On Tue, 2010-12-21 at 21:37 +0000, Konrad Rzeszutek Wilk wrote:
That is true at start of day but once the system is up and running the
balloon driver can make a hole for anything which can be returned by
alloc_page.
The following descriptions seem to consider this correctly but I just
wanted to clarify.
I don't think it's necessarily the last E820 RAM page either, that's
just what the tools today happen to build. In principal the tools could
push down a holey e820 (e.g. with PCI holes prepunched etc) and boot the
domain ballooned down such that the N-2, N-3 e820 RAM regions are above
nr_pages too.
I would naively have expected that a missing entry indicated an
invalid/missing entry rather than an identity region, it just seems like
the safer default since we are (maybe) more likely to catch an
INVALID_P2M_ENTRY before handing it to the hypervisor and getting
ourselves shot.
In that case the identity regions would need to be explicitly
registered, is that harder to do?
I guess we could register any hole or explicit non-RAM region in the
e820 as identity but do we sometimes see I/O memory above the top of the
e820 or is there some other problem I'm not thinking of?
Could we have a WARN_ON(_PAGE_IOMAP && !PAGE_IDENTITY) (or whatever the
predicates really are) in some relevant places in mmu.c?
Ian.
--