You cannot select more than 25 topics Topics must start with a letter or number, can include dashes ('-') and can be up to 35 characters long.
qemu/backends
Roy Hopkins d60238b4c1 sev: Provide sev_features flags from IGVM VMSA to KVM_SEV_INIT2
IGVM files can contain an initial VMSA that should be applied to each
vcpu as part of the initial guest state. The sev_features flags are
provided as part of the VMSA structure. However, KVM only allows
sev_features to be set during initialization and not as the guest is
being prepared for launch.

This patch queries KVM for the supported set of sev_features flags and
processes the VP context entries in the IGVM file during kvm_init to
determine any sev_features flags set in the IGVM file. These are then
provided in the call to KVM_SEV_INIT2 to ensure the guest state
matches that specified in the IGVM file.

The igvm process() function is modified to allow a partial processing
of the file during initialization, with only the IGVM_VHT_VP_CONTEXT
fields being processed. This means the function is called twice,
firstly to extract the sev_features then secondly to actually
configure the guest.

Signed-off-by: Roy Hopkins <roy.hopkins@randomman.co.uk>
Acked-by: Michael S. Tsirkin <mst@redhat.com>
Acked-by: Stefano Garzarella <sgarzare@redhat.com>
Acked-by: Gerd Hoffman <kraxel@redhat.com>
Tested-by: Stefano Garzarella <sgarzare@redhat.com>
Reviewed-by: Liam Merwick <liam.merwick@oracle.com>
Reviewed-by: Ani Sinha <anisinha@redhat.com>
Link: https://lore.kernel.org/r/b2f986aae04e1da2aee530c9be22a54c0c59a560.1751554099.git.roy.hopkins@randomman.co.uk
Signed-off-by: Paolo Bonzini <pbonzini@redhat.com>
1 week ago
..
tpm backends/tpm: Avoid using g_alloca() 1 month ago
Kconfig backends: Initial support for SPDM socket support 1 year ago
confidential-guest-support.c backends/confidential-guest-support: Add set_guest_policy() function 1 week ago
cryptodev-builtin.c qom: Have class_init() take a const data argument 3 months ago
cryptodev-hmp-cmds.c qapi: Move include/qapi/qmp/ to include/qobject/ 5 months ago
cryptodev-lkcf.c qom: Have class_init() take a const data argument 3 months ago
cryptodev-vhost-user.c qom: Have class_init() take a const data argument 3 months ago
cryptodev-vhost.c cryptodev/vhost: allocate CryptoDevBackendVhost using g_mem0() 5 months ago
cryptodev.c qom: Make InterfaceInfo[] uses const 3 months ago
dbus-vmstate.c qom: Make InterfaceInfo[] uses const 3 months ago
dbus-vmstate1.xml docs: move D-Bus VMState documentation to source XML 4 years ago
host_iommu_device.c qom: Have class_init() take a const data argument 3 months ago
hostmem-epc.c qom: Have class_init() take a const data argument 3 months ago
hostmem-file.c qom: Have class_init() take a const data argument 3 months ago
hostmem-memfd.c qom: Have class_init() take a const data argument 3 months ago
hostmem-ram.c qom: Have class_init() take a const data argument 3 months ago
hostmem-shm.c qom: Have class_init() take a const data argument 3 months ago
hostmem.c qom: Make InterfaceInfo[] uses const 3 months ago
igvm-cfg.c backends/igvm: Add IGVM loader and configuration 1 week ago
igvm.c sev: Provide sev_features flags from IGVM VMSA to KVM_SEV_INIT2 1 week ago
igvm.h sev: Provide sev_features flags from IGVM VMSA to KVM_SEV_INIT2 1 week ago
iommufd.c iommufd: preserve DMA mappings 2 weeks ago
meson.build backends/igvm: Add IGVM loader and configuration 1 week ago
rng-builtin.c qom: Have class_init() take a const data argument 3 months ago
rng-egd.c qom: Have class_init() take a const data argument 3 months ago
rng-random.c qom: Have class_init() take a const data argument 3 months ago
rng.c qom: Make InterfaceInfo[] uses const 3 months ago
spdm-socket.c include: Rename sysemu/ -> system/ 7 months ago
trace-events backends/iommufd: change process ioctl 2 weeks ago
trace.h trace: switch position of headers to what Meson requires 5 years ago
vhost-user.c vhost-user: return failure if backend crash when live migration 2 months ago