Linux Booting Procedure 

Here I am giving you a detailed view about linux booting procedure. As we know linux booting involves multiple steps and stages . Here it the brief  diagram for better understanding. 

As per the diagram i will explain each and every process as detail.

1. The initial process is called POST ( Power On Self Test) where the bios will start addressing from a particular location (0xFFFF0). The function of the bios in this stage is to perform hardware check and device initialization . Basically BIOS contain two processes one is for POST and other one will initialize the necessary hardware. To boot the operating system BIOS will search the bootable device where the preference  is defined in the CMOS chip of the system. Bootable devices may be a partition of harddisk, CD-ROM, USB flash drive, a network device etc.

2. Commonly linux is booting from HDD, where the Master Boot Record (MBR) contains the primary boot loader. MBR is the 512 byte size where the first 446 byte contains the boot loader (executable code and error text) , 64 byte contains the partition table details of 4 partitions and next 2 byte is the magic number (0xAA55). The magic number serves as a validation code for MBR. The primary function of the primary boot loader is to identify the secondary boot loader (in stage 2) by looking in the  MBR . It will check the active partition and remaining partitions also will be validated by cross checking with MBR and add the details to RAM for execution.

3. The second boot loader is called as kernel loader and the task of this stage is to load the linux kernel with RAM disk. The boot loader for this stage is called as GRUB ( previously LILO also available). GRUB stands for Grant Unified Boot loader and the major difference between GRUB and LILO is GRUB can recognize the file systems. GRUB can load the linux kernel from ext2 or ext3 file systems and this will be accomplished by making the normal 2 stage boot process in to 3 stage boot process.  Stage 1 (MBR) will load the stage 1.g boot loader which will understand the file system where the linux kernel belongs. For example reiserfs_stage1_5 (for loading Reiser journeling file systems) and e2fs_stage1_5 ( for loading ext2 and ext3 file systems) . In stage 2 GRUB will list the avilable kernel modules and as per the default configuration mentioned in /etc/grub.conf (soft links to /boot/grub/grub.conf) it will load the kernel image and default initrd image to the memory .

                                                                                                          GRUB boot loader

                                                                                                 


                                                           /etc/grub.conf (/boot/grub/grub.conf)

1. default=0
As default first kernel entry will be get loaded in the system and if you have multiple kernel entries you have to change the default value according to that.
2.timeout=5
While system will boot it will wait 5mins for user selecting the kernel
3.SplashImage
It will load the image while you booting the OS. The default location of the image is mentioned in the line. ( you can change the back ground image to your own by following method
#convert image.png -resize 640x480 -colors 14 splash.xpm
#gzip splash.xpm)
4.hiddenmenu
This will hide the boot menu as default and you can see the boot menu once you press e in grub. ( if  you want to see the boot menu as default you can comment this option)
5.title
This will set the title for kernel lebel as "CentOS (2.6.18-128.el5)
6.root (hd0,0)
This indicates hard drive and partition details
7.kernel
This settings will load the kernel image and mount the root file system in /dev/VolGroup00/LogVol00 and kernel will execute /sbin/init with a process id of 1
8.initrd
Initrd has executable driver modules and it will load the RAM disk.

Kernel 

Kernel is the executable program with compressed stage ( size of 512 KB approximately ) . Kernel will be loaded in RAM disk for execution purpose . This execution will happen trough 3 stages.

a. Assembly routine - Initial stage system will invoke ./arch/i386/boot/head.s and function of this stage is to check basic hardware setup for kernel and it will invoke startup_32 function.

b.Startup_32 - This function will be called from ./arch/i386/boot/compressed/head.c and this function will set up basic environment (stack etc) for kernel booting.

c. decompress_kernel- This function will decompress the kernel and load to the memory and same will be loaded from ./arch/i386/boot/compressed/misc.c

Along with these three functions one more startup_32 function also will be called and this function will do the memory allocation by initializing page tables and enabling memory paging. Once the initrd function is enabled it will act as a RAM disk and allows the kernel to mount the /root file system temporarily also this will allows to detect the file real file systems and network to mount the original file systems for booting process.

Init process 

After the kernel boots init process (/sbin/init)will be started according to the configuration in /etc/inittab

Sample inittab file 

Also you can see this script will call the system initialization script called /etc/rc.d/rc.sysinit which have following functions 

• run /sbin/initlog - To log the init process 
• run devfs to manage and run devices 
• run network scripts /etc/sysconfig/network
• start graphical boot if configured (RHGB)
• start console terminals,load keymap,systemfonts - /sbin/mingetty & /sbin/setsysfont
• mount /proc for starting device controllers 
• unmount initrd which was mounted in /root for inital booting procedure 
• mount the /root as RW mode
• Direct the kernel to load kernel parameters and modules - sysctl,depmod,modprobe
• set up the clock - /etc/sysconfig/clock
• perform disk operations as per /sbin/fsck configuration 
• check mount quatos in non root file systems - fsck,mount,quotacheck,quotaon
• initialize logical volume - vgscan,/etc/lvmtab
• activate syslog , write to log files - dmesg 
• configure sound - sndconfig
• activate PAM module 
• activate swapping - swapon 

system will boot as per the run level mentioned in the /etc/initab :initdefault 

Login Process 

The first process which includes in login process in /sbin/mingetty as per the configuration mentioned in  /etc/inittab file (1:2345:respawn:/sbin/mingetty tty1).These lines cause init to spawn mingetty process on run level 2 to 5 . To do this it will use the fork function to make a copy of itself and use the exec function to run the mingetty program .  Once the mingetty is loaded it will execute the login prompt and waits till user enter the user name.If the user enter the user name it will prompt the password and password will be cross checked along with /etc/passwd entry . If the credentials are correct respective shell is logged for the user as per the configuration in /etc/passwd .

I am mentioning the files which involve in login process and its respective roles 

/etc/nologin- This file prevents from user's who are not root from login to the system

/etc/usertty - User to impose special access restriction to user's

/etc/securetty- controls the terminals that the root user can login

.hushlogin - When this file exists in the user home directory , it will prevents the user to check the mail, view the last login and motd message.

/var/log/lastlog- contains the information about the last login details of the user.

/etcpasswd - contains the information about the user UID, password in encripted format and its respective shell details.

OSPF - A detailed review and configuration

          OSPF ( Open Shortest Path First) - A detailed review and configuration .

Open Shortest Path First is a routing protocol which is using in bigger networks (mainly ISP's & Telecom networks) in now a days . It is based on link state advertisements and currently OSPF V2 is running which is developed in 1991 as per RFC 1247. The major advantages of OSPF are
1. Classless protocol
2.Supports VLSM (Variable Length Subnet Mask)
3.Using Multicast address to advertise link updates (224.0.0.4 - SPF routers & 224.0.0.5-DR routers )
4. Supports Plain text and MD5 authentication Mechanism
5. Works as per Dijkstra algorithm.

OSPF packet details 

OSPF is using different types of packets for its communication, and the details are mentioned below 

OSPF Packet types
Type	Description	Functionality
1	Hello	To discover neighbors and selects DR&BDR* routers to exchange capabilitis
2	Database Description	To elect master/slave for router database exchange process to exchange the LSA headres
3	Link-State-Request	To request specefic LSA (Link State Advertisements )
4	Link-State-Update	To send entire to the neighbor who requested the particular LSA through the LSR packet
5	Link-State-Acknowledge	To acknowledge and recept LSU packet

(* DR- Designated Router is the router an OSPF area where all other router's will send their Link State Advertisements.

BDR- Backup Designated Router - This will take the responsibility of the DR if the DR is failed in an area)

Sample OSPF Packet 

OSPF – Packet details
32 bit
version	type	packet length
router ID
area ID
checksum                                    |                                        Autype
Authentication
Authentication

A sample OSPF packet is 32 bit length and its details are given below

Version - This mainly indicates what version of the OSPF is running. Currently OSPF V2 is running.

Type- Indicates the OSPF packet type ( details are given above)

Packet Length- Total length of the OSPF packet

Router ID- This indicates ip address of the router . For cisco router highest ip address will take as the router ID. If loop back ip is configured highest loop back will take as router ID

Area ID- This filed checks the area of the packet belongs to. This is a 4 byte number and both routers should have same area ID to form neighbor relation ship.

Check Sum - This part will check the status of the entire OSPF packet.

Autype- Autype filed will check the respective authentication type configured for OSPF.
different Autypes are
1. 0 indicates no authentication
2. 1 indicates plain text authentication
3. 2 indicates MD5 authentication

Authentication - Indicates the authentication key for plain text authentication type.

Sample OSPF configuration

          router 1 configuration

                                                               router 2 configuration

                                                               router 3 configuration

                                                               router 4 configuration

                                               Testing the connectivity from work stations

                  PC1

                                                                          PC2

                                                                   OSPF Neighbor states 

1. Down 

This is the first stage of OSPF neighbor . If a neighbor is on down stage hello packet is not received from this particular neighbor, but packets can send to the neighbor .

2. Attempt

In this state router will send unicast hello packets to the neighbors in poll intervals . But as mentioned above these neighbors will not send hello packets in down state.

3. Init

Router will receive a valid hello packets from the neighbor, but receiving router id will not be added in the packets. 

4.  2-way

This state indicates the bi directional communication between two neighbor routers .The router's will share each others router ID in hello packets and as per that it will decide, need to become neighbor with this router or not. In OSPF network DR/BDR selection will happen as per the 2 way link with the neighbors.

5. Exstart

Once the DR/BDR selection is happened router's will start exchanging information by creating a virtual link inside the network (like a master/slave). Router's with higher router ID will became the master . 

6. Exchange

In this stage OSPF router's will exchange database descriptor (DBD) packets and this packet will contain LSA (Link State Advertisements) header's which will contain the details of entire LSA updates.

The contents of the DBD updates are cross checked with router LSA updates to make sure that information is passed to all neighbor's.

7.Loading

As per the DBD information and LSR (Link State Requests)router's will share the LSA , and this is the actual information share  happening stage.

8. Full

This is the fully synchronized state with all the router's database is updated with proper LSA updates. This is the normal state of a OSPF router.  If any of the router is not became full state , we can conclude that there will be an issue for forming adjacency  .

Multi Area OSPF configuration 

In larger networks we can find multiple area's in OSPF configuration than a single one . In multi area OSPF different kinds of router's are involved than single area OSPF

a. Internal router         - Router involves in a single area
b. Back born router   -   Router where atleast one onterface is in area 0
c. Area Border Router (ABR) - Router attached to multiple areas
d. Autonomous System Boundary Router - At least one interface connected to another AS.

Sample multi area OSPF network

configurations is almost same except loop back configuration in MOSPF.

OSPF treats Loopback interfaces as STUB NETWORKS and advertise them as HOST ROUTES (with mask /32) regardless of their configured/native mask.According to RFC 2328, Host routes are considered to be subnets whose mask is "all ones (0xffffffff)". In this state, the router's interface is looped back to the network in hardware or software. In this state, the interface is unavailable for regular data traffic. However, it is still available for testing like ICMP pings and BERT. For this reason, IP packets may still be addressed to an interface in Loopback state. Such interfaces are advertised in router-LSA as single host routes, whose destination IP address is the interface address.