From owner-freebsd-stable@FreeBSD.ORG Tue Feb 21 13:35:58 2012 Return-Path: Delivered-To: stable@freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:4f8:fff6::34]) by hub.freebsd.org (Postfix) with ESMTP id B7C27106566B; Tue, 21 Feb 2012 13:35:58 +0000 (UTC) (envelope-from alexander@leidinger.net) Received: from mail.ebusiness-leidinger.de (mail.ebusiness-leidinger.de [217.11.53.44]) by mx1.freebsd.org (Postfix) with ESMTP id 2133C8FC17; Tue, 21 Feb 2012 13:35:57 +0000 (UTC) Received: from outgoing.leidinger.net (p5796D1ED.dip.t-dialin.net [87.150.209.237]) by mail.ebusiness-leidinger.de (Postfix) with ESMTPSA id 6478A844855; Tue, 21 Feb 2012 14:35:42 +0100 (CET) Received: from webmail.leidinger.net (webmail.Leidinger.net [IPv6:fd73:10c7:2053:1::3:102]) by outgoing.leidinger.net (Postfix) with ESMTPS id B138356E1; Tue, 21 Feb 2012 14:35:39 +0100 (CET) DKIM-Signature: v=1; a=rsa-sha256; c=simple/simple; d=leidinger.net; s=outgoing-alex; t=1329831339; bh=x6C84oYcO7m3aPqiTBVOm87R1xY0F417ZK4lFUDia5M=; h=Date:Message-ID:From:To:Subject:Content-Type:MIME-Version; b=KtgkASP2nKijB1mJe9mo7vasp9S+aDheCKtwh0om6xtnKCcS+OgFrcbUoU8kxi5rW on0/MJJqS1IDAH9d6S5My/VypBarveV+Rzu8Eb+Rzco0eubfvO4WxfPfz2hKXEJ6EE 6t4dUvTriLWOlCiiNuHsGNfcPKVnB3a1owxZLh5FsT/72Nu0sGBOIST0oA24RzdF8I WorX03N1tKG2LE4WiQ+kq/BjTyLv8GAhMSRfg8UbrNZ/7ted7IOBHMBjM5pTuCkJUY sf7o+IEUJL0XNs1gEUjDKWTdUM4TjOWB6bSR6Xy9gBzX9Jo8TWMnr4b+u4Gb2NIpLO gaCbX1Wd1Pz9g== Received: (from www@localhost) by webmail.leidinger.net (8.14.5/8.14.4/Submit) id q1LDZdep039948; Tue, 21 Feb 2012 14:35:39 +0100 (CET) (envelope-from Alexander@Leidinger.net) X-Authentication-Warning: webmail.leidinger.net: www set sender to Alexander@Leidinger.net using -f Received: from 85.94.224.20 ([85.94.224.20]) by webmail.leidinger.net (Horde Framework) with HTTP; Tue, 21 Feb 2012 14:35:39 +0100 Date: Tue, 21 Feb 2012 14:35:37 +0100 Message-ID: <20120221143537.Horde.deyFDZjmRSRPQ52pxBIpnLA@webmail.leidinger.net> From: Alexander Leidinger To: current@FreeBSD.org, stable@FreeBSD.org User-Agent: Internet Messaging Program (IMP) H4 (5.0.18) Content-Type: text/plain; charset=UTF-8; format=flowed; DelSp=Yes MIME-Version: 1.0 Content-Disposition: inline X-EBL-MailScanner-Information: Please contact the ISP for more information X-EBL-MailScanner-ID: 6478A844855.A06DB X-EBL-MailScanner: Found to be clean X-EBL-MailScanner-SpamCheck: not spam, spamhaus-ZEN, SpamAssassin (not cached, score=0.259, required 6, autolearn=disabled, AWL -1.40, DKIM_SIGNED 0.10, DKIM_VALID -0.10, DKIM_VALID_AU -0.10, RCVD_IN_SORBS 1.00, RCVD_IN_SORBS_WEB 0.61, TW_EQ 0.08, TW_QC 0.08, T_RP_MATCHES_RCVD -0.01) X-EBL-MailScanner-From: alexander@leidinger.net X-EBL-MailScanner-Watermark: 1330436143.85177@uWDe72kcRGSnHkdXY4ghNA X-EBL-Spam-Status: No Cc: Subject: [CFT] modular kernel config X-BeenThere: freebsd-stable@freebsd.org X-Mailman-Version: 2.1.5 Precedence: list List-Id: Production branch of FreeBSD source code List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 21 Feb 2012 13:35:58 -0000 Hi, I created a kernel config for i386/amd64 (should work on -current and 9.x) and a suitable loader.conf which: - tries to provide as much features as GENERIC (I lost one or two disk controllers, they are not available as a module... or I didn't find them) - incorporates some more features based upon a poll on stable@ (see below) - loads as much as possible as a module I've compile-tested them on i386 and amd64, but I didn't had time yet to give it a try on a spare machine. I may get some time next week to test (i386 only). It would be nice if someone could help testing: - compile the kernel - make _sure_ you have a way to recover the system in case the new kernel+loader.conf fails - verify that the example loader.conf contains all devices which are important for you - copy the example loader.conf to /boot/loader.conf - give it a try You can download from http://www.Leidinger.net/FreeBSD/current-patches/ The files are - i386_SMALL - i386_SMALL_loader.conf - amd64_SMALL - amd64_SMALL_loader.conf I didn't provide direct links for eqch one on purpose. If you do not know how to recover a system with an unsuitable loader.conf, don't give this a try (you could check a diff between GENERIC and SMALL, and make sure all removed devices which are imporant for you are in the loader.conf). They should work on -current and on 9.x, for 8.x I'm not sure if it woll work without removing some stuff (GENERIC on 8.x comes without some more debugging options, make sure you don't get surprised by them, but those may not be the only differences). I didn't use the name MODULAR on purpose, I've chosen a name where the first letter does not yet exist in the kernel config directory, to make tab-completion more easy. If you are not happy with the name, keep your opinion for yourself please, until after you tested this on a (maybe virtual) system. The loader.conf was generated with a script from a diff between GENERIC and SMALL, if there's a name mismatch between the config-name and the module-name, the script may have missed the module (I added some missing sound modules, but I may have overlooked something). You better double-check before giving it a try. The loader.conf is also supposed to disable some features (at the end of the file) which are new compared to what is in GENERIC, if the particular feature could cause a change in behavior. The new stuff in the kernel config compared to GENERIC is (in order of number of requests from users): - IPSEC (+ device enc + IPSEC_NAT_T) - ALTQ - SW_WATCHDOG - QUOTA - IPSTEALTH (disabled in loader.conf) - IPFIREWALL_FORWARD (touches every packet, power users which need a bigger PPS but not this feature can recompile the kernel, discussed with julian@) - FLOWTABLE (disabled in loader.conf) - BPF_JITTER In the poll there where some more options requested, but most of them can be handled via the loader or sysctl (e.g. the firewalls can be loaded as modules). For some of them I added some comments at the end of the SMALL config to make it more easy to find the correct way of configuring them. Doc-committers may want to have a look, maybe there's an opportunity to improve existing documentation. I'm interested in success reports, failure reports, and reports about missing stuff in loader.conf (mainly compared to the devices available in GENERIC, but missing stuff which could help getting a system installed and booted is welcome even if what you propose is not in GENERIC). Bye, Alexander. -- http://www.Leidinger.net Alexander @ Leidinger.net: PGP ID = B0063FE7 http://www.FreeBSD.org netchild @ FreeBSD.org : PGP ID = 72077137