10Sstevel@tonic-gate /* 20Sstevel@tonic-gate * CDDL HEADER START 30Sstevel@tonic-gate * 40Sstevel@tonic-gate * The contents of this file are subject to the terms of the 51996Sml93401 * Common Development and Distribution License (the "License"). 61996Sml93401 * You may not use this file except in compliance with the License. 70Sstevel@tonic-gate * 80Sstevel@tonic-gate * You can obtain a copy of the license at usr/src/OPENSOLARIS.LICENSE 90Sstevel@tonic-gate * or http://www.opensolaris.org/os/licensing. 100Sstevel@tonic-gate * See the License for the specific language governing permissions 110Sstevel@tonic-gate * and limitations under the License. 120Sstevel@tonic-gate * 130Sstevel@tonic-gate * When distributing Covered Code, include this CDDL HEADER in each 140Sstevel@tonic-gate * file and include the License file at usr/src/OPENSOLARIS.LICENSE. 150Sstevel@tonic-gate * If applicable, add the following below this CDDL HEADER, with the 160Sstevel@tonic-gate * fields enclosed by brackets "[]" replaced with your own identifying 170Sstevel@tonic-gate * information: Portions Copyright [yyyy] [name of copyright owner] 180Sstevel@tonic-gate * 190Sstevel@tonic-gate * CDDL HEADER END 200Sstevel@tonic-gate */ 210Sstevel@tonic-gate /* 22*12273SCasper.Dik@Sun.COM * Copyright (c) 2000, 2010, Oracle and/or its affiliates. All rights reserved. 230Sstevel@tonic-gate */ 240Sstevel@tonic-gate 250Sstevel@tonic-gate #include <sys/project.h> 260Sstevel@tonic-gate #include <sys/modhash.h> 270Sstevel@tonic-gate #include <sys/modctl.h> 280Sstevel@tonic-gate #include <sys/kmem.h> 293247Sgjelinek #include <sys/kstat.h> 300Sstevel@tonic-gate #include <sys/atomic.h> 310Sstevel@tonic-gate #include <sys/cmn_err.h> 320Sstevel@tonic-gate #include <sys/proc.h> 330Sstevel@tonic-gate #include <sys/rctl.h> 340Sstevel@tonic-gate #include <sys/sunddi.h> 350Sstevel@tonic-gate #include <sys/fss.h> 360Sstevel@tonic-gate #include <sys/systm.h> 370Sstevel@tonic-gate #include <sys/ipc_impl.h> 380Sstevel@tonic-gate #include <sys/port_kernel.h> 390Sstevel@tonic-gate #include <sys/task.h> 400Sstevel@tonic-gate #include <sys/zone.h> 413792Sakolb #include <sys/cpucaps.h> 426134Scasper #include <sys/klpd.h> 430Sstevel@tonic-gate 440Sstevel@tonic-gate int project_hash_size = 64; 450Sstevel@tonic-gate static kmutex_t project_hash_lock; 460Sstevel@tonic-gate static kmutex_t projects_list_lock; 470Sstevel@tonic-gate static mod_hash_t *projects_hash; 480Sstevel@tonic-gate static kproject_t *projects_list; 490Sstevel@tonic-gate 500Sstevel@tonic-gate rctl_hndl_t rc_project_cpu_shares; 513792Sakolb rctl_hndl_t rc_project_cpu_cap; 520Sstevel@tonic-gate rctl_hndl_t rc_project_nlwps; 530Sstevel@tonic-gate rctl_hndl_t rc_project_ntasks; 540Sstevel@tonic-gate rctl_hndl_t rc_project_msgmni; 550Sstevel@tonic-gate rctl_hndl_t rc_project_semmni; 560Sstevel@tonic-gate rctl_hndl_t rc_project_shmmax; 570Sstevel@tonic-gate rctl_hndl_t rc_project_shmmni; 580Sstevel@tonic-gate rctl_hndl_t rc_project_portids; 592768Ssl108498 rctl_hndl_t rc_project_locked_mem; 600Sstevel@tonic-gate rctl_hndl_t rc_project_contract; 610Sstevel@tonic-gate rctl_hndl_t rc_project_crypto_mem; 620Sstevel@tonic-gate 630Sstevel@tonic-gate /* 640Sstevel@tonic-gate * Dummy structure used when comparing projects. This structure must be kept 650Sstevel@tonic-gate * identical to the first two fields of kproject_t. 660Sstevel@tonic-gate */ 670Sstevel@tonic-gate struct project_zone { 680Sstevel@tonic-gate projid_t kpj_id; 690Sstevel@tonic-gate zoneid_t kpj_zoneid; 700Sstevel@tonic-gate }; 710Sstevel@tonic-gate 720Sstevel@tonic-gate /* 730Sstevel@tonic-gate * Projects 740Sstevel@tonic-gate * 750Sstevel@tonic-gate * A dictionary of all active projects is maintained by the kernel so that we 760Sstevel@tonic-gate * may track project usage and limits. (By an active project, we mean a 770Sstevel@tonic-gate * project associated with one or more task, and therefore with one or more 780Sstevel@tonic-gate * processes.) We build the dictionary on top of the mod_hash facility, since 790Sstevel@tonic-gate * project additions and deletions are relatively rare events. An 800Sstevel@tonic-gate * integer-to-pointer mapping is maintained within the hash, representing the 810Sstevel@tonic-gate * map from project id to project structure. All projects, including the 820Sstevel@tonic-gate * primordial "project 0", are allocated via the project_hold_by_id() 830Sstevel@tonic-gate * interface. 840Sstevel@tonic-gate * 850Sstevel@tonic-gate * Currently, the project contains a reference count; the project ID, which is 860Sstevel@tonic-gate * examined by the extended accounting subsystem as well as /proc; a resource 870Sstevel@tonic-gate * control set, which contains the allowable values (and actions on exceeding 880Sstevel@tonic-gate * those values) for controlled project-level resources on the system; and a 890Sstevel@tonic-gate * number of CPU shares, which is used by the fair share scheduling class 900Sstevel@tonic-gate * (FSS) to support its proportion-based scheduling algorithm. 910Sstevel@tonic-gate * 920Sstevel@tonic-gate * Reference counting convention 930Sstevel@tonic-gate * The dictionary entry does not itself count as a reference--only references 940Sstevel@tonic-gate * outside of the subsystem are tallied. At the drop of the final external 950Sstevel@tonic-gate * reference, the project entry is removed. The reference counter keeps 960Sstevel@tonic-gate * track of the number of threads *and* tasks within a project. 970Sstevel@tonic-gate * 980Sstevel@tonic-gate * Locking 990Sstevel@tonic-gate * Walking the doubly-linked project list must be done while holding 1000Sstevel@tonic-gate * projects_list_lock. Thus, any dereference of kpj_next or kpj_prev must be 1010Sstevel@tonic-gate * under projects_list_lock. 1020Sstevel@tonic-gate * 1030Sstevel@tonic-gate * If both the hash lock, project_hash_lock, and the list lock are to be 1040Sstevel@tonic-gate * acquired, the hash lock is to be acquired first. 1050Sstevel@tonic-gate */ 1060Sstevel@tonic-gate 1073247Sgjelinek static kstat_t *project_kstat_create(kproject_t *pj, zone_t *zone); 1083247Sgjelinek static void project_kstat_delete(kproject_t *pj); 1090Sstevel@tonic-gate 1100Sstevel@tonic-gate static void 1110Sstevel@tonic-gate project_data_init(kproject_data_t *data) 1120Sstevel@tonic-gate { 1130Sstevel@tonic-gate /* 1140Sstevel@tonic-gate * Initialize subsystem-specific data 1150Sstevel@tonic-gate */ 1160Sstevel@tonic-gate data->kpd_shmmax = 0; 1172677Sml93401 data->kpd_ipc.ipcq_shmmni = 0; 1182677Sml93401 data->kpd_ipc.ipcq_semmni = 0; 1192677Sml93401 data->kpd_ipc.ipcq_msgmni = 0; 1202768Ssl108498 data->kpd_locked_mem = 0; 1212768Ssl108498 data->kpd_locked_mem_ctl = UINT64_MAX; 1220Sstevel@tonic-gate data->kpd_contract = 0; 1230Sstevel@tonic-gate data->kpd_crypto_mem = 0; 1243620Skrishna data->kpd_crypto_mem_ctl = UINT64_MAX; 1253247Sgjelinek data->kpd_lockedmem_kstat = NULL; 1260Sstevel@tonic-gate } 1270Sstevel@tonic-gate 1280Sstevel@tonic-gate /*ARGSUSED*/ 1290Sstevel@tonic-gate static uint_t 1300Sstevel@tonic-gate project_hash_by_id(void *hash_data, mod_hash_key_t key) 1310Sstevel@tonic-gate { 1320Sstevel@tonic-gate struct project_zone *pz = key; 1330Sstevel@tonic-gate uint_t mykey; 1340Sstevel@tonic-gate 1350Sstevel@tonic-gate /* 1360Sstevel@tonic-gate * Merge the zoneid and projectid together to a 32-bit quantity, and 1370Sstevel@tonic-gate * then pass that in to the existing idhash. 1380Sstevel@tonic-gate */ 1390Sstevel@tonic-gate mykey = (pz->kpj_zoneid << 16) | pz->kpj_id; 1400Sstevel@tonic-gate return (mod_hash_byid(hash_data, (mod_hash_key_t)(uintptr_t)mykey)); 1410Sstevel@tonic-gate } 1420Sstevel@tonic-gate 1430Sstevel@tonic-gate static int 1440Sstevel@tonic-gate project_hash_key_cmp(mod_hash_key_t key1, mod_hash_key_t key2) 1450Sstevel@tonic-gate { 1460Sstevel@tonic-gate struct project_zone *pz1 = key1, *pz2 = key2; 1470Sstevel@tonic-gate int retval; 1480Sstevel@tonic-gate 1490Sstevel@tonic-gate return ((int)((retval = pz1->kpj_id - pz2->kpj_id) != 0 ? retval : 1500Sstevel@tonic-gate pz1->kpj_zoneid - pz2->kpj_zoneid)); 1510Sstevel@tonic-gate } 1520Sstevel@tonic-gate 1530Sstevel@tonic-gate static void 1540Sstevel@tonic-gate project_hash_val_dtor(mod_hash_val_t val) 1550Sstevel@tonic-gate { 1560Sstevel@tonic-gate kproject_t *kp = (kproject_t *)val; 1570Sstevel@tonic-gate 1580Sstevel@tonic-gate ASSERT(kp->kpj_count == 0); 1593792Sakolb ASSERT(kp->kpj_cpucap == NULL); 1600Sstevel@tonic-gate kmem_free(kp, sizeof (kproject_t)); 1610Sstevel@tonic-gate } 1620Sstevel@tonic-gate 1630Sstevel@tonic-gate /* 1640Sstevel@tonic-gate * kproject_t *project_hold(kproject_t *) 1650Sstevel@tonic-gate * 1660Sstevel@tonic-gate * Overview 1670Sstevel@tonic-gate * Record that an additional reference on the indicated project has been 1680Sstevel@tonic-gate * taken. 1690Sstevel@tonic-gate * 1700Sstevel@tonic-gate * Return values 1710Sstevel@tonic-gate * A pointer to the indicated project. 1720Sstevel@tonic-gate * 1730Sstevel@tonic-gate * Caller's context 1740Sstevel@tonic-gate * project_hash_lock must not be held across the project_hold() call. 1750Sstevel@tonic-gate */ 1760Sstevel@tonic-gate kproject_t * 1770Sstevel@tonic-gate project_hold(kproject_t *p) 1780Sstevel@tonic-gate { 1790Sstevel@tonic-gate mutex_enter(&project_hash_lock); 1800Sstevel@tonic-gate ASSERT(p != NULL); 1810Sstevel@tonic-gate p->kpj_count++; 1820Sstevel@tonic-gate ASSERT(p->kpj_count != 0); 1830Sstevel@tonic-gate mutex_exit(&project_hash_lock); 1840Sstevel@tonic-gate return (p); 1850Sstevel@tonic-gate } 1860Sstevel@tonic-gate 1870Sstevel@tonic-gate /* 1883247Sgjelinek * kproject_t *project_hold_by_id(projid_t, zone_t *, int) 1890Sstevel@tonic-gate * 1900Sstevel@tonic-gate * Overview 1910Sstevel@tonic-gate * project_hold_by_id() performs a look-up in the dictionary of projects 1923247Sgjelinek * active on the system by specified project ID + zone and puts a hold on 1930Sstevel@tonic-gate * it. The third argument defines the desired behavior in the case when 1940Sstevel@tonic-gate * project with given project ID cannot be found: 1950Sstevel@tonic-gate * 1960Sstevel@tonic-gate * PROJECT_HOLD_INSERT New entry is made in dictionary and the project 1970Sstevel@tonic-gate * is added to the global list. 1980Sstevel@tonic-gate * 1990Sstevel@tonic-gate * PROJECT_HOLD_FIND Return NULL. 2000Sstevel@tonic-gate * 2010Sstevel@tonic-gate * The project is returned with its reference count incremented by one. 2020Sstevel@tonic-gate * A new project derives its resource controls from those of project 0. 2030Sstevel@tonic-gate * 2040Sstevel@tonic-gate * Return values 2050Sstevel@tonic-gate * A pointer to the held project. 2060Sstevel@tonic-gate * 2070Sstevel@tonic-gate * Caller's context 2080Sstevel@tonic-gate * Caller must be in a context suitable for KM_SLEEP allocations. 2090Sstevel@tonic-gate */ 2100Sstevel@tonic-gate kproject_t * 2113247Sgjelinek project_hold_by_id(projid_t id, zone_t *zone, int flag) 2120Sstevel@tonic-gate { 2130Sstevel@tonic-gate kproject_t *spare_p; 2140Sstevel@tonic-gate kproject_t *p; 2150Sstevel@tonic-gate mod_hash_hndl_t hndl; 2160Sstevel@tonic-gate rctl_set_t *set; 2170Sstevel@tonic-gate rctl_alloc_gp_t *gp; 2180Sstevel@tonic-gate rctl_entity_p_t e; 2190Sstevel@tonic-gate struct project_zone pz; 2203247Sgjelinek boolean_t create = B_FALSE; 2213247Sgjelinek kstat_t *ksp; 2220Sstevel@tonic-gate 2230Sstevel@tonic-gate pz.kpj_id = id; 2243247Sgjelinek pz.kpj_zoneid = zone->zone_id; 2250Sstevel@tonic-gate 2260Sstevel@tonic-gate if (flag == PROJECT_HOLD_FIND) { 2270Sstevel@tonic-gate mutex_enter(&project_hash_lock); 2280Sstevel@tonic-gate 2290Sstevel@tonic-gate if (mod_hash_find(projects_hash, (mod_hash_key_t)&pz, 2300Sstevel@tonic-gate (mod_hash_val_t)&p) == MH_ERR_NOTFOUND) 2310Sstevel@tonic-gate p = NULL; 2320Sstevel@tonic-gate else 2330Sstevel@tonic-gate p->kpj_count++; 2340Sstevel@tonic-gate 2350Sstevel@tonic-gate mutex_exit(&project_hash_lock); 2360Sstevel@tonic-gate return (p); 2370Sstevel@tonic-gate } 2380Sstevel@tonic-gate 2390Sstevel@tonic-gate ASSERT(flag == PROJECT_HOLD_INSERT); 2400Sstevel@tonic-gate 2410Sstevel@tonic-gate spare_p = kmem_zalloc(sizeof (kproject_t), KM_SLEEP); 2420Sstevel@tonic-gate set = rctl_set_create(); 2430Sstevel@tonic-gate 2440Sstevel@tonic-gate gp = rctl_set_init_prealloc(RCENTITY_PROJECT); 2450Sstevel@tonic-gate 2460Sstevel@tonic-gate (void) mod_hash_reserve(projects_hash, &hndl); 2470Sstevel@tonic-gate 2480Sstevel@tonic-gate mutex_enter(&curproc->p_lock); 2490Sstevel@tonic-gate mutex_enter(&project_hash_lock); 2500Sstevel@tonic-gate if (mod_hash_find(projects_hash, (mod_hash_key_t)&pz, 2510Sstevel@tonic-gate (mod_hash_val_t *)&p) == MH_ERR_NOTFOUND) { 2523247Sgjelinek 2530Sstevel@tonic-gate p = spare_p; 2540Sstevel@tonic-gate p->kpj_id = id; 2553792Sakolb p->kpj_zone = zone; 2563247Sgjelinek p->kpj_zoneid = zone->zone_id; 2570Sstevel@tonic-gate p->kpj_count = 0; 2580Sstevel@tonic-gate p->kpj_shares = 1; 2590Sstevel@tonic-gate p->kpj_nlwps = 0; 2600Sstevel@tonic-gate p->kpj_ntasks = 0; 2610Sstevel@tonic-gate p->kpj_nlwps_ctl = INT_MAX; 2620Sstevel@tonic-gate p->kpj_ntasks_ctl = INT_MAX; 2630Sstevel@tonic-gate project_data_init(&p->kpj_data); 2640Sstevel@tonic-gate e.rcep_p.proj = p; 2650Sstevel@tonic-gate e.rcep_t = RCENTITY_PROJECT; 2660Sstevel@tonic-gate p->kpj_rctls = rctl_set_init(RCENTITY_PROJECT, curproc, &e, 2670Sstevel@tonic-gate set, gp); 2680Sstevel@tonic-gate mutex_exit(&curproc->p_lock); 2690Sstevel@tonic-gate 2700Sstevel@tonic-gate if (mod_hash_insert_reserve(projects_hash, (mod_hash_key_t)p, 2710Sstevel@tonic-gate (mod_hash_val_t)p, hndl)) 2720Sstevel@tonic-gate panic("unable to insert project %d(%p)", id, (void *)p); 2730Sstevel@tonic-gate 2740Sstevel@tonic-gate /* 2750Sstevel@tonic-gate * Insert project into global project list. 2760Sstevel@tonic-gate */ 2770Sstevel@tonic-gate mutex_enter(&projects_list_lock); 2783247Sgjelinek if (id != 0 || zone != &zone0) { 2790Sstevel@tonic-gate p->kpj_next = projects_list; 2800Sstevel@tonic-gate p->kpj_prev = projects_list->kpj_prev; 2810Sstevel@tonic-gate p->kpj_prev->kpj_next = p; 2820Sstevel@tonic-gate projects_list->kpj_prev = p; 2830Sstevel@tonic-gate } else { 2840Sstevel@tonic-gate /* 2850Sstevel@tonic-gate * Special case: primordial hold on project 0. 2860Sstevel@tonic-gate */ 2870Sstevel@tonic-gate p->kpj_next = p; 2880Sstevel@tonic-gate p->kpj_prev = p; 2890Sstevel@tonic-gate projects_list = p; 2900Sstevel@tonic-gate } 2910Sstevel@tonic-gate mutex_exit(&projects_list_lock); 2923247Sgjelinek create = B_TRUE; 2930Sstevel@tonic-gate } else { 2940Sstevel@tonic-gate mutex_exit(&curproc->p_lock); 2950Sstevel@tonic-gate mod_hash_cancel(projects_hash, &hndl); 2960Sstevel@tonic-gate kmem_free(spare_p, sizeof (kproject_t)); 2970Sstevel@tonic-gate rctl_set_free(set); 2980Sstevel@tonic-gate } 2990Sstevel@tonic-gate 3000Sstevel@tonic-gate rctl_prealloc_destroy(gp); 3010Sstevel@tonic-gate p->kpj_count++; 3020Sstevel@tonic-gate mutex_exit(&project_hash_lock); 3030Sstevel@tonic-gate 3043247Sgjelinek /* 3053247Sgjelinek * The kstat stores the project's zone name, as zoneid's may change 3063247Sgjelinek * across reboots. 3073247Sgjelinek */ 3083247Sgjelinek if (create == B_TRUE) { 3093792Sakolb /* 3103792Sakolb * Inform CPU caps framework of the new project 3113792Sakolb */ 3123792Sakolb cpucaps_project_add(p); 3133792Sakolb /* 3143792Sakolb * Set up project kstats 3153792Sakolb */ 3163247Sgjelinek ksp = project_kstat_create(p, zone); 3173247Sgjelinek mutex_enter(&project_hash_lock); 3183247Sgjelinek ASSERT(p->kpj_data.kpd_lockedmem_kstat == NULL); 3193247Sgjelinek p->kpj_data.kpd_lockedmem_kstat = ksp; 3203247Sgjelinek mutex_exit(&project_hash_lock); 3213247Sgjelinek } 3220Sstevel@tonic-gate return (p); 3230Sstevel@tonic-gate } 3240Sstevel@tonic-gate 3250Sstevel@tonic-gate /* 3260Sstevel@tonic-gate * void project_rele(kproject_t *) 3270Sstevel@tonic-gate * 3280Sstevel@tonic-gate * Overview 3290Sstevel@tonic-gate * Advertise that one external reference to this project is no longer needed. 3300Sstevel@tonic-gate * 3310Sstevel@tonic-gate * Return values 3320Sstevel@tonic-gate * None. 3330Sstevel@tonic-gate * 3340Sstevel@tonic-gate * Caller's context 3350Sstevel@tonic-gate * No restriction on context. 3360Sstevel@tonic-gate */ 3370Sstevel@tonic-gate void 3380Sstevel@tonic-gate project_rele(kproject_t *p) 3390Sstevel@tonic-gate { 3400Sstevel@tonic-gate mutex_enter(&project_hash_lock); 3410Sstevel@tonic-gate ASSERT(p->kpj_count != 0); 3420Sstevel@tonic-gate p->kpj_count--; 3430Sstevel@tonic-gate if (p->kpj_count == 0) { 3440Sstevel@tonic-gate 3450Sstevel@tonic-gate /* 3460Sstevel@tonic-gate * Remove project from global list. 3470Sstevel@tonic-gate */ 3480Sstevel@tonic-gate mutex_enter(&projects_list_lock); 3490Sstevel@tonic-gate p->kpj_next->kpj_prev = p->kpj_prev; 3500Sstevel@tonic-gate p->kpj_prev->kpj_next = p->kpj_next; 3510Sstevel@tonic-gate if (projects_list == p) 3520Sstevel@tonic-gate projects_list = p->kpj_next; 3530Sstevel@tonic-gate mutex_exit(&projects_list_lock); 3540Sstevel@tonic-gate 3553792Sakolb cpucaps_project_remove(p); 3563792Sakolb 3570Sstevel@tonic-gate rctl_set_free(p->kpj_rctls); 3583247Sgjelinek project_kstat_delete(p); 3590Sstevel@tonic-gate 3606134Scasper if (p->kpj_klpd != NULL) 361*12273SCasper.Dik@Sun.COM klpd_freelist(&p->kpj_klpd); 3626134Scasper 3630Sstevel@tonic-gate if (mod_hash_destroy(projects_hash, (mod_hash_key_t)p)) 3640Sstevel@tonic-gate panic("unable to delete project %d zone %d", p->kpj_id, 3650Sstevel@tonic-gate p->kpj_zoneid); 3660Sstevel@tonic-gate 3676134Scasper } 3680Sstevel@tonic-gate mutex_exit(&project_hash_lock); 3690Sstevel@tonic-gate } 3700Sstevel@tonic-gate 3710Sstevel@tonic-gate /* 3720Sstevel@tonic-gate * int project_walk_all(zoneid_t, int (*)(kproject_t *, void *), void *) 3730Sstevel@tonic-gate * 3740Sstevel@tonic-gate * Overview 3750Sstevel@tonic-gate * Walk the project list for the given zoneid with a callback. 3760Sstevel@tonic-gate * 3770Sstevel@tonic-gate * Return values 3780Sstevel@tonic-gate * -1 for an invalid walk, number of projects visited otherwise. 3790Sstevel@tonic-gate * 3800Sstevel@tonic-gate * Caller's context 3810Sstevel@tonic-gate * projects_list_lock must not be held, as it is acquired by 3820Sstevel@tonic-gate * project_walk_all(). Accordingly, callbacks may not perform KM_SLEEP 3830Sstevel@tonic-gate * allocations. 3840Sstevel@tonic-gate */ 3850Sstevel@tonic-gate int 3860Sstevel@tonic-gate project_walk_all(zoneid_t zoneid, int (*cb)(kproject_t *, void *), 3870Sstevel@tonic-gate void *walk_data) 3880Sstevel@tonic-gate { 3890Sstevel@tonic-gate int cnt = 0; 3900Sstevel@tonic-gate kproject_t *kp = proj0p; 3910Sstevel@tonic-gate 3920Sstevel@tonic-gate mutex_enter(&projects_list_lock); 3930Sstevel@tonic-gate do { 3940Sstevel@tonic-gate if (zoneid != ALL_ZONES && kp->kpj_zoneid != zoneid) 3950Sstevel@tonic-gate continue; 3960Sstevel@tonic-gate if (cb(kp, walk_data) == -1) { 3970Sstevel@tonic-gate cnt = -1; 3980Sstevel@tonic-gate break; 3990Sstevel@tonic-gate } else { 4000Sstevel@tonic-gate cnt++; 4010Sstevel@tonic-gate } 4020Sstevel@tonic-gate } while ((kp = kp->kpj_next) != proj0p); 4030Sstevel@tonic-gate mutex_exit(&projects_list_lock); 4040Sstevel@tonic-gate return (cnt); 4050Sstevel@tonic-gate } 4060Sstevel@tonic-gate 4070Sstevel@tonic-gate /* 4080Sstevel@tonic-gate * projid_t curprojid(void) 4090Sstevel@tonic-gate * 4100Sstevel@tonic-gate * Overview 4110Sstevel@tonic-gate * Return project ID of the current thread 4120Sstevel@tonic-gate * 4130Sstevel@tonic-gate * Caller's context 4140Sstevel@tonic-gate * No restrictions. 4150Sstevel@tonic-gate */ 4160Sstevel@tonic-gate projid_t 4170Sstevel@tonic-gate curprojid() 4180Sstevel@tonic-gate { 4190Sstevel@tonic-gate return (ttoproj(curthread)->kpj_id); 4200Sstevel@tonic-gate } 4210Sstevel@tonic-gate 4220Sstevel@tonic-gate /* 4230Sstevel@tonic-gate * project.cpu-shares resource control support. 4240Sstevel@tonic-gate */ 4250Sstevel@tonic-gate /*ARGSUSED*/ 4260Sstevel@tonic-gate static rctl_qty_t 4270Sstevel@tonic-gate project_cpu_shares_usage(rctl_t *rctl, struct proc *p) 4280Sstevel@tonic-gate { 4290Sstevel@tonic-gate ASSERT(MUTEX_HELD(&p->p_lock)); 4300Sstevel@tonic-gate return (p->p_task->tk_proj->kpj_shares); 4310Sstevel@tonic-gate } 4320Sstevel@tonic-gate 4330Sstevel@tonic-gate /*ARGSUSED*/ 4340Sstevel@tonic-gate static int 4350Sstevel@tonic-gate project_cpu_shares_set(rctl_t *rctl, struct proc *p, rctl_entity_p_t *e, 4360Sstevel@tonic-gate rctl_qty_t nv) 4370Sstevel@tonic-gate { 4380Sstevel@tonic-gate ASSERT(MUTEX_HELD(&p->p_lock)); 4390Sstevel@tonic-gate ASSERT(e->rcep_t == RCENTITY_PROJECT); 4400Sstevel@tonic-gate if (e->rcep_p.proj == NULL) 4410Sstevel@tonic-gate return (0); 4420Sstevel@tonic-gate 4430Sstevel@tonic-gate e->rcep_p.proj->kpj_shares = nv; 4440Sstevel@tonic-gate 4450Sstevel@tonic-gate return (0); 4460Sstevel@tonic-gate } 4470Sstevel@tonic-gate 4480Sstevel@tonic-gate static rctl_ops_t project_cpu_shares_ops = { 4490Sstevel@tonic-gate rcop_no_action, 4500Sstevel@tonic-gate project_cpu_shares_usage, 4510Sstevel@tonic-gate project_cpu_shares_set, 4520Sstevel@tonic-gate rcop_no_test 4530Sstevel@tonic-gate }; 4540Sstevel@tonic-gate 4553792Sakolb 4563792Sakolb /* 4573792Sakolb * project.cpu-cap resource control support. 4583792Sakolb */ 4593792Sakolb /*ARGSUSED*/ 4603792Sakolb static rctl_qty_t 4613792Sakolb project_cpu_cap_get(rctl_t *rctl, struct proc *p) 4623792Sakolb { 4633792Sakolb ASSERT(MUTEX_HELD(&p->p_lock)); 4643792Sakolb return (cpucaps_project_get(p->p_task->tk_proj)); 4653792Sakolb } 4663792Sakolb 4673792Sakolb /*ARGSUSED*/ 4683792Sakolb static int 4693792Sakolb project_cpu_cap_set(rctl_t *rctl, struct proc *p, rctl_entity_p_t *e, 4703792Sakolb rctl_qty_t nv) 4713792Sakolb { 4723792Sakolb kproject_t *kpj = e->rcep_p.proj; 4733792Sakolb 4743792Sakolb ASSERT(MUTEX_HELD(&p->p_lock)); 4753792Sakolb ASSERT(e->rcep_t == RCENTITY_PROJECT); 4763792Sakolb if (kpj == NULL) 4773792Sakolb return (0); 4783792Sakolb 4793792Sakolb /* 4803792Sakolb * set cap to the new value. 4813792Sakolb */ 4823792Sakolb return (cpucaps_project_set(kpj, nv)); 4833792Sakolb } 4843792Sakolb 4853792Sakolb static rctl_ops_t project_cpu_cap_ops = { 4863792Sakolb rcop_no_action, 4873792Sakolb project_cpu_cap_get, 4883792Sakolb project_cpu_cap_set, 4893792Sakolb rcop_no_test 4903792Sakolb }; 4913792Sakolb 4920Sstevel@tonic-gate /*ARGSUSED*/ 4930Sstevel@tonic-gate static rctl_qty_t 4940Sstevel@tonic-gate project_lwps_usage(rctl_t *r, proc_t *p) 4950Sstevel@tonic-gate { 4960Sstevel@tonic-gate kproject_t *pj; 4970Sstevel@tonic-gate rctl_qty_t nlwps; 4980Sstevel@tonic-gate 4990Sstevel@tonic-gate ASSERT(MUTEX_HELD(&p->p_lock)); 5000Sstevel@tonic-gate pj = p->p_task->tk_proj; 5010Sstevel@tonic-gate mutex_enter(&p->p_zone->zone_nlwps_lock); 5020Sstevel@tonic-gate nlwps = pj->kpj_nlwps; 5030Sstevel@tonic-gate mutex_exit(&p->p_zone->zone_nlwps_lock); 5040Sstevel@tonic-gate 5050Sstevel@tonic-gate return (nlwps); 5060Sstevel@tonic-gate } 5070Sstevel@tonic-gate 5080Sstevel@tonic-gate /*ARGSUSED*/ 5090Sstevel@tonic-gate static int 5100Sstevel@tonic-gate project_lwps_test(rctl_t *r, proc_t *p, rctl_entity_p_t *e, rctl_val_t *rcntl, 5110Sstevel@tonic-gate rctl_qty_t incr, uint_t flags) 5120Sstevel@tonic-gate { 5130Sstevel@tonic-gate rctl_qty_t nlwps; 5140Sstevel@tonic-gate 5150Sstevel@tonic-gate ASSERT(MUTEX_HELD(&p->p_lock)); 5162768Ssl108498 ASSERT(MUTEX_HELD(&p->p_zone->zone_nlwps_lock)); 5170Sstevel@tonic-gate ASSERT(e->rcep_t == RCENTITY_PROJECT); 5180Sstevel@tonic-gate if (e->rcep_p.proj == NULL) 5190Sstevel@tonic-gate return (0); 5200Sstevel@tonic-gate 5210Sstevel@tonic-gate nlwps = e->rcep_p.proj->kpj_nlwps; 5220Sstevel@tonic-gate if (nlwps + incr > rcntl->rcv_value) 5230Sstevel@tonic-gate return (1); 5240Sstevel@tonic-gate 5250Sstevel@tonic-gate return (0); 5260Sstevel@tonic-gate } 5270Sstevel@tonic-gate 5280Sstevel@tonic-gate /*ARGSUSED*/ 5290Sstevel@tonic-gate static int 5300Sstevel@tonic-gate project_lwps_set(rctl_t *rctl, struct proc *p, rctl_entity_p_t *e, 5310Sstevel@tonic-gate rctl_qty_t nv) { 5320Sstevel@tonic-gate 5330Sstevel@tonic-gate ASSERT(MUTEX_HELD(&p->p_lock)); 5340Sstevel@tonic-gate ASSERT(e->rcep_t == RCENTITY_PROJECT); 5350Sstevel@tonic-gate if (e->rcep_p.proj == NULL) 5360Sstevel@tonic-gate return (0); 5370Sstevel@tonic-gate 5380Sstevel@tonic-gate e->rcep_p.proj->kpj_nlwps_ctl = nv; 5390Sstevel@tonic-gate return (0); 5400Sstevel@tonic-gate } 5410Sstevel@tonic-gate 5420Sstevel@tonic-gate static rctl_ops_t project_lwps_ops = { 5430Sstevel@tonic-gate rcop_no_action, 5440Sstevel@tonic-gate project_lwps_usage, 5450Sstevel@tonic-gate project_lwps_set, 5460Sstevel@tonic-gate project_lwps_test, 5470Sstevel@tonic-gate }; 5480Sstevel@tonic-gate 5490Sstevel@tonic-gate /*ARGSUSED*/ 5500Sstevel@tonic-gate static rctl_qty_t 5510Sstevel@tonic-gate project_ntasks_usage(rctl_t *r, proc_t *p) 5520Sstevel@tonic-gate { 5530Sstevel@tonic-gate kproject_t *pj; 5540Sstevel@tonic-gate rctl_qty_t ntasks; 5550Sstevel@tonic-gate 5560Sstevel@tonic-gate ASSERT(MUTEX_HELD(&p->p_lock)); 5570Sstevel@tonic-gate pj = p->p_task->tk_proj; 5580Sstevel@tonic-gate mutex_enter(&p->p_zone->zone_nlwps_lock); 5590Sstevel@tonic-gate ntasks = pj->kpj_ntasks; 5600Sstevel@tonic-gate mutex_exit(&p->p_zone->zone_nlwps_lock); 5610Sstevel@tonic-gate 5620Sstevel@tonic-gate return (ntasks); 5630Sstevel@tonic-gate } 5640Sstevel@tonic-gate 5650Sstevel@tonic-gate /*ARGSUSED*/ 5660Sstevel@tonic-gate static int 5670Sstevel@tonic-gate project_ntasks_test(rctl_t *r, proc_t *p, rctl_entity_p_t *e, rctl_val_t *rcntl, 5680Sstevel@tonic-gate rctl_qty_t incr, uint_t flags) 5690Sstevel@tonic-gate { 5700Sstevel@tonic-gate rctl_qty_t ntasks; 5710Sstevel@tonic-gate 5720Sstevel@tonic-gate ASSERT(MUTEX_HELD(&p->p_lock)); 5730Sstevel@tonic-gate ASSERT(e->rcep_t == RCENTITY_PROJECT); 5740Sstevel@tonic-gate ntasks = e->rcep_p.proj->kpj_ntasks; 5750Sstevel@tonic-gate if (ntasks + incr > rcntl->rcv_value) 5760Sstevel@tonic-gate return (1); 5770Sstevel@tonic-gate 5780Sstevel@tonic-gate return (0); 5790Sstevel@tonic-gate } 5800Sstevel@tonic-gate 5810Sstevel@tonic-gate /*ARGSUSED*/ 5820Sstevel@tonic-gate static int 5830Sstevel@tonic-gate project_ntasks_set(rctl_t *rctl, struct proc *p, rctl_entity_p_t *e, 5840Sstevel@tonic-gate rctl_qty_t nv) { 5850Sstevel@tonic-gate 5860Sstevel@tonic-gate ASSERT(MUTEX_HELD(&p->p_lock)); 5870Sstevel@tonic-gate ASSERT(e->rcep_t == RCENTITY_PROJECT); 5880Sstevel@tonic-gate e->rcep_p.proj->kpj_ntasks_ctl = nv; 5890Sstevel@tonic-gate return (0); 5900Sstevel@tonic-gate } 5910Sstevel@tonic-gate 5920Sstevel@tonic-gate static rctl_ops_t project_tasks_ops = { 5930Sstevel@tonic-gate rcop_no_action, 5940Sstevel@tonic-gate project_ntasks_usage, 5950Sstevel@tonic-gate project_ntasks_set, 5960Sstevel@tonic-gate project_ntasks_test, 5970Sstevel@tonic-gate }; 5980Sstevel@tonic-gate 5990Sstevel@tonic-gate /* 6000Sstevel@tonic-gate * project.max-shm-memory resource control support. 6010Sstevel@tonic-gate */ 6020Sstevel@tonic-gate 6030Sstevel@tonic-gate /*ARGSUSED*/ 6040Sstevel@tonic-gate static int 6050Sstevel@tonic-gate project_shmmax_test(struct rctl *rctl, struct proc *p, rctl_entity_p_t *e, 6060Sstevel@tonic-gate rctl_val_t *rval, rctl_qty_t inc, uint_t flags) 6070Sstevel@tonic-gate { 6080Sstevel@tonic-gate rctl_qty_t v; 6090Sstevel@tonic-gate ASSERT(MUTEX_HELD(&p->p_lock)); 6100Sstevel@tonic-gate ASSERT(e->rcep_t == RCENTITY_PROJECT); 6110Sstevel@tonic-gate v = e->rcep_p.proj->kpj_data.kpd_shmmax + inc; 6120Sstevel@tonic-gate if (v > rval->rcv_value) 6130Sstevel@tonic-gate return (1); 6140Sstevel@tonic-gate 6150Sstevel@tonic-gate return (0); 6160Sstevel@tonic-gate } 6170Sstevel@tonic-gate 6180Sstevel@tonic-gate static rctl_ops_t project_shmmax_ops = { 6190Sstevel@tonic-gate rcop_no_action, 6200Sstevel@tonic-gate rcop_no_usage, 6210Sstevel@tonic-gate rcop_no_set, 6220Sstevel@tonic-gate project_shmmax_test 6230Sstevel@tonic-gate }; 6240Sstevel@tonic-gate 6250Sstevel@tonic-gate /* 6260Sstevel@tonic-gate * project.max-shm-ids resource control support. 6270Sstevel@tonic-gate */ 6280Sstevel@tonic-gate 6290Sstevel@tonic-gate /*ARGSUSED*/ 6300Sstevel@tonic-gate static int 6310Sstevel@tonic-gate project_shmmni_test(struct rctl *rctl, struct proc *p, rctl_entity_p_t *e, 6320Sstevel@tonic-gate rctl_val_t *rval, rctl_qty_t inc, uint_t flags) 6330Sstevel@tonic-gate { 6340Sstevel@tonic-gate rctl_qty_t v; 6350Sstevel@tonic-gate ASSERT(MUTEX_HELD(&p->p_lock)); 6360Sstevel@tonic-gate ASSERT(e->rcep_t == RCENTITY_PROJECT); 6372677Sml93401 v = e->rcep_p.proj->kpj_data.kpd_ipc.ipcq_shmmni + inc; 6380Sstevel@tonic-gate if (v > rval->rcv_value) 6390Sstevel@tonic-gate return (1); 6400Sstevel@tonic-gate 6410Sstevel@tonic-gate return (0); 6420Sstevel@tonic-gate } 6430Sstevel@tonic-gate 6440Sstevel@tonic-gate static rctl_ops_t project_shmmni_ops = { 6450Sstevel@tonic-gate rcop_no_action, 6460Sstevel@tonic-gate rcop_no_usage, 6470Sstevel@tonic-gate rcop_no_set, 6480Sstevel@tonic-gate project_shmmni_test 6490Sstevel@tonic-gate }; 6500Sstevel@tonic-gate 6510Sstevel@tonic-gate /* 6520Sstevel@tonic-gate * project.max-sem-ids resource control support. 6530Sstevel@tonic-gate */ 6540Sstevel@tonic-gate 6550Sstevel@tonic-gate /*ARGSUSED*/ 6560Sstevel@tonic-gate static int 6570Sstevel@tonic-gate project_semmni_test(struct rctl *rctl, struct proc *p, rctl_entity_p_t *e, 6580Sstevel@tonic-gate rctl_val_t *rval, rctl_qty_t inc, uint_t flags) 6590Sstevel@tonic-gate { 6600Sstevel@tonic-gate rctl_qty_t v; 6610Sstevel@tonic-gate ASSERT(MUTEX_HELD(&p->p_lock)); 6620Sstevel@tonic-gate ASSERT(e->rcep_t == RCENTITY_PROJECT); 6632677Sml93401 v = e->rcep_p.proj->kpj_data.kpd_ipc.ipcq_semmni + inc; 6640Sstevel@tonic-gate if (v > rval->rcv_value) 6650Sstevel@tonic-gate return (1); 6660Sstevel@tonic-gate 6670Sstevel@tonic-gate return (0); 6680Sstevel@tonic-gate } 6690Sstevel@tonic-gate 6700Sstevel@tonic-gate static rctl_ops_t project_semmni_ops = { 6710Sstevel@tonic-gate rcop_no_action, 6720Sstevel@tonic-gate rcop_no_usage, 6730Sstevel@tonic-gate rcop_no_set, 6740Sstevel@tonic-gate project_semmni_test 6750Sstevel@tonic-gate }; 6760Sstevel@tonic-gate 6770Sstevel@tonic-gate /* 6780Sstevel@tonic-gate * project.max-msg-ids resource control support. 6790Sstevel@tonic-gate */ 6800Sstevel@tonic-gate 6810Sstevel@tonic-gate /*ARGSUSED*/ 6820Sstevel@tonic-gate static int 6830Sstevel@tonic-gate project_msgmni_test(struct rctl *rctl, struct proc *p, rctl_entity_p_t *e, 6840Sstevel@tonic-gate rctl_val_t *rval, rctl_qty_t inc, uint_t flags) 6850Sstevel@tonic-gate { 6860Sstevel@tonic-gate rctl_qty_t v; 6870Sstevel@tonic-gate ASSERT(MUTEX_HELD(&p->p_lock)); 6880Sstevel@tonic-gate ASSERT(e->rcep_t == RCENTITY_PROJECT); 6892677Sml93401 v = e->rcep_p.proj->kpj_data.kpd_ipc.ipcq_msgmni + inc; 6900Sstevel@tonic-gate if (v > rval->rcv_value) 6910Sstevel@tonic-gate return (1); 6920Sstevel@tonic-gate 6930Sstevel@tonic-gate return (0); 6940Sstevel@tonic-gate } 6950Sstevel@tonic-gate 6960Sstevel@tonic-gate static rctl_ops_t project_msgmni_ops = { 6970Sstevel@tonic-gate rcop_no_action, 6980Sstevel@tonic-gate rcop_no_usage, 6990Sstevel@tonic-gate rcop_no_set, 7000Sstevel@tonic-gate project_msgmni_test 7010Sstevel@tonic-gate }; 7020Sstevel@tonic-gate 7032768Ssl108498 /*ARGSUSED*/ 7042768Ssl108498 static rctl_qty_t 7052768Ssl108498 project_locked_mem_usage(rctl_t *rctl, struct proc *p) 7062768Ssl108498 { 7072768Ssl108498 rctl_qty_t q; 7082768Ssl108498 ASSERT(MUTEX_HELD(&p->p_lock)); 7093247Sgjelinek mutex_enter(&p->p_zone->zone_mem_lock); 7102768Ssl108498 q = p->p_task->tk_proj->kpj_data.kpd_locked_mem; 7113247Sgjelinek mutex_exit(&p->p_zone->zone_mem_lock); 7122768Ssl108498 return (q); 7132768Ssl108498 } 7140Sstevel@tonic-gate 7150Sstevel@tonic-gate /*ARGSUSED*/ 7160Sstevel@tonic-gate static int 7172768Ssl108498 project_locked_mem_test(struct rctl *rctl, struct proc *p, rctl_entity_p_t *e, 7180Sstevel@tonic-gate rctl_val_t *rval, rctl_qty_t inc, uint_t flags) 7190Sstevel@tonic-gate { 7202768Ssl108498 rctl_qty_t q; 7210Sstevel@tonic-gate ASSERT(MUTEX_HELD(&p->p_lock)); 7223247Sgjelinek ASSERT(MUTEX_HELD(&p->p_zone->zone_mem_lock)); 7232768Ssl108498 q = p->p_task->tk_proj->kpj_data.kpd_locked_mem; 7242768Ssl108498 if (q + inc > rval->rcv_value) 7250Sstevel@tonic-gate return (1); 7260Sstevel@tonic-gate return (0); 7270Sstevel@tonic-gate } 7280Sstevel@tonic-gate 7292768Ssl108498 /*ARGSUSED*/ 7302768Ssl108498 static int 7312768Ssl108498 project_locked_mem_set(rctl_t *rctl, struct proc *p, rctl_entity_p_t *e, 7322768Ssl108498 rctl_qty_t nv) { 7332768Ssl108498 7342768Ssl108498 ASSERT(MUTEX_HELD(&p->p_lock)); 7352768Ssl108498 ASSERT(e->rcep_t == RCENTITY_PROJECT); 7362768Ssl108498 if (e->rcep_p.proj == NULL) 7372768Ssl108498 return (0); 7382768Ssl108498 7392768Ssl108498 e->rcep_p.proj->kpj_data.kpd_locked_mem_ctl = nv; 7402768Ssl108498 return (0); 7412768Ssl108498 } 7422768Ssl108498 7432768Ssl108498 static rctl_ops_t project_locked_mem_ops = { 7440Sstevel@tonic-gate rcop_no_action, 7452768Ssl108498 project_locked_mem_usage, 7462768Ssl108498 project_locked_mem_set, 7472768Ssl108498 project_locked_mem_test 7480Sstevel@tonic-gate }; 7490Sstevel@tonic-gate 7500Sstevel@tonic-gate /* 7510Sstevel@tonic-gate * project.max-contracts resource control support. 7520Sstevel@tonic-gate */ 7530Sstevel@tonic-gate 7540Sstevel@tonic-gate /*ARGSUSED*/ 7550Sstevel@tonic-gate static int 7560Sstevel@tonic-gate project_contract_test(struct rctl *rctl, struct proc *p, rctl_entity_p_t *e, 7570Sstevel@tonic-gate rctl_val_t *rval, rctl_qty_t inc, uint_t flags) 7580Sstevel@tonic-gate { 7590Sstevel@tonic-gate rctl_qty_t v; 7600Sstevel@tonic-gate 7610Sstevel@tonic-gate ASSERT(MUTEX_HELD(&p->p_lock)); 7620Sstevel@tonic-gate ASSERT(e->rcep_t == RCENTITY_PROJECT); 7630Sstevel@tonic-gate 7640Sstevel@tonic-gate v = e->rcep_p.proj->kpj_data.kpd_contract + inc; 7650Sstevel@tonic-gate 7660Sstevel@tonic-gate if ((p->p_task != NULL) && (p->p_task->tk_proj) != NULL && 7670Sstevel@tonic-gate (v > rval->rcv_value)) 7680Sstevel@tonic-gate return (1); 7690Sstevel@tonic-gate 7700Sstevel@tonic-gate return (0); 7710Sstevel@tonic-gate } 7720Sstevel@tonic-gate 7730Sstevel@tonic-gate static rctl_ops_t project_contract_ops = { 7740Sstevel@tonic-gate rcop_no_action, 7750Sstevel@tonic-gate rcop_no_usage, 7760Sstevel@tonic-gate rcop_no_set, 7770Sstevel@tonic-gate project_contract_test 7780Sstevel@tonic-gate }; 7790Sstevel@tonic-gate 7800Sstevel@tonic-gate /*ARGSUSED*/ 7813620Skrishna static rctl_qty_t 7823620Skrishna project_crypto_usage(rctl_t *r, proc_t *p) 7833620Skrishna { 7843620Skrishna ASSERT(MUTEX_HELD(&p->p_lock)); 7853620Skrishna return (p->p_task->tk_proj->kpj_data.kpd_crypto_mem); 7863620Skrishna } 7873620Skrishna 7883620Skrishna /*ARGSUSED*/ 7893620Skrishna static int 7903620Skrishna project_crypto_set(rctl_t *r, proc_t *p, rctl_entity_p_t *e, 7913620Skrishna rctl_qty_t nv) 7923620Skrishna { 7933620Skrishna ASSERT(MUTEX_HELD(&p->p_lock)); 7943620Skrishna ASSERT(e->rcep_t == RCENTITY_PROJECT); 7953620Skrishna if (e->rcep_p.proj == NULL) 7963620Skrishna return (0); 7973620Skrishna 7983620Skrishna e->rcep_p.proj->kpj_data.kpd_crypto_mem_ctl = nv; 7993620Skrishna return (0); 8003620Skrishna } 8013620Skrishna 8023620Skrishna /*ARGSUSED*/ 8030Sstevel@tonic-gate static int 8040Sstevel@tonic-gate project_crypto_test(rctl_t *r, proc_t *p, rctl_entity_p_t *e, 8050Sstevel@tonic-gate rctl_val_t *rval, rctl_qty_t incr, uint_t flags) 8060Sstevel@tonic-gate { 8070Sstevel@tonic-gate rctl_qty_t v; 8080Sstevel@tonic-gate ASSERT(MUTEX_HELD(&p->p_lock)); 8090Sstevel@tonic-gate ASSERT(e->rcep_t == RCENTITY_PROJECT); 8100Sstevel@tonic-gate v = e->rcep_p.proj->kpj_data.kpd_crypto_mem + incr; 8110Sstevel@tonic-gate if (v > rval->rcv_value) 8120Sstevel@tonic-gate return (1); 8130Sstevel@tonic-gate return (0); 8140Sstevel@tonic-gate } 8150Sstevel@tonic-gate 8160Sstevel@tonic-gate static rctl_ops_t project_crypto_mem_ops = { 8170Sstevel@tonic-gate rcop_no_action, 8183620Skrishna project_crypto_usage, 8193620Skrishna project_crypto_set, 8200Sstevel@tonic-gate project_crypto_test 8210Sstevel@tonic-gate }; 8220Sstevel@tonic-gate 8230Sstevel@tonic-gate /* 8240Sstevel@tonic-gate * void project_init(void) 8250Sstevel@tonic-gate * 8260Sstevel@tonic-gate * Overview 8270Sstevel@tonic-gate * Initialize the project subsystem, including the primordial project 0 entry. 8280Sstevel@tonic-gate * Register generic project resource controls, if any. 8290Sstevel@tonic-gate * 8300Sstevel@tonic-gate * Return values 8310Sstevel@tonic-gate * None. 8320Sstevel@tonic-gate * 8330Sstevel@tonic-gate * Caller's context 8340Sstevel@tonic-gate * Safe for KM_SLEEP allocations. 8350Sstevel@tonic-gate */ 8360Sstevel@tonic-gate void 8370Sstevel@tonic-gate project_init(void) 8380Sstevel@tonic-gate { 8390Sstevel@tonic-gate rctl_qty_t shmmni, shmmax, qty; 8400Sstevel@tonic-gate boolean_t check; 8410Sstevel@tonic-gate 8420Sstevel@tonic-gate projects_hash = mod_hash_create_extended("projects_hash", 8430Sstevel@tonic-gate project_hash_size, mod_hash_null_keydtor, project_hash_val_dtor, 8440Sstevel@tonic-gate project_hash_by_id, 8450Sstevel@tonic-gate (void *)(uintptr_t)mod_hash_iddata_gen(project_hash_size), 8460Sstevel@tonic-gate project_hash_key_cmp, KM_SLEEP); 8470Sstevel@tonic-gate 8480Sstevel@tonic-gate rc_project_cpu_shares = rctl_register("project.cpu-shares", 8490Sstevel@tonic-gate RCENTITY_PROJECT, RCTL_GLOBAL_SIGNAL_NEVER | 8500Sstevel@tonic-gate RCTL_GLOBAL_DENY_NEVER | RCTL_GLOBAL_NOBASIC | 8511996Sml93401 RCTL_GLOBAL_COUNT | RCTL_GLOBAL_SYSLOG_NEVER, 8521996Sml93401 FSS_MAXSHARES, FSS_MAXSHARES, 8530Sstevel@tonic-gate &project_cpu_shares_ops); 8540Sstevel@tonic-gate rctl_add_default_limit("project.cpu-shares", 1, RCPRIV_PRIVILEGED, 8550Sstevel@tonic-gate RCTL_LOCAL_NOACTION); 8560Sstevel@tonic-gate 8573792Sakolb rc_project_cpu_cap = rctl_register("project.cpu-cap", 8583792Sakolb RCENTITY_PROJECT, RCTL_GLOBAL_SIGNAL_NEVER | 8593792Sakolb RCTL_GLOBAL_DENY_ALWAYS | RCTL_GLOBAL_NOBASIC | 8603792Sakolb RCTL_GLOBAL_COUNT | RCTL_GLOBAL_SYSLOG_NEVER | 8613792Sakolb RCTL_GLOBAL_INFINITE, 8623792Sakolb MAXCAP, MAXCAP, &project_cpu_cap_ops); 8633792Sakolb 8640Sstevel@tonic-gate rc_project_nlwps = rctl_register("project.max-lwps", RCENTITY_PROJECT, 8650Sstevel@tonic-gate RCTL_GLOBAL_NOACTION | RCTL_GLOBAL_NOBASIC | RCTL_GLOBAL_COUNT, 8660Sstevel@tonic-gate INT_MAX, INT_MAX, &project_lwps_ops); 8670Sstevel@tonic-gate 8680Sstevel@tonic-gate rc_project_ntasks = rctl_register("project.max-tasks", RCENTITY_PROJECT, 8690Sstevel@tonic-gate RCTL_GLOBAL_NOACTION | RCTL_GLOBAL_NOBASIC | RCTL_GLOBAL_COUNT, 8700Sstevel@tonic-gate INT_MAX, INT_MAX, &project_tasks_ops); 8710Sstevel@tonic-gate 8720Sstevel@tonic-gate /* 8730Sstevel@tonic-gate * This rctl handle is used by /dev/crypto. It is here rather than 8740Sstevel@tonic-gate * in misc/kcf or the drv/crypto module because resource controls 8750Sstevel@tonic-gate * currently don't allow modules to be unloaded, and the control 8760Sstevel@tonic-gate * must be registered before init starts. 8770Sstevel@tonic-gate */ 8780Sstevel@tonic-gate rc_project_crypto_mem = rctl_register("project.max-crypto-memory", 8790Sstevel@tonic-gate RCENTITY_PROJECT, RCTL_GLOBAL_DENY_ALWAYS | RCTL_GLOBAL_NOBASIC | 8800Sstevel@tonic-gate RCTL_GLOBAL_BYTES, UINT64_MAX, UINT64_MAX, 8810Sstevel@tonic-gate &project_crypto_mem_ops); 8820Sstevel@tonic-gate 8830Sstevel@tonic-gate /* 8840Sstevel@tonic-gate * Default to a quarter of the machine's memory 8850Sstevel@tonic-gate */ 8860Sstevel@tonic-gate qty = availrmem_initial << (PAGESHIFT - 2); 8870Sstevel@tonic-gate rctl_add_default_limit("project.max-crypto-memory", qty, 8880Sstevel@tonic-gate RCPRIV_PRIVILEGED, RCTL_LOCAL_DENY); 8890Sstevel@tonic-gate 8900Sstevel@tonic-gate /* 8910Sstevel@tonic-gate * System V IPC resource controls 8920Sstevel@tonic-gate */ 8930Sstevel@tonic-gate rc_project_semmni = rctl_register("project.max-sem-ids", 8940Sstevel@tonic-gate RCENTITY_PROJECT, RCTL_GLOBAL_DENY_ALWAYS | RCTL_GLOBAL_NOBASIC | 8950Sstevel@tonic-gate RCTL_GLOBAL_COUNT, IPC_IDS_MAX, IPC_IDS_MAX, &project_semmni_ops); 8960Sstevel@tonic-gate rctl_add_legacy_limit("project.max-sem-ids", "semsys", 8970Sstevel@tonic-gate "seminfo_semmni", 128, IPC_IDS_MAX); 8980Sstevel@tonic-gate 8990Sstevel@tonic-gate rc_project_msgmni = rctl_register("project.max-msg-ids", 9000Sstevel@tonic-gate RCENTITY_PROJECT, RCTL_GLOBAL_DENY_ALWAYS | RCTL_GLOBAL_NOBASIC | 9010Sstevel@tonic-gate RCTL_GLOBAL_COUNT, IPC_IDS_MAX, IPC_IDS_MAX, &project_msgmni_ops); 9020Sstevel@tonic-gate rctl_add_legacy_limit("project.max-msg-ids", "msgsys", 9030Sstevel@tonic-gate "msginfo_msgmni", 128, IPC_IDS_MAX); 9040Sstevel@tonic-gate 9050Sstevel@tonic-gate rc_project_shmmni = rctl_register("project.max-shm-ids", 9060Sstevel@tonic-gate RCENTITY_PROJECT, RCTL_GLOBAL_DENY_ALWAYS | RCTL_GLOBAL_NOBASIC | 9070Sstevel@tonic-gate RCTL_GLOBAL_COUNT, IPC_IDS_MAX, IPC_IDS_MAX, &project_shmmni_ops); 9080Sstevel@tonic-gate rctl_add_legacy_limit("project.max-shm-ids", "shmsys", 9090Sstevel@tonic-gate "shminfo_shmmni", 128, IPC_IDS_MAX); 9100Sstevel@tonic-gate 9110Sstevel@tonic-gate rc_project_shmmax = rctl_register("project.max-shm-memory", 9120Sstevel@tonic-gate RCENTITY_PROJECT, RCTL_GLOBAL_DENY_ALWAYS | RCTL_GLOBAL_NOBASIC | 9130Sstevel@tonic-gate RCTL_GLOBAL_BYTES, UINT64_MAX, UINT64_MAX, &project_shmmax_ops); 9140Sstevel@tonic-gate 9150Sstevel@tonic-gate check = B_FALSE; 9160Sstevel@tonic-gate if (!mod_sysvar("shmsys", "shminfo_shmmni", &shmmni)) 9170Sstevel@tonic-gate shmmni = 100; 9180Sstevel@tonic-gate else 9190Sstevel@tonic-gate check = B_TRUE; 9200Sstevel@tonic-gate if (!mod_sysvar("shmsys", "shminfo_shmmax", &shmmax)) 9210Sstevel@tonic-gate shmmax = 0x800000; 9220Sstevel@tonic-gate else 9230Sstevel@tonic-gate check = B_TRUE; 9240Sstevel@tonic-gate 9250Sstevel@tonic-gate /* 9260Sstevel@tonic-gate * Default to a quarter of the machine's memory 9270Sstevel@tonic-gate */ 9280Sstevel@tonic-gate qty = availrmem_initial << (PAGESHIFT - 2); 9290Sstevel@tonic-gate if (check) { 9300Sstevel@tonic-gate if ((shmmax > 0) && (UINT64_MAX / shmmax <= shmmni)) 9310Sstevel@tonic-gate qty = UINT64_MAX; 9320Sstevel@tonic-gate else if (shmmni * shmmax > qty) 9330Sstevel@tonic-gate qty = shmmni * shmmax; 9340Sstevel@tonic-gate } 9350Sstevel@tonic-gate rctl_add_default_limit("project.max-shm-memory", qty, 9360Sstevel@tonic-gate RCPRIV_PRIVILEGED, RCTL_LOCAL_DENY); 9370Sstevel@tonic-gate 9380Sstevel@tonic-gate /* 9390Sstevel@tonic-gate * Event Ports resource controls 9400Sstevel@tonic-gate */ 9410Sstevel@tonic-gate 9420Sstevel@tonic-gate rc_project_portids = rctl_register("project.max-port-ids", 9430Sstevel@tonic-gate RCENTITY_PROJECT, RCTL_GLOBAL_DENY_ALWAYS | RCTL_GLOBAL_NOBASIC | 9440Sstevel@tonic-gate RCTL_GLOBAL_COUNT, PORT_MAX_PORTS, PORT_MAX_PORTS, 9450Sstevel@tonic-gate &rctl_absolute_ops); 9460Sstevel@tonic-gate rctl_add_default_limit("project.max-port-ids", PORT_DEFAULT_PORTS, 9470Sstevel@tonic-gate RCPRIV_PRIVILEGED, RCTL_LOCAL_DENY); 9480Sstevel@tonic-gate 9490Sstevel@tonic-gate /* 9500Sstevel@tonic-gate * Resource control for locked memory 9510Sstevel@tonic-gate */ 9522768Ssl108498 rc_project_locked_mem = rctl_register( 9532768Ssl108498 "project.max-locked-memory", RCENTITY_PROJECT, 9540Sstevel@tonic-gate RCTL_GLOBAL_DENY_ALWAYS | RCTL_GLOBAL_NOBASIC | RCTL_GLOBAL_BYTES, 9552768Ssl108498 UINT64_MAX, UINT64_MAX, &project_locked_mem_ops); 9560Sstevel@tonic-gate 9570Sstevel@tonic-gate /* 9580Sstevel@tonic-gate * Per project limit on contracts. 9590Sstevel@tonic-gate */ 9600Sstevel@tonic-gate rc_project_contract = rctl_register("project.max-contracts", 9613684Srd117015 RCENTITY_PROJECT, RCTL_GLOBAL_DENY_ALWAYS | RCTL_GLOBAL_NOBASIC | 9623684Srd117015 RCTL_GLOBAL_COUNT, INT_MAX, INT_MAX, &project_contract_ops); 9630Sstevel@tonic-gate rctl_add_default_limit("project.max-contracts", 10000, 9640Sstevel@tonic-gate RCPRIV_PRIVILEGED, RCTL_LOCAL_DENY); 9650Sstevel@tonic-gate 9663247Sgjelinek t0.t_proj = proj0p = project_hold_by_id(0, &zone0, 9670Sstevel@tonic-gate PROJECT_HOLD_INSERT); 9680Sstevel@tonic-gate 9690Sstevel@tonic-gate mutex_enter(&p0.p_lock); 9700Sstevel@tonic-gate proj0p->kpj_nlwps = p0.p_lwpcnt; 9710Sstevel@tonic-gate mutex_exit(&p0.p_lock); 9720Sstevel@tonic-gate proj0p->kpj_ntasks = 1; 9730Sstevel@tonic-gate } 9743247Sgjelinek 9753247Sgjelinek static int 9763247Sgjelinek project_lockedmem_kstat_update(kstat_t *ksp, int rw) 9773247Sgjelinek { 9783247Sgjelinek kproject_t *pj = ksp->ks_private; 9793247Sgjelinek kproject_kstat_t *kpk = ksp->ks_data; 9803247Sgjelinek 9813247Sgjelinek if (rw == KSTAT_WRITE) 9823247Sgjelinek return (EACCES); 9833247Sgjelinek 9843247Sgjelinek kpk->kpk_usage.value.ui64 = pj->kpj_data.kpd_locked_mem; 9853247Sgjelinek kpk->kpk_value.value.ui64 = pj->kpj_data.kpd_locked_mem_ctl; 9863247Sgjelinek return (0); 9873247Sgjelinek } 9883247Sgjelinek 9893247Sgjelinek static kstat_t * 9903247Sgjelinek project_kstat_create(kproject_t *pj, zone_t *zone) 9913247Sgjelinek { 9923247Sgjelinek kstat_t *ksp; 9933247Sgjelinek kproject_kstat_t *kpk; 9943247Sgjelinek char *zonename = zone->zone_name; 9953247Sgjelinek 9963247Sgjelinek ksp = rctl_kstat_create_project(pj, "lockedmem", KSTAT_TYPE_NAMED, 9973247Sgjelinek sizeof (kproject_kstat_t) / sizeof (kstat_named_t), 9983247Sgjelinek KSTAT_FLAG_VIRTUAL); 9993247Sgjelinek 10003247Sgjelinek if (ksp == NULL) 10013247Sgjelinek return (NULL); 10023247Sgjelinek 10033247Sgjelinek kpk = ksp->ks_data = kmem_alloc(sizeof (kproject_kstat_t), KM_SLEEP); 10043247Sgjelinek ksp->ks_data_size += strlen(zonename) + 1; 10053247Sgjelinek kstat_named_init(&kpk->kpk_zonename, "zonename", KSTAT_DATA_STRING); 10063247Sgjelinek kstat_named_setstr(&kpk->kpk_zonename, zonename); 10073247Sgjelinek kstat_named_init(&kpk->kpk_usage, "usage", KSTAT_DATA_UINT64); 10083247Sgjelinek kstat_named_init(&kpk->kpk_value, "value", KSTAT_DATA_UINT64); 10093247Sgjelinek ksp->ks_update = project_lockedmem_kstat_update; 10103247Sgjelinek ksp->ks_private = pj; 10113247Sgjelinek kstat_install(ksp); 10123247Sgjelinek 10133247Sgjelinek return (ksp); 10143247Sgjelinek } 10153247Sgjelinek 10163247Sgjelinek static void 10173247Sgjelinek project_kstat_delete(kproject_t *pj) 10183247Sgjelinek { 10193247Sgjelinek void *data; 10203247Sgjelinek 10213247Sgjelinek if (pj->kpj_data.kpd_lockedmem_kstat != NULL) { 10223247Sgjelinek data = pj->kpj_data.kpd_lockedmem_kstat->ks_data; 10233247Sgjelinek kstat_delete(pj->kpj_data.kpd_lockedmem_kstat); 10244264Srd117015 kmem_free(data, sizeof (kproject_kstat_t)); 10253247Sgjelinek } 10263247Sgjelinek pj->kpj_data.kpd_lockedmem_kstat = NULL; 10273247Sgjelinek } 1028