Remove and obsolete rumpkern_time as a separate component.

Put nanosleep() and folks in librump instead of maintaining them in
the separate rumpkern_time component. Keeping time-related routines
elsewhere lead to some illogical behavior if you didn't think of linking
in rumpkern_time (hands up everyone who checks the return value of
nanosleep()).

Add warnings if rumpkern_time is linked or used. I'll remove it in a
month or two instead of now since it was part of a buildrump.sh snapshot
and it's nicer if trying to use it gives a warning instead of an error
in the next snapshot.

"everything should be as modular as possible, but no more modular than that"

branches: 1.4.8; 1.4.18; 1.4.22;
Make build similar to fs, net & dev.

branches: 1.3.2; 1.3.4; 1.3.6;
support zlib

Add unadulterated tty support as a rump component.

Add infrastructure for kern compnents. This is meant for those
components which are too bloaty to be included in rumpkern (where
bloaty means "can be easily left out without anyone missing"), but
generally do not require the support of the dev/fs/net factions to
function. As the first one, add ksems. librumpcrypto will migrate
here too once I get my timeslice to deal with the setlists, as most
likely will tty support.

branches: 1.1.2; 1.1.4; 1.1.6;
Add infrastructure for kern compnents. This is meant for those
components which are too bloaty to be included in rumpkern (where
bloaty means "can be easily left out without anyone missing"), but
generally do not require the support of the dev/fs/net factions to
function. As the first one, add ksems. librumpcrypto will migrate
here too once I get my timeslice to deal with the setlists, as most
likely will tty support.

branches: 1.3.16;
Rewrite rules so that makesyscalls.sh will not be executed multiple
times in a parallel make.

Hopefully fixes sporadic build failures reported by Justin

Make the cool syscall autogeneration feature work with the
newfangled r/o src feature.

branches: 1.1.2;
Add snippet to build syscalls.

Add the new ass_keysched.c to the rump kernel crypto lib

This will hopefully unbreak the builds.

sys/crypto/sodium: Add a self-test for IETF ChaCha20/Poly1305 AEAD.

PR kern/58468

branches: 1.23.4; 1.23.10;
rename glue.c to sodium_module.c

Add glue.c for libsodium (suggested by riastradh). Tidy up.

Move address hashing from init_main.c to kern_sysctl.c.

This way rump gets it automatically. Make sure blake2s is in
librumpkern.so, not just in librumpkern_crypto.so, for this to work.

Tidy up libsodium makefile and config fragments.

Disable libsodium HAVE_TI_MODE for now.

This may reduce performance by not taking advantage of 64x64->128
multiplications on some platforms, but let's worry about that later
and fix the build on the other platforms instead.

Split flags onto separate lines, sorted, to make diffs easier.

Disable -Wshadow for libsodium.

Evidently ed25519_ref10.c has a global and a local both named `d'.

Missed a spot -- add sys/crypto/blake2 to .PATH here.

Fix vestiges of libb2.

[ozaki-r] Changes to the kernel core for wireguard

Rewrite cprng_fast in terms of new ChaCha API.

Fix more sort order.

Add missing aes_ccm.c, aes_ccm_mbuf.c. Fix sort order.

Add chacha to rump libcrypto.

Remove now-unused legacy rijndael API.

New cgd cipher adiantum.

Adiantum is a wide-block cipher, built out of AES, XChaCha12,
Poly1305, and NH, defined in

Paul Crowley and Eric Biggers, `Adiantum: length-preserving
encryption for entry-level processors', IACR Transactions on
Symmetric Cryptology 2018(4), pp. 39--61.

Adiantum provides better security than a narrow-block cipher with CBC
or XTS, because every bit of each sector affects every other bit,
whereas with CBC each block of plaintext only affects the following
blocks of ciphertext in the disk sector, and with XTS each block of
plaintext only affects its own block of ciphertext and nothing else.

Adiantum generally provides much better performance than
constant-time AES-CBC or AES-XTS software do without hardware
support, and performance comparable to or better than the
variable-time (i.e., leaky) AES-CBC and AES-XTS software we had
before. (Note: Adiantum also uses AES as a subroutine, but only once
per disk sector. It takes only a small fraction of the time spent by
Adiantum, so there's relatively little performance impact to using
constant-time AES software over using variable-time AES software for
it.)

Adiantum naturally scales to essentially arbitrary disk sector sizes;
sizes >=1024-bytes take the most advantage of Adiantum's design for
performance, so 4096-byte sectors would be a natural choice if we
taught cgd to change the disk sector size. (However, it's a
different cipher for each disk sector size, so it _must_ be a cgd
parameter.)

The paper presents a similar construction HPolyC. The salient
difference is that HPolyC uses Poly1305 directly, whereas Adiantum
uses Poly1395(NH(...)). NH is annoying because it requires a
1072-byte key, which means the test vectors are ginormous, and
changing keys is costly; HPolyC avoids these shortcomings by using
Poly1305 directly, but HPolyC is measurably slower, costing about
1.5x what Adiantum costs on 4096-byte sectors.

For the purposes of cgd, we will reuse each key for many messages,
and there will be very few keys in total (one per cgd volume) so --
except for the annoying verbosity of test vectors -- the tradeoff
weighs in the favour of Adiantum, especially if we teach cgd to do
>>512-byte sectors.

For now, everything that Adiantum needs beyond what's already in the
kernel is gathered into a single file, including NH, Poly1305, and
XChaCha12. We can split those out -- and reuse them, and provide MD
tuned implementations, and so on -- as needed; this is just a first
pass to get Adiantum implemented for experimentation.

Rework AES in kernel to finally address CVE-2005-1797.

1. Rip out old variable-time reference implementation.
2. Replace it by BearSSL's constant-time 32-bit logic.
=> Obtained from commit dda1f8a0c46e15b4a235163470ff700b2f13dcc5.
=> We could conditionally adopt the 64-bit logic too, which would
likely give a modest performance boost on 64-bit platforms
without AES-NI, but that's a bit more trouble.
3. Select the AES implementation at boot-time; allow an MD override.
=> Use self-tests to verify basic correctness at boot.
=> The implementation selection policy is rather rudimentary at
the moment but it is isolated to one place so it's easy to
change later on.

This (a) plugs a host of timing attacks on, e.g., cgd, and (b) paves
the way to take advantage of CPU support for AES -- both things we
should've done a decade ago. Downside: Computing AES takes 2-3x the
CPU time. But that's what hardware support will be coming for.

Rudimentary measurement of performance impact done by:

mount -t tmpfs tmpfs /tmp
dd if=/dev/zero of=/tmp/disk bs=1m count=512
vnconfig -cv vnd0 /tmp/disk
cgdconfig -s cgd0 /dev/vnd0 aes-cbc 256 < /dev/zero
dd if=/dev/rcgd0d of=/dev/null bs=64k
dd if=/dev/zero of=/dev/rcgd0d bs=64k

The AES-CBC encryption performance impact is closer to 3x because it
is inherently sequential; the AES-CBC decryption impact is closer to
2x because the bitsliced AES logic can process two blocks at once.

Discussed on tech-kern:

https://mail-index.NetBSD.org/tech-kern/2020/06/18/msg026505.html

Missed a spot in the crypto/arc4 deletion.

Switch from NIST CTR_DRBG with AES to NIST Hash_DRBG with SHA-256.

Benefits:

- larger seeds -- a 128-bit key alone is not enough for `128-bit security'
- better resistance to timing side channels than AES
- a better-understood security story (https://eprint.iacr.org/2018/349)
- no loss in compliance with US government standards that nobody ever
got fired for choosing, at least in the US-dominated western world
- no dirty endianness tricks
- self-tests

Drawbacks:

- performance hit: throughput is reduced to about 1/3 in naive measurements
=> possible to mitigate by using hardware SHA-256 instructions
=> all you really need is 32 bytes to seed a userland PRNG anyway
=> if we just used ChaCha this would go away...

XXX pullup-7
XXX pullup-8
XXX pullup-9

branches: 1.4.10; 1.4.18; 1.4.22;
Add a COMMENT describing what each component roughly does.

"make describe" prints the comment.

Requested/inspired by Vincent Schwarzer on rumpkernel-users

branches: 1.3.4; 1.3.6; 1.3.8; 1.3.12;
Use subr_cprng.c instead of stub implementation. Rijndael migrates from
rumpkern_crypto to rumpkern due to it being mandatory for cprng.

Add the MODULE parts for blowfish and des.

Add camellia algorithm. (pooka@ says no lib version change required)

branches: 1.1.6; 1.1.10; 1.1.20; 1.1.24;
rumpcrypto should never have been its own faction, so finally make
it a component under kern, i.e. rumpcrypto -> rumpkern_crypto.

Remove shlib_version files and just use Makefile SHLIB_MAJOR/MINOR,
with the default provided by Makefile.rump (they're all 0.0 anyway)

branches: 1.1.6; 1.1.20; 1.1.38;
rumpcrypto should never have been its own faction, so finally make
it a component under kern, i.e. rumpcrypto -> rumpkern_crypto.

branches: 1.1.2; 1.1.6;
Add rumpkern_nv (in-kernel RUMP libnv).

Added tests for the linear hook APIs

fix various typos in comments and output/log messages.

Added tests for the linear hook APIs

Add sljit rump glue for aarch64.

XXX arm_icache_sync_range() and mips_icache_sync_range() call

(void)rumpcomp_sync_icache((void *)va, (uint64_t)sz);

but linking fails if I do the same on aarch64 (I suspect it also
fails on 32bit arm and mips).

As a workaround, I call __builtin___clear_cache().

branches: 1.5.16; 1.5.18;
- Change LDADD/DPADD in library dependencies to LIBDPLIBS
- Fix some LDADD abuse and remove useless dependencies
- include <bsd.init.mk> in the right place where appropriate
From Rin Okuyama

Add a COMMENT describing what each component roughly does.

"make describe" prints the comment.

Requested/inspired by Vincent Schwarzer on rumpkernel-users

branches: 1.3.4; 1.3.6;
Implement rumpcomp_sync_icache() hyprecall for arm and add
a barebone implementation of arm cache ops to librumpkern_sljit.

Implement rumpcomp_sync_icache() hyprecall for mips and add
a barebone implementation if mips cache ops to librumpkern_sljit.

branches: 1.1.2; 1.1.4; 1.1.6;
Add rumpkern_sljit and rumpnet_bpfjit modules.

Remove shlib_version files and just use Makefile SHLIB_MAJOR/MINOR,
with the default provided by Makefile.rump (they're all 0.0 anyway)

branches: 1.1.4; 1.1.6; 1.1.10; 1.1.12;
Add rumpkern_sljit and rumpnet_bpfjit modules.

branches: 1.1.2; 1.1.6;
Implement rumpcomp_sync_icache() hyprecall for mips and add
a barebone implementation if mips cache ops to librumpkern_sljit.

branches: 1.1.2; 1.1.6;
Add sljit rump glue for aarch64.

XXX arm_icache_sync_range() and mips_icache_sync_range() call

(void)rumpcomp_sync_icache((void *)va, (uint64_t)sz);

but linking fails if I do the same on aarch64 (I suspect it also
fails on 32bit arm and mips).

As a workaround, I call __builtin___clear_cache().

branches: 1.1.2; 1.1.6;
Add sljit rump glue for aarch64.

XXX arm_icache_sync_range() and mips_icache_sync_range() call

(void)rumpcomp_sync_icache((void *)va, (uint64_t)sz);

but linking fails if I do the same on aarch64 (I suspect it also
fails on 32bit arm and mips).

As a workaround, I call __builtin___clear_cache().

branches: 1.1.2; 1.1.6;
Implement rumpcomp_sync_icache() hyprecall for arm and add
a barebone implementation of arm cache ops to librumpkern_sljit.

branches: 1.1.2; 1.1.6;
Implement rumpcomp_sync_icache() hyprecall for arm and add
a barebone implementation of arm cache ops to librumpkern_sljit.

Cast register_t to uintptr_t before casting to void *.

Not sure what's going on here but evbmips64-el build fails
without this cast.

Sync the first argument type with mco_icache_sync_range.

branches: 1.1.2; 1.1.6; 1.1.30; 1.1.32;
Implement rumpcomp_sync_icache() hyprecall for mips and add
a barebone implementation if mips cache ops to librumpkern_sljit.

branches: 1.1.2; 1.1.6;
Implement rumpcomp_sync_icache() hyprecall for mips and add
a barebone implementation if mips cache ops to librumpkern_sljit.

fix reversed comment

- Define NEED_ISYSTEM here
- include <bsd.init.mk> now that we can do it, because we need Makefile.rump
to be included first, so that NOLINT gets defined, so that we don't end up
building lint modules just for this.

branches: 1.4.16;
merge a new version of the CDDL dtrace and ZFS code.
this changes the upstream vendor from OpenSolaris to FreeBSD,
and this version is based on FreeBSD svn r315983.

in addition to the 10 years of improvements from upstream,
this version also has these NetBSD-specific enhancements:
- dtrace FBT probes can now be placed in kernel modules.
- ZFS now supports mmap().

branches: 1.3.16;
Add a COMMENT describing what each component roughly does.

"make describe" prints the comment.

Requested/inspired by Vincent Schwarzer on rumpkernel-users

branches: 1.2.6; 1.2.24;
Remove the unneeded rump component; the library already includes the
module code that will be initialised by rump.

Fix PR/44708, t_zpool:create test failure for RUMP_LOCKDEBUG=yes
builds.

branches: 1.1.4; 1.1.8; 1.1.10; 1.1.14;
Add support for compiling ZFS and Solaris modules as RUMP libraries. Add
some locking and rumpcopy primitives and refactor module building Makefiles
to work with both RUMP and kernel modules. This is first part of adding
support for regular test of zfs on NetBSD to hunt some bugs and make it
stable.

Ok by pooka@.

Remove the unneeded rump component; the library already includes the
module code that will be initialised by rump.

Fix PR/44708, t_zpool:create test failure for RUMP_LOCKDEBUG=yes
builds.

branches: 1.1.4; 1.1.8; 1.1.10; 1.1.14;
Add support for compiling ZFS and Solaris modules as RUMP libraries. Add
some locking and rumpcopy primitives and refactor module building Makefiles
to work with both RUMP and kernel modules. This is first part of adding
support for regular test of zfs on NetBSD to hunt some bugs and make it
stable.

Ok by pooka@.

Remove shlib_version files and just use Makefile SHLIB_MAJOR/MINOR,
with the default provided by Makefile.rump (they're all 0.0 anyway)

branches: 1.1.4; 1.1.8; 1.1.20; 1.1.38;
Add support for compiling ZFS and Solaris modules as RUMP libraries. Add
some locking and rumpcopy primitives and refactor module building Makefiles
to work with both RUMP and kernel modules. This is first part of adding
support for regular test of zfs on NetBSD to hunt some bugs and make it
stable.

Ok by pooka@.

Put the kernelside rump kernel headers into <rump-sys> instead of
sprinkling them around the faction directories. Avoids having
to add a CPPFLAGS (or several) to pretty much every component
Makefile.

Leave compat headers around in the old locations.

The commit changes some autogenerated files, but I'll fix the
generators shortly and regen.

Add a COMMENT describing what each component roughly does.

"make describe" prints the comment.

Requested/inspired by Vincent Schwarzer on rumpkernel-users

Make the cool syscall autogeneration feature work with the
newfangled r/o src feature.

regen

branches: 1.2.4; 1.2.8;
rename component.c -> sys_cygwin_component.c

branches: 1.1.4; 1.1.6;
cygwin compat

rename component.c -> sys_cygwin_component.c

branches: 1.1.4; 1.1.6;
cygwin compat

Merge the [pgoyette-compat] branch

Add missing RCSIDs.

branches: 1.1.4; 1.1.12; 1.1.38; 1.1.40;
cygwin compat

remove files which are autogenerated in every build

regen

branches: 1.2.2; 1.2.10; 1.2.14;
regen

gen

remove files which are autogenerated in every build

regen

branches: 1.2.2; 1.2.10; 1.2.14;
regen

gen

remove files which are autogenerated in every build

regen

branches: 1.2.2; 1.2.10; 1.2.14;
regen

gen

remove files which are autogenerated in every build

regen

branches: 1.2.2; 1.2.10; 1.2.14;
regen

gen

Remove shlib_version files and just use Makefile SHLIB_MAJOR/MINOR,
with the default provided by Makefile.rump (they're all 0.0 anyway)

branches: 1.1.4; 1.1.12; 1.1.16;
cygwin compat

Fix merge botches. I hope there's no more left...

Merge the [pgoyette-compat] branch

Add missing RCSIDs.

Allow syscall_establish() to install new syscalls when the existing
entry-point is either sys_nomodule or sys_nosys. Update the
makesyscalls.sh script to create a const array of bits to allow
syscall_disestablish() to properly restore the original entry-point.
Update all the initializers of struct emul to initialize the pointer
to the bit array struct emul.

XXX Regen of all files created by makesyscalls.sh will come soon,
XXX followed by a kernel version bump (since struct emul is being
XXX modified).

This commit should address PR kern/45781 and also removes the need
for the work-around for that PR in file

sys/arch/usermode/modules/syscallemu/syscallemu.c

branches: 1.2.16; 1.2.18;
Put the kernelside rump kernel headers into <rump-sys> instead of
sprinkling them around the faction directories. Avoids having
to add a CPPFLAGS (or several) to pretty much every component
Makefile.

Leave compat headers around in the old locations.

The commit changes some autogenerated files, but I'll fix the
generators shortly and regen.

branches: 1.1.4; 1.1.6; 1.1.10; 1.1.12;
rename component.c -> sys_cygwin_component.c

define sysautoload here too, to catch up with kern/makesyscalls.sh r1.173
XXX: This needs to be re-thought

branches: 1.1.4; 1.1.12; 1.1.40;
cygwin compat

branches: 1.2.2; 1.2.10;
Support utimes/futimes. Makes at least fsu_touch work on these platforms.

cygwin compat

Put the kernelside rump kernel headers into <rump-sys> instead of
sprinkling them around the faction directories. Avoids having
to add a CPPFLAGS (or several) to pretty much every component
Makefile.

Leave compat headers around in the old locations.

The commit changes some autogenerated files, but I'll fix the
generators shortly and regen.

Add a COMMENT describing what each component roughly does.

"make describe" prints the comment.

Requested/inspired by Vincent Schwarzer on rumpkernel-users

Make the cool syscall autogeneration feature work with the
newfangled r/o src feature.

factor out the syscall building code

regen and add a build target.

branches: 1.6.6;
rename component.c -> sys_linux_component.c

Build with IPv6 support.

Add now needed linux_pipe.c sources.

Add syscall wrapper for mknodat(2) to deal with PAD argument difference
between rump and linux versions.

branches: 1.2.6; 1.2.8;
If linux syscall emulation is linked in to a rump kernel, use it as the
default emulation.

branches: 1.1.2;
Add the first attempt at rump kernel support for Linux clients. This has
been lightly tested with unmodified networking applications with both
the client and server on a 64bit le host. Unlike the standard Linux
compat libs where args and syscalls are swizzled around, this compat
lib only massages the arg data types due to the assumption that syscall
numbers come from librumpclient (via librumphijack) and therefore match
the native NetBSD numbers.

rename component.c -> sys_linux_component.c

remove stub now provided by rump kernel base

fix tyop

Translate return values for emulations, e.g. Linux. For ports without
__HAVE_MINIMAL_EMUL, we simply look up the values from p->p_emul->e_errno.
For ports which cannot afford to keep an extra pointer per emul structure
around, we hope there is __HAVE_SYSCALL_INTERN support and thread the
errno values through p_emuldata. Notably, we cannot alter the syscall
method like most ports do with syscall_intern, since they do it via
p_mdproc, so MI code is not possible there.

branches: 1.8.4; 1.8.6;
i386 has a special way to handle uname. We don't really care about
satisfying uname in a rump kernel, but attempt to return something
sane anyway.

add a few arch-specific stubs to make this link on arm

set e_nsysent

implement linux_fakedev: silly in, silly out, silly inside out

If linux syscall emulation is linked in to a rump kernel, use it as the
default emulation.

include correct header

branches: 1.2.2;
sort stubs, remove autonamespacing and add some signal-related ones
I missed yesterday

Add the first attempt at rump kernel support for Linux clients. This has
been lightly tested with unmodified networking applications with both
the client and server on a 64bit le host. Unlike the standard Linux
compat libs where args and syscalls are swizzled around, this compat
lib only massages the arg data types due to the assumption that syscall
numbers come from librumpclient (via librumphijack) and therefore match
the native NetBSD numbers.

Fix merge botches. I hope there's no more left...

Merge the [pgoyette-compat] branch

Add missing RCSIDs.

branches: 1.2.4; 1.2.6; 1.2.10; 1.2.34; 1.2.36;
Do not redefine linux syscalls arguments, just use compat ones
instead.
Include linux_socketcall.h to bring missing socket syscall
arguments/prototypes on arches that have socketcall(2).
Finally, cleanup rump linux syscall wrapper, to remove linux syscall
argument/prototype local copy.

Add syscall wrapper for mknodat(2) to deal with PAD argument difference
between rump and linux versions.

remove files which are autogenerated in every build

regen and add a build target.

branches: 1.14.4;
Regen for utimes(2).

branches: 1.13.2;
Regen for pread/pwrite signature.

branches: 1.12.2;
Regen.

Regen for pipe2 and lchown.

Regen.

Regen.

Regen.

Regen.

Regen.

Regen.

Regen.

Regen for utimensat(2).

branches: 1.2.4; 1.2.6;
regen for utimes

regen

remove files which are autogenerated in every build

regen and add a build target.

branches: 1.17.4;
Regen for utimes(2).

Regen for pread/pwrite signature.

branches: 1.15.2;
Regen.

Regen for pipe2 and lchown.

Regen.

Regen.

Regen.

Regen.

Regen.

Regen.

Regen.

Regen for utimensat(2).

branches: 1.5.4; 1.5.6;
regen for utimes

regen

Regen to use getdents64 instead of getdents

Regen to add lstat64

branches: 1.1.2;
gen (without re)

remove files which are autogenerated in every build

regen and add a build target.

branches: 1.17.4;
Regen for utimes(2).

Regen for pread/pwrite signature.

branches: 1.15.2;
Regen.

Regen for pipe2 and lchown.

Regen.

Regen.

Regen.

Regen.

Regen.

Regen.

Regen.

Regen for utimensat(2).

branches: 1.5.4; 1.5.6;
regen for utimes

regen

Regen to use getdents64 instead of getdents

Regen to add lstat64

branches: 1.1.2;
gen (without re)

remove files which are autogenerated in every build

regen and add a build target.

branches: 1.17.4;
Regen for utimes(2).

Regen for pread/pwrite signature.

branches: 1.15.2;
Regen.

Regen for pipe2 and lchown.

Regen.

Regen.

Regen.

Regen.

Regen.

Regen.

Regen.

Regen for utimensat(2).

branches: 1.5.4; 1.5.6;
regen for utimes

regen

Regen to use getdents64 instead of getdents

Regen to add lstat64

branches: 1.1.2;
gen (without re)

Remove shlib_version files and just use Makefile SHLIB_MAJOR/MINOR,
with the default provided by Makefile.rump (they're all 0.0 anyway)

branches: 1.1.2; 1.1.16;
Add the first attempt at rump kernel support for Linux clients. This has
been lightly tested with unmodified networking applications with both
the client and server on a 64bit le host. Unlike the standard Linux
compat libs where args and syscalls are swizzled around, this compat
lib only massages the arg data types due to the assumption that syscall
numbers come from librumpclient (via librumphijack) and therefore match
the native NetBSD numbers.

Fix merge botches. I hope there's no more left...

Merge the [pgoyette-compat] branch

Add missing RCSIDs.

Allow syscall_establish() to install new syscalls when the existing
entry-point is either sys_nomodule or sys_nosys. Update the
makesyscalls.sh script to create a const array of bits to allow
syscall_disestablish() to properly restore the original entry-point.
Update all the initializers of struct emul to initialize the pointer
to the bit array struct emul.

XXX Regen of all files created by makesyscalls.sh will come soon,
XXX followed by a kernel version bump (since struct emul is being
XXX modified).

This commit should address PR kern/45781 and also removes the need
for the work-around for that PR in file

sys/arch/usermode/modules/syscallemu/syscallemu.c

branches: 1.3.16; 1.3.18;
Put the kernelside rump kernel headers into <rump-sys> instead of
sprinkling them around the faction directories. Avoids having
to add a CPPFLAGS (or several) to pretty much every component
Makefile.

Leave compat headers around in the old locations.

The commit changes some autogenerated files, but I'll fix the
generators shortly and regen.

branches: 1.2.4; 1.2.6; 1.2.10; 1.2.12;
Add support for timing syscalls.

rename component.c -> sys_linux_component.c

define sysautoload here too, to catch up with kern/makesyscalls.sh r1.173
XXX: This needs to be re-thought

branches: 1.2.6; 1.2.40;
generate sysnumhdr so that we get NSYSENT

branches: 1.1.2;
Add the first attempt at rump kernel support for Linux clients. This has
been lightly tested with unmodified networking applications with both
the client and server on a 64bit le host. Unlike the standard Linux
compat libs where args and syscalls are swizzled around, this compat
lib only massages the arg data types due to the assumption that syscall
numbers come from librumpclient (via librumphijack) and therefore match
the native NetBSD numbers.

Ajust for compat linux utimes(2) change.

Adjust pread/pwrite signature to match reality.

branches: 1.14.2;
Add support for timing syscalls.

Add pipe2 and lchown syscalls.

Add NetBSD futimes/lutimes syscalls which does not exists on Linux.

Do not redefine linux syscalls arguments, just use compat ones
instead.
Include linux_socketcall.h to bring missing socket syscall
arguments/prototypes on arches that have socketcall(2).
Finally, cleanup rump linux syscall wrapper, to remove linux syscall
argument/prototype local copy.

Use native/rump syscalls for pread/pwrite instead of linux ones
which only exist to deal with PAD argument.

Add syscall wrapper for mknodat(2) to deal with PAD argument difference
between rump and linux versions.

Add support for *at syscalls.

Add dup3 support.

Remove liutimes(2) that linux never had.

Add utimensat(2) support.

branches: 1.4.4; 1.4.6;
support utimes on non-alpha linux platforms

Regen to use getdents64 instead of getdents

Regen to add lstat64

branches: 1.1.2;
Add the first attempt at rump kernel support for Linux clients. This has
been lightly tested with unmodified networking applications with both
the client and server on a 64bit le host. Unlike the standard Linux
compat libs where args and syscalls are swizzled around, this compat
lib only massages the arg data types due to the assumption that syscall
numbers come from librumpclient (via librumphijack) and therefore match
the native NetBSD numbers.

Put the kernelside rump kernel headers into <rump-sys> instead of
sprinkling them around the faction directories. Avoids having
to add a CPPFLAGS (or several) to pretty much every component
Makefile.

Leave compat headers around in the old locations.

The commit changes some autogenerated files, but I'll fix the
generators shortly and regen.

Add a COMMENT describing what each component roughly does.

"make describe" prints the comment.

Requested/inspired by Vincent Schwarzer on rumpkernel-users

Make the cool syscall autogeneration feature work with the
newfangled r/o src feature.

regen

branches: 1.3.4; 1.3.8;
fix tyop

rename component.c -> sys_sunos_component.c

branches: 1.1.4; 1.1.6;
Add enough syscall compat for fs-utils to work on modern Solaris
and derivatives.

rename component.c -> sys_sunos_component.c

branches: 1.1.4; 1.1.6;
Add enough syscall compat for fs-utils to work on modern Solaris
and derivatives.

Merge the [pgoyette-compat] branch

Add missing RCSIDs.

branches: 1.2.2; 1.2.4;
Fail, don't panic, on bad dirents from file system.

Controllable via puffs from userland.

From Ilja Van Sprundel.

branches: 1.1.4; 1.1.12; 1.1.14; 1.1.16; 1.1.18; 1.1.26; 1.1.32;
Add enough syscall compat for fs-utils to work on modern Solaris
and derivatives.

remove files which are autogenerated in every build

regen

branches: 1.2.2; 1.2.10; 1.2.14;
regen

gen

remove files which are autogenerated in every build

regen

branches: 1.2.2; 1.2.10; 1.2.14;
regen

gen

remove files which are autogenerated in every build

regen

branches: 1.2.2; 1.2.10; 1.2.14;
regen

gen

remove files which are autogenerated in every build

regen

branches: 1.2.2; 1.2.10; 1.2.14;
regen

gen

Remove shlib_version files and just use Makefile SHLIB_MAJOR/MINOR,
with the default provided by Makefile.rump (they're all 0.0 anyway)

branches: 1.1.4; 1.1.12; 1.1.16;
Add enough syscall compat for fs-utils to work on modern Solaris
and derivatives.

Fix merge botches. I hope there's no more left...

Merge the [pgoyette-compat] branch

Add missing RCSIDs.

Allow syscall_establish() to install new syscalls when the existing
entry-point is either sys_nomodule or sys_nosys. Update the
makesyscalls.sh script to create a const array of bits to allow
syscall_disestablish() to properly restore the original entry-point.
Update all the initializers of struct emul to initialize the pointer
to the bit array struct emul.

XXX Regen of all files created by makesyscalls.sh will come soon,
XXX followed by a kernel version bump (since struct emul is being
XXX modified).

This commit should address PR kern/45781 and also removes the need
for the work-around for that PR in file

sys/arch/usermode/modules/syscallemu/syscallemu.c

branches: 1.2.16; 1.2.18;
Put the kernelside rump kernel headers into <rump-sys> instead of
sprinkling them around the faction directories. Avoids having
to add a CPPFLAGS (or several) to pretty much every component
Makefile.

Leave compat headers around in the old locations.

The commit changes some autogenerated files, but I'll fix the
generators shortly and regen.

branches: 1.1.4; 1.1.6; 1.1.10; 1.1.12;
rename component.c -> sys_sunos_component.c

define sysautoload here too, to catch up with kern/makesyscalls.sh r1.173
XXX: This needs to be re-thought

branches: 1.1.4; 1.1.12; 1.1.40;
Add enough syscall compat for fs-utils to work on modern Solaris
and derivatives.

branches: 1.2.2; 1.2.10;
Support utimes/futimes. Makes at least fsu_touch work on these platforms.

Add enough syscall compat for fs-utils to work on modern Solaris
and derivatives.

branches: 1.3.16;
Put the kernelside rump kernel headers into <rump-sys> instead of
sprinkling them around the faction directories. Avoids having
to add a CPPFLAGS (or several) to pretty much every component
Makefile.

Leave compat headers around in the old locations.

The commit changes some autogenerated files, but I'll fix the
generators shortly and regen.

Add a COMMENT describing what each component roughly does.

"make describe" prints the comment.

Requested/inspired by Vincent Schwarzer on rumpkernel-users

branches: 1.1.2;
Move sysproxy support into a separate component, rumpkern_sysproxy,
instead of it being always provided by the rump kernel base. This
move accomplishes two things:

1) it is no longer necessary to provide sysproxy hypercall stubs for
platforms which do not want to use sysproxy
2) it is easier to reason about the security aspects, since configurations
not linking the sysproxy component simply do not support remote
system calls

discussed on rumpkernel-users

rump: Use l_sched.info, not l_private, for cv waits.

- l_sched is scheduler-private, used only by sched_m2.c, should be safe
- l_private is lwp-private, used by tls in user threads, would like to
reuse for kthreads too

rump libsysproxy: More workarounds for pmap abuse.

xc_barrier - convenience function to xc_broadcast() a nop.

Make the intent more clear and also avoid a bunch of (xcfunc_t)nullop
casts that gcc 8 -Wcast-function-type is not happy about.

Implement an aggressive psref leak detector

It is yet another psref leak detector that enables to tell where a leak occurs
while a simpler version that is already committed just tells an occurrence of a
leak.

Investigating of psref leaks is hard because once a leak occurs a percpu list of
psref that tracks references can be corrupted. A reference to a tracking object
is memorized in the list via an intermediate object (struct psref) that is
normally allocated on a stack of a thread. Thus, the intermediate object can be
overwritten on a leak resulting in corruption of the list.

The tracker makes a shadow entry to an intermediate object and stores some hints
into it (currently it's a caller address of psref_acquire). We can detect a
leak by checking the entries on certain points where any references should be
released such as the return point of syscalls and the end of each softint
handler.

The feature is expensive and enabled only if the kernel is built with
PSREF_DEBUG.

Proposed on tech-kern

Implement a simple psref leak detector

It detects leaks by counting up the number of held psref by an LWP and checking
its zeroness at the end of syscalls and softint handlers. For the counter, a
unused field of struct lwp is reused.

The detector runs only if DIAGNOSTIC is turned on.

rump: add missing sanity checks at the end of syscalls

branches: 1.4.16; 1.4.20;
Put the kernelside rump kernel headers into <rump-sys> instead of
sprinkling them around the faction directories. Avoids having
to add a CPPFLAGS (or several) to pretty much every component
Makefile.

Leave compat headers around in the old locations.

The commit changes some autogenerated files, but I'll fix the
generators shortly and regen.

Give remote clients struct pmap storage. Although the pmap is unused,
that way we can sure that the pmap macro framework doesn't access all
the wrong places.

branches: 1.2.2;
Use a different vmspace for rump kernel proc0 and local clients.
While the rump kernel and local clients are by definition in the same
host vmspace, there are subtle differences in how in-kernel code works
in case accessing the kernel vmspace or a user process vmspace.

Problem discovered by riastradh's "read(fd, NULL, 1)" test.

Move sysproxy support into a separate component, rumpkern_sysproxy,
instead of it being always provided by the rump kernel base. This
move accomplishes two things:

1) it is no longer necessary to provide sysproxy hypercall stubs for
platforms which do not want to use sysproxy
2) it is easier to reason about the security aspects, since configurations
not linking the sysproxy component simply do not support remote
system calls

discussed on rumpkernel-users

Put the kernelside rump kernel headers into <rump-sys> instead of
sprinkling them around the faction directories. Avoids having
to add a CPPFLAGS (or several) to pretty much every component
Makefile.

Leave compat headers around in the old locations.

The commit changes some autogenerated files, but I'll fix the
generators shortly and regen.

Add a COMMENT describing what each component roughly does.

"make describe" prints the comment.

Requested/inspired by Vincent Schwarzer on rumpkernel-users

use ioconf.h for pseudo-device attach prototypes

Rename RUMP_COMPAT to RUMP_NBCOMBAT to better signify what the
variable does.

Build compat code only when specified by RUMP_COMPAT

branches: 1.3.6;
rename component.c -> tty_component.c

COMPAT_60 for rump kernels.

Requested via github (buildrump.sh)

branches: 1.1.2; 1.1.4; 1.1.6; 1.1.14; 1.1.24; 1.1.28;
Add unadulterated tty support as a rump component.

branches: 1.1.2; 1.1.18;
use ioconf.h for pseudo-device attach prototypes

rename component.c -> tty_component.c

branches: 1.2.8; 1.2.18; 1.2.22;
Avoid double init of tty_lock if rumpkern_tty is included. LOCKDEBUG
does not tolerate double inits.

pointed out by njoly

branches: 1.1.2; 1.1.4; 1.1.6;
Add unadulterated tty support as a rump component.

branches: 1.1.2; 1.1.4; 1.1.6;
Add unadulterated tty support as a rump component.

Remove shlib_version files and just use Makefile SHLIB_MAJOR/MINOR,
with the default provided by Makefile.rump (they're all 0.0 anyway)

branches: 1.1.2; 1.1.4; 1.1.6; 1.1.24; 1.1.42;
Add unadulterated tty support as a rump component.

Put the kernelside rump kernel headers into <rump-sys> instead of
sprinkling them around the faction directories. Avoids having
to add a CPPFLAGS (or several) to pretty much every component
Makefile.

Leave compat headers around in the old locations.

The commit changes some autogenerated files, but I'll fix the
generators shortly and regen.

Initialize non-VFS parts of tty subsystem already at RUMP_COMPONENT_KERN.

That way components under RUMP__FACTION_DEV can call tty routines.

use ioconf.h for pseudo-device attach prototypes

branches: 1.1.4; 1.1.6; 1.1.10; 1.1.12;
rename component.c -> tty_component.c

adapt to ${CC_WNO_IMPLICIT_FALLTHROUGH}

Use ${CC_WNO_IMPLICIT_FALLTHROUGH} instead of
the older style more complex expressions.

convert HAVE_GCC == 7 to HAVE_GCC >= 7.

be sure to only apply zlib.c's -Wno-error=implicit-fallthrough to GCC 7.
push the setting into the rump and module version too.

branches: 1.2.18;
Add a COMMENT describing what each component roughly does.

"make describe" prints the comment.

Requested/inspired by Vincent Schwarzer on rumpkernel-users

branches: 1.1.2; 1.1.4; 1.1.6; 1.1.24; 1.1.42;
support zlib

Remove shlib_version files and just use Makefile SHLIB_MAJOR/MINOR,
with the default provided by Makefile.rump (they're all 0.0 anyway)

branches: 1.1.2; 1.1.4; 1.1.6; 1.1.24; 1.1.42;
support zlib