Blame view
Documentation/watchdog/watchdog-api.txt
8.19 KB
4d389dcea [WATCHDOG] clean-... |
1 |
Last reviewed: 10/05/2007 |
1da177e4c Linux-2.6.12-rc2 |
2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 |
The Linux Watchdog driver API. Copyright 2002 Christer Weingel <wingel@nano-system.com> Some parts of this document are copied verbatim from the sbc60xxwdt driver which is (c) Copyright 2000 Jakob Oestergaard <jakob@ostenfeld.dk> This document describes the state of the Linux 2.4.18 kernel. Introduction: A Watchdog Timer (WDT) is a hardware circuit that can reset the computer system in case of a software fault. You probably knew that already. Usually a userspace daemon will notify the kernel watchdog driver via the /dev/watchdog special device file that userspace is still alive, at regular intervals. When such a notification occurs, the driver will usually tell the hardware watchdog that everything is in order, and that the watchdog should wait for yet another little while to reset the system. If userspace fails (RAM error, kernel bug, whatever), the notifications cease to occur, and the hardware watchdog will reset the system (causing a reboot) after the timeout occurs. |
4d389dcea [WATCHDOG] clean-... |
25 |
The Linux watchdog API is a rather ad-hoc construction and different |
1da177e4c Linux-2.6.12-rc2 |
26 27 28 29 30 31 32 33 34 35 36 |
drivers implement different, and sometimes incompatible, parts of it. This file is an attempt to document the existing usage and allow future driver writers to use it as a reference. The simplest API: All drivers support the basic mode of operation, where the watchdog activates as soon as /dev/watchdog is opened and will reboot unless the watchdog is pinged within a certain time, this time is called the timeout or margin. The simplest way to ping the watchdog is to write some data to the device. So a very simple watchdog daemon would look |
56fb9e534 [WATCHDOG] Docume... |
37 |
like this source file: see Documentation/watchdog/src/watchdog-simple.c |
1da177e4c Linux-2.6.12-rc2 |
38 39 40 41 42 43 44 45 46 47 |
A more advanced driver could for example check that a HTTP server is still responding before doing the write call to ping the watchdog. When the device is closed, the watchdog is disabled. This is not always such a good idea, since if there is a bug in the watchdog daemon and it crashes the system will not reboot. Because of this, some of the drivers support the configuration option "Disable watchdog shutdown on close", CONFIG_WATCHDOG_NOWAYOUT. If it is set to Y when compiling the kernel, there is no way of disabling the watchdog once |
2fe0ae78c Fix typos in Docu... |
48 |
it has been started. So, if the watchdog daemon crashes, the system |
4d389dcea [WATCHDOG] clean-... |
49 50 51 |
will reboot after the timeout has passed. Watchdog devices also usually support the nowayout module parameter so that this option can be controlled at runtime. |
1da177e4c Linux-2.6.12-rc2 |
52 |
|
4d389dcea [WATCHDOG] clean-... |
53 54 55 56 57 58 |
Drivers will not disable the watchdog, unless a specific magic character 'V' has been sent /dev/watchdog just before closing the file. If the userspace daemon closes the file without sending this special character, the driver will assume that the daemon (and userspace in general) died, and will stop pinging the watchdog without disabling it first. This will then cause a reboot if the watchdog is not re-opened in sufficient time. |
1da177e4c Linux-2.6.12-rc2 |
59 60 61 62 63 64 65 66 67 68 69 70 71 72 73 74 75 76 77 78 79 80 81 82 83 84 85 86 87 88 89 90 91 92 93 94 95 96 97 98 99 100 |
The ioctl API: All conforming drivers also support an ioctl API. Pinging the watchdog using an ioctl: All drivers that have an ioctl interface support at least one ioctl, KEEPALIVE. This ioctl does exactly the same thing as a write to the watchdog device, so the main loop in the above program could be replaced with: while (1) { ioctl(fd, WDIOC_KEEPALIVE, 0); sleep(10); } the argument to the ioctl is ignored. Setting and getting the timeout: For some drivers it is possible to modify the watchdog timeout on the fly with the SETTIMEOUT ioctl, those drivers have the WDIOF_SETTIMEOUT flag set in their option field. The argument is an integer representing the timeout in seconds. The driver returns the real timeout used in the same variable, and this timeout might differ from the requested one due to limitation of the hardware. int timeout = 45; ioctl(fd, WDIOC_SETTIMEOUT, &timeout); printf("The timeout was set to %d seconds ", timeout); This example might actually print "The timeout was set to 60 seconds" if the device has a granularity of minutes for its timeout. Starting with the Linux 2.4.18 kernel, it is possible to query the current timeout using the GETTIMEOUT ioctl. ioctl(fd, WDIOC_GETTIMEOUT, &timeout); printf("The timeout was is %d seconds ", timeout); |
e05b59fe7 [WATCHDOG] Pre-Ti... |
101 102 103 104 105 106 107 108 109 110 111 112 113 114 115 116 117 118 119 120 121 122 123 124 |
Pretimeouts: Some watchdog timers can be set to have a trigger go off before the actual time they will reset the system. This can be done with an NMI, interrupt, or other mechanism. This allows Linux to record useful information (like panic information and kernel coredumps) before it resets. pretimeout = 10; ioctl(fd, WDIOC_SETPRETIMEOUT, &pretimeout); Note that the pretimeout is the number of seconds before the time when the timeout will go off. It is not the number of seconds until the pretimeout. So, for instance, if you set the timeout to 60 seconds and the pretimeout to 10 seconds, the pretimout will go of in 50 seconds. Setting a pretimeout to zero disables it. There is also a get function for getting the pretimeout: ioctl(fd, WDIOC_GETPRETIMEOUT, &timeout); printf("The pretimeout was is %d seconds ", timeout); Not all watchdog drivers will support a pretimeout. |
58b519f3e [WATCHDOG] add WD... |
125 126 127 128 129 130 131 132 133 |
Get the number of seconds before reboot: Some watchdog drivers have the ability to report the remaining time before the system will reboot. The WDIOC_GETTIMELEFT is the ioctl that returns the number of seconds before reboot. ioctl(fd, WDIOC_GETTIMELEFT, &timeleft); printf("The timeout was is %d seconds ", timeleft); |
e05b59fe7 [WATCHDOG] Pre-Ti... |
134 |
Environmental monitoring: |
1da177e4c Linux-2.6.12-rc2 |
135 136 137 138 139 140 141 142 143 144 145 146 147 148 149 150 151 152 153 154 155 156 157 158 159 160 161 162 163 164 165 166 167 168 169 170 171 172 173 174 175 176 177 178 179 180 181 182 183 184 185 186 187 188 189 190 191 |
All watchdog drivers are required return more information about the system, some do temperature, fan and power level monitoring, some can tell you the reason for the last reboot of the system. The GETSUPPORT ioctl is available to ask what the device can do: struct watchdog_info ident; ioctl(fd, WDIOC_GETSUPPORT, &ident); the fields returned in the ident struct are: identity a string identifying the watchdog driver firmware_version the firmware version of the card if available options a flags describing what the device supports the options field can have the following bits set, and describes what kind of information that the GET_STATUS and GET_BOOT_STATUS ioctls can return. [FIXME -- Is this correct?] WDIOF_OVERHEAT Reset due to CPU overheat The machine was last rebooted by the watchdog because the thermal limit was exceeded WDIOF_FANFAULT Fan failed A system fan monitored by the watchdog card has failed WDIOF_EXTERN1 External relay 1 External monitoring relay/source 1 was triggered. Controllers intended for real world applications include external monitoring pins that will trigger a reset. WDIOF_EXTERN2 External relay 2 External monitoring relay/source 2 was triggered WDIOF_POWERUNDER Power bad/power fault The machine is showing an undervoltage status WDIOF_CARDRESET Card previously reset the CPU The last reboot was caused by the watchdog card WDIOF_POWEROVER Power over voltage The machine is showing an overvoltage status. Note that if one level is under and one over both bits will be set - this may seem odd but makes sense. WDIOF_KEEPALIVEPING Keep alive ping reply The watchdog saw a keepalive ping since it was last queried. WDIOF_SETTIMEOUT Can set/get the timeout |
e05b59fe7 [WATCHDOG] Pre-Ti... |
192 193 194 |
The watchdog can do pretimeouts. WDIOF_PRETIMEOUT Pretimeout (in seconds), get/set |
1da177e4c Linux-2.6.12-rc2 |
195 196 197 198 199 200 201 202 203 204 205 206 207 208 209 210 |
For those drivers that return any bits set in the option field, the GETSTATUS and GETBOOTSTATUS ioctls can be used to ask for the current status, and the status at the last reboot, respectively. int flags; ioctl(fd, WDIOC_GETSTATUS, &flags); or ioctl(fd, WDIOC_GETBOOTSTATUS, &flags); Note that not all devices support these two calls, and some only support the GETBOOTSTATUS call. Some drivers can measure the temperature using the GETTEMP ioctl. The |
a2ffd2751 Fix typos in Docu... |
211 |
returned value is the temperature in degrees fahrenheit. |
1da177e4c Linux-2.6.12-rc2 |
212 213 214 215 216 217 |
int temperature; ioctl(fd, WDIOC_GETTEMP, &temperature); Finally the SETOPTIONS ioctl can be used to control some aspects of the cards operation; right now the pcwd driver is the only one |
fa00e7e15 Fix typos in /Doc... |
218 |
supporting this ioctl. |
1da177e4c Linux-2.6.12-rc2 |
219 220 221 222 223 224 225 226 227 228 229 |
int options = 0; ioctl(fd, WDIOC_SETOPTIONS, options); The following options are available: WDIOS_DISABLECARD Turn off the watchdog timer WDIOS_ENABLECARD Turn on the watchdog timer WDIOS_TEMPPANIC Kernel panic on temperature trip [FIXME -- better explanations] |