From mirageos-devel-bounces@lists.xenproject.org Wed Mar 01 14:00:31 2023 Return-path: Envelope-to: archives@lists.xenproject.org Delivery-date: Wed, 01 Mar 2023 14:00:31 +0000 Received: from list by lists.xenproject.org with outflank-mailman.504049.776549 (Exim 4.92) (envelope-from ) id 1pXN0I-0008OK-Gg; Wed, 01 Mar 2023 14:00:22 +0000 X-Outflank-Mailman: Message body and most headers restored to incoming version Received: by outflank-mailman (output) from mailman id 504049.776549; Wed, 01 Mar 2023 14:00:22 +0000 Received: from localhost ([127.0.0.1] helo=lists.xenproject.org) by lists.xenproject.org with esmtp (Exim 4.92) (envelope-from ) id 1pXN0I-0008OD-Dr; Wed, 01 Mar 2023 14:00:22 +0000 Received: by outflank-mailman (input) for mailman id 504049; Wed, 01 Mar 2023 14:00:21 +0000 Received: from se1-gles-sth1-in.inumbo.com ([159.253.27.254] helo=se1-gles-sth1.inumbo.com) by lists.xenproject.org with esmtp (Exim 4.92) (envelope-from ) id 1pXN0H-0008O5-RF for mirageos-devel@lists.xenproject.org; Wed, 01 Mar 2023 14:00:21 +0000 Received: from mail.mehnert.org (mail.mehnert.org [213.73.89.200]) by se1-gles-sth1.inumbo.com (Halon) with ESMTPS id 674f718a-b839-11ed-96a6-2f268f93b82a; Wed, 01 Mar 2023 15:00:20 +0100 (CET) Received: from [192.168.42.80] (dslb-094-223-116-173.094.223.pools.vodafone-ip.de [94.223.116.173]) (using TLSv1.3 with cipher TLS_AES_128_GCM_SHA256 (128/128 bits) key-exchange X25519 server-signature RSA-PSS (2048 bits) server-digest SHA256 client-signature RSA-PSS (2048 bits) client-digest SHA256) (Client CN "hannes@mehnert.org", Issuer "mehnert root CA" (not verified)) by mail.mehnert.org (Postfix) with ESMTPS id 915EB16FE4 for ; Wed, 1 Mar 2023 15:00:19 +0100 (CET) X-BeenThere: mirageos-devel@lists.xenproject.org List-Id: Developer list for MirageOS List-Unsubscribe: , List-Post: List-Help: List-Subscribe: , Errors-To: mirageos-devel-bounces@lists.xenproject.org Precedence: list Sender: "MirageOS-devel" X-Inumbo-ID: 674f718a-b839-11ed-96a6-2f268f93b82a Message-ID: <3329e34c-3d0f-2fa5-9956-d0adf82dc5e9@mehnert.org> Date: Wed, 1 Mar 2023 15:00:19 +0100 MIME-Version: 1.0 User-Agent: Mozilla/5.0 (X11; FreeBSD amd64; rv:102.0) Gecko/20100101 Thunderbird/102.6.1 Subject: Re: MirageOS biweekly meeting; next Mar 15 2023 14:00 CET Content-Language: en-US To: mirageos-devel@lists.xenproject.org References: <2ad7ed36-9816-1c82-174c-1a922ae33b9a@gmail.com> <47ec0127-9286-e18a-1a1b-f29d7abf4377@mehnert.org> From: Hannes Mehnert In-Reply-To: <47ec0127-9286-e18a-1a1b-f29d7abf4377@mehnert.org> Content-Type: text/plain; charset=UTF-8; format=flowed Content-Transfer-Encoding: 7bit Hey, our notes are below -- next meeting in two weeks (Mar 15th 14:00 CET in whereby.com/ocamllabs), agenda https://pad.data.coop/k2z2UqDCQ1G1ZOic6g7XwA# (please add stuff you'd like to discuss). Best, Hannes # MirageOS meeting 2023-03-01 Attendees: reynir, Pierre, Taka, Lortex, Thomas Leonard, Hannes, dinosaure ## Clock drift in solo5 (reynir) - https://github.com/Solo5/solo5/issues/549 - on suspend and resume, the hvt clock gets behind several weeks - solo5 takes the offset once and uses that to compute the wall clock time - ways forward: - use the system call on every `now_d_ps ()` call (will be slow) - keep the offset, but recompute every few minutes (according to monotonic clock) - provide access to the system call/hypercall (would require changes to mirage-clock code) - curious how a NTP implementation could work (since we don't get any notification from the OS when the computer goes to sleep / resumes) - reynir also suggests to move the offset computation into the mirage code ## Solving recent breakages in MirageOS 4 (Lortex) - recent changes to the opam-repository lead to mirage failures: - dune 3.7 changed semantics that broke chamelon package (which opam-monorepo always picks the latest release of dune) - ppxlib 0.29 included a vendoring of ppx_sexp_conv, which lead opam-monorepo to provide multiple ppx_sexp_conv - dune 3.7 uses `(lang dune 3.5)` and opam-monorepo pulls in the latest dune - which then can't be built if the switch has dune<3.5.0. ### solution: custom opam repository for MirageOS unikernels - a solution would be to maintain a custom opam-repository at the mirage organization that is automatically updated (& merged) when the mirage CI succeeds - we could even provide a branch of that opam-repository for each mirage minor release to sustain working versions, and drop upper bound constraints from the mirage utility - instead of adding dune-overlays etc. in the Makefile (during depend/pull), add the mirage-opam-repository - action item 1: extend the Mirage CI to run on that repository - action item 2: extend the Mirage CI to update the mirage-opam-repository when opam-repository or dune-overlays repository updates - action item 3: send notifications to opam-repository PRs ## mirage configure should check whether config.ml is compatible with the mirage version - https://github.com/mirage/mirage/issues/1381 - maybe a step before mirage configure is executed is needed (comparing the output of --version with the required minimal (maximal?) one) ## Solo5 and OCaml 5 (thread local storage -- Pierre) - https://github.com/Solo5/solo5/pull/546 - Pierre did some work on how solo5 could deal with thread specific variables (`__thread`) that OCaml 5 runtime adds - it is difficult: two toolchains (gcc & GNU ld vs clang & lld) - Pierre has developed linker scripts that work for both GNU ld and lld - at the moment, 4kB are reserved for the TLS - the PR exposes the size of tbss and tdata segments so ocaml-solo5 can allocate that region - the linker computes the size/offset of the section - review of that PR is highly welcome - in the future (multiple CPUs), we'll need to allocate one tdata+tbss per CPU and copy over the tdata - unclear whether it works on powerpc or arm64 - tested on OpenBSD & Linux tested on X86 - action item 1: review PR - action item 2: test on powerpc & arm64 ## Old issue in qubes-mirage-firewall (Pierre) - https://github.com/mirage/qubes-mirage-firewall/issues/107 - sys-net is not autostarted, q-m-f receives a EACCESS - proposal: wait for xenstore being initialized with the network interface - (possible?) fix in https://github.com/palainp/mirage-net-xen/commit/1afc600c96dd8c6b6024d383de0dae21cf9151c7 - On Qubes-os forum: https://forum.qubes-os.org/t/libxenlight-failed-unable-to-add-vif-devices/16958/1 - action: wait for qubes forum user to test whether the above commit fixes their issue ## next meeting March 15th 14:00 CET https://whereby.com/ocamllabs From mirageos-devel-bounces@lists.xenproject.org Fri Mar 03 11:53:21 2023 Return-path: Envelope-to: archives@lists.xenproject.org Delivery-date: Fri, 03 Mar 2023 11:53:21 +0000 Received: from list by lists.xenproject.org with outflank-mailman.505919.778920 (Exim 4.92) (envelope-from ) id 1pY3yH-0007oc-DQ; Fri, 03 Mar 2023 11:53:09 +0000 X-Outflank-Mailman: Message body and most headers restored to incoming version Received: by outflank-mailman (output) from mailman id 505919.778920; Fri, 03 Mar 2023 11:53:09 +0000 Received: from localhost ([127.0.0.1] helo=lists.xenproject.org) by lists.xenproject.org with esmtp (Exim 4.92) (envelope-from ) id 1pY3yH-0007oV-Aq; Fri, 03 Mar 2023 11:53:09 +0000 Received: by outflank-mailman (input) for mailman id 505919; Fri, 03 Mar 2023 11:53:07 +0000 Received: from se1-gles-flk1-in.inumbo.com ([94.247.172.50] helo=se1-gles-flk1.inumbo.com) by lists.xenproject.org with esmtp (Exim 4.92) (envelope-from ) id 1pY3yF-0007oP-HC for mirageos-devel@lists.xenproject.org; Fri, 03 Mar 2023 11:53:07 +0000 Received: from mail.mehnert.org (mail.mehnert.org [213.73.89.200]) by se1-gles-flk1.inumbo.com (Halon) with ESMTPS id f3e05b1d-b9b9-11ed-a550-8520e6686977; Fri, 03 Mar 2023 12:53:04 +0100 (CET) Received: from [192.168.42.10] (dslb-094-223-116-039.094.223.pools.vodafone-ip.de [94.223.116.39]) (using TLSv1.3 with cipher TLS_AES_128_GCM_SHA256 (128/128 bits) key-exchange X25519 server-signature RSA-PSS (2048 bits) server-digest SHA256 client-signature RSA-PSS (2048 bits) client-digest SHA256) (Client CN "hannes@mehnert.org", Issuer "mehnert root CA" (not verified)) by mail.mehnert.org (Postfix) with ESMTPS id 047C91F80 for ; Fri, 3 Mar 2023 12:53:01 +0100 (CET) X-BeenThere: mirageos-devel@lists.xenproject.org List-Id: Developer list for MirageOS List-Unsubscribe: , List-Post: List-Help: List-Subscribe: , Errors-To: mirageos-devel-bounces@lists.xenproject.org Precedence: list Sender: "MirageOS-devel" X-Inumbo-ID: f3e05b1d-b9b9-11ed-a550-8520e6686977 Message-ID: <2b09e067-2f53-3f41-5874-304cd798e303@mehnert.org> Date: Fri, 3 Mar 2023 12:53:00 +0100 MIME-Version: 1.0 User-Agent: Mozilla/5.0 (X11; FreeBSD amd64; rv:102.0) Gecko/20100101 Thunderbird/102.6.1 From: Hannes Mehnert Subject: Retreat May 1st - 7th in Marrakech To: mirageos-devel@lists.xenproject.org Content-Language: en-US Content-Type: text/plain; charset=UTF-8; format=flowed Content-Transfer-Encoding: 7bit Hi, I'm happy to announce that there will be a next retreat in Marrakech. Please find full details at https://retreat.mirage.io and sign up as soon as possible (latest March 15th). The fee for accomodation and full board is 450 EUR. Best, Hannes From mirageos-devel-bounces@lists.xenproject.org Wed Mar 15 15:37:51 2023 Return-path: Envelope-to: archives@lists.xenproject.org Delivery-date: Wed, 15 Mar 2023 15:37:51 +0000 Received: from list by lists.xenproject.org with outflank-mailman.510121.787251 (Exim 4.92) (envelope-from ) id 1pcTC8-0003DK-PC; Wed, 15 Mar 2023 15:37:40 +0000 X-Outflank-Mailman: Message body and most headers restored to incoming version Received: by outflank-mailman (output) from mailman id 510121.787251; Wed, 15 Mar 2023 15:37:40 +0000 Received: from localhost ([127.0.0.1] helo=lists.xenproject.org) by lists.xenproject.org with esmtp (Exim 4.92) (envelope-from ) id 1pcTC8-0003DD-Ll; Wed, 15 Mar 2023 15:37:40 +0000 Received: by outflank-mailman (input) for mailman id 510121; Wed, 15 Mar 2023 15:37:38 +0000 Received: from se1-gles-sth1-in.inumbo.com ([159.253.27.254] helo=se1-gles-sth1.inumbo.com) by lists.xenproject.org with esmtp (Exim 4.92) (envelope-from ) id 1pcTC6-0003D7-O3 for mirageos-devel@lists.xenproject.org; Wed, 15 Mar 2023 15:37:38 +0000 Received: from mail-ed1-x536.google.com (mail-ed1-x536.google.com [2a00:1450:4864:20::536]) by se1-gles-sth1.inumbo.com (Halon) with ESMTPS id 4ecb2412-c347-11ed-87f5-c1b5be75604c; Wed, 15 Mar 2023 16:37:37 +0100 (CET) Received: by mail-ed1-x536.google.com with SMTP id z21so11843002edb.4 for ; Wed, 15 Mar 2023 08:37:35 -0700 (PDT) X-BeenThere: mirageos-devel@lists.xenproject.org List-Id: Developer list for MirageOS List-Unsubscribe: , List-Post: List-Help: List-Subscribe: , Errors-To: mirageos-devel-bounces@lists.xenproject.org Precedence: list Sender: "MirageOS-devel" X-Inumbo-ID: 4ecb2412-c347-11ed-87f5-c1b5be75604c DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20210112; t=1678894654; h=to:subject:message-id:date:from:mime-version:from:to:cc:subject :date:message-id:reply-to; bh=n+/tuij4KuCSwVhYynnMpr7sMYzAlNv9EFMiwi68P84=; b=ZO9MUwFMOnzw4Gyt/qt5RfMEjjO5Jvx6kEFHP12UUqRFX5+xRHxXfoOfrmlZJAgx6Q Hq92jwp2Eh8+hOLJaZX79KnpU4//mqENKdpEne7zf+n5J9ERiN1hqbFRQzCgMt5fi+7x zeGXOstXohrJf0gWEu2Ucm8AYcFdPEE2UY92nIvR1M3KDagUW5mkRiIUZ3OPHs6IFPSP BHbUVN4yCpIUGyiGwcpZe/CdnlKzasOUkZKtYJmHurwKZ3VWUx/7vUw4o0/hypbrjCUI 4AswDB97gsPoGCwpbMaE2s3AVbk/pgkwF5i9Pc8UrGC9HM1W/8rhnwbWWwaWsPdXBoVt F2BQ== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20210112; t=1678894654; h=to:subject:message-id:date:from:mime-version:x-gm-message-state :from:to:cc:subject:date:message-id:reply-to; bh=n+/tuij4KuCSwVhYynnMpr7sMYzAlNv9EFMiwi68P84=; b=fCDkzV/pi2Fcv3+PsF/4Uu5bZzNEP13WGS7JrhyFzQ+SuOLBCe8tNk3BSgqK4hO4pd Nuakgu6XzCXHyHcvxIoPNDbJY/ZHpgqMemLxEKTAC8IdeQAfAqrdlDTy3LpE4z8fSN/a hwEMZ0Wr4RrXGYebSjwhzEDNHJSRhKryfhquuEaIFNTriEhuwhMmqe+6MrWbrR1ZVHrk 9ThtBuMvoWRyyFGSXpG73qkeaKEANxjDiTv9VcunGbNIlyIi7Ys5jEJkaeL6fnIH0cOH SEPAFId1KuCQRNJDOwu5J1drrmJAdCOTA34rGJ8VV2BoWvbM4P8WJd5h0KpIyUkJnwFX e7Cg== X-Gm-Message-State: AO0yUKWdr2mgqqUtWKc1VXM/nUU8Xh/nC/LHfqj3CbhpPWDwiMqvxfFq LRm67f0y1jaqIOM0cLrhYAC9tOF5HerghvOW10quWtRBS0cJSA== X-Google-Smtp-Source: AK7set/ZJBq4goQCFJ0ytKFW+rZK0yTrRsKxMtlkHTjUHbRpkeiQuEzH+J746pAjlQad3UKRGs2bNU/KKl5SHF8Ji4g= X-Received: by 2002:a50:bb4a:0:b0:4fa:123:3b32 with SMTP id y68-20020a50bb4a000000b004fa01233b32mr1768157ede.7.1678894654358; Wed, 15 Mar 2023 08:37:34 -0700 (PDT) MIME-Version: 1.0 From: Romain Calascibetta Date: Wed, 15 Mar 2023 16:37:24 +0100 Message-ID: Subject: MirageOS meeting (15/03/2023) To: mirageos-devel Content-Type: multipart/alternative; boundary="0000000000007d08c705f6f21ff1" --0000000000007d08c705f6f21ff1 Content-Type: text/plain; charset="UTF-8" Here are the notes for the MirageOS meeting, we have organised the new date to 29/03/2023 (14h00 CET). # MirageOS meeting (15/03/2023) Participant: Pierre, Christiano, Romain ## Solo5 and TLS - Hannes did a review - Romain waiting a double check - Romain asks about a protection (surround TLS zone with read-only segments) - we copy .tdata to the heap - Pierre and Christiano think that we don't need to protect such zone - Christiano think that if it does not grow, we don't need to protect - The calculation of the size needed by .tdata/.tbss is done at link time - Romain will try to make a release as soon as possible - Romain will try to fix issues pending on Solo5 - Pierre will change the `ocaml-solo5` according to the next release of Solo5 - Pierre said that we need to `malloc()` for each `pthread_create` but that's fine, currently we use only one "main" thread and no `pthread_create` (init can be done in `libc_init()`) ## unikernel dependencies - Pierre: some issues about OCaml 5 and `opam-monorepo` - Pierre: it will be nice to merge the PR in mirage which fix these issues ## opam monorepo / opam overlays - Hard to talk and move forward about that ## MirageOS retreat - Pierre will not be able to come - Christiano can come - Romain will try to come ## Unikraft meeting - They asking to do a IRL meeting, Robur & Solo5 team got an email about that. The meeting will be in Aachen in Germany. The Robur/Solo5 team did not respond yet but for anyone from the MirageOS/core team, it will be great to come and exchange ## Delete PPX from the crypto stack - Hannes did a huge work to delete PPX on the mirage-crypto and we are able to produce smaller unikernels - Romain try to do the same on libraries but it's a time to time work ## Next meeting - Next meeting 29/03/2023, 14h00 -- Romain Calascibetta - http://din.osau.re/ --0000000000007d08c705f6f21ff1 Content-Type: text/html; charset="UTF-8" Content-Transfer-Encoding: quoted-printable
Here are the notes for the MirageOS meeting, we have = organised the new date to 29/03/2023 (14h00 CET).

= # MirageOS meeting (15/03/2023)

Participant: Pierre, Christiano, Rom= ain

## Solo5 and TLS

- Hannes did a review
- Romain waitin= g a double check
- Romain asks about a protection (surround TLS zone wit= h read-only segments)
- we copy .tdata to the heap
- Pierre and Chris= tiano think that we don't need to protect such zone
- Christiano thi= nk that if it does not grow, we don't need to protect
- The calculat= ion of the size needed by .tdata/.tbss is done at link time
- Romain wil= l try to make a release as soon as possible
- Romain will try to fix iss= ues pending on Solo5
- Pierre will change the `ocaml-solo5` according to= the next release of Solo5
- Pierre said that we need to `malloc()` for = each `pthread_create` but that's fine, currently we use only one "= main" thread and no `pthread_create` (init can be done in `libc_init()= `)

## unikernel dependencies

- Pierre: some issues about OCam= l 5 and `opam-monorepo`
- Pierre: it will be nice to merge the PR in mir= age which fix these issues

## opam monorepo / opam overlays

-= Hard to talk and move forward about that

## MirageOS retreat
- Pierre will not be able to come
- Christiano can come
- Romain wil= l try to come

## Unikraft meeting

- They asking to do a IRL m= eeting, Robur & Solo5 team got an email about that. The meeting will be= in Aachen in Germany. The Robur/Solo5 team did not respond yet but for any= one from the MirageOS/core team, it will be great to come and exchange
<= br>## Delete PPX from the crypto stack

- Hannes did a huge work to d= elete PPX on the mirage-crypto and we are able to produce smaller unikernel= s
- Romain try to do the same on libraries but it's a time to time w= ork

## Next meeting

- Next meeting 29/03/2023, 14h00
--
Romain Calascibet= ta - http://din.osau.re/<= /a>
--0000000000007d08c705f6f21ff1--