Received-SPF: pass (google.com: domain of linux-kernel-owner@vger.kernel.org designates 23.128.96.18 as permitted sender) client-ip=23.128.96.18;
From:   Mike Christie <michael.christie@oracle.com>
To:     geert@linux-m68k.org, vverma@digitalocean.com, hdanton@sina.com,
        hch@infradead.org, stefanha@redhat.com, jasowang@redhat.com,
        mst@redhat.com, sgarzare@redhat.com,
        virtualization@lists.linux-foundation.org,
        christian.brauner@ubuntu.com, axboe@kernel.dk,
        linux-kernel@vger.kernel.org
Cc:     Mike Christie <michael.christie@oracle.com>
Subject: [PATCH V4 5/8] fork: add helper to clone a process
Date:   Thu,  7 Oct 2021 16:44:45 -0500
Message-Id: <20211007214448.6282-6-michael.christie@oracle.com>
In-Reply-To: <20211007214448.6282-1-michael.christie@oracle.com>
References: <20211007214448.6282-1-michael.christie@oracle.com>
Content-Transfer-Encoding: 8bit
Content-Type: text/plain
MIME-Version: 1.0
X-MS-Exchange-AntiSpam-MessageData-ChunkCount: 1
X-MS-Exchange-AntiSpam-MessageData-0: =?us-ascii?Q?Z7BDttTq52CfFn1IUQP4CeHDV3Ee5FUJNG1p1KLInl64yr2DLHg+7nmMeahx?=
 =?us-ascii?Q?Fjly9YjheAiNQRnnAJneQtqGlhosLSja2lXchRMylKUkbFlk0Enb82VGGvpT?=
 =?us-ascii?Q?HLfqT/HLso/Uefw5irHFNbhpa67LddDSQU7Pr02Y5R2L759e05Ch45U61yao?=
 =?us-ascii?Q?7L+ZJR37kna3y/AlAw5/ITBvWpVDSHP8vMmckAdUHGj6H2w9gzRMtxVWtglw?=
 =?us-ascii?Q?Zdtezl2zq2t+Qvx53TQnGTyXiXtfgo/lybPsRb0l91TEao/lXB2KmYOtgJCj?=
 =?us-ascii?Q?M1xBUut9UZd9e6P879pgcYTEKaKX1Zf2RVYWrApf+8W2o4QXlUu8uGJJiPJ1?=
 =?us-ascii?Q?bOCVTR3AaocnddbpyhxTn5KomRL1z6a1wIf9iTHkEldkJwo7b8Nry/LVzXbr?=
 =?us-ascii?Q?6ZzBhBD6sD/mEFEpMea3YnC+L/1TbVMpNk1+mugmq4XfZ19IcxpfN4sS3Jbk?=
 =?us-ascii?Q?qoYOH3GYy9wCOqdCcEOGZVLfvL7L8b09YKw/oKWZdieex7droYPqMYspF+Xo?=
 =?us-ascii?Q?QAwPJnStpDCPwZPkBXHOTMLIqYXYa/rcWyfTnIQGG3gHxo3szTVqdav8TfzF?=
 =?us-ascii?Q?EK/DbtYC4LKx2k0aEmTbuuPjIWVrP51cJd+ZyGQsTdFe8kahKc5waLpK5q/j?=
 =?us-ascii?Q?PyaGz5bCVX6eHjlt8EChdqRJag2SHZSJ0BTKEko1vt4+pp26ol5hKAkW8EXM?=
 =?us-ascii?Q?RsUDUCDUB7+PLJ8ym5U2naoqaIJaMuP2fYT9QASUrPrEBw+8hAalDinAwV9E?=
 =?us-ascii?Q?GqnjlnZ0Gw5btMYIBLhuK96HApLpfDO+83VGn4s+uLLcp5G8/bjO+ZrfJ7iQ?=
 =?us-ascii?Q?Vc2dqO5NMdeobEOmyrasHalPgnejtrg/17A6Uck1Tv6vY5kyVMbMwXZlkkvX?=
 =?us-ascii?Q?ZiBZmVZ6PW+yW0StXqSxfjqZ/1i2WjM0L3t+qxvTNuT3tyLqANHcnCxmwtsp?=
 =?us-ascii?Q?his29JwFb58NdnUG5aenao+EAh41woKLtQZYmHF4siaY3a9s+eFHk4kkfHMF?=
 =?us-ascii?Q?qLCCSyYHSnNe2mrlan7RH4uN2KmYoQ83cXBFM/rSCB9FE2pAcd0nHhCFP1B9?=
 =?us-ascii?Q?MZ3w5R6isKm16V+FKQnBKW8Ym8rYBpcd3JoXVnhvkJTMhrenTw2KwpTWhLa9?=
 =?us-ascii?Q?pPNzC116YyTYLd1EeEtwq/A/eJ1ZOCKUrnFKyXvea0K78vqCANObK6pgu6n4?=
 =?us-ascii?Q?cMaEaMa5A0u/QmGiGNqTcjIVz6EktQoBgJ3Psy42R6fVGVCeOUUScZAICzXO?=
 =?us-ascii?Q?hSLKiU7+SOrCwK5+pH5CRLUsKqH8JEH9GYaoU6Z5k+TWpHRfYguF30+zXkGz?=
 =?us-ascii?Q?SdMzLjMcn3A6stfe9ZPaZuGi?=
X-OriginatorOrg: oracle.com
X-MS-Exchange-CrossTenant-Network-Message-Id: 3475aa1c-6f9b-49b5-a945-08d989dbb5ca
X-MS-Exchange-CrossTenant-AuthSource: DM5PR10MB1466.namprd10.prod.outlook.com
X-MS-Exchange-CrossTenant-AuthAs: Internal
X-MS-Exchange-CrossTenant-OriginalArrivalTime: 07 Oct 2021 21:44:59.2265
 (UTC)
X-MS-Exchange-CrossTenant-FromEntityHeader: Hosted
X-MS-Exchange-CrossTenant-Id: 4e2c6054-71cb-48f1-bd6c-3a9705aca71b
X-MS-Exchange-CrossTenant-MailboxType: HOSTED
X-MS-Exchange-CrossTenant-UserPrincipalName: 10aSb8ZrA3QcEwK2int9aVjzwF/uYw7QuRBEI+2spb0yUJ6548+fYsgjno52nXteX8dNGot6xRq4lquQ6+hzx6bK4xlSnhGx0BOVNyAI2CE=
X-MS-Exchange-Transport-CrossTenantHeadersStamped: DM5PR10MB1612
X-Proofpoint-Virus-Version: vendor=nai engine=6300 definitions=10130 signatures=668683
X-Proofpoint-Spam-Details: rule=notspam policy=default score=0 mlxscore=0 mlxlogscore=999 adultscore=0
 bulkscore=0 suspectscore=0 malwarescore=0 spamscore=0 phishscore=0
 classifier=spam adjust=0 reason=mlx scancount=1 engine=8.12.0-2109230001
 definitions=main-2110070137
X-Proofpoint-ORIG-GUID: CkCam1U8f3Om5Q4lTZplpZlXurGjRErf
X-Proofpoint-GUID: CkCam1U8f3Om5Q4lTZplpZlXurGjRErf
Precedence: bulk
List-ID: <linux-kernel.vger.kernel.org>
X-Mailing-List: linux-kernel@vger.kernel.org

The vhost layer has similar requirements as io_uring where its worker
threads need to access the userspace thread's memory, want to inherit the
parents's cgroups and namespaces, and be checked against the parent's
RLIMITs. Right now, the vhost layer uses the kthread API which has
kthread_use_mm for mem access, and those threads can use
cgroup_attach_task_all for v1 cgroups, but there are no helpers for the
other items.

This adds a helper to clone a process so we can inherit everything we
want in one call. It's a more generic version of create_io_thread which
will be used by the vhost layer and io_uring in later patches in this set.

[added flag validation code from Christian Brauner's patch]
Signed-off-by: Mike Christie <michael.christie@oracle.com>
Acked-by: Christian Brauner <christian.brauner@ubuntu.com>
---
 include/linux/sched/task.h |  4 +++
 kernel/fork.c              | 71 ++++++++++++++++++++++++++++++++++++++
 2 files changed, 75 insertions(+)

diff --git a/include/linux/sched/task.h b/include/linux/sched/task.h
index 5f3928fe0544..2bfc0629c868 100644
--- a/include/linux/sched/task.h
+++ b/include/linux/sched/task.h
@@ -89,6 +89,10 @@ extern void exit_itimers(struct signal_struct *);
 
 extern pid_t kernel_clone(struct kernel_clone_args *kargs);
 struct task_struct *create_io_thread(int (*fn)(void *), void *arg, int node);
+struct task_struct *kernel_worker(int (*fn)(void *), void *arg, int node,
+				  unsigned long clone_flags, u32 worker_flags);
+__printf(2, 3)
+void kernel_worker_start(struct task_struct *tsk, const char namefmt[], ...);
 struct task_struct *fork_idle(int);
 struct mm_struct *copy_init_mm(void);
 extern pid_t kernel_thread(int (*fn)(void *), void *arg, unsigned long flags);
diff --git a/kernel/fork.c b/kernel/fork.c
index 07f9e410fb64..b04e61a965e2 100644
--- a/kernel/fork.c
+++ b/kernel/fork.c
@@ -2544,6 +2544,77 @@ struct task_struct *create_io_thread(int (*fn)(void *), void *arg, int node)
 	return copy_process(NULL, 0, node, &args);
 }
 
+static bool kernel_worker_flags_valid(struct kernel_clone_args *kargs)
+{
+	/* Verify that no unknown flags are passed along. */
+	if (kargs->worker_flags & ~(KERN_WORKER_IO | KERN_WORKER_USER |
+				    KERN_WORKER_NO_FILES | KERN_WORKER_SIG_IGN))
+		return false;
+
+	/*
+	 * If we're ignoring all signals don't allow sharing struct sighand and
+	 * don't bother clearing signal handlers.
+	 */
+	if ((kargs->flags & (CLONE_SIGHAND | CLONE_CLEAR_SIGHAND)) &&
+	    (kargs->worker_flags & KERN_WORKER_SIG_IGN))
+		return false;
+
+	return true;
+}
+
+/**
+ * kernel_worker - create a copy of a process to be used by the kernel
+ * @fn: thread stack
+ * @arg: data to be passed to fn
+ * @node: numa node to allocate task from
+ * @clone_flags: CLONE flags
+ * @worker_flags: KERN_WORKER flags
+ *
+ * This returns a created task, or an error pointer. The returned task is
+ * inactive, and the caller must fire it up through kernel_worker_start(). If
+ * this is an PF_IO_WORKER all singals but KILL and STOP are blocked.
+ */
+struct task_struct *kernel_worker(int (*fn)(void *), void *arg, int node,
+				  unsigned long clone_flags, u32 worker_flags)
+{
+	struct kernel_clone_args args = {
+		.flags		= ((lower_32_bits(clone_flags) | CLONE_VM |
+				   CLONE_UNTRACED) & ~CSIGNAL),
+		.exit_signal	= (lower_32_bits(clone_flags) & CSIGNAL),
+		.stack		= (unsigned long)fn,
+		.stack_size	= (unsigned long)arg,
+		.worker_flags	= KERN_WORKER_USER | worker_flags,
+	};
+
+	if (!kernel_worker_flags_valid(&args))
+		return ERR_PTR(-EINVAL);
+
+	return copy_process(NULL, 0, node, &args);
+}
+EXPORT_SYMBOL_GPL(kernel_worker);
+
+/**
+ * kernel_worker_start - Start a task created with kernel_worker
+ * @tsk: task to wake up
+ * @namefmt: printf-style format string for the thread name
+ * @arg: arguments for @namefmt
+ */
+void kernel_worker_start(struct task_struct *tsk, const char namefmt[], ...)
+{
+	char name[TASK_COMM_LEN];
+	va_list args;
+
+	WARN_ON(!(tsk->flags & PF_USER_WORKER));
+
+	va_start(args, namefmt);
+	vsnprintf(name, sizeof(name), namefmt, args);
+	set_task_comm(tsk, name);
+	va_end(args);
+
+	wake_up_new_task(tsk);
+}
+EXPORT_SYMBOL_GPL(kernel_worker_start);
+
 /*
  *  Ok, this is the main fork-routine.
  *
-- 
2.25.1