4 * Copyright (C) 1991, 1992 Linus Torvalds
6 * GK 2/5/95 - Changed to support mounting root fs via NFS
7 * Added initrd & change_root: Werner Almesberger & Hans Lermen, Feb '96
8 * Moan early if gcc is old, avoiding bogus kernels - Paul Gortmaker, May '96
9 * Simplified starting of init: Michael A. Griffith <grif@acm.org>
12 #define DEBUG /* Enable initcall_debug */
14 #include <linux/types.h>
15 #include <linux/module.h>
16 #include <linux/proc_fs.h>
17 #include <linux/kernel.h>
18 #include <linux/syscalls.h>
19 #include <linux/stackprotector.h>
20 #include <linux/string.h>
21 #include <linux/ctype.h>
22 #include <linux/delay.h>
23 #include <linux/ioport.h>
24 #include <linux/init.h>
25 #include <linux/initrd.h>
26 #include <linux/bootmem.h>
27 #include <linux/acpi.h>
28 #include <linux/tty.h>
29 #include <linux/percpu.h>
30 #include <linux/kmod.h>
31 #include <linux/vmalloc.h>
32 #include <linux/kernel_stat.h>
33 #include <linux/start_kernel.h>
34 #include <linux/security.h>
35 #include <linux/smp.h>
36 #include <linux/profile.h>
37 #include <linux/rcupdate.h>
38 #include <linux/moduleparam.h>
39 #include <linux/kallsyms.h>
40 #include <linux/writeback.h>
41 #include <linux/cpu.h>
42 #include <linux/cpuset.h>
43 #include <linux/cgroup.h>
44 #include <linux/efi.h>
45 #include <linux/tick.h>
46 #include <linux/interrupt.h>
47 #include <linux/taskstats_kern.h>
48 #include <linux/delayacct.h>
49 #include <linux/unistd.h>
50 #include <linux/rmap.h>
51 #include <linux/mempolicy.h>
52 #include <linux/key.h>
53 #include <linux/buffer_head.h>
54 #include <linux/page_ext.h>
55 #include <linux/debug_locks.h>
56 #include <linux/debugobjects.h>
57 #include <linux/lockdep.h>
58 #include <linux/kmemleak.h>
59 #include <linux/pid_namespace.h>
60 #include <linux/device.h>
61 #include <linux/kthread.h>
62 #include <linux/sched.h>
63 #include <linux/signal.h>
64 #include <linux/idr.h>
65 #include <linux/kgdb.h>
66 #include <linux/ftrace.h>
67 #include <linux/async.h>
68 #include <linux/kmemcheck.h>
69 #include <linux/sfi.h>
70 #include <linux/shmem_fs.h>
71 #include <linux/slab.h>
72 #include <linux/perf_event.h>
73 #include <linux/file.h>
74 #include <linux/ptrace.h>
75 #include <linux/blkdev.h>
76 #include <linux/elevator.h>
77 #include <linux/sched_clock.h>
78 #include <linux/context_tracking.h>
79 #include <linux/random.h>
80 #include <linux/list.h>
81 #include <linux/integrity.h>
82 #include <linux/proc_ns.h>
87 #include <asm/setup.h>
88 #include <asm/sections.h>
89 #include <asm/cacheflush.h>
91 static int kernel_init(void *);
93 extern void init_IRQ(void);
94 extern void fork_init(void);
95 extern void radix_tree_init(void);
96 #ifndef CONFIG_DEBUG_RODATA
97 static inline void mark_rodata_ro(void) { }
101 * Debug helper: via this flag we know that we are in 'early bootup code'
102 * where only the boot processor is running with IRQ disabled. This means
103 * two things - IRQ must not be enabled before the flag is cleared and some
104 * operations which are not allowed with IRQ disabled are allowed while the
107 bool early_boot_irqs_disabled __read_mostly
;
109 enum system_states system_state __read_mostly
;
110 EXPORT_SYMBOL(system_state
);
113 * Boot command-line arguments
115 #define MAX_INIT_ARGS CONFIG_INIT_ENV_ARG_LIMIT
116 #define MAX_INIT_ENVS CONFIG_INIT_ENV_ARG_LIMIT
118 extern void time_init(void);
119 /* Default late time init is NULL. archs can override this later. */
120 void (*__initdata late_time_init
)(void);
122 /* Untouched command line saved by arch-specific code. */
123 char __initdata boot_command_line
[COMMAND_LINE_SIZE
];
124 /* Untouched saved command line (eg. for /proc) */
125 char *saved_command_line
;
126 /* Command line for parameter parsing */
127 static char *static_command_line
;
128 /* Command line for per-initcall parameter parsing */
129 static char *initcall_command_line
;
131 static char *execute_command
;
132 static char *ramdisk_execute_command
;
135 * Used to generate warnings if static_key manipulation functions are used
136 * before jump_label_init is called.
138 bool static_key_initialized __read_mostly
;
139 EXPORT_SYMBOL_GPL(static_key_initialized
);
142 * If set, this is an indication to the drivers that reset the underlying
143 * device before going ahead with the initialization otherwise driver might
144 * rely on the BIOS and skip the reset operation.
146 * This is useful if kernel is booting in an unreliable environment.
147 * For ex. kdump situation where previous kernel has crashed, BIOS has been
148 * skipped and devices will be in unknown state.
150 unsigned int reset_devices
;
151 EXPORT_SYMBOL(reset_devices
);
153 static int __init
set_reset_devices(char *str
)
159 __setup("reset_devices", set_reset_devices
);
161 static const char *argv_init
[MAX_INIT_ARGS
+2] = { "init", NULL
, };
162 const char *envp_init
[MAX_INIT_ENVS
+2] = { "HOME=/", "TERM=linux", NULL
, };
163 static const char *panic_later
, *panic_param
;
165 extern const struct obs_kernel_param __setup_start
[], __setup_end
[];
167 static bool __init
obsolete_checksetup(char *line
)
169 const struct obs_kernel_param
*p
;
170 bool had_early_param
= false;
174 int n
= strlen(p
->str
);
175 if (parameqn(line
, p
->str
, n
)) {
177 /* Already done in parse_early_param?
178 * (Needs exact match on param part).
179 * Keep iterating, as we can have early
180 * params and __setups of same names 8( */
181 if (line
[n
] == '\0' || line
[n
] == '=')
182 had_early_param
= true;
183 } else if (!p
->setup_func
) {
184 pr_warn("Parameter %s is obsolete, ignored\n",
187 } else if (p
->setup_func(line
+ n
))
191 } while (p
< __setup_end
);
193 return had_early_param
;
197 * This should be approx 2 Bo*oMips to start (note initial shift), and will
198 * still work even if initially too large, it will just take slightly longer
200 unsigned long loops_per_jiffy
= (1<<12);
201 EXPORT_SYMBOL(loops_per_jiffy
);
203 static int __init
debug_kernel(char *str
)
205 console_loglevel
= CONSOLE_LOGLEVEL_DEBUG
;
209 static int __init
quiet_kernel(char *str
)
211 console_loglevel
= CONSOLE_LOGLEVEL_QUIET
;
215 early_param("debug", debug_kernel
);
216 early_param("quiet", quiet_kernel
);
218 static int __init
loglevel(char *str
)
223 * Only update loglevel value when a correct setting was passed,
224 * to prevent blind crashes (when loglevel being set to 0) that
225 * are quite hard to debug
227 if (get_option(&str
, &newlevel
)) {
228 console_loglevel
= newlevel
;
235 early_param("loglevel", loglevel
);
237 /* Change NUL term back to "=", to make "param" the whole string. */
238 static int __init
repair_env_string(char *param
, char *val
,
239 const char *unused
, void *arg
)
242 /* param=val or param="val"? */
243 if (val
== param
+strlen(param
)+1)
245 else if (val
== param
+strlen(param
)+2) {
247 memmove(val
-1, val
, strlen(val
)+1);
255 /* Anything after -- gets handed straight to init. */
256 static int __init
set_init_arg(char *param
, char *val
,
257 const char *unused
, void *arg
)
264 repair_env_string(param
, val
, unused
, NULL
);
266 for (i
= 0; argv_init
[i
]; i
++) {
267 if (i
== MAX_INIT_ARGS
) {
268 panic_later
= "init";
273 argv_init
[i
] = param
;
278 * Unknown boot options get handed to init, unless they look like
279 * unused parameters (modprobe will find them in /proc/cmdline).
281 static int __init
unknown_bootoption(char *param
, char *val
,
282 const char *unused
, void *arg
)
284 repair_env_string(param
, val
, unused
, NULL
);
286 /* Handle obsolete-style parameters */
287 if (obsolete_checksetup(param
))
290 /* Unused module parameter. */
291 if (strchr(param
, '.') && (!val
|| strchr(param
, '.') < val
))
298 /* Environment option */
300 for (i
= 0; envp_init
[i
]; i
++) {
301 if (i
== MAX_INIT_ENVS
) {
305 if (!strncmp(param
, envp_init
[i
], val
- param
))
308 envp_init
[i
] = param
;
310 /* Command line option */
312 for (i
= 0; argv_init
[i
]; i
++) {
313 if (i
== MAX_INIT_ARGS
) {
314 panic_later
= "init";
318 argv_init
[i
] = param
;
323 static int __init
init_setup(char *str
)
327 execute_command
= str
;
329 * In case LILO is going to boot us with default command line,
330 * it prepends "auto" before the whole cmdline which makes
331 * the shell think it should execute a script with such name.
332 * So we ignore all arguments entered _before_ init=... [MJ]
334 for (i
= 1; i
< MAX_INIT_ARGS
; i
++)
338 __setup("init=", init_setup
);
340 static int __init
rdinit_setup(char *str
)
344 ramdisk_execute_command
= str
;
345 /* See "auto" comment in init_setup */
346 for (i
= 1; i
< MAX_INIT_ARGS
; i
++)
350 __setup("rdinit=", rdinit_setup
);
353 static const unsigned int setup_max_cpus
= NR_CPUS
;
354 static inline void setup_nr_cpu_ids(void) { }
355 static inline void smp_prepare_cpus(unsigned int maxcpus
) { }
359 * We need to store the untouched command line for future reference.
360 * We also need to store the touched command line since the parameter
361 * parsing is performed in place, and we should allow a component to
362 * store reference of name/value for future reference.
364 static void __init
setup_command_line(char *command_line
)
367 memblock_virt_alloc(strlen(boot_command_line
) + 1, 0);
368 initcall_command_line
=
369 memblock_virt_alloc(strlen(boot_command_line
) + 1, 0);
370 static_command_line
= memblock_virt_alloc(strlen(command_line
) + 1, 0);
371 strcpy(saved_command_line
, boot_command_line
);
372 strcpy(static_command_line
, command_line
);
376 * We need to finalize in a non-__init function or else race conditions
377 * between the root thread and the init thread may cause start_kernel to
378 * be reaped by free_initmem before the root thread has proceeded to
381 * gcc-3.4 accidentally inlines this function, so use noinline.
384 static __initdata
DECLARE_COMPLETION(kthreadd_done
);
386 static noinline
void __init_refok
rest_init(void)
390 rcu_scheduler_starting();
391 smpboot_thread_init();
393 * We need to spawn init first so that it obtains pid 1, however
394 * the init task will end up wanting to create kthreads, which, if
395 * we schedule it before we create kthreadd, will OOPS.
397 kernel_thread(kernel_init
, NULL
, CLONE_FS
);
398 numa_default_policy();
399 pid
= kernel_thread(kthreadd
, NULL
, CLONE_FS
| CLONE_FILES
);
401 kthreadd_task
= find_task_by_pid_ns(pid
, &init_pid_ns
);
403 complete(&kthreadd_done
);
406 * The boot idle thread must execute schedule()
407 * at least once to get things moving:
409 init_idle_bootup_task(current
);
410 schedule_preempt_disabled();
411 /* Call into cpu_idle with preempt disabled */
412 cpu_startup_entry(CPUHP_ONLINE
);
415 /* Check for early params. */
416 static int __init
do_early_param(char *param
, char *val
,
417 const char *unused
, void *arg
)
419 const struct obs_kernel_param
*p
;
421 for (p
= __setup_start
; p
< __setup_end
; p
++) {
422 if ((p
->early
&& parameq(param
, p
->str
)) ||
423 (strcmp(param
, "console") == 0 &&
424 strcmp(p
->str
, "earlycon") == 0)
426 if (p
->setup_func(val
) != 0)
427 pr_warn("Malformed early option '%s'\n", param
);
430 /* We accept everything at this stage. */
434 void __init
parse_early_options(char *cmdline
)
436 parse_args("early options", cmdline
, NULL
, 0, 0, 0, NULL
,
440 /* Arch code calls this early on, or if not, just before other parsing. */
441 void __init
parse_early_param(void)
443 static int done __initdata
;
444 static char tmp_cmdline
[COMMAND_LINE_SIZE
] __initdata
;
449 /* All fall through to do_early_param. */
450 strlcpy(tmp_cmdline
, boot_command_line
, COMMAND_LINE_SIZE
);
451 parse_early_options(tmp_cmdline
);
455 void __init __weak
smp_setup_processor_id(void)
459 # if THREAD_SIZE >= PAGE_SIZE
460 void __init __weak
thread_info_cache_init(void)
466 * Set up kernel memory allocators
468 static void __init
mm_init(void)
471 * page_ext requires contiguous pages,
472 * bigger than MAX_ORDER unless SPARSEMEM.
474 page_ext_init_flatmem();
483 asmlinkage __visible
void __init
start_kernel(void)
489 * Need to run as early as possible, to initialize the
493 set_task_stack_end_magic(&init_task
);
494 smp_setup_processor_id();
495 debug_objects_early_init();
498 * Set up the the initial canary ASAP:
500 boot_init_stack_canary();
505 early_boot_irqs_disabled
= true;
508 * Interrupts are still disabled. Do necessary setups, then
513 pr_notice("%s", linux_banner
);
514 setup_arch(&command_line
);
515 mm_init_cpumask(&init_mm
);
516 setup_command_line(command_line
);
518 setup_per_cpu_areas();
519 boot_cpu_state_init();
520 smp_prepare_boot_cpu(); /* arch-specific boot-cpu hooks */
522 build_all_zonelists(NULL
, NULL
);
525 pr_notice("Kernel command line: %s\n", boot_command_line
);
527 after_dashes
= parse_args("Booting kernel",
528 static_command_line
, __start___param
,
529 __stop___param
- __start___param
,
530 -1, -1, NULL
, &unknown_bootoption
);
531 if (!IS_ERR_OR_NULL(after_dashes
))
532 parse_args("Setting init args", after_dashes
, NULL
, 0, -1, -1,
538 * These use large bootmem allocations and must precede
543 vfs_caches_init_early();
549 * Set up the scheduler prior starting any interrupts (such as the
550 * timer interrupt). Full topology setup happens at smp_init()
551 * time - but meanwhile we still have a functioning scheduler.
555 * Disable preemption - early bootup scheduling is extremely
556 * fragile until we cpu_idle() for the first time.
559 if (WARN(!irqs_disabled(),
560 "Interrupts were enabled *very* early, fixing it\n"))
565 /* trace_printk() and trace points may be used after this */
568 context_tracking_init();
570 /* init some links before init_ISA_irqs() */
580 sched_clock_postinit();
583 call_function_init();
584 WARN(!irqs_disabled(), "Interrupts were enabled early\n");
585 early_boot_irqs_disabled
= false;
588 kmem_cache_init_late();
591 * HACK ALERT! This is early. We're enabling the console before
592 * we've done PCI setups etc, and console_init() must be aware of
593 * this. But we do want output early, in case something goes wrong.
597 panic("Too many boot %s vars at `%s'", panic_later
,
603 * Need to run this when irqs are enabled, because it wants
604 * to self-test [hard/soft]-irqs on/off lock inversion bugs
609 #ifdef CONFIG_BLK_DEV_INITRD
610 if (initrd_start
&& !initrd_below_start_ok
&&
611 page_to_pfn(virt_to_page((void *)initrd_start
)) < min_low_pfn
) {
612 pr_crit("initrd overwritten (0x%08lx < 0x%08lx) - disabling it.\n",
613 page_to_pfn(virt_to_page((void *)initrd_start
)),
619 debug_objects_mem_init();
621 setup_per_cpu_pageset();
631 if (efi_enabled(EFI_RUNTIME_SERVICES
))
632 efi_enter_virtual_mode();
634 #ifdef CONFIG_X86_ESPFIX64
635 /* Should be run before the first non-init thread is created */
638 thread_info_cache_init();
648 /* rootfs populating might need page-writeback */
649 page_writeback_init();
654 taskstats_init_early();
659 acpi_subsystem_init();
662 if (efi_enabled(EFI_RUNTIME_SERVICES
)) {
664 efi_free_boot_services();
669 /* Do the rest non-__init'ed, we're now alive */
673 /* Call all constructor functions linked into the kernel. */
674 static void __init
do_ctors(void)
676 #ifdef CONFIG_CONSTRUCTORS
677 ctor_fn_t
*fn
= (ctor_fn_t
*) __ctors_start
;
679 for (; fn
< (ctor_fn_t
*) __ctors_end
; fn
++)
685 core_param(initcall_debug
, initcall_debug
, bool, 0644);
687 #ifdef CONFIG_KALLSYMS
688 struct blacklist_entry
{
689 struct list_head next
;
693 static __initdata_or_module
LIST_HEAD(blacklisted_initcalls
);
695 static int __init
initcall_blacklist(char *str
)
698 struct blacklist_entry
*entry
;
700 /* str argument is a comma-separated list of functions */
702 str_entry
= strsep(&str
, ",");
704 pr_debug("blacklisting initcall %s\n", str_entry
);
705 entry
= alloc_bootmem(sizeof(*entry
));
706 entry
->buf
= alloc_bootmem(strlen(str_entry
) + 1);
707 strcpy(entry
->buf
, str_entry
);
708 list_add(&entry
->next
, &blacklisted_initcalls
);
715 static bool __init_or_module
initcall_blacklisted(initcall_t fn
)
717 struct list_head
*tmp
;
718 struct blacklist_entry
*entry
;
721 fn_name
= kasprintf(GFP_KERNEL
, "%pf", fn
);
725 list_for_each(tmp
, &blacklisted_initcalls
) {
726 entry
= list_entry(tmp
, struct blacklist_entry
, next
);
727 if (!strcmp(fn_name
, entry
->buf
)) {
728 pr_debug("initcall %s blacklisted\n", fn_name
);
738 static int __init
initcall_blacklist(char *str
)
740 pr_warn("initcall_blacklist requires CONFIG_KALLSYMS\n");
744 static bool __init_or_module
initcall_blacklisted(initcall_t fn
)
749 __setup("initcall_blacklist=", initcall_blacklist
);
751 static int __init_or_module
do_one_initcall_debug(initcall_t fn
)
753 ktime_t calltime
, delta
, rettime
;
754 unsigned long long duration
;
757 printk(KERN_DEBUG
"calling %pF @ %i\n", fn
, task_pid_nr(current
));
758 calltime
= ktime_get();
760 rettime
= ktime_get();
761 delta
= ktime_sub(rettime
, calltime
);
762 duration
= (unsigned long long) ktime_to_ns(delta
) >> 10;
763 printk(KERN_DEBUG
"initcall %pF returned %d after %lld usecs\n",
769 int __init_or_module
do_one_initcall(initcall_t fn
)
771 int count
= preempt_count();
775 if (initcall_blacklisted(fn
))
779 ret
= do_one_initcall_debug(fn
);
785 if (preempt_count() != count
) {
786 sprintf(msgbuf
, "preemption imbalance ");
787 preempt_count_set(count
);
789 if (irqs_disabled()) {
790 strlcat(msgbuf
, "disabled interrupts ", sizeof(msgbuf
));
793 WARN(msgbuf
[0], "initcall %pF returned with %s\n", fn
, msgbuf
);
799 extern initcall_t __initcall_start
[];
800 extern initcall_t __initcall0_start
[];
801 extern initcall_t __initcall1_start
[];
802 extern initcall_t __initcall2_start
[];
803 extern initcall_t __initcall3_start
[];
804 extern initcall_t __initcall4_start
[];
805 extern initcall_t __initcall5_start
[];
806 extern initcall_t __initcall6_start
[];
807 extern initcall_t __initcall7_start
[];
808 extern initcall_t __initcall_end
[];
810 static initcall_t
*initcall_levels
[] __initdata
= {
822 /* Keep these in sync with initcalls in include/linux/init.h */
823 static char *initcall_level_names
[] __initdata
= {
834 static void __init
do_initcall_level(int level
)
838 strcpy(initcall_command_line
, saved_command_line
);
839 parse_args(initcall_level_names
[level
],
840 initcall_command_line
, __start___param
,
841 __stop___param
- __start___param
,
843 NULL
, &repair_env_string
);
845 for (fn
= initcall_levels
[level
]; fn
< initcall_levels
[level
+1]; fn
++)
846 do_one_initcall(*fn
);
849 static void __init
do_initcalls(void)
853 for (level
= 0; level
< ARRAY_SIZE(initcall_levels
) - 1; level
++)
854 do_initcall_level(level
);
858 * Ok, the machine is now initialized. None of the devices
859 * have been touched yet, but the CPU subsystem is up and
860 * running, and memory and process management works.
862 * Now we can finally start doing some real work..
864 static void __init
do_basic_setup(void)
871 usermodehelper_enable();
873 random_int_secret_init();
876 static void __init
do_pre_smp_initcalls(void)
880 for (fn
= __initcall_start
; fn
< __initcall0_start
; fn
++)
881 do_one_initcall(*fn
);
885 * This function requests modules which should be loaded by default and is
886 * called twice right after initrd is mounted and right before init is
887 * exec'd. If such modules are on either initrd or rootfs, they will be
888 * loaded before control is passed to userland.
890 void __init
load_default_modules(void)
892 load_default_elevator_module();
895 static int run_init_process(const char *init_filename
)
897 argv_init
[0] = init_filename
;
898 return do_execve(getname_kernel(init_filename
),
899 (const char __user
*const __user
*)argv_init
,
900 (const char __user
*const __user
*)envp_init
);
903 static int try_to_run_init_process(const char *init_filename
)
907 ret
= run_init_process(init_filename
);
909 if (ret
&& ret
!= -ENOENT
) {
910 pr_err("Starting init: %s exists but couldn't execute it (error %d)\n",
917 static noinline
void __init
kernel_init_freeable(void);
919 static int __ref
kernel_init(void *unused
)
923 kernel_init_freeable();
924 /* need to finish all async __init code before freeing the memory */
925 async_synchronize_full();
928 system_state
= SYSTEM_RUNNING
;
929 numa_default_policy();
931 flush_delayed_fput();
933 rcu_end_inkernel_boot();
935 if (ramdisk_execute_command
) {
936 ret
= run_init_process(ramdisk_execute_command
);
939 pr_err("Failed to execute %s (error %d)\n",
940 ramdisk_execute_command
, ret
);
944 * We try each of these until one succeeds.
946 * The Bourne shell can be used instead of init if we are
947 * trying to recover a really broken machine.
949 if (execute_command
) {
950 ret
= run_init_process(execute_command
);
953 panic("Requested init %s failed (error %d).",
954 execute_command
, ret
);
956 if (!try_to_run_init_process("/sbin/init") ||
957 !try_to_run_init_process("/etc/init") ||
958 !try_to_run_init_process("/bin/init") ||
959 !try_to_run_init_process("/bin/sh"))
962 panic("No working init found. Try passing init= option to kernel. "
963 "See Linux Documentation/init.txt for guidance.");
966 static noinline
void __init
kernel_init_freeable(void)
969 * Wait until kthreadd is all set-up.
971 wait_for_completion(&kthreadd_done
);
973 /* Now the scheduler is fully set up and can do blocking allocations */
974 gfp_allowed_mask
= __GFP_BITS_MASK
;
977 * init can allocate pages on any node
979 set_mems_allowed(node_states
[N_MEMORY
]);
981 * init can run on any cpu.
983 set_cpus_allowed_ptr(current
, cpu_all_mask
);
985 cad_pid
= task_pid(current
);
987 smp_prepare_cpus(setup_max_cpus
);
989 do_pre_smp_initcalls();
990 lockup_detector_init();
995 page_alloc_init_late();
999 /* Open the /dev/console on the rootfs, this should never fail */
1000 if (sys_open((const char __user
*) "/dev/console", O_RDWR
, 0) < 0)
1001 pr_err("Warning: unable to open an initial console.\n");
1006 * check if there is an early userspace init. If yes, let it do all
1010 if (!ramdisk_execute_command
)
1011 ramdisk_execute_command
= "/init";
1013 if (sys_access((const char __user
*) ramdisk_execute_command
, 0) != 0) {
1014 ramdisk_execute_command
= NULL
;
1015 prepare_namespace();
1019 * Ok, we have completed the initial bootup, and
1020 * we're essentially up and running. Get rid of the
1021 * initmem segments and start the user-mode stuff..
1023 * rootfs is available now, try loading the public keys
1024 * and default modules
1027 integrity_load_keys();
1028 load_default_modules();