2005-04-21 16:53:53 +02:00
|
|
|
/* This file contains the device dependent part of the driver for the Floppy
|
|
|
|
* Disk Controller (FDC) using the NEC PD765 chip.
|
|
|
|
*
|
|
|
|
* The file contains two entry points:
|
|
|
|
*
|
|
|
|
* floppy_task: main entry when system is brought up
|
|
|
|
*
|
|
|
|
* Changes:
|
2005-09-11 19:09:11 +02:00
|
|
|
* Sep 11, 2005 code cleanup (Andy Tanenbaum)
|
2005-04-21 16:53:53 +02:00
|
|
|
* Dec 01, 2004 floppy driver moved to user-space (Jorrit N. Herder)
|
|
|
|
* Sep 15, 2004 sync alarms/ local timer management (Jorrit N. Herder)
|
|
|
|
* Aug 12, 2003 null seek no interrupt fix (Mike Haertel)
|
|
|
|
* May 14, 2000 d-d/i rewrite (Kees J. Bot)
|
|
|
|
* Apr 04, 1992 device dependent/independent split (Kees J. Bot)
|
|
|
|
* Mar 27, 1992 last details on density checking (Kees J. Bot)
|
|
|
|
* Feb 14, 1992 check drive density on opens only (Andy Tanenbaum)
|
|
|
|
* 1991 len[] / motors / reset / step rate / ... (Bruce Evans)
|
|
|
|
* May 13, 1991 renovated the errors loop (Don Chapman)
|
|
|
|
* 1989 I/O vector to keep up with 1-1 interleave (Bruce Evans)
|
|
|
|
* Jan 06, 1988 allow 1.44 MB diskettes (Al Crew)
|
|
|
|
* Nov 28, 1986 better resetting for 386 (Peter Kay)
|
|
|
|
* Oct 27, 1986 fdc_results fixed for 8 MHz (Jakob Schripsema)
|
|
|
|
*/
|
|
|
|
|
|
|
|
#include "floppy.h"
|
|
|
|
#include <timers.h>
|
2010-03-08 12:04:59 +01:00
|
|
|
#include <machine/diskparm.h>
|
2005-07-19 15:21:51 +02:00
|
|
|
#include <minix/sysutil.h>
|
2005-04-21 16:53:53 +02:00
|
|
|
#include <minix/syslib.h>
|
2009-09-29 20:47:56 +02:00
|
|
|
#include <minix/endpoint.h>
|
Basic System Event Framework (SEF) with ping and live update.
SYSLIB CHANGES:
- SEF must be used by every system process and is thereby part of the system
library.
- The framework provides a receive() interface (sef_receive) for system
processes to automatically catch known system even messages and process them.
- SEF provides a default behavior for each type of system event, but allows
system processes to register callbacks to override the default behavior.
- Custom (local to the process) or predefined (provided by SEF) callback
implementations can be registered to SEF.
- SEF currently includes support for 2 types of system events:
1. SEF Ping. The event occurs every time RS sends a ping to figure out
whether a system process is still alive. The default callback implementation
provided by SEF is to notify RS back to let it know the process is alive
and kicking.
2. SEF Live update. The event occurs every time RS sends a prepare to update
message to let a system process know an update is available and to prepare
for it. The live update support is very basic for now. SEF only deals with
verifying if the prepare state can be supported by the process, dumping the
state for debugging purposes, and providing an event-driven programming
model to the process to react to state changes check-in when ready to update.
- SEF should be extended in the future to integrate support for more types of
system events. Ideally, all the cross-cutting concerns should be integrated into
SEF to avoid duplicating code and ease extensibility. Examples include:
* PM notify messages primarily used at shutdown.
* SYSTEM notify messages primarily used for signals.
* CLOCK notify messages used for system alarms.
* Debug messages. IS could still be in charge of fkey handling but would
forward the debug message to the target process (e.g. PM, if the user
requested debug information about PM). SEF would then catch the message and
do nothing unless the process has registered an appropriate callback to
deal with the event. This simplifies the programming model to print debug
information, avoids duplicating code, and reduces the effort to print
debug information.
SYSTEM PROCESSES CHANGES:
- Every system process registers SEF callbacks it needs to override the default
system behavior and calls sef_startup() right after being started.
- sef_startup() does almost nothing now, but will be extended in the future to
support callbacks of its own to let RS control and synchronize with every
system process at initialization time.
- Every system process calls sef_receive() now rather than receive() directly,
to let SEF handle predefined system events.
RS CHANGES:
- RS supports a basic single-component live update protocol now, as follows:
* When an update command is issued (via "service update *"), RS notifies the
target system process to prepare for a specific update state.
* If the process doesn't respond back in time, the update is aborted.
* When the process responds back, RS kills it and marks it for refreshing.
* The process is then automatically restarted as for a buggy process and can
start running again.
* Live update is currently prototyped as a controlled failure.
2009-12-21 15:12:21 +01:00
|
|
|
#include <stdio.h>
|
2005-04-21 16:53:53 +02:00
|
|
|
|
|
|
|
/* I/O Ports used by floppy disk task. */
|
|
|
|
#define DOR 0x3F2 /* motor drive control bits */
|
|
|
|
#define FDC_STATUS 0x3F4 /* floppy disk controller status register */
|
|
|
|
#define FDC_DATA 0x3F5 /* floppy disk controller data register */
|
|
|
|
#define FDC_RATE 0x3F7 /* transfer rate register */
|
|
|
|
#define DMA_ADDR 0x004 /* port for low 16 bits of DMA address */
|
2005-08-05 18:23:42 +02:00
|
|
|
#define DMA_TOP 0x081 /* port for top 8 bits of 24-bit DMA addr */
|
2005-04-21 16:53:53 +02:00
|
|
|
#define DMA_COUNT 0x005 /* port for DMA count (count = bytes - 1) */
|
|
|
|
#define DMA_FLIPFLOP 0x00C /* DMA byte pointer flip-flop */
|
|
|
|
#define DMA_MODE 0x00B /* DMA mode port */
|
|
|
|
#define DMA_INIT 0x00A /* DMA init port */
|
2005-08-05 18:23:42 +02:00
|
|
|
#define DMA_RESET_VAL 0x006
|
|
|
|
|
|
|
|
#define DMA_ADDR_MASK 0xFFFFFF /* mask to verify DMA address is 24-bit */
|
2005-04-21 16:53:53 +02:00
|
|
|
|
|
|
|
/* Status registers returned as result of operation. */
|
|
|
|
#define ST0 0x00 /* status register 0 */
|
|
|
|
#define ST1 0x01 /* status register 1 */
|
|
|
|
#define ST2 0x02 /* status register 2 */
|
|
|
|
#define ST3 0x00 /* status register 3 (return by DRIVE_SENSE) */
|
|
|
|
#define ST_CYL 0x03 /* slot where controller reports cylinder */
|
|
|
|
#define ST_HEAD 0x04 /* slot where controller reports head */
|
|
|
|
#define ST_SEC 0x05 /* slot where controller reports sector */
|
|
|
|
#define ST_PCN 0x01 /* slot where controller reports present cyl */
|
|
|
|
|
|
|
|
/* Fields within the I/O ports. */
|
|
|
|
/* Main status register. */
|
|
|
|
#define CTL_BUSY 0x10 /* bit is set when read or write in progress */
|
|
|
|
#define DIRECTION 0x40 /* bit is set when reading data reg is valid */
|
|
|
|
#define MASTER 0x80 /* bit is set when data reg can be accessed */
|
|
|
|
|
|
|
|
/* Digital output port (DOR). */
|
|
|
|
#define MOTOR_SHIFT 4 /* high 4 bits control the motors in DOR */
|
|
|
|
#define ENABLE_INT 0x0C /* used for setting DOR port */
|
|
|
|
|
|
|
|
/* ST0. */
|
2005-09-05 15:00:37 +02:00
|
|
|
#define ST0_BITS_TRANS 0xD8 /* check 4 bits of status */
|
|
|
|
#define TRANS_ST0 0x00 /* 4 bits of ST0 for READ/WRITE */
|
|
|
|
#define ST0_BITS_SEEK 0xF8 /* check top 5 bits of seek status */
|
2005-04-21 16:53:53 +02:00
|
|
|
#define SEEK_ST0 0x20 /* top 5 bits of ST0 for SEEK */
|
|
|
|
|
|
|
|
/* ST1. */
|
|
|
|
#define BAD_SECTOR 0x05 /* if these bits are set in ST1, recalibrate */
|
|
|
|
#define WRITE_PROTECT 0x02 /* bit is set if diskette is write protected */
|
|
|
|
|
|
|
|
/* ST2. */
|
|
|
|
#define BAD_CYL 0x1F /* if any of these bits are set, recalibrate */
|
|
|
|
|
|
|
|
/* ST3 (not used). */
|
|
|
|
#define ST3_FAULT 0x80 /* if this bit is set, drive is sick */
|
|
|
|
#define ST3_WR_PROTECT 0x40 /* set when diskette is write protected */
|
|
|
|
#define ST3_READY 0x20 /* set when drive is ready */
|
|
|
|
|
|
|
|
/* Floppy disk controller command bytes. */
|
|
|
|
#define FDC_SEEK 0x0F /* command the drive to seek */
|
|
|
|
#define FDC_READ 0xE6 /* command the drive to read */
|
|
|
|
#define FDC_WRITE 0xC5 /* command the drive to write */
|
|
|
|
#define FDC_SENSE 0x08 /* command the controller to tell its status */
|
|
|
|
#define FDC_RECALIBRATE 0x07 /* command the drive to go to cyl 0 */
|
|
|
|
#define FDC_SPECIFY 0x03 /* command the drive to accept params */
|
|
|
|
#define FDC_READ_ID 0x4A /* command the drive to read sector identity */
|
|
|
|
#define FDC_FORMAT 0x4D /* command the drive to format a track */
|
|
|
|
|
|
|
|
/* DMA channel commands. */
|
|
|
|
#define DMA_READ 0x46 /* DMA read opcode */
|
|
|
|
#define DMA_WRITE 0x4A /* DMA write opcode */
|
|
|
|
|
|
|
|
/* Parameters for the disk drive. */
|
|
|
|
#define HC_SIZE 2880 /* # sectors on largest legal disk (1.44MB) */
|
|
|
|
#define NR_HEADS 0x02 /* two heads (i.e., two tracks/cylinder) */
|
|
|
|
#define MAX_SECTORS 18 /* largest # sectors per track */
|
|
|
|
#define DTL 0xFF /* determines data length (sector size) */
|
|
|
|
#define SPEC2 0x02 /* second parameter to SPECIFY */
|
2008-12-11 15:42:23 +01:00
|
|
|
#define MOTOR_OFF (3*system_hz) /* how long to wait before stopping motor */
|
|
|
|
#define WAKEUP (2*system_hz) /* timeout on I/O, FDC won't quit. */
|
2005-04-21 16:53:53 +02:00
|
|
|
|
|
|
|
/* Error codes */
|
|
|
|
#define ERR_SEEK (-1) /* bad seek */
|
|
|
|
#define ERR_TRANSFER (-2) /* bad transfer */
|
|
|
|
#define ERR_STATUS (-3) /* something wrong when getting status */
|
|
|
|
#define ERR_READ_ID (-4) /* bad read id */
|
|
|
|
#define ERR_RECALIBRATE (-5) /* recalibrate didn't work properly */
|
|
|
|
#define ERR_DRIVE (-6) /* something wrong with a drive */
|
|
|
|
#define ERR_WR_PROTECT (-7) /* diskette is write protected */
|
|
|
|
#define ERR_TIMEOUT (-8) /* interrupt timeout */
|
|
|
|
|
|
|
|
/* No retries on some errors. */
|
|
|
|
#define err_no_retry(err) ((err) <= ERR_WR_PROTECT)
|
|
|
|
|
|
|
|
/* Encoding of drive type in minor device number. */
|
|
|
|
#define DEV_TYPE_BITS 0x7C /* drive type + 1, if nonzero */
|
|
|
|
#define DEV_TYPE_SHIFT 2 /* right shift to normalize type bits */
|
|
|
|
#define FORMAT_DEV_BIT 0x80 /* bit in minor to turn write into format */
|
|
|
|
|
|
|
|
/* Miscellaneous. */
|
|
|
|
#define MAX_ERRORS 6 /* how often to try rd/wt before quitting */
|
|
|
|
#define MAX_RESULTS 7 /* max number of bytes controller returns */
|
|
|
|
#define NR_DRIVES 2 /* maximum number of drives */
|
|
|
|
#define DIVISOR 128 /* used for sector size encoding */
|
|
|
|
#define SECTOR_SIZE_CODE 2 /* code to say "512" to the controller */
|
|
|
|
#define TIMEOUT_MICROS 500000L /* microseconds waiting for FDC */
|
|
|
|
#define TIMEOUT_TICKS 30 /* ticks waiting for FDC */
|
|
|
|
#define NT 7 /* number of diskette/drive combinations */
|
|
|
|
#define UNCALIBRATED 0 /* drive needs to be calibrated at next use */
|
|
|
|
#define CALIBRATED 1 /* no calibration needed */
|
|
|
|
#define BASE_SECTOR 1 /* sectors are numbered starting at 1 */
|
|
|
|
#define NO_SECTOR (-1) /* current sector unknown */
|
|
|
|
#define NO_CYL (-1) /* current cylinder unknown, must seek */
|
|
|
|
#define NO_DENS 100 /* current media unknown */
|
|
|
|
#define BSY_IDLE 0 /* busy doing nothing */
|
|
|
|
#define BSY_IO 1 /* busy doing I/O */
|
|
|
|
#define BSY_WAKEN 2 /* got a wakeup call */
|
|
|
|
|
|
|
|
/* Seven combinations of diskette/drive are supported.
|
|
|
|
*
|
|
|
|
* # Diskette Drive Sectors Tracks Rotation Data-rate Comment
|
|
|
|
* 0 360K 360K 9 40 300 RPM 250 kbps Standard PC DSDD
|
|
|
|
* 1 1.2M 1.2M 15 80 360 RPM 500 kbps AT disk in AT drive
|
|
|
|
* 2 360K 720K 9 40 300 RPM 250 kbps Quad density PC
|
|
|
|
* 3 720K 720K 9 80 300 RPM 250 kbps Toshiba, et al.
|
|
|
|
* 4 360K 1.2M 9 40 360 RPM 300 kbps PC disk in AT drive
|
|
|
|
* 5 720K 1.2M 9 80 360 RPM 300 kbps Toshiba in AT drive
|
|
|
|
* 6 1.44M 1.44M 18 80 300 RPM 500 kbps PS/2, et al.
|
|
|
|
*
|
|
|
|
* In addition, 720K diskettes can be read in 1.44MB drives, but that does
|
|
|
|
* not need a different set of parameters. This combination uses
|
|
|
|
*
|
|
|
|
* 3 720K 1.44M 9 80 300 RPM 250 kbps PS/2, et al.
|
|
|
|
*/
|
|
|
|
PRIVATE struct density {
|
|
|
|
u8_t secpt; /* sectors per track */
|
|
|
|
u8_t cyls; /* tracks per side */
|
|
|
|
u8_t steps; /* steps per cylinder (2 = double step) */
|
|
|
|
u8_t test; /* sector to try for density test */
|
|
|
|
u8_t rate; /* data rate (2=250, 1=300, 0=500 kbps) */
|
2008-12-11 15:42:23 +01:00
|
|
|
clock_t start_ms; /* motor start (milliseconds) */
|
2005-04-21 16:53:53 +02:00
|
|
|
u8_t gap; /* gap size */
|
|
|
|
u8_t spec1; /* first specify byte (SRT/HUT) */
|
|
|
|
} fdensity[NT] = {
|
2008-12-11 15:42:23 +01:00
|
|
|
{ 9, 40, 1, 4*9, 2, 500, 0x2A, 0xDF }, /* 360K / 360K */
|
|
|
|
{ 15, 80, 1, 14, 0, 500, 0x1B, 0xDF }, /* 1.2M / 1.2M */
|
|
|
|
{ 9, 40, 2, 2*9, 2, 500, 0x2A, 0xDF }, /* 360K / 720K */
|
|
|
|
{ 9, 80, 1, 4*9, 2, 750, 0x2A, 0xDF }, /* 720K / 720K */
|
|
|
|
{ 9, 40, 2, 2*9, 1, 500, 0x23, 0xDF }, /* 360K / 1.2M */
|
|
|
|
{ 9, 80, 1, 4*9, 1, 500, 0x23, 0xDF }, /* 720K / 1.2M */
|
|
|
|
{ 18, 80, 1, 17, 0, 750, 0x1B, 0xCF }, /* 1.44M / 1.44M */
|
2005-04-21 16:53:53 +02:00
|
|
|
};
|
|
|
|
|
|
|
|
/* The following table is used with the test_sector array to recognize a
|
|
|
|
* drive/floppy combination. The sector to test has been determined by
|
|
|
|
* looking at the differences in gap size, sectors/track, and double stepping.
|
|
|
|
* This means that types 0 and 3 can't be told apart, only the motor start
|
|
|
|
* time differs. If a read test succeeds then the drive is limited to the
|
|
|
|
* set of densities it can support to avoid unnecessary tests in the future.
|
|
|
|
*/
|
|
|
|
|
|
|
|
#define b(d) (1 << (d)) /* bit for density d. */
|
|
|
|
|
|
|
|
PRIVATE struct test_order {
|
|
|
|
u8_t t_density; /* floppy/drive type */
|
|
|
|
u8_t t_class; /* limit drive to this class of densities */
|
|
|
|
} test_order[NT-1] = {
|
|
|
|
{ 6, b(3) | b(6) }, /* 1.44M {720K, 1.44M} */
|
|
|
|
{ 1, b(1) | b(4) | b(5) }, /* 1.2M {1.2M, 360K, 720K} */
|
|
|
|
{ 3, b(2) | b(3) | b(6) }, /* 720K {360K, 720K, 1.44M} */
|
|
|
|
{ 4, b(1) | b(4) | b(5) }, /* 360K {1.2M, 360K, 720K} */
|
|
|
|
{ 5, b(1) | b(4) | b(5) }, /* 720K {1.2M, 360K, 720K} */
|
|
|
|
{ 2, b(2) | b(3) }, /* 360K {360K, 720K} */
|
|
|
|
/* Note that type 0 is missing, type 3 can read/write it too, which is
|
|
|
|
* why the type 3 parameters have been pessimized to be like type 0.
|
|
|
|
*/
|
|
|
|
};
|
|
|
|
|
|
|
|
/* Variables. */
|
|
|
|
PRIVATE struct floppy { /* main drive struct, one entry per drive */
|
|
|
|
unsigned fl_curcyl; /* current cylinder */
|
|
|
|
unsigned fl_hardcyl; /* hardware cylinder, as opposed to: */
|
|
|
|
unsigned fl_cylinder; /* cylinder number addressed */
|
|
|
|
unsigned fl_sector; /* sector addressed */
|
|
|
|
unsigned fl_head; /* head number addressed */
|
|
|
|
char fl_calibration; /* CALIBRATED or UNCALIBRATED */
|
|
|
|
u8_t fl_density; /* NO_DENS = ?, 0 = 360K; 1 = 360K/1.2M; etc.*/
|
|
|
|
u8_t fl_class; /* bitmap for possible densities */
|
|
|
|
timer_t fl_tmr_stop; /* timer to stop motor */
|
|
|
|
struct device fl_geom; /* Geometry of the drive */
|
|
|
|
struct device fl_part[NR_PARTITIONS]; /* partition's base & size */
|
|
|
|
} floppy[NR_DRIVES];
|
|
|
|
|
2005-05-02 16:30:04 +02:00
|
|
|
PRIVATE int irq_hook_id; /* id of irq hook at the kernel */
|
Basic System Event Framework (SEF) with ping and live update.
SYSLIB CHANGES:
- SEF must be used by every system process and is thereby part of the system
library.
- The framework provides a receive() interface (sef_receive) for system
processes to automatically catch known system even messages and process them.
- SEF provides a default behavior for each type of system event, but allows
system processes to register callbacks to override the default behavior.
- Custom (local to the process) or predefined (provided by SEF) callback
implementations can be registered to SEF.
- SEF currently includes support for 2 types of system events:
1. SEF Ping. The event occurs every time RS sends a ping to figure out
whether a system process is still alive. The default callback implementation
provided by SEF is to notify RS back to let it know the process is alive
and kicking.
2. SEF Live update. The event occurs every time RS sends a prepare to update
message to let a system process know an update is available and to prepare
for it. The live update support is very basic for now. SEF only deals with
verifying if the prepare state can be supported by the process, dumping the
state for debugging purposes, and providing an event-driven programming
model to the process to react to state changes check-in when ready to update.
- SEF should be extended in the future to integrate support for more types of
system events. Ideally, all the cross-cutting concerns should be integrated into
SEF to avoid duplicating code and ease extensibility. Examples include:
* PM notify messages primarily used at shutdown.
* SYSTEM notify messages primarily used for signals.
* CLOCK notify messages used for system alarms.
* Debug messages. IS could still be in charge of fkey handling but would
forward the debug message to the target process (e.g. PM, if the user
requested debug information about PM). SEF would then catch the message and
do nothing unless the process has registered an appropriate callback to
deal with the event. This simplifies the programming model to print debug
information, avoids duplicating code, and reduces the effort to print
debug information.
SYSTEM PROCESSES CHANGES:
- Every system process registers SEF callbacks it needs to override the default
system behavior and calls sef_startup() right after being started.
- sef_startup() does almost nothing now, but will be extended in the future to
support callbacks of its own to let RS control and synchronize with every
system process at initialization time.
- Every system process calls sef_receive() now rather than receive() directly,
to let SEF handle predefined system events.
RS CHANGES:
- RS supports a basic single-component live update protocol now, as follows:
* When an update command is issued (via "service update *"), RS notifies the
target system process to prepare for a specific update state.
* If the process doesn't respond back in time, the update is aborted.
* When the process responds back, RS kills it and marks it for refreshing.
* The process is then automatically restarted as for a buggy process and can
start running again.
* Live update is currently prototyped as a controlled failure.
2009-12-21 15:12:21 +01:00
|
|
|
PUBLIC int motor_status; /* bitmap of current motor status */
|
2005-04-21 16:53:53 +02:00
|
|
|
PRIVATE int need_reset; /* set to 1 when controller must be reset */
|
Basic System Event Framework (SEF) with ping and live update.
SYSLIB CHANGES:
- SEF must be used by every system process and is thereby part of the system
library.
- The framework provides a receive() interface (sef_receive) for system
processes to automatically catch known system even messages and process them.
- SEF provides a default behavior for each type of system event, but allows
system processes to register callbacks to override the default behavior.
- Custom (local to the process) or predefined (provided by SEF) callback
implementations can be registered to SEF.
- SEF currently includes support for 2 types of system events:
1. SEF Ping. The event occurs every time RS sends a ping to figure out
whether a system process is still alive. The default callback implementation
provided by SEF is to notify RS back to let it know the process is alive
and kicking.
2. SEF Live update. The event occurs every time RS sends a prepare to update
message to let a system process know an update is available and to prepare
for it. The live update support is very basic for now. SEF only deals with
verifying if the prepare state can be supported by the process, dumping the
state for debugging purposes, and providing an event-driven programming
model to the process to react to state changes check-in when ready to update.
- SEF should be extended in the future to integrate support for more types of
system events. Ideally, all the cross-cutting concerns should be integrated into
SEF to avoid duplicating code and ease extensibility. Examples include:
* PM notify messages primarily used at shutdown.
* SYSTEM notify messages primarily used for signals.
* CLOCK notify messages used for system alarms.
* Debug messages. IS could still be in charge of fkey handling but would
forward the debug message to the target process (e.g. PM, if the user
requested debug information about PM). SEF would then catch the message and
do nothing unless the process has registered an appropriate callback to
deal with the event. This simplifies the programming model to print debug
information, avoids duplicating code, and reduces the effort to print
debug information.
SYSTEM PROCESSES CHANGES:
- Every system process registers SEF callbacks it needs to override the default
system behavior and calls sef_startup() right after being started.
- sef_startup() does almost nothing now, but will be extended in the future to
support callbacks of its own to let RS control and synchronize with every
system process at initialization time.
- Every system process calls sef_receive() now rather than receive() directly,
to let SEF handle predefined system events.
RS CHANGES:
- RS supports a basic single-component live update protocol now, as follows:
* When an update command is issued (via "service update *"), RS notifies the
target system process to prepare for a specific update state.
* If the process doesn't respond back in time, the update is aborted.
* When the process responds back, RS kills it and marks it for refreshing.
* The process is then automatically restarted as for a buggy process and can
start running again.
* Live update is currently prototyped as a controlled failure.
2009-12-21 15:12:21 +01:00
|
|
|
PUBLIC unsigned f_drive; /* selected drive */
|
2005-04-21 16:53:53 +02:00
|
|
|
PRIVATE unsigned f_device; /* selected minor device */
|
|
|
|
PRIVATE struct floppy *f_fp; /* current drive */
|
|
|
|
PRIVATE struct density *f_dp; /* current density parameters */
|
|
|
|
PRIVATE struct density *prev_dp;/* previous density parameters */
|
|
|
|
PRIVATE unsigned f_sectors; /* equal to f_dp->secpt (needed a lot) */
|
Basic System Event Framework (SEF) with ping and live update.
SYSLIB CHANGES:
- SEF must be used by every system process and is thereby part of the system
library.
- The framework provides a receive() interface (sef_receive) for system
processes to automatically catch known system even messages and process them.
- SEF provides a default behavior for each type of system event, but allows
system processes to register callbacks to override the default behavior.
- Custom (local to the process) or predefined (provided by SEF) callback
implementations can be registered to SEF.
- SEF currently includes support for 2 types of system events:
1. SEF Ping. The event occurs every time RS sends a ping to figure out
whether a system process is still alive. The default callback implementation
provided by SEF is to notify RS back to let it know the process is alive
and kicking.
2. SEF Live update. The event occurs every time RS sends a prepare to update
message to let a system process know an update is available and to prepare
for it. The live update support is very basic for now. SEF only deals with
verifying if the prepare state can be supported by the process, dumping the
state for debugging purposes, and providing an event-driven programming
model to the process to react to state changes check-in when ready to update.
- SEF should be extended in the future to integrate support for more types of
system events. Ideally, all the cross-cutting concerns should be integrated into
SEF to avoid duplicating code and ease extensibility. Examples include:
* PM notify messages primarily used at shutdown.
* SYSTEM notify messages primarily used for signals.
* CLOCK notify messages used for system alarms.
* Debug messages. IS could still be in charge of fkey handling but would
forward the debug message to the target process (e.g. PM, if the user
requested debug information about PM). SEF would then catch the message and
do nothing unless the process has registered an appropriate callback to
deal with the event. This simplifies the programming model to print debug
information, avoids duplicating code, and reduces the effort to print
debug information.
SYSTEM PROCESSES CHANGES:
- Every system process registers SEF callbacks it needs to override the default
system behavior and calls sef_startup() right after being started.
- sef_startup() does almost nothing now, but will be extended in the future to
support callbacks of its own to let RS control and synchronize with every
system process at initialization time.
- Every system process calls sef_receive() now rather than receive() directly,
to let SEF handle predefined system events.
RS CHANGES:
- RS supports a basic single-component live update protocol now, as follows:
* When an update command is issued (via "service update *"), RS notifies the
target system process to prepare for a specific update state.
* If the process doesn't respond back in time, the update is aborted.
* When the process responds back, RS kills it and marks it for refreshing.
* The process is then automatically restarted as for a buggy process and can
start running again.
* Live update is currently prototyped as a controlled failure.
2009-12-21 15:12:21 +01:00
|
|
|
PUBLIC u16_t f_busy; /* BSY_IDLE, BSY_IO, BSY_WAKEN */
|
2005-04-21 16:53:53 +02:00
|
|
|
PRIVATE struct device *f_dv; /* device's base and size */
|
|
|
|
PRIVATE struct disk_parameter_s fmt_param; /* parameters for format */
|
|
|
|
PRIVATE u8_t f_results[MAX_RESULTS];/* the controller can give lots of output */
|
|
|
|
|
|
|
|
/* The floppy uses various timers. These are managed by the floppy driver
|
|
|
|
* itself, because only a single synchronous alarm is available per process.
|
|
|
|
* Besides the 'f_tmr_timeout' timer below, the floppy structure for each
|
|
|
|
* floppy disk drive contains a 'fl_tmr_stop' timer.
|
|
|
|
*/
|
|
|
|
PRIVATE timer_t f_tmr_timeout; /* timer for various timeouts */
|
|
|
|
PRIVATE timer_t *f_timers; /* queue of floppy timers */
|
|
|
|
PRIVATE clock_t f_next_timeout; /* the next timeout time */
|
2009-12-02 10:57:48 +01:00
|
|
|
PRIVATE u32_t system_hz; /* system clock frequency */
|
2005-07-26 14:50:25 +02:00
|
|
|
FORWARD _PROTOTYPE( void f_expire_tmrs, (struct driver *dp, message *m_ptr) );
|
2005-04-21 16:53:53 +02:00
|
|
|
FORWARD _PROTOTYPE( void f_set_timer, (timer_t *tp, clock_t delta,
|
2005-09-11 19:09:11 +02:00
|
|
|
tmr_func_t watchdog) );
|
|
|
|
FORWARD _PROTOTYPE( void stop_motor, (timer_t *tp) );
|
|
|
|
FORWARD _PROTOTYPE( void f_timeout, (timer_t *tp) );
|
2005-04-21 16:53:53 +02:00
|
|
|
|
2005-09-11 19:09:11 +02:00
|
|
|
FORWARD _PROTOTYPE( struct device *f_prepare, (int device) );
|
|
|
|
FORWARD _PROTOTYPE( char *f_name, (void) );
|
|
|
|
FORWARD _PROTOTYPE( void f_cleanup, (void) );
|
2006-11-27 15:21:43 +01:00
|
|
|
FORWARD _PROTOTYPE( int f_transfer, (int proc_nr, int opcode, u64_t position,
|
2009-12-02 10:57:48 +01:00
|
|
|
iovec_t *iov, unsigned nr_req) );
|
2005-09-11 19:09:11 +02:00
|
|
|
FORWARD _PROTOTYPE( int dma_setup, (int opcode) );
|
|
|
|
FORWARD _PROTOTYPE( void start_motor, (void) );
|
|
|
|
FORWARD _PROTOTYPE( int seek, (void) );
|
|
|
|
FORWARD _PROTOTYPE( int fdc_transfer, (int opcode) );
|
|
|
|
FORWARD _PROTOTYPE( int fdc_results, (void) );
|
|
|
|
FORWARD _PROTOTYPE( int fdc_command, (u8_t *cmd, int len) );
|
|
|
|
FORWARD _PROTOTYPE( void fdc_out, (int val) );
|
|
|
|
FORWARD _PROTOTYPE( int recalibrate, (void) );
|
|
|
|
FORWARD _PROTOTYPE( void f_reset, (void) );
|
|
|
|
FORWARD _PROTOTYPE( int f_intr_wait, (void) );
|
|
|
|
FORWARD _PROTOTYPE( int read_id, (void) );
|
|
|
|
FORWARD _PROTOTYPE( int f_do_open, (struct driver *dp, message *m_ptr) );
|
|
|
|
FORWARD _PROTOTYPE( int test_read, (int density) );
|
|
|
|
FORWARD _PROTOTYPE( void f_geometry, (struct partition *entry) );
|
2005-04-21 16:53:53 +02:00
|
|
|
|
|
|
|
/* Entry points to this driver. */
|
|
|
|
PRIVATE struct driver f_dtab = {
|
|
|
|
f_name, /* current device's name */
|
|
|
|
f_do_open, /* open or mount request, sense type of diskette */
|
|
|
|
do_nop, /* nothing on a close */
|
|
|
|
do_diocntl, /* get or set a partitions geometry */
|
|
|
|
f_prepare, /* prepare for I/O on a given minor device */
|
|
|
|
f_transfer, /* do the I/O */
|
|
|
|
f_cleanup, /* cleanup before sending reply to user process */
|
|
|
|
f_geometry, /* tell the geometry of the diskette */
|
|
|
|
f_expire_tmrs,/* expire all alarm timers */
|
2005-07-08 19:23:44 +02:00
|
|
|
nop_cancel,
|
|
|
|
nop_select,
|
2005-08-25 10:19:11 +02:00
|
|
|
NULL,
|
2005-07-08 19:23:44 +02:00
|
|
|
NULL
|
2005-04-21 16:53:53 +02:00
|
|
|
};
|
|
|
|
|
2009-09-21 16:25:54 +02:00
|
|
|
static char *floppy_buf;
|
|
|
|
static phys_bytes floppy_buf_phys;
|
|
|
|
|
Basic System Event Framework (SEF) with ping and live update.
SYSLIB CHANGES:
- SEF must be used by every system process and is thereby part of the system
library.
- The framework provides a receive() interface (sef_receive) for system
processes to automatically catch known system even messages and process them.
- SEF provides a default behavior for each type of system event, but allows
system processes to register callbacks to override the default behavior.
- Custom (local to the process) or predefined (provided by SEF) callback
implementations can be registered to SEF.
- SEF currently includes support for 2 types of system events:
1. SEF Ping. The event occurs every time RS sends a ping to figure out
whether a system process is still alive. The default callback implementation
provided by SEF is to notify RS back to let it know the process is alive
and kicking.
2. SEF Live update. The event occurs every time RS sends a prepare to update
message to let a system process know an update is available and to prepare
for it. The live update support is very basic for now. SEF only deals with
verifying if the prepare state can be supported by the process, dumping the
state for debugging purposes, and providing an event-driven programming
model to the process to react to state changes check-in when ready to update.
- SEF should be extended in the future to integrate support for more types of
system events. Ideally, all the cross-cutting concerns should be integrated into
SEF to avoid duplicating code and ease extensibility. Examples include:
* PM notify messages primarily used at shutdown.
* SYSTEM notify messages primarily used for signals.
* CLOCK notify messages used for system alarms.
* Debug messages. IS could still be in charge of fkey handling but would
forward the debug message to the target process (e.g. PM, if the user
requested debug information about PM). SEF would then catch the message and
do nothing unless the process has registered an appropriate callback to
deal with the event. This simplifies the programming model to print debug
information, avoids duplicating code, and reduces the effort to print
debug information.
SYSTEM PROCESSES CHANGES:
- Every system process registers SEF callbacks it needs to override the default
system behavior and calls sef_startup() right after being started.
- sef_startup() does almost nothing now, but will be extended in the future to
support callbacks of its own to let RS control and synchronize with every
system process at initialization time.
- Every system process calls sef_receive() now rather than receive() directly,
to let SEF handle predefined system events.
RS CHANGES:
- RS supports a basic single-component live update protocol now, as follows:
* When an update command is issued (via "service update *"), RS notifies the
target system process to prepare for a specific update state.
* If the process doesn't respond back in time, the update is aborted.
* When the process responds back, RS kills it and marks it for refreshing.
* The process is then automatically restarted as for a buggy process and can
start running again.
* Live update is currently prototyped as a controlled failure.
2009-12-21 15:12:21 +01:00
|
|
|
/* SEF functions and variables. */
|
|
|
|
FORWARD _PROTOTYPE( void sef_local_startup, (void) );
|
Initialization protocol for system services.
SYSLIB CHANGES:
- SEF framework now supports a new SEF Init request type from RS. 3 different
callbacks are available (init_fresh, init_lu, init_restart) to specify
initialization code when a service starts fresh, starts after a live update,
or restarts.
SYSTEM SERVICE CHANGES:
- Initialization code for system services is now enclosed in a callback SEF will
automatically call at init time. The return code of the callback will
tell RS whether the initialization completed successfully.
- Each init callback can access information passed by RS to initialize. As of
now, each system service has access to the public entries of RS's system process
table to gather all the information required to initialize. This design
eliminates many existing or potential races at boot time and provides a uniform
initialization interface to system services. The same interface will be reused
for the upcoming publish/subscribe model to handle dynamic
registration / deregistration of system services.
VM CHANGES:
- Uniform privilege management for all system services. Every service uses the
same call mask format. For boot services, VM copies the call mask from init
data. For dynamic services, VM still receives the call mask via rs_set_priv
call that will be soon replaced by the upcoming publish/subscribe model.
RS CHANGES:
- The system process table has been reorganized and split into private entries
and public entries. Only the latter ones are exposed to system services.
- VM call masks are now entirely configured in rs/table.c
- RS has now its own slot in the system process table. Only kernel tasks and
user processes not included in the boot image are now left out from the system
process table.
- RS implements the initialization protocol for system services.
- For services in the boot image, RS blocks till initialization is complete and
panics when failure is reported back. Services are initialized in their order of
appearance in the boot image priv table and RS blocks to implements synchronous
initialization for every system service having the flag SF_SYNCH_BOOT set.
- For services started dynamically, the initialization protocol is implemented
as though it were the first ping for the service. In this case, if the
system service fails to report back (or reports failure), RS brings the service
down rather than trying to restart it.
2010-01-08 02:20:42 +01:00
|
|
|
FORWARD _PROTOTYPE( int sef_cb_init_fresh, (int type, sef_init_info_t *info) );
|
New RS and new signal handling for system processes.
UPDATING INFO:
20100317:
/usr/src/etc/system.conf updated to ignore default kernel calls: copy
it (or merge it) to /etc/system.conf.
The hello driver (/dev/hello) added to the distribution:
# cd /usr/src/commands/scripts && make clean install
# cd /dev && MAKEDEV hello
KERNEL CHANGES:
- Generic signal handling support. The kernel no longer assumes PM as a signal
manager for every process. The signal manager of a given process can now be
specified in its privilege slot. When a signal has to be delivered, the kernel
performs the lookup and forwards the signal to the appropriate signal manager.
PM is the default signal manager for user processes, RS is the default signal
manager for system processes. To enable ptrace()ing for system processes, it
is sufficient to change the default signal manager to PM. This will temporarily
disable crash recovery, though.
- sys_exit() is now split into sys_exit() (i.e. exit() for system processes,
which generates a self-termination signal), and sys_clear() (i.e. used by PM
to ask the kernel to clear a process slot when a process exits).
- Added a new kernel call (i.e. sys_update()) to swap two process slots and
implement live update.
PM CHANGES:
- Posix signal handling is no longer allowed for system processes. System
signals are split into two fixed categories: termination and non-termination
signals. When a non-termination signaled is processed, PM transforms the signal
into an IPC message and delivers the message to the system process. When a
termination signal is processed, PM terminates the process.
- PM no longer assumes itself as the signal manager for system processes. It now
makes sure that every system signal goes through the kernel before being
actually processes. The kernel will then dispatch the signal to the appropriate
signal manager which may or may not be PM.
SYSLIB CHANGES:
- Simplified SEF init and LU callbacks.
- Added additional predefined SEF callbacks to debug crash recovery and
live update.
- Fixed a temporary ack in the SEF init protocol. SEF init reply is now
completely synchronous.
- Added SEF signal event type to provide a uniform interface for system
processes to deal with signals. A sef_cb_signal_handler() callback is
available for system processes to handle every received signal. A
sef_cb_signal_manager() callback is used by signal managers to process
system signals on behalf of the kernel.
- Fixed a few bugs with memory mapping and DS.
VM CHANGES:
- Page faults and memory requests coming from the kernel are now implemented
using signals.
- Added a new VM call to swap two process slots and implement live update.
- The call is used by RS at update time and in turn invokes the kernel call
sys_update().
RS CHANGES:
- RS has been reworked with a better functional decomposition.
- Better kernel call masks. com.h now defines the set of very basic kernel calls
every system service is allowed to use. This makes system.conf simpler and
easier to maintain. In addition, this guarantees a higher level of isolation
for system libraries that use one or more kernel calls internally (e.g. printf).
- RS is the default signal manager for system processes. By default, RS
intercepts every signal delivered to every system process. This makes crash
recovery possible before bringing PM and friends in the loop.
- RS now supports fast rollback when something goes wrong while initializing
the new version during a live update.
- Live update is now implemented by keeping the two versions side-by-side and
swapping the process slots when the old version is ready to update.
- Crash recovery is now implemented by keeping the two versions side-by-side
and cleaning up the old version only when the recovery process is complete.
DS CHANGES:
- Fixed a bug when the process doing ds_publish() or ds_delete() is not known
by DS.
- Fixed the completely broken support for strings. String publishing is now
implemented in the system library and simply wraps publishing of memory ranges.
Ideally, we should adopt a similar approach for other data types as well.
- Test suite fixed.
DRIVER CHANGES:
- The hello driver has been added to the Minix distribution to demonstrate basic
live update and crash recovery functionalities.
- Other drivers have been adapted to conform the new SEF interface.
2010-03-17 02:15:29 +01:00
|
|
|
FORWARD _PROTOTYPE( void sef_cb_signal_handler, (int signo) );
|
|
|
|
EXTERN _PROTOTYPE( int sef_cb_lu_prepare, (int state) );
|
Basic System Event Framework (SEF) with ping and live update.
SYSLIB CHANGES:
- SEF must be used by every system process and is thereby part of the system
library.
- The framework provides a receive() interface (sef_receive) for system
processes to automatically catch known system even messages and process them.
- SEF provides a default behavior for each type of system event, but allows
system processes to register callbacks to override the default behavior.
- Custom (local to the process) or predefined (provided by SEF) callback
implementations can be registered to SEF.
- SEF currently includes support for 2 types of system events:
1. SEF Ping. The event occurs every time RS sends a ping to figure out
whether a system process is still alive. The default callback implementation
provided by SEF is to notify RS back to let it know the process is alive
and kicking.
2. SEF Live update. The event occurs every time RS sends a prepare to update
message to let a system process know an update is available and to prepare
for it. The live update support is very basic for now. SEF only deals with
verifying if the prepare state can be supported by the process, dumping the
state for debugging purposes, and providing an event-driven programming
model to the process to react to state changes check-in when ready to update.
- SEF should be extended in the future to integrate support for more types of
system events. Ideally, all the cross-cutting concerns should be integrated into
SEF to avoid duplicating code and ease extensibility. Examples include:
* PM notify messages primarily used at shutdown.
* SYSTEM notify messages primarily used for signals.
* CLOCK notify messages used for system alarms.
* Debug messages. IS could still be in charge of fkey handling but would
forward the debug message to the target process (e.g. PM, if the user
requested debug information about PM). SEF would then catch the message and
do nothing unless the process has registered an appropriate callback to
deal with the event. This simplifies the programming model to print debug
information, avoids duplicating code, and reduces the effort to print
debug information.
SYSTEM PROCESSES CHANGES:
- Every system process registers SEF callbacks it needs to override the default
system behavior and calls sef_startup() right after being started.
- sef_startup() does almost nothing now, but will be extended in the future to
support callbacks of its own to let RS control and synchronize with every
system process at initialization time.
- Every system process calls sef_receive() now rather than receive() directly,
to let SEF handle predefined system events.
RS CHANGES:
- RS supports a basic single-component live update protocol now, as follows:
* When an update command is issued (via "service update *"), RS notifies the
target system process to prepare for a specific update state.
* If the process doesn't respond back in time, the update is aborted.
* When the process responds back, RS kills it and marks it for refreshing.
* The process is then automatically restarted as for a buggy process and can
start running again.
* Live update is currently prototyped as a controlled failure.
2009-12-21 15:12:21 +01:00
|
|
|
EXTERN _PROTOTYPE( int sef_cb_lu_state_isvalid, (int state) );
|
|
|
|
EXTERN _PROTOTYPE( void sef_cb_lu_state_dump, (int state) );
|
|
|
|
PUBLIC int last_transfer_opcode;
|
|
|
|
|
2005-04-21 16:53:53 +02:00
|
|
|
/*===========================================================================*
|
|
|
|
* floppy_task *
|
|
|
|
*===========================================================================*/
|
2010-02-12 15:43:18 +01:00
|
|
|
PUBLIC int main(void)
|
2005-04-21 16:53:53 +02:00
|
|
|
{
|
Basic System Event Framework (SEF) with ping and live update.
SYSLIB CHANGES:
- SEF must be used by every system process and is thereby part of the system
library.
- The framework provides a receive() interface (sef_receive) for system
processes to automatically catch known system even messages and process them.
- SEF provides a default behavior for each type of system event, but allows
system processes to register callbacks to override the default behavior.
- Custom (local to the process) or predefined (provided by SEF) callback
implementations can be registered to SEF.
- SEF currently includes support for 2 types of system events:
1. SEF Ping. The event occurs every time RS sends a ping to figure out
whether a system process is still alive. The default callback implementation
provided by SEF is to notify RS back to let it know the process is alive
and kicking.
2. SEF Live update. The event occurs every time RS sends a prepare to update
message to let a system process know an update is available and to prepare
for it. The live update support is very basic for now. SEF only deals with
verifying if the prepare state can be supported by the process, dumping the
state for debugging purposes, and providing an event-driven programming
model to the process to react to state changes check-in when ready to update.
- SEF should be extended in the future to integrate support for more types of
system events. Ideally, all the cross-cutting concerns should be integrated into
SEF to avoid duplicating code and ease extensibility. Examples include:
* PM notify messages primarily used at shutdown.
* SYSTEM notify messages primarily used for signals.
* CLOCK notify messages used for system alarms.
* Debug messages. IS could still be in charge of fkey handling but would
forward the debug message to the target process (e.g. PM, if the user
requested debug information about PM). SEF would then catch the message and
do nothing unless the process has registered an appropriate callback to
deal with the event. This simplifies the programming model to print debug
information, avoids duplicating code, and reduces the effort to print
debug information.
SYSTEM PROCESSES CHANGES:
- Every system process registers SEF callbacks it needs to override the default
system behavior and calls sef_startup() right after being started.
- sef_startup() does almost nothing now, but will be extended in the future to
support callbacks of its own to let RS control and synchronize with every
system process at initialization time.
- Every system process calls sef_receive() now rather than receive() directly,
to let SEF handle predefined system events.
RS CHANGES:
- RS supports a basic single-component live update protocol now, as follows:
* When an update command is issued (via "service update *"), RS notifies the
target system process to prepare for a specific update state.
* If the process doesn't respond back in time, the update is aborted.
* When the process responds back, RS kills it and marks it for refreshing.
* The process is then automatically restarted as for a buggy process and can
start running again.
* Live update is currently prototyped as a controlled failure.
2009-12-21 15:12:21 +01:00
|
|
|
/* SEF local startup. */
|
|
|
|
sef_local_startup();
|
|
|
|
|
Initialization protocol for system services.
SYSLIB CHANGES:
- SEF framework now supports a new SEF Init request type from RS. 3 different
callbacks are available (init_fresh, init_lu, init_restart) to specify
initialization code when a service starts fresh, starts after a live update,
or restarts.
SYSTEM SERVICE CHANGES:
- Initialization code for system services is now enclosed in a callback SEF will
automatically call at init time. The return code of the callback will
tell RS whether the initialization completed successfully.
- Each init callback can access information passed by RS to initialize. As of
now, each system service has access to the public entries of RS's system process
table to gather all the information required to initialize. This design
eliminates many existing or potential races at boot time and provides a uniform
initialization interface to system services. The same interface will be reused
for the upcoming publish/subscribe model to handle dynamic
registration / deregistration of system services.
VM CHANGES:
- Uniform privilege management for all system services. Every service uses the
same call mask format. For boot services, VM copies the call mask from init
data. For dynamic services, VM still receives the call mask via rs_set_priv
call that will be soon replaced by the upcoming publish/subscribe model.
RS CHANGES:
- The system process table has been reorganized and split into private entries
and public entries. Only the latter ones are exposed to system services.
- VM call masks are now entirely configured in rs/table.c
- RS has now its own slot in the system process table. Only kernel tasks and
user processes not included in the boot image are now left out from the system
process table.
- RS implements the initialization protocol for system services.
- For services in the boot image, RS blocks till initialization is complete and
panics when failure is reported back. Services are initialized in their order of
appearance in the boot image priv table and RS blocks to implements synchronous
initialization for every system service having the flag SF_SYNCH_BOOT set.
- For services started dynamically, the initialization protocol is implemented
as though it were the first ping for the service. In this case, if the
system service fails to report back (or reports failure), RS brings the service
down rather than trying to restart it.
2010-01-08 02:20:42 +01:00
|
|
|
/* Call the generic receive loop. */
|
|
|
|
driver_task(&f_dtab, DRIVER_STD);
|
|
|
|
|
|
|
|
return(OK);
|
|
|
|
}
|
|
|
|
|
|
|
|
/*===========================================================================*
|
|
|
|
* sef_local_startup *
|
|
|
|
*===========================================================================*/
|
2010-02-19 11:00:32 +01:00
|
|
|
PRIVATE void sef_local_startup(void)
|
Initialization protocol for system services.
SYSLIB CHANGES:
- SEF framework now supports a new SEF Init request type from RS. 3 different
callbacks are available (init_fresh, init_lu, init_restart) to specify
initialization code when a service starts fresh, starts after a live update,
or restarts.
SYSTEM SERVICE CHANGES:
- Initialization code for system services is now enclosed in a callback SEF will
automatically call at init time. The return code of the callback will
tell RS whether the initialization completed successfully.
- Each init callback can access information passed by RS to initialize. As of
now, each system service has access to the public entries of RS's system process
table to gather all the information required to initialize. This design
eliminates many existing or potential races at boot time and provides a uniform
initialization interface to system services. The same interface will be reused
for the upcoming publish/subscribe model to handle dynamic
registration / deregistration of system services.
VM CHANGES:
- Uniform privilege management for all system services. Every service uses the
same call mask format. For boot services, VM copies the call mask from init
data. For dynamic services, VM still receives the call mask via rs_set_priv
call that will be soon replaced by the upcoming publish/subscribe model.
RS CHANGES:
- The system process table has been reorganized and split into private entries
and public entries. Only the latter ones are exposed to system services.
- VM call masks are now entirely configured in rs/table.c
- RS has now its own slot in the system process table. Only kernel tasks and
user processes not included in the boot image are now left out from the system
process table.
- RS implements the initialization protocol for system services.
- For services in the boot image, RS blocks till initialization is complete and
panics when failure is reported back. Services are initialized in their order of
appearance in the boot image priv table and RS blocks to implements synchronous
initialization for every system service having the flag SF_SYNCH_BOOT set.
- For services started dynamically, the initialization protocol is implemented
as though it were the first ping for the service. In this case, if the
system service fails to report back (or reports failure), RS brings the service
down rather than trying to restart it.
2010-01-08 02:20:42 +01:00
|
|
|
{
|
|
|
|
/* Register init callbacks. */
|
|
|
|
sef_setcb_init_fresh(sef_cb_init_fresh);
|
|
|
|
sef_setcb_init_lu(sef_cb_init_fresh);
|
|
|
|
sef_setcb_init_restart(sef_cb_init_fresh);
|
|
|
|
|
|
|
|
/* Register live update callbacks. */
|
|
|
|
sef_setcb_lu_prepare(sef_cb_lu_prepare);
|
|
|
|
sef_setcb_lu_state_isvalid(sef_cb_lu_state_isvalid);
|
|
|
|
sef_setcb_lu_state_dump(sef_cb_lu_state_dump);
|
|
|
|
|
New RS and new signal handling for system processes.
UPDATING INFO:
20100317:
/usr/src/etc/system.conf updated to ignore default kernel calls: copy
it (or merge it) to /etc/system.conf.
The hello driver (/dev/hello) added to the distribution:
# cd /usr/src/commands/scripts && make clean install
# cd /dev && MAKEDEV hello
KERNEL CHANGES:
- Generic signal handling support. The kernel no longer assumes PM as a signal
manager for every process. The signal manager of a given process can now be
specified in its privilege slot. When a signal has to be delivered, the kernel
performs the lookup and forwards the signal to the appropriate signal manager.
PM is the default signal manager for user processes, RS is the default signal
manager for system processes. To enable ptrace()ing for system processes, it
is sufficient to change the default signal manager to PM. This will temporarily
disable crash recovery, though.
- sys_exit() is now split into sys_exit() (i.e. exit() for system processes,
which generates a self-termination signal), and sys_clear() (i.e. used by PM
to ask the kernel to clear a process slot when a process exits).
- Added a new kernel call (i.e. sys_update()) to swap two process slots and
implement live update.
PM CHANGES:
- Posix signal handling is no longer allowed for system processes. System
signals are split into two fixed categories: termination and non-termination
signals. When a non-termination signaled is processed, PM transforms the signal
into an IPC message and delivers the message to the system process. When a
termination signal is processed, PM terminates the process.
- PM no longer assumes itself as the signal manager for system processes. It now
makes sure that every system signal goes through the kernel before being
actually processes. The kernel will then dispatch the signal to the appropriate
signal manager which may or may not be PM.
SYSLIB CHANGES:
- Simplified SEF init and LU callbacks.
- Added additional predefined SEF callbacks to debug crash recovery and
live update.
- Fixed a temporary ack in the SEF init protocol. SEF init reply is now
completely synchronous.
- Added SEF signal event type to provide a uniform interface for system
processes to deal with signals. A sef_cb_signal_handler() callback is
available for system processes to handle every received signal. A
sef_cb_signal_manager() callback is used by signal managers to process
system signals on behalf of the kernel.
- Fixed a few bugs with memory mapping and DS.
VM CHANGES:
- Page faults and memory requests coming from the kernel are now implemented
using signals.
- Added a new VM call to swap two process slots and implement live update.
- The call is used by RS at update time and in turn invokes the kernel call
sys_update().
RS CHANGES:
- RS has been reworked with a better functional decomposition.
- Better kernel call masks. com.h now defines the set of very basic kernel calls
every system service is allowed to use. This makes system.conf simpler and
easier to maintain. In addition, this guarantees a higher level of isolation
for system libraries that use one or more kernel calls internally (e.g. printf).
- RS is the default signal manager for system processes. By default, RS
intercepts every signal delivered to every system process. This makes crash
recovery possible before bringing PM and friends in the loop.
- RS now supports fast rollback when something goes wrong while initializing
the new version during a live update.
- Live update is now implemented by keeping the two versions side-by-side and
swapping the process slots when the old version is ready to update.
- Crash recovery is now implemented by keeping the two versions side-by-side
and cleaning up the old version only when the recovery process is complete.
DS CHANGES:
- Fixed a bug when the process doing ds_publish() or ds_delete() is not known
by DS.
- Fixed the completely broken support for strings. String publishing is now
implemented in the system library and simply wraps publishing of memory ranges.
Ideally, we should adopt a similar approach for other data types as well.
- Test suite fixed.
DRIVER CHANGES:
- The hello driver has been added to the Minix distribution to demonstrate basic
live update and crash recovery functionalities.
- Other drivers have been adapted to conform the new SEF interface.
2010-03-17 02:15:29 +01:00
|
|
|
/* Register signal callbacks. */
|
|
|
|
sef_setcb_signal_handler(sef_cb_signal_handler);
|
|
|
|
|
Initialization protocol for system services.
SYSLIB CHANGES:
- SEF framework now supports a new SEF Init request type from RS. 3 different
callbacks are available (init_fresh, init_lu, init_restart) to specify
initialization code when a service starts fresh, starts after a live update,
or restarts.
SYSTEM SERVICE CHANGES:
- Initialization code for system services is now enclosed in a callback SEF will
automatically call at init time. The return code of the callback will
tell RS whether the initialization completed successfully.
- Each init callback can access information passed by RS to initialize. As of
now, each system service has access to the public entries of RS's system process
table to gather all the information required to initialize. This design
eliminates many existing or potential races at boot time and provides a uniform
initialization interface to system services. The same interface will be reused
for the upcoming publish/subscribe model to handle dynamic
registration / deregistration of system services.
VM CHANGES:
- Uniform privilege management for all system services. Every service uses the
same call mask format. For boot services, VM copies the call mask from init
data. For dynamic services, VM still receives the call mask via rs_set_priv
call that will be soon replaced by the upcoming publish/subscribe model.
RS CHANGES:
- The system process table has been reorganized and split into private entries
and public entries. Only the latter ones are exposed to system services.
- VM call masks are now entirely configured in rs/table.c
- RS has now its own slot in the system process table. Only kernel tasks and
user processes not included in the boot image are now left out from the system
process table.
- RS implements the initialization protocol for system services.
- For services in the boot image, RS blocks till initialization is complete and
panics when failure is reported back. Services are initialized in their order of
appearance in the boot image priv table and RS blocks to implements synchronous
initialization for every system service having the flag SF_SYNCH_BOOT set.
- For services started dynamically, the initialization protocol is implemented
as though it were the first ping for the service. In this case, if the
system service fails to report back (or reports failure), RS brings the service
down rather than trying to restart it.
2010-01-08 02:20:42 +01:00
|
|
|
/* Let SEF perform startup. */
|
|
|
|
sef_startup();
|
|
|
|
}
|
|
|
|
|
|
|
|
/*===========================================================================*
|
|
|
|
* sef_cb_init_fresh *
|
|
|
|
*===========================================================================*/
|
|
|
|
PRIVATE int sef_cb_init_fresh(int type, sef_init_info_t *info)
|
|
|
|
{
|
|
|
|
/* Initialize the floppy driver. */
|
|
|
|
struct floppy *fp;
|
|
|
|
int s;
|
|
|
|
|
Basic System Event Framework (SEF) with ping and live update.
SYSLIB CHANGES:
- SEF must be used by every system process and is thereby part of the system
library.
- The framework provides a receive() interface (sef_receive) for system
processes to automatically catch known system even messages and process them.
- SEF provides a default behavior for each type of system event, but allows
system processes to register callbacks to override the default behavior.
- Custom (local to the process) or predefined (provided by SEF) callback
implementations can be registered to SEF.
- SEF currently includes support for 2 types of system events:
1. SEF Ping. The event occurs every time RS sends a ping to figure out
whether a system process is still alive. The default callback implementation
provided by SEF is to notify RS back to let it know the process is alive
and kicking.
2. SEF Live update. The event occurs every time RS sends a prepare to update
message to let a system process know an update is available and to prepare
for it. The live update support is very basic for now. SEF only deals with
verifying if the prepare state can be supported by the process, dumping the
state for debugging purposes, and providing an event-driven programming
model to the process to react to state changes check-in when ready to update.
- SEF should be extended in the future to integrate support for more types of
system events. Ideally, all the cross-cutting concerns should be integrated into
SEF to avoid duplicating code and ease extensibility. Examples include:
* PM notify messages primarily used at shutdown.
* SYSTEM notify messages primarily used for signals.
* CLOCK notify messages used for system alarms.
* Debug messages. IS could still be in charge of fkey handling but would
forward the debug message to the target process (e.g. PM, if the user
requested debug information about PM). SEF would then catch the message and
do nothing unless the process has registered an appropriate callback to
deal with the event. This simplifies the programming model to print debug
information, avoids duplicating code, and reduces the effort to print
debug information.
SYSTEM PROCESSES CHANGES:
- Every system process registers SEF callbacks it needs to override the default
system behavior and calls sef_startup() right after being started.
- sef_startup() does almost nothing now, but will be extended in the future to
support callbacks of its own to let RS control and synchronize with every
system process at initialization time.
- Every system process calls sef_receive() now rather than receive() directly,
to let SEF handle predefined system events.
RS CHANGES:
- RS supports a basic single-component live update protocol now, as follows:
* When an update command is issued (via "service update *"), RS notifies the
target system process to prepare for a specific update state.
* If the process doesn't respond back in time, the update is aborted.
* When the process responds back, RS kills it and marks it for refreshing.
* The process is then automatically restarted as for a buggy process and can
start running again.
* Live update is currently prototyped as a controlled failure.
2009-12-21 15:12:21 +01:00
|
|
|
/* Initialize the floppy structure and the timers. */
|
2009-12-02 10:57:48 +01:00
|
|
|
system_hz = sys_hz();
|
|
|
|
|
2009-09-21 16:25:54 +02:00
|
|
|
if(!(floppy_buf = alloc_contig(2*DMA_BUF_SIZE,
|
|
|
|
AC_LOWER16M | AC_ALIGN4K, &floppy_buf_phys)))
|
2010-03-05 16:05:11 +01:00
|
|
|
panic("couldn't allocate dma buffer");
|
2008-11-19 13:26:10 +01:00
|
|
|
|
2005-04-21 16:53:53 +02:00
|
|
|
f_next_timeout = TMR_NEVER;
|
|
|
|
tmr_inittimer(&f_tmr_timeout);
|
|
|
|
|
|
|
|
for (fp = &floppy[0]; fp < &floppy[NR_DRIVES]; fp++) {
|
|
|
|
fp->fl_curcyl = NO_CYL;
|
|
|
|
fp->fl_density = NO_DENS;
|
|
|
|
fp->fl_class = ~0;
|
|
|
|
tmr_inittimer(&fp->fl_tmr_stop);
|
|
|
|
}
|
|
|
|
|
2005-07-29 14:44:42 +02:00
|
|
|
/* Set IRQ policy, only request notifications, do not automatically
|
|
|
|
* reenable interrupts. ID return on interrupt is the IRQ line number.
|
|
|
|
*/
|
|
|
|
irq_hook_id = FLOPPY_IRQ;
|
2005-05-02 16:30:04 +02:00
|
|
|
if ((s=sys_irqsetpolicy(FLOPPY_IRQ, 0, &irq_hook_id )) != OK)
|
2010-03-05 16:05:11 +01:00
|
|
|
panic("Couldn't set IRQ policy: %d", s);
|
2005-05-02 16:30:04 +02:00
|
|
|
if ((s=sys_irqenable(&irq_hook_id)) != OK)
|
2010-03-05 16:05:11 +01:00
|
|
|
panic("Couldn't enable IRQs: %d", s);
|
2005-04-21 16:53:53 +02:00
|
|
|
|
Initialization protocol for system services.
SYSLIB CHANGES:
- SEF framework now supports a new SEF Init request type from RS. 3 different
callbacks are available (init_fresh, init_lu, init_restart) to specify
initialization code when a service starts fresh, starts after a live update,
or restarts.
SYSTEM SERVICE CHANGES:
- Initialization code for system services is now enclosed in a callback SEF will
automatically call at init time. The return code of the callback will
tell RS whether the initialization completed successfully.
- Each init callback can access information passed by RS to initialize. As of
now, each system service has access to the public entries of RS's system process
table to gather all the information required to initialize. This design
eliminates many existing or potential races at boot time and provides a uniform
initialization interface to system services. The same interface will be reused
for the upcoming publish/subscribe model to handle dynamic
registration / deregistration of system services.
VM CHANGES:
- Uniform privilege management for all system services. Every service uses the
same call mask format. For boot services, VM copies the call mask from init
data. For dynamic services, VM still receives the call mask via rs_set_priv
call that will be soon replaced by the upcoming publish/subscribe model.
RS CHANGES:
- The system process table has been reorganized and split into private entries
and public entries. Only the latter ones are exposed to system services.
- VM call masks are now entirely configured in rs/table.c
- RS has now its own slot in the system process table. Only kernel tasks and
user processes not included in the boot image are now left out from the system
process table.
- RS implements the initialization protocol for system services.
- For services in the boot image, RS blocks till initialization is complete and
panics when failure is reported back. Services are initialized in their order of
appearance in the boot image priv table and RS blocks to implements synchronous
initialization for every system service having the flag SF_SYNCH_BOOT set.
- For services started dynamically, the initialization protocol is implemented
as though it were the first ping for the service. In this case, if the
system service fails to report back (or reports failure), RS brings the service
down rather than trying to restart it.
2010-01-08 02:20:42 +01:00
|
|
|
return(OK);
|
Basic System Event Framework (SEF) with ping and live update.
SYSLIB CHANGES:
- SEF must be used by every system process and is thereby part of the system
library.
- The framework provides a receive() interface (sef_receive) for system
processes to automatically catch known system even messages and process them.
- SEF provides a default behavior for each type of system event, but allows
system processes to register callbacks to override the default behavior.
- Custom (local to the process) or predefined (provided by SEF) callback
implementations can be registered to SEF.
- SEF currently includes support for 2 types of system events:
1. SEF Ping. The event occurs every time RS sends a ping to figure out
whether a system process is still alive. The default callback implementation
provided by SEF is to notify RS back to let it know the process is alive
and kicking.
2. SEF Live update. The event occurs every time RS sends a prepare to update
message to let a system process know an update is available and to prepare
for it. The live update support is very basic for now. SEF only deals with
verifying if the prepare state can be supported by the process, dumping the
state for debugging purposes, and providing an event-driven programming
model to the process to react to state changes check-in when ready to update.
- SEF should be extended in the future to integrate support for more types of
system events. Ideally, all the cross-cutting concerns should be integrated into
SEF to avoid duplicating code and ease extensibility. Examples include:
* PM notify messages primarily used at shutdown.
* SYSTEM notify messages primarily used for signals.
* CLOCK notify messages used for system alarms.
* Debug messages. IS could still be in charge of fkey handling but would
forward the debug message to the target process (e.g. PM, if the user
requested debug information about PM). SEF would then catch the message and
do nothing unless the process has registered an appropriate callback to
deal with the event. This simplifies the programming model to print debug
information, avoids duplicating code, and reduces the effort to print
debug information.
SYSTEM PROCESSES CHANGES:
- Every system process registers SEF callbacks it needs to override the default
system behavior and calls sef_startup() right after being started.
- sef_startup() does almost nothing now, but will be extended in the future to
support callbacks of its own to let RS control and synchronize with every
system process at initialization time.
- Every system process calls sef_receive() now rather than receive() directly,
to let SEF handle predefined system events.
RS CHANGES:
- RS supports a basic single-component live update protocol now, as follows:
* When an update command is issued (via "service update *"), RS notifies the
target system process to prepare for a specific update state.
* If the process doesn't respond back in time, the update is aborted.
* When the process responds back, RS kills it and marks it for refreshing.
* The process is then automatically restarted as for a buggy process and can
start running again.
* Live update is currently prototyped as a controlled failure.
2009-12-21 15:12:21 +01:00
|
|
|
}
|
|
|
|
|
New RS and new signal handling for system processes.
UPDATING INFO:
20100317:
/usr/src/etc/system.conf updated to ignore default kernel calls: copy
it (or merge it) to /etc/system.conf.
The hello driver (/dev/hello) added to the distribution:
# cd /usr/src/commands/scripts && make clean install
# cd /dev && MAKEDEV hello
KERNEL CHANGES:
- Generic signal handling support. The kernel no longer assumes PM as a signal
manager for every process. The signal manager of a given process can now be
specified in its privilege slot. When a signal has to be delivered, the kernel
performs the lookup and forwards the signal to the appropriate signal manager.
PM is the default signal manager for user processes, RS is the default signal
manager for system processes. To enable ptrace()ing for system processes, it
is sufficient to change the default signal manager to PM. This will temporarily
disable crash recovery, though.
- sys_exit() is now split into sys_exit() (i.e. exit() for system processes,
which generates a self-termination signal), and sys_clear() (i.e. used by PM
to ask the kernel to clear a process slot when a process exits).
- Added a new kernel call (i.e. sys_update()) to swap two process slots and
implement live update.
PM CHANGES:
- Posix signal handling is no longer allowed for system processes. System
signals are split into two fixed categories: termination and non-termination
signals. When a non-termination signaled is processed, PM transforms the signal
into an IPC message and delivers the message to the system process. When a
termination signal is processed, PM terminates the process.
- PM no longer assumes itself as the signal manager for system processes. It now
makes sure that every system signal goes through the kernel before being
actually processes. The kernel will then dispatch the signal to the appropriate
signal manager which may or may not be PM.
SYSLIB CHANGES:
- Simplified SEF init and LU callbacks.
- Added additional predefined SEF callbacks to debug crash recovery and
live update.
- Fixed a temporary ack in the SEF init protocol. SEF init reply is now
completely synchronous.
- Added SEF signal event type to provide a uniform interface for system
processes to deal with signals. A sef_cb_signal_handler() callback is
available for system processes to handle every received signal. A
sef_cb_signal_manager() callback is used by signal managers to process
system signals on behalf of the kernel.
- Fixed a few bugs with memory mapping and DS.
VM CHANGES:
- Page faults and memory requests coming from the kernel are now implemented
using signals.
- Added a new VM call to swap two process slots and implement live update.
- The call is used by RS at update time and in turn invokes the kernel call
sys_update().
RS CHANGES:
- RS has been reworked with a better functional decomposition.
- Better kernel call masks. com.h now defines the set of very basic kernel calls
every system service is allowed to use. This makes system.conf simpler and
easier to maintain. In addition, this guarantees a higher level of isolation
for system libraries that use one or more kernel calls internally (e.g. printf).
- RS is the default signal manager for system processes. By default, RS
intercepts every signal delivered to every system process. This makes crash
recovery possible before bringing PM and friends in the loop.
- RS now supports fast rollback when something goes wrong while initializing
the new version during a live update.
- Live update is now implemented by keeping the two versions side-by-side and
swapping the process slots when the old version is ready to update.
- Crash recovery is now implemented by keeping the two versions side-by-side
and cleaning up the old version only when the recovery process is complete.
DS CHANGES:
- Fixed a bug when the process doing ds_publish() or ds_delete() is not known
by DS.
- Fixed the completely broken support for strings. String publishing is now
implemented in the system library and simply wraps publishing of memory ranges.
Ideally, we should adopt a similar approach for other data types as well.
- Test suite fixed.
DRIVER CHANGES:
- The hello driver has been added to the Minix distribution to demonstrate basic
live update and crash recovery functionalities.
- Other drivers have been adapted to conform the new SEF interface.
2010-03-17 02:15:29 +01:00
|
|
|
/*===========================================================================*
|
|
|
|
* sef_cb_signal_handler *
|
|
|
|
*===========================================================================*/
|
|
|
|
PRIVATE void sef_cb_signal_handler(int signo)
|
|
|
|
{
|
|
|
|
int s;
|
|
|
|
|
|
|
|
/* Only check for termination signal, ignore anything else. */
|
|
|
|
if (signo != SIGTERM) return;
|
|
|
|
|
|
|
|
/* Stop all activity and cleanly exit with the system. */
|
|
|
|
if ((s=sys_outb(DOR, ENABLE_INT)) != OK)
|
|
|
|
panic("Sys_outb failed: %d", s);
|
|
|
|
exit(0);
|
|
|
|
}
|
|
|
|
|
2005-04-21 16:53:53 +02:00
|
|
|
/*===========================================================================*
|
|
|
|
* f_expire_tmrs *
|
|
|
|
*===========================================================================*/
|
2005-07-26 14:50:25 +02:00
|
|
|
PRIVATE void f_expire_tmrs(struct driver *dp, message *m_ptr)
|
2005-04-21 16:53:53 +02:00
|
|
|
{
|
|
|
|
/* A synchronous alarm message was received. Check if there are any expired
|
|
|
|
* timers. Possibly reschedule the next alarm.
|
|
|
|
*/
|
|
|
|
clock_t now; /* current time */
|
|
|
|
int s;
|
|
|
|
|
|
|
|
/* Get the current time to compare the timers against. */
|
2005-07-14 17:15:18 +02:00
|
|
|
if ((s=getuptime(&now)) != OK)
|
2010-03-05 16:05:11 +01:00
|
|
|
panic("Couldn't get uptime from clock: %d", s);
|
2005-04-21 16:53:53 +02:00
|
|
|
|
|
|
|
/* Scan the timers queue for expired timers. Dispatch the watchdog function
|
|
|
|
* for each expired timers. FLOPPY watchdog functions are f_tmr_timeout()
|
|
|
|
* and stop_motor(). Possibly a new alarm call must be scheduled.
|
|
|
|
*/
|
2005-06-17 15:37:41 +02:00
|
|
|
tmrs_exptimers(&f_timers, now, NULL);
|
2005-04-21 16:53:53 +02:00
|
|
|
if (f_timers == NULL) {
|
|
|
|
f_next_timeout = TMR_NEVER;
|
|
|
|
} else { /* set new sync alarm */
|
|
|
|
f_next_timeout = f_timers->tmr_exp_time;
|
2005-07-29 17:00:22 +02:00
|
|
|
if ((s=sys_setalarm(f_next_timeout, 1)) != OK)
|
2010-03-05 16:05:11 +01:00
|
|
|
panic("Couldn't set synchronous alarm: %d", s);
|
2005-04-21 16:53:53 +02:00
|
|
|
}
|
|
|
|
}
|
|
|
|
|
|
|
|
/*===========================================================================*
|
|
|
|
* f_set_timer *
|
|
|
|
*===========================================================================*/
|
|
|
|
PRIVATE void f_set_timer(tp, delta, watchdog)
|
|
|
|
timer_t *tp; /* timer to be set */
|
|
|
|
clock_t delta; /* in how many ticks */
|
|
|
|
tmr_func_t watchdog; /* watchdog function to be called */
|
|
|
|
{
|
|
|
|
clock_t now; /* current time */
|
|
|
|
int s;
|
|
|
|
|
|
|
|
/* Get the current time. */
|
2005-07-14 17:15:18 +02:00
|
|
|
if ((s=getuptime(&now)) != OK)
|
2010-03-05 16:05:11 +01:00
|
|
|
panic("Couldn't get uptime from clock: %d", s);
|
2005-04-21 16:53:53 +02:00
|
|
|
|
|
|
|
/* Add the timer to the local timer queue. */
|
2005-06-17 15:37:41 +02:00
|
|
|
tmrs_settimer(&f_timers, tp, now + delta, watchdog, NULL);
|
2005-04-21 16:53:53 +02:00
|
|
|
|
|
|
|
/* Possibly reschedule an alarm call. This happens when the front of the
|
|
|
|
* timers queue was reinserted at another position, i.e., when a timer was
|
|
|
|
* reset, or when a new timer was added in front.
|
|
|
|
*/
|
|
|
|
if (f_timers->tmr_exp_time != f_next_timeout) {
|
|
|
|
f_next_timeout = f_timers->tmr_exp_time;
|
2005-07-29 17:00:22 +02:00
|
|
|
if ((s=sys_setalarm(f_next_timeout, 1)) != OK)
|
2010-03-05 16:05:11 +01:00
|
|
|
panic("Couldn't set synchronous alarm: %d", s);
|
2005-04-21 16:53:53 +02:00
|
|
|
}
|
|
|
|
}
|
|
|
|
|
|
|
|
/*===========================================================================*
|
|
|
|
* f_prepare *
|
|
|
|
*===========================================================================*/
|
2010-02-19 11:00:32 +01:00
|
|
|
PRIVATE struct device *f_prepare(int device)
|
2005-04-21 16:53:53 +02:00
|
|
|
{
|
|
|
|
/* Prepare for I/O on a device. */
|
|
|
|
|
|
|
|
f_device = device;
|
|
|
|
f_drive = device & ~(DEV_TYPE_BITS | FORMAT_DEV_BIT);
|
|
|
|
if (f_drive < 0 || f_drive >= NR_DRIVES) return(NIL_DEV);
|
|
|
|
|
|
|
|
f_fp = &floppy[f_drive];
|
|
|
|
f_dv = &f_fp->fl_geom;
|
|
|
|
if (f_fp->fl_density < NT) {
|
|
|
|
f_dp = &fdensity[f_fp->fl_density];
|
|
|
|
f_sectors = f_dp->secpt;
|
|
|
|
f_fp->fl_geom.dv_size = mul64u((long) (NR_HEADS * f_sectors
|
|
|
|
* f_dp->cyls), SECTOR_SIZE);
|
|
|
|
}
|
|
|
|
|
|
|
|
/* A partition? */
|
|
|
|
if ((device &= DEV_TYPE_BITS) >= MINOR_fd0p0)
|
|
|
|
f_dv = &f_fp->fl_part[(device - MINOR_fd0p0) >> DEV_TYPE_SHIFT];
|
|
|
|
|
|
|
|
return f_dv;
|
|
|
|
}
|
|
|
|
|
|
|
|
/*===========================================================================*
|
|
|
|
* f_name *
|
|
|
|
*===========================================================================*/
|
2010-02-19 11:00:32 +01:00
|
|
|
PRIVATE char *f_name(void)
|
2005-04-21 16:53:53 +02:00
|
|
|
{
|
|
|
|
/* Return a name for the current device. */
|
|
|
|
static char name[] = "fd0";
|
|
|
|
|
|
|
|
name[2] = '0' + f_drive;
|
|
|
|
return name;
|
|
|
|
}
|
|
|
|
|
|
|
|
/*===========================================================================*
|
|
|
|
* f_cleanup *
|
|
|
|
*===========================================================================*/
|
2010-02-19 11:00:32 +01:00
|
|
|
PRIVATE void f_cleanup(void)
|
2005-04-21 16:53:53 +02:00
|
|
|
{
|
|
|
|
/* Start a timer to turn the motor off in a few seconds. */
|
|
|
|
tmr_arg(&f_fp->fl_tmr_stop)->ta_int = f_drive;
|
|
|
|
f_set_timer(&f_fp->fl_tmr_stop, MOTOR_OFF, stop_motor);
|
|
|
|
|
|
|
|
/* Exiting the floppy driver, so forget where we are. */
|
|
|
|
f_fp->fl_sector = NO_SECTOR;
|
|
|
|
}
|
|
|
|
|
|
|
|
/*===========================================================================*
|
|
|
|
* f_transfer *
|
|
|
|
*===========================================================================*/
|
2009-12-02 10:57:48 +01:00
|
|
|
PRIVATE int f_transfer(proc_nr, opcode, pos64, iov, nr_req)
|
2005-04-21 16:53:53 +02:00
|
|
|
int proc_nr; /* process doing the request */
|
2007-02-07 17:22:19 +01:00
|
|
|
int opcode; /* DEV_GATHER_S or DEV_SCATTER_S */
|
2006-11-27 15:21:43 +01:00
|
|
|
u64_t pos64; /* offset on device to read or write */
|
2005-04-21 16:53:53 +02:00
|
|
|
iovec_t *iov; /* pointer to read or write request vector */
|
|
|
|
unsigned nr_req; /* length of request vector */
|
|
|
|
{
|
2006-06-20 10:54:22 +02:00
|
|
|
#define NO_OFFSET -1
|
2005-04-21 16:53:53 +02:00
|
|
|
struct floppy *fp = f_fp;
|
|
|
|
iovec_t *iop, *iov_end = iov + nr_req;
|
2006-06-20 10:54:22 +02:00
|
|
|
int s, r, errors, nr;
|
2005-04-21 16:53:53 +02:00
|
|
|
unsigned block; /* Seen any 32M floppies lately? */
|
|
|
|
unsigned nbytes, count, chunk, sector;
|
|
|
|
unsigned long dv_size = cv64ul(f_dv->dv_size);
|
2006-06-20 10:54:22 +02:00
|
|
|
vir_bytes user_offset, iov_offset = 0, iop_offset;
|
2006-11-27 15:21:43 +01:00
|
|
|
off_t position;
|
2006-06-20 10:54:22 +02:00
|
|
|
signed long uoffsets[MAX_SECTORS], *up;
|
|
|
|
cp_grant_id_t ugrants[MAX_SECTORS], *ug;
|
2005-04-21 16:53:53 +02:00
|
|
|
u8_t cmd[3];
|
|
|
|
|
2006-11-27 15:21:43 +01:00
|
|
|
if (ex64hi(pos64) != 0)
|
|
|
|
return OK; /* Way beyond EOF */
|
|
|
|
position= cv64ul(pos64);
|
|
|
|
|
Basic System Event Framework (SEF) with ping and live update.
SYSLIB CHANGES:
- SEF must be used by every system process and is thereby part of the system
library.
- The framework provides a receive() interface (sef_receive) for system
processes to automatically catch known system even messages and process them.
- SEF provides a default behavior for each type of system event, but allows
system processes to register callbacks to override the default behavior.
- Custom (local to the process) or predefined (provided by SEF) callback
implementations can be registered to SEF.
- SEF currently includes support for 2 types of system events:
1. SEF Ping. The event occurs every time RS sends a ping to figure out
whether a system process is still alive. The default callback implementation
provided by SEF is to notify RS back to let it know the process is alive
and kicking.
2. SEF Live update. The event occurs every time RS sends a prepare to update
message to let a system process know an update is available and to prepare
for it. The live update support is very basic for now. SEF only deals with
verifying if the prepare state can be supported by the process, dumping the
state for debugging purposes, and providing an event-driven programming
model to the process to react to state changes check-in when ready to update.
- SEF should be extended in the future to integrate support for more types of
system events. Ideally, all the cross-cutting concerns should be integrated into
SEF to avoid duplicating code and ease extensibility. Examples include:
* PM notify messages primarily used at shutdown.
* SYSTEM notify messages primarily used for signals.
* CLOCK notify messages used for system alarms.
* Debug messages. IS could still be in charge of fkey handling but would
forward the debug message to the target process (e.g. PM, if the user
requested debug information about PM). SEF would then catch the message and
do nothing unless the process has registered an appropriate callback to
deal with the event. This simplifies the programming model to print debug
information, avoids duplicating code, and reduces the effort to print
debug information.
SYSTEM PROCESSES CHANGES:
- Every system process registers SEF callbacks it needs to override the default
system behavior and calls sef_startup() right after being started.
- sef_startup() does almost nothing now, but will be extended in the future to
support callbacks of its own to let RS control and synchronize with every
system process at initialization time.
- Every system process calls sef_receive() now rather than receive() directly,
to let SEF handle predefined system events.
RS CHANGES:
- RS supports a basic single-component live update protocol now, as follows:
* When an update command is issued (via "service update *"), RS notifies the
target system process to prepare for a specific update state.
* If the process doesn't respond back in time, the update is aborted.
* When the process responds back, RS kills it and marks it for refreshing.
* The process is then automatically restarted as for a buggy process and can
start running again.
* Live update is currently prototyped as a controlled failure.
2009-12-21 15:12:21 +01:00
|
|
|
/* Record the opcode of the last transfer performed. */
|
|
|
|
last_transfer_opcode = opcode;
|
|
|
|
|
2005-04-21 16:53:53 +02:00
|
|
|
/* Check disk address. */
|
|
|
|
if ((position & SECTOR_MASK) != 0) return(EINVAL);
|
|
|
|
|
2006-05-11 16:52:40 +02:00
|
|
|
#if 0 /* XXX hack to create a disk driver that crashes */
|
|
|
|
{ static int count= 0; if (++count > 10) {
|
|
|
|
printf("floppy: time to die\n"); *(int *)-1= 42;
|
|
|
|
}}
|
|
|
|
#endif
|
|
|
|
|
2005-04-21 16:53:53 +02:00
|
|
|
errors = 0;
|
|
|
|
while (nr_req > 0) {
|
|
|
|
/* How many bytes to transfer? */
|
|
|
|
nbytes = 0;
|
|
|
|
for (iop = iov; iop < iov_end; iop++) nbytes += iop->iov_size;
|
|
|
|
|
|
|
|
/* Which block on disk and how close to EOF? */
|
|
|
|
if (position >= dv_size) return(OK); /* At EOF */
|
|
|
|
if (position + nbytes > dv_size) nbytes = dv_size - position;
|
|
|
|
block = div64u(add64ul(f_dv->dv_base, position), SECTOR_SIZE);
|
|
|
|
|
|
|
|
if ((nbytes & SECTOR_MASK) != 0) return(EINVAL);
|
|
|
|
|
|
|
|
/* Using a formatting device? */
|
|
|
|
if (f_device & FORMAT_DEV_BIT) {
|
2007-02-07 17:22:19 +01:00
|
|
|
if (opcode != DEV_SCATTER_S) return(EIO);
|
2005-04-21 16:53:53 +02:00
|
|
|
if (iov->iov_size < SECTOR_SIZE + sizeof(fmt_param))
|
|
|
|
return(EINVAL);
|
|
|
|
|
2009-12-02 10:57:48 +01:00
|
|
|
if(proc_nr != SELF) {
|
2006-06-20 10:54:22 +02:00
|
|
|
s=sys_safecopyfrom(proc_nr, iov->iov_addr,
|
|
|
|
SECTOR_SIZE + iov_offset, (vir_bytes) &fmt_param,
|
|
|
|
(phys_bytes) sizeof(fmt_param), D);
|
2007-10-16 16:31:35 +02:00
|
|
|
if(s != OK)
|
2010-03-05 16:05:11 +01:00
|
|
|
panic("sys_safecopyfrom failed: %d", s);
|
2006-06-20 10:54:22 +02:00
|
|
|
} else {
|
2007-10-16 16:31:35 +02:00
|
|
|
memcpy(&fmt_param, (void *) (iov->iov_addr +
|
|
|
|
SECTOR_SIZE + iov_offset),
|
|
|
|
(phys_bytes) sizeof(fmt_param));
|
2006-06-20 10:54:22 +02:00
|
|
|
}
|
|
|
|
|
2005-04-21 16:53:53 +02:00
|
|
|
/* Check that the number of sectors in the data is reasonable,
|
|
|
|
* to avoid division by 0. Leave checking of other data to
|
|
|
|
* the FDC.
|
|
|
|
*/
|
|
|
|
if (fmt_param.sectors_per_cylinder == 0) return(EIO);
|
|
|
|
|
|
|
|
/* Only the first sector of the parameters now needed. */
|
|
|
|
iov->iov_size = nbytes = SECTOR_SIZE;
|
|
|
|
}
|
|
|
|
|
|
|
|
/* Only try one sector if there were errors. */
|
|
|
|
if (errors > 0) nbytes = SECTOR_SIZE;
|
|
|
|
|
|
|
|
/* Compute cylinder and head of the track to access. */
|
|
|
|
fp->fl_cylinder = block / (NR_HEADS * f_sectors);
|
|
|
|
fp->fl_hardcyl = fp->fl_cylinder * f_dp->steps;
|
|
|
|
fp->fl_head = (block % (NR_HEADS * f_sectors)) / f_sectors;
|
|
|
|
|
|
|
|
/* For each sector on this track compute the user address it is to
|
|
|
|
* go or to come from.
|
|
|
|
*/
|
2006-06-20 10:54:22 +02:00
|
|
|
for (up = uoffsets; up < uoffsets + MAX_SECTORS; up++) *up = NO_OFFSET;
|
2005-04-21 16:53:53 +02:00
|
|
|
count = 0;
|
|
|
|
iop = iov;
|
|
|
|
sector = block % f_sectors;
|
2006-06-20 10:54:22 +02:00
|
|
|
nr = 0;
|
|
|
|
iop_offset = iov_offset;
|
2005-04-21 16:53:53 +02:00
|
|
|
for (;;) {
|
2006-06-20 10:54:22 +02:00
|
|
|
nr++;
|
|
|
|
user_offset = iop_offset;
|
2005-04-21 16:53:53 +02:00
|
|
|
chunk = iop->iov_size;
|
|
|
|
if ((chunk & SECTOR_MASK) != 0) return(EINVAL);
|
|
|
|
|
|
|
|
while (chunk > 0) {
|
2006-06-20 10:54:22 +02:00
|
|
|
ugrants[sector] = iop->iov_addr;
|
|
|
|
uoffsets[sector++] = user_offset;
|
2005-04-21 16:53:53 +02:00
|
|
|
chunk -= SECTOR_SIZE;
|
2006-06-20 10:54:22 +02:00
|
|
|
user_offset += SECTOR_SIZE;
|
2005-04-21 16:53:53 +02:00
|
|
|
count += SECTOR_SIZE;
|
|
|
|
if (sector == f_sectors || count == nbytes)
|
|
|
|
goto track_set_up;
|
|
|
|
}
|
2006-06-20 10:54:22 +02:00
|
|
|
iop_offset = 0;
|
2005-04-21 16:53:53 +02:00
|
|
|
iop++;
|
|
|
|
}
|
|
|
|
track_set_up:
|
|
|
|
|
|
|
|
/* First check to see if a reset is needed. */
|
|
|
|
if (need_reset) f_reset();
|
|
|
|
|
|
|
|
/* See if motor is running; if not, turn it on and wait. */
|
|
|
|
start_motor();
|
|
|
|
|
|
|
|
/* Set the stepping rate and data rate */
|
|
|
|
if (f_dp != prev_dp) {
|
|
|
|
cmd[0] = FDC_SPECIFY;
|
|
|
|
cmd[1] = f_dp->spec1;
|
|
|
|
cmd[2] = SPEC2;
|
|
|
|
(void) fdc_command(cmd, 3);
|
|
|
|
if ((s=sys_outb(FDC_RATE, f_dp->rate)) != OK)
|
2010-03-05 16:05:11 +01:00
|
|
|
panic("Sys_outb failed: %d", s);
|
2005-04-21 16:53:53 +02:00
|
|
|
prev_dp = f_dp;
|
|
|
|
}
|
|
|
|
|
|
|
|
/* If we are going to a new cylinder, perform a seek. */
|
|
|
|
r = seek();
|
|
|
|
|
|
|
|
/* Avoid read_id() if we don't plan to read much. */
|
|
|
|
if (fp->fl_sector == NO_SECTOR && count < (6 * SECTOR_SIZE))
|
|
|
|
fp->fl_sector = 0;
|
|
|
|
|
|
|
|
for (nbytes = 0; nbytes < count; nbytes += SECTOR_SIZE) {
|
|
|
|
if (fp->fl_sector == NO_SECTOR) {
|
|
|
|
/* Find out what the current sector is. This often
|
|
|
|
* fails right after a seek, so try it twice.
|
|
|
|
*/
|
|
|
|
if (r == OK && read_id() != OK) r = read_id();
|
|
|
|
}
|
|
|
|
|
2006-06-20 10:54:22 +02:00
|
|
|
/* Look for the next job in uoffsets[] */
|
2005-04-21 16:53:53 +02:00
|
|
|
if (r == OK) {
|
|
|
|
for (;;) {
|
|
|
|
if (fp->fl_sector >= f_sectors)
|
|
|
|
fp->fl_sector = 0;
|
|
|
|
|
2006-06-20 10:54:22 +02:00
|
|
|
up = &uoffsets[fp->fl_sector];
|
|
|
|
ug = &ugrants[fp->fl_sector];
|
|
|
|
if (*up != NO_OFFSET) break;
|
2005-04-21 16:53:53 +02:00
|
|
|
fp->fl_sector++;
|
|
|
|
}
|
|
|
|
|
2010-01-27 11:23:58 +01:00
|
|
|
if (opcode == DEV_SCATTER_S) {
|
|
|
|
/* Copy the user bytes to the DMA buffer. */
|
|
|
|
if(proc_nr != SELF) {
|
|
|
|
s=sys_safecopyfrom(proc_nr, *ug, *up,
|
|
|
|
(vir_bytes) floppy_buf,
|
|
|
|
(phys_bytes) SECTOR_SIZE, D);
|
|
|
|
if(s != OK)
|
2010-03-05 16:05:11 +01:00
|
|
|
panic("sys_safecopyfrom failed: %d", s);
|
2010-01-27 11:23:58 +01:00
|
|
|
} else {
|
|
|
|
memcpy(floppy_buf, (void *) (*ug + *up), SECTOR_SIZE);
|
|
|
|
}
|
2006-06-20 10:54:22 +02:00
|
|
|
}
|
2005-04-21 16:53:53 +02:00
|
|
|
}
|
|
|
|
|
|
|
|
/* Set up the DMA chip and perform the transfer. */
|
|
|
|
if (r == OK) {
|
2005-08-05 18:23:42 +02:00
|
|
|
if (dma_setup(opcode) != OK) {
|
|
|
|
/* This can only fail for addresses above 16MB
|
|
|
|
* that cannot be handled by the controller,
|
|
|
|
* because it uses 24-bit addressing.
|
|
|
|
*/
|
|
|
|
return(EIO);
|
|
|
|
}
|
2005-04-21 16:53:53 +02:00
|
|
|
r = fdc_transfer(opcode);
|
|
|
|
}
|
|
|
|
|
2007-02-07 17:22:19 +01:00
|
|
|
if (r == OK && opcode == DEV_GATHER_S) {
|
2005-04-21 16:53:53 +02:00
|
|
|
/* Copy the DMA buffer to user space. */
|
2009-12-02 10:57:48 +01:00
|
|
|
if(proc_nr != SELF) {
|
2006-06-20 10:54:22 +02:00
|
|
|
s=sys_safecopyto(proc_nr, *ug, *up,
|
2009-09-21 16:25:54 +02:00
|
|
|
(vir_bytes) floppy_buf,
|
2006-06-20 10:54:22 +02:00
|
|
|
(phys_bytes) SECTOR_SIZE, D);
|
2007-10-16 16:31:35 +02:00
|
|
|
if(s != OK)
|
2010-03-05 16:05:11 +01:00
|
|
|
panic("sys_safecopyto failed: %d", s);
|
2006-06-20 10:54:22 +02:00
|
|
|
} else {
|
2009-09-21 16:25:54 +02:00
|
|
|
memcpy((void *) (*ug + *up), floppy_buf, SECTOR_SIZE);
|
2006-06-20 10:54:22 +02:00
|
|
|
}
|
2005-04-21 16:53:53 +02:00
|
|
|
}
|
|
|
|
|
|
|
|
if (r != OK) {
|
|
|
|
/* Don't retry if write protected or too many errors. */
|
|
|
|
if (err_no_retry(r) || ++errors == MAX_ERRORS) {
|
|
|
|
return(EIO);
|
|
|
|
}
|
|
|
|
|
|
|
|
/* Recalibrate if halfway. */
|
|
|
|
if (errors == MAX_ERRORS / 2)
|
|
|
|
fp->fl_calibration = UNCALIBRATED;
|
|
|
|
|
|
|
|
nbytes = 0;
|
|
|
|
break; /* retry */
|
|
|
|
}
|
|
|
|
}
|
|
|
|
|
|
|
|
/* Book the bytes successfully transferred. */
|
|
|
|
position += nbytes;
|
|
|
|
for (;;) {
|
|
|
|
if (nbytes < iov->iov_size) {
|
|
|
|
/* Not done with this one yet. */
|
2006-06-20 10:54:22 +02:00
|
|
|
iov_offset += nbytes;
|
2005-04-21 16:53:53 +02:00
|
|
|
iov->iov_size -= nbytes;
|
|
|
|
break;
|
|
|
|
}
|
2006-06-20 10:54:22 +02:00
|
|
|
iov_offset = 0;
|
2005-04-21 16:53:53 +02:00
|
|
|
nbytes -= iov->iov_size;
|
|
|
|
iov->iov_size = 0;
|
|
|
|
if (nbytes == 0) {
|
|
|
|
/* The rest is optional, so we return to give FS a
|
|
|
|
* chance to think it over.
|
|
|
|
*/
|
|
|
|
return(OK);
|
|
|
|
}
|
|
|
|
iov++;
|
|
|
|
nr_req--;
|
|
|
|
}
|
|
|
|
}
|
|
|
|
return(OK);
|
|
|
|
}
|
|
|
|
|
|
|
|
/*===========================================================================*
|
|
|
|
* dma_setup *
|
|
|
|
*===========================================================================*/
|
2010-02-19 11:00:32 +01:00
|
|
|
PRIVATE int dma_setup(
|
|
|
|
int opcode /* DEV_GATHER_S or DEV_SCATTER_S */
|
|
|
|
)
|
2005-04-21 16:53:53 +02:00
|
|
|
{
|
|
|
|
/* The IBM PC can perform DMA operations by using the DMA chip. To use it,
|
|
|
|
* the DMA (Direct Memory Access) chip is loaded with the 20-bit memory address
|
|
|
|
* to be read from or written to, the byte count minus 1, and a read or write
|
|
|
|
* opcode. This routine sets up the DMA chip. Note that the chip is not
|
|
|
|
* capable of doing a DMA across a 64K boundary (e.g., you can't read a
|
|
|
|
* 512-byte block starting at physical address 65520).
|
2005-08-05 18:23:42 +02:00
|
|
|
*
|
|
|
|
* Warning! Also note that it's not possible to do DMA above 16 MB because
|
|
|
|
* the ISA bus uses 24-bit addresses. Addresses above 16 MB therefore will
|
|
|
|
* be interpreted modulo 16 MB, dangerously overwriting arbitrary memory.
|
|
|
|
* A check here denies the I/O if the address is out of range.
|
2005-04-21 16:53:53 +02:00
|
|
|
*/
|
|
|
|
pvb_pair_t byte_out[9];
|
|
|
|
int s;
|
|
|
|
|
2005-08-05 18:23:42 +02:00
|
|
|
/* First check the DMA memory address not to exceed maximum. */
|
2009-09-21 16:25:54 +02:00
|
|
|
if (floppy_buf_phys != (floppy_buf_phys & DMA_ADDR_MASK)) {
|
New RS and new signal handling for system processes.
UPDATING INFO:
20100317:
/usr/src/etc/system.conf updated to ignore default kernel calls: copy
it (or merge it) to /etc/system.conf.
The hello driver (/dev/hello) added to the distribution:
# cd /usr/src/commands/scripts && make clean install
# cd /dev && MAKEDEV hello
KERNEL CHANGES:
- Generic signal handling support. The kernel no longer assumes PM as a signal
manager for every process. The signal manager of a given process can now be
specified in its privilege slot. When a signal has to be delivered, the kernel
performs the lookup and forwards the signal to the appropriate signal manager.
PM is the default signal manager for user processes, RS is the default signal
manager for system processes. To enable ptrace()ing for system processes, it
is sufficient to change the default signal manager to PM. This will temporarily
disable crash recovery, though.
- sys_exit() is now split into sys_exit() (i.e. exit() for system processes,
which generates a self-termination signal), and sys_clear() (i.e. used by PM
to ask the kernel to clear a process slot when a process exits).
- Added a new kernel call (i.e. sys_update()) to swap two process slots and
implement live update.
PM CHANGES:
- Posix signal handling is no longer allowed for system processes. System
signals are split into two fixed categories: termination and non-termination
signals. When a non-termination signaled is processed, PM transforms the signal
into an IPC message and delivers the message to the system process. When a
termination signal is processed, PM terminates the process.
- PM no longer assumes itself as the signal manager for system processes. It now
makes sure that every system signal goes through the kernel before being
actually processes. The kernel will then dispatch the signal to the appropriate
signal manager which may or may not be PM.
SYSLIB CHANGES:
- Simplified SEF init and LU callbacks.
- Added additional predefined SEF callbacks to debug crash recovery and
live update.
- Fixed a temporary ack in the SEF init protocol. SEF init reply is now
completely synchronous.
- Added SEF signal event type to provide a uniform interface for system
processes to deal with signals. A sef_cb_signal_handler() callback is
available for system processes to handle every received signal. A
sef_cb_signal_manager() callback is used by signal managers to process
system signals on behalf of the kernel.
- Fixed a few bugs with memory mapping and DS.
VM CHANGES:
- Page faults and memory requests coming from the kernel are now implemented
using signals.
- Added a new VM call to swap two process slots and implement live update.
- The call is used by RS at update time and in turn invokes the kernel call
sys_update().
RS CHANGES:
- RS has been reworked with a better functional decomposition.
- Better kernel call masks. com.h now defines the set of very basic kernel calls
every system service is allowed to use. This makes system.conf simpler and
easier to maintain. In addition, this guarantees a higher level of isolation
for system libraries that use one or more kernel calls internally (e.g. printf).
- RS is the default signal manager for system processes. By default, RS
intercepts every signal delivered to every system process. This makes crash
recovery possible before bringing PM and friends in the loop.
- RS now supports fast rollback when something goes wrong while initializing
the new version during a live update.
- Live update is now implemented by keeping the two versions side-by-side and
swapping the process slots when the old version is ready to update.
- Crash recovery is now implemented by keeping the two versions side-by-side
and cleaning up the old version only when the recovery process is complete.
DS CHANGES:
- Fixed a bug when the process doing ds_publish() or ds_delete() is not known
by DS.
- Fixed the completely broken support for strings. String publishing is now
implemented in the system library and simply wraps publishing of memory ranges.
Ideally, we should adopt a similar approach for other data types as well.
- Test suite fixed.
DRIVER CHANGES:
- The hello driver has been added to the Minix distribution to demonstrate basic
live update and crash recovery functionalities.
- Other drivers have been adapted to conform the new SEF interface.
2010-03-17 02:15:29 +01:00
|
|
|
printf("floppy: DMA denied because address out of range\n");
|
2005-08-05 18:23:42 +02:00
|
|
|
return(EIO);
|
|
|
|
}
|
|
|
|
|
2005-04-21 16:53:53 +02:00
|
|
|
/* Set up the DMA registers. (The comment on the reset is a bit strong,
|
|
|
|
* it probably only resets the floppy channel.)
|
|
|
|
*/
|
|
|
|
pv_set(byte_out[0], DMA_INIT, DMA_RESET_VAL); /* reset the dma controller */
|
|
|
|
pv_set(byte_out[1], DMA_FLIPFLOP, 0); /* write anything to reset it */
|
2007-02-07 17:22:19 +01:00
|
|
|
pv_set(byte_out[2], DMA_MODE, opcode == DEV_SCATTER_S ? DMA_WRITE : DMA_READ);
|
2009-09-21 16:25:54 +02:00
|
|
|
pv_set(byte_out[3], DMA_ADDR, (unsigned) (floppy_buf_phys >> 0) & 0xff);
|
|
|
|
pv_set(byte_out[4], DMA_ADDR, (unsigned) (floppy_buf_phys >> 8) & 0xff);
|
|
|
|
pv_set(byte_out[5], DMA_TOP, (unsigned) (floppy_buf_phys >> 16) & 0xff);
|
2007-02-23 21:53:32 +01:00
|
|
|
pv_set(byte_out[6], DMA_COUNT, (((SECTOR_SIZE - 1) >> 0)) & 0xff);
|
2005-04-21 16:53:53 +02:00
|
|
|
pv_set(byte_out[7], DMA_COUNT, (SECTOR_SIZE - 1) >> 8);
|
|
|
|
pv_set(byte_out[8], DMA_INIT, 2); /* some sort of enable */
|
|
|
|
|
|
|
|
if ((s=sys_voutb(byte_out, 9)) != OK)
|
2010-03-05 16:05:11 +01:00
|
|
|
panic("Sys_voutb in dma_setup() failed: %d", s);
|
2005-08-05 18:23:42 +02:00
|
|
|
return(OK);
|
2005-04-21 16:53:53 +02:00
|
|
|
}
|
|
|
|
|
|
|
|
/*===========================================================================*
|
|
|
|
* start_motor *
|
|
|
|
*===========================================================================*/
|
2010-02-19 11:00:32 +01:00
|
|
|
PRIVATE void start_motor(void)
|
2005-04-21 16:53:53 +02:00
|
|
|
{
|
|
|
|
/* Control of the floppy disk motors is a big pain. If a motor is off, you
|
|
|
|
* have to turn it on first, which takes 1/2 second. You can't leave it on
|
|
|
|
* all the time, since that would wear out the diskette. However, if you turn
|
|
|
|
* the motor off after each operation, the system performance will be awful.
|
|
|
|
* The compromise used here is to leave it on for a few seconds after each
|
|
|
|
* operation. If a new operation is started in that interval, it need not be
|
|
|
|
* turned on again. If no new operation is started, a timer goes off and the
|
|
|
|
* motor is turned off. I/O port DOR has bits to control each of 4 drives.
|
|
|
|
*/
|
|
|
|
|
|
|
|
int s, motor_bit, running;
|
|
|
|
message mess;
|
|
|
|
|
|
|
|
motor_bit = 1 << f_drive; /* bit mask for this drive */
|
|
|
|
running = motor_status & motor_bit; /* nonzero if this motor is running */
|
|
|
|
motor_status |= motor_bit; /* want this drive running too */
|
|
|
|
|
|
|
|
if ((s=sys_outb(DOR,
|
|
|
|
(motor_status << MOTOR_SHIFT) | ENABLE_INT | f_drive)) != OK)
|
2010-03-05 16:05:11 +01:00
|
|
|
panic("Sys_outb in start_motor() failed: %d", s);
|
2005-04-21 16:53:53 +02:00
|
|
|
|
|
|
|
/* If the motor was already running, we don't have to wait for it. */
|
|
|
|
if (running) return; /* motor was already running */
|
|
|
|
|
|
|
|
/* Set an alarm timer to force a timeout if the hardware does not interrupt
|
2009-09-29 20:47:56 +02:00
|
|
|
* in time. Expect an interrupt, but check for a timeout.
|
2005-04-21 16:53:53 +02:00
|
|
|
*/
|
2008-12-11 15:42:23 +01:00
|
|
|
f_set_timer(&f_tmr_timeout, f_dp->start_ms * system_hz / 1000, f_timeout);
|
2005-04-21 16:53:53 +02:00
|
|
|
f_busy = BSY_IO;
|
|
|
|
do {
|
Basic System Event Framework (SEF) with ping and live update.
SYSLIB CHANGES:
- SEF must be used by every system process and is thereby part of the system
library.
- The framework provides a receive() interface (sef_receive) for system
processes to automatically catch known system even messages and process them.
- SEF provides a default behavior for each type of system event, but allows
system processes to register callbacks to override the default behavior.
- Custom (local to the process) or predefined (provided by SEF) callback
implementations can be registered to SEF.
- SEF currently includes support for 2 types of system events:
1. SEF Ping. The event occurs every time RS sends a ping to figure out
whether a system process is still alive. The default callback implementation
provided by SEF is to notify RS back to let it know the process is alive
and kicking.
2. SEF Live update. The event occurs every time RS sends a prepare to update
message to let a system process know an update is available and to prepare
for it. The live update support is very basic for now. SEF only deals with
verifying if the prepare state can be supported by the process, dumping the
state for debugging purposes, and providing an event-driven programming
model to the process to react to state changes check-in when ready to update.
- SEF should be extended in the future to integrate support for more types of
system events. Ideally, all the cross-cutting concerns should be integrated into
SEF to avoid duplicating code and ease extensibility. Examples include:
* PM notify messages primarily used at shutdown.
* SYSTEM notify messages primarily used for signals.
* CLOCK notify messages used for system alarms.
* Debug messages. IS could still be in charge of fkey handling but would
forward the debug message to the target process (e.g. PM, if the user
requested debug information about PM). SEF would then catch the message and
do nothing unless the process has registered an appropriate callback to
deal with the event. This simplifies the programming model to print debug
information, avoids duplicating code, and reduces the effort to print
debug information.
SYSTEM PROCESSES CHANGES:
- Every system process registers SEF callbacks it needs to override the default
system behavior and calls sef_startup() right after being started.
- sef_startup() does almost nothing now, but will be extended in the future to
support callbacks of its own to let RS control and synchronize with every
system process at initialization time.
- Every system process calls sef_receive() now rather than receive() directly,
to let SEF handle predefined system events.
RS CHANGES:
- RS supports a basic single-component live update protocol now, as follows:
* When an update command is issued (via "service update *"), RS notifies the
target system process to prepare for a specific update state.
* If the process doesn't respond back in time, the update is aborted.
* When the process responds back, RS kills it and marks it for refreshing.
* The process is then automatically restarted as for a buggy process and can
start running again.
* Live update is currently prototyped as a controlled failure.
2009-12-21 15:12:21 +01:00
|
|
|
sef_receive(ANY, &mess);
|
2009-09-29 20:47:56 +02:00
|
|
|
|
|
|
|
if (is_notify(mess.m_type)) {
|
|
|
|
switch (_ENDPOINT_P(mess.m_source)) {
|
|
|
|
case CLOCK:
|
|
|
|
f_expire_tmrs(NULL, NULL);
|
|
|
|
break;
|
|
|
|
default :
|
|
|
|
f_busy = BSY_IDLE;
|
|
|
|
break;
|
|
|
|
}
|
2005-04-21 16:53:53 +02:00
|
|
|
} else {
|
|
|
|
f_busy = BSY_IDLE;
|
|
|
|
}
|
|
|
|
} while (f_busy == BSY_IO);
|
|
|
|
f_fp->fl_sector = NO_SECTOR;
|
|
|
|
}
|
|
|
|
|
|
|
|
/*===========================================================================*
|
|
|
|
* stop_motor *
|
|
|
|
*===========================================================================*/
|
2010-02-19 11:00:32 +01:00
|
|
|
PRIVATE void stop_motor(timer_t *tp)
|
2005-04-21 16:53:53 +02:00
|
|
|
{
|
|
|
|
/* This routine is called from an alarm timer after several seconds have
|
|
|
|
* elapsed with no floppy disk activity. It turns the drive motor off.
|
|
|
|
*/
|
|
|
|
int s;
|
|
|
|
motor_status &= ~(1 << tmr_arg(tp)->ta_int);
|
|
|
|
if ((s=sys_outb(DOR, (motor_status << MOTOR_SHIFT) | ENABLE_INT)) != OK)
|
2010-03-05 16:05:11 +01:00
|
|
|
panic("Sys_outb in stop_motor() failed: %d", s);
|
2005-04-21 16:53:53 +02:00
|
|
|
}
|
|
|
|
|
|
|
|
/*===========================================================================*
|
|
|
|
* seek *
|
|
|
|
*===========================================================================*/
|
2010-02-19 11:00:32 +01:00
|
|
|
PRIVATE int seek(void)
|
2005-04-21 16:53:53 +02:00
|
|
|
{
|
|
|
|
/* Issue a SEEK command on the indicated drive unless the arm is already
|
|
|
|
* positioned on the correct cylinder.
|
|
|
|
*/
|
|
|
|
|
|
|
|
struct floppy *fp = f_fp;
|
|
|
|
int r;
|
|
|
|
message mess;
|
|
|
|
u8_t cmd[3];
|
|
|
|
|
|
|
|
/* Are we already on the correct cylinder? */
|
|
|
|
if (fp->fl_calibration == UNCALIBRATED)
|
|
|
|
if (recalibrate() != OK) return(ERR_SEEK);
|
|
|
|
if (fp->fl_curcyl == fp->fl_hardcyl) return(OK);
|
|
|
|
|
|
|
|
/* No. Wrong cylinder. Issue a SEEK and wait for interrupt. */
|
|
|
|
cmd[0] = FDC_SEEK;
|
|
|
|
cmd[1] = (fp->fl_head << 2) | f_drive;
|
|
|
|
cmd[2] = fp->fl_hardcyl;
|
|
|
|
if (fdc_command(cmd, 3) != OK) return(ERR_SEEK);
|
|
|
|
if (f_intr_wait() != OK) return(ERR_TIMEOUT);
|
|
|
|
|
|
|
|
/* Interrupt has been received. Check drive status. */
|
|
|
|
fdc_out(FDC_SENSE); /* probe FDC to make it return status */
|
|
|
|
r = fdc_results(); /* get controller status bytes */
|
2005-09-05 15:00:37 +02:00
|
|
|
if (r != OK || (f_results[ST0] & ST0_BITS_SEEK) != SEEK_ST0
|
2005-04-21 16:53:53 +02:00
|
|
|
|| f_results[ST1] != fp->fl_hardcyl) {
|
|
|
|
/* seek failed, may need a recalibrate */
|
|
|
|
return(ERR_SEEK);
|
|
|
|
}
|
|
|
|
/* Give head time to settle on a format, no retrying here! */
|
|
|
|
if (f_device & FORMAT_DEV_BIT) {
|
|
|
|
/* Set a synchronous alarm to force a timeout if the hardware does
|
2009-09-29 20:47:56 +02:00
|
|
|
* not interrupt.
|
2005-04-21 16:53:53 +02:00
|
|
|
*/
|
2008-12-11 15:42:23 +01:00
|
|
|
f_set_timer(&f_tmr_timeout, system_hz/30, f_timeout);
|
2005-04-21 16:53:53 +02:00
|
|
|
f_busy = BSY_IO;
|
|
|
|
do {
|
Basic System Event Framework (SEF) with ping and live update.
SYSLIB CHANGES:
- SEF must be used by every system process and is thereby part of the system
library.
- The framework provides a receive() interface (sef_receive) for system
processes to automatically catch known system even messages and process them.
- SEF provides a default behavior for each type of system event, but allows
system processes to register callbacks to override the default behavior.
- Custom (local to the process) or predefined (provided by SEF) callback
implementations can be registered to SEF.
- SEF currently includes support for 2 types of system events:
1. SEF Ping. The event occurs every time RS sends a ping to figure out
whether a system process is still alive. The default callback implementation
provided by SEF is to notify RS back to let it know the process is alive
and kicking.
2. SEF Live update. The event occurs every time RS sends a prepare to update
message to let a system process know an update is available and to prepare
for it. The live update support is very basic for now. SEF only deals with
verifying if the prepare state can be supported by the process, dumping the
state for debugging purposes, and providing an event-driven programming
model to the process to react to state changes check-in when ready to update.
- SEF should be extended in the future to integrate support for more types of
system events. Ideally, all the cross-cutting concerns should be integrated into
SEF to avoid duplicating code and ease extensibility. Examples include:
* PM notify messages primarily used at shutdown.
* SYSTEM notify messages primarily used for signals.
* CLOCK notify messages used for system alarms.
* Debug messages. IS could still be in charge of fkey handling but would
forward the debug message to the target process (e.g. PM, if the user
requested debug information about PM). SEF would then catch the message and
do nothing unless the process has registered an appropriate callback to
deal with the event. This simplifies the programming model to print debug
information, avoids duplicating code, and reduces the effort to print
debug information.
SYSTEM PROCESSES CHANGES:
- Every system process registers SEF callbacks it needs to override the default
system behavior and calls sef_startup() right after being started.
- sef_startup() does almost nothing now, but will be extended in the future to
support callbacks of its own to let RS control and synchronize with every
system process at initialization time.
- Every system process calls sef_receive() now rather than receive() directly,
to let SEF handle predefined system events.
RS CHANGES:
- RS supports a basic single-component live update protocol now, as follows:
* When an update command is issued (via "service update *"), RS notifies the
target system process to prepare for a specific update state.
* If the process doesn't respond back in time, the update is aborted.
* When the process responds back, RS kills it and marks it for refreshing.
* The process is then automatically restarted as for a buggy process and can
start running again.
* Live update is currently prototyped as a controlled failure.
2009-12-21 15:12:21 +01:00
|
|
|
sef_receive(ANY, &mess);
|
2009-09-29 20:47:56 +02:00
|
|
|
|
|
|
|
if (is_notify(mess.m_type)) {
|
|
|
|
switch (_ENDPOINT_P(mess.m_source)) {
|
|
|
|
case CLOCK:
|
|
|
|
f_expire_tmrs(NULL, NULL);
|
|
|
|
break;
|
|
|
|
default :
|
|
|
|
f_busy = BSY_IDLE;
|
|
|
|
break;
|
|
|
|
}
|
2005-04-21 16:53:53 +02:00
|
|
|
} else {
|
|
|
|
f_busy = BSY_IDLE;
|
|
|
|
}
|
|
|
|
} while (f_busy == BSY_IO);
|
|
|
|
}
|
|
|
|
fp->fl_curcyl = fp->fl_hardcyl;
|
|
|
|
fp->fl_sector = NO_SECTOR;
|
|
|
|
return(OK);
|
|
|
|
}
|
|
|
|
|
|
|
|
/*===========================================================================*
|
|
|
|
* fdc_transfer *
|
|
|
|
*===========================================================================*/
|
2010-02-19 11:00:32 +01:00
|
|
|
PRIVATE int fdc_transfer(
|
|
|
|
int opcode /* DEV_GATHER_S or DEV_SCATTER_S */
|
|
|
|
)
|
2005-04-21 16:53:53 +02:00
|
|
|
{
|
|
|
|
/* The drive is now on the proper cylinder. Read, write or format 1 block. */
|
|
|
|
|
|
|
|
struct floppy *fp = f_fp;
|
|
|
|
int r, s;
|
|
|
|
u8_t cmd[9];
|
|
|
|
|
|
|
|
/* Never attempt a transfer if the drive is uncalibrated or motor is off. */
|
|
|
|
if (fp->fl_calibration == UNCALIBRATED) return(ERR_TRANSFER);
|
|
|
|
if ((motor_status & (1 << f_drive)) == 0) return(ERR_TRANSFER);
|
|
|
|
|
|
|
|
/* The command is issued by outputting several bytes to the controller chip.
|
|
|
|
*/
|
|
|
|
if (f_device & FORMAT_DEV_BIT) {
|
|
|
|
cmd[0] = FDC_FORMAT;
|
|
|
|
cmd[1] = (fp->fl_head << 2) | f_drive;
|
|
|
|
cmd[2] = fmt_param.sector_size_code;
|
|
|
|
cmd[3] = fmt_param.sectors_per_cylinder;
|
|
|
|
cmd[4] = fmt_param.gap_length_for_format;
|
|
|
|
cmd[5] = fmt_param.fill_byte_for_format;
|
|
|
|
if (fdc_command(cmd, 6) != OK) return(ERR_TRANSFER);
|
|
|
|
} else {
|
2007-02-07 17:22:19 +01:00
|
|
|
cmd[0] = opcode == DEV_SCATTER_S ? FDC_WRITE : FDC_READ;
|
2005-04-21 16:53:53 +02:00
|
|
|
cmd[1] = (fp->fl_head << 2) | f_drive;
|
|
|
|
cmd[2] = fp->fl_cylinder;
|
|
|
|
cmd[3] = fp->fl_head;
|
|
|
|
cmd[4] = BASE_SECTOR + fp->fl_sector;
|
|
|
|
cmd[5] = SECTOR_SIZE_CODE;
|
|
|
|
cmd[6] = f_sectors;
|
|
|
|
cmd[7] = f_dp->gap; /* sector gap */
|
|
|
|
cmd[8] = DTL; /* data length */
|
|
|
|
if (fdc_command(cmd, 9) != OK) return(ERR_TRANSFER);
|
|
|
|
}
|
|
|
|
|
|
|
|
/* Block, waiting for disk interrupt. */
|
|
|
|
if (f_intr_wait() != OK) {
|
|
|
|
printf("%s: disk interrupt timed out.\n", f_name());
|
|
|
|
return(ERR_TIMEOUT);
|
|
|
|
}
|
|
|
|
|
|
|
|
/* Get controller status and check for errors. */
|
|
|
|
r = fdc_results();
|
|
|
|
if (r != OK) return(r);
|
|
|
|
|
|
|
|
if (f_results[ST1] & WRITE_PROTECT) {
|
|
|
|
printf("%s: diskette is write protected.\n", f_name());
|
|
|
|
return(ERR_WR_PROTECT);
|
|
|
|
}
|
|
|
|
|
2005-09-05 15:00:37 +02:00
|
|
|
if ((f_results[ST0] & ST0_BITS_TRANS) != TRANS_ST0) return(ERR_TRANSFER);
|
2005-04-21 16:53:53 +02:00
|
|
|
if (f_results[ST1] | f_results[ST2]) return(ERR_TRANSFER);
|
|
|
|
|
|
|
|
if (f_device & FORMAT_DEV_BIT) return(OK);
|
|
|
|
|
|
|
|
/* Compare actual numbers of sectors transferred with expected number. */
|
|
|
|
s = (f_results[ST_CYL] - fp->fl_cylinder) * NR_HEADS * f_sectors;
|
|
|
|
s += (f_results[ST_HEAD] - fp->fl_head) * f_sectors;
|
|
|
|
s += (f_results[ST_SEC] - BASE_SECTOR - fp->fl_sector);
|
|
|
|
if (s != 1) return(ERR_TRANSFER);
|
|
|
|
|
|
|
|
/* This sector is next for I/O: */
|
|
|
|
fp->fl_sector = f_results[ST_SEC] - BASE_SECTOR;
|
|
|
|
#if 0
|
|
|
|
if (processor < 386) fp->fl_sector++; /* Old CPU can't keep up. */
|
|
|
|
#endif
|
|
|
|
return(OK);
|
|
|
|
}
|
|
|
|
|
2005-09-11 19:09:11 +02:00
|
|
|
/*===========================================================================*
|
|
|
|
* fdc_results *
|
|
|
|
*===========================================================================*/
|
2010-02-19 11:00:32 +01:00
|
|
|
PRIVATE int fdc_results(void)
|
2005-04-21 16:53:53 +02:00
|
|
|
{
|
|
|
|
/* Extract results from the controller after an operation, then allow floppy
|
|
|
|
* interrupts again.
|
|
|
|
*/
|
|
|
|
|
2006-03-25 00:11:10 +01:00
|
|
|
int s, result_nr;
|
|
|
|
unsigned long status;
|
2005-05-31 16:43:04 +02:00
|
|
|
clock_t t0,t1;
|
2005-04-21 16:53:53 +02:00
|
|
|
|
|
|
|
/* Extract bytes from FDC until it says it has no more. The loop is
|
|
|
|
* really an outer loop on result_nr and an inner loop on status.
|
|
|
|
* A timeout flag alarm is set.
|
|
|
|
*/
|
|
|
|
result_nr = 0;
|
2005-05-31 16:43:04 +02:00
|
|
|
getuptime(&t0);
|
2005-04-21 16:53:53 +02:00
|
|
|
do {
|
|
|
|
/* Reading one byte is almost a mirror of fdc_out() - the DIRECTION
|
|
|
|
* bit must be set instead of clear, but the CTL_BUSY bit destroys
|
|
|
|
* the perfection of the mirror.
|
|
|
|
*/
|
|
|
|
if ((s=sys_inb(FDC_STATUS, &status)) != OK)
|
2010-03-05 16:05:11 +01:00
|
|
|
panic("Sys_inb in fdc_results() failed: %d", s);
|
2005-04-21 16:53:53 +02:00
|
|
|
status &= (MASTER | DIRECTION | CTL_BUSY);
|
|
|
|
if (status == (MASTER | DIRECTION | CTL_BUSY)) {
|
2006-03-25 00:11:10 +01:00
|
|
|
unsigned long tmp_r;
|
2005-04-21 16:53:53 +02:00
|
|
|
if (result_nr >= MAX_RESULTS) break; /* too many results */
|
2006-03-25 00:11:10 +01:00
|
|
|
if ((s=sys_inb(FDC_DATA, &tmp_r)) != OK)
|
2010-03-05 16:05:11 +01:00
|
|
|
panic("Sys_inb in fdc_results() failed: %d", s);
|
2006-03-25 00:11:10 +01:00
|
|
|
f_results[result_nr] = tmp_r;
|
2005-04-21 16:53:53 +02:00
|
|
|
result_nr ++;
|
|
|
|
continue;
|
|
|
|
}
|
|
|
|
if (status == MASTER) { /* all read */
|
2005-05-02 16:30:04 +02:00
|
|
|
if ((s=sys_irqenable(&irq_hook_id)) != OK)
|
2010-03-05 16:05:11 +01:00
|
|
|
panic("Couldn't enable IRQs: %d", s);
|
2005-04-21 16:53:53 +02:00
|
|
|
|
|
|
|
return(OK); /* only good exit */
|
|
|
|
}
|
2005-05-31 16:43:04 +02:00
|
|
|
} while ( (s=getuptime(&t1))==OK && (t1-t0) < TIMEOUT_TICKS );
|
|
|
|
if (OK!=s) printf("FLOPPY: warning, getuptime failed: %d\n", s);
|
2005-04-21 16:53:53 +02:00
|
|
|
need_reset = TRUE; /* controller chip must be reset */
|
|
|
|
|
2005-05-02 16:30:04 +02:00
|
|
|
if ((s=sys_irqenable(&irq_hook_id)) != OK)
|
2010-03-05 16:05:11 +01:00
|
|
|
panic("Couldn't enable IRQs: %d", s);
|
2005-04-21 16:53:53 +02:00
|
|
|
return(ERR_STATUS);
|
|
|
|
}
|
|
|
|
|
|
|
|
/*===========================================================================*
|
|
|
|
* fdc_command *
|
|
|
|
*===========================================================================*/
|
2010-02-19 11:00:32 +01:00
|
|
|
PRIVATE int fdc_command(
|
|
|
|
u8_t *cmd, /* command bytes */
|
|
|
|
int len /* command length */
|
|
|
|
)
|
2005-04-21 16:53:53 +02:00
|
|
|
{
|
|
|
|
/* Output a command to the controller. */
|
|
|
|
|
|
|
|
/* Set a synchronous alarm to force a timeout if the hardware does
|
2009-09-29 20:47:56 +02:00
|
|
|
* not interrupt.
|
2005-04-21 16:53:53 +02:00
|
|
|
* Note that the actual check is done by the code that issued the
|
|
|
|
* fdc_command() call.
|
|
|
|
*/
|
|
|
|
f_set_timer(&f_tmr_timeout, WAKEUP, f_timeout);
|
|
|
|
|
|
|
|
f_busy = BSY_IO;
|
|
|
|
while (len > 0) {
|
|
|
|
fdc_out(*cmd++);
|
|
|
|
len--;
|
|
|
|
}
|
|
|
|
return(need_reset ? ERR_DRIVE : OK);
|
|
|
|
}
|
|
|
|
|
|
|
|
/*===========================================================================*
|
|
|
|
* fdc_out *
|
|
|
|
*===========================================================================*/
|
2010-02-19 11:00:32 +01:00
|
|
|
PRIVATE void fdc_out(
|
|
|
|
int val /* write this byte to floppy disk controller */
|
|
|
|
)
|
2005-04-21 16:53:53 +02:00
|
|
|
{
|
|
|
|
/* Output a byte to the controller. This is not entirely trivial, since you
|
|
|
|
* can only write to it when it is listening, and it decides when to listen.
|
|
|
|
* If the controller refuses to listen, the FDC chip is given a hard reset.
|
|
|
|
*/
|
2005-05-31 16:43:04 +02:00
|
|
|
clock_t t0, t1;
|
2006-03-25 00:11:10 +01:00
|
|
|
int s;
|
|
|
|
unsigned long status;
|
2005-04-21 16:53:53 +02:00
|
|
|
|
|
|
|
if (need_reset) return; /* if controller is not listening, return */
|
|
|
|
|
2005-05-31 16:43:04 +02:00
|
|
|
/* It may take several tries to get the FDC to accept a command. */
|
|
|
|
getuptime(&t0);
|
2005-04-21 16:53:53 +02:00
|
|
|
do {
|
2005-05-31 16:43:04 +02:00
|
|
|
if ( (s=getuptime(&t1))==OK && (t1-t0) > TIMEOUT_TICKS ) {
|
|
|
|
if (OK!=s) printf("FLOPPY: warning, getuptime failed: %d\n", s);
|
2005-04-21 16:53:53 +02:00
|
|
|
need_reset = TRUE; /* hit it over the head */
|
|
|
|
return;
|
|
|
|
}
|
|
|
|
if ((s=sys_inb(FDC_STATUS, &status)) != OK)
|
2010-03-05 16:05:11 +01:00
|
|
|
panic("Sys_inb in fdc_out() failed: %d", s);
|
2005-04-21 16:53:53 +02:00
|
|
|
}
|
|
|
|
while ((status & (MASTER | DIRECTION)) != (MASTER | 0));
|
|
|
|
|
|
|
|
if ((s=sys_outb(FDC_DATA, val)) != OK)
|
2010-03-05 16:05:11 +01:00
|
|
|
panic("Sys_outb in fdc_out() failed: %d", s);
|
2005-04-21 16:53:53 +02:00
|
|
|
}
|
|
|
|
|
|
|
|
/*===========================================================================*
|
|
|
|
* recalibrate *
|
|
|
|
*===========================================================================*/
|
2010-02-19 11:00:32 +01:00
|
|
|
PRIVATE int recalibrate(void)
|
2005-04-21 16:53:53 +02:00
|
|
|
{
|
|
|
|
/* The floppy disk controller has no way of determining its absolute arm
|
|
|
|
* position (cylinder). Instead, it steps the arm a cylinder at a time and
|
|
|
|
* keeps track of where it thinks it is (in software). However, after a
|
|
|
|
* SEEK, the hardware reads information from the diskette telling where the
|
|
|
|
* arm actually is. If the arm is in the wrong place, a recalibration is done,
|
|
|
|
* which forces the arm to cylinder 0. This way the controller can get back
|
|
|
|
* into sync with reality.
|
|
|
|
*/
|
|
|
|
|
|
|
|
struct floppy *fp = f_fp;
|
|
|
|
int r;
|
|
|
|
u8_t cmd[2];
|
|
|
|
|
|
|
|
/* Issue the RECALIBRATE command and wait for the interrupt. */
|
|
|
|
cmd[0] = FDC_RECALIBRATE; /* tell drive to recalibrate itself */
|
|
|
|
cmd[1] = f_drive; /* specify drive */
|
|
|
|
if (fdc_command(cmd, 2) != OK) return(ERR_SEEK);
|
|
|
|
if (f_intr_wait() != OK) return(ERR_TIMEOUT);
|
|
|
|
|
|
|
|
/* Determine if the recalibration succeeded. */
|
|
|
|
fdc_out(FDC_SENSE); /* issue SENSE command to request results */
|
|
|
|
r = fdc_results(); /* get results of the FDC_RECALIBRATE command*/
|
|
|
|
fp->fl_curcyl = NO_CYL; /* force a SEEK next time */
|
|
|
|
fp->fl_sector = NO_SECTOR;
|
|
|
|
if (r != OK || /* controller would not respond */
|
2005-09-05 15:00:37 +02:00
|
|
|
(f_results[ST0] & ST0_BITS_SEEK) != SEEK_ST0 || f_results[ST_PCN] != 0) {
|
2005-04-21 16:53:53 +02:00
|
|
|
/* Recalibration failed. FDC must be reset. */
|
|
|
|
need_reset = TRUE;
|
|
|
|
return(ERR_RECALIBRATE);
|
|
|
|
} else {
|
|
|
|
/* Recalibration succeeded. */
|
|
|
|
fp->fl_calibration = CALIBRATED;
|
|
|
|
fp->fl_curcyl = f_results[ST_PCN];
|
|
|
|
return(OK);
|
|
|
|
}
|
|
|
|
}
|
|
|
|
|
|
|
|
/*===========================================================================*
|
|
|
|
* f_reset *
|
|
|
|
*===========================================================================*/
|
2010-02-19 11:00:32 +01:00
|
|
|
PRIVATE void f_reset(void)
|
2005-04-21 16:53:53 +02:00
|
|
|
{
|
|
|
|
/* Issue a reset to the controller. This is done after any catastrophe,
|
|
|
|
* like the controller refusing to respond.
|
|
|
|
*/
|
|
|
|
pvb_pair_t byte_out[2];
|
|
|
|
int s,i;
|
|
|
|
message mess;
|
|
|
|
|
|
|
|
/* Disable interrupts and strobe reset bit low. */
|
|
|
|
need_reset = FALSE;
|
|
|
|
|
|
|
|
/* It is not clear why the next lock is needed. Writing 0 to DOR causes
|
|
|
|
* interrupt, while the PC documentation says turning bit 8 off disables
|
|
|
|
* interrupts. Without the lock:
|
|
|
|
* 1) the interrupt handler sets the floppy mask bit in the 8259.
|
|
|
|
* 2) writing ENABLE_INT to DOR causes the FDC to assert the interrupt
|
|
|
|
* line again, but the mask stops the cpu being interrupted.
|
|
|
|
* 3) the sense interrupt clears the interrupt (not clear which one).
|
|
|
|
* and for some reason the reset does not work.
|
|
|
|
*/
|
|
|
|
(void) fdc_command((u8_t *) 0, 0); /* need only the timer */
|
|
|
|
motor_status = 0;
|
|
|
|
pv_set(byte_out[0], DOR, 0); /* strobe reset bit low */
|
|
|
|
pv_set(byte_out[1], DOR, ENABLE_INT); /* strobe it high again */
|
|
|
|
if ((s=sys_voutb(byte_out, 2)) != OK)
|
2010-03-05 16:05:11 +01:00
|
|
|
panic("Sys_voutb in f_reset() failed: %d", s);
|
2005-04-21 16:53:53 +02:00
|
|
|
|
2009-09-29 20:47:56 +02:00
|
|
|
/* A synchronous alarm timer was set in fdc_command. Expect an interrupt,
|
|
|
|
* but be prepared to handle a timeout.
|
2005-04-21 16:53:53 +02:00
|
|
|
*/
|
|
|
|
do {
|
Basic System Event Framework (SEF) with ping and live update.
SYSLIB CHANGES:
- SEF must be used by every system process and is thereby part of the system
library.
- The framework provides a receive() interface (sef_receive) for system
processes to automatically catch known system even messages and process them.
- SEF provides a default behavior for each type of system event, but allows
system processes to register callbacks to override the default behavior.
- Custom (local to the process) or predefined (provided by SEF) callback
implementations can be registered to SEF.
- SEF currently includes support for 2 types of system events:
1. SEF Ping. The event occurs every time RS sends a ping to figure out
whether a system process is still alive. The default callback implementation
provided by SEF is to notify RS back to let it know the process is alive
and kicking.
2. SEF Live update. The event occurs every time RS sends a prepare to update
message to let a system process know an update is available and to prepare
for it. The live update support is very basic for now. SEF only deals with
verifying if the prepare state can be supported by the process, dumping the
state for debugging purposes, and providing an event-driven programming
model to the process to react to state changes check-in when ready to update.
- SEF should be extended in the future to integrate support for more types of
system events. Ideally, all the cross-cutting concerns should be integrated into
SEF to avoid duplicating code and ease extensibility. Examples include:
* PM notify messages primarily used at shutdown.
* SYSTEM notify messages primarily used for signals.
* CLOCK notify messages used for system alarms.
* Debug messages. IS could still be in charge of fkey handling but would
forward the debug message to the target process (e.g. PM, if the user
requested debug information about PM). SEF would then catch the message and
do nothing unless the process has registered an appropriate callback to
deal with the event. This simplifies the programming model to print debug
information, avoids duplicating code, and reduces the effort to print
debug information.
SYSTEM PROCESSES CHANGES:
- Every system process registers SEF callbacks it needs to override the default
system behavior and calls sef_startup() right after being started.
- sef_startup() does almost nothing now, but will be extended in the future to
support callbacks of its own to let RS control and synchronize with every
system process at initialization time.
- Every system process calls sef_receive() now rather than receive() directly,
to let SEF handle predefined system events.
RS CHANGES:
- RS supports a basic single-component live update protocol now, as follows:
* When an update command is issued (via "service update *"), RS notifies the
target system process to prepare for a specific update state.
* If the process doesn't respond back in time, the update is aborted.
* When the process responds back, RS kills it and marks it for refreshing.
* The process is then automatically restarted as for a buggy process and can
start running again.
* Live update is currently prototyped as a controlled failure.
2009-12-21 15:12:21 +01:00
|
|
|
sef_receive(ANY, &mess);
|
2009-09-29 20:47:56 +02:00
|
|
|
if (is_notify(mess.m_type)) {
|
|
|
|
switch (_ENDPOINT_P(mess.m_source)) {
|
|
|
|
case CLOCK:
|
|
|
|
f_expire_tmrs(NULL, NULL);
|
|
|
|
break;
|
|
|
|
default :
|
|
|
|
f_busy = BSY_IDLE;
|
|
|
|
break;
|
|
|
|
}
|
|
|
|
} else { /* expect hw interrupt */
|
2005-04-21 16:53:53 +02:00
|
|
|
f_busy = BSY_IDLE;
|
|
|
|
}
|
|
|
|
} while (f_busy == BSY_IO);
|
|
|
|
|
|
|
|
/* The controller supports 4 drives and returns a result for each of them.
|
|
|
|
* Collect all the results now. The old version only collected the first
|
|
|
|
* result. This happens to work for 2 drives, but it doesn't work for 3
|
|
|
|
* or more drives, at least with only drives 0 and 2 actually connected
|
|
|
|
* (the controller generates an extra interrupt for the middle drive when
|
|
|
|
* drive 2 is accessed and the driver panics).
|
|
|
|
*
|
|
|
|
* It would be better to keep collecting results until there are no more.
|
|
|
|
* For this, fdc_results needs to return the number of results (instead
|
|
|
|
* of OK) when it succeeds.
|
|
|
|
*/
|
|
|
|
for (i = 0; i < 4; i++) {
|
|
|
|
fdc_out(FDC_SENSE); /* probe FDC to make it return status */
|
|
|
|
(void) fdc_results(); /* flush controller */
|
|
|
|
}
|
|
|
|
for (i = 0; i < NR_DRIVES; i++) /* clear each drive */
|
|
|
|
floppy[i].fl_calibration = UNCALIBRATED;
|
|
|
|
|
|
|
|
/* The current timing parameters must be specified again. */
|
|
|
|
prev_dp = NULL;
|
|
|
|
}
|
|
|
|
|
|
|
|
/*===========================================================================*
|
|
|
|
* f_intr_wait *
|
|
|
|
*===========================================================================*/
|
2010-02-19 11:00:32 +01:00
|
|
|
PRIVATE int f_intr_wait(void)
|
2005-04-21 16:53:53 +02:00
|
|
|
{
|
|
|
|
/* Wait for an interrupt, but not forever. The FDC may have all the time of
|
|
|
|
* the world, but we humans do not.
|
|
|
|
*/
|
|
|
|
message mess;
|
|
|
|
|
2009-09-29 20:47:56 +02:00
|
|
|
/* We expect an interrupt, but if a timeout, occurs, report an error. */
|
2005-04-21 16:53:53 +02:00
|
|
|
do {
|
Basic System Event Framework (SEF) with ping and live update.
SYSLIB CHANGES:
- SEF must be used by every system process and is thereby part of the system
library.
- The framework provides a receive() interface (sef_receive) for system
processes to automatically catch known system even messages and process them.
- SEF provides a default behavior for each type of system event, but allows
system processes to register callbacks to override the default behavior.
- Custom (local to the process) or predefined (provided by SEF) callback
implementations can be registered to SEF.
- SEF currently includes support for 2 types of system events:
1. SEF Ping. The event occurs every time RS sends a ping to figure out
whether a system process is still alive. The default callback implementation
provided by SEF is to notify RS back to let it know the process is alive
and kicking.
2. SEF Live update. The event occurs every time RS sends a prepare to update
message to let a system process know an update is available and to prepare
for it. The live update support is very basic for now. SEF only deals with
verifying if the prepare state can be supported by the process, dumping the
state for debugging purposes, and providing an event-driven programming
model to the process to react to state changes check-in when ready to update.
- SEF should be extended in the future to integrate support for more types of
system events. Ideally, all the cross-cutting concerns should be integrated into
SEF to avoid duplicating code and ease extensibility. Examples include:
* PM notify messages primarily used at shutdown.
* SYSTEM notify messages primarily used for signals.
* CLOCK notify messages used for system alarms.
* Debug messages. IS could still be in charge of fkey handling but would
forward the debug message to the target process (e.g. PM, if the user
requested debug information about PM). SEF would then catch the message and
do nothing unless the process has registered an appropriate callback to
deal with the event. This simplifies the programming model to print debug
information, avoids duplicating code, and reduces the effort to print
debug information.
SYSTEM PROCESSES CHANGES:
- Every system process registers SEF callbacks it needs to override the default
system behavior and calls sef_startup() right after being started.
- sef_startup() does almost nothing now, but will be extended in the future to
support callbacks of its own to let RS control and synchronize with every
system process at initialization time.
- Every system process calls sef_receive() now rather than receive() directly,
to let SEF handle predefined system events.
RS CHANGES:
- RS supports a basic single-component live update protocol now, as follows:
* When an update command is issued (via "service update *"), RS notifies the
target system process to prepare for a specific update state.
* If the process doesn't respond back in time, the update is aborted.
* When the process responds back, RS kills it and marks it for refreshing.
* The process is then automatically restarted as for a buggy process and can
start running again.
* Live update is currently prototyped as a controlled failure.
2009-12-21 15:12:21 +01:00
|
|
|
sef_receive(ANY, &mess);
|
2009-09-29 20:47:56 +02:00
|
|
|
if (is_notify(mess.m_type)) {
|
|
|
|
switch (_ENDPOINT_P(mess.m_source)) {
|
|
|
|
case CLOCK:
|
|
|
|
f_expire_tmrs(NULL, NULL);
|
|
|
|
break;
|
|
|
|
default :
|
|
|
|
f_busy = BSY_IDLE;
|
|
|
|
break;
|
|
|
|
}
|
2005-04-21 16:53:53 +02:00
|
|
|
} else {
|
|
|
|
f_busy = BSY_IDLE;
|
|
|
|
}
|
|
|
|
} while (f_busy == BSY_IO);
|
|
|
|
|
|
|
|
if (f_busy == BSY_WAKEN) {
|
|
|
|
|
|
|
|
/* No interrupt from the FDC, this means that there is probably no
|
|
|
|
* floppy in the drive. Get the FDC down to earth and return error.
|
|
|
|
*/
|
|
|
|
need_reset = TRUE;
|
|
|
|
return(ERR_TIMEOUT);
|
|
|
|
}
|
|
|
|
return(OK);
|
|
|
|
}
|
|
|
|
|
|
|
|
/*===========================================================================*
|
|
|
|
* f_timeout *
|
|
|
|
*===========================================================================*/
|
2010-02-19 11:00:32 +01:00
|
|
|
PRIVATE void f_timeout(timer_t *tp)
|
2005-04-21 16:53:53 +02:00
|
|
|
{
|
|
|
|
/* This routine is called when a timer expires. Usually to tell that a
|
|
|
|
* motor has spun up, but also to forge an interrupt when it takes too long
|
|
|
|
* for the FDC to interrupt (no floppy in the drive). It sets a flag to tell
|
|
|
|
* what has happened.
|
|
|
|
*/
|
|
|
|
if (f_busy == BSY_IO) {
|
|
|
|
f_busy = BSY_WAKEN;
|
|
|
|
}
|
|
|
|
}
|
|
|
|
|
2005-09-11 19:09:11 +02:00
|
|
|
/*===========================================================================*
|
|
|
|
* read_id *
|
|
|
|
*===========================================================================*/
|
2010-02-19 11:00:32 +01:00
|
|
|
PRIVATE int read_id(void)
|
2005-04-21 16:53:53 +02:00
|
|
|
{
|
|
|
|
/* Determine current cylinder and sector. */
|
|
|
|
|
|
|
|
struct floppy *fp = f_fp;
|
|
|
|
int result;
|
|
|
|
u8_t cmd[2];
|
|
|
|
|
|
|
|
/* Never attempt a read id if the drive is uncalibrated or motor is off. */
|
|
|
|
if (fp->fl_calibration == UNCALIBRATED) return(ERR_READ_ID);
|
|
|
|
if ((motor_status & (1 << f_drive)) == 0) return(ERR_READ_ID);
|
|
|
|
|
|
|
|
/* The command is issued by outputting 2 bytes to the controller chip. */
|
|
|
|
cmd[0] = FDC_READ_ID; /* issue the read id command */
|
|
|
|
cmd[1] = (fp->fl_head << 2) | f_drive;
|
|
|
|
if (fdc_command(cmd, 2) != OK) return(ERR_READ_ID);
|
|
|
|
if (f_intr_wait() != OK) return(ERR_TIMEOUT);
|
|
|
|
|
|
|
|
/* Get controller status and check for errors. */
|
|
|
|
result = fdc_results();
|
|
|
|
if (result != OK) return(result);
|
|
|
|
|
2005-09-05 15:00:37 +02:00
|
|
|
if ((f_results[ST0] & ST0_BITS_TRANS) != TRANS_ST0) return(ERR_READ_ID);
|
2005-04-21 16:53:53 +02:00
|
|
|
if (f_results[ST1] | f_results[ST2]) return(ERR_READ_ID);
|
|
|
|
|
|
|
|
/* The next sector is next for I/O: */
|
|
|
|
fp->fl_sector = f_results[ST_SEC] - BASE_SECTOR + 1;
|
|
|
|
return(OK);
|
|
|
|
}
|
|
|
|
|
2005-09-11 19:09:11 +02:00
|
|
|
/*===========================================================================*
|
|
|
|
* f_do_open *
|
|
|
|
*===========================================================================*/
|
2005-04-21 16:53:53 +02:00
|
|
|
PRIVATE int f_do_open(dp, m_ptr)
|
|
|
|
struct driver *dp;
|
|
|
|
message *m_ptr; /* pointer to open message */
|
|
|
|
{
|
|
|
|
/* Handle an open on a floppy. Determine diskette type if need be. */
|
|
|
|
|
|
|
|
int dtype;
|
|
|
|
struct test_order *top;
|
|
|
|
|
|
|
|
/* Decode the message parameters. */
|
|
|
|
if (f_prepare(m_ptr->DEVICE) == NIL_DEV) return(ENXIO);
|
|
|
|
|
|
|
|
dtype = f_device & DEV_TYPE_BITS; /* get density from minor dev */
|
|
|
|
if (dtype >= MINOR_fd0p0) dtype = 0;
|
|
|
|
|
|
|
|
if (dtype != 0) {
|
|
|
|
/* All types except 0 indicate a specific drive/medium combination.*/
|
|
|
|
dtype = (dtype >> DEV_TYPE_SHIFT) - 1;
|
|
|
|
if (dtype >= NT) return(ENXIO);
|
|
|
|
f_fp->fl_density = dtype;
|
|
|
|
(void) f_prepare(f_device); /* Recompute parameters. */
|
|
|
|
return(OK);
|
|
|
|
}
|
|
|
|
if (f_device & FORMAT_DEV_BIT) return(EIO); /* Can't format /dev/fdN */
|
|
|
|
|
|
|
|
/* The device opened is /dev/fdN. Experimentally determine drive/medium.
|
|
|
|
* First check fl_density. If it is not NO_DENS, the drive has been used
|
|
|
|
* before and the value of fl_density tells what was found last time. Try
|
|
|
|
* that first. If the motor is still running then assume nothing changed.
|
|
|
|
*/
|
|
|
|
if (f_fp->fl_density != NO_DENS) {
|
|
|
|
if (motor_status & (1 << f_drive)) return(OK);
|
|
|
|
if (test_read(f_fp->fl_density) == OK) return(OK);
|
|
|
|
}
|
|
|
|
|
|
|
|
/* Either drive type is unknown or a different diskette is now present.
|
|
|
|
* Use test_order to try them one by one.
|
|
|
|
*/
|
|
|
|
for (top = &test_order[0]; top < &test_order[NT-1]; top++) {
|
|
|
|
dtype = top->t_density;
|
|
|
|
|
|
|
|
/* Skip densities that have been proven to be impossible */
|
|
|
|
if (!(f_fp->fl_class & (1 << dtype))) continue;
|
|
|
|
|
|
|
|
if (test_read(dtype) == OK) {
|
|
|
|
/* The test succeeded, use this knowledge to limit the
|
|
|
|
* drive class to match the density just read.
|
|
|
|
*/
|
|
|
|
f_fp->fl_class &= top->t_class;
|
|
|
|
return(OK);
|
|
|
|
}
|
|
|
|
/* Test failed, wrong density or did it time out? */
|
|
|
|
if (f_busy == BSY_WAKEN) break;
|
|
|
|
}
|
|
|
|
f_fp->fl_density = NO_DENS;
|
|
|
|
return(EIO); /* nothing worked */
|
|
|
|
}
|
|
|
|
|
2005-09-11 19:09:11 +02:00
|
|
|
/*===========================================================================*
|
|
|
|
* test_read *
|
|
|
|
*===========================================================================*/
|
2010-02-19 11:00:32 +01:00
|
|
|
PRIVATE int test_read(int density)
|
2005-04-21 16:53:53 +02:00
|
|
|
{
|
|
|
|
/* Try to read the highest numbered sector on cylinder 2. Not all floppy
|
|
|
|
* types have as many sectors per track, and trying cylinder 2 finds the
|
|
|
|
* ones that need double stepping.
|
|
|
|
*/
|
|
|
|
int device;
|
|
|
|
off_t position;
|
|
|
|
iovec_t iovec1;
|
|
|
|
int result;
|
|
|
|
|
|
|
|
f_fp->fl_density = density;
|
|
|
|
device = ((density + 1) << DEV_TYPE_SHIFT) + f_drive;
|
|
|
|
|
|
|
|
(void) f_prepare(device);
|
|
|
|
position = (off_t) f_dp->test << SECTOR_SHIFT;
|
2009-09-21 16:25:54 +02:00
|
|
|
iovec1.iov_addr = (vir_bytes) floppy_buf;
|
2005-04-21 16:53:53 +02:00
|
|
|
iovec1.iov_size = SECTOR_SIZE;
|
2009-12-02 10:57:48 +01:00
|
|
|
result = f_transfer(SELF, DEV_GATHER_S, cvul64(position), &iovec1, 1);
|
2005-04-21 16:53:53 +02:00
|
|
|
|
|
|
|
if (iovec1.iov_size != 0) return(EIO);
|
|
|
|
|
2005-08-08 14:16:59 +02:00
|
|
|
partition(&f_dtab, f_drive, P_FLOPPY, 0);
|
2005-04-21 16:53:53 +02:00
|
|
|
return(OK);
|
|
|
|
}
|
|
|
|
|
2005-09-11 19:09:11 +02:00
|
|
|
/*===========================================================================*
|
|
|
|
* f_geometry *
|
|
|
|
*===========================================================================*/
|
2010-02-19 11:00:32 +01:00
|
|
|
PRIVATE void f_geometry(struct partition *entry)
|
2005-04-21 16:53:53 +02:00
|
|
|
{
|
|
|
|
entry->cylinders = f_dp->cyls;
|
|
|
|
entry->heads = NR_HEADS;
|
|
|
|
entry->sectors = f_sectors;
|
|
|
|
}
|
2005-09-05 15:00:37 +02:00
|
|
|
|
Basic System Event Framework (SEF) with ping and live update.
SYSLIB CHANGES:
- SEF must be used by every system process and is thereby part of the system
library.
- The framework provides a receive() interface (sef_receive) for system
processes to automatically catch known system even messages and process them.
- SEF provides a default behavior for each type of system event, but allows
system processes to register callbacks to override the default behavior.
- Custom (local to the process) or predefined (provided by SEF) callback
implementations can be registered to SEF.
- SEF currently includes support for 2 types of system events:
1. SEF Ping. The event occurs every time RS sends a ping to figure out
whether a system process is still alive. The default callback implementation
provided by SEF is to notify RS back to let it know the process is alive
and kicking.
2. SEF Live update. The event occurs every time RS sends a prepare to update
message to let a system process know an update is available and to prepare
for it. The live update support is very basic for now. SEF only deals with
verifying if the prepare state can be supported by the process, dumping the
state for debugging purposes, and providing an event-driven programming
model to the process to react to state changes check-in when ready to update.
- SEF should be extended in the future to integrate support for more types of
system events. Ideally, all the cross-cutting concerns should be integrated into
SEF to avoid duplicating code and ease extensibility. Examples include:
* PM notify messages primarily used at shutdown.
* SYSTEM notify messages primarily used for signals.
* CLOCK notify messages used for system alarms.
* Debug messages. IS could still be in charge of fkey handling but would
forward the debug message to the target process (e.g. PM, if the user
requested debug information about PM). SEF would then catch the message and
do nothing unless the process has registered an appropriate callback to
deal with the event. This simplifies the programming model to print debug
information, avoids duplicating code, and reduces the effort to print
debug information.
SYSTEM PROCESSES CHANGES:
- Every system process registers SEF callbacks it needs to override the default
system behavior and calls sef_startup() right after being started.
- sef_startup() does almost nothing now, but will be extended in the future to
support callbacks of its own to let RS control and synchronize with every
system process at initialization time.
- Every system process calls sef_receive() now rather than receive() directly,
to let SEF handle predefined system events.
RS CHANGES:
- RS supports a basic single-component live update protocol now, as follows:
* When an update command is issued (via "service update *"), RS notifies the
target system process to prepare for a specific update state.
* If the process doesn't respond back in time, the update is aborted.
* When the process responds back, RS kills it and marks it for refreshing.
* The process is then automatically restarted as for a buggy process and can
start running again.
* Live update is currently prototyped as a controlled failure.
2009-12-21 15:12:21 +01:00
|
|
|
|