10Sstevel@tonic-gate /* 20Sstevel@tonic-gate * CDDL HEADER START 30Sstevel@tonic-gate * 40Sstevel@tonic-gate * The contents of this file are subject to the terms of the 51996Sml93401 * Common Development and Distribution License (the "License"). 61996Sml93401 * You may not use this file except in compliance with the License. 70Sstevel@tonic-gate * 80Sstevel@tonic-gate * You can obtain a copy of the license at usr/src/OPENSOLARIS.LICENSE 90Sstevel@tonic-gate * or http://www.opensolaris.org/os/licensing. 100Sstevel@tonic-gate * See the License for the specific language governing permissions 110Sstevel@tonic-gate * and limitations under the License. 120Sstevel@tonic-gate * 130Sstevel@tonic-gate * When distributing Covered Code, include this CDDL HEADER in each 140Sstevel@tonic-gate * file and include the License file at usr/src/OPENSOLARIS.LICENSE. 150Sstevel@tonic-gate * If applicable, add the following below this CDDL HEADER, with the 160Sstevel@tonic-gate * fields enclosed by brackets "[]" replaced with your own identifying 170Sstevel@tonic-gate * information: Portions Copyright [yyyy] [name of copyright owner] 180Sstevel@tonic-gate * 190Sstevel@tonic-gate * CDDL HEADER END 200Sstevel@tonic-gate */ 210Sstevel@tonic-gate /* 221996Sml93401 * Copyright 2006 Sun Microsystems, Inc. All rights reserved. 230Sstevel@tonic-gate * Use is subject to license terms. 240Sstevel@tonic-gate */ 250Sstevel@tonic-gate 260Sstevel@tonic-gate #pragma ident "%Z%%M% %I% %E% SMI" 270Sstevel@tonic-gate 280Sstevel@tonic-gate #include <sys/project.h> 290Sstevel@tonic-gate #include <sys/modhash.h> 300Sstevel@tonic-gate #include <sys/modctl.h> 310Sstevel@tonic-gate #include <sys/kmem.h> 32*3247Sgjelinek #include <sys/kstat.h> 330Sstevel@tonic-gate #include <sys/atomic.h> 340Sstevel@tonic-gate #include <sys/cmn_err.h> 350Sstevel@tonic-gate #include <sys/proc.h> 360Sstevel@tonic-gate #include <sys/rctl.h> 370Sstevel@tonic-gate #include <sys/sunddi.h> 380Sstevel@tonic-gate #include <sys/fss.h> 390Sstevel@tonic-gate #include <sys/systm.h> 400Sstevel@tonic-gate #include <sys/ipc_impl.h> 410Sstevel@tonic-gate #include <sys/port_kernel.h> 420Sstevel@tonic-gate #include <sys/task.h> 430Sstevel@tonic-gate #include <sys/zone.h> 440Sstevel@tonic-gate 450Sstevel@tonic-gate int project_hash_size = 64; 460Sstevel@tonic-gate static kmutex_t project_hash_lock; 470Sstevel@tonic-gate static kmutex_t projects_list_lock; 480Sstevel@tonic-gate static mod_hash_t *projects_hash; 490Sstevel@tonic-gate static kproject_t *projects_list; 500Sstevel@tonic-gate 510Sstevel@tonic-gate rctl_hndl_t rc_project_cpu_shares; 520Sstevel@tonic-gate rctl_hndl_t rc_project_nlwps; 530Sstevel@tonic-gate rctl_hndl_t rc_project_ntasks; 540Sstevel@tonic-gate rctl_hndl_t rc_project_msgmni; 550Sstevel@tonic-gate rctl_hndl_t rc_project_semmni; 560Sstevel@tonic-gate rctl_hndl_t rc_project_shmmax; 570Sstevel@tonic-gate rctl_hndl_t rc_project_shmmni; 580Sstevel@tonic-gate rctl_hndl_t rc_project_portids; 592768Ssl108498 rctl_hndl_t rc_project_locked_mem; 600Sstevel@tonic-gate rctl_hndl_t rc_project_contract; 610Sstevel@tonic-gate rctl_hndl_t rc_project_crypto_mem; 620Sstevel@tonic-gate 630Sstevel@tonic-gate /* 640Sstevel@tonic-gate * Dummy structure used when comparing projects. This structure must be kept 650Sstevel@tonic-gate * identical to the first two fields of kproject_t. 660Sstevel@tonic-gate */ 670Sstevel@tonic-gate struct project_zone { 680Sstevel@tonic-gate projid_t kpj_id; 690Sstevel@tonic-gate zoneid_t kpj_zoneid; 700Sstevel@tonic-gate }; 710Sstevel@tonic-gate 720Sstevel@tonic-gate /* 730Sstevel@tonic-gate * Projects 740Sstevel@tonic-gate * 750Sstevel@tonic-gate * A dictionary of all active projects is maintained by the kernel so that we 760Sstevel@tonic-gate * may track project usage and limits. (By an active project, we mean a 770Sstevel@tonic-gate * project associated with one or more task, and therefore with one or more 780Sstevel@tonic-gate * processes.) We build the dictionary on top of the mod_hash facility, since 790Sstevel@tonic-gate * project additions and deletions are relatively rare events. An 800Sstevel@tonic-gate * integer-to-pointer mapping is maintained within the hash, representing the 810Sstevel@tonic-gate * map from project id to project structure. All projects, including the 820Sstevel@tonic-gate * primordial "project 0", are allocated via the project_hold_by_id() 830Sstevel@tonic-gate * interface. 840Sstevel@tonic-gate * 850Sstevel@tonic-gate * Currently, the project contains a reference count; the project ID, which is 860Sstevel@tonic-gate * examined by the extended accounting subsystem as well as /proc; a resource 870Sstevel@tonic-gate * control set, which contains the allowable values (and actions on exceeding 880Sstevel@tonic-gate * those values) for controlled project-level resources on the system; and a 890Sstevel@tonic-gate * number of CPU shares, which is used by the fair share scheduling class 900Sstevel@tonic-gate * (FSS) to support its proportion-based scheduling algorithm. 910Sstevel@tonic-gate * 920Sstevel@tonic-gate * Reference counting convention 930Sstevel@tonic-gate * The dictionary entry does not itself count as a reference--only references 940Sstevel@tonic-gate * outside of the subsystem are tallied. At the drop of the final external 950Sstevel@tonic-gate * reference, the project entry is removed. The reference counter keeps 960Sstevel@tonic-gate * track of the number of threads *and* tasks within a project. 970Sstevel@tonic-gate * 980Sstevel@tonic-gate * Locking 990Sstevel@tonic-gate * Walking the doubly-linked project list must be done while holding 1000Sstevel@tonic-gate * projects_list_lock. Thus, any dereference of kpj_next or kpj_prev must be 1010Sstevel@tonic-gate * under projects_list_lock. 1020Sstevel@tonic-gate * 1030Sstevel@tonic-gate * If both the hash lock, project_hash_lock, and the list lock are to be 1040Sstevel@tonic-gate * acquired, the hash lock is to be acquired first. 1050Sstevel@tonic-gate */ 1060Sstevel@tonic-gate 107*3247Sgjelinek static kstat_t *project_kstat_create(kproject_t *pj, zone_t *zone); 108*3247Sgjelinek static void project_kstat_delete(kproject_t *pj); 1090Sstevel@tonic-gate 1100Sstevel@tonic-gate static void 1110Sstevel@tonic-gate project_data_init(kproject_data_t *data) 1120Sstevel@tonic-gate { 1130Sstevel@tonic-gate /* 1140Sstevel@tonic-gate * Initialize subsystem-specific data 1150Sstevel@tonic-gate */ 1160Sstevel@tonic-gate data->kpd_shmmax = 0; 1172677Sml93401 data->kpd_ipc.ipcq_shmmni = 0; 1182677Sml93401 data->kpd_ipc.ipcq_semmni = 0; 1192677Sml93401 data->kpd_ipc.ipcq_msgmni = 0; 1202768Ssl108498 data->kpd_locked_mem = 0; 1212768Ssl108498 data->kpd_locked_mem_ctl = UINT64_MAX; 1220Sstevel@tonic-gate data->kpd_contract = 0; 1230Sstevel@tonic-gate data->kpd_crypto_mem = 0; 124*3247Sgjelinek data->kpd_lockedmem_kstat = NULL; 1250Sstevel@tonic-gate } 1260Sstevel@tonic-gate 1270Sstevel@tonic-gate /*ARGSUSED*/ 1280Sstevel@tonic-gate static uint_t 1290Sstevel@tonic-gate project_hash_by_id(void *hash_data, mod_hash_key_t key) 1300Sstevel@tonic-gate { 1310Sstevel@tonic-gate struct project_zone *pz = key; 1320Sstevel@tonic-gate uint_t mykey; 1330Sstevel@tonic-gate 1340Sstevel@tonic-gate /* 1350Sstevel@tonic-gate * Merge the zoneid and projectid together to a 32-bit quantity, and 1360Sstevel@tonic-gate * then pass that in to the existing idhash. 1370Sstevel@tonic-gate */ 1380Sstevel@tonic-gate mykey = (pz->kpj_zoneid << 16) | pz->kpj_id; 1390Sstevel@tonic-gate return (mod_hash_byid(hash_data, (mod_hash_key_t)(uintptr_t)mykey)); 1400Sstevel@tonic-gate } 1410Sstevel@tonic-gate 1420Sstevel@tonic-gate static int 1430Sstevel@tonic-gate project_hash_key_cmp(mod_hash_key_t key1, mod_hash_key_t key2) 1440Sstevel@tonic-gate { 1450Sstevel@tonic-gate struct project_zone *pz1 = key1, *pz2 = key2; 1460Sstevel@tonic-gate int retval; 1470Sstevel@tonic-gate 1480Sstevel@tonic-gate return ((int)((retval = pz1->kpj_id - pz2->kpj_id) != 0 ? retval : 1490Sstevel@tonic-gate pz1->kpj_zoneid - pz2->kpj_zoneid)); 1500Sstevel@tonic-gate } 1510Sstevel@tonic-gate 1520Sstevel@tonic-gate static void 1530Sstevel@tonic-gate project_hash_val_dtor(mod_hash_val_t val) 1540Sstevel@tonic-gate { 1550Sstevel@tonic-gate kproject_t *kp = (kproject_t *)val; 1560Sstevel@tonic-gate 1570Sstevel@tonic-gate ASSERT(kp->kpj_count == 0); 1580Sstevel@tonic-gate kmem_free(kp, sizeof (kproject_t)); 1590Sstevel@tonic-gate } 1600Sstevel@tonic-gate 1610Sstevel@tonic-gate /* 1620Sstevel@tonic-gate * kproject_t *project_hold(kproject_t *) 1630Sstevel@tonic-gate * 1640Sstevel@tonic-gate * Overview 1650Sstevel@tonic-gate * Record that an additional reference on the indicated project has been 1660Sstevel@tonic-gate * taken. 1670Sstevel@tonic-gate * 1680Sstevel@tonic-gate * Return values 1690Sstevel@tonic-gate * A pointer to the indicated project. 1700Sstevel@tonic-gate * 1710Sstevel@tonic-gate * Caller's context 1720Sstevel@tonic-gate * project_hash_lock must not be held across the project_hold() call. 1730Sstevel@tonic-gate */ 1740Sstevel@tonic-gate kproject_t * 1750Sstevel@tonic-gate project_hold(kproject_t *p) 1760Sstevel@tonic-gate { 1770Sstevel@tonic-gate mutex_enter(&project_hash_lock); 1780Sstevel@tonic-gate ASSERT(p != NULL); 1790Sstevel@tonic-gate p->kpj_count++; 1800Sstevel@tonic-gate ASSERT(p->kpj_count != 0); 1810Sstevel@tonic-gate mutex_exit(&project_hash_lock); 1820Sstevel@tonic-gate return (p); 1830Sstevel@tonic-gate } 1840Sstevel@tonic-gate 1850Sstevel@tonic-gate /* 186*3247Sgjelinek * kproject_t *project_hold_by_id(projid_t, zone_t *, int) 1870Sstevel@tonic-gate * 1880Sstevel@tonic-gate * Overview 1890Sstevel@tonic-gate * project_hold_by_id() performs a look-up in the dictionary of projects 190*3247Sgjelinek * active on the system by specified project ID + zone and puts a hold on 1910Sstevel@tonic-gate * it. The third argument defines the desired behavior in the case when 1920Sstevel@tonic-gate * project with given project ID cannot be found: 1930Sstevel@tonic-gate * 1940Sstevel@tonic-gate * PROJECT_HOLD_INSERT New entry is made in dictionary and the project 1950Sstevel@tonic-gate * is added to the global list. 1960Sstevel@tonic-gate * 1970Sstevel@tonic-gate * PROJECT_HOLD_FIND Return NULL. 1980Sstevel@tonic-gate * 1990Sstevel@tonic-gate * The project is returned with its reference count incremented by one. 2000Sstevel@tonic-gate * A new project derives its resource controls from those of project 0. 2010Sstevel@tonic-gate * 2020Sstevel@tonic-gate * Return values 2030Sstevel@tonic-gate * A pointer to the held project. 2040Sstevel@tonic-gate * 2050Sstevel@tonic-gate * Caller's context 2060Sstevel@tonic-gate * Caller must be in a context suitable for KM_SLEEP allocations. 2070Sstevel@tonic-gate */ 2080Sstevel@tonic-gate kproject_t * 209*3247Sgjelinek project_hold_by_id(projid_t id, zone_t *zone, int flag) 2100Sstevel@tonic-gate { 2110Sstevel@tonic-gate kproject_t *spare_p; 2120Sstevel@tonic-gate kproject_t *p; 2130Sstevel@tonic-gate mod_hash_hndl_t hndl; 2140Sstevel@tonic-gate rctl_set_t *set; 2150Sstevel@tonic-gate rctl_alloc_gp_t *gp; 2160Sstevel@tonic-gate rctl_entity_p_t e; 2170Sstevel@tonic-gate struct project_zone pz; 218*3247Sgjelinek boolean_t create = B_FALSE; 219*3247Sgjelinek kstat_t *ksp; 2200Sstevel@tonic-gate 2210Sstevel@tonic-gate pz.kpj_id = id; 222*3247Sgjelinek pz.kpj_zoneid = zone->zone_id; 2230Sstevel@tonic-gate 2240Sstevel@tonic-gate if (flag == PROJECT_HOLD_FIND) { 2250Sstevel@tonic-gate mutex_enter(&project_hash_lock); 2260Sstevel@tonic-gate 2270Sstevel@tonic-gate if (mod_hash_find(projects_hash, (mod_hash_key_t)&pz, 2280Sstevel@tonic-gate (mod_hash_val_t)&p) == MH_ERR_NOTFOUND) 2290Sstevel@tonic-gate p = NULL; 2300Sstevel@tonic-gate else 2310Sstevel@tonic-gate p->kpj_count++; 2320Sstevel@tonic-gate 2330Sstevel@tonic-gate mutex_exit(&project_hash_lock); 2340Sstevel@tonic-gate return (p); 2350Sstevel@tonic-gate } 2360Sstevel@tonic-gate 2370Sstevel@tonic-gate ASSERT(flag == PROJECT_HOLD_INSERT); 2380Sstevel@tonic-gate 2390Sstevel@tonic-gate spare_p = kmem_zalloc(sizeof (kproject_t), KM_SLEEP); 2400Sstevel@tonic-gate set = rctl_set_create(); 2410Sstevel@tonic-gate 2420Sstevel@tonic-gate gp = rctl_set_init_prealloc(RCENTITY_PROJECT); 2430Sstevel@tonic-gate 2440Sstevel@tonic-gate (void) mod_hash_reserve(projects_hash, &hndl); 2450Sstevel@tonic-gate 2460Sstevel@tonic-gate mutex_enter(&curproc->p_lock); 2470Sstevel@tonic-gate mutex_enter(&project_hash_lock); 2480Sstevel@tonic-gate if (mod_hash_find(projects_hash, (mod_hash_key_t)&pz, 2490Sstevel@tonic-gate (mod_hash_val_t *)&p) == MH_ERR_NOTFOUND) { 250*3247Sgjelinek 2510Sstevel@tonic-gate p = spare_p; 2520Sstevel@tonic-gate p->kpj_id = id; 253*3247Sgjelinek p->kpj_zoneid = zone->zone_id; 2540Sstevel@tonic-gate p->kpj_count = 0; 2550Sstevel@tonic-gate p->kpj_shares = 1; 2560Sstevel@tonic-gate p->kpj_nlwps = 0; 2570Sstevel@tonic-gate p->kpj_ntasks = 0; 2580Sstevel@tonic-gate p->kpj_nlwps_ctl = INT_MAX; 2590Sstevel@tonic-gate p->kpj_ntasks_ctl = INT_MAX; 2600Sstevel@tonic-gate project_data_init(&p->kpj_data); 2610Sstevel@tonic-gate e.rcep_p.proj = p; 2620Sstevel@tonic-gate e.rcep_t = RCENTITY_PROJECT; 2630Sstevel@tonic-gate p->kpj_rctls = rctl_set_init(RCENTITY_PROJECT, curproc, &e, 2640Sstevel@tonic-gate set, gp); 2650Sstevel@tonic-gate mutex_exit(&curproc->p_lock); 2660Sstevel@tonic-gate 2670Sstevel@tonic-gate if (mod_hash_insert_reserve(projects_hash, (mod_hash_key_t)p, 2680Sstevel@tonic-gate (mod_hash_val_t)p, hndl)) 2690Sstevel@tonic-gate panic("unable to insert project %d(%p)", id, (void *)p); 2700Sstevel@tonic-gate 2710Sstevel@tonic-gate /* 2720Sstevel@tonic-gate * Insert project into global project list. 2730Sstevel@tonic-gate */ 2740Sstevel@tonic-gate mutex_enter(&projects_list_lock); 275*3247Sgjelinek if (id != 0 || zone != &zone0) { 2760Sstevel@tonic-gate p->kpj_next = projects_list; 2770Sstevel@tonic-gate p->kpj_prev = projects_list->kpj_prev; 2780Sstevel@tonic-gate p->kpj_prev->kpj_next = p; 2790Sstevel@tonic-gate projects_list->kpj_prev = p; 2800Sstevel@tonic-gate } else { 2810Sstevel@tonic-gate /* 2820Sstevel@tonic-gate * Special case: primordial hold on project 0. 2830Sstevel@tonic-gate */ 2840Sstevel@tonic-gate p->kpj_next = p; 2850Sstevel@tonic-gate p->kpj_prev = p; 2860Sstevel@tonic-gate projects_list = p; 2870Sstevel@tonic-gate } 2880Sstevel@tonic-gate mutex_exit(&projects_list_lock); 289*3247Sgjelinek create = B_TRUE; 2900Sstevel@tonic-gate } else { 2910Sstevel@tonic-gate mutex_exit(&curproc->p_lock); 2920Sstevel@tonic-gate mod_hash_cancel(projects_hash, &hndl); 2930Sstevel@tonic-gate kmem_free(spare_p, sizeof (kproject_t)); 2940Sstevel@tonic-gate rctl_set_free(set); 2950Sstevel@tonic-gate } 2960Sstevel@tonic-gate 2970Sstevel@tonic-gate rctl_prealloc_destroy(gp); 2980Sstevel@tonic-gate p->kpj_count++; 2990Sstevel@tonic-gate mutex_exit(&project_hash_lock); 3000Sstevel@tonic-gate 301*3247Sgjelinek /* 302*3247Sgjelinek * The kstat stores the project's zone name, as zoneid's may change 303*3247Sgjelinek * across reboots. 304*3247Sgjelinek */ 305*3247Sgjelinek if (create == B_TRUE) { 306*3247Sgjelinek ksp = project_kstat_create(p, zone); 307*3247Sgjelinek mutex_enter(&project_hash_lock); 308*3247Sgjelinek ASSERT(p->kpj_data.kpd_lockedmem_kstat == NULL); 309*3247Sgjelinek p->kpj_data.kpd_lockedmem_kstat = ksp; 310*3247Sgjelinek mutex_exit(&project_hash_lock); 311*3247Sgjelinek } 3120Sstevel@tonic-gate return (p); 3130Sstevel@tonic-gate } 3140Sstevel@tonic-gate 3150Sstevel@tonic-gate /* 3160Sstevel@tonic-gate * void project_rele(kproject_t *) 3170Sstevel@tonic-gate * 3180Sstevel@tonic-gate * Overview 3190Sstevel@tonic-gate * Advertise that one external reference to this project is no longer needed. 3200Sstevel@tonic-gate * 3210Sstevel@tonic-gate * Return values 3220Sstevel@tonic-gate * None. 3230Sstevel@tonic-gate * 3240Sstevel@tonic-gate * Caller's context 3250Sstevel@tonic-gate * No restriction on context. 3260Sstevel@tonic-gate */ 3270Sstevel@tonic-gate void 3280Sstevel@tonic-gate project_rele(kproject_t *p) 3290Sstevel@tonic-gate { 3300Sstevel@tonic-gate mutex_enter(&project_hash_lock); 3310Sstevel@tonic-gate ASSERT(p->kpj_count != 0); 3320Sstevel@tonic-gate p->kpj_count--; 3330Sstevel@tonic-gate if (p->kpj_count == 0) { 3340Sstevel@tonic-gate 3350Sstevel@tonic-gate /* 3360Sstevel@tonic-gate * Remove project from global list. 3370Sstevel@tonic-gate */ 3380Sstevel@tonic-gate mutex_enter(&projects_list_lock); 3390Sstevel@tonic-gate p->kpj_next->kpj_prev = p->kpj_prev; 3400Sstevel@tonic-gate p->kpj_prev->kpj_next = p->kpj_next; 3410Sstevel@tonic-gate if (projects_list == p) 3420Sstevel@tonic-gate projects_list = p->kpj_next; 3430Sstevel@tonic-gate mutex_exit(&projects_list_lock); 3440Sstevel@tonic-gate 3450Sstevel@tonic-gate rctl_set_free(p->kpj_rctls); 346*3247Sgjelinek project_kstat_delete(p); 3470Sstevel@tonic-gate 3480Sstevel@tonic-gate if (mod_hash_destroy(projects_hash, (mod_hash_key_t)p)) 3490Sstevel@tonic-gate panic("unable to delete project %d zone %d", p->kpj_id, 3500Sstevel@tonic-gate p->kpj_zoneid); 3510Sstevel@tonic-gate 3520Sstevel@tonic-gate } 3530Sstevel@tonic-gate mutex_exit(&project_hash_lock); 3540Sstevel@tonic-gate } 3550Sstevel@tonic-gate 3560Sstevel@tonic-gate /* 3570Sstevel@tonic-gate * int project_walk_all(zoneid_t, int (*)(kproject_t *, void *), void *) 3580Sstevel@tonic-gate * 3590Sstevel@tonic-gate * Overview 3600Sstevel@tonic-gate * Walk the project list for the given zoneid with a callback. 3610Sstevel@tonic-gate * 3620Sstevel@tonic-gate * Return values 3630Sstevel@tonic-gate * -1 for an invalid walk, number of projects visited otherwise. 3640Sstevel@tonic-gate * 3650Sstevel@tonic-gate * Caller's context 3660Sstevel@tonic-gate * projects_list_lock must not be held, as it is acquired by 3670Sstevel@tonic-gate * project_walk_all(). Accordingly, callbacks may not perform KM_SLEEP 3680Sstevel@tonic-gate * allocations. 3690Sstevel@tonic-gate */ 3700Sstevel@tonic-gate int 3710Sstevel@tonic-gate project_walk_all(zoneid_t zoneid, int (*cb)(kproject_t *, void *), 3720Sstevel@tonic-gate void *walk_data) 3730Sstevel@tonic-gate { 3740Sstevel@tonic-gate int cnt = 0; 3750Sstevel@tonic-gate kproject_t *kp = proj0p; 3760Sstevel@tonic-gate 3770Sstevel@tonic-gate mutex_enter(&projects_list_lock); 3780Sstevel@tonic-gate do { 3790Sstevel@tonic-gate if (zoneid != ALL_ZONES && kp->kpj_zoneid != zoneid) 3800Sstevel@tonic-gate continue; 3810Sstevel@tonic-gate if (cb(kp, walk_data) == -1) { 3820Sstevel@tonic-gate cnt = -1; 3830Sstevel@tonic-gate break; 3840Sstevel@tonic-gate } else { 3850Sstevel@tonic-gate cnt++; 3860Sstevel@tonic-gate } 3870Sstevel@tonic-gate } while ((kp = kp->kpj_next) != proj0p); 3880Sstevel@tonic-gate mutex_exit(&projects_list_lock); 3890Sstevel@tonic-gate return (cnt); 3900Sstevel@tonic-gate } 3910Sstevel@tonic-gate 3920Sstevel@tonic-gate /* 3930Sstevel@tonic-gate * projid_t curprojid(void) 3940Sstevel@tonic-gate * 3950Sstevel@tonic-gate * Overview 3960Sstevel@tonic-gate * Return project ID of the current thread 3970Sstevel@tonic-gate * 3980Sstevel@tonic-gate * Caller's context 3990Sstevel@tonic-gate * No restrictions. 4000Sstevel@tonic-gate */ 4010Sstevel@tonic-gate projid_t 4020Sstevel@tonic-gate curprojid() 4030Sstevel@tonic-gate { 4040Sstevel@tonic-gate return (ttoproj(curthread)->kpj_id); 4050Sstevel@tonic-gate } 4060Sstevel@tonic-gate 4070Sstevel@tonic-gate /* 4080Sstevel@tonic-gate * project.cpu-shares resource control support. 4090Sstevel@tonic-gate */ 4100Sstevel@tonic-gate /*ARGSUSED*/ 4110Sstevel@tonic-gate static rctl_qty_t 4120Sstevel@tonic-gate project_cpu_shares_usage(rctl_t *rctl, struct proc *p) 4130Sstevel@tonic-gate { 4140Sstevel@tonic-gate ASSERT(MUTEX_HELD(&p->p_lock)); 4150Sstevel@tonic-gate return (p->p_task->tk_proj->kpj_shares); 4160Sstevel@tonic-gate } 4170Sstevel@tonic-gate 4180Sstevel@tonic-gate /*ARGSUSED*/ 4190Sstevel@tonic-gate static int 4200Sstevel@tonic-gate project_cpu_shares_set(rctl_t *rctl, struct proc *p, rctl_entity_p_t *e, 4210Sstevel@tonic-gate rctl_qty_t nv) 4220Sstevel@tonic-gate { 4230Sstevel@tonic-gate ASSERT(MUTEX_HELD(&p->p_lock)); 4240Sstevel@tonic-gate ASSERT(e->rcep_t == RCENTITY_PROJECT); 4250Sstevel@tonic-gate if (e->rcep_p.proj == NULL) 4260Sstevel@tonic-gate return (0); 4270Sstevel@tonic-gate 4280Sstevel@tonic-gate e->rcep_p.proj->kpj_shares = nv; 4290Sstevel@tonic-gate 4300Sstevel@tonic-gate return (0); 4310Sstevel@tonic-gate } 4320Sstevel@tonic-gate 4330Sstevel@tonic-gate 4340Sstevel@tonic-gate static rctl_ops_t project_cpu_shares_ops = { 4350Sstevel@tonic-gate rcop_no_action, 4360Sstevel@tonic-gate project_cpu_shares_usage, 4370Sstevel@tonic-gate project_cpu_shares_set, 4380Sstevel@tonic-gate rcop_no_test 4390Sstevel@tonic-gate }; 4400Sstevel@tonic-gate 4410Sstevel@tonic-gate /*ARGSUSED*/ 4420Sstevel@tonic-gate static rctl_qty_t 4430Sstevel@tonic-gate project_lwps_usage(rctl_t *r, proc_t *p) 4440Sstevel@tonic-gate { 4450Sstevel@tonic-gate kproject_t *pj; 4460Sstevel@tonic-gate rctl_qty_t nlwps; 4470Sstevel@tonic-gate 4480Sstevel@tonic-gate ASSERT(MUTEX_HELD(&p->p_lock)); 4490Sstevel@tonic-gate pj = p->p_task->tk_proj; 4500Sstevel@tonic-gate mutex_enter(&p->p_zone->zone_nlwps_lock); 4510Sstevel@tonic-gate nlwps = pj->kpj_nlwps; 4520Sstevel@tonic-gate mutex_exit(&p->p_zone->zone_nlwps_lock); 4530Sstevel@tonic-gate 4540Sstevel@tonic-gate return (nlwps); 4550Sstevel@tonic-gate } 4560Sstevel@tonic-gate 4570Sstevel@tonic-gate /*ARGSUSED*/ 4580Sstevel@tonic-gate static int 4590Sstevel@tonic-gate project_lwps_test(rctl_t *r, proc_t *p, rctl_entity_p_t *e, rctl_val_t *rcntl, 4600Sstevel@tonic-gate rctl_qty_t incr, uint_t flags) 4610Sstevel@tonic-gate { 4620Sstevel@tonic-gate rctl_qty_t nlwps; 4630Sstevel@tonic-gate 4640Sstevel@tonic-gate ASSERT(MUTEX_HELD(&p->p_lock)); 4652768Ssl108498 ASSERT(MUTEX_HELD(&p->p_zone->zone_nlwps_lock)); 4660Sstevel@tonic-gate ASSERT(e->rcep_t == RCENTITY_PROJECT); 4670Sstevel@tonic-gate if (e->rcep_p.proj == NULL) 4680Sstevel@tonic-gate return (0); 4690Sstevel@tonic-gate 4700Sstevel@tonic-gate nlwps = e->rcep_p.proj->kpj_nlwps; 4710Sstevel@tonic-gate if (nlwps + incr > rcntl->rcv_value) 4720Sstevel@tonic-gate return (1); 4730Sstevel@tonic-gate 4740Sstevel@tonic-gate return (0); 4750Sstevel@tonic-gate } 4760Sstevel@tonic-gate 4770Sstevel@tonic-gate /*ARGSUSED*/ 4780Sstevel@tonic-gate static int 4790Sstevel@tonic-gate project_lwps_set(rctl_t *rctl, struct proc *p, rctl_entity_p_t *e, 4800Sstevel@tonic-gate rctl_qty_t nv) { 4810Sstevel@tonic-gate 4820Sstevel@tonic-gate ASSERT(MUTEX_HELD(&p->p_lock)); 4830Sstevel@tonic-gate ASSERT(e->rcep_t == RCENTITY_PROJECT); 4840Sstevel@tonic-gate if (e->rcep_p.proj == NULL) 4850Sstevel@tonic-gate return (0); 4860Sstevel@tonic-gate 4870Sstevel@tonic-gate e->rcep_p.proj->kpj_nlwps_ctl = nv; 4880Sstevel@tonic-gate return (0); 4890Sstevel@tonic-gate } 4900Sstevel@tonic-gate 4910Sstevel@tonic-gate static rctl_ops_t project_lwps_ops = { 4920Sstevel@tonic-gate rcop_no_action, 4930Sstevel@tonic-gate project_lwps_usage, 4940Sstevel@tonic-gate project_lwps_set, 4950Sstevel@tonic-gate project_lwps_test, 4960Sstevel@tonic-gate }; 4970Sstevel@tonic-gate 4980Sstevel@tonic-gate /*ARGSUSED*/ 4990Sstevel@tonic-gate static rctl_qty_t 5000Sstevel@tonic-gate project_ntasks_usage(rctl_t *r, proc_t *p) 5010Sstevel@tonic-gate { 5020Sstevel@tonic-gate kproject_t *pj; 5030Sstevel@tonic-gate rctl_qty_t ntasks; 5040Sstevel@tonic-gate 5050Sstevel@tonic-gate ASSERT(MUTEX_HELD(&p->p_lock)); 5060Sstevel@tonic-gate pj = p->p_task->tk_proj; 5070Sstevel@tonic-gate mutex_enter(&p->p_zone->zone_nlwps_lock); 5080Sstevel@tonic-gate ntasks = pj->kpj_ntasks; 5090Sstevel@tonic-gate mutex_exit(&p->p_zone->zone_nlwps_lock); 5100Sstevel@tonic-gate 5110Sstevel@tonic-gate return (ntasks); 5120Sstevel@tonic-gate } 5130Sstevel@tonic-gate 5140Sstevel@tonic-gate /*ARGSUSED*/ 5150Sstevel@tonic-gate static int 5160Sstevel@tonic-gate project_ntasks_test(rctl_t *r, proc_t *p, rctl_entity_p_t *e, rctl_val_t *rcntl, 5170Sstevel@tonic-gate rctl_qty_t incr, uint_t flags) 5180Sstevel@tonic-gate { 5190Sstevel@tonic-gate rctl_qty_t ntasks; 5200Sstevel@tonic-gate 5210Sstevel@tonic-gate ASSERT(MUTEX_HELD(&p->p_lock)); 5220Sstevel@tonic-gate ASSERT(e->rcep_t == RCENTITY_PROJECT); 5230Sstevel@tonic-gate ntasks = e->rcep_p.proj->kpj_ntasks; 5240Sstevel@tonic-gate if (ntasks + incr > rcntl->rcv_value) 5250Sstevel@tonic-gate return (1); 5260Sstevel@tonic-gate 5270Sstevel@tonic-gate return (0); 5280Sstevel@tonic-gate } 5290Sstevel@tonic-gate 5300Sstevel@tonic-gate /*ARGSUSED*/ 5310Sstevel@tonic-gate static int 5320Sstevel@tonic-gate project_ntasks_set(rctl_t *rctl, struct proc *p, rctl_entity_p_t *e, 5330Sstevel@tonic-gate rctl_qty_t nv) { 5340Sstevel@tonic-gate 5350Sstevel@tonic-gate ASSERT(MUTEX_HELD(&p->p_lock)); 5360Sstevel@tonic-gate ASSERT(e->rcep_t == RCENTITY_PROJECT); 5370Sstevel@tonic-gate e->rcep_p.proj->kpj_ntasks_ctl = nv; 5380Sstevel@tonic-gate return (0); 5390Sstevel@tonic-gate } 5400Sstevel@tonic-gate 5410Sstevel@tonic-gate static rctl_ops_t project_tasks_ops = { 5420Sstevel@tonic-gate rcop_no_action, 5430Sstevel@tonic-gate project_ntasks_usage, 5440Sstevel@tonic-gate project_ntasks_set, 5450Sstevel@tonic-gate project_ntasks_test, 5460Sstevel@tonic-gate }; 5470Sstevel@tonic-gate 5480Sstevel@tonic-gate /* 5490Sstevel@tonic-gate * project.max-shm-memory resource control support. 5500Sstevel@tonic-gate */ 5510Sstevel@tonic-gate 5520Sstevel@tonic-gate /*ARGSUSED*/ 5530Sstevel@tonic-gate static int 5540Sstevel@tonic-gate project_shmmax_test(struct rctl *rctl, struct proc *p, rctl_entity_p_t *e, 5550Sstevel@tonic-gate rctl_val_t *rval, rctl_qty_t inc, uint_t flags) 5560Sstevel@tonic-gate { 5570Sstevel@tonic-gate rctl_qty_t v; 5580Sstevel@tonic-gate ASSERT(MUTEX_HELD(&p->p_lock)); 5590Sstevel@tonic-gate ASSERT(e->rcep_t == RCENTITY_PROJECT); 5600Sstevel@tonic-gate v = e->rcep_p.proj->kpj_data.kpd_shmmax + inc; 5610Sstevel@tonic-gate if (v > rval->rcv_value) 5620Sstevel@tonic-gate return (1); 5630Sstevel@tonic-gate 5640Sstevel@tonic-gate return (0); 5650Sstevel@tonic-gate } 5660Sstevel@tonic-gate 5670Sstevel@tonic-gate static rctl_ops_t project_shmmax_ops = { 5680Sstevel@tonic-gate rcop_no_action, 5690Sstevel@tonic-gate rcop_no_usage, 5700Sstevel@tonic-gate rcop_no_set, 5710Sstevel@tonic-gate project_shmmax_test 5720Sstevel@tonic-gate }; 5730Sstevel@tonic-gate 5740Sstevel@tonic-gate /* 5750Sstevel@tonic-gate * project.max-shm-ids resource control support. 5760Sstevel@tonic-gate */ 5770Sstevel@tonic-gate 5780Sstevel@tonic-gate /*ARGSUSED*/ 5790Sstevel@tonic-gate static int 5800Sstevel@tonic-gate project_shmmni_test(struct rctl *rctl, struct proc *p, rctl_entity_p_t *e, 5810Sstevel@tonic-gate rctl_val_t *rval, rctl_qty_t inc, uint_t flags) 5820Sstevel@tonic-gate { 5830Sstevel@tonic-gate rctl_qty_t v; 5840Sstevel@tonic-gate ASSERT(MUTEX_HELD(&p->p_lock)); 5850Sstevel@tonic-gate ASSERT(e->rcep_t == RCENTITY_PROJECT); 5862677Sml93401 v = e->rcep_p.proj->kpj_data.kpd_ipc.ipcq_shmmni + inc; 5870Sstevel@tonic-gate if (v > rval->rcv_value) 5880Sstevel@tonic-gate return (1); 5890Sstevel@tonic-gate 5900Sstevel@tonic-gate return (0); 5910Sstevel@tonic-gate } 5920Sstevel@tonic-gate 5930Sstevel@tonic-gate static rctl_ops_t project_shmmni_ops = { 5940Sstevel@tonic-gate rcop_no_action, 5950Sstevel@tonic-gate rcop_no_usage, 5960Sstevel@tonic-gate rcop_no_set, 5970Sstevel@tonic-gate project_shmmni_test 5980Sstevel@tonic-gate }; 5990Sstevel@tonic-gate 6000Sstevel@tonic-gate /* 6010Sstevel@tonic-gate * project.max-sem-ids resource control support. 6020Sstevel@tonic-gate */ 6030Sstevel@tonic-gate 6040Sstevel@tonic-gate /*ARGSUSED*/ 6050Sstevel@tonic-gate static int 6060Sstevel@tonic-gate project_semmni_test(struct rctl *rctl, struct proc *p, rctl_entity_p_t *e, 6070Sstevel@tonic-gate rctl_val_t *rval, rctl_qty_t inc, uint_t flags) 6080Sstevel@tonic-gate { 6090Sstevel@tonic-gate rctl_qty_t v; 6100Sstevel@tonic-gate ASSERT(MUTEX_HELD(&p->p_lock)); 6110Sstevel@tonic-gate ASSERT(e->rcep_t == RCENTITY_PROJECT); 6122677Sml93401 v = e->rcep_p.proj->kpj_data.kpd_ipc.ipcq_semmni + inc; 6130Sstevel@tonic-gate if (v > rval->rcv_value) 6140Sstevel@tonic-gate return (1); 6150Sstevel@tonic-gate 6160Sstevel@tonic-gate return (0); 6170Sstevel@tonic-gate } 6180Sstevel@tonic-gate 6190Sstevel@tonic-gate static rctl_ops_t project_semmni_ops = { 6200Sstevel@tonic-gate rcop_no_action, 6210Sstevel@tonic-gate rcop_no_usage, 6220Sstevel@tonic-gate rcop_no_set, 6230Sstevel@tonic-gate project_semmni_test 6240Sstevel@tonic-gate }; 6250Sstevel@tonic-gate 6260Sstevel@tonic-gate /* 6270Sstevel@tonic-gate * project.max-msg-ids resource control support. 6280Sstevel@tonic-gate */ 6290Sstevel@tonic-gate 6300Sstevel@tonic-gate /*ARGSUSED*/ 6310Sstevel@tonic-gate static int 6320Sstevel@tonic-gate project_msgmni_test(struct rctl *rctl, struct proc *p, rctl_entity_p_t *e, 6330Sstevel@tonic-gate rctl_val_t *rval, rctl_qty_t inc, uint_t flags) 6340Sstevel@tonic-gate { 6350Sstevel@tonic-gate rctl_qty_t v; 6360Sstevel@tonic-gate ASSERT(MUTEX_HELD(&p->p_lock)); 6370Sstevel@tonic-gate ASSERT(e->rcep_t == RCENTITY_PROJECT); 6382677Sml93401 v = e->rcep_p.proj->kpj_data.kpd_ipc.ipcq_msgmni + inc; 6390Sstevel@tonic-gate if (v > rval->rcv_value) 6400Sstevel@tonic-gate return (1); 6410Sstevel@tonic-gate 6420Sstevel@tonic-gate return (0); 6430Sstevel@tonic-gate } 6440Sstevel@tonic-gate 6450Sstevel@tonic-gate static rctl_ops_t project_msgmni_ops = { 6460Sstevel@tonic-gate rcop_no_action, 6470Sstevel@tonic-gate rcop_no_usage, 6480Sstevel@tonic-gate rcop_no_set, 6490Sstevel@tonic-gate project_msgmni_test 6500Sstevel@tonic-gate }; 6510Sstevel@tonic-gate 6522768Ssl108498 /*ARGSUSED*/ 6532768Ssl108498 static rctl_qty_t 6542768Ssl108498 project_locked_mem_usage(rctl_t *rctl, struct proc *p) 6552768Ssl108498 { 6562768Ssl108498 rctl_qty_t q; 6572768Ssl108498 ASSERT(MUTEX_HELD(&p->p_lock)); 658*3247Sgjelinek mutex_enter(&p->p_zone->zone_mem_lock); 6592768Ssl108498 q = p->p_task->tk_proj->kpj_data.kpd_locked_mem; 660*3247Sgjelinek mutex_exit(&p->p_zone->zone_mem_lock); 6612768Ssl108498 return (q); 6622768Ssl108498 } 6630Sstevel@tonic-gate 6640Sstevel@tonic-gate /*ARGSUSED*/ 6650Sstevel@tonic-gate static int 6662768Ssl108498 project_locked_mem_test(struct rctl *rctl, struct proc *p, rctl_entity_p_t *e, 6670Sstevel@tonic-gate rctl_val_t *rval, rctl_qty_t inc, uint_t flags) 6680Sstevel@tonic-gate { 6692768Ssl108498 rctl_qty_t q; 6700Sstevel@tonic-gate ASSERT(MUTEX_HELD(&p->p_lock)); 671*3247Sgjelinek ASSERT(MUTEX_HELD(&p->p_zone->zone_mem_lock)); 6722768Ssl108498 q = p->p_task->tk_proj->kpj_data.kpd_locked_mem; 6732768Ssl108498 if (q + inc > rval->rcv_value) 6740Sstevel@tonic-gate return (1); 6750Sstevel@tonic-gate return (0); 6760Sstevel@tonic-gate } 6770Sstevel@tonic-gate 6782768Ssl108498 /*ARGSUSED*/ 6792768Ssl108498 static int 6802768Ssl108498 project_locked_mem_set(rctl_t *rctl, struct proc *p, rctl_entity_p_t *e, 6812768Ssl108498 rctl_qty_t nv) { 6822768Ssl108498 6832768Ssl108498 ASSERT(MUTEX_HELD(&p->p_lock)); 6842768Ssl108498 ASSERT(e->rcep_t == RCENTITY_PROJECT); 6852768Ssl108498 if (e->rcep_p.proj == NULL) 6862768Ssl108498 return (0); 6872768Ssl108498 6882768Ssl108498 e->rcep_p.proj->kpj_data.kpd_locked_mem_ctl = nv; 6892768Ssl108498 return (0); 6902768Ssl108498 } 6912768Ssl108498 6922768Ssl108498 static rctl_ops_t project_locked_mem_ops = { 6930Sstevel@tonic-gate rcop_no_action, 6942768Ssl108498 project_locked_mem_usage, 6952768Ssl108498 project_locked_mem_set, 6962768Ssl108498 project_locked_mem_test 6970Sstevel@tonic-gate }; 6980Sstevel@tonic-gate 6990Sstevel@tonic-gate /* 7000Sstevel@tonic-gate * project.max-contracts resource control support. 7010Sstevel@tonic-gate */ 7020Sstevel@tonic-gate 7030Sstevel@tonic-gate /*ARGSUSED*/ 7040Sstevel@tonic-gate static int 7050Sstevel@tonic-gate project_contract_test(struct rctl *rctl, struct proc *p, rctl_entity_p_t *e, 7060Sstevel@tonic-gate rctl_val_t *rval, rctl_qty_t inc, uint_t flags) 7070Sstevel@tonic-gate { 7080Sstevel@tonic-gate rctl_qty_t v; 7090Sstevel@tonic-gate 7100Sstevel@tonic-gate ASSERT(MUTEX_HELD(&p->p_lock)); 7110Sstevel@tonic-gate ASSERT(e->rcep_t == RCENTITY_PROJECT); 7120Sstevel@tonic-gate 7130Sstevel@tonic-gate v = e->rcep_p.proj->kpj_data.kpd_contract + inc; 7140Sstevel@tonic-gate 7150Sstevel@tonic-gate if ((p->p_task != NULL) && (p->p_task->tk_proj) != NULL && 7160Sstevel@tonic-gate (v > rval->rcv_value)) 7170Sstevel@tonic-gate return (1); 7180Sstevel@tonic-gate 7190Sstevel@tonic-gate return (0); 7200Sstevel@tonic-gate } 7210Sstevel@tonic-gate 7220Sstevel@tonic-gate static rctl_ops_t project_contract_ops = { 7230Sstevel@tonic-gate rcop_no_action, 7240Sstevel@tonic-gate rcop_no_usage, 7250Sstevel@tonic-gate rcop_no_set, 7260Sstevel@tonic-gate project_contract_test 7270Sstevel@tonic-gate }; 7280Sstevel@tonic-gate 7290Sstevel@tonic-gate /*ARGSUSED*/ 7300Sstevel@tonic-gate static int 7310Sstevel@tonic-gate project_crypto_test(rctl_t *r, proc_t *p, rctl_entity_p_t *e, 7320Sstevel@tonic-gate rctl_val_t *rval, rctl_qty_t incr, uint_t flags) 7330Sstevel@tonic-gate { 7340Sstevel@tonic-gate rctl_qty_t v; 7350Sstevel@tonic-gate ASSERT(MUTEX_HELD(&p->p_lock)); 7360Sstevel@tonic-gate ASSERT(e->rcep_t == RCENTITY_PROJECT); 7370Sstevel@tonic-gate v = e->rcep_p.proj->kpj_data.kpd_crypto_mem + incr; 7380Sstevel@tonic-gate if (v > rval->rcv_value) 7390Sstevel@tonic-gate return (1); 7400Sstevel@tonic-gate return (0); 7410Sstevel@tonic-gate } 7420Sstevel@tonic-gate 7430Sstevel@tonic-gate static rctl_ops_t project_crypto_mem_ops = { 7440Sstevel@tonic-gate rcop_no_action, 7450Sstevel@tonic-gate rcop_no_usage, 7460Sstevel@tonic-gate rcop_no_set, 7470Sstevel@tonic-gate project_crypto_test 7480Sstevel@tonic-gate }; 7490Sstevel@tonic-gate 7500Sstevel@tonic-gate /* 7510Sstevel@tonic-gate * void project_init(void) 7520Sstevel@tonic-gate * 7530Sstevel@tonic-gate * Overview 7540Sstevel@tonic-gate * Initialize the project subsystem, including the primordial project 0 entry. 7550Sstevel@tonic-gate * Register generic project resource controls, if any. 7560Sstevel@tonic-gate * 7570Sstevel@tonic-gate * Return values 7580Sstevel@tonic-gate * None. 7590Sstevel@tonic-gate * 7600Sstevel@tonic-gate * Caller's context 7610Sstevel@tonic-gate * Safe for KM_SLEEP allocations. 7620Sstevel@tonic-gate */ 7630Sstevel@tonic-gate void 7640Sstevel@tonic-gate project_init(void) 7650Sstevel@tonic-gate { 7660Sstevel@tonic-gate rctl_qty_t shmmni, shmmax, qty; 7670Sstevel@tonic-gate boolean_t check; 7680Sstevel@tonic-gate 7690Sstevel@tonic-gate projects_hash = mod_hash_create_extended("projects_hash", 7700Sstevel@tonic-gate project_hash_size, mod_hash_null_keydtor, project_hash_val_dtor, 7710Sstevel@tonic-gate project_hash_by_id, 7720Sstevel@tonic-gate (void *)(uintptr_t)mod_hash_iddata_gen(project_hash_size), 7730Sstevel@tonic-gate project_hash_key_cmp, KM_SLEEP); 7740Sstevel@tonic-gate 7750Sstevel@tonic-gate rc_project_cpu_shares = rctl_register("project.cpu-shares", 7760Sstevel@tonic-gate RCENTITY_PROJECT, RCTL_GLOBAL_SIGNAL_NEVER | 7770Sstevel@tonic-gate RCTL_GLOBAL_DENY_NEVER | RCTL_GLOBAL_NOBASIC | 7781996Sml93401 RCTL_GLOBAL_COUNT | RCTL_GLOBAL_SYSLOG_NEVER, 7791996Sml93401 FSS_MAXSHARES, FSS_MAXSHARES, 7800Sstevel@tonic-gate &project_cpu_shares_ops); 7810Sstevel@tonic-gate rctl_add_default_limit("project.cpu-shares", 1, RCPRIV_PRIVILEGED, 7820Sstevel@tonic-gate RCTL_LOCAL_NOACTION); 7830Sstevel@tonic-gate 7840Sstevel@tonic-gate rc_project_nlwps = rctl_register("project.max-lwps", RCENTITY_PROJECT, 7850Sstevel@tonic-gate RCTL_GLOBAL_NOACTION | RCTL_GLOBAL_NOBASIC | RCTL_GLOBAL_COUNT, 7860Sstevel@tonic-gate INT_MAX, INT_MAX, &project_lwps_ops); 7870Sstevel@tonic-gate 7880Sstevel@tonic-gate rc_project_ntasks = rctl_register("project.max-tasks", RCENTITY_PROJECT, 7890Sstevel@tonic-gate RCTL_GLOBAL_NOACTION | RCTL_GLOBAL_NOBASIC | RCTL_GLOBAL_COUNT, 7900Sstevel@tonic-gate INT_MAX, INT_MAX, &project_tasks_ops); 7910Sstevel@tonic-gate 7920Sstevel@tonic-gate /* 7930Sstevel@tonic-gate * This rctl handle is used by /dev/crypto. It is here rather than 7940Sstevel@tonic-gate * in misc/kcf or the drv/crypto module because resource controls 7950Sstevel@tonic-gate * currently don't allow modules to be unloaded, and the control 7960Sstevel@tonic-gate * must be registered before init starts. 7970Sstevel@tonic-gate */ 7980Sstevel@tonic-gate rc_project_crypto_mem = rctl_register("project.max-crypto-memory", 7990Sstevel@tonic-gate RCENTITY_PROJECT, RCTL_GLOBAL_DENY_ALWAYS | RCTL_GLOBAL_NOBASIC | 8000Sstevel@tonic-gate RCTL_GLOBAL_BYTES, UINT64_MAX, UINT64_MAX, 8010Sstevel@tonic-gate &project_crypto_mem_ops); 8020Sstevel@tonic-gate 8030Sstevel@tonic-gate /* 8040Sstevel@tonic-gate * Default to a quarter of the machine's memory 8050Sstevel@tonic-gate */ 8060Sstevel@tonic-gate qty = availrmem_initial << (PAGESHIFT - 2); 8070Sstevel@tonic-gate rctl_add_default_limit("project.max-crypto-memory", qty, 8080Sstevel@tonic-gate RCPRIV_PRIVILEGED, RCTL_LOCAL_DENY); 8090Sstevel@tonic-gate 8100Sstevel@tonic-gate /* 8110Sstevel@tonic-gate * System V IPC resource controls 8120Sstevel@tonic-gate */ 8130Sstevel@tonic-gate rc_project_semmni = rctl_register("project.max-sem-ids", 8140Sstevel@tonic-gate RCENTITY_PROJECT, RCTL_GLOBAL_DENY_ALWAYS | RCTL_GLOBAL_NOBASIC | 8150Sstevel@tonic-gate RCTL_GLOBAL_COUNT, IPC_IDS_MAX, IPC_IDS_MAX, &project_semmni_ops); 8160Sstevel@tonic-gate rctl_add_legacy_limit("project.max-sem-ids", "semsys", 8170Sstevel@tonic-gate "seminfo_semmni", 128, IPC_IDS_MAX); 8180Sstevel@tonic-gate 8190Sstevel@tonic-gate rc_project_msgmni = rctl_register("project.max-msg-ids", 8200Sstevel@tonic-gate RCENTITY_PROJECT, RCTL_GLOBAL_DENY_ALWAYS | RCTL_GLOBAL_NOBASIC | 8210Sstevel@tonic-gate RCTL_GLOBAL_COUNT, IPC_IDS_MAX, IPC_IDS_MAX, &project_msgmni_ops); 8220Sstevel@tonic-gate rctl_add_legacy_limit("project.max-msg-ids", "msgsys", 8230Sstevel@tonic-gate "msginfo_msgmni", 128, IPC_IDS_MAX); 8240Sstevel@tonic-gate 8250Sstevel@tonic-gate rc_project_shmmni = rctl_register("project.max-shm-ids", 8260Sstevel@tonic-gate RCENTITY_PROJECT, RCTL_GLOBAL_DENY_ALWAYS | RCTL_GLOBAL_NOBASIC | 8270Sstevel@tonic-gate RCTL_GLOBAL_COUNT, IPC_IDS_MAX, IPC_IDS_MAX, &project_shmmni_ops); 8280Sstevel@tonic-gate rctl_add_legacy_limit("project.max-shm-ids", "shmsys", 8290Sstevel@tonic-gate "shminfo_shmmni", 128, IPC_IDS_MAX); 8300Sstevel@tonic-gate 8310Sstevel@tonic-gate rc_project_shmmax = rctl_register("project.max-shm-memory", 8320Sstevel@tonic-gate RCENTITY_PROJECT, RCTL_GLOBAL_DENY_ALWAYS | RCTL_GLOBAL_NOBASIC | 8330Sstevel@tonic-gate RCTL_GLOBAL_BYTES, UINT64_MAX, UINT64_MAX, &project_shmmax_ops); 8340Sstevel@tonic-gate 8350Sstevel@tonic-gate check = B_FALSE; 8360Sstevel@tonic-gate if (!mod_sysvar("shmsys", "shminfo_shmmni", &shmmni)) 8370Sstevel@tonic-gate shmmni = 100; 8380Sstevel@tonic-gate else 8390Sstevel@tonic-gate check = B_TRUE; 8400Sstevel@tonic-gate if (!mod_sysvar("shmsys", "shminfo_shmmax", &shmmax)) 8410Sstevel@tonic-gate shmmax = 0x800000; 8420Sstevel@tonic-gate else 8430Sstevel@tonic-gate check = B_TRUE; 8440Sstevel@tonic-gate 8450Sstevel@tonic-gate /* 8460Sstevel@tonic-gate * Default to a quarter of the machine's memory 8470Sstevel@tonic-gate */ 8480Sstevel@tonic-gate qty = availrmem_initial << (PAGESHIFT - 2); 8490Sstevel@tonic-gate if (check) { 8500Sstevel@tonic-gate if ((shmmax > 0) && (UINT64_MAX / shmmax <= shmmni)) 8510Sstevel@tonic-gate qty = UINT64_MAX; 8520Sstevel@tonic-gate else if (shmmni * shmmax > qty) 8530Sstevel@tonic-gate qty = shmmni * shmmax; 8540Sstevel@tonic-gate } 8550Sstevel@tonic-gate rctl_add_default_limit("project.max-shm-memory", qty, 8560Sstevel@tonic-gate RCPRIV_PRIVILEGED, RCTL_LOCAL_DENY); 8570Sstevel@tonic-gate 8580Sstevel@tonic-gate /* 8590Sstevel@tonic-gate * Event Ports resource controls 8600Sstevel@tonic-gate */ 8610Sstevel@tonic-gate 8620Sstevel@tonic-gate rc_project_portids = rctl_register("project.max-port-ids", 8630Sstevel@tonic-gate RCENTITY_PROJECT, RCTL_GLOBAL_DENY_ALWAYS | RCTL_GLOBAL_NOBASIC | 8640Sstevel@tonic-gate RCTL_GLOBAL_COUNT, PORT_MAX_PORTS, PORT_MAX_PORTS, 8650Sstevel@tonic-gate &rctl_absolute_ops); 8660Sstevel@tonic-gate rctl_add_default_limit("project.max-port-ids", PORT_DEFAULT_PORTS, 8670Sstevel@tonic-gate RCPRIV_PRIVILEGED, RCTL_LOCAL_DENY); 8680Sstevel@tonic-gate 8690Sstevel@tonic-gate /* 8700Sstevel@tonic-gate * Resource control for locked memory 8710Sstevel@tonic-gate */ 8722768Ssl108498 rc_project_locked_mem = rctl_register( 8732768Ssl108498 "project.max-locked-memory", RCENTITY_PROJECT, 8740Sstevel@tonic-gate RCTL_GLOBAL_DENY_ALWAYS | RCTL_GLOBAL_NOBASIC | RCTL_GLOBAL_BYTES, 8752768Ssl108498 UINT64_MAX, UINT64_MAX, &project_locked_mem_ops); 8760Sstevel@tonic-gate 8772768Ssl108498 /* Default value equals that of max-shm-memory. */ 8782768Ssl108498 rctl_add_default_limit("project.max-locked-memory", qty, 8790Sstevel@tonic-gate RCPRIV_PRIVILEGED, RCTL_LOCAL_DENY); 8800Sstevel@tonic-gate 8810Sstevel@tonic-gate /* 8820Sstevel@tonic-gate * Per project limit on contracts. 8830Sstevel@tonic-gate */ 8840Sstevel@tonic-gate rc_project_contract = rctl_register("project.max-contracts", 8850Sstevel@tonic-gate RCENTITY_PROJECT, RCTL_GLOBAL_DENY_ALWAYS | RCTL_GLOBAL_COUNT, 8860Sstevel@tonic-gate INT_MAX, INT_MAX, &project_contract_ops); 8870Sstevel@tonic-gate rctl_add_default_limit("project.max-contracts", 10000, 8880Sstevel@tonic-gate RCPRIV_PRIVILEGED, RCTL_LOCAL_DENY); 8890Sstevel@tonic-gate 890*3247Sgjelinek t0.t_proj = proj0p = project_hold_by_id(0, &zone0, 8910Sstevel@tonic-gate PROJECT_HOLD_INSERT); 8920Sstevel@tonic-gate 8930Sstevel@tonic-gate mutex_enter(&p0.p_lock); 8940Sstevel@tonic-gate proj0p->kpj_nlwps = p0.p_lwpcnt; 8950Sstevel@tonic-gate mutex_exit(&p0.p_lock); 8960Sstevel@tonic-gate proj0p->kpj_ntasks = 1; 8970Sstevel@tonic-gate } 898*3247Sgjelinek 899*3247Sgjelinek static int 900*3247Sgjelinek project_lockedmem_kstat_update(kstat_t *ksp, int rw) 901*3247Sgjelinek { 902*3247Sgjelinek kproject_t *pj = ksp->ks_private; 903*3247Sgjelinek kproject_kstat_t *kpk = ksp->ks_data; 904*3247Sgjelinek 905*3247Sgjelinek if (rw == KSTAT_WRITE) 906*3247Sgjelinek return (EACCES); 907*3247Sgjelinek 908*3247Sgjelinek kpk->kpk_usage.value.ui64 = pj->kpj_data.kpd_locked_mem; 909*3247Sgjelinek kpk->kpk_value.value.ui64 = pj->kpj_data.kpd_locked_mem_ctl; 910*3247Sgjelinek return (0); 911*3247Sgjelinek } 912*3247Sgjelinek 913*3247Sgjelinek static kstat_t * 914*3247Sgjelinek project_kstat_create(kproject_t *pj, zone_t *zone) 915*3247Sgjelinek { 916*3247Sgjelinek kstat_t *ksp; 917*3247Sgjelinek kproject_kstat_t *kpk; 918*3247Sgjelinek char *zonename = zone->zone_name; 919*3247Sgjelinek 920*3247Sgjelinek ksp = rctl_kstat_create_project(pj, "lockedmem", KSTAT_TYPE_NAMED, 921*3247Sgjelinek sizeof (kproject_kstat_t) / sizeof (kstat_named_t), 922*3247Sgjelinek KSTAT_FLAG_VIRTUAL); 923*3247Sgjelinek 924*3247Sgjelinek if (ksp == NULL) 925*3247Sgjelinek return (NULL); 926*3247Sgjelinek 927*3247Sgjelinek kpk = ksp->ks_data = kmem_alloc(sizeof (kproject_kstat_t), KM_SLEEP); 928*3247Sgjelinek ksp->ks_data_size += strlen(zonename) + 1; 929*3247Sgjelinek kstat_named_init(&kpk->kpk_zonename, "zonename", KSTAT_DATA_STRING); 930*3247Sgjelinek kstat_named_setstr(&kpk->kpk_zonename, zonename); 931*3247Sgjelinek kstat_named_init(&kpk->kpk_usage, "usage", KSTAT_DATA_UINT64); 932*3247Sgjelinek kstat_named_init(&kpk->kpk_value, "value", KSTAT_DATA_UINT64); 933*3247Sgjelinek ksp->ks_update = project_lockedmem_kstat_update; 934*3247Sgjelinek ksp->ks_private = pj; 935*3247Sgjelinek kstat_install(ksp); 936*3247Sgjelinek 937*3247Sgjelinek return (ksp); 938*3247Sgjelinek } 939*3247Sgjelinek 940*3247Sgjelinek static void 941*3247Sgjelinek project_kstat_delete(kproject_t *pj) 942*3247Sgjelinek { 943*3247Sgjelinek void *data; 944*3247Sgjelinek 945*3247Sgjelinek if (pj->kpj_data.kpd_lockedmem_kstat != NULL) { 946*3247Sgjelinek data = pj->kpj_data.kpd_lockedmem_kstat->ks_data; 947*3247Sgjelinek kstat_delete(pj->kpj_data.kpd_lockedmem_kstat); 948*3247Sgjelinek kmem_free(data, sizeof (zone_kstat_t)); 949*3247Sgjelinek } 950*3247Sgjelinek pj->kpj_data.kpd_lockedmem_kstat = NULL; 951*3247Sgjelinek } 952