4 * Copyright (C) 1991, 1992 Linus Torvalds
6 * GK 2/5/95 - Changed to support mounting root fs via NFS
7 * Added initrd & change_root: Werner Almesberger & Hans Lermen, Feb '96
8 * Moan early if gcc is old, avoiding bogus kernels - Paul Gortmaker, May '96
12 #define DEBUG /* Enable initcall_debug */
14 #include <linux/types.h>
15 #include <linux/extable.h>
16 #include <linux/module.h>
17 #include <linux/proc_fs.h>
18 #include <linux/binfmts.h>
19 #include <linux/kernel.h>
20 #include <linux/syscalls.h>
21 #include <linux/stackprotector.h>
22 #include <linux/string.h>
23 #include <linux/ctype.h>
24 #include <linux/delay.h>
25 #include <linux/ioport.h>
26 #include <linux/init.h>
27 #include <linux/initrd.h>
28 #include <linux/bootmem.h>
29 #include <linux/acpi.h>
30 #include <linux/tty.h>
31 #include <linux/nmi.h>
32 #include <linux/percpu.h>
33 #include <linux/kmod.h>
34 #include <linux/vmalloc.h>
35 #include <linux/kernel_stat.h>
36 #include <linux/start_kernel.h>
37 #include <linux/security.h>
38 #include <linux/smp.h>
39 #include <linux/profile.h>
40 #include <linux/rcupdate.h>
41 #include <linux/moduleparam.h>
42 #include <linux/kallsyms.h>
43 #include <linux/writeback.h>
44 #include <linux/cpu.h>
45 #include <linux/cpuset.h>
46 #include <linux/cgroup.h>
47 #include <linux/efi.h>
48 #include <linux/tick.h>
49 #include <linux/interrupt.h>
50 #include <linux/taskstats_kern.h>
51 #include <linux/delayacct.h>
52 #include <linux/unistd.h>
53 #include <linux/rmap.h>
54 #include <linux/mempolicy.h>
55 #include <linux/key.h>
56 #include <linux/buffer_head.h>
57 #include <linux/page_ext.h>
58 #include <linux/debug_locks.h>
59 #include <linux/debugobjects.h>
60 #include <linux/lockdep.h>
61 #include <linux/kmemleak.h>
62 #include <linux/pid_namespace.h>
63 #include <linux/device.h>
64 #include <linux/kthread.h>
65 #include <linux/sched.h>
66 #include <linux/sched/init.h>
67 #include <linux/signal.h>
68 #include <linux/idr.h>
69 #include <linux/kgdb.h>
70 #include <linux/ftrace.h>
71 #include <linux/async.h>
72 #include <linux/kmemcheck.h>
73 #include <linux/sfi.h>
74 #include <linux/shmem_fs.h>
75 #include <linux/slab.h>
76 #include <linux/perf_event.h>
77 #include <linux/ptrace.h>
78 #include <linux/blkdev.h>
79 #include <linux/elevator.h>
80 #include <linux/sched_clock.h>
81 #include <linux/sched/task.h>
82 #include <linux/sched/task_stack.h>
83 #include <linux/context_tracking.h>
84 #include <linux/random.h>
85 #include <linux/list.h>
86 #include <linux/integrity.h>
87 #include <linux/proc_ns.h>
89 #include <linux/cache.h>
90 #include <linux/rodata_test.h>
94 #include <asm/setup.h>
95 #include <asm/sections.h>
96 #include <asm/cacheflush.h>
98 static int kernel_init(void *);
100 extern void init_IRQ(void);
101 extern void fork_init(void);
102 extern void radix_tree_init(void);
105 * Debug helper: via this flag we know that we are in 'early bootup code'
106 * where only the boot processor is running with IRQ disabled. This means
107 * two things - IRQ must not be enabled before the flag is cleared and some
108 * operations which are not allowed with IRQ disabled are allowed while the
111 bool early_boot_irqs_disabled __read_mostly;
113 enum system_states system_state __read_mostly;
114 EXPORT_SYMBOL(system_state);
117 * Boot command-line arguments
119 #define MAX_INIT_ARGS CONFIG_INIT_ENV_ARG_LIMIT
120 #define MAX_INIT_ENVS CONFIG_INIT_ENV_ARG_LIMIT
122 extern void time_init(void);
123 /* Default late time init is NULL. archs can override this later. */
124 void (*__initdata late_time_init)(void);
126 /* Untouched command line saved by arch-specific code. */
127 char __initdata boot_command_line[COMMAND_LINE_SIZE];
128 /* Untouched saved command line (eg. for /proc) */
129 char *saved_command_line;
130 /* Command line for parameter parsing */
131 static char *static_command_line;
132 /* Command line for per-initcall parameter parsing */
133 static char *initcall_command_line;
135 static char *execute_command;
136 static char *ramdisk_execute_command;
139 * Used to generate warnings if static_key manipulation functions are used
140 * before jump_label_init is called.
142 bool static_key_initialized __read_mostly;
143 EXPORT_SYMBOL_GPL(static_key_initialized);
146 * If set, this is an indication to the drivers that reset the underlying
147 * device before going ahead with the initialization otherwise driver might
148 * rely on the BIOS and skip the reset operation.
150 * This is useful if kernel is booting in an unreliable environment.
151 * For ex. kdump situation where previous kernel has crashed, BIOS has been
152 * skipped and devices will be in unknown state.
154 unsigned int reset_devices;
155 EXPORT_SYMBOL(reset_devices);
157 static int __init set_reset_devices(char *str)
163 __setup("reset_devices", set_reset_devices);
165 static const char *argv_init[MAX_INIT_ARGS+2] = { "init", NULL, };
166 const char *envp_init[MAX_INIT_ENVS+2] = { "HOME=/", "TERM=linux", NULL, };
167 static const char *panic_later, *panic_param;
169 extern const struct obs_kernel_param __setup_start[], __setup_end[];
171 static bool __init obsolete_checksetup(char *line)
173 const struct obs_kernel_param *p;
174 bool had_early_param = false;
178 int n = strlen(p->str);
179 if (parameqn(line, p->str, n)) {
181 /* Already done in parse_early_param?
182 * (Needs exact match on param part).
183 * Keep iterating, as we can have early
184 * params and __setups of same names 8( */
185 if (line[n] == '\0' || line[n] == '=')
186 had_early_param = true;
187 } else if (!p->setup_func) {
188 pr_warn("Parameter %s is obsolete, ignored\n",
191 } else if (p->setup_func(line + n))
195 } while (p < __setup_end);
197 return had_early_param;
201 * This should be approx 2 Bo*oMips to start (note initial shift), and will
202 * still work even if initially too large, it will just take slightly longer
204 unsigned long loops_per_jiffy = (1<<12);
205 EXPORT_SYMBOL(loops_per_jiffy);
207 static int __init debug_kernel(char *str)
209 console_loglevel = CONSOLE_LOGLEVEL_DEBUG;
213 static int __init quiet_kernel(char *str)
215 console_loglevel = CONSOLE_LOGLEVEL_QUIET;
219 early_param("debug", debug_kernel);
220 early_param("quiet", quiet_kernel);
222 static int __init loglevel(char *str)
227 * Only update loglevel value when a correct setting was passed,
228 * to prevent blind crashes (when loglevel being set to 0) that
229 * are quite hard to debug
231 if (get_option(&str, &newlevel)) {
232 console_loglevel = newlevel;
239 early_param("loglevel", loglevel);
241 /* Change NUL term back to "=", to make "param" the whole string. */
242 static int __init repair_env_string(char *param, char *val,
243 const char *unused, void *arg)
246 /* param=val or param="val"? */
247 if (val == param+strlen(param)+1)
249 else if (val == param+strlen(param)+2) {
251 memmove(val-1, val, strlen(val)+1);
259 /* Anything after -- gets handed straight to init. */
260 static int __init set_init_arg(char *param, char *val,
261 const char *unused, void *arg)
268 repair_env_string(param, val, unused, NULL);
270 for (i = 0; argv_init[i]; i++) {
271 if (i == MAX_INIT_ARGS) {
272 panic_later = "init";
277 argv_init[i] = param;
282 * Unknown boot options get handed to init, unless they look like
283 * unused parameters (modprobe will find them in /proc/cmdline).
285 static int __init unknown_bootoption(char *param, char *val,
286 const char *unused, void *arg)
288 repair_env_string(param, val, unused, NULL);
290 /* Handle obsolete-style parameters */
291 if (obsolete_checksetup(param))
294 /* Unused module parameter. */
295 if (strchr(param, '.') && (!val || strchr(param, '.') < val))
302 /* Environment option */
304 for (i = 0; envp_init[i]; i++) {
305 if (i == MAX_INIT_ENVS) {
309 if (!strncmp(param, envp_init[i], val - param))
312 envp_init[i] = param;
314 /* Command line option */
316 for (i = 0; argv_init[i]; i++) {
317 if (i == MAX_INIT_ARGS) {
318 panic_later = "init";
322 argv_init[i] = param;
327 static int __init init_setup(char *str)
331 execute_command = str;
333 * In case LILO is going to boot us with default command line,
334 * it prepends "auto" before the whole cmdline which makes
335 * the shell think it should execute a script with such name.
336 * So we ignore all arguments entered _before_ init=... [MJ]
338 for (i = 1; i < MAX_INIT_ARGS; i++)
342 __setup("init=", init_setup);
344 static int __init rdinit_setup(char *str)
348 ramdisk_execute_command = str;
349 /* See "auto" comment in init_setup */
350 for (i = 1; i < MAX_INIT_ARGS; i++)
354 __setup("rdinit=", rdinit_setup);
357 static const unsigned int setup_max_cpus = NR_CPUS;
358 static inline void setup_nr_cpu_ids(void) { }
359 static inline void smp_prepare_cpus(unsigned int maxcpus) { }
363 * We need to store the untouched command line for future reference.
364 * We also need to store the touched command line since the parameter
365 * parsing is performed in place, and we should allow a component to
366 * store reference of name/value for future reference.
368 static void __init setup_command_line(char *command_line)
371 memblock_virt_alloc(strlen(boot_command_line) + 1, 0);
372 initcall_command_line =
373 memblock_virt_alloc(strlen(boot_command_line) + 1, 0);
374 static_command_line = memblock_virt_alloc(strlen(command_line) + 1, 0);
375 strcpy(saved_command_line, boot_command_line);
376 strcpy(static_command_line, command_line);
380 * We need to finalize in a non-__init function or else race conditions
381 * between the root thread and the init thread may cause start_kernel to
382 * be reaped by free_initmem before the root thread has proceeded to
385 * gcc-3.4 accidentally inlines this function, so use noinline.
388 static __initdata DECLARE_COMPLETION(kthreadd_done);
390 static noinline void __ref rest_init(void)
394 rcu_scheduler_starting();
396 * We need to spawn init first so that it obtains pid 1, however
397 * the init task will end up wanting to create kthreads, which, if
398 * we schedule it before we create kthreadd, will OOPS.
400 kernel_thread(kernel_init, NULL, CLONE_FS);
401 numa_default_policy();
402 pid = kernel_thread(kthreadd, NULL, CLONE_FS | CLONE_FILES);
404 kthreadd_task = find_task_by_pid_ns(pid, &init_pid_ns);
406 complete(&kthreadd_done);
409 * The boot idle thread must execute schedule()
410 * at least once to get things moving:
412 init_idle_bootup_task(current);
413 schedule_preempt_disabled();
414 /* Call into cpu_idle with preempt disabled */
415 cpu_startup_entry(CPUHP_ONLINE);
418 /* Check for early params. */
419 static int __init do_early_param(char *param, char *val,
420 const char *unused, void *arg)
422 const struct obs_kernel_param *p;
424 for (p = __setup_start; p < __setup_end; p++) {
425 if ((p->early && parameq(param, p->str)) ||
426 (strcmp(param, "console") == 0 &&
427 strcmp(p->str, "earlycon") == 0)
429 if (p->setup_func(val) != 0)
430 pr_warn("Malformed early option '%s'\n", param);
433 /* We accept everything at this stage. */
437 void __init parse_early_options(char *cmdline)
439 parse_args("early options", cmdline, NULL, 0, 0, 0, NULL,
443 /* Arch code calls this early on, or if not, just before other parsing. */
444 void __init parse_early_param(void)
446 static int done __initdata;
447 static char tmp_cmdline[COMMAND_LINE_SIZE] __initdata;
452 /* All fall through to do_early_param. */
453 strlcpy(tmp_cmdline, boot_command_line, COMMAND_LINE_SIZE);
454 parse_early_options(tmp_cmdline);
458 void __init __weak arch_post_acpi_subsys_init(void) { }
460 void __init __weak smp_setup_processor_id(void)
464 # if THREAD_SIZE >= PAGE_SIZE
465 void __init __weak thread_stack_cache_init(void)
471 * Set up kernel memory allocators
473 static void __init mm_init(void)
476 * page_ext requires contiguous pages,
477 * bigger than MAX_ORDER unless SPARSEMEM.
479 page_ext_init_flatmem();
488 asmlinkage __visible void __init start_kernel(void)
493 set_task_stack_end_magic(&init_task);
494 smp_setup_processor_id();
495 debug_objects_early_init();
498 * Set up the the initial canary ASAP:
500 boot_init_stack_canary();
505 early_boot_irqs_disabled = true;
508 * Interrupts are still disabled. Do necessary setups, then
513 pr_notice("%s", linux_banner);
514 setup_arch(&command_line);
515 mm_init_cpumask(&init_mm);
516 setup_command_line(command_line);
518 setup_per_cpu_areas();
519 boot_cpu_state_init();
520 smp_prepare_boot_cpu(); /* arch-specific boot-cpu hooks */
522 build_all_zonelists(NULL, NULL);
525 pr_notice("Kernel command line: %s\n", boot_command_line);
527 after_dashes = parse_args("Booting kernel",
528 static_command_line, __start___param,
529 __stop___param - __start___param,
530 -1, -1, NULL, &unknown_bootoption);
531 if (!IS_ERR_OR_NULL(after_dashes))
532 parse_args("Setting init args", after_dashes, NULL, 0, -1, -1,
538 * These use large bootmem allocations and must precede
543 vfs_caches_init_early();
549 * Set up the scheduler prior starting any interrupts (such as the
550 * timer interrupt). Full topology setup happens at smp_init()
551 * time - but meanwhile we still have a functioning scheduler.
555 * Disable preemption - early bootup scheduling is extremely
556 * fragile until we cpu_idle() for the first time.
559 if (WARN(!irqs_disabled(),
560 "Interrupts were enabled *very* early, fixing it\n"))
565 * Allow workqueue creation and work item queueing/cancelling
566 * early. Work item execution depends on kthreads and starts after
569 workqueue_init_early();
573 /* trace_printk() and trace points may be used after this */
576 context_tracking_init();
577 /* init some links before init_ISA_irqs() */
587 sched_clock_postinit();
591 call_function_init();
592 WARN(!irqs_disabled(), "Interrupts were enabled early\n");
593 early_boot_irqs_disabled = false;
596 kmem_cache_init_late();
599 * HACK ALERT! This is early. We're enabling the console before
600 * we've done PCI setups etc, and console_init() must be aware of
601 * this. But we do want output early, in case something goes wrong.
605 panic("Too many boot %s vars at `%s'", panic_later,
611 * Need to run this when irqs are enabled, because it wants
612 * to self-test [hard/soft]-irqs on/off lock inversion bugs
617 #ifdef CONFIG_BLK_DEV_INITRD
618 if (initrd_start && !initrd_below_start_ok &&
619 page_to_pfn(virt_to_page((void *)initrd_start)) < min_low_pfn) {
620 pr_crit("initrd overwritten (0x%08lx < 0x%08lx) - disabling it.\n",
621 page_to_pfn(virt_to_page((void *)initrd_start)),
627 debug_objects_mem_init();
629 setup_per_cpu_pageset();
638 if (efi_enabled(EFI_RUNTIME_SERVICES))
639 efi_enter_virtual_mode();
641 #ifdef CONFIG_X86_ESPFIX64
642 /* Should be run before the first non-init thread is created */
645 thread_stack_cache_init();
660 taskstats_init_early();
665 acpi_subsystem_init();
666 arch_post_acpi_subsys_init();
669 if (efi_enabled(EFI_RUNTIME_SERVICES)) {
670 efi_free_boot_services();
675 /* Do the rest non-__init'ed, we're now alive */
679 /* Call all constructor functions linked into the kernel. */
680 static void __init do_ctors(void)
682 #ifdef CONFIG_CONSTRUCTORS
683 ctor_fn_t *fn = (ctor_fn_t *) __ctors_start;
685 for (; fn < (ctor_fn_t *) __ctors_end; fn++)
691 core_param(initcall_debug, initcall_debug, bool, 0644);
693 #ifdef CONFIG_KALLSYMS
694 struct blacklist_entry {
695 struct list_head next;
699 static __initdata_or_module LIST_HEAD(blacklisted_initcalls);
701 static int __init initcall_blacklist(char *str)
704 struct blacklist_entry *entry;
706 /* str argument is a comma-separated list of functions */
708 str_entry = strsep(&str, ",");
710 pr_debug("blacklisting initcall %s\n", str_entry);
711 entry = alloc_bootmem(sizeof(*entry));
712 entry->buf = alloc_bootmem(strlen(str_entry) + 1);
713 strcpy(entry->buf, str_entry);
714 list_add(&entry->next, &blacklisted_initcalls);
721 static bool __init_or_module initcall_blacklisted(initcall_t fn)
723 struct blacklist_entry *entry;
724 char fn_name[KSYM_SYMBOL_LEN];
727 if (list_empty(&blacklisted_initcalls))
730 addr = (unsigned long) dereference_function_descriptor(fn);
731 sprint_symbol_no_offset(fn_name, addr);
734 * fn will be "function_name [module_name]" where [module_name] is not
735 * displayed for built-in init functions. Strip off the [module_name].
737 strreplace(fn_name, ' ', '\0');
739 list_for_each_entry(entry, &blacklisted_initcalls, next) {
740 if (!strcmp(fn_name, entry->buf)) {
741 pr_debug("initcall %s blacklisted\n", fn_name);
749 static int __init initcall_blacklist(char *str)
751 pr_warn("initcall_blacklist requires CONFIG_KALLSYMS\n");
755 static bool __init_or_module initcall_blacklisted(initcall_t fn)
760 __setup("initcall_blacklist=", initcall_blacklist);
762 static int __init_or_module do_one_initcall_debug(initcall_t fn)
764 ktime_t calltime, delta, rettime;
765 unsigned long long duration;
768 printk(KERN_DEBUG "calling %pF @ %i\n", fn, task_pid_nr(current));
769 calltime = ktime_get();
771 rettime = ktime_get();
772 delta = ktime_sub(rettime, calltime);
773 duration = (unsigned long long) ktime_to_ns(delta) >> 10;
774 printk(KERN_DEBUG "initcall %pF returned %d after %lld usecs\n",
780 int __init_or_module do_one_initcall(initcall_t fn)
782 int count = preempt_count();
786 if (initcall_blacklisted(fn))
790 ret = do_one_initcall_debug(fn);
796 if (preempt_count() != count) {
797 sprintf(msgbuf, "preemption imbalance ");
798 preempt_count_set(count);
800 if (irqs_disabled()) {
801 strlcat(msgbuf, "disabled interrupts ", sizeof(msgbuf));
804 WARN(msgbuf[0], "initcall %pF returned with %s\n", fn, msgbuf);
806 add_latent_entropy();
811 extern initcall_t __initcall_start[];
812 extern initcall_t __initcall0_start[];
813 extern initcall_t __initcall1_start[];
814 extern initcall_t __initcall2_start[];
815 extern initcall_t __initcall3_start[];
816 extern initcall_t __initcall4_start[];
817 extern initcall_t __initcall5_start[];
818 extern initcall_t __initcall6_start[];
819 extern initcall_t __initcall7_start[];
820 extern initcall_t __initcall_end[];
822 static initcall_t *initcall_levels[] __initdata = {
834 /* Keep these in sync with initcalls in include/linux/init.h */
835 static char *initcall_level_names[] __initdata = {
846 static void __init do_initcall_level(int level)
850 strcpy(initcall_command_line, saved_command_line);
851 parse_args(initcall_level_names[level],
852 initcall_command_line, __start___param,
853 __stop___param - __start___param,
855 NULL, &repair_env_string);
857 for (fn = initcall_levels[level]; fn < initcall_levels[level+1]; fn++)
858 do_one_initcall(*fn);
861 static void __init do_initcalls(void)
865 for (level = 0; level < ARRAY_SIZE(initcall_levels) - 1; level++)
866 do_initcall_level(level);
870 * Ok, the machine is now initialized. None of the devices
871 * have been touched yet, but the CPU subsystem is up and
872 * running, and memory and process management works.
874 * Now we can finally start doing some real work..
876 static void __init do_basic_setup(void)
883 usermodehelper_enable();
887 static void __init do_pre_smp_initcalls(void)
891 for (fn = __initcall_start; fn < __initcall0_start; fn++)
892 do_one_initcall(*fn);
896 * This function requests modules which should be loaded by default and is
897 * called twice right after initrd is mounted and right before init is
898 * exec'd. If such modules are on either initrd or rootfs, they will be
899 * loaded before control is passed to userland.
901 void __init load_default_modules(void)
903 load_default_elevator_module();
906 static int run_init_process(const char *init_filename)
908 argv_init[0] = init_filename;
909 return do_execve(getname_kernel(init_filename),
910 (const char __user *const __user *)argv_init,
911 (const char __user *const __user *)envp_init);
914 static int try_to_run_init_process(const char *init_filename)
918 ret = run_init_process(init_filename);
920 if (ret && ret != -ENOENT) {
921 pr_err("Starting init: %s exists but couldn't execute it (error %d)\n",
928 static noinline void __init kernel_init_freeable(void);
930 #if defined(CONFIG_STRICT_KERNEL_RWX) || defined(CONFIG_STRICT_MODULE_RWX)
931 bool rodata_enabled __ro_after_init = true;
932 static int __init set_debug_rodata(char *str)
934 return strtobool(str, &rodata_enabled);
936 __setup("rodata=", set_debug_rodata);
939 #ifdef CONFIG_STRICT_KERNEL_RWX
940 static void mark_readonly(void)
942 if (rodata_enabled) {
946 pr_info("Kernel memory protection disabled.\n");
949 static inline void mark_readonly(void)
951 pr_warn("This architecture does not have kernel memory protection.\n");
955 static int __ref kernel_init(void *unused)
959 kernel_init_freeable();
960 /* need to finish all async __init code before freeing the memory */
961 async_synchronize_full();
964 system_state = SYSTEM_RUNNING;
965 numa_default_policy();
967 rcu_end_inkernel_boot();
969 if (ramdisk_execute_command) {
970 ret = run_init_process(ramdisk_execute_command);
973 pr_err("Failed to execute %s (error %d)\n",
974 ramdisk_execute_command, ret);
978 * We try each of these until one succeeds.
980 * The Bourne shell can be used instead of init if we are
981 * trying to recover a really broken machine.
983 if (execute_command) {
984 ret = run_init_process(execute_command);
987 panic("Requested init %s failed (error %d).",
988 execute_command, ret);
990 if (!try_to_run_init_process("/sbin/init") ||
991 !try_to_run_init_process("/etc/init") ||
992 !try_to_run_init_process("/bin/init") ||
993 !try_to_run_init_process("/bin/sh"))
996 panic("No working init found. Try passing init= option to kernel. "
997 "See Linux Documentation/admin-guide/init.rst for guidance.");
1000 static noinline void __init kernel_init_freeable(void)
1003 * Wait until kthreadd is all set-up.
1005 wait_for_completion(&kthreadd_done);
1007 /* Now the scheduler is fully set up and can do blocking allocations */
1008 gfp_allowed_mask = __GFP_BITS_MASK;
1011 * init can allocate pages on any node
1013 set_mems_allowed(node_states[N_MEMORY]);
1015 * init can run on any cpu.
1017 set_cpus_allowed_ptr(current, cpu_all_mask);
1019 cad_pid = task_pid(current);
1021 smp_prepare_cpus(setup_max_cpus);
1025 init_mm_internals();
1027 do_pre_smp_initcalls();
1028 lockup_detector_init();
1033 page_alloc_init_late();
1037 /* Open the /dev/console on the rootfs, this should never fail */
1038 if (sys_open((const char __user *) "/dev/console", O_RDWR, 0) < 0)
1039 pr_err("Warning: unable to open an initial console.\n");
1044 * check if there is an early userspace init. If yes, let it do all
1048 if (!ramdisk_execute_command)
1049 ramdisk_execute_command = "/init";
1051 if (sys_access((const char __user *) ramdisk_execute_command, 0) != 0) {
1052 ramdisk_execute_command = NULL;
1053 prepare_namespace();
1057 * Ok, we have completed the initial bootup, and
1058 * we're essentially up and running. Get rid of the
1059 * initmem segments and start the user-mode stuff..
1061 * rootfs is available now, try loading the public keys
1062 * and default modules
1065 integrity_load_keys();
1066 load_default_modules();