Adding functionality to inherit capabilities and pass capabilities as arguments.

The function 'spawn_domain_with_fdcap' was used to spawn a domain and
inherit the file descriptors of the current domain. A similar inheritance
mechanism is needed for session capabilities.

To this end, the function was renamed to 'spawn_domain_with_caps'. It no longer
expects an fdcap as one of the arguments but a CNode containing all the
capabilities, that should be inherited by the newly spawned domain. The layout
of this CNode is convention an defined in include/barrelfish/spawn_client.h.
Spawnd knows about these capabilities and copies them to the appropriate places.
For example, if the fdcap is present in the inherit CNode, spawnd copies it to
the corresponding slot in the task CNode.

Moreover, we need the ability to pass arbitrary capabilities to a domain at
startup for example to start a device driver. Spawnd does not have to know about
these capabilities. Which capabilities are passed in which order is an agreement
between spawner and spawnee. To this end, this patch adds another CNode argument
to the function 'spawn_domain_with_caps'. If a domain wants to pass certain
capabilites to another domain it therefore creates a CNode and places the
capabilities in this Cnode and the passes this CNode as an argument to
'spawn_domain_with_caps'. Spawnd makes this CNode available to the spawnee in
the ARGCN slot of the root CNode as either a CNode (if spawner and spawnee are
on the same core) or a ForeignCNode (if on different cores).

The first method of inheriting capabilities and the second method of passing
capabilities are intentionally kept as two arguments because of the following
reasons:
* To account for the difference in their handling. Spawnd knows about the
inherited capabilities and places each of them to appropriate places in the
spawnee's CSpace. As a result they are available early-on, i.e. before the
library initialization code for this domain runs.
* Putting both kinds of capabilities in a single flat CNode, would require
recompilation of the whole OS after adding a new capability, that should be
inherited.

Adding a function that builds a 'struct cnoderef' given a 'struct capref'.

The function uses cap identification to get the missing information.

Added ID capability, providing a system-wide unique ID.

The ID capability currently supports one invocation called 'identify', to
retrieve the system-wide unique ID.

The Domain capability, which was never used, is removed with this patch, since
the ID capability provides a more general capability.

Added ability to create certain capabilities at runtime (without using retype).

The CNode capabilities are enhanced with a new invocation 'CNodeCmd_Create',
allowing to create new capabilities at runtime.
Only certain types of capabilities can be created this way. If invoked on a
capability type, that is not creatable at runtime the error
SYS_ERR_NOT_CREATABLE is emitted.

removed #inluce <stdio.h>, since no debug printf's anymore in these files

kernel and userspace now working, removed some debug printfs, general code cleanup

- kernel ready
- added 3 new devices for development board
- temporary added debug printfs

remove support for Beehive

see the mailing list discussion at the end of December 2011 for motivation

Replaced caddr_t type with capaddr_t to avoid conflict with libc

for i in $(find . -type f)
do
grep -r caddr_t $i
if [ $? -eq 0 ]
then
sed 's/caddr_t/capaddr_t/g' $i > $i.sed
mv $i.sed $i
fi
done

Finalized socket inheritance with pause and reverted unrelated changes from
last commit.

Checkpoint: Socket inheritance with pause.

Merge from ASPLOS tree.

Initial version of public stable barrelfish repository.