====== VIMAGE ======

===== Open (Bugzilla) Issues =====

  * https://bugs.freebsd.org/bugzilla/buglist.cgi?quicksearch=vimage%20or%20vnet

===== VIMAGE: Action items before enabling VIMAGE by default in GENERIC kernel =====
  * Merge memory leak fixes from [[/BjoernZeeb|BjoernZeeb]] : http://p4db.freebsd.org/depotTreeBrowser.cgi?FSPC=//depot/user/bz/vimage/src/%E2%80%A6
  * Merge PF fixes from [[/MartinMatuska|MartinMatuska]] : https://svnweb.freebsd.org/base/projects/pf/head/ Some are already in, such as  https://svnweb.freebsd.org/base?view=revision&revision=264689
  * Measure performance:  [[/NetworkingPerformanceProject|NetworkingPerformanceProject]]   Olivier Cochard-Labbé  has provided some performance test results: https://lists.freebsd.org/pipermail/freebsd-net/2014-October/040091.html
  *  <del>Test ipfw with VIMAGE enabled</del>  (DONE)
  *  <del>Test ipfilter with VIMAGE enabled</del>  (DONE)
  * Test removable USB Ethernet with VIMAGE enabled
  * Test Bluetooth with VIMAGE enabled
  * Confirm that reported bugs are fixed (see above)

===== VImage - unresolved items =====

This a loose and unsorted list of possible things the need a proper solution or might want to be virtualized:

  *  <del>resolve ABI constraints for container structs</del>  (DONE)
  * Step-by-step file-by-file walk through to review the list of virtualized variables.
  *  <del>virtualize flowtable</del>  (DONE)
  *  <del>virtualize pf [[https://svnweb.freebsd.org/changeset/base/r276746|r276746]]</del>  (DONE)
  *  <del>virtualize ipfilter [[https://svnweb.freebsd.org/base/head/sys/?view=log&pathrev=302298|r302298]]</del> (DONE)
  *  <del>virtualize IPX (really?)</del>  (removed in [[https://svnweb.freebsd.org/changeset/base/r263152|r263152]] [[https://lists.freebsd.org/pipermail/freebsd-current/2013-October/045911.html|discussion]])
  *  <del>virtualize appletalk (really?)</del>  (removed in [[https://svnweb.freebsd.org/changeset/base/r263140|r263140]] [[https://lists.freebsd.org/pipermail/freebsd-current/2013-October/045911.html|discussion]])
  *  <del>Fix SCTP (rrs, tuexen, bz)</del>  (DONE during %%EuroBSDCon%% 2009)
  * make NFS work for root mounts as well as normal mounts in base or inside vimage (partially done mz+bz, root mounts work)
  * help bms with multicast mld6 / nd6 + V_ (this needs review and cleanup)
  *  <del>get if_epair int o HEAD (bz)</del> 
  * correctly handle IPsec/if_enc(4) interactions per stack.
  * get rid of explicit panic()s introduced where possible
  *  <del>remove VIMAGE_GLOBALS only shortly before the release if at all?  First consolidate the variables (externs or more) in the same places as the constainer structs and defines are. Are we going to keep VIMAGE_GLOBALS or can we remove them for 8.x?</del>  (Chnaged by different per-vnet linker implementation)
  *  <del>if_indextoname is broken. (bz, zec comitted r196504)</del> 
  * ifindex + if name collisions + if_* related discussions +  <del>/dev/net/* removal?</del>  + devd per image (long term)
  * VIMAGE kernel in addition to GENERIC like we had GENERIC and SMP before. (bz has the patch, we have LINT-VIMAGE)
  * Documentation: [[https://svnweb.freebsd.org/base/head/share/man/man9/vnet.9|vnet.9 man page]] <del>Jamie handled jail*</del>, handbook, [[VIMAGE/porting-to-vimage|VIMAGE porting guide]], ..
  * Benchmarking:
    * [[https://lists.freebsd.org/pipermail/freebsd-net/2014-October/040091.html|October 14, 2014]]
    * [[https://lists.freebsd.org/pipermail/freebsd-net/2014-December/040513.html|December 2, 2014]]
  *  <del>teach netstat etc. about vnet* for core file operations (new world order - kvm needs teaching actually, rwatson and bz)</del> 
  * AUDIT support for jail names
  *  <del>remove legacy VIMAGE/VPROGC API</del>  (DONE)
  *  <del>sysctl to find out how the kernel was compiled [[Image/KernelOptions|Image/KernelOptions]]</del>  (Kind of obsolete in new world order)
  *  <del>Implement Peter's suggestions around the kernel linker and linker sets to get away with the ABI problems for modules.</del>  ("new world order" - more like dpcpu)
  * How to make sure that non-virtualized things cannot be controlled from within a prison?
  *  <del>lle not properly virtualized; arp -a inside a vnet(n+1) sees everything; ndp -a does not work properly (bz, redone during %%EuroBSDCon%% 2009 as sample by mz)</del> 
  *  <del>kldload ipfw with a running vnet instance panics</del>  (ipfw only half-virtualized - has this been fixed?)
  * teach vi_if_move about IFAN enventhandlers
  * make interface eventhandlers per-vnet? done already?
  *  <del>[WIP] Better ddb gdb support (ddb partly done by rwatson already)</del> 
  *  <del>Changing sysctls not permitted on a vnet inside a jail. (kind of done with a hack that doesn't scale, r196176)</del> 
  *  <del>Fix vnet list locking (rwatson)</del> 
  *  <del>Use VNET_SYSINIT/VNET_SYSUNINIT rather than vnet_modinfo (rwatson)</del> 
  * <del>Possibly merge kern_vimage.c/vimage.h -> vnet.c/vnet.h</del>
  * vnet allocator -> vstorage allocator to support !vnet subsystems
  * When IPv6 packet flows, it cause short time lockup.
  * ..

Add your name if you want to pick an item. Add an item if there is more.

----

{{tag>Todo}}