xref: /onnv-gate/usr/src/uts/common/os/project.c (revision 3247:e05001c14ea2)
10Sstevel@tonic-gate /*
20Sstevel@tonic-gate  * CDDL HEADER START
30Sstevel@tonic-gate  *
40Sstevel@tonic-gate  * The contents of this file are subject to the terms of the
51996Sml93401  * Common Development and Distribution License (the "License").
61996Sml93401  * You may not use this file except in compliance with the License.
70Sstevel@tonic-gate  *
80Sstevel@tonic-gate  * You can obtain a copy of the license at usr/src/OPENSOLARIS.LICENSE
90Sstevel@tonic-gate  * or http://www.opensolaris.org/os/licensing.
100Sstevel@tonic-gate  * See the License for the specific language governing permissions
110Sstevel@tonic-gate  * and limitations under the License.
120Sstevel@tonic-gate  *
130Sstevel@tonic-gate  * When distributing Covered Code, include this CDDL HEADER in each
140Sstevel@tonic-gate  * file and include the License file at usr/src/OPENSOLARIS.LICENSE.
150Sstevel@tonic-gate  * If applicable, add the following below this CDDL HEADER, with the
160Sstevel@tonic-gate  * fields enclosed by brackets "[]" replaced with your own identifying
170Sstevel@tonic-gate  * information: Portions Copyright [yyyy] [name of copyright owner]
180Sstevel@tonic-gate  *
190Sstevel@tonic-gate  * CDDL HEADER END
200Sstevel@tonic-gate  */
210Sstevel@tonic-gate /*
221996Sml93401  * Copyright 2006 Sun Microsystems, Inc.  All rights reserved.
230Sstevel@tonic-gate  * Use is subject to license terms.
240Sstevel@tonic-gate  */
250Sstevel@tonic-gate 
260Sstevel@tonic-gate #pragma ident	"%Z%%M%	%I%	%E% SMI"
270Sstevel@tonic-gate 
280Sstevel@tonic-gate #include <sys/project.h>
290Sstevel@tonic-gate #include <sys/modhash.h>
300Sstevel@tonic-gate #include <sys/modctl.h>
310Sstevel@tonic-gate #include <sys/kmem.h>
32*3247Sgjelinek #include <sys/kstat.h>
330Sstevel@tonic-gate #include <sys/atomic.h>
340Sstevel@tonic-gate #include <sys/cmn_err.h>
350Sstevel@tonic-gate #include <sys/proc.h>
360Sstevel@tonic-gate #include <sys/rctl.h>
370Sstevel@tonic-gate #include <sys/sunddi.h>
380Sstevel@tonic-gate #include <sys/fss.h>
390Sstevel@tonic-gate #include <sys/systm.h>
400Sstevel@tonic-gate #include <sys/ipc_impl.h>
410Sstevel@tonic-gate #include <sys/port_kernel.h>
420Sstevel@tonic-gate #include <sys/task.h>
430Sstevel@tonic-gate #include <sys/zone.h>
440Sstevel@tonic-gate 
450Sstevel@tonic-gate int project_hash_size = 64;
460Sstevel@tonic-gate static kmutex_t project_hash_lock;
470Sstevel@tonic-gate static kmutex_t projects_list_lock;
480Sstevel@tonic-gate static mod_hash_t *projects_hash;
490Sstevel@tonic-gate static kproject_t *projects_list;
500Sstevel@tonic-gate 
510Sstevel@tonic-gate rctl_hndl_t rc_project_cpu_shares;
520Sstevel@tonic-gate rctl_hndl_t rc_project_nlwps;
530Sstevel@tonic-gate rctl_hndl_t rc_project_ntasks;
540Sstevel@tonic-gate rctl_hndl_t rc_project_msgmni;
550Sstevel@tonic-gate rctl_hndl_t rc_project_semmni;
560Sstevel@tonic-gate rctl_hndl_t rc_project_shmmax;
570Sstevel@tonic-gate rctl_hndl_t rc_project_shmmni;
580Sstevel@tonic-gate rctl_hndl_t rc_project_portids;
592768Ssl108498 rctl_hndl_t rc_project_locked_mem;
600Sstevel@tonic-gate rctl_hndl_t rc_project_contract;
610Sstevel@tonic-gate rctl_hndl_t rc_project_crypto_mem;
620Sstevel@tonic-gate 
630Sstevel@tonic-gate /*
640Sstevel@tonic-gate  * Dummy structure used when comparing projects.  This structure must be kept
650Sstevel@tonic-gate  * identical to the first two fields of kproject_t.
660Sstevel@tonic-gate  */
670Sstevel@tonic-gate struct project_zone {
680Sstevel@tonic-gate 	projid_t	kpj_id;
690Sstevel@tonic-gate 	zoneid_t	kpj_zoneid;
700Sstevel@tonic-gate };
710Sstevel@tonic-gate 
720Sstevel@tonic-gate /*
730Sstevel@tonic-gate  * Projects
740Sstevel@tonic-gate  *
750Sstevel@tonic-gate  *   A dictionary of all active projects is maintained by the kernel so that we
760Sstevel@tonic-gate  *   may track project usage and limits.  (By an active project, we mean a
770Sstevel@tonic-gate  *   project associated with one or more task, and therefore with one or more
780Sstevel@tonic-gate  *   processes.) We build the dictionary on top of the mod_hash facility, since
790Sstevel@tonic-gate  *   project additions and deletions are relatively rare events.  An
800Sstevel@tonic-gate  *   integer-to-pointer mapping is maintained within the hash, representing the
810Sstevel@tonic-gate  *   map from project id to project structure.  All projects, including the
820Sstevel@tonic-gate  *   primordial "project 0", are allocated via the project_hold_by_id()
830Sstevel@tonic-gate  *   interface.
840Sstevel@tonic-gate  *
850Sstevel@tonic-gate  *   Currently, the project contains a reference count; the project ID, which is
860Sstevel@tonic-gate  *   examined by the extended accounting subsystem as well as /proc; a resource
870Sstevel@tonic-gate  *   control set, which contains the allowable values (and actions on exceeding
880Sstevel@tonic-gate  *   those values) for controlled project-level resources on the system; and a
890Sstevel@tonic-gate  *   number of CPU shares, which is used by the fair share scheduling class
900Sstevel@tonic-gate  *   (FSS) to support its proportion-based scheduling algorithm.
910Sstevel@tonic-gate  *
920Sstevel@tonic-gate  * Reference counting convention
930Sstevel@tonic-gate  *   The dictionary entry does not itself count as a reference--only references
940Sstevel@tonic-gate  *   outside of the subsystem are tallied.  At the drop of the final external
950Sstevel@tonic-gate  *   reference, the project entry is removed.  The reference counter keeps
960Sstevel@tonic-gate  *   track of the number of threads *and* tasks within a project.
970Sstevel@tonic-gate  *
980Sstevel@tonic-gate  * Locking
990Sstevel@tonic-gate  *   Walking the doubly-linked project list must be done while holding
1000Sstevel@tonic-gate  *   projects_list_lock.  Thus, any dereference of kpj_next or kpj_prev must be
1010Sstevel@tonic-gate  *   under projects_list_lock.
1020Sstevel@tonic-gate  *
1030Sstevel@tonic-gate  *   If both the hash lock, project_hash_lock, and the list lock are to be
1040Sstevel@tonic-gate  *   acquired, the hash lock is to be acquired first.
1050Sstevel@tonic-gate  */
1060Sstevel@tonic-gate 
107*3247Sgjelinek static kstat_t *project_kstat_create(kproject_t *pj, zone_t *zone);
108*3247Sgjelinek static void project_kstat_delete(kproject_t *pj);
1090Sstevel@tonic-gate 
1100Sstevel@tonic-gate static void
1110Sstevel@tonic-gate project_data_init(kproject_data_t *data)
1120Sstevel@tonic-gate {
1130Sstevel@tonic-gate 	/*
1140Sstevel@tonic-gate 	 * Initialize subsystem-specific data
1150Sstevel@tonic-gate 	 */
1160Sstevel@tonic-gate 	data->kpd_shmmax = 0;
1172677Sml93401 	data->kpd_ipc.ipcq_shmmni = 0;
1182677Sml93401 	data->kpd_ipc.ipcq_semmni = 0;
1192677Sml93401 	data->kpd_ipc.ipcq_msgmni = 0;
1202768Ssl108498 	data->kpd_locked_mem = 0;
1212768Ssl108498 	data->kpd_locked_mem_ctl = UINT64_MAX;
1220Sstevel@tonic-gate 	data->kpd_contract = 0;
1230Sstevel@tonic-gate 	data->kpd_crypto_mem = 0;
124*3247Sgjelinek 	data->kpd_lockedmem_kstat = NULL;
1250Sstevel@tonic-gate }
1260Sstevel@tonic-gate 
1270Sstevel@tonic-gate /*ARGSUSED*/
1280Sstevel@tonic-gate static uint_t
1290Sstevel@tonic-gate project_hash_by_id(void *hash_data, mod_hash_key_t key)
1300Sstevel@tonic-gate {
1310Sstevel@tonic-gate 	struct project_zone *pz = key;
1320Sstevel@tonic-gate 	uint_t mykey;
1330Sstevel@tonic-gate 
1340Sstevel@tonic-gate 	/*
1350Sstevel@tonic-gate 	 * Merge the zoneid and projectid together to a 32-bit quantity, and
1360Sstevel@tonic-gate 	 * then pass that in to the existing idhash.
1370Sstevel@tonic-gate 	 */
1380Sstevel@tonic-gate 	mykey = (pz->kpj_zoneid << 16) | pz->kpj_id;
1390Sstevel@tonic-gate 	return (mod_hash_byid(hash_data, (mod_hash_key_t)(uintptr_t)mykey));
1400Sstevel@tonic-gate }
1410Sstevel@tonic-gate 
1420Sstevel@tonic-gate static int
1430Sstevel@tonic-gate project_hash_key_cmp(mod_hash_key_t key1, mod_hash_key_t key2)
1440Sstevel@tonic-gate {
1450Sstevel@tonic-gate 	struct project_zone *pz1 = key1, *pz2 = key2;
1460Sstevel@tonic-gate 	int retval;
1470Sstevel@tonic-gate 
1480Sstevel@tonic-gate 	return ((int)((retval = pz1->kpj_id - pz2->kpj_id) != 0 ? retval :
1490Sstevel@tonic-gate 	    pz1->kpj_zoneid - pz2->kpj_zoneid));
1500Sstevel@tonic-gate }
1510Sstevel@tonic-gate 
1520Sstevel@tonic-gate static void
1530Sstevel@tonic-gate project_hash_val_dtor(mod_hash_val_t val)
1540Sstevel@tonic-gate {
1550Sstevel@tonic-gate 	kproject_t *kp = (kproject_t *)val;
1560Sstevel@tonic-gate 
1570Sstevel@tonic-gate 	ASSERT(kp->kpj_count == 0);
1580Sstevel@tonic-gate 	kmem_free(kp, sizeof (kproject_t));
1590Sstevel@tonic-gate }
1600Sstevel@tonic-gate 
1610Sstevel@tonic-gate /*
1620Sstevel@tonic-gate  * kproject_t *project_hold(kproject_t *)
1630Sstevel@tonic-gate  *
1640Sstevel@tonic-gate  * Overview
1650Sstevel@tonic-gate  *   Record that an additional reference on the indicated project has been
1660Sstevel@tonic-gate  *   taken.
1670Sstevel@tonic-gate  *
1680Sstevel@tonic-gate  * Return values
1690Sstevel@tonic-gate  *   A pointer to the indicated project.
1700Sstevel@tonic-gate  *
1710Sstevel@tonic-gate  * Caller's context
1720Sstevel@tonic-gate  *   project_hash_lock must not be held across the project_hold() call.
1730Sstevel@tonic-gate  */
1740Sstevel@tonic-gate kproject_t *
1750Sstevel@tonic-gate project_hold(kproject_t *p)
1760Sstevel@tonic-gate {
1770Sstevel@tonic-gate 	mutex_enter(&project_hash_lock);
1780Sstevel@tonic-gate 	ASSERT(p != NULL);
1790Sstevel@tonic-gate 	p->kpj_count++;
1800Sstevel@tonic-gate 	ASSERT(p->kpj_count != 0);
1810Sstevel@tonic-gate 	mutex_exit(&project_hash_lock);
1820Sstevel@tonic-gate 	return (p);
1830Sstevel@tonic-gate }
1840Sstevel@tonic-gate 
1850Sstevel@tonic-gate /*
186*3247Sgjelinek  * kproject_t *project_hold_by_id(projid_t, zone_t *, int)
1870Sstevel@tonic-gate  *
1880Sstevel@tonic-gate  * Overview
1890Sstevel@tonic-gate  *   project_hold_by_id() performs a look-up in the dictionary of projects
190*3247Sgjelinek  *   active on the system by specified project ID + zone and puts a hold on
1910Sstevel@tonic-gate  *   it.  The third argument defines the desired behavior in the case when
1920Sstevel@tonic-gate  *   project with given project ID cannot be found:
1930Sstevel@tonic-gate  *
1940Sstevel@tonic-gate  *   PROJECT_HOLD_INSERT	New entry is made in dictionary and the project
1950Sstevel@tonic-gate  *   				is added to the global list.
1960Sstevel@tonic-gate  *
1970Sstevel@tonic-gate  *   PROJECT_HOLD_FIND		Return NULL.
1980Sstevel@tonic-gate  *
1990Sstevel@tonic-gate  *   The project is returned with its reference count incremented by one.
2000Sstevel@tonic-gate  *   A new project derives its resource controls from those of project 0.
2010Sstevel@tonic-gate  *
2020Sstevel@tonic-gate  * Return values
2030Sstevel@tonic-gate  *   A pointer to the held project.
2040Sstevel@tonic-gate  *
2050Sstevel@tonic-gate  * Caller's context
2060Sstevel@tonic-gate  *   Caller must be in a context suitable for KM_SLEEP allocations.
2070Sstevel@tonic-gate  */
2080Sstevel@tonic-gate kproject_t *
209*3247Sgjelinek project_hold_by_id(projid_t id, zone_t *zone, int flag)
2100Sstevel@tonic-gate {
2110Sstevel@tonic-gate 	kproject_t *spare_p;
2120Sstevel@tonic-gate 	kproject_t *p;
2130Sstevel@tonic-gate 	mod_hash_hndl_t hndl;
2140Sstevel@tonic-gate 	rctl_set_t *set;
2150Sstevel@tonic-gate 	rctl_alloc_gp_t *gp;
2160Sstevel@tonic-gate 	rctl_entity_p_t e;
2170Sstevel@tonic-gate 	struct project_zone pz;
218*3247Sgjelinek 	boolean_t create = B_FALSE;
219*3247Sgjelinek 	kstat_t *ksp;
2200Sstevel@tonic-gate 
2210Sstevel@tonic-gate 	pz.kpj_id = id;
222*3247Sgjelinek 	pz.kpj_zoneid = zone->zone_id;
2230Sstevel@tonic-gate 
2240Sstevel@tonic-gate 	if (flag == PROJECT_HOLD_FIND) {
2250Sstevel@tonic-gate 		mutex_enter(&project_hash_lock);
2260Sstevel@tonic-gate 
2270Sstevel@tonic-gate 		if (mod_hash_find(projects_hash, (mod_hash_key_t)&pz,
2280Sstevel@tonic-gate 		    (mod_hash_val_t)&p) == MH_ERR_NOTFOUND)
2290Sstevel@tonic-gate 			p = NULL;
2300Sstevel@tonic-gate 		else
2310Sstevel@tonic-gate 			p->kpj_count++;
2320Sstevel@tonic-gate 
2330Sstevel@tonic-gate 		mutex_exit(&project_hash_lock);
2340Sstevel@tonic-gate 		return (p);
2350Sstevel@tonic-gate 	}
2360Sstevel@tonic-gate 
2370Sstevel@tonic-gate 	ASSERT(flag == PROJECT_HOLD_INSERT);
2380Sstevel@tonic-gate 
2390Sstevel@tonic-gate 	spare_p = kmem_zalloc(sizeof (kproject_t), KM_SLEEP);
2400Sstevel@tonic-gate 	set = rctl_set_create();
2410Sstevel@tonic-gate 
2420Sstevel@tonic-gate 	gp = rctl_set_init_prealloc(RCENTITY_PROJECT);
2430Sstevel@tonic-gate 
2440Sstevel@tonic-gate 	(void) mod_hash_reserve(projects_hash, &hndl);
2450Sstevel@tonic-gate 
2460Sstevel@tonic-gate 	mutex_enter(&curproc->p_lock);
2470Sstevel@tonic-gate 	mutex_enter(&project_hash_lock);
2480Sstevel@tonic-gate 	if (mod_hash_find(projects_hash, (mod_hash_key_t)&pz,
2490Sstevel@tonic-gate 	    (mod_hash_val_t *)&p) == MH_ERR_NOTFOUND) {
250*3247Sgjelinek 
2510Sstevel@tonic-gate 		p = spare_p;
2520Sstevel@tonic-gate 		p->kpj_id = id;
253*3247Sgjelinek 		p->kpj_zoneid = zone->zone_id;
2540Sstevel@tonic-gate 		p->kpj_count = 0;
2550Sstevel@tonic-gate 		p->kpj_shares = 1;
2560Sstevel@tonic-gate 		p->kpj_nlwps = 0;
2570Sstevel@tonic-gate 		p->kpj_ntasks = 0;
2580Sstevel@tonic-gate 		p->kpj_nlwps_ctl = INT_MAX;
2590Sstevel@tonic-gate 		p->kpj_ntasks_ctl = INT_MAX;
2600Sstevel@tonic-gate 		project_data_init(&p->kpj_data);
2610Sstevel@tonic-gate 		e.rcep_p.proj = p;
2620Sstevel@tonic-gate 		e.rcep_t = RCENTITY_PROJECT;
2630Sstevel@tonic-gate 		p->kpj_rctls = rctl_set_init(RCENTITY_PROJECT, curproc, &e,
2640Sstevel@tonic-gate 		    set, gp);
2650Sstevel@tonic-gate 		mutex_exit(&curproc->p_lock);
2660Sstevel@tonic-gate 
2670Sstevel@tonic-gate 		if (mod_hash_insert_reserve(projects_hash, (mod_hash_key_t)p,
2680Sstevel@tonic-gate 		    (mod_hash_val_t)p, hndl))
2690Sstevel@tonic-gate 			panic("unable to insert project %d(%p)", id, (void *)p);
2700Sstevel@tonic-gate 
2710Sstevel@tonic-gate 		/*
2720Sstevel@tonic-gate 		 * Insert project into global project list.
2730Sstevel@tonic-gate 		 */
2740Sstevel@tonic-gate 		mutex_enter(&projects_list_lock);
275*3247Sgjelinek 		if (id != 0 || zone != &zone0) {
2760Sstevel@tonic-gate 			p->kpj_next = projects_list;
2770Sstevel@tonic-gate 			p->kpj_prev = projects_list->kpj_prev;
2780Sstevel@tonic-gate 			p->kpj_prev->kpj_next = p;
2790Sstevel@tonic-gate 			projects_list->kpj_prev = p;
2800Sstevel@tonic-gate 		} else {
2810Sstevel@tonic-gate 			/*
2820Sstevel@tonic-gate 			 * Special case: primordial hold on project 0.
2830Sstevel@tonic-gate 			 */
2840Sstevel@tonic-gate 			p->kpj_next = p;
2850Sstevel@tonic-gate 			p->kpj_prev = p;
2860Sstevel@tonic-gate 			projects_list = p;
2870Sstevel@tonic-gate 		}
2880Sstevel@tonic-gate 		mutex_exit(&projects_list_lock);
289*3247Sgjelinek 		create = B_TRUE;
2900Sstevel@tonic-gate 	} else {
2910Sstevel@tonic-gate 		mutex_exit(&curproc->p_lock);
2920Sstevel@tonic-gate 		mod_hash_cancel(projects_hash, &hndl);
2930Sstevel@tonic-gate 		kmem_free(spare_p, sizeof (kproject_t));
2940Sstevel@tonic-gate 		rctl_set_free(set);
2950Sstevel@tonic-gate 	}
2960Sstevel@tonic-gate 
2970Sstevel@tonic-gate 	rctl_prealloc_destroy(gp);
2980Sstevel@tonic-gate 	p->kpj_count++;
2990Sstevel@tonic-gate 	mutex_exit(&project_hash_lock);
3000Sstevel@tonic-gate 
301*3247Sgjelinek 	/*
302*3247Sgjelinek 	 * The kstat stores the project's zone name, as zoneid's may change
303*3247Sgjelinek 	 * across reboots.
304*3247Sgjelinek 	 */
305*3247Sgjelinek 	if (create == B_TRUE) {
306*3247Sgjelinek 		ksp = project_kstat_create(p, zone);
307*3247Sgjelinek 		mutex_enter(&project_hash_lock);
308*3247Sgjelinek 		ASSERT(p->kpj_data.kpd_lockedmem_kstat == NULL);
309*3247Sgjelinek 		p->kpj_data.kpd_lockedmem_kstat = ksp;
310*3247Sgjelinek 		mutex_exit(&project_hash_lock);
311*3247Sgjelinek 	}
3120Sstevel@tonic-gate 	return (p);
3130Sstevel@tonic-gate }
3140Sstevel@tonic-gate 
3150Sstevel@tonic-gate /*
3160Sstevel@tonic-gate  * void project_rele(kproject_t *)
3170Sstevel@tonic-gate  *
3180Sstevel@tonic-gate  * Overview
3190Sstevel@tonic-gate  *   Advertise that one external reference to this project is no longer needed.
3200Sstevel@tonic-gate  *
3210Sstevel@tonic-gate  * Return values
3220Sstevel@tonic-gate  *   None.
3230Sstevel@tonic-gate  *
3240Sstevel@tonic-gate  * Caller's context
3250Sstevel@tonic-gate  *   No restriction on context.
3260Sstevel@tonic-gate  */
3270Sstevel@tonic-gate void
3280Sstevel@tonic-gate project_rele(kproject_t *p)
3290Sstevel@tonic-gate {
3300Sstevel@tonic-gate 	mutex_enter(&project_hash_lock);
3310Sstevel@tonic-gate 	ASSERT(p->kpj_count != 0);
3320Sstevel@tonic-gate 	p->kpj_count--;
3330Sstevel@tonic-gate 	if (p->kpj_count == 0) {
3340Sstevel@tonic-gate 
3350Sstevel@tonic-gate 		/*
3360Sstevel@tonic-gate 		 * Remove project from global list.
3370Sstevel@tonic-gate 		 */
3380Sstevel@tonic-gate 		mutex_enter(&projects_list_lock);
3390Sstevel@tonic-gate 		p->kpj_next->kpj_prev = p->kpj_prev;
3400Sstevel@tonic-gate 		p->kpj_prev->kpj_next = p->kpj_next;
3410Sstevel@tonic-gate 		if (projects_list == p)
3420Sstevel@tonic-gate 			projects_list = p->kpj_next;
3430Sstevel@tonic-gate 		mutex_exit(&projects_list_lock);
3440Sstevel@tonic-gate 
3450Sstevel@tonic-gate 		rctl_set_free(p->kpj_rctls);
346*3247Sgjelinek 		project_kstat_delete(p);
3470Sstevel@tonic-gate 
3480Sstevel@tonic-gate 		if (mod_hash_destroy(projects_hash, (mod_hash_key_t)p))
3490Sstevel@tonic-gate 			panic("unable to delete project %d zone %d", p->kpj_id,
3500Sstevel@tonic-gate 			    p->kpj_zoneid);
3510Sstevel@tonic-gate 
3520Sstevel@tonic-gate 		}
3530Sstevel@tonic-gate 	mutex_exit(&project_hash_lock);
3540Sstevel@tonic-gate }
3550Sstevel@tonic-gate 
3560Sstevel@tonic-gate /*
3570Sstevel@tonic-gate  * int project_walk_all(zoneid_t, int (*)(kproject_t *, void *), void *)
3580Sstevel@tonic-gate  *
3590Sstevel@tonic-gate  * Overview
3600Sstevel@tonic-gate  *   Walk the project list for the given zoneid with a callback.
3610Sstevel@tonic-gate  *
3620Sstevel@tonic-gate  * Return values
3630Sstevel@tonic-gate  *   -1 for an invalid walk, number of projects visited otherwise.
3640Sstevel@tonic-gate  *
3650Sstevel@tonic-gate  * Caller's context
3660Sstevel@tonic-gate  *   projects_list_lock must not be held, as it is acquired by
3670Sstevel@tonic-gate  *   project_walk_all().  Accordingly, callbacks may not perform KM_SLEEP
3680Sstevel@tonic-gate  *   allocations.
3690Sstevel@tonic-gate  */
3700Sstevel@tonic-gate int
3710Sstevel@tonic-gate project_walk_all(zoneid_t zoneid, int (*cb)(kproject_t *, void *),
3720Sstevel@tonic-gate     void *walk_data)
3730Sstevel@tonic-gate {
3740Sstevel@tonic-gate 	int cnt = 0;
3750Sstevel@tonic-gate 	kproject_t *kp = proj0p;
3760Sstevel@tonic-gate 
3770Sstevel@tonic-gate 	mutex_enter(&projects_list_lock);
3780Sstevel@tonic-gate 	do {
3790Sstevel@tonic-gate 		if (zoneid != ALL_ZONES && kp->kpj_zoneid != zoneid)
3800Sstevel@tonic-gate 			continue;
3810Sstevel@tonic-gate 		if (cb(kp, walk_data) == -1) {
3820Sstevel@tonic-gate 			cnt = -1;
3830Sstevel@tonic-gate 			break;
3840Sstevel@tonic-gate 		} else {
3850Sstevel@tonic-gate 			cnt++;
3860Sstevel@tonic-gate 		}
3870Sstevel@tonic-gate 	} while ((kp = kp->kpj_next) != proj0p);
3880Sstevel@tonic-gate 	mutex_exit(&projects_list_lock);
3890Sstevel@tonic-gate 	return (cnt);
3900Sstevel@tonic-gate }
3910Sstevel@tonic-gate 
3920Sstevel@tonic-gate /*
3930Sstevel@tonic-gate  * projid_t curprojid(void)
3940Sstevel@tonic-gate  *
3950Sstevel@tonic-gate  * Overview
3960Sstevel@tonic-gate  *   Return project ID of the current thread
3970Sstevel@tonic-gate  *
3980Sstevel@tonic-gate  * Caller's context
3990Sstevel@tonic-gate  *   No restrictions.
4000Sstevel@tonic-gate  */
4010Sstevel@tonic-gate projid_t
4020Sstevel@tonic-gate curprojid()
4030Sstevel@tonic-gate {
4040Sstevel@tonic-gate 	return (ttoproj(curthread)->kpj_id);
4050Sstevel@tonic-gate }
4060Sstevel@tonic-gate 
4070Sstevel@tonic-gate /*
4080Sstevel@tonic-gate  * project.cpu-shares resource control support.
4090Sstevel@tonic-gate  */
4100Sstevel@tonic-gate /*ARGSUSED*/
4110Sstevel@tonic-gate static rctl_qty_t
4120Sstevel@tonic-gate project_cpu_shares_usage(rctl_t *rctl, struct proc *p)
4130Sstevel@tonic-gate {
4140Sstevel@tonic-gate 	ASSERT(MUTEX_HELD(&p->p_lock));
4150Sstevel@tonic-gate 	return (p->p_task->tk_proj->kpj_shares);
4160Sstevel@tonic-gate }
4170Sstevel@tonic-gate 
4180Sstevel@tonic-gate /*ARGSUSED*/
4190Sstevel@tonic-gate static int
4200Sstevel@tonic-gate project_cpu_shares_set(rctl_t *rctl, struct proc *p, rctl_entity_p_t *e,
4210Sstevel@tonic-gate     rctl_qty_t nv)
4220Sstevel@tonic-gate {
4230Sstevel@tonic-gate 	ASSERT(MUTEX_HELD(&p->p_lock));
4240Sstevel@tonic-gate 	ASSERT(e->rcep_t == RCENTITY_PROJECT);
4250Sstevel@tonic-gate 	if (e->rcep_p.proj == NULL)
4260Sstevel@tonic-gate 		return (0);
4270Sstevel@tonic-gate 
4280Sstevel@tonic-gate 	e->rcep_p.proj->kpj_shares = nv;
4290Sstevel@tonic-gate 
4300Sstevel@tonic-gate 	return (0);
4310Sstevel@tonic-gate }
4320Sstevel@tonic-gate 
4330Sstevel@tonic-gate 
4340Sstevel@tonic-gate static rctl_ops_t project_cpu_shares_ops = {
4350Sstevel@tonic-gate 	rcop_no_action,
4360Sstevel@tonic-gate 	project_cpu_shares_usage,
4370Sstevel@tonic-gate 	project_cpu_shares_set,
4380Sstevel@tonic-gate 	rcop_no_test
4390Sstevel@tonic-gate };
4400Sstevel@tonic-gate 
4410Sstevel@tonic-gate /*ARGSUSED*/
4420Sstevel@tonic-gate static rctl_qty_t
4430Sstevel@tonic-gate project_lwps_usage(rctl_t *r, proc_t *p)
4440Sstevel@tonic-gate {
4450Sstevel@tonic-gate 	kproject_t *pj;
4460Sstevel@tonic-gate 	rctl_qty_t nlwps;
4470Sstevel@tonic-gate 
4480Sstevel@tonic-gate 	ASSERT(MUTEX_HELD(&p->p_lock));
4490Sstevel@tonic-gate 	pj = p->p_task->tk_proj;
4500Sstevel@tonic-gate 	mutex_enter(&p->p_zone->zone_nlwps_lock);
4510Sstevel@tonic-gate 	nlwps = pj->kpj_nlwps;
4520Sstevel@tonic-gate 	mutex_exit(&p->p_zone->zone_nlwps_lock);
4530Sstevel@tonic-gate 
4540Sstevel@tonic-gate 	return (nlwps);
4550Sstevel@tonic-gate }
4560Sstevel@tonic-gate 
4570Sstevel@tonic-gate /*ARGSUSED*/
4580Sstevel@tonic-gate static int
4590Sstevel@tonic-gate project_lwps_test(rctl_t *r, proc_t *p, rctl_entity_p_t *e, rctl_val_t *rcntl,
4600Sstevel@tonic-gate     rctl_qty_t incr, uint_t flags)
4610Sstevel@tonic-gate {
4620Sstevel@tonic-gate 	rctl_qty_t nlwps;
4630Sstevel@tonic-gate 
4640Sstevel@tonic-gate 	ASSERT(MUTEX_HELD(&p->p_lock));
4652768Ssl108498 	ASSERT(MUTEX_HELD(&p->p_zone->zone_nlwps_lock));
4660Sstevel@tonic-gate 	ASSERT(e->rcep_t == RCENTITY_PROJECT);
4670Sstevel@tonic-gate 	if (e->rcep_p.proj == NULL)
4680Sstevel@tonic-gate 		return (0);
4690Sstevel@tonic-gate 
4700Sstevel@tonic-gate 	nlwps = e->rcep_p.proj->kpj_nlwps;
4710Sstevel@tonic-gate 	if (nlwps + incr > rcntl->rcv_value)
4720Sstevel@tonic-gate 		return (1);
4730Sstevel@tonic-gate 
4740Sstevel@tonic-gate 	return (0);
4750Sstevel@tonic-gate }
4760Sstevel@tonic-gate 
4770Sstevel@tonic-gate /*ARGSUSED*/
4780Sstevel@tonic-gate static int
4790Sstevel@tonic-gate project_lwps_set(rctl_t *rctl, struct proc *p, rctl_entity_p_t *e,
4800Sstevel@tonic-gate     rctl_qty_t nv) {
4810Sstevel@tonic-gate 
4820Sstevel@tonic-gate 	ASSERT(MUTEX_HELD(&p->p_lock));
4830Sstevel@tonic-gate 	ASSERT(e->rcep_t == RCENTITY_PROJECT);
4840Sstevel@tonic-gate 	if (e->rcep_p.proj == NULL)
4850Sstevel@tonic-gate 		return (0);
4860Sstevel@tonic-gate 
4870Sstevel@tonic-gate 	e->rcep_p.proj->kpj_nlwps_ctl = nv;
4880Sstevel@tonic-gate 	return (0);
4890Sstevel@tonic-gate }
4900Sstevel@tonic-gate 
4910Sstevel@tonic-gate static rctl_ops_t project_lwps_ops = {
4920Sstevel@tonic-gate 	rcop_no_action,
4930Sstevel@tonic-gate 	project_lwps_usage,
4940Sstevel@tonic-gate 	project_lwps_set,
4950Sstevel@tonic-gate 	project_lwps_test,
4960Sstevel@tonic-gate };
4970Sstevel@tonic-gate 
4980Sstevel@tonic-gate /*ARGSUSED*/
4990Sstevel@tonic-gate static rctl_qty_t
5000Sstevel@tonic-gate project_ntasks_usage(rctl_t *r, proc_t *p)
5010Sstevel@tonic-gate {
5020Sstevel@tonic-gate 	kproject_t *pj;
5030Sstevel@tonic-gate 	rctl_qty_t ntasks;
5040Sstevel@tonic-gate 
5050Sstevel@tonic-gate 	ASSERT(MUTEX_HELD(&p->p_lock));
5060Sstevel@tonic-gate 	pj = p->p_task->tk_proj;
5070Sstevel@tonic-gate 	mutex_enter(&p->p_zone->zone_nlwps_lock);
5080Sstevel@tonic-gate 	ntasks = pj->kpj_ntasks;
5090Sstevel@tonic-gate 	mutex_exit(&p->p_zone->zone_nlwps_lock);
5100Sstevel@tonic-gate 
5110Sstevel@tonic-gate 	return (ntasks);
5120Sstevel@tonic-gate }
5130Sstevel@tonic-gate 
5140Sstevel@tonic-gate /*ARGSUSED*/
5150Sstevel@tonic-gate static int
5160Sstevel@tonic-gate project_ntasks_test(rctl_t *r, proc_t *p, rctl_entity_p_t *e, rctl_val_t *rcntl,
5170Sstevel@tonic-gate     rctl_qty_t incr, uint_t flags)
5180Sstevel@tonic-gate {
5190Sstevel@tonic-gate 	rctl_qty_t ntasks;
5200Sstevel@tonic-gate 
5210Sstevel@tonic-gate 	ASSERT(MUTEX_HELD(&p->p_lock));
5220Sstevel@tonic-gate 	ASSERT(e->rcep_t == RCENTITY_PROJECT);
5230Sstevel@tonic-gate 	ntasks = e->rcep_p.proj->kpj_ntasks;
5240Sstevel@tonic-gate 	if (ntasks + incr > rcntl->rcv_value)
5250Sstevel@tonic-gate 		return (1);
5260Sstevel@tonic-gate 
5270Sstevel@tonic-gate 	return (0);
5280Sstevel@tonic-gate }
5290Sstevel@tonic-gate 
5300Sstevel@tonic-gate /*ARGSUSED*/
5310Sstevel@tonic-gate static int
5320Sstevel@tonic-gate project_ntasks_set(rctl_t *rctl, struct proc *p, rctl_entity_p_t *e,
5330Sstevel@tonic-gate     rctl_qty_t nv) {
5340Sstevel@tonic-gate 
5350Sstevel@tonic-gate 	ASSERT(MUTEX_HELD(&p->p_lock));
5360Sstevel@tonic-gate 	ASSERT(e->rcep_t == RCENTITY_PROJECT);
5370Sstevel@tonic-gate 	e->rcep_p.proj->kpj_ntasks_ctl = nv;
5380Sstevel@tonic-gate 	return (0);
5390Sstevel@tonic-gate }
5400Sstevel@tonic-gate 
5410Sstevel@tonic-gate static rctl_ops_t project_tasks_ops = {
5420Sstevel@tonic-gate 	rcop_no_action,
5430Sstevel@tonic-gate 	project_ntasks_usage,
5440Sstevel@tonic-gate 	project_ntasks_set,
5450Sstevel@tonic-gate 	project_ntasks_test,
5460Sstevel@tonic-gate };
5470Sstevel@tonic-gate 
5480Sstevel@tonic-gate /*
5490Sstevel@tonic-gate  * project.max-shm-memory resource control support.
5500Sstevel@tonic-gate  */
5510Sstevel@tonic-gate 
5520Sstevel@tonic-gate /*ARGSUSED*/
5530Sstevel@tonic-gate static int
5540Sstevel@tonic-gate project_shmmax_test(struct rctl *rctl, struct proc *p, rctl_entity_p_t *e,
5550Sstevel@tonic-gate     rctl_val_t *rval, rctl_qty_t inc, uint_t flags)
5560Sstevel@tonic-gate {
5570Sstevel@tonic-gate 	rctl_qty_t v;
5580Sstevel@tonic-gate 	ASSERT(MUTEX_HELD(&p->p_lock));
5590Sstevel@tonic-gate 	ASSERT(e->rcep_t == RCENTITY_PROJECT);
5600Sstevel@tonic-gate 	v = e->rcep_p.proj->kpj_data.kpd_shmmax + inc;
5610Sstevel@tonic-gate 	if (v > rval->rcv_value)
5620Sstevel@tonic-gate 		return (1);
5630Sstevel@tonic-gate 
5640Sstevel@tonic-gate 	return (0);
5650Sstevel@tonic-gate }
5660Sstevel@tonic-gate 
5670Sstevel@tonic-gate static rctl_ops_t project_shmmax_ops = {
5680Sstevel@tonic-gate 	rcop_no_action,
5690Sstevel@tonic-gate 	rcop_no_usage,
5700Sstevel@tonic-gate 	rcop_no_set,
5710Sstevel@tonic-gate 	project_shmmax_test
5720Sstevel@tonic-gate };
5730Sstevel@tonic-gate 
5740Sstevel@tonic-gate /*
5750Sstevel@tonic-gate  * project.max-shm-ids resource control support.
5760Sstevel@tonic-gate  */
5770Sstevel@tonic-gate 
5780Sstevel@tonic-gate /*ARGSUSED*/
5790Sstevel@tonic-gate static int
5800Sstevel@tonic-gate project_shmmni_test(struct rctl *rctl, struct proc *p, rctl_entity_p_t *e,
5810Sstevel@tonic-gate     rctl_val_t *rval, rctl_qty_t inc, uint_t flags)
5820Sstevel@tonic-gate {
5830Sstevel@tonic-gate 	rctl_qty_t v;
5840Sstevel@tonic-gate 	ASSERT(MUTEX_HELD(&p->p_lock));
5850Sstevel@tonic-gate 	ASSERT(e->rcep_t == RCENTITY_PROJECT);
5862677Sml93401 	v = e->rcep_p.proj->kpj_data.kpd_ipc.ipcq_shmmni + inc;
5870Sstevel@tonic-gate 	if (v > rval->rcv_value)
5880Sstevel@tonic-gate 		return (1);
5890Sstevel@tonic-gate 
5900Sstevel@tonic-gate 	return (0);
5910Sstevel@tonic-gate }
5920Sstevel@tonic-gate 
5930Sstevel@tonic-gate static rctl_ops_t project_shmmni_ops = {
5940Sstevel@tonic-gate 	rcop_no_action,
5950Sstevel@tonic-gate 	rcop_no_usage,
5960Sstevel@tonic-gate 	rcop_no_set,
5970Sstevel@tonic-gate 	project_shmmni_test
5980Sstevel@tonic-gate };
5990Sstevel@tonic-gate 
6000Sstevel@tonic-gate /*
6010Sstevel@tonic-gate  * project.max-sem-ids resource control support.
6020Sstevel@tonic-gate  */
6030Sstevel@tonic-gate 
6040Sstevel@tonic-gate /*ARGSUSED*/
6050Sstevel@tonic-gate static int
6060Sstevel@tonic-gate project_semmni_test(struct rctl *rctl, struct proc *p, rctl_entity_p_t *e,
6070Sstevel@tonic-gate     rctl_val_t *rval, rctl_qty_t inc, uint_t flags)
6080Sstevel@tonic-gate {
6090Sstevel@tonic-gate 	rctl_qty_t v;
6100Sstevel@tonic-gate 	ASSERT(MUTEX_HELD(&p->p_lock));
6110Sstevel@tonic-gate 	ASSERT(e->rcep_t == RCENTITY_PROJECT);
6122677Sml93401 	v = e->rcep_p.proj->kpj_data.kpd_ipc.ipcq_semmni + inc;
6130Sstevel@tonic-gate 	if (v > rval->rcv_value)
6140Sstevel@tonic-gate 		return (1);
6150Sstevel@tonic-gate 
6160Sstevel@tonic-gate 	return (0);
6170Sstevel@tonic-gate }
6180Sstevel@tonic-gate 
6190Sstevel@tonic-gate static rctl_ops_t project_semmni_ops = {
6200Sstevel@tonic-gate 	rcop_no_action,
6210Sstevel@tonic-gate 	rcop_no_usage,
6220Sstevel@tonic-gate 	rcop_no_set,
6230Sstevel@tonic-gate 	project_semmni_test
6240Sstevel@tonic-gate };
6250Sstevel@tonic-gate 
6260Sstevel@tonic-gate /*
6270Sstevel@tonic-gate  * project.max-msg-ids resource control support.
6280Sstevel@tonic-gate  */
6290Sstevel@tonic-gate 
6300Sstevel@tonic-gate /*ARGSUSED*/
6310Sstevel@tonic-gate static int
6320Sstevel@tonic-gate project_msgmni_test(struct rctl *rctl, struct proc *p, rctl_entity_p_t *e,
6330Sstevel@tonic-gate     rctl_val_t *rval, rctl_qty_t inc, uint_t flags)
6340Sstevel@tonic-gate {
6350Sstevel@tonic-gate 	rctl_qty_t v;
6360Sstevel@tonic-gate 	ASSERT(MUTEX_HELD(&p->p_lock));
6370Sstevel@tonic-gate 	ASSERT(e->rcep_t == RCENTITY_PROJECT);
6382677Sml93401 	v = e->rcep_p.proj->kpj_data.kpd_ipc.ipcq_msgmni + inc;
6390Sstevel@tonic-gate 	if (v > rval->rcv_value)
6400Sstevel@tonic-gate 		return (1);
6410Sstevel@tonic-gate 
6420Sstevel@tonic-gate 	return (0);
6430Sstevel@tonic-gate }
6440Sstevel@tonic-gate 
6450Sstevel@tonic-gate static rctl_ops_t project_msgmni_ops = {
6460Sstevel@tonic-gate 	rcop_no_action,
6470Sstevel@tonic-gate 	rcop_no_usage,
6480Sstevel@tonic-gate 	rcop_no_set,
6490Sstevel@tonic-gate 	project_msgmni_test
6500Sstevel@tonic-gate };
6510Sstevel@tonic-gate 
6522768Ssl108498 /*ARGSUSED*/
6532768Ssl108498 static rctl_qty_t
6542768Ssl108498 project_locked_mem_usage(rctl_t *rctl, struct proc *p)
6552768Ssl108498 {
6562768Ssl108498 	rctl_qty_t q;
6572768Ssl108498 	ASSERT(MUTEX_HELD(&p->p_lock));
658*3247Sgjelinek 	mutex_enter(&p->p_zone->zone_mem_lock);
6592768Ssl108498 	q = p->p_task->tk_proj->kpj_data.kpd_locked_mem;
660*3247Sgjelinek 	mutex_exit(&p->p_zone->zone_mem_lock);
6612768Ssl108498 	return (q);
6622768Ssl108498 }
6630Sstevel@tonic-gate 
6640Sstevel@tonic-gate /*ARGSUSED*/
6650Sstevel@tonic-gate static int
6662768Ssl108498 project_locked_mem_test(struct rctl *rctl, struct proc *p, rctl_entity_p_t *e,
6670Sstevel@tonic-gate     rctl_val_t *rval, rctl_qty_t inc, uint_t flags)
6680Sstevel@tonic-gate {
6692768Ssl108498 	rctl_qty_t q;
6700Sstevel@tonic-gate 	ASSERT(MUTEX_HELD(&p->p_lock));
671*3247Sgjelinek 	ASSERT(MUTEX_HELD(&p->p_zone->zone_mem_lock));
6722768Ssl108498 	q = p->p_task->tk_proj->kpj_data.kpd_locked_mem;
6732768Ssl108498 	if (q + inc > rval->rcv_value)
6740Sstevel@tonic-gate 		return (1);
6750Sstevel@tonic-gate 	return (0);
6760Sstevel@tonic-gate }
6770Sstevel@tonic-gate 
6782768Ssl108498 /*ARGSUSED*/
6792768Ssl108498 static int
6802768Ssl108498 project_locked_mem_set(rctl_t *rctl, struct proc *p, rctl_entity_p_t *e,
6812768Ssl108498     rctl_qty_t nv) {
6822768Ssl108498 
6832768Ssl108498 	ASSERT(MUTEX_HELD(&p->p_lock));
6842768Ssl108498 	ASSERT(e->rcep_t == RCENTITY_PROJECT);
6852768Ssl108498 	if (e->rcep_p.proj == NULL)
6862768Ssl108498 		return (0);
6872768Ssl108498 
6882768Ssl108498 	e->rcep_p.proj->kpj_data.kpd_locked_mem_ctl = nv;
6892768Ssl108498 	return (0);
6902768Ssl108498 }
6912768Ssl108498 
6922768Ssl108498 static rctl_ops_t project_locked_mem_ops = {
6930Sstevel@tonic-gate 	rcop_no_action,
6942768Ssl108498 	project_locked_mem_usage,
6952768Ssl108498 	project_locked_mem_set,
6962768Ssl108498 	project_locked_mem_test
6970Sstevel@tonic-gate };
6980Sstevel@tonic-gate 
6990Sstevel@tonic-gate /*
7000Sstevel@tonic-gate  * project.max-contracts resource control support.
7010Sstevel@tonic-gate  */
7020Sstevel@tonic-gate 
7030Sstevel@tonic-gate /*ARGSUSED*/
7040Sstevel@tonic-gate static int
7050Sstevel@tonic-gate project_contract_test(struct rctl *rctl, struct proc *p, rctl_entity_p_t *e,
7060Sstevel@tonic-gate     rctl_val_t *rval, rctl_qty_t inc, uint_t flags)
7070Sstevel@tonic-gate {
7080Sstevel@tonic-gate 	rctl_qty_t v;
7090Sstevel@tonic-gate 
7100Sstevel@tonic-gate 	ASSERT(MUTEX_HELD(&p->p_lock));
7110Sstevel@tonic-gate 	ASSERT(e->rcep_t == RCENTITY_PROJECT);
7120Sstevel@tonic-gate 
7130Sstevel@tonic-gate 	v = e->rcep_p.proj->kpj_data.kpd_contract + inc;
7140Sstevel@tonic-gate 
7150Sstevel@tonic-gate 	if ((p->p_task != NULL) && (p->p_task->tk_proj) != NULL &&
7160Sstevel@tonic-gate 	    (v > rval->rcv_value))
7170Sstevel@tonic-gate 		return (1);
7180Sstevel@tonic-gate 
7190Sstevel@tonic-gate 	return (0);
7200Sstevel@tonic-gate }
7210Sstevel@tonic-gate 
7220Sstevel@tonic-gate static rctl_ops_t project_contract_ops = {
7230Sstevel@tonic-gate 	rcop_no_action,
7240Sstevel@tonic-gate 	rcop_no_usage,
7250Sstevel@tonic-gate 	rcop_no_set,
7260Sstevel@tonic-gate 	project_contract_test
7270Sstevel@tonic-gate };
7280Sstevel@tonic-gate 
7290Sstevel@tonic-gate /*ARGSUSED*/
7300Sstevel@tonic-gate static int
7310Sstevel@tonic-gate project_crypto_test(rctl_t *r, proc_t *p, rctl_entity_p_t *e,
7320Sstevel@tonic-gate     rctl_val_t *rval, rctl_qty_t incr, uint_t flags)
7330Sstevel@tonic-gate {
7340Sstevel@tonic-gate 	rctl_qty_t v;
7350Sstevel@tonic-gate 	ASSERT(MUTEX_HELD(&p->p_lock));
7360Sstevel@tonic-gate 	ASSERT(e->rcep_t == RCENTITY_PROJECT);
7370Sstevel@tonic-gate 	v = e->rcep_p.proj->kpj_data.kpd_crypto_mem + incr;
7380Sstevel@tonic-gate 	if (v > rval->rcv_value)
7390Sstevel@tonic-gate 		return (1);
7400Sstevel@tonic-gate 	return (0);
7410Sstevel@tonic-gate }
7420Sstevel@tonic-gate 
7430Sstevel@tonic-gate static rctl_ops_t project_crypto_mem_ops = {
7440Sstevel@tonic-gate 	rcop_no_action,
7450Sstevel@tonic-gate 	rcop_no_usage,
7460Sstevel@tonic-gate 	rcop_no_set,
7470Sstevel@tonic-gate 	project_crypto_test
7480Sstevel@tonic-gate };
7490Sstevel@tonic-gate 
7500Sstevel@tonic-gate /*
7510Sstevel@tonic-gate  * void project_init(void)
7520Sstevel@tonic-gate  *
7530Sstevel@tonic-gate  * Overview
7540Sstevel@tonic-gate  *   Initialize the project subsystem, including the primordial project 0 entry.
7550Sstevel@tonic-gate  *   Register generic project resource controls, if any.
7560Sstevel@tonic-gate  *
7570Sstevel@tonic-gate  * Return values
7580Sstevel@tonic-gate  *   None.
7590Sstevel@tonic-gate  *
7600Sstevel@tonic-gate  * Caller's context
7610Sstevel@tonic-gate  *   Safe for KM_SLEEP allocations.
7620Sstevel@tonic-gate  */
7630Sstevel@tonic-gate void
7640Sstevel@tonic-gate project_init(void)
7650Sstevel@tonic-gate {
7660Sstevel@tonic-gate 	rctl_qty_t shmmni, shmmax, qty;
7670Sstevel@tonic-gate 	boolean_t check;
7680Sstevel@tonic-gate 
7690Sstevel@tonic-gate 	projects_hash = mod_hash_create_extended("projects_hash",
7700Sstevel@tonic-gate 	    project_hash_size, mod_hash_null_keydtor, project_hash_val_dtor,
7710Sstevel@tonic-gate 	    project_hash_by_id,
7720Sstevel@tonic-gate 	    (void *)(uintptr_t)mod_hash_iddata_gen(project_hash_size),
7730Sstevel@tonic-gate 	    project_hash_key_cmp, KM_SLEEP);
7740Sstevel@tonic-gate 
7750Sstevel@tonic-gate 	rc_project_cpu_shares = rctl_register("project.cpu-shares",
7760Sstevel@tonic-gate 	    RCENTITY_PROJECT, RCTL_GLOBAL_SIGNAL_NEVER |
7770Sstevel@tonic-gate 	    RCTL_GLOBAL_DENY_NEVER | RCTL_GLOBAL_NOBASIC |
7781996Sml93401 	    RCTL_GLOBAL_COUNT | RCTL_GLOBAL_SYSLOG_NEVER,
7791996Sml93401 	    FSS_MAXSHARES, FSS_MAXSHARES,
7800Sstevel@tonic-gate 	    &project_cpu_shares_ops);
7810Sstevel@tonic-gate 	rctl_add_default_limit("project.cpu-shares", 1, RCPRIV_PRIVILEGED,
7820Sstevel@tonic-gate 	    RCTL_LOCAL_NOACTION);
7830Sstevel@tonic-gate 
7840Sstevel@tonic-gate 	rc_project_nlwps = rctl_register("project.max-lwps", RCENTITY_PROJECT,
7850Sstevel@tonic-gate 	    RCTL_GLOBAL_NOACTION | RCTL_GLOBAL_NOBASIC | RCTL_GLOBAL_COUNT,
7860Sstevel@tonic-gate 	    INT_MAX, INT_MAX, &project_lwps_ops);
7870Sstevel@tonic-gate 
7880Sstevel@tonic-gate 	rc_project_ntasks = rctl_register("project.max-tasks", RCENTITY_PROJECT,
7890Sstevel@tonic-gate 	    RCTL_GLOBAL_NOACTION | RCTL_GLOBAL_NOBASIC | RCTL_GLOBAL_COUNT,
7900Sstevel@tonic-gate 	    INT_MAX, INT_MAX, &project_tasks_ops);
7910Sstevel@tonic-gate 
7920Sstevel@tonic-gate 	/*
7930Sstevel@tonic-gate 	 * This rctl handle is used by /dev/crypto. It is here rather than
7940Sstevel@tonic-gate 	 * in misc/kcf or the drv/crypto module because resource controls
7950Sstevel@tonic-gate 	 * currently don't allow modules to be unloaded, and the control
7960Sstevel@tonic-gate 	 * must be registered before init starts.
7970Sstevel@tonic-gate 	 */
7980Sstevel@tonic-gate 	rc_project_crypto_mem = rctl_register("project.max-crypto-memory",
7990Sstevel@tonic-gate 	    RCENTITY_PROJECT, RCTL_GLOBAL_DENY_ALWAYS | RCTL_GLOBAL_NOBASIC |
8000Sstevel@tonic-gate 	    RCTL_GLOBAL_BYTES, UINT64_MAX, UINT64_MAX,
8010Sstevel@tonic-gate 	    &project_crypto_mem_ops);
8020Sstevel@tonic-gate 
8030Sstevel@tonic-gate 	/*
8040Sstevel@tonic-gate 	 * Default to a quarter of the machine's memory
8050Sstevel@tonic-gate 	 */
8060Sstevel@tonic-gate 	qty = availrmem_initial << (PAGESHIFT - 2);
8070Sstevel@tonic-gate 	rctl_add_default_limit("project.max-crypto-memory", qty,
8080Sstevel@tonic-gate 	    RCPRIV_PRIVILEGED, RCTL_LOCAL_DENY);
8090Sstevel@tonic-gate 
8100Sstevel@tonic-gate 	/*
8110Sstevel@tonic-gate 	 * System V IPC resource controls
8120Sstevel@tonic-gate 	 */
8130Sstevel@tonic-gate 	rc_project_semmni = rctl_register("project.max-sem-ids",
8140Sstevel@tonic-gate 	    RCENTITY_PROJECT, RCTL_GLOBAL_DENY_ALWAYS | RCTL_GLOBAL_NOBASIC |
8150Sstevel@tonic-gate 	    RCTL_GLOBAL_COUNT, IPC_IDS_MAX, IPC_IDS_MAX, &project_semmni_ops);
8160Sstevel@tonic-gate 	rctl_add_legacy_limit("project.max-sem-ids", "semsys",
8170Sstevel@tonic-gate 	    "seminfo_semmni", 128, IPC_IDS_MAX);
8180Sstevel@tonic-gate 
8190Sstevel@tonic-gate 	rc_project_msgmni = rctl_register("project.max-msg-ids",
8200Sstevel@tonic-gate 	    RCENTITY_PROJECT, RCTL_GLOBAL_DENY_ALWAYS | RCTL_GLOBAL_NOBASIC |
8210Sstevel@tonic-gate 	    RCTL_GLOBAL_COUNT, IPC_IDS_MAX, IPC_IDS_MAX, &project_msgmni_ops);
8220Sstevel@tonic-gate 	rctl_add_legacy_limit("project.max-msg-ids", "msgsys",
8230Sstevel@tonic-gate 	    "msginfo_msgmni", 128, IPC_IDS_MAX);
8240Sstevel@tonic-gate 
8250Sstevel@tonic-gate 	rc_project_shmmni = rctl_register("project.max-shm-ids",
8260Sstevel@tonic-gate 	    RCENTITY_PROJECT, RCTL_GLOBAL_DENY_ALWAYS | RCTL_GLOBAL_NOBASIC |
8270Sstevel@tonic-gate 	    RCTL_GLOBAL_COUNT, IPC_IDS_MAX, IPC_IDS_MAX, &project_shmmni_ops);
8280Sstevel@tonic-gate 	rctl_add_legacy_limit("project.max-shm-ids", "shmsys",
8290Sstevel@tonic-gate 	    "shminfo_shmmni", 128, IPC_IDS_MAX);
8300Sstevel@tonic-gate 
8310Sstevel@tonic-gate 	rc_project_shmmax = rctl_register("project.max-shm-memory",
8320Sstevel@tonic-gate 	    RCENTITY_PROJECT, RCTL_GLOBAL_DENY_ALWAYS | RCTL_GLOBAL_NOBASIC |
8330Sstevel@tonic-gate 	    RCTL_GLOBAL_BYTES, UINT64_MAX, UINT64_MAX, &project_shmmax_ops);
8340Sstevel@tonic-gate 
8350Sstevel@tonic-gate 	check = B_FALSE;
8360Sstevel@tonic-gate 	if (!mod_sysvar("shmsys", "shminfo_shmmni", &shmmni))
8370Sstevel@tonic-gate 		shmmni = 100;
8380Sstevel@tonic-gate 	else
8390Sstevel@tonic-gate 		check = B_TRUE;
8400Sstevel@tonic-gate 	if (!mod_sysvar("shmsys", "shminfo_shmmax", &shmmax))
8410Sstevel@tonic-gate 		shmmax = 0x800000;
8420Sstevel@tonic-gate 	else
8430Sstevel@tonic-gate 		check = B_TRUE;
8440Sstevel@tonic-gate 
8450Sstevel@tonic-gate 	/*
8460Sstevel@tonic-gate 	 * Default to a quarter of the machine's memory
8470Sstevel@tonic-gate 	 */
8480Sstevel@tonic-gate 	qty = availrmem_initial << (PAGESHIFT - 2);
8490Sstevel@tonic-gate 	if (check) {
8500Sstevel@tonic-gate 		if ((shmmax > 0) && (UINT64_MAX / shmmax <= shmmni))
8510Sstevel@tonic-gate 			qty = UINT64_MAX;
8520Sstevel@tonic-gate 		else if (shmmni * shmmax > qty)
8530Sstevel@tonic-gate 			qty = shmmni * shmmax;
8540Sstevel@tonic-gate 	}
8550Sstevel@tonic-gate 	rctl_add_default_limit("project.max-shm-memory", qty,
8560Sstevel@tonic-gate 	    RCPRIV_PRIVILEGED, RCTL_LOCAL_DENY);
8570Sstevel@tonic-gate 
8580Sstevel@tonic-gate 	/*
8590Sstevel@tonic-gate 	 * Event Ports resource controls
8600Sstevel@tonic-gate 	 */
8610Sstevel@tonic-gate 
8620Sstevel@tonic-gate 	rc_project_portids = rctl_register("project.max-port-ids",
8630Sstevel@tonic-gate 	    RCENTITY_PROJECT, RCTL_GLOBAL_DENY_ALWAYS | RCTL_GLOBAL_NOBASIC |
8640Sstevel@tonic-gate 	    RCTL_GLOBAL_COUNT, PORT_MAX_PORTS, PORT_MAX_PORTS,
8650Sstevel@tonic-gate 	    &rctl_absolute_ops);
8660Sstevel@tonic-gate 	rctl_add_default_limit("project.max-port-ids", PORT_DEFAULT_PORTS,
8670Sstevel@tonic-gate 	    RCPRIV_PRIVILEGED, RCTL_LOCAL_DENY);
8680Sstevel@tonic-gate 
8690Sstevel@tonic-gate 	/*
8700Sstevel@tonic-gate 	 * Resource control for locked memory
8710Sstevel@tonic-gate 	 */
8722768Ssl108498 	rc_project_locked_mem = rctl_register(
8732768Ssl108498 	    "project.max-locked-memory", RCENTITY_PROJECT,
8740Sstevel@tonic-gate 	    RCTL_GLOBAL_DENY_ALWAYS | RCTL_GLOBAL_NOBASIC | RCTL_GLOBAL_BYTES,
8752768Ssl108498 	    UINT64_MAX, UINT64_MAX, &project_locked_mem_ops);
8760Sstevel@tonic-gate 
8772768Ssl108498 	/* Default value equals that of max-shm-memory. */
8782768Ssl108498 	rctl_add_default_limit("project.max-locked-memory", qty,
8790Sstevel@tonic-gate 	    RCPRIV_PRIVILEGED, RCTL_LOCAL_DENY);
8800Sstevel@tonic-gate 
8810Sstevel@tonic-gate 	/*
8820Sstevel@tonic-gate 	 * Per project limit on contracts.
8830Sstevel@tonic-gate 	 */
8840Sstevel@tonic-gate 	rc_project_contract = rctl_register("project.max-contracts",
8850Sstevel@tonic-gate 	    RCENTITY_PROJECT, RCTL_GLOBAL_DENY_ALWAYS | RCTL_GLOBAL_COUNT,
8860Sstevel@tonic-gate 	    INT_MAX, INT_MAX, &project_contract_ops);
8870Sstevel@tonic-gate 	rctl_add_default_limit("project.max-contracts", 10000,
8880Sstevel@tonic-gate 	    RCPRIV_PRIVILEGED, RCTL_LOCAL_DENY);
8890Sstevel@tonic-gate 
890*3247Sgjelinek 	t0.t_proj = proj0p = project_hold_by_id(0, &zone0,
8910Sstevel@tonic-gate 	    PROJECT_HOLD_INSERT);
8920Sstevel@tonic-gate 
8930Sstevel@tonic-gate 	mutex_enter(&p0.p_lock);
8940Sstevel@tonic-gate 	proj0p->kpj_nlwps = p0.p_lwpcnt;
8950Sstevel@tonic-gate 	mutex_exit(&p0.p_lock);
8960Sstevel@tonic-gate 	proj0p->kpj_ntasks = 1;
8970Sstevel@tonic-gate }
898*3247Sgjelinek 
899*3247Sgjelinek static int
900*3247Sgjelinek project_lockedmem_kstat_update(kstat_t *ksp, int rw)
901*3247Sgjelinek {
902*3247Sgjelinek 	kproject_t *pj = ksp->ks_private;
903*3247Sgjelinek 	kproject_kstat_t *kpk = ksp->ks_data;
904*3247Sgjelinek 
905*3247Sgjelinek 	if (rw == KSTAT_WRITE)
906*3247Sgjelinek 		return (EACCES);
907*3247Sgjelinek 
908*3247Sgjelinek 	kpk->kpk_usage.value.ui64 = pj->kpj_data.kpd_locked_mem;
909*3247Sgjelinek 	kpk->kpk_value.value.ui64 = pj->kpj_data.kpd_locked_mem_ctl;
910*3247Sgjelinek 	return (0);
911*3247Sgjelinek }
912*3247Sgjelinek 
913*3247Sgjelinek static kstat_t *
914*3247Sgjelinek project_kstat_create(kproject_t *pj, zone_t *zone)
915*3247Sgjelinek {
916*3247Sgjelinek 	kstat_t *ksp;
917*3247Sgjelinek 	kproject_kstat_t *kpk;
918*3247Sgjelinek 	char *zonename = zone->zone_name;
919*3247Sgjelinek 
920*3247Sgjelinek 	ksp = rctl_kstat_create_project(pj, "lockedmem", KSTAT_TYPE_NAMED,
921*3247Sgjelinek 	    sizeof (kproject_kstat_t) / sizeof (kstat_named_t),
922*3247Sgjelinek 	    KSTAT_FLAG_VIRTUAL);
923*3247Sgjelinek 
924*3247Sgjelinek 	if (ksp == NULL)
925*3247Sgjelinek 		return (NULL);
926*3247Sgjelinek 
927*3247Sgjelinek 	kpk = ksp->ks_data = kmem_alloc(sizeof (kproject_kstat_t), KM_SLEEP);
928*3247Sgjelinek 	ksp->ks_data_size += strlen(zonename) + 1;
929*3247Sgjelinek 	kstat_named_init(&kpk->kpk_zonename, "zonename", KSTAT_DATA_STRING);
930*3247Sgjelinek 	kstat_named_setstr(&kpk->kpk_zonename, zonename);
931*3247Sgjelinek 	kstat_named_init(&kpk->kpk_usage, "usage", KSTAT_DATA_UINT64);
932*3247Sgjelinek 	kstat_named_init(&kpk->kpk_value, "value", KSTAT_DATA_UINT64);
933*3247Sgjelinek 	ksp->ks_update = project_lockedmem_kstat_update;
934*3247Sgjelinek 	ksp->ks_private = pj;
935*3247Sgjelinek 	kstat_install(ksp);
936*3247Sgjelinek 
937*3247Sgjelinek 	return (ksp);
938*3247Sgjelinek }
939*3247Sgjelinek 
940*3247Sgjelinek static void
941*3247Sgjelinek project_kstat_delete(kproject_t *pj)
942*3247Sgjelinek {
943*3247Sgjelinek 	void *data;
944*3247Sgjelinek 
945*3247Sgjelinek 	if (pj->kpj_data.kpd_lockedmem_kstat != NULL) {
946*3247Sgjelinek 		data = pj->kpj_data.kpd_lockedmem_kstat->ks_data;
947*3247Sgjelinek 		kstat_delete(pj->kpj_data.kpd_lockedmem_kstat);
948*3247Sgjelinek 		kmem_free(data, sizeof (zone_kstat_t));
949*3247Sgjelinek 	}
950*3247Sgjelinek 	pj->kpj_data.kpd_lockedmem_kstat = NULL;
951*3247Sgjelinek }
952