Received: by 2002:a05:6358:3188:b0:123:57c1:9b43 with SMTP id q8csp6158539rwd; Mon, 19 Jun 2023 03:17:54 -0700 (PDT) X-Google-Smtp-Source: ACHHUZ5i0MPVycT7X8YzyuMH2VAfz8n4WEbU0pzS+bUvdkYWCJPO97zWBhY0xsmZ78J2Ipt3Db9H X-Received: by 2002:a05:6102:51b:b0:440:9952:5c03 with SMTP id l27-20020a056102051b00b0044099525c03mr2422838vsa.20.1687169874707; Mon, 19 Jun 2023 03:17:54 -0700 (PDT) ARC-Seal: i=1; a=rsa-sha256; t=1687169874; cv=none; d=google.com; s=arc-20160816; b=kAMu/rMKsoOIFZ8yA9aW3/7BSmS+RODoDA7W8op9bFdlEyc/s2/m5BuBlNdd8u70et ak9uy7EqRiO2iSwpcn1kUJAgUrPAjYzIeGAHwkkdfbGdEoSSgzWMpWQI8LIoywgl6TDQ e3l4XE5mCYzFKUv7bQqio7CtA8tAY3D6LnJB53V/KTSw1CdqkREd5dRL2pN0XjRQka/q tg8PE4jCVjeNxxS3wmeOrRmlL4mm4AZxfn6HE3P+m6ghzuPOld7ZLO2zi36tr61z2dId RkhKHadfKonAAnANkBxB0/v73CmRNGsKCvhGygooiQpRhkAuYtjUeaWBFbLxUukU+uEe zPog== ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=google.com; s=arc-20160816; h=list-id:precedence:content-transfer-encoding:mime-version :message-id:date:subject:cc:to:from:dkim-signature; bh=pm5bDO7dAW0U1/ZbP5zCHPn8yVTZ8TIF+oUNu//7tHw=; b=g1jIBThCQN20ce8mNOuZ4OKJQtC+fMChJCgkHgNM8d8GFAVTK0dPs0RepgPj+QY+7/ qyaYuBMdBtvgHMtxWktJdyhMA6k408gyan0XTK1Zn/D8myU/5ryEvxIuWDz4nNrNb6jS 5+e9Za3pISqrJ99Kf9I/bQm1iJDPSohOEO1pvGMUCcJT9lRWS9TF+D0DA7h6SkSYH8yA fWOwPAOALXgm/7LB5kAshDsP4QOdYI0sBgMaVk4Gh3lATFtAq15U6RsgpMOPrHSaY93Q Lw5hihPIKfpqKDG1kB2VJAfRqSJDg6DYcCnAFEGNEefAkTEz37h4mHW/+1cYALKvkiGv IZXw== ARC-Authentication-Results: i=1; mx.google.com; dkim=pass header.i=@rivosinc-com.20221208.gappssmtp.com header.s=20221208 header.b=eoKvIZdQ; spf=pass (google.com: domain of linux-kernel-owner@vger.kernel.org designates 2620:137:e000::1:20 as permitted sender) smtp.mailfrom=linux-kernel-owner@vger.kernel.org Return-Path: Received: from out1.vger.email (out1.vger.email. [2620:137:e000::1:20]) by mx.google.com with ESMTP id d10-20020a63734a000000b005347aba7376si20575010pgn.297.2023.06.19.03.17.40; Mon, 19 Jun 2023 03:17:54 -0700 (PDT) Received-SPF: pass (google.com: domain of linux-kernel-owner@vger.kernel.org designates 2620:137:e000::1:20 as permitted sender) client-ip=2620:137:e000::1:20; Authentication-Results: mx.google.com; dkim=pass header.i=@rivosinc-com.20221208.gappssmtp.com header.s=20221208 header.b=eoKvIZdQ; spf=pass (google.com: domain of linux-kernel-owner@vger.kernel.org designates 2620:137:e000::1:20 as permitted sender) smtp.mailfrom=linux-kernel-owner@vger.kernel.org Received: (majordomo@vger.kernel.org) by vger.kernel.org via listexpand id S230090AbjFSJrZ (ORCPT + 99 others); Mon, 19 Jun 2023 05:47:25 -0400 Received: from lindbergh.monkeyblade.net ([23.128.96.19]:36894 "EHLO lindbergh.monkeyblade.net" rhost-flags-OK-OK-OK-OK) by vger.kernel.org with ESMTP id S229489AbjFSJrW (ORCPT ); Mon, 19 Jun 2023 05:47:22 -0400 Received: from mail-wr1-x42d.google.com (mail-wr1-x42d.google.com [IPv6:2a00:1450:4864:20::42d]) by lindbergh.monkeyblade.net (Postfix) with ESMTPS id 13A5518D for ; Mon, 19 Jun 2023 02:47:16 -0700 (PDT) Received: by mail-wr1-x42d.google.com with SMTP id ffacd0b85a97d-3113675d582so885478f8f.3 for ; Mon, 19 Jun 2023 02:47:16 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=rivosinc-com.20221208.gappssmtp.com; s=20221208; t=1687168034; x=1689760034; h=content-transfer-encoding:mime-version:message-id:date:subject:cc :to:from:from:to:cc:subject:date:message-id:reply-to; bh=pm5bDO7dAW0U1/ZbP5zCHPn8yVTZ8TIF+oUNu//7tHw=; b=eoKvIZdQXEl0s4AQsuIPqutj8dZ3pqg+m54vtxstzp6Q0Cl1fFmcVYBGLRaGahbRvw 4WTUnVOpcgg1uKzRkVqNkc0cTFSTeg99LuqB6iFfQdZ4lcwONnwloO9/Uh7KKy6yxRo0 ID3jZMT9Jm13te2HaRdlSP3bZ4ka+kz9eBSG7NfZ6aN/qXeRSrxhqCOuT/i9I1x6CLsf ejknWxyg7oYUDdBmP2yQjBXnRKg+SxrNYPjgIpIXs1XK1kguhu0Xh36iOiKEHEFAjeBN T/00S5O8FK7uHrHczAvt9ujM+Gt1C6GFyFqzc/l46kBEjEkUfeBCqhBnhHzTaGQkvDVr AYbg== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20221208; t=1687168034; x=1689760034; h=content-transfer-encoding:mime-version:message-id:date:subject:cc :to:from:x-gm-message-state:from:to:cc:subject:date:message-id :reply-to; bh=pm5bDO7dAW0U1/ZbP5zCHPn8yVTZ8TIF+oUNu//7tHw=; b=HH9HAZjDmU23g8lgLIUa8nxUKVEkCmuPHnYxMAWgMxdJNDY0lO9dqo8SbfOm5wUYr+ nMBOIBIVlL+7tGLpbrozM1P3KH3tahbvOntVYXNWYvQrWLabT07hAP2CtXYl2DOgKz+3 6Ha4jU0vR27DM1MIvm8c+c80QPuFT48QZ/MJTkUbiGBe+rE1g8Fzh3JicfOwM9uKYJfP BRAgIruqGkZkzw0/KNkQDekmVNONRHptaiAIPsEkAcvmA+U3CdnpkJqaFOFt/SGQ++e1 3jLAPcfGG5J74kA+6cfBXUBFadtBjmdc9fRCVsv8oYqLe0h7IWYFqOfe5mFbcUuWEAW8 46BQ== X-Gm-Message-State: AC+VfDwmgkxaBP+3wCTMhVFFqUTfkUGH+CaSb9WOJjxMk97DydZH2VjY W2nFyF1IAcPmnviaaxz08GbyBxOB0S93fbC05Uc= X-Received: by 2002:adf:f952:0:b0:311:162a:ce2a with SMTP id q18-20020adff952000000b00311162ace2amr5395662wrr.29.1687168034471; Mon, 19 Jun 2023 02:47:14 -0700 (PDT) Received: from localhost.localdomain (amontpellier-656-1-456-62.w92-145.abo.wanadoo.fr. [92.145.124.62]) by smtp.gmail.com with ESMTPSA id c1-20020a5d5281000000b0030aded83385sm30971199wrv.27.2023.06.19.02.47.13 (version=TLS1_3 cipher=TLS_AES_256_GCM_SHA384 bits=256/256); Mon, 19 Jun 2023 02:47:14 -0700 (PDT) From: Alexandre Ghiti To: Jonathan Corbet , Paul Walmsley , Palmer Dabbelt , Albert Ou , linux-doc@vger.kernel.org, linux-riscv@lists.infradead.org, linux-kernel@vger.kernel.org Cc: Alexandre Ghiti Subject: [PATCH 1/2] Documentation: riscv: Add early boot document Date: Mon, 19 Jun 2023 11:47:04 +0200 Message-Id: <20230619094705.51337-1-alexghiti@rivosinc.com> X-Mailer: git-send-email 2.39.2 MIME-Version: 1.0 Content-Transfer-Encoding: 8bit X-Spam-Status: No, score=-1.9 required=5.0 tests=BAYES_00,DKIM_SIGNED, DKIM_VALID,RCVD_IN_DNSWL_NONE,SPF_HELO_NONE,SPF_PASS, T_SCC_BODY_TEXT_LINE autolearn=unavailable autolearn_force=no version=3.4.6 X-Spam-Checker-Version: SpamAssassin 3.4.6 (2021-04-09) on lindbergh.monkeyblade.net Precedence: bulk List-ID: X-Mailing-List: linux-kernel@vger.kernel.org This document describes the constraints and requirements of the early boot process in a RISC-V kernel. Szigned-off-by: Alexandre Ghiti --- Documentation/riscv/boot-image-header.rst | 3 - Documentation/riscv/boot.rst | 181 ++++++++++++++++++++++ Documentation/riscv/index.rst | 1 + 3 files changed, 182 insertions(+), 3 deletions(-) create mode 100644 Documentation/riscv/boot.rst diff --git a/Documentation/riscv/boot-image-header.rst b/Documentation/riscv/boot-image-header.rst index d7752533865f..a4a45310c4c4 100644 --- a/Documentation/riscv/boot-image-header.rst +++ b/Documentation/riscv/boot-image-header.rst @@ -7,9 +7,6 @@ Boot image header in RISC-V Linux This document only describes the boot image header details for RISC-V Linux. -TODO: - Write a complete booting guide. - The following 64-byte header is present in decompressed Linux kernel image:: u32 code0; /* Executable code */ diff --git a/Documentation/riscv/boot.rst b/Documentation/riscv/boot.rst new file mode 100644 index 000000000000..b02230818b79 --- /dev/null +++ b/Documentation/riscv/boot.rst @@ -0,0 +1,181 @@ +.. SPDX-License-Identifier: GPL-2.0 + +============================================= +Early boot requirements/constraints on RISC-V +============================================= + +:Author: Alexandre Ghiti +:Date: 23 May 2023 + +This document describes what the RISC-V kernel expects from the previous stages +and the firmware, but also the constraints that any developer must have in mind +when touching the early boot process, e.g. before the final virtual mapping is +setup. + +Pre-kernel boot (Expectations from firmware) +============================================ + +Registers state +--------------- + +The RISC-V kernel expects: + + * `$a0` to contain the hartid of the current core. + * `$a1` to contain the address of the device tree in memory. + +CSR state +--------- + +The RISC-V kernel expects: + + * `$satp = 0`: the MMU must be disabled. + +Reserved memory for resident firmware +------------------------------------- + +The RISC-V kernel expects the firmware to mark any resident memory with the +`no-map` flag, thus the kernel won't map those regions in the direct mapping +(avoiding issues with hibernation, speculative accesses and probably other +subsystems). + +Kernel location +--------------- + +The RISC-V kernel expects to be placed at a PMD boundary (2MB for rv64 and 4MB +for rv32). Note though that the EFI stub will physically relocate the kernel if +that's not the case. + +Device-tree +----------- + +The RISC-V kernel always expects a device tree, it is: + +- either passed directly to the kernel from the previous stage using the `$a1` + register, +- or when booting with UEFI, the device tree will be retrieved by the EFI stub + using the EFI configuration table or it will be created. + +Bootflow +-------- + +There exist 2 methods to enter the kernel: + +- `RISCV_BOOT_SPINWAIT`: the firmware releases all harts in the kernel, one hart + wins a lottery and executes the early boot code while the other harts are + parked waiting for the initialization to finish. This method is now + **deprecated**. +- Ordered booting: the firmware releases only one hart that will execute the + initialization phase and then will start all other harts using the SBI HSM + extension. + +UEFI +---- + +UEFI memory map +~~~~~~~~~~~~~~~ + +When booting with UEFI, the RISC-V kernel will use only the EFI memory map to +populate the system memory. + +The UEFI firmware must parse the subnodes of the `/reserved-memory` device tree +node and abide by the device tree specification to convert the attributes of +those subnodes (`no-map` and `reusable`) into their correct EFI equivalent +(refer to section "3.5.4 /reserved-memory and UEFI" of the device tree +specification). + +RISCV_EFI_BOOT_PROTOCOL +~~~~~~~~~~~~~~~~~~~~~~~ + +When booting with UEFI, the EFI stub requires the boot hartid in order to pass +it to the RISC-V kernel in `$a1`. The EFI stub retrieves the boot hartid using +one of the following methods: + +- `RISCV_EFI_BOOT_PROTOCOL` (**preferred**). +- `boot-hartid` device tree subnode (**deprecated**). + +Any new firmware must implement `RISCV_EFI_BOOT_PROTOCOL` as the device tree +based approach is deprecated now. + +During kernel boot: (Kernel internals) +====================================== + +EFI stub and device tree +------------------------ + +When booting with UEFI, the device tree is supplemented by the EFI stub with the +following parameters (largely shared with arm64 in Documentation/arm/uefi.rst): + +========================== ====== =========================================== +Name Size Description +========================== ====== =========================================== +linux,uefi-system-table 64-bit Physical address of the UEFI System Table. + +linux,uefi-mmap-start 64-bit Physical address of the UEFI memory map, + populated by the UEFI GetMemoryMap() call. + +linux,uefi-mmap-size 32-bit Size in bytes of the UEFI memory map + pointed to in previous entry. + +linux,uefi-mmap-desc-size 32-bit Size in bytes of each entry in the UEFI + memory map. + +linux,uefi-mmap-desc-ver 32-bit Version of the mmap descriptor format. + +kaslr-seed 64-bit Entropy used to randomize the kernel image + base address location. + +bootargs Kernel command line +========================== ====== =========================================== + +Virtual mapping setup +--------------------- + +The installation of the virtual mapping is done in 2 steps in the RISC-V kernel: + +1. :c:func:`setup_vm` installs a temporary kernel mapping in + :c:var:`early_pg_dir` which allows to discover the system memory: only the + kernel text/data are mapped at this point. When establishing this mapping, + no allocation can be done (since the system memory is not known yet), so + :c:var:`early_pg_dir` page table is statically allocated (using only one + table for each level). + +2. :c:func:`setup_vm_final` creates the final kernel mapping in + :c:var:`swapper_pg_dir` and takes advantage of the discovered system memory + to create the linear mapping. When establishing this mapping, the kernel + can allocate memory but cannot access it directly (since the direct mapping + is not present yet), so it uses temporary mappings in the fixmap region to + be able to access the newly allocated page table levels. + +For :c:func:`virt_to_phys` and :c:func:`phys_to_virt` to be able to correctly +convert direct mapping addresses to physical addresses, it needs to know the +start of the DRAM: this happens after 1, right before 2 installs the direct +mapping (see :c:func:`setup_bootmem` function in arch/riscv/mm/init.c). So +any usage of those macros before the final virtual mapping is installed must be +carefully examined. + +Device-tree mapping via fixmap +------------------------------ + +The RISC-V kernel uses the fixmap region to map the device tree because the +device tree virtual mapping must remain the same between :c:func:`setup_vm` and +:c:func:`setup_vm_final` calls since :c:var:`reserved_mem` array is initialized +with virtual addresses established by :c:func:`setup_vm` and used with the +mapping established by :c:func:`setup_vm_final`. + +Pre-MMU execution +----------------- + +Any code that executes before even the first virtual mapping is established +must be very carefully compiled as: + +- `-fno-pie`: This is needed for relocatable kernels which use `-fPIE`, since + otherwise, any access to a global symbol would go through the GOT which is + only relocated virtually. +- `-mcmodel=medany`: Any access to a global symbol must be PC-relative to avoid + any relocations to happen before the MMU is setup. +- Also note that *all* instrumentation must also be disabled (that includes + KASAN, ftrace and others). + +As using a symbol from a different compilation unit requires this unit to be +compiled with those flags, we advise, as much as possible, not to use external +symbols. diff --git a/Documentation/riscv/index.rst b/Documentation/riscv/index.rst index 175a91db0200..1f66062def6d 100644 --- a/Documentation/riscv/index.rst +++ b/Documentation/riscv/index.rst @@ -5,6 +5,7 @@ RISC-V architecture .. toctree:: :maxdepth: 1 + boot boot-image-header vm-layout hwprobe -- 2.39.2