Hi Peter, > On Feb 20, 2015, at 17:00 , Peter Hurley <pe...@hurleysoftware.com> wrote: > > On 02/20/2015 09:35 AM, Ludovic Desroches wrote: >> On Fri, Feb 20, 2015 at 09:21:38AM -0500, Peter Hurley wrote: >>> On 02/19/2015 12:38 PM, Pantelis Antoniou wrote: >>>> >>>>> On Feb 19, 2015, at 19:30 , Frank Rowand <frowand.l...@gmail.com> wrote: >>>>> >>>>> On 2/19/2015 9:00 AM, Pantelis Antoniou wrote: >>>>>> Hi Frank, >>>>>> >>>>>>> On Feb 19, 2015, at 18:48 , Frank Rowand <frowand.l...@gmail.com> wrote: >>>>>>> >>>>>>> On 2/19/2015 6:29 AM, Pantelis Antoniou wrote: >>>>>>>> Hi Mark, >>>>>>>> >>>>>>>>> On Feb 18, 2015, at 19:31 , Mark Rutland <mark.rutl...@arm.com> wrote: >>>>>>>>> >>>>>>>>>>>> +While this may in theory work, in practice it is very cumbersome >>>>>>>>>>>> +for the following reasons: >>>>>>>>>>>> + >>>>>>>>>>>> +1. The act of selecting a different boot device tree blob requires >>>>>>>>>>>> +a reasonably advanced bootloader with some kind of configuration >>>>>>>>>>>> or >>>>>>>>>>>> +scripting capabilities. Sadly this is not the case many times, the >>>>>>>>>>>> +bootloader is extremely dumb and can only use a single dt blob. >>>>>>>>>>> >>>>>>>>>>> You can have several bootloader builds, or even a single build with >>>>>>>>>>> something like appended DTB to get an appropriate DTB if the same >>>>>>>>>>> binary >>>>>>>>>>> will otherwise work across all variants of a board. >>>>>>>>>>> >>>>>>>>>> >>>>>>>>>> No, the same DTB will not work across all the variants of a board. >>>>>>>>> >>>>>>>>> I wasn't on about the DTB. I was on about the loader binary, in the >>>>>>>>> case >>>>>>>>> the FW/bootloader could be common even if the DTB couldn't. >>>>>>>>> >>>>>>>>> To some extent there must be a DTB that will work across all variants >>>>>>>>> (albeit with limited utility) or the quirk approach wouldn't work… >>>>>>>>> >>>>>>>> >>>>>>>> That’s not correct; the only part of the DTB that needs to be common >>>>>>>> is the model property that would allow the quirk detection logic to >>>>>>>> fire. >>>>>>>> >>>>>>>> So, there is a base DTB that will work on all variants, but that only >>>>>>>> means >>>>>>>> that it will work only up to the point that the quirk detector method >>>>>>>> can work. So while in recommended practice there are common subsets >>>>>>>> of the DTB that might work, they might be unsafe. >>>>>>>> >>>>>>>> For instance on the beaglebone the regulator configuration is different >>>>>>>> between white and black, it is imperative you get them right otherwise >>>>>>>> you risk board damage. >>>>>>>> >>>>>>>>>>> So it's not necessarily true that you need a complex bootloader. >>>>>>>>>>> >>>>>>>>>> >>>>>>>>>>>> +2. On many instances boot time is extremely critical; in some >>>>>>>>>>>> cases >>>>>>>>>>>> +there are hard requirements like having working video feeds in >>>>>>>>>>>> under >>>>>>>>>>>> +2 seconds from power-up. This leaves an extremely small time >>>>>>>>>>>> budget for >>>>>>>>>>>> +boot-up, as low as 500ms to kernel entry. The sanest way to get >>>>>>>>>>>> there >>>>>>>>>>>> +is by removing the standard bootloader from the normal boot >>>>>>>>>>>> sequence >>>>>>>>>>>> +altogether by having a very small boot shim that loads the kernel >>>>>>>>>>>> and >>>>>>>>>>>> +immediately jumps to kernel, like falcon-boot mode in u-boot does. >>>>>>>>>>> >>>>>>>>>>> Given my previous comments above I don't see why this is relevant. >>>>>>>>>>> You're already passing _some_ DTB here, so if you can organise for >>>>>>>>>>> the >>>>>>>>>>> board to statically provide a sane DTB that's fine, or you can >>>>>>>>>>> resort to >>>>>>>>>>> appended DTB if it's not possible to update the board configuration. >>>>>>>>>>> >>>>>>>>>> >>>>>>>>>> You’re missing the point. I can’t use the same DTB for each revision >>>>>>>>>> of the >>>>>>>>>> board. Each board is similar but it’s not identical. >>>>>>>>> >>>>>>>>> I think you've misunderstood my point. If you program the board with >>>>>>>>> the >>>>>>>>> relevant DTB, or use appended DTB, then you will pass the correct DTB >>>>>>>>> to >>>>>>>>> the kernel without need for quirks. >>>>>>>>> >>>>>>>>> I understand that each variant is somewhat incompatible (and hence >>>>>>>>> needs >>>>>>>>> its own DTB). >>>>>>>> >>>>>>>> In theory it might work, in practice this does not. Ludovic mentioned >>>>>>>> that they >>>>>>>> have 27 different DTBs in use at the moment. At a relatively common >>>>>>>> 60k per DTB >>>>>>>> that’s 27x60k = 1.6MB of DTBs, that need to be installed. >>>>>>> >>>>>>> < snip > >>>>>>> >>>>>>> Or you can install the correct DTB on the board. You trust your >>>>>>> manufacturing line >>>>>>> to install the correct resistors. You trust your manufacturing line to >>>>>>> install the >>>>>>> correct kernel version (eg an updated version to resolve a security >>>>>>> issue). >>>>>>> >>>>>>> I thought the DT blob was supposed to follow the same standard that >>>>>>> other OS's or >>>>>>> bootloaders understood. Are you willing to break that? (This is one >>>>>>> of those >>>>>>> ripples I mentioned in my other emails.) >>>>>>> >>>>>> >>>>>> Trust no-one. >>>>>> >>>>>> This is one of those things that the kernel community doesn’t understand >>>>>> which makes people >>>>>> who push product quite mad. >>>>>> >>>>>> Engineering a product is not only about meeting customer spec, in order >>>>>> to turn a profit >>>>>> the whole endeavor must be engineered as well for manufacturability. >>>>>> >>>>>> Yes, you can always manually install files in the bootloader. For 1 >>>>>> board no problem. >>>>>> For 10 doable. For 100 I guess you can hire an extra guy. For 1 million? >>>>>> Guess what, >>>>>> instead of turning a profit you’re losing money if you only have a few >>>>>> cents of profit >>>>>> per unit. >>>>> >>>>> I'm not installing physical components manually. Why would I be >>>>> installing software >>>>> manually? (rhetorical question) >>>>> >>>> >>>> Because on high volume product runs the flash comes preprogrammed and is >>>> soldered as is. >>>> >>>> Having a single binary to flash to every revision of the board makes >>>> logistics considerably >>>> easier. >>>> >>>> Having to boot and tweak the bootloader settings to select the correct dtb >>>> (even if it’s present >>>> on the flash medium) takes time and is error-prone. >>>> >>>> Factory time == money, errors == money. >>>> >>>>>> >>>>>> No knobs to tweak means no knobs to break. And a broken knob can have >>>>>> pretty bad consequences >>>>>> for a few million units. >>>>> >>>>> And you produce a few million units before testing that the first one off >>>>> the line works? >>>>> >>>> >>>> The first one off the line works. The rest will get some burn in and >>>> functional testing if you’re >>>> lucky. In many cases where the product is very cheap it might make >>>> financial sense to just ship >>>> as is and deal with recalls, if you’re reasonably happy after a little bit >>>> of statistical sampling. >>>> >>>> Hardware is hard :) >>> >>> I'm failing to see how this series improves your manufacturing process at >>> all. >>> >>> 1. Won't you have to provide the factory with different eeprom images for >>> the >>> White and Black? You _trust_ them to get that right, or more likely, you >>> have process control procedures in place so that you don't get 1 million >>> Blacks >>> flashed with the White eeprom image. >>> >>> 2. The White and Black use different memory technology so it's not as if the >>> eMMC from the Black will end up on the White SMT line (or vice versa). >>> >>> 3 For that matter, why wouldn't you worry that all the microSD cards >>> intended >>> for the White were accidentally assembled with the first 50,000 Blacks; at >>> that point you're losing a lot more than a few cents of profit. And that >>> has >>> nothing to do with what image you provided. >>> >> >> As you said, we can imagine many reasons to have a failure during the >> production, having several DTB files will increase the risk. > > It's interesting that you don't see the added complexity of open-coding > the i2c driver or mixing DTS fragments for different designs as increased risk > (for us all). > >
You don’t have to use it. Some people really do though. As for increased risk I expect to see arguments instead of a statement. >>> 3. The factory is just as likely to use some other customer's image by >>> accident, >>> so you're just as likely to have the same failure rate if you have no test >>> process at the factory. >>> >>> 4. If you're using offline programming, the image has to be tested after >>> reflow anyway. >>> >>> IOW, your QA process will not change at all == same cost. >>> >>> Regards, >>> Peter Hurley > Regards — Pantelis -- To unsubscribe from this list: send the line "unsubscribe linux-kernel" in the body of a message to majord...@vger.kernel.org More majordomo info at http://vger.kernel.org/majordomo-info.html Please read the FAQ at http://www.tux.org/lkml/