[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

Re: [PATCH 4/7] x86/kexec: Support non-page-aligned kexec segments


  • To: Andrew Cooper <andrew.cooper3@xxxxxxxxxx>, "xen-devel@xxxxxxxxxxxxxxxxxxxx" <xen-devel@xxxxxxxxxxxxxxxxxxxx>
  • From: Kevin Lampis <kevin.lampis@xxxxxxxxxx>
  • Date: Mon, 15 Jun 2026 18:43:25 +0000
  • Accept-language: en-GB, en-US
  • Arc-authentication-results: i=1; mx.microsoft.com 1; spf=pass smtp.mailfrom=citrix.com; dmarc=pass action=none header.from=citrix.com; dkim=pass header.d=citrix.com; arc=none
  • Arc-message-signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com; s=arcselector10001; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-AntiSpam-MessageData-ChunkCount:X-MS-Exchange-AntiSpam-MessageData-0:X-MS-Exchange-AntiSpam-MessageData-1; bh=6ouyFQ0eU6ubnvg+fcK0usVcZr5Tkjl83MuVqcjkRDI=; b=D0vZYb2cMgUisysLJmc7mR3I3cVseiFbq2R7nF6/4NtaJVq8+k9ZXHb0fNGvuoh4r2vlYat208OC5K4Hy23CEhwPAyehKPKz7hNPEkfpG5a7MyoUSOUfSPSr65JAmBx1hAFftMhY0F0ypbqbKNSQCmJtYz57poKw990kAG37wgXobTvob2inMuQc15TTqytqBAwaEIFOghcnuHKGsYSpnBYPfDxdQU1n5GEONNr5KwE5kA1uau7MjpbqF3qlZpzSCJHTfJj/QAjh5eioVkMUO02zPlZOwTrf7y3yOQ3NCblb50dcwLWGDTh9SEody/PouzFCZkCLLc/MaeOlntU0+w==
  • Arc-seal: i=1; a=rsa-sha256; s=arcselector10001; d=microsoft.com; cv=none; b=jaObRey4xe91W6klfHFv518WgDatkXptajgaJEiiNxpCDnFr/NGyzyeDpEq4iiuyglmn4/H2G9NPreAC9o4Lwkb3cgWKXN98x1CUfDjbxBVF0os8F4/wCdyAa76y2tbwcxvfvaSCpBqdoOUT2XECCuttUZMtOhtkFKkoYwa89SAGE5j5mjMJ2g+41sU9BtVOON1qCiGnhYKfctncc2aTmpASeOhTwFnHMvEMK6f89+d1oni/Dpvt1mWN/98DGiKxlvdzQnpDimQBECPdNX74wZHNouni8skZmaI0DA4OBR+Xq9RuMUa9K1PVmdUtjdOd0eL3dSm4Y3YgS7bD4QmCIw==
  • Authentication-results: eu.smtp.expurgate.cloud; dkim=pass header.s=selector1 header.d=citrix.com header.i="@citrix.com" header.h="From:Date:Subject:Message-ID:Content-Type:MIME-Version:x-ms-exchange-senderadcheck"
  • Authentication-results: dkim=none (message not signed) header.d=none;dmarc=none action=none header.from=citrix.com;
  • Cc: "jbeulich@xxxxxxxx" <jbeulich@xxxxxxxx>, Roger Pau Monne <roger.pau@xxxxxxxxxx>, Ross Lagerwall <ross.lagerwall@xxxxxxxxxx>
  • Delivery-date: Mon, 15 Jun 2026 18:43:37 +0000
  • List-id: Xen developer discussion <xen-devel.lists.xenproject.org>
  • Msip_labels:
  • Thread-index: AQHc+CbsApGJa6zrgUWsa1X0ikSoUrY/cjuAgACCg5A=
  • Thread-topic: [PATCH 4/7] x86/kexec: Support non-page-aligned kexec segments

>It's startup_32 not startup32.  Yet we hand over in 64bit mode, so why
>is startup_32 relevant rather than startup_64?

Probably just careless wording. I don't think it was the author's
intention to draw a distinction between 32 and 64.

>I can't find any hard alignment restriction (beyond 4k).  There is a
>check involving BP_kernel_alignment, which is set to 2M, which makes
>sense; it's the alignment we set Xen to too.
>So, what's the real bug/problem here?

For normal kexec the userspace tools chop off the first part of the
kernel so everything aligns correctly.

For Secure Boot we need to load the whole kernel unmodified to pass
the signature check and that means the startup function is not aligned
correctly anymore.

We also changed the userspace tools to add padding to the start of the
kernel segment so the startup function is pushed out to the next 2M
byte boundary. So Secure Boot kexec does still work without this patch.


 


Rackspace

Lists.xenproject.org is hosted with RackSpace, monitoring our
servers 24x7x365 and backed by RackSpace's Fanatical Support®.