Received: by 2002:ac0:a874:0:0:0:0:0 with SMTP id c49csp673703ima; Fri, 15 Mar 2019 11:25:41 -0700 (PDT) X-Google-Smtp-Source: APXvYqzRQtrkGJFV2l1gd3hEi+X0UmqaiAfEfaZPZT8vZF8BA0WXb55wfLS18aPeKr6XHdPjfmK/ X-Received: by 2002:a63:7403:: with SMTP id p3mr4702731pgc.343.1552674341185; Fri, 15 Mar 2019 11:25:41 -0700 (PDT) ARC-Seal: i=1; a=rsa-sha256; t=1552674341; cv=none; d=google.com; s=arc-20160816; b=jcvCVrliqpl56Q8a3BE1PhUKuybzQat6hvJQk3OW3Hecc8+sMlH1ZOc+el03gxe93N cPq5nOnMuJythF3xYMZo5auJ/9zIq8A5W7O1EleOGoJqlHzgdbkGinFFMNPieKHgfVn7 2PnnGM7FmRahSCQUses0BW1euwDkCfgJhbHImCUZJu90nPUpd69uBHBWYFiOK5IEN82J 0SEQ09VVLFVqNbfOaVwJw+PfkhQOYEEIhttDSKmdU3MqyEDOTyPqzFjDCm7z+YyOZhJ3 EueUWrxVK6O8rmZZoo0OwgSdP/MN5UdwpbG/n/q48aK3T8XMWlKpvM5//kkQACe6KBi+ rZCQ== ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=google.com; s=arc-20160816; h=list-id:precedence:sender:user-agent:in-reply-to :content-disposition:mime-version:references:message-id:subject:cc :to:from:date:dkim-signature; bh=seT4TFi1RcdFb9g62VHCpX5ppyQ+lPqF9G727Y0W53c=; b=TCUAstzD3uN6dDxMMrOwVaJ78809vhlKF6t4P7/vq42X+BfsbKvCmbVw1gCAX31pG1 IvFCdp/LiCtjcF1Ggc6+EUQ8TKiupr/T0cop7KEfkCrLtOv2qpbXTobiUpTnN42vtSY8 FNFrditGstnW3y0FxH0CeiuuYclLNA98zsej8fsh5CLY67sh2234TKhysMdFRTJoO2Xh M3WpCVg1Rcg1Ih6d2tWfUD4fHSBSSNpXneKjvxEs9/fCJ7CKWpWcFQ4Iz7Q7sBzYcR9Z 6ynwMEQTczNYnbURfVdfHDL3ths9Tit0KR3GVtQ+beOPxo0NXXaqgrroBhSoGFiwbsIR bMEg== ARC-Authentication-Results: i=1; mx.google.com; dkim=pass header.i=@brauner.io header.s=google header.b=f5EeRTy7; spf=pass (google.com: best guess record for domain of linux-kernel-owner@vger.kernel.org designates 209.132.180.67 as permitted sender) smtp.mailfrom=linux-kernel-owner@vger.kernel.org Return-Path: Received: from vger.kernel.org (vger.kernel.org. [209.132.180.67]) by mx.google.com with ESMTP id r26si2255413pgv.127.2019.03.15.11.25.25; Fri, 15 Mar 2019 11:25:41 -0700 (PDT) Received-SPF: pass (google.com: best guess record for domain of linux-kernel-owner@vger.kernel.org designates 209.132.180.67 as permitted sender) client-ip=209.132.180.67; Authentication-Results: mx.google.com; dkim=pass header.i=@brauner.io header.s=google header.b=f5EeRTy7; spf=pass (google.com: best guess record for domain of linux-kernel-owner@vger.kernel.org designates 209.132.180.67 as permitted sender) smtp.mailfrom=linux-kernel-owner@vger.kernel.org Received: (majordomo@vger.kernel.org) by vger.kernel.org via listexpand id S1726431AbfCOSYd (ORCPT + 99 others); Fri, 15 Mar 2019 14:24:33 -0400 Received: from mail-ed1-f65.google.com ([209.85.208.65]:41576 "EHLO mail-ed1-f65.google.com" rhost-flags-OK-OK-OK-OK) by vger.kernel.org with ESMTP id S1725912AbfCOSYc (ORCPT ); Fri, 15 Mar 2019 14:24:32 -0400 Received: by mail-ed1-f65.google.com with SMTP id a25so1172350edc.8 for ; Fri, 15 Mar 2019 11:24:30 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=brauner.io; s=google; h=date:from:to:cc:subject:message-id:references:mime-version :content-disposition:in-reply-to:user-agent; bh=seT4TFi1RcdFb9g62VHCpX5ppyQ+lPqF9G727Y0W53c=; b=f5EeRTy7jU1X3Z3hmqmDbEF/y9isrUEz9Jev4s64tBraL9Zo6gvA97QtmEfWXX6hbg ZUsqLm9a70iyu8Tzl21XPoBZa/TKhlcYHf2rW8VGO7VkMojFuRDgyVTaYv/tHbQqkxUs RDJIfe1RqTqDVVGk7frM2aWxaQbbzLSXabL+MfA9Cj7eD/hRYinK+JBUvL4RcpETcZMF 6j5wr55UjL2UAK8gIUbjovdNdubk7l3PcApu7a3ISJylBVplBpKcqxy86XSJTPZGa+m9 RtlsS3pdCUvN3AEZ9A6lkC9Lwdx/8umFrGqSwovHMf4eV1EWj2sNNetjzHbsJrbbFd+g Jn4w== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:date:from:to:cc:subject:message-id:references :mime-version:content-disposition:in-reply-to:user-agent; bh=seT4TFi1RcdFb9g62VHCpX5ppyQ+lPqF9G727Y0W53c=; b=rDY52zh2YzhLygFqHv2lzP33hxJwLbI7AHBREK9qUPx81UOau41FZzak9YKGhjJLQn 0zGKyC1o1FavbHdu6aIX3pnZRibWvlhjSl2pmGmiEGOnbQBOuK2gIzV55sEtBRz5x2++ tbdokh6lvhmNJDJUSusJd88Q8VfAsP9tvM21WIoYCNFkaQXVGHQ39sY6DcnJwQDHWS9P jISbn9TRs8vyn2rUGOhGAf4eGEYNmhcyEVF9Z6UAs/Qqn+PDuKxaVC/UCO3NWwSBkHL4 4F7UFHkpcHDfCEL2hw4nGE9R/b5SQSLX2HJx+PMDKY3CuaF1HjBSiJF5cxqnhDd0zKgI xn/w== X-Gm-Message-State: APjAAAV0H+gvRVBP0Cuk8bSNkD3Nl3DiH01nMhsDFonz4dTUTqPayykN bbLothsXfEuhckXSwXRRjDsBKA== X-Received: by 2002:a17:906:c406:: with SMTP id u6mr3010081ejz.95.1552674269944; Fri, 15 Mar 2019 11:24:29 -0700 (PDT) Received: from brauner.io ([2a02:8109:b6c0:76e:dd26:cbb7:1dbc:50af]) by smtp.gmail.com with ESMTPSA id u21sm568000ejm.45.2019.03.15.11.24.28 (version=TLS1_3 cipher=AEAD-AES256-GCM-SHA384 bits=256/256); Fri, 15 Mar 2019 11:24:29 -0700 (PDT) Date: Fri, 15 Mar 2019 19:24:28 +0100 From: Christian Brauner To: Joel Fernandes Cc: Daniel Colascione , Steven Rostedt , Sultan Alsawaf , Tim Murray , Michal Hocko , Suren Baghdasaryan , Greg Kroah-Hartman , Arve =?utf-8?B?SGrDuG5uZXbDpWc=?= , Todd Kjos , Martijn Coenen , Ingo Molnar , Peter Zijlstra , LKML , "open list:ANDROID DRIVERS" , linux-mm , kernel-team Subject: Re: [RFC] simple_lmk: Introduce Simple Low Memory Killer for Android Message-ID: <20190315182426.sujcqbzhzw4llmsa@brauner.io> References: <20190312080532.GE5721@dhcp22.suse.cz> <20190312163741.GA2762@sultan-box.localdomain> <20190314204911.GA875@sultan-box.localdomain> <20190314231641.5a37932b@oasis.local.home> <20190315180306.sq3z645p3hygrmt2@brauner.io> <20190315181324.GA248160@google.com> MIME-Version: 1.0 Content-Type: text/plain; charset=utf-8 Content-Disposition: inline In-Reply-To: <20190315181324.GA248160@google.com> User-Agent: NeoMutt/20180716 Sender: linux-kernel-owner@vger.kernel.org Precedence: bulk List-ID: X-Mailing-List: linux-kernel@vger.kernel.org On Fri, Mar 15, 2019 at 02:13:24PM -0400, Joel Fernandes wrote: > On Fri, Mar 15, 2019 at 07:03:07PM +0100, Christian Brauner wrote: > > On Thu, Mar 14, 2019 at 09:36:43PM -0700, Daniel Colascione wrote: > > > On Thu, Mar 14, 2019 at 8:16 PM Steven Rostedt wrote: > > > > > > > > On Thu, 14 Mar 2019 13:49:11 -0700 > > > > Sultan Alsawaf wrote: > > > > > > > > > Perhaps I'm missing something, but if you want to know when a process has died > > > > > after sending a SIGKILL to it, then why not just make the SIGKILL optionally > > > > > block until the process has died completely? It'd be rather trivial to just > > > > > store a pointer to an onstack completion inside the victim process' task_struct, > > > > > and then complete it in free_task(). > > > > > > > > How would you implement such a method in userspace? kill() doesn't take > > > > any parameters but the pid of the process you want to send a signal to, > > > > and the signal to send. This would require a new system call, and be > > > > quite a bit of work. > > > > > > That's what the pidfd work is for. Please read the original threads > > > about the motivation and design of that facility. > > > > > > > If you can solve this with an ebpf program, I > > > > strongly suggest you do that instead. > > > > > > Regarding process death notification: I will absolutely not support > > > putting aBPF and perf trace events on the critical path of core system > > > memory management functionality. Tracing and monitoring facilities are > > > great for learning about the system, but they were never intended to > > > be load-bearing. The proposed eBPF process-monitoring approach is just > > > a variant of the netlink proposal we discussed previously on the pidfd > > > threads; it has all of its drawbacks. We really need a core system > > > call --- really, we've needed robust process management since the > > > creation of unix --- and I'm glad that we're finally getting it. > > > Adding new system calls is not expensive; going to great lengths to > > > avoid adding one is like calling a helicopter to avoid crossing the > > > street. I don't think we should present an abuse of the debugging and > > > performance monitoring infrastructure as an alternative to a robust > > > and desperately-needed bit of core functionality that's neither hard > > > to add nor complex to implement nor expensive to use. > > > > > > Regarding the proposal for a new kernel-side lmkd: when possible, the > > > kernel should provide mechanism, not policy. Putting the low memory > > > killer back into the kernel after we've spent significant effort > > > making it possible for userspace to do that job. Compared to kernel > > > code, more easily understood, more easily debuggable, more easily > > > updated, and much safer. If we *can* move something out of the kernel, > > > we should. This patch moves us in exactly the wrong direction. Yes, we > > > need *something* that sits synchronously astride the page allocation > > > path and does *something* to stop a busy beaver allocator that eats > > > all the available memory before lmkd, even mlocked and realtime, can > > > respond. The OOM killer is adequate for this very rare case. > > > > > > With respect to kill timing: Tim is right about the need for two > > > levels of policy: first, a high-level process prioritization and > > > memory-demand balancing scheme (which is what OOM score adjustment > > > code in ActivityManager amounts to); and second, a low-level > > > process-killing methodology that maximizes sustainable memory reclaim > > > and minimizes unwanted side effects while killing those processes that > > > should be dead. Both of these policies belong in userspace --- because > > > they *can* be in userspace --- and userspace needs only a few tools, > > > most of which already exist, to do a perfectly adequate job. > > > > > > We do want killed processes to die promptly. That's why I support > > > boosting a process's priority somehow when lmkd is about to kill it. > > > The precise way in which we do that --- involving not only actual > > > priority, but scheduler knobs, cgroup assignment, core affinity, and > > > so on --- is a complex topic best left to userspace. lmkd already has > > > all the knobs it needs to implement whatever priority boosting policy > > > it wants. > > > > > > Hell, once we add a pidfd_wait --- which I plan to work on, assuming > > > nobody beats me to it, after pidfd_send_signal lands --- you can > > > > Daniel, > > > > I've just been talking to Joel. > > I actually "expected" you to work pidfd_wait() after prior > > conversations we had on the pidfd_send_signal() patchsets. :) That's why > > I got a separate git tree on kernel.org since I expect a lot more work > > to come. I hope that Linus still decides to pull pidfd_send_signal() > > before Sunday (For the ones who have missed the link in a prior response > > of mine: > > https://lkml.org/lkml/2019/3/12/439 > > > > This is the first merge window I sent this PR. > > > > The pidfd tree has a branch for-next that is already tracked by Stephen > > in linux-next since the 5.0 merge window. The patches for > > pidfd_send_signal() sit in the pidfd branch. > > I'd be happy to share the tree with you and Joel (We can rename it if > > you prefer I don't care). > > I would really like to centralize this work so that we sort of have a > > "united front" and end up with a coherent api and can send PRs from a > > centralized place: > > https://git.kernel.org/pub/scm/linux/kernel/git/brauner/linux.git/ > > I am totally onboard with working together / reviewing this work with you all > on a common tree somewhere (Christian's pidfd tree is fine). I was curious, Excellent. > why do we want to add a new syscall (pidfd_wait) though? Why not just use > standard poll/epoll interface on the proc fd like Daniel was suggesting. > AFAIK, once the proc file is opened, the struct pid is essentially pinned > even though the proc number may be reused. Then the caller can just poll. > We can add a waitqueue to struct pid, and wake up any waiters on process > death (A quick look shows task_struct can be mapped to its struct pid) and > also possibly optimize it using Steve's TIF flag idea. No new syscall is > needed then, let me know if I missed something? Huh, I thought that Daniel was against the poll/epoll solution? I have no clear opinion on what is better at the moment since I have been mostly concerned with getting pidfd_send_signal() into shape and was reluctant to put more ideas/work into this if it gets shutdown. Once we have pidfd_send_signal() the wait discussion makes sense. Thanks! Christian