Description of problem: On a fresh install of F15, systemd-analyze shows ~32s boot time. Bootchart shows a completely cpu-bound boot process. Disabling selinux in /etc/selinux/config yields ~11s. Version-Release number of selected component (if applicable): Name : libselinux Arch : i686 Version : 2.0.99 Release : 4.fc15 How reproducible: Always. Steps to Reproduce: 1. Install F15 on EeePC 701. 2. Run "systemd-analyze" after boot-up. 3. Compare with selinux disabled v.s. enabled. Actual results: Boot is no faster than desktop with upstart, parents don't use the netbook :). Expected results: Netbook _with SSD_ should ideally be faster to start, allowing parents to save time & electricity on simple tasks e.g. email. (Assuming everything else works as required... but ya gotta keep on trying :) Additional info: RAM: 512Mb.
uh... caveats 1) The systemd-analyze comparison may not be the full story. Bootchart doesn't show such a difference. It *does* show a reduction in cpu usage of specific processes: 4s less in udevd, 1.5s less in systemd-tmpfiles. IMO Bootchart is considering the boot process to end later, in the selinux-disabled case, but it's not as clear as I'd like. Also, bootup still looks more cpu-bound than io-bound. The 1.5s delay in systemd-tempfiles can easily be reproduced outside the boot process. 2) I should have said I'm running KDE. So the startup of the login manager is probably a bit different to a default fedora install. And this may be affecting the way systemd / bootchart measure the boot process.
This time is spent compiling regular expressions in order to setup proper labeling. We could make systemd a little smarter about its labeling in that it does not need to load all regular expressions at boot, and we could allow it to load them more on demand. /dev /var/run /tmp Perhaps.
To nitpick: when I looked at the 1.5s delay in systemd-tmpfiles, 60% of it was spent in a strcmp() implementation, which callgrind says is called literally 8 million times. I didn't have the debuginfo to see the caller, but it doesn't sound regex-y. I just checked the selinux source, and found nodups_specs() doing O(n^2) string comparisons which fits almost exactly, for n ~= 4000. If those strcmp()s could be eliminated, it should save at least 1.5s * 60% * 2 ~= 1.5s. (label_init() is used at least twice, in both systemd and systemd-tmpfiles).
I would guess we should only do this at compile time. Not sure what problems this would solve except print an error message. Seems like something we should be able to optionally check.
This package has changed ownership in the Fedora Package Database. Reassigning to the new owner of this component.
libselinux in F16 has improved in this regard. It's not doing the O(n^2) dups check anymore. I don't think performance improvements will be backported to F15, so WONTFIX for that release. Please reopen and change the Version field if the problem is reproducible in the latest Fedora release.