Saturday, August 01, 2020

Re: Installation in a Xen guest (pvgrub)

-----BEGIN PGP SIGNATURE-----
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=u8iJ
-----END PGP SIGNATURE-----
On 2020-07-24 14:36, Markus Kolb wrote:
> Am 24.07.2020 17:30, schrieb Theo de Raadt:
> [...]
>> non-OpenBSD bootloaders will do a shitty job of booting OpenBSD.
>> I'm not going to bother explaining the situation in detail.  People
>> who try to go that way have already decided they don't care about the
>> consequences.
>
> Ok. Thanks.
>
> Are you talking about biosboot or 2nd stage boot?
>
> But would it be in theory possible to program a
> (1) specialized "bootloader" which is bootable by linux-cmd of grub
> and
> (2) this specialized "bootloader" continues with the BSD boot code? At the moment I'm thinking of 2nd stage boot.
> So going from grub 2nd stage via fake-linux-kernel to 2nd stage OpenBSD boot...
>
> Part 1 should be doable.
> But what is about part 2? Would it be possible or are there technical system restrictions making it impossible e.g. like CPU operating modes or restrictions to access the BIOS?
> And so any further thinking and investigation in this way is waste of time...

I highly doubt OpenBSD will work in PVH mode without both kernel
and bootloader changes. This isn't specific to OpenBSD, btw.
Windows has the same restriction. The primary reason is that PVH mode
doesn't expose any emulated hard drives. Unless boot(8) has support
for Xen PV block devices, this will prevent it from loading the kernel.

Is there some reason you cannot use HVM? OpenBSD on Xen works well
in HVM mode. OpenBSD lacks PV console support, so you will need to
rely on emulated serial and/or VGA, but you do get PV netfront and
blockfront drivers. That said, don't expect tight integration with
the host system. There are no userspace APIs for Xen hypercalls, for
instance, so vchans won't work. On the other hand, if you don't
need any advanced Xen-specific features, OpenBSD will work fine.
PCI passthrough works too. XenStore can be accessed via hostctl(8).

Are you trying to make OpenBSD work on QubesOS? If so, I have
an OpenBSD TemplateVM that works somewhat well, although qrexec
and qubesd don't work due to the aforementioned lack of vchans.
If not, would you mind going into detail about your host configuration?
I suspect that the closer the virtual environment is to bare hardware,
the better OpenBSD will behave. The host will also need to provide
a DHCP server if you want network autoconfiguration to work.

Sincerely,

Demi

No comments:

Post a Comment