Received-SPF: pass (google.com: domain of linux-kernel-owner@vger.kernel.org designates 2620:137:e000::1:20 as permitted sender) client-ip=2620:137:e000::1:20;
Message-ID: <cb7f3533-a904-ef0f-e3a9-39eed6775aad@virtuozzo.com>
Date:   Fri, 10 Jun 2022 19:38:59 +0300
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:91.0) Gecko/20100101
 Thunderbird/91.9.0
Subject: Re: [PATCH 0/2] Introduce CABA helper process tree
Content-Language: en-US
To:     linux-kernel@vger.kernel.org
Cc:     Eric Biederman <ebiederm@xmission.com>,
        Kees Cook <keescook@chromium.org>,
        Alexander Viro <viro@zeniv.linux.org.uk>,
        Ingo Molnar <mingo@redhat.com>,
        Peter Zijlstra <peterz@infradead.org>,
        Juri Lelli <juri.lelli@redhat.com>,
        Vincent Guittot <vincent.guittot@linaro.org>,
        Dietmar Eggemann <dietmar.eggemann@arm.com>,
        Steven Rostedt <rostedt@goodmis.org>,
        Ben Segall <bsegall@google.com>, Mel Gorman <mgorman@suse.de>,
        Daniel Bristot de Oliveira <bristot@redhat.com>,
        Valentin Schneider <vschneid@redhat.com>,
        Andrew Morton <akpm@linux-foundation.org>,
        linux-ia64@vger.kernel.org, linux-mm@kvack.org,
        linux-fsdevel@vger.kernel.org, kernel@openvz.org
References: <20220610163214.49974-1-ptikhomirov@virtuozzo.com>
From:   Pavel Tikhomirov <ptikhomirov@virtuozzo.com>
In-Reply-To: <20220610163214.49974-1-ptikhomirov@virtuozzo.com>
Content-Type: text/plain; charset=UTF-8; format=flowed
Content-Transfer-Encoding: 7bit
MIME-Version: 1.0
X-MS-Exchange-AntiSpam-MessageData-ChunkCount: 1
X-MS-Exchange-AntiSpam-MessageData-0: =?utf-8?B?NWoyaGhIUU1FUXZjL3V4eVhYdWVwMEdkdFlrL0I5NThUSlNibjkzWXQxcVN0?=
 =?utf-8?B?WTJkNC9QUFprQmdXZEppL2l1WWk1WHYxU3NTZ3NQdlg1VjIrOUFwTGhnakd1?=
 =?utf-8?B?QVBSYWVWZTM4M2xuR1J2SGVkZlF3RkpkZEJBV09ZZHVqeE5Uc20zb2paL3Fx?=
 =?utf-8?B?MmNrRlZwODNFOERLbWdQazEzTHY1UTN5Nys4OGEwbThCd1lBeVVvUWNDTlhF?=
 =?utf-8?B?UjJtVCttYmt4MDhMUGJtbFpQWkp3cWVYVGVqMmk0b3dPQkpDOTY5UGlxYzBo?=
 =?utf-8?B?anBCNjNQNmFWcmxoV2ZZRVU1ZlFpZFMzc3JkUGY3dFNrRlo4RjVMQzhVOUkr?=
 =?utf-8?B?eGZwdWxhUW1lZ2hRdERlR3pQc0NVbDJGejI3d01LTTRraXBiTmlqQW1KRTdD?=
 =?utf-8?B?QjNqNTlXUGljS1JKbEFrSGVPR2RvWHlPQjlRNnBtSFVDUWdXY0tuZ2NWcnE1?=
 =?utf-8?B?NDlrM0FNYUFDMFFYYVkzLzRmeng2ZjREYzNXZkFNKzNua3FvRjVuNWNoaks5?=
 =?utf-8?B?NFUzNFBmaUx0ZWhNVFplNE5TN054SlNsTXRWUlhDY01YVDFlajlnWDhMbG9m?=
 =?utf-8?B?dTBISjU4WXRwdVZCUS93d1c0VjR1eFo1QnZXKzdqUkpVdDBoWDQzU2ZFNHdI?=
 =?utf-8?B?VGVSLzkrSGZ5cFVWMmJXYy9rRHNGenpudlR5VHlpRTV5VFpDYlVjRVNsOHoy?=
 =?utf-8?B?STUwUGtzalFYWUpFRjI3alFhUWM0bkkzTTZCY25FL2ZEdkcrRUd1czJqb28w?=
 =?utf-8?B?M1lOYTZOTkxaR2hqaE9WTWtHbTBGZzhEeTQzSVpjSWtUTGR4c1R3aGd2YzFy?=
 =?utf-8?B?bXI5RzBSajdLOEdaVmRsbk1GMGtEOXlwNmlJR0sxcHBTM0VjcmtzNWNWUE5P?=
 =?utf-8?B?cUoxeDdwUTgxUEczNG96K1FRaTBZWGRBWDVZMkk0ZmdsaUJON05kbC9PajVW?=
 =?utf-8?B?ZG1zTnVORSt2NERRc3MvVE5OY2M2RlJZKzhtb1FIQXV5THdoaGVWTk9TRlZZ?=
 =?utf-8?B?aitFeHRIK0F6WXBTaGV0L2FXN2E4L2lOTTJHaHRpZTRpUkhCSWs2TmIyZm96?=
 =?utf-8?B?c1U4THdGL3grZlpaSlkvNTRoRzJYdEozRTJPSUs3MmhZeVF4MUYvR0VVSFVr?=
 =?utf-8?B?QWtrUDVLZG1XQjZmZTBwZEdNNmpQNWd3dmJYOSttTTJUT0NsVmJ2b09jSWhQ?=
 =?utf-8?B?RDBwbWMvZFlMUEN2aldqZzBYOVk5a2lLSmZRU1h6OUFuci8xOU9DV3AzZXBQ?=
 =?utf-8?B?dEtGWEJZUjZpWTZ2clljK2l4cGxnVWtjNkQ2c2dITWxIakZKSnFYNE1CYUQy?=
 =?utf-8?B?QTJvQlRvWjdkQVVtQ05nRTRJVjdFOCsyU1lJQklodEhJa3dRK3N4bVE5VTJJ?=
 =?utf-8?B?NzdZd0VLcFhvRkxiVnRFeFFqeVd1bi9xeHU0Tzd4ajZsaEZGMVEvRUhiMktl?=
 =?utf-8?B?QzFWaU1Tc0J3N1NQdDlXMDVrQktFLysyMDV1NFNVdTBuTWdxSmJUQ0pwdElM?=
 =?utf-8?B?by9Pa09IV1Zad3hDcGh5TVpzVXQ4cGJtVHdFWkdtWWZ3RmIzV1hyZWd1Q0ht?=
 =?utf-8?B?YVczUjJCUFdiTkFsSlBwcmtqcE1HTEV5RTJZdHBTZEtGVEFYQlZsdGxYQ2t2?=
 =?utf-8?B?dXYvMXlQSnlDWTdZazEzdkJjSnhTODA1dVJQVm5pUjJuUWZHUndNOUNWenZB?=
 =?utf-8?B?NVBUY0gwekg2ODI2dlk0NEhtam9TN0QxZ2NiQXlOVEpFQ2ZKakNHNklyVWlM?=
 =?utf-8?B?bjdmVDhSMGZIbjhQRWlidC9PeW5kaGlRbEtzem03NDJJblR0Nkg0REljR05Q?=
 =?utf-8?B?QjI2cHRyUlFZcjVnTTFOK1pLbjBPQ1oxRmk5ODhZT2tKNzN3bkJDb1VOL29q?=
 =?utf-8?B?SzREaEVaUU5RRGZhUkJDeElOWTlqRkhGalRuemhsRUhsM0xwM2FxTlZvR1dF?=
 =?utf-8?B?T1FwUjlVYjY0VmJrMkd1Z1Q1dnVyd3EvN1NnZzRjMlo3bk9NYTRsc2x0Tmxx?=
 =?utf-8?B?b09RRFUzaGtucExvclE1TytnTFAxYkpHQmhkaThENjhiN21reWdhSXZQcGoz?=
 =?utf-8?B?a2hseHZmUnVEc1V2eU5Bb1c5WFUxNFI2OVdrZFlCaWRoV3RQRDJuWm1PZlpU?=
 =?utf-8?B?ZjFQcUJ2Ni91RVEzWTc5c2FweHZiU0c4VWtsY0tNdVArMnVsdGNXVjVpbHFS?=
 =?utf-8?B?YXdIU1BUdGlyd0NEYU5pZWl3WnJ4YzhoWmlUUWZwYXFmVE1RcUFIZXFTM25r?=
 =?utf-8?B?TCtxL3J0M1NLNEJsMmRBcGNYNGxRV25pdkJIbE14ZzRvTWN6SmU2TXNsQks0?=
 =?utf-8?B?M1Mvc0k3ck15NTgvcUt1bGc2NkVsTGUxS1dHY3Z0Rk9zeVBxbVJoYmJKUGhy?=
 =?utf-8?Q?9nFLVbV6yh8O3Xks=3D?=
X-OriginatorOrg: virtuozzo.com
X-MS-Exchange-CrossTenant-Network-Message-Id: 3a733b14-233b-48b6-6aee-08da4affbacc
X-MS-Exchange-CrossTenant-AuthSource: VE1PR08MB4989.eurprd08.prod.outlook.com
X-MS-Exchange-CrossTenant-AuthAs: Internal
X-MS-Exchange-CrossTenant-OriginalArrivalTime: 10 Jun 2022 16:39:03.8671
 (UTC)
X-MS-Exchange-CrossTenant-FromEntityHeader: Hosted
X-MS-Exchange-CrossTenant-Id: 0bc7f26d-0264-416e-a6fc-8352af79c58f
X-MS-Exchange-CrossTenant-MailboxType: HOSTED
X-MS-Exchange-CrossTenant-UserPrincipalName: CXhebvYXzrTW7ZLwwjmrDj82H48iCyf4Nv+vWc6jfng7yE7qJAZNvM9lw7EV+2gWSpiRD7UZbFdbRsT3rkPhIG5fcxTfpdzl8z21df+n4uk=
X-MS-Exchange-Transport-CrossTenantHeadersStamped: AM9PR08MB6180
X-Spam-Status: No, score=-2.3 required=5.0 tests=BAYES_00,DKIM_SIGNED,
        DKIM_VALID,DKIM_VALID_AU,DKIM_VALID_EF,FORGED_SPF_HELO,NICE_REPLY_A,
        RCVD_IN_DNSWL_NONE,RCVD_IN_MSPIKE_H2,SPF_HELO_PASS,SPF_NONE,
        T_SCC_BODY_TEXT_LINE,URIBL_BLOCKED autolearn=ham autolearn_force=no
        version=3.4.6
X-Spam-Checker-Version: SpamAssassin 3.4.6 (2021-04-09) on
        lindbergh.monkeyblade.net
Precedence: bulk
List-ID: <linux-kernel.vger.kernel.org>
X-Mailing-List: linux-kernel@vger.kernel.org

CC: kernel@openvz.org

On 10.06.2022 19:32, Pavel Tikhomirov wrote:
> Please see "Add CABA tree to task_struct" for deeper explanation, and
> "tests: Add CABA selftest" for a small test and an actual case for which
> we might need CABA.
> 
> Probably the original problem of restoring process tree with complex
> sessions can be resolved by allowing sessions copying, like we do for
> process group, but I'm not sure if that would be too secure to do it,
> and if there would not be another similar resource in future.
> 
> We can use CABA not only for CRIU for restoring processes, in normal
> life when processes detach CABA will help to understand from which place
> in process tree they were originally started from sshd/crond or
> something else.
> 
> Hope my idea is not completely insane =)
> 
> CC: Eric Biederman <ebiederm@xmission.com>
> CC: Kees Cook <keescook@chromium.org>
> CC: Alexander Viro <viro@zeniv.linux.org.uk>
> CC: Ingo Molnar <mingo@redhat.com>
> CC: Peter Zijlstra <peterz@infradead.org>
> CC: Juri Lelli <juri.lelli@redhat.com>
> CC: Vincent Guittot <vincent.guittot@linaro.org>
> CC: Dietmar Eggemann <dietmar.eggemann@arm.com>
> CC: Steven Rostedt <rostedt@goodmis.org>
> CC: Ben Segall <bsegall@google.com>
> CC: Mel Gorman <mgorman@suse.de>
> CC: Daniel Bristot de Oliveira <bristot@redhat.com>
> CC: Valentin Schneider <vschneid@redhat.com>
> CC: Andrew Morton <akpm@linux-foundation.org>
> CC: linux-ia64@vger.kernel.org
> CC: linux-kernel@vger.kernel.org
> CC: linux-mm@kvack.org
> CC: linux-fsdevel@vger.kernel.org
> 
> Pavel Tikhomirov (2):
>    Add CABA tree to task_struct
>    tests: Add CABA selftest
> 
>   arch/ia64/kernel/mca.c                   |   3 +
>   fs/exec.c                                |   1 +
>   fs/proc/array.c                          |  18 +
>   include/linux/sched.h                    |   7 +
>   init/init_task.c                         |   3 +
>   kernel/exit.c                            |  50 ++-
>   kernel/fork.c                            |   4 +
>   tools/testing/selftests/Makefile         |   1 +
>   tools/testing/selftests/caba/.gitignore  |   1 +
>   tools/testing/selftests/caba/Makefile    |   7 +
>   tools/testing/selftests/caba/caba_test.c | 501 +++++++++++++++++++++++
>   tools/testing/selftests/caba/config      |   1 +
>   12 files changed, 591 insertions(+), 6 deletions(-)
>   create mode 100644 tools/testing/selftests/caba/.gitignore
>   create mode 100644 tools/testing/selftests/caba/Makefile
>   create mode 100644 tools/testing/selftests/caba/caba_test.c
>   create mode 100644 tools/testing/selftests/caba/config
> 

-- 
Best regards, Tikhomirov Pavel
Software Developer, Virtuozzo.