Blame view

Documentation/stable_api_nonsense.txt 9.18 KB
1da177e4c   Linus Torvalds   Linux-2.6.12-rc2
1
2
3
4
5
6
7
8
9
10
11
12
  The Linux Kernel Driver Interface
  (all of your questions answered and then some)
  
  Greg Kroah-Hartman <greg@kroah.com>
  
  This is being written to try to explain why Linux does not have a binary
  kernel interface, nor does it have a stable kernel interface.  Please
  realize that this article describes the _in kernel_ interfaces, not the
  kernel to userspace interfaces.  The kernel to userspace interface is
  the one that application programs use, the syscall interface.  That
  interface is _very_ stable over time, and will not break.  I have old
  programs that were built on a pre 0.9something kernel that still work
a2765e81d   Juan Lang   stable_api_nonsen...
13
  just fine on the latest 2.6 kernel release.  That interface is the one
1da177e4c   Linus Torvalds   Linux-2.6.12-rc2
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
  that users and application programmers can count on being stable.
  
  
  Executive Summary
  -----------------
  You think you want a stable kernel interface, but you really do not, and
  you don't even know it.  What you want is a stable running driver, and
  you get that only if your driver is in the main kernel tree.  You also
  get lots of other good benefits if your driver is in the main kernel
  tree, all of which has made Linux into such a strong, stable, and mature
  operating system which is the reason you are using it in the first
  place.
  
  
  Intro
  -----
  
  It's only the odd person who wants to write a kernel driver that needs
  to worry about the in-kernel interfaces changing.  For the majority of
  the world, they neither see this interface, nor do they care about it at
  all.
  
  First off, I'm not going to address _any_ legal issues about closed
  source, hidden source, binary blobs, source wrappers, or any other term
  that describes kernel drivers that do not have their source code
  released under the GPL.  Please consult a lawyer if you have any legal
  questions, I'm a programmer and hence, I'm just going to be describing
  the technical issues here (not to make light of the legal issues, they
  are real, and you do need to be aware of them at all times.)
  
  So, there are two main topics here, binary kernel interfaces and stable
  kernel source interfaces.  They both depend on each other, but we will
  discuss the binary stuff first to get it out of the way.
  
  
  Binary Kernel Interface
  -----------------------
  Assuming that we had a stable kernel source interface for the kernel, a
  binary interface would naturally happen too, right?  Wrong.  Please
  consider the following facts about the Linux kernel:
    - Depending on the version of the C compiler you use, different kernel
      data structures will contain different alignment of structures, and
      possibly include different functions in different ways (putting
      functions inline or not.)  The individual function organization
      isn't that important, but the different data structure padding is
      very important.
    - Depending on what kernel build options you select, a wide range of
      different things can be assumed by the kernel:
        - different structures can contain different fields
        - Some functions may not be implemented at all, (i.e. some locks
  	compile away to nothing for non-SMP builds.)
1da177e4c   Linus Torvalds   Linux-2.6.12-rc2
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
        - Memory within the kernel can be aligned in different ways,
  	depending on the build options.
    - Linux runs on a wide range of different processor architectures.
      There is no way that binary drivers from one architecture will run
      on another architecture properly.
  
  Now a number of these issues can be addressed by simply compiling your
  module for the exact specific kernel configuration, using the same exact
  C compiler that the kernel was built with.  This is sufficient if you
  want to provide a module for a specific release version of a specific
  Linux distribution.  But multiply that single build by the number of
  different Linux distributions and the number of different supported
  releases of the Linux distribution and you quickly have a nightmare of
  different build options on different releases.  Also realize that each
  Linux distribution release contains a number of different kernels, all
  tuned to different hardware types (different processor types and
  different options), so for even a single release you will need to create
  multiple versions of your module.
  
  Trust me, you will go insane over time if you try to support this kind
  of release, I learned this the hard way a long time ago...
  
  
  Stable Kernel Source Interfaces
  -------------------------------
  
  This is a much more "volatile" topic if you talk to people who try to
  keep a Linux kernel driver that is not in the main kernel tree up to
  date over time.
  
  Linux kernel development is continuous and at a rapid pace, never
  stopping to slow down.  As such, the kernel developers find bugs in
  current interfaces, or figure out a better way to do things.  If they do
  that, they then fix the current interfaces to work better.  When they do
  so, function names may change, structures may grow or shrink, and
  function parameters may be reworked.  If this happens, all of the
  instances of where this interface is used within the kernel are fixed up
  at the same time, ensuring that everything continues to work properly.
  
  As a specific examples of this, the in-kernel USB interfaces have
  undergone at least three different reworks over the lifetime of this
  subsystem.  These reworks were done to address a number of different
  issues:
    - A change from a synchronous model of data streams to an asynchronous
      one.  This reduced the complexity of a number of drivers and
      increased the throughput of all USB drivers such that we are now
      running almost all USB devices at their maximum speed possible.
    - A change was made in the way data packets were allocated from the
      USB core by USB drivers so that all drivers now needed to provide
      more information to the USB core to fix a number of documented
      deadlocks.
  
  This is in stark contrast to a number of closed source operating systems
  which have had to maintain their older USB interfaces over time.  This
  provides the ability for new developers to accidentally use the old
  interfaces and do things in improper ways, causing the stability of the
  operating system to suffer.
  
  In both of these instances, all developers agreed that these were
  important changes that needed to be made, and they were made, with
3f8acea30   Justin P. Mattock   doc: stable_api_n...
125
  relatively little pain.  If Linux had to ensure that it will preserve a
1da177e4c   Linus Torvalds   Linux-2.6.12-rc2
126
127
128
129
130
  stable source interface, a new interface would have been created, and
  the older, broken one would have had to be maintained over time, leading
  to extra work for the USB developers.  Since all Linux USB developers do
  their work on their own time, asking programmers to do extra work for no
  gain, for free, is not a possibility.
30d07a22a   Daniel Walker   [PATCH] stable_ap...
131
  Security issues are also very important for Linux.  When a
1da177e4c   Linus Torvalds   Linux-2.6.12-rc2
132
133
134
135
136
137
138
139
140
141
142
143
144
145
146
147
148
149
150
151
152
153
154
155
156
157
158
159
160
161
162
163
164
165
166
167
168
169
170
171
172
173
174
175
176
177
178
179
180
181
182
183
184
185
186
187
188
189
  security issue is found, it is fixed in a very short amount of time.  A
  number of times this has caused internal kernel interfaces to be
  reworked to prevent the security problem from occurring.  When this
  happens, all drivers that use the interfaces were also fixed at the
  same time, ensuring that the security problem was fixed and could not
  come back at some future time accidentally.  If the internal interfaces
  were not allowed to change, fixing this kind of security problem and
  insuring that it could not happen again would not be possible.
  
  Kernel interfaces are cleaned up over time.  If there is no one using a
  current interface, it is deleted.  This ensures that the kernel remains
  as small as possible, and that all potential interfaces are tested as
  well as they can be (unused interfaces are pretty much impossible to
  test for validity.)
  
  
  What to do
  ----------
  
  So, if you have a Linux kernel driver that is not in the main kernel
  tree, what are you, a developer, supposed to do?  Releasing a binary
  driver for every different kernel version for every distribution is a
  nightmare, and trying to keep up with an ever changing kernel interface
  is also a rough job.
  
  Simple, get your kernel driver into the main kernel tree (remember we
  are talking about GPL released drivers here, if your code doesn't fall
  under this category, good luck, you are on your own here, you leech
  <insert link to leech comment from Andrew and Linus here>.)  If your
  driver is in the tree, and a kernel interface changes, it will be fixed
  up by the person who did the kernel change in the first place.  This
  ensures that your driver is always buildable, and works over time, with
  very little effort on your part.
  
  The very good side effects of having your driver in the main kernel tree
  are:
    - The quality of the driver will rise as the maintenance costs (to the
      original developer) will decrease.
    - Other developers will add features to your driver.
    - Other people will find and fix bugs in your driver.
    - Other people will find tuning opportunities in your driver.
    - Other people will update the driver for you when external interface
      changes require it.
    - The driver automatically gets shipped in all Linux distributions
      without having to ask the distros to add it.
      
  As Linux supports a larger number of different devices "out of the box"
  than any other operating system, and it supports these devices on more
  different processor architectures than any other operating system, this
  proven type of development model must be doing something right :)
  
  
  
  ------
  
  Thanks to Randy Dunlap, Andrew Morton, David Brownell, Hanna Linder,
  Robert Love, and Nishanth Aravamudan for their review and comments on
  early drafts of this paper.