Files

T

vasilito 1c7ce83173 docs: comprehensive boot process audit + archive stale plans

BOOT-PROCESS-AUDIT-2026-05-03.md: full daemon-by-daemon review
of boot sequence from power-on to login prompt. Covers:
- 25+ daemons assessed (critical path, input, display, hardware,
  storage, network, audio, UI, system services)
- Hardware initialization completeness matrix
- ion shell analysis (strengths/gaps vs bash/dash)
- Stale documentation inventory

Archived 5 superseded plans to local/docs/archived/:
- ACPI-I2C-HID, BOOT-PROCESS-IMPROVEMENT, DEVICE-INIT,
  GREETER-LOGIN-ANALYSIS, INTEL-HDA-IMPLEMENTATION

Improvement plan: 5 phases (boot reliability, drivers, UX,
documentation, security) across 6 weeks

2026-05-03 08:47:24 +01:00

10 KiB

Raw Blame History

Red Bear OS — Boot Process Audit & Improvement Plan

Date: 2026-05-03 Scope: Power-on → login prompt; all daemons, services, hardware initialization

1. Boot Sequence (Current)

Bootloader (UEFI)
  → kernel (microkernel, scheme-based)
  → bootstrap (kernel → userspace bridge)
  → init (TOML service manager)
    → INITFS phase:
      00_logd       — scheme:log (kernel-level logging)
      00_nulld      — /dev/null
      00_randd      — scheme:rand (entropy)
      00_rtcd       — RTC driver  
      00_zerod      — scheme:zero
      10_inputd     — scheme:input (VT/keyboard/mouse multiplexer)
      10_lived      — live disk support
      20_fbbootlogd — framebuffer boot log
      20_fbcond     — scheme:fbcon (text console on VT2)
      20_vesad      — VESA framebuffer driver
      40_hwd        — ACPI/DTB hardware manager
      40_pcid-*     — PCI driver spawner (initfs mode)
      40_ps2d       — PS/2 keyboard/mouse
      50_rootfs     — redoxfs mount (/)
    → SWITCHROOT to /usr
    → USERLAND phase:
      00_ipcd           — IPC daemon
      00_pcid-spawner   — full PCI driver spawner  
      00_ptyd           — scheme:pty
      00_sudo           — privilege escalation
      10_dhcpd          — DHCP
      10_smolnetd       — network stack
      20_audiod         — audio
      29_activate_console — VT2 activation
      30_console        — getty on VT2 → login prompt

2. Daemon-by-Daemon Assessment

2.1 Critical Path Daemons (P0 - boot-blocking)

Daemon	Status	Issues
kernel	Stable	Scheme-based, userspace drivers. Kernel syscall surface is fixed.
bootstrap	Stable	First userspace code, spawns init. No issues.
init	Improved	Now with colored ANSI output. Reads TOML service files. No multi-user.target support yet.
logd	Basic	scheme:log, console output only. No persistent logging, no log rotation, no structured logs.
rootfs (redoxfs)	Stable	Default filesystem. ext4/fat support exists but redoxfs is primary.

2.2 Input Stack (P1)

Daemon	Status	Issues
inputd	Good	Named producers via InputProducer enum (P3). Multiplexes keyboard/mouse/graphics.
ps2d	Good	LED feedback (caps/num/scroll). InputProducer migration done.
usbhidd	Good (hardened)	HID descriptor validation (P3). Static lookup table. 8-button support. Retry with backoff.
Gap	Missing	No touchpad gesture support beyond basic mouse. No gamepad/joystick.

2.3 Display Stack (P1)

Daemon	Status	Issues
vesad	Basic	VESA BIOS only. No GPU acceleration. 1280x720 default.
fbcond	Basic	Text console on framebuffer. No unicode beyond ASCII. No scrollback buffer.
fbbootlogd	Minimal	Boot log overlay. Basic.
Gap	Missing	No GPU driver active at boot (redox-drm/amdgpu not in initfs). No Wayland in initfs.

2.4 Hardware Enumeration (P1)

Daemon	Status	Issues
hwd	Partial	ACPI table parsing. RSDP forwarding from bootloader. AML-backed enumeration but bootstrap contract weak.
pcid-spawner	Good	PCI device discovery + driver spawning. Works for storage, network, USB.
rtcd	Basic	RTC read only. No RTC write, no NTP sync.
Gap	Missing	No SMBIOS/DMI parsing for hardware quirks at boot. No IOMMU init.

2.5 Storage Stack (P1)

Daemon	Status	Issues
ahcid	Stable	SATA AHCI driver.
ided	Stable	Legacy PATA driver.
nvmed	Stable	NVMe driver.
usbscsid	Partial	USB mass storage. Read verified. Write not validated.

2.6 Network Stack (P2)

Daemon	Status	Issues
smolnetd	Basic	Minimal network stack.
dhcpd	Basic	DHCP client.
e1000d/rtl8168d	Stable	Ethernet drivers.
Gap	Missing	No WiFi (iwlwifi not active). No Bluetooth. No firewall. No DNS resolver daemon.

2.7 Audio Stack (P2)

Daemon	Status	Issues
audiod	Basic	Audio multiplexer.
ac97d/ihdad/sb16d	Partial	Audio codec drivers. Intel HDA partially works.

2.8 User Interface (P2)

Binary	Status	Issues
getty	Basic	Opens TTY, runs login. No PAM. Simple password check via /etc/passwd.
login	Basic	Authenticates user, spawns shell. No session management.
ion	Basic	Fast but minimal. No job control, limited scripting, no tab completion, no history search.

2.9 System Services (P3)

Service	Status	Issues
ipcd	Stable	IPC channel daemon.
ptyd	Stable	Pseudo-terminal multiplexer.
sudo	Basic	Simple privilege escalation. No policy file.
randd	Stable	Entropy from kernel.
zerod/nulld	Stable	/dev/zero and /dev/null.

3. Hardware Initialization Completeness

Subsystem	Boot Stage	Completeness
CPU / x2APIC / SMP	Kernel	✅ Multi-core works
Memory (paging)	Bootloader	✅ UEFI memory map
ACPI / RSDP	Bootloader → hwd	🟡 RSDP forwarded, AML partial, shutdown weak
PCI enumeration	pcid-spawner	✅ Enumeration + driver spawning
Storage (AHCI/NVMe)	initfs drivers	✅ Block devices available
USB (xHCI)	initfs drivers	🟡 xhcid loaded, usbhidd in initfs but no USB storage in initfs
Display (VESA)	initfs vesad	✅ Basic framebuffer
PS/2 input	initfs ps2d	✅ Keyboard + mouse
USB HID	initfs usbhidd	✅ Keyboard + mouse (hardened P3)
Ethernet	userland	✅ e1000d/rtl8168d
WiFi	userland	❌ Not active
Bluetooth	userland	❌ Not implemented
Audio	userland	🟡 Partial
GPU (DRM/KMS)	userland	🟡 redox-drm compiled, not in boot path
IOMMU	kernel	🟡 QEMU proof passes, HW unvalidated
TPM / Secure Boot	bootloader	❌ Not implemented

4. Console Shell Analysis (ion)

Strengths

Fast startup (Rust, no legacy cruft)
Basic POSIX-like commands work
Pipeline support (|)
Redirect support (>, <, >>)

Gaps

No job control (fg/bg/Ctrl-Z)
No tab completion
No command history search (Ctrl-R)
Limited scripting (no if/for/while in shell syntax)
No alias support
No environment variable editing
No prompt customization
No signal handling (SIGINT/SIGTERM properly passed to children)

Comparison: ion vs bash/dash

Feature	ion	bash	dash
Startup time	~5ms	~15ms	~3ms
Job control	❌	✅	✅
Tab completion	❌	✅	❌
Scripting	Basic	Full	Full
History	Linear	Searchable	Linear
Size	~500KB	~1MB	~150KB

5. Stale Documentation

35 files in local/docs/. Many are historical plans/analyses that were written but never fully executed. Files that appear stale or superseded:

File	Status	Recommendation
`ACPI-I2C-HID-IMPLEMENTATION-PLAN.md`	Stale	Archive or delete
`AMD-FIRST-INTEGRATION.md`	Superseded	AMD/Intel now equal-priority; archive
`BOOT-PROCESS-IMPROVEMENT-PLAN.md`	Superseded	This document supersedes it
`DEVICE-INIT-COMPREHENSIVE-IMPROVEMENT-PLAN.md`	Stale	Archive
`GREETER-LOGIN-ANALYSIS.md`	Stale	Superseded by GREETER-LOGIN-IMPLEMENTATION-PLAN
`INTEL-HDA-IMPLEMENTATION-PLAN.md`	Stale	Archive
`HARDWARE-3D-ASSESSMENT.md`	Stale	Archive
`WIFI-PASSTHROUGH-VALIDATION.md`	Stale	Archive
`boot-logs/`	Directory	Keep recent, archive old

6. Improvement Plan

Phase A — P0: Boot Reliability (Week 1-2)

Task	Priority	Effort
Fix ACPI shutdown robustness	Critical	3d
Verify SMBIOS/DMI parsing in hwd	High	2d
Add RTC write support to rtcd	Medium	1d
Add persistent logging to logd (file + rotation)	High	2d

Phase B — P1: Driver Completeness (Week 2-4)

Task	Priority	Effort
Enable redox-drm in boot path (not just compile)	High	3d
Add USB storage (usbscsid) to initfs drivers	High	1d
Verify USB HID hotplug (xhcid re-enumeration)	Medium	2d
Add IOMMU init to boot path (DMA remapping)	Medium	3d
Implement thermal daemon (CPU temp monitoring)	Low	2d

Phase C — P2: User Experience (Week 3-6)

Task	Priority	Effort
Improve ion shell (tab completion, job control, history search)	High	5d
Add scrollback buffer to fbcond	Medium	2d
Add unicode font support to fbcond	Medium	3d
Improve getty security (rate limiting, secure attention key)	Medium	1d
Add network config persistence (netctl profiles)	Medium	2d
Enable WiFi driver in boot path	High	5d

Phase D — P3: Documentation Cleanup (Week 1)

Task	Priority	Effort
Archive/delete 8 stale doc files	Medium	1d
Consolidate boot-related docs into this audit	Medium	1d
Update AGENTS.md with boot process diagram	Low	0.5d

Phase E — P3: Security Hardening

Task	Priority	Effort
Add PAM-like authentication to getty/login	High	3d
Add audit logging (syscall tracing)	Medium	3d
Implement secure boot chain verification	Low	5d
Add filesystem encryption support (LUKS-like)	Low	5d

7. Summary

The boot process is functional — the system reaches a login prompt reliably. The architecture is clean (microkernel + userspace drivers via schemes). However, there are significant gaps:

Hardware initialization is incomplete: USB storage not in initfs, no GPU driver at boot, ACPI power management weak
User experience is basic: ion shell lacks job control/completion, console is ASCII-only with no scrollback
Security is primitive: no PAM, no audit logging, no secure boot
Documentation is bloated: 35 docs in local/docs/, many stale

The most impactful improvements are:

Fix ACPI shutdown (stability)
Improve ion shell (user experience)
Enable DRM/GPU in boot (display)
Archive stale docs (maintainability)

10 KiB Raw Blame History