CloudABI: Running Untrusted Programs Directly on top of &os;

From owner-svn-doc-head@freebsd.org Fri Oct 28 18:59:38 2016 Return-Path: Delivered-To: svn-doc-head@mailman.ysv.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:1900:2254:206a::19:1]) by mailman.ysv.freebsd.org (Postfix) with ESMTP id 843BAC23747; Fri, 28 Oct 2016 18:59:38 +0000 (UTC) (envelope-from wblock@FreeBSD.org) Received: from repo.freebsd.org (repo.freebsd.org [IPv6:2610:1c1:1:6068::e6a:0]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (Client did not present a certificate) by mx1.freebsd.org (Postfix) with ESMTPS id 1A81AF0F; Fri, 28 Oct 2016 18:59:38 +0000 (UTC) (envelope-from wblock@FreeBSD.org) Received: from repo.freebsd.org ([127.0.1.37]) by repo.freebsd.org (8.15.2/8.15.2) with ESMTP id u9SIxbj8079728; Fri, 28 Oct 2016 18:59:37 GMT (envelope-from wblock@FreeBSD.org) Received: (from wblock@localhost) by repo.freebsd.org (8.15.2/8.15.2/Submit) id u9SIxbge079727; Fri, 28 Oct 2016 18:59:37 GMT (envelope-from wblock@FreeBSD.org) Message-Id: <201610281859.u9SIxbge079727@repo.freebsd.org> X-Authentication-Warning: repo.freebsd.org: wblock set sender to wblock@FreeBSD.org using -f From: Warren Block Date: Fri, 28 Oct 2016 18:59:37 +0000 (UTC) To: doc-committers@freebsd.org, svn-doc-all@freebsd.org, svn-doc-head@freebsd.org Subject: svn commit: r49604 - head/en_US.ISO8859-1/htdocs/news/status X-SVN-Group: doc-head MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit X-BeenThere: svn-doc-head@freebsd.org X-Mailman-Version: 2.1.23 Precedence: list List-Id: SVN commit messages for the doc tree for head List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 28 Oct 2016 18:59:38 -0000 Author: wblock Date: Fri Oct 28 18:59:37 2016 New Revision: 49604 URL: https://svnweb.freebsd.org/changeset/doc/49604 Log: Whitespace-only fixes, translators please ignore. Modified: head/en_US.ISO8859-1/htdocs/news/status/report-2016-07-2016-09.xml Modified: head/en_US.ISO8859-1/htdocs/news/status/report-2016-07-2016-09.xml ============================================================================== --- head/en_US.ISO8859-1/htdocs/news/status/report-2016-07-2016-09.xml Fri Oct 28 18:10:40 2016 (r49603) +++ head/en_US.ISO8859-1/htdocs/news/status/report-2016-07-2016-09.xml Fri Oct 28 18:59:37 2016 (r49604) @@ -26,7 +26,7 @@ 2016.

The third quarter of 2016 was another productive quarter for - the &os; project and community. [...]

+ the &os; project and community. [...]

Thanks to all the reporters for the excellent work!

@@ -110,19 +110,18 @@

Currently, &os; is well proven as a base for routers (pfSense, OPNSense, BSDRP) and NAS (FreeNAS, - zfsGuru, NAS4Free). However, - &os;-based solutions are almost completely absent in the - virtualization area, and ClonOS is one of the - attempts to change that. -

- -

ClonOS is a new free open-source &os;-based platform for virtual - environment creation and management. In the core platform are: -

+ zfsGuru, NAS4Free). + However, &os;-based solutions are almost completely absent in + the virtualization area, and ClonOS is one of + the attempts to change that.

+ +

ClonOS is a new free open-source &os;-based platform for + virtual environment creation and management. In the core + platform are:

&os; as the host OS
bhyve
xen
jail
CBSD (as a management - tool)
CBSD (as a + management tool)
puppet (for configuration - management)
puppet (for + configuration management)
additional features such as go-micro services (obtaining VMs, resizing disks, and so on)

We would like to see ClonOS in real-world use. In this - regard we are interested in finding more people and companies who - used &os; in hosting tasks. In addition, it could be great to - work with the developers of existing NAS solutions (zfsGuru, - NAS4Free). + regard we are interested in finding more people and companies + who used &os; in hosting tasks. In addition, it could be + great to work with the developers of existing NAS solutions + (zfsGuru, NAS4Free).

As in all previous editions of the Google Summer of Code, &os; - was an accepted organization, and we had the chance to mentor 15 - projects. Huge thanks to all our mentors for keeping the high - quality standards that make our community shine.

As in all previous editions of the Google Summer of Code, + &os; was an accepted organization, and we had the chance to + mentor 15 projects. Huge thanks to all our mentors for + keeping the high quality standards that make our community + shine.

This year was rather unique in that we accepted for the first time well-known members of the community that are not src committers to co-mentor. We also accepted projects that have - a different upstream than &os;. Both are clear signs that &os; is - growing and adapting to the wider community.

This year we are also had administrative issues with Perforce - and have accepted officially the use of external repositories, in - particular github, as requested by students.

12 of 15 projects were successful, which we think is an excellent result for a Google Summer of Code.

The world is changing and we need fresh project ideas. We - need to start looking for those ideas now. - + need to start looking for those ideas + now. + The project ideas wiki page has been reset and we need to get it populated before applying for the next Google Summer of - Code. Please help unleash the next stream of projects you want to - see in &os;. + Code. Please help unleash the next stream of projects you + want to see in &os;.

- CloudABI: Running Untrusted Programs Directly on top of &os; + CloudABI: Running Untrusted Programs Directly on top of + &os; @@ -243,24 +245,24 @@ -

CloudABI is a compact UNIX-like runtime environment inspired by - &os;'s Capsicum security framework. It allows you to safely - run potentially untrusted programs directly on top of &os;, - Linux and macOS, without requiring the use of virtualisation, - jails, etc. This makes it a useful building block for - cluster/cloud computing.

CloudABI is a compact UNIX-like runtime environment inspired + by &os;'s Capsicum security framework. It allows you to + safely run potentially untrusted programs directly on top of + &os;, Linux and macOS, without requiring the use of + virtualisation, jails, etc. This makes it a useful building + block for cluster/cloud computing.

Over the last couple of months, several new libraries and applications have been ported over to CloudABI, the most - important addition being Python 3.6. This means that you can now - write strongly sandboxed apps in Python!

+ important addition being Python 3.6. This means that you can + now write strongly sandboxed apps in Python!

Support for different hardware platforms has also improved. In - addition to amd64 and arm64, we now support i686 and armv6. +

Support for different hardware platforms has also improved. + In addition to amd64 and arm64, we now support i686 and armv6. The release of LLVM 3.9 was important to us, as it has - integrated all the necessary changes to support the first three - platforms. Full armv6 support is still blocked on some issues - with LLVM's linker, LLD.

+ integrated all the necessary changes to support the first + three platforms. Full armv6 support is still blocked on some + issues with LLVM's linker, LLD.

@@ -268,13 +270,13 @@ - Play around with CloudABI and let us know what you think of - it! Full support for amd64 and arm64 is part of &os; 11.0. + Play around with CloudABI and let us know what you think + of it! Full support for amd64 and arm64 is part of &os; 11.0. i686 and armv6 support is only available on HEAD, but will be merged to the stable/11 branch in the future. - Interested in Python programming? Give our copy of Python a - try and share your experiences! + Interested in Python programming? Give our copy of Python + a try and share your experiences! Do you maintain pieces of software that could benefit from strong sandboxing? Try building them using the CloudABI cross @@ -325,31 +327,32 @@ -

This quarter, the Hyper-V storage driver was greatly improved: - its performance was increased by a factor of 1.2-2 by applying - BUS_DMA and UNMAP_IO, enlarging the request queue, and selecting the - outgoing channel with the LUN considered; TRIM/UNMAP was enabled; - and some critical bugs (PRs 209443, 211000, 212998) were fixed so - that disk hot add/remove and VHDX online resizing should work - now.

This quarter, the Hyper-V storage driver was greatly + improved: its performance was increased by a factor of 1.2-2 + by applying BUS_DMA and UNMAP_IO, enlarging the request queue, + and selecting the outgoing channel with the LUN considered; + TRIM/UNMAP was enabled; and some critical bugs (PRs 209443, + 211000, 212998) were fixed so that disk hot add/remove and + VHDX online resizing should work now.

The VMBus driver also received attention, with enhancements made for - the handling of device hot add/remove.

The VMBus driver also received attention, with enhancements + made for the handling of device hot add/remove.

In the Hyper-V network driver, configurable RSS key and dynamic - MTU change are now supported.

In the Hyper-V network driver, configurable RSS key and + dynamic MTU change are now supported.

&os; images on Azure continue to be updated — after - publishing the &os; 10.3 VM image on the global Microsoft Azure in - June, Microsoft also published the VM image on the Microsoft Azure - operated by 21Vianet in China in September.

- -

Patches have been developed to support PCIe pass-through (also - known as Discrete Device Assignment); this feature allows physical - PCIe devices to be passed through to &os; VMs running on Hyper-V - (Windows Server 2016), giving them near-native performance with low - CPU utilization. The patch to enable the feature will be posted for - review soon.

+ publishing the &os; 10.3 VM image on the global Microsoft + Azure in June, Microsoft also published the VM image on the + Microsoft Azure operated by 21Vianet in China in + September.

+ +

Patches have been developed to support PCIe pass-through + (also known as Discrete Device Assignment); this feature + allows physical PCIe devices to be passed through to &os; VMs + running on Hyper-V (Windows Server 2016), giving them + near-native performance with low CPU utilization. The patch + to enable the feature will be posted for review soon.

@@ -358,7 +361,8 @@

- <tt>ptnet</tt> Driver and <tt>bhyve</tt> Device Model + <tt>ptnet</tt> Driver and <tt>bhyve</tt> Device + Model @@ -380,21 +384,22 @@

This project provides:

A new driver (if_ptnet) for a paravirtualized network - device, modeled after the netmap API. The driver supports - multi-queue netmap ports, and it is able to work both in netmap - mode and in normal mode.
A new driver (if_ptnet) for a paravirtualized + network device, modeled after the netmap API. The driver + supports multi-queue netmap ports, and it is able to work + both in netmap mode and in normal mode.
The emulation of the ptnet device model as a module - of the bhyve hypervisor.
The emulation of the ptnet device model as a + module of the bhyve hypervisor.

The ptnet device and driver has been introduced to - overcome the performance limitations of TCP/IP networking between - bhyve VMs. Prior to this work, the most performant solution for - VM-to-VM intra-host TCP communication provided less than 2 Gbps TCP - throughput. With ptnet, in the same VM-to-VM TCP - communication scenario, it is possible to obtain up to 20 Gbps.

+ overcome the performance limitations of TCP/IP networking + between bhyve VMs. Prior to this work, the most performant + solution for VM-to-VM intra-host TCP communication provided + less than 2 Gbps TCP throughput. With ptnet, in the + same VM-to-VM TCP communication scenario, it is possible to + obtain up to 20 Gbps.

@@ -403,8 +408,9 @@ Share virtio-net header management code with the - if_vtnet driver. In the current code, about 100 lines of - code have been copied and pasted from if_vtnet.c. + if_vtnet driver. In the current code, about 100 + lines of code have been copied and pasted from + if_vtnet.c.

The porting of the 0.11 branch is now complete, with new ports - (compared to the previous release). See our wiki page for a - complete list of applications.

The porting of the 0.11 branch is now complete, with new + ports (compared to the previous release). See our wiki page + for a complete list of applications.

We also have updates for:

x11-clocks/xfce4-datetime-plugin (0.6.99)

Currently, the unstable releases work fine with our Gtk3 ports - available in the ports tree, but in the future, support for 3.18 - will be removed in preference of 3.20.x.

Currently, the unstable releases work fine with our Gtk3 + ports available in the ports tree, but in the future, support + for 3.18 will be removed in preference of 3.20.x.

@@ -581,24 +587,26 @@ -

This project was started during Google Summer of Code this year. - The aim was to create a library which can convert the audit trail - files in Linux Audit format or the format used by Windows to the BSM - format used by &os; for its audit logs. Apart from that, - I wanted to create a simple command-line tool and extend - auditdistd so that it is possible to send non-BSM logs to - it over a secure connection and save those audit - logs on disk, preferably in the BSM format.

This project was started during Google Summer of Code this + year. The aim was to create a library which can convert the + audit trail files in Linux Audit format or the format used by + Windows to the BSM format used by &os; for its audit logs. + Apart from that, I wanted to create a simple command-line tool + and extend auditdistd so that it is possible to send + non-BSM logs to it over a secure connection and save those + audit logs on disk, preferably in the BSM format.

So far, it is possible to reasonably convert some of the most - common Linux audit log events to BSM, but it still needs a lot of - work. Secondly, I was able to configure auditdistd to - communicate with CentOS over an insecure connection. Thirdly, the - command-line tool is usable but not perfect.

- -

The present work focuses on configuring the secure TLS connection - between CentOS and auditdistd. I have already tried using - rsyslogd but was not able to make it work.

+ common Linux audit log events to BSM, but it still needs a lot + of work. Secondly, I was able to configure + auditdistd to communicate with CentOS over an + insecure connection. Thirdly, the command-line tool is usable + but not perfect.

+ +

The present work focuses on configuring the secure TLS + connection between CentOS and auditdistd. I have + already tried using rsyslogd but was not able to make it + work.

@@ -606,17 +614,18 @@ - I need more examples of rare Linux Audit logs; please send me - some examples if you have any. It is much easier to improve the - conversion process with real-life examples of the audit events you - try to convert. - - Configure auditdistd to be able to communicate with some - software on CentOS over TLS in order to receive audit logs. I - was not able to come up with a simple solution for that. + I need more examples of rare Linux Audit logs; please send + me some examples if you have any. It is much easier to + improve the conversion process with real-life examples of the + audit events you try to convert. + + Configure auditdistd to be able to communicate + with some software on CentOS over TLS in order to receive + audit logs. I was not able to come up with a simple solution + for that. - Additional open tasks are listed on the Wiki page and in the - TODO file in the root directory of the project. + Additional open tasks are listed on the Wiki page and in + the TODO file in the root directory of the project. @@ -634,33 +643,34 @@ -

Non-Transparent Bridges allow creation of memory windows between - different systems using the regular PCIe links of CPUs as a - transport. During the last quarter, the NTB subsystem gained a - significant set of improvements and fixes:

Non-Transparent Bridges allow creation of memory windows + between different systems using the regular PCIe links of CPUs + as a transport. During the last quarter, the NTB subsystem + gained a significant set of improvements and fixes:

The code was modularized, utilizing &os;'s NewBus interfaces - to allow support for different hardware types with different - drivers, support for multiple NTB instances in a system, - using the ntb_transport module for consumers other - than if_ntb, etc.
The code was modularized, utilizing &os;'s NewBus + interfaces to allow support for different hardware types + with different drivers, support for multiple NTB instances + in a system, using the ntb_transport module for + consumers other than if_ntb, etc.
Support for splitting NTB resources between different - applications was added, such as doing direct access to some range - of remote memory and to a virtual network interface between nodes - at the same time, etc.
The virtual network interface driver gained support for many - modern features, such as multiple queues, new locking, etc.
The virtual network interface driver gained support for + many modern features, such as multiple queues, new locking, + etc.
NTB performance and SMP scalability was improved.
Multiple workarounds for hardware issues were added.

The code is committed to the &os; head, stable/11 and stable/10 - branches.

The code is committed to the &os; head, stable/11 and + stable/10 branches.

@@ -674,7 +684,8 @@ Support for I/OAT and other DMA offloads. - Creating a more efficient packet transport protocol. + Creating a more efficient packet transport + protocol. Creating a greater variety of NTB applications. @@ -703,19 +714,21 @@

The ZFS code base in &os; regularly gets merges of new code, - staying in sync with latest OpenZFS/Illumos sources. Among other - things, the latest merge included the following improvements:

+ staying in sync with latest OpenZFS/Illumos sources. Among + other things, the latest merge included the following + improvements:

The ARC now mostly stores compressed data, the same as is stored on disks, decompressing them on demand.
The L2ARC now stores the same (compressed) data as ARC without - recompression, and its RAM usage was further reduced.
The largest size of indirect block possible has been increased - from 16KB fo 128KB, and speculative prefetching of indirect blocks - is now performed.
The L2ARC now stores the same (compressed) data as ARC + without recompression, and its RAM usage was further + reduced.
The largest size of indirect block possible has been + increased from 16KB fo 128KB, and speculative prefetching of + indirect blocks is now performed.
Improved ordering of space allocation.

&os; includes support for the Marvell Armada38x platform, which - has been tested and improved in order to gain production quality. - Most of this effort has been invested in development and - benchmarking of the on-chip Gigabit Ethernet (NETA) functionality. - Numerous bug fixes and some new features have been - introduced.

&os; includes support for the Marvell Armada38x platform, + which has been tested and improved in order to gain production + quality. Most of this effort has been invested in development + and benchmarking of the on-chip Gigabit Ethernet (NETA) + functionality. Numerous bug fixes and some new features have + been introduced.

Work completed this quarter includes:

Enable multi-port support in PCIe 2.0 driver (mv_pci_ctrl).
Introduce an alternative, coherent, bus_dma for the - armv7 arch.
Introduce an alternative, coherent, bus_dma for + the armv7 arch.
AHCI controller support.
Improve the e6000sw etherswitch driver.
Fix Marvell bus configuration for numerous interfaces.
Fix Marvell bus configuration for numerous + interfaces.

Along with support for new boards (SolidRun ClearFog and @@ -820,15 +834,16 @@ -

The Elastic Network Adapter (ENA) is a 25G SmartNIC developed by - Annapurna Labs based on a custom ARMv8 chip. This is a - high-performance networking card that is available to AWS virtual - machines. It introduces enhancements in network utilization - scalability on EC2 machines running various operating systems, in - particular &os;.

- -

The goal of &os; enablement is to provide top performance and a - wide range of monitoring and management features such as:

The Elastic Network Adapter (ENA) is a 25G SmartNIC developed + by Annapurna Labs based on a custom ARMv8 chip. This is a + high-performance networking card that is available to AWS + virtual machines. It introduces enhancements in network + utilization scalability on EC2 machines running various + operating systems, in particular &os;.

+ +

The goal of &os; enablement is to provide top performance and + a wide range of monitoring and management features such + as:

multiple queue modes

The current state offers stable driver operation with good - performance on machines running &os; directly on the hardware.

+ performance on machines running &os; directly on the + hardware.

@@ -893,16 +909,18 @@

Alpine is a family of Platform-on-Chip devices, including - multi-core 32-bit (first-gen Alpine) and 64-bit (Alpine V2) ARM - CPUs, developed by Annapurna Labs.

+ multi-core 32-bit (first-gen Alpine) and 64-bit (Alpine V2) + ARM CPUs, developed by Annapurna Labs.

The primary focus areas of the Alpine platform are - high-performance networking, storage and embedded applications. The - network subsystem features 10-, 25-, and 50-Gbit Ethernet - controllers with support for virtualization, load-balancing, - hardware offload and other advanced features.

+ high-performance networking, storage and embedded + applications. The network subsystem features 10-, 25-, and + 50-Gbit Ethernet controllers with support for virtualization, + load-balancing, hardware offload and other advanced + features.

A basic patch set has already been committed to HEAD including:

A basic patch set has already been committed to HEAD + including:

PCIe Root Complex support
Updated Alpine HAL
Extended MSI support in GICv2 and GICv3 code

Additional work, such as an MSI-X driver and full Ethernet - support, is currently undergoing community review on Phabricator.

+ support, is currently undergoing community review on + Phabricator.

The multi-user SMP system is stable and fully working, along with - the 1G and 10G Ethernet links.

The multi-user SMP system is stable and fully working, along + with the 1G and 10G Ethernet links.

The interrupt management code has been adjusted to work with the - new INTRNG framework on both ARM32 and ARM64.

The interrupt management code has been adjusted to work with + the new INTRNG framework on both ARM32 and ARM64.

@@ -936,7 +955,8 @@ - Documenting the History of Utilities in /bin and /sbin + Documenting the History of Utilities in /bin and + /sbin @@ -957,23 +977,25 @@

For EuroBSDcon, I began looking into inconsistencies within - components inside our family of operating systems. My workflow - consisted of reading the documentation for a given utility and - checking the history in the revision control system for missing - fixes or functionality in the trees of NetBSD, &os;, OpenBSD, and - DragonFly BSD.

+ components inside our family of operating systems. My + workflow consisted of reading the documentation for a given + utility and checking the history in the revision control + system for missing fixes or functionality in the trees of + NetBSD, &os;, OpenBSD, and DragonFly BSD.

One thing which became obvious very quickly was the - inconsistency between operating systems about where and/or which - version a utility originated in, despite our common heritage.

- -

I began with working through the man pages in &os;, verifying the - details in pages which already had a history section and making - patches for those which did not.

- -

From there, changes were propogated out to NetBSD, OpenBSD, and - Dragonfly BSD where applicable (not all utilities originated from - the same source or implementation, for example).

+ inconsistency between operating systems about where and/or + which version a utility originated in, despite our common + heritage.

+ +

I began with working through the man pages in &os;, verifying + the details in pages which already had a history section and + making patches for those which did not.

+ +

From there, changes were propogated out to NetBSD, OpenBSD, + and Dragonfly BSD where applicable (not all utilities + originated from the same source or implementation, for + example).

This was a good exercise in:

@@ -981,28 +1003,29 @@

Becoming familiar with mandoc.

Using tools such as the linting functionality in mandoc and - the igor documentation script.

Using tools such as the linting functionality in mandoc + and the igor documentation script.

Becoming familiar with the locations where things are - documented and with external sources of historical information, - such as the BSD Family Tree included in the &os; base - system, and projects like The UNIX - Heritage Society and the manual - library on cat-v.org which - hosts copies of manuals such as those shipped with - Research - UNIX. These manuals are not commonly available - elsewhere.

+ documented and with external sources of historical + information, such as the BSD Family Tree included in the + &os; base system, and projects like + The UNIX Heritage Society + and the manual library + on cat-v.org which hosts + copies of manuals such as those shipped with + Research UNIX. + These manuals are not commonly available elsewhere. - Cover the remaining manuals for userland utilities, and maybe - expand into library and syscall APIs, though I say that without - estimating the feasibility. The history of components originating from a - closed-source operating system is tricky to document, - since older versions are not always available. + Cover the remaining manuals for userland utilities, and + maybe expand into library and syscall APIs, though I say that + without estimating the feasibility. The history of components + originating from a closed-source operating system is tricky to + document, since older versions are not always + available. @@ -1032,22 +1055,23 @@ -

&os; provides an API for guest operating systems to access shared folders on - the host so that the kernel driver can expose them to the - guest's userland. This project aims to add such functionality to - the VirtualBox Guest Additions driver.

&os; provides an API for guest operating systems to access + shared folders on the host so that the kernel driver can + expose them to the guest's userland. This project aims to add + such functionality to the VirtualBox Guest Additions + driver.

Good progress was made over last few months. Developers were able to mount a filesystem in read-only mode and, with some - limitations, in read-write mode. The implementation still lacks - some critical pieces, but the roadmap is clear.

+ limitations, in read-write mode. The implementation still + lacks some critical pieces, but the roadmap is clear.

Finish the missing pieces. - + Implement proper locking. - + General clean-up and bugfixes. @@ -1079,31 +1103,32 @@ -

evdev is a portable, API-compatible implementation of - the Linux /dev/input/eventX interface. It covers a wide - variety of input devices like keyboards, mice, and touchscreens - (with multitouch support), and support for it is implemented in a - lot of existing userland components like Qt, libinput, and - tslib.

evdev is a portable, API-compatible implementation + of the Linux /dev/input/eventX interface. It covers + a wide variety of input devices like keyboards, mice, and + touchscreens (with multitouch support), and support for it is + implemented in a lot of existing userland components like Qt, + libinput, and tslib.

evdev support was started by Jakub Klama as a Google SoC - 2014 project, and later picked up and finished by Vladimir +

evdev support was started by Jakub Klama as a Google + SoC 2014 project, and later picked up and finished by Vladimir Kondratiev. General API and evdev support bits for - ukbd and ums were committed to HEAD. Support was - also added for TI's AM33xx touchstreen controller (the popular - BeagleBone is based on the AM33xx) and the official touschreen for - the Raspberry Pi. Multitouch support for the Raspberry Pi was - successfully demonstarted using the latest Qt development branch.

- + ukbd and ums were committed to HEAD. + Support was also added for TI's AM33xx touchstreen controller + (the popular BeagleBone is based on the AM33xx) and the + official touschreen for the Raspberry Pi. Multitouch support + for the Raspberry Pi was successfully demonstarted using the + latest Qt development branch.

+ - Documentation. In particular, manual pages are needed for the - KPI. + Documentation. In particular, manual pages are needed for + the KPI. Support additional hardware. - Enable evdev support in existing ports, and add new - evdev-dependent ports. + Enable evdev support in existing ports, and add + new evdev-dependent ports. @@ -1135,33 +1160,33 @@

Transparent superpage support has been added. This allows - &os; to create 2MiB blocks with a single pagetable and TLB entry. - This shows a small but significant improvement in the + &os; to create 2MiB blocks with a single pagetable and TLB + entry. This shows a small but significant improvement in the buildworld time on ThunderX machines. Superpages have been - enabled in head and merged to stable/11, but they are - disabled by default on stable/11 due to a lack of testing - there.

+ enabled in head and merged to stable/11, but they are disabled + by default on stable/11 due to a lack of testing there.

Support for the pre-INTRNG interrupt framework has been removed. This means that arm64 requires INTRNG to even build. - This has allowed various cleanups within the arm64 drivers that - interact with the interrupt controller.

+ This has allowed various cleanups within the arm64 drivers + that interact with the interrupt controller.

The cortex Strings library from Linaro has been imported. The - parts of this that have been shown to be improvements over the - previous C code were attached to the libc build.

The cortex Strings library from Linaro has been imported. + The parts of this that have been shown to be improvements over + the previous C code were attached to the libc build.

There is ongoing work to add ACPI support to the kernel. On - ThunderX, &os; can get to the mountroot prompt, however, due to - incomplete ACPI tables the external PCIe support needed to support - the netboot setup in the test cluster is not functional.

+ ThunderX, &os; can get to the mountroot prompt, however, due + to incomplete ACPI tables the external PCIe support needed to + support the netboot setup in the test cluster is not + functional.

Pine64 support has been committed to head. &os; can now boot - to multiuser with SMP enabled. This includes support for clocks, - the secure ID controller, USB Host controller, GPIOs, non-maskable - interrupts, the AXP81x power management unit, cpu freqency and - voltage scaling, MMC, UART, gigabit networking, the watchdog, and - the thermal sensors.

+ to multiuser with SMP enabled. This includes support for + clocks, the secure ID controller, USB Host controller, GPIOs, + non-maskable interrupts, the AXP81x power management unit, cpu + freqency and voltage scaling, MMC, UART, gigabit networking, + the watchdog, and the thermal sensors.

@@ -1193,9 +1218,9 @@ -

The KDE on &os; team focuses on packaging the KDE software and - making sure that the experience of KDE and Qt on &os; is as good as - possible.

The KDE on &os; team focuses on packaging the KDE software + and making sure that the experience of KDE and Qt on &os; is + as good as possible.

The following big updates were landed in the ports tree this quarter:

@@ -1212,15 +1237,16 @@

CMake was updated to versions 3.6.1 and 3.6.2.

An important fix was made to qmake, where the clang - version was not correctly detected.

An important fix was made to qmake, where the + clang version was not correctly detected.

Qt 5.6.1 was committed to ports.

Phonon and its backend to were updated to 4.9.0 in preparation - for Qt 5.6.1.

Phonon and its backend to were updated to 4.9.0 in + preparation for Qt 5.6.1.

Updated the net-im/telepathy-qt4 port to 0.9.7.

Updated the net-im/telepathy-qt4 port to + 0.9.7.

Various LibreSSL related fixes by Matthew Rezny.

@@ -1234,9 +1260,10 @@ work:

The plasma5 branch has been kept up to date with KDE's upstream and - contains ports for Frameworks 5.26.0, Plasma Desktop 5.8.0, and - Applications 16.08.1 (branches/plasma5).
The plasma5 branch has been kept up to date with KDE's + upstream and contains ports for Frameworks 5.26.0, Plasma + Desktop 5.8.0, and Applications 16.08.1 + (branches/plasma5).

@@ -1255,106 +1282,110 @@

The third quarter started with the handover to the ninth Core team as it took office. With four members returning from the - previous core (Baptiste Daroussin, Ed Maste, George Neville-Neil - and Hiroki Sato), one returning member after a term away (John - Baldwin), and four members new to core (Allan Jude, Kris Moore, - Benedict Reuschling and Benno Rice), the new core team represents - just about the ideal balance between experience and fresh - blood.

+ previous core (Baptiste Daroussin, Ed Maste, George + Neville-Neil and Hiroki Sato), one returning member after a + term away (John Baldwin), and four members new to core (Allan + Jude, Kris Moore, Benedict Reuschling and Benno Rice), the new + core team represents just about the ideal balance between + experience and fresh blood.

Beyond handing over all of the ongoing business, reviewing everything on Core's agenda, and other routine changeover - activities, the first action of the new core was to respond to a - query from Craig Rodrigues concerning how hardware supplied to the - project through donations to the &os; Foundation was being - used.

+ activities, the first action of the new core was to respond to + a query from Craig Rodrigues concerning how hardware supplied + to the project through donations to the &os; Foundation was + being used.

The Foundation does keep records of what hardware has been - supplied over time and has some idea of the original purpose that - hardware was provisioned for, but does not track the current usage - of the project's hardware assets. Cluster administration keeps - their own configuration database, but this is not suitable for - general publication and covers much more than Foundation supplied - equipment. After some discussion it was decided that updated - information about the current disposition of Foundation supplied - equipment should be incorporated in the Foundation's annual - report.

- -

Ensuring that all of the &os; code base is supplied under open - and unencumbered licensing terms and that we do not infringe on - patent terms or otherwise act counter to any legal requirements - are some of Core's primary concerns. During this quarter, there - were three items of this nature.

+ supplied over time and has some idea of the original purpose + that hardware was provisioned for, but does not track the + current usage of the project's hardware assets. Cluster + administration keeps their own configuration database, but + this is not suitable for general publication and covers much + more than Foundation supplied equipment. After some + discussion it was decided that updated information about the + current disposition of Foundation supplied equipment should be + incorporated in the Foundation's annual report.

+ +

Ensuring that all of the &os; code base is supplied under + open and unencumbered licensing terms and that we do not + infringe on patent terms or otherwise act counter to any legal + requirements are some of Core's primary concerns. During this + quarter, there were three items of this nature.

Importing Concurrency Kit. In consultation with the - Foundation's legal counsel, it was determined that the relevant - patents on the 'Read Copy Update' synchronization mechanisms - have expired, and consequently the import of selected parts of - concurrency kit was approved.
The proposal to create a shadow GPLv3 toolchain repository - was put to the community. Ultimately the whole idea has been - rendered largely redundant by faster than anticipated progress - at integrating the latest LLVM toolchain on most of the - interesting system architectures. The goal of a GPL-free base - system is within our grasp.
Reports that GPL code has been pasted into linuxkpi sources - are under investigation. Core would like to stress that great - care must be taken to avoid inadvertent license infringement, - especially when implementing hardware interfaces or similar - where there is limited scope to invent new constants or - otherwise make it clear this is a novel implementation.
Reports that GPL code has been pasted into linuxkpi + sources are under investigation. Core would like to stress + that great care must be taken to avoid inadvertent license + infringement, especially when implementing hardware + interfaces or similar where there is limited scope to invent + new constants or otherwise make it clear this is a novel + implementation.

Work on LLVM has thrown up problems with the presence of - certain pre-compiled binary-only drivers as part of the GENERIC - kernel. Core has adopted the policy that such binary-only code - should be moved to loadable modules and that the GENERIC kernel - must be compiled entirely from original sources.

+ certain pre-compiled binary-only drivers as part of the + GENERIC kernel. Core has adopted the policy that such + binary-only code should be moved to loadable modules and that + the GENERIC kernel must be compiled entirely from original + sources.

The item that has absorbed the largest portion of Core's *** DIFF OUTPUT TRUNCATED AT 1000 LINES ***