Code

q35: add virtio-mmio slots#13

Code

Draft

osteffenrh wants to merge 82 commits intococonut-svsm:svsm-igvmcoconut-svsm/qemu:svsm-igvmfrom osteffenrh:virtio-prosteffenrh/qemu:virtio-prCopy head branch name to clipboard

+5,111-551

Commits

Commits on Jan 9, 2024

• i386/pc: Drop pc_machine_kvm_type()

  Show description for 1c95816
  

  calmisi

  authored and

  mdroth

  committed
  1c95816

  Copy full SHA for 1c95816

• i386/cpuid: Decrease cpuid_i when skipping CPUID leaf 1F

  Show description for eccfb38
  

  calmisi

  authored and

  mdroth

  committed
  eccfb38

  Copy full SHA for eccfb38

• i386/cpuid: Remove subleaf constraint on CPUID leaf 1F

  Show description for 83066e8
  

  calmisi

  authored and

  mdroth

  committed
  83066e8

  Copy full SHA for 83066e8

• trace/kvm: Split address space and slot id in trace_kvm_set_user_memory()

  Show description for 6f0194e
  

  calmisi

  authored and

  mdroth

  committed
  6f0194e

  Copy full SHA for 6f0194e

• *** HACK *** linux-headers: Update headers to pull in gmem APIs

  Show description for a4ef508
  

  calmisi

  authored and

  mdroth

  committed
  a4ef508

  Copy full SHA for a4ef508

• RAMBlock: Add support of KVM private guest memfd

  Show description for a3b4f68
  

  calmisi

  authored and

  mdroth

  committed
  a3b4f68

  Copy full SHA for a3b4f68

• RAMBlock/guest_memfd: Enable KVM_GUEST_MEMFD_ALLOW_HUGEPAGE

  Show description for 9c9149c
  

  calmisi

  authored and

  mdroth

  committed
  9c9149c

  Copy full SHA for 9c9149c

• HostMem: Add mechanism to opt in kvm guest memfd via MachineState

  Show description for e3fbcaf
  

  calmisi

  authored and

  mdroth

  committed
  e3fbcaf

  Copy full SHA for e3fbcaf

• kvm: Enable KVM_SET_USER_MEMORY_REGION2 for memslot

  Show description for ab6b5c6
  

  chao-p

  authored and

  mdroth

  committed
  ab6b5c6

  Copy full SHA for ab6b5c6

• kvm: Introduce support for memory_attributes

  Show description for 86063d6
  

  calmisi

  authored and

  mdroth

  committed
  86063d6

  Copy full SHA for 86063d6

• physmem: Relax the alignment check of host_startaddr in ram_block_discard_range()

  Show description for e1f111b
  

  calmisi

  authored and

  mdroth

  committed
  e1f111b

  Copy full SHA for e1f111b

• physmem: replace function name with __func__ in ram_block_discard_range()

  Show description for 132e2eb
  

  calmisi

  authored and

  mdroth

  committed
  132e2eb

  Copy full SHA for 132e2eb

• physmem: Introduce ram_block_convert_range() for page conversion

  Show description for 2b6dde8
  

  calmisi

  authored and

  mdroth

  committed
  2b6dde8

  Copy full SHA for 2b6dde8

• kvm: handle KVM_EXIT_MEMORY_FAULT

  Show description for 3d6f437
  

  chao-p

  authored and

  mdroth

  committed
  3d6f437

  Copy full SHA for 3d6f437

• trace/kvm: Add trace for page convertion between shared and private

  Show description for e807937
  

  yamahata

  authored and

  mdroth

  committed
  e807937

  Copy full SHA for e807937

• target/i386: Implement mc->kvm_type() to get VM type

  Show description for 89836cb
  

  calmisi

  authored and

  mdroth

  committed
  89836cb

  Copy full SHA for 89836cb

• target/i386: Parse TDX vm type

  Show description for 1767802
  

  calmisi

  authored and

  mdroth

  committed
  1767802

  Copy full SHA for 1767802

• target/i386: Introduce kvm_confidential_guest_init()

  Show description for 930792f
  

  calmisi

  authored and

  mdroth

  committed
  930792f

  Copy full SHA for 930792f

• kvm/memory: Introduce the infrastructure to set the default shared/private value

  Show description for 3c1892e
  

  calmisi

  authored and

  mdroth

  committed
  3c1892e

  Copy full SHA for 3c1892e

• memory: Introduce memory_region_init_ram_guest_memfd()

  Show description for bbbd176
  

  calmisi

  authored and

  mdroth

  committed
  bbbd176

  Copy full SHA for bbbd176

• pci-host/q35: Move PAM initialization above SMRAM initialization

  Show description for 1233d0f
  

  yamahata

  authored and

  mdroth

  committed
  1233d0f

  Copy full SHA for 1233d0f

• q35: Introduce smm_ranges property for q35-pci-host

  Show description for 1fc2d77
  

  Isaku Yamahata

  authored and

  mdroth

  committed
  1fc2d77

  Copy full SHA for 1fc2d77

• Revert "target/i386: Parse TDX vm type"

  Show description for 48cd1d2
  mdroth

  committed
  48cd1d2

  Copy full SHA for 48cd1d2

• *kvm: Use new KVM_MEM_GUEST_MEMFD flag instead of KVM_MEM_PRIVATE

  Show description for 0591737
  mdroth

  committed
  0591737

  Copy full SHA for 0591737

• Update kernel headers for snp-host-v11

  Show description for c2dee38
  mdroth

  committed
  c2dee38

  Copy full SHA for c2dee38

• i386/sev: Introduce "sev-common" type to encapsulate common SEV state

  Show description for 187dce4
  mdroth

  committed
  187dce4

  Copy full SHA for 187dce4

• i386/sev: Introduce 'sev-snp-guest' object

  Show description for 223c02e
  

  codomania

  authored and

  mdroth

  committed
  223c02e

  Copy full SHA for 223c02e

• i386/sev: Initialize SNP context

  Show description for 1d94d23
  

  codomania

  authored and

  mdroth

  committed
  1d94d23

  Copy full SHA for 1d94d23

• i386/sev: Add the SNP launch start context

  Show description for 065a76e
  

  codomania

  authored and

  mdroth

  committed
  065a76e

  Copy full SHA for 065a76e

• i386/sev: Add support to encrypt BIOS when SEV-SNP is enabled

  Show description for 180c48d
  

  codomania

  authored and

  mdroth

  committed
  180c48d

  Copy full SHA for 180c48d

• hw/i386: Add function to get SEV metadata from ovmf header

  Show description for 56b0162
  

  codomania

  authored and

  mdroth

  committed
  56b0162

  Copy full SHA for 56b0162

• i386/sev: Populate secrets and cpuid page and finalize the SNP launch

  Show description for 737c833
  

  codomania

  authored and

  mdroth

  committed
  737c833

  Copy full SHA for 737c833

• target/i386: Set SEV-SNP CPUID bit when SNP enabled

  Show description for df851cb
  mdroth

  committed
  df851cb

  Copy full SHA for df851cb

• i386/sev: Add support for SNP CPUID validation

  Show description for 3d94be6
  mdroth

  committed
  3d94be6

  Copy full SHA for 3d94be6

• i386/sev: Update query-sev QAPI format to handle SEV-SNP

  Show description for 7203d7c
  mdroth

  committed
  7203d7c

  Copy full SHA for 7203d7c

• *i386/sev: Don't return launch measurements for SEV-SNP guests

  Show description for 6f4cd86
  mdroth

  committed
  6f4cd86

  Copy full SHA for 6f4cd86

• qapi, i386: Move kernel-hashes to SevCommonProperties

  Show description for 39ac214
  

  dubek

  authored and

  mdroth

  committed
  39ac214

  Copy full SHA for 39ac214

• i386/sev: Extract build_kernel_loader_hashes

  Show description for 0286165
  

  dubek

  authored and

  mdroth

  committed
  0286165

  Copy full SHA for 0286165

• i386/sev: Reorder struct declarations

  Show description for d2a2270
  

  dubek

  authored and

  mdroth

  committed
  d2a2270

  Copy full SHA for d2a2270

• i386/sev: Allow measured direct kernel boot on SNP

  Show description for 58593e8
  

  dubek

  authored and

  mdroth

  committed
  58593e8

  Copy full SHA for 58593e8

• *i386/sev: Queue up the SNP launch updates to perform at launch finish

  Show description for 057e559
  

  tlendacky

  authored and

  mdroth

  committed
  057e559

  Copy full SHA for 057e559

• *kvm: Make kvm_convert_memory() non-static

  Show description for ca5526e
  mdroth

  committed
  ca5526e

  Copy full SHA for ca5526e

• *squash: snp_launch_update: convert initial payload to private

  Show description for 3adccf1
  mdroth

  committed
  3adccf1

  Copy full SHA for 3adccf1

• *add memory_region_init_rom_device_private

  Show description for 9b22c80
  mdroth

  committed
  9b22c80

  Copy full SHA for 9b22c80

• *update sev_kvm_init to set require_guest_memfd for SNP

  Show description for 4b31da6
  mdroth

  committed
  4b31da6

  Copy full SHA for 4b31da6

• *set KVM_X86_SNP_VM when creating SNP KVM instance

  Show description for 1624017
  mdroth

  committed
  1624017

  Copy full SHA for 1624017

• *kvm: Add kvm_has_restricted_memory() helper

  Show description for 5900948
  mdroth

  committed
  5900948

  Copy full SHA for 5900948

• *disable SMM and set ms->require_guest_memfd for SNP

  Show description for 799a6f8
  mdroth

  committed
  799a6f8

  Copy full SHA for 799a6f8

• *automatically use guest_memfd for ROM regions

  Show description for 8be7917
  mdroth

  committed
  8be7917

  Copy full SHA for 8be7917

• *also call sev_kvm_init() for sev-snp-guest CGS object init

  Show description for aded48f
  mdroth

  committed
  aded48f

  Copy full SHA for aded48f

• *i386/sev: Add handling for KVM_EXIT_VMGEXIT

  Show description for 616be1e
  mdroth

  committed
  616be1e

  Copy full SHA for 616be1e

• *sev: combine contiguous memory attr updates

  Show description for ad64c3f
  mdroth

  committed
  ad64c3f

  Copy full SHA for ad64c3f

• *memory fault debug

  mdroth

  committed
  2702c9c

  Copy full SHA for 2702c9c

• *fix up and rework error/return code handling for PSCs

  Show description for b8bedfd
  mdroth

  committed
  b8bedfd

  Copy full SHA for b8bedfd

• *use guest_memfd for legacy ROMs

  Show description for 4297af7
  mdroth

  committed
  4297af7

  Copy full SHA for 4297af7

• *update headers for SNP hypervisor v11

  mdroth

  committed
  86dfb3a

  Copy full SHA for 86dfb3a

• *drop use of KVM_GUEST_MEMFD_ALLOW_HUGEPAGE flag

  Show description for 3e81f8b
  mdroth

  committed
  3e81f8b

  Copy full SHA for 3e81f8b

• *use new VMGEXIT handling for page-state changes

  Show description for 73a0ccc
  mdroth

  committed
  73a0ccc

  Copy full SHA for 73a0ccc

• *initial support for supplying certs for extended requests

  Show description for 8cbbc77
  mdroth

  committed
  8cbbc77

  Copy full SHA for 8cbbc77

Commits on Jan 10, 2024

• *fix non-SNP handling for memory regions

  Show description for 798d394
  mdroth

  committed
  798d394

  Copy full SHA for 798d394

Commits on Jan 11, 2024

• *skip RAMBlock notifiers for SNP

  Show description for b6ee121
  mdroth

  committed
  b6ee121

  Copy full SHA for b6ee121

Commits on Apr 2, 2024

• meson: Add optional dependency on IGVM library

  Show description for 049f963
  roy-hopkins

  committed
  049f963

  Copy full SHA for 049f963

• backends/confidential-guest-support: Add IGVM file parameter

  Show description for b2c88ed
  roy-hopkins

  committed
  b2c88ed

  Copy full SHA for b2c88ed

• backends/confidential-guest-support: Add functions to support IGVM

  Show description for 623899a
  roy-hopkins

  committed
  623899a

  Copy full SHA for 623899a

• backends/igvm: Implement parsing and processing of IGVM files

  Show description for 929b05c
  roy-hopkins

  committed
  929b05c

  Copy full SHA for 929b05c

• i386/pc: Process IGVM file during PC initialization if present

  Show description for 2dc62cc
  roy-hopkins

  committed
  2dc62cc

  Copy full SHA for 2dc62cc

• i386/pc_sysfw: Ensure sysfw flash configuration does not conflict with IGVM

  Show description for dab862a
  roy-hopkins

  committed
  dab862a

  Copy full SHA for dab862a

• i386/cpu: Fix handling of LDTR an TR in cpu_x86_load_seg_cache()

  Show description for 7534bc4
  roy-hopkins

  committed
  7534bc4

  Copy full SHA for 7534bc4

• i386/sev: Refactor setting of reset vector and initial CPU state

  Show description for 6603801
  roy-hopkins

  committed
  6603801

  Copy full SHA for 6603801

• i386/sev: Implement ConfidentialGuestSupport functions for SEV

  Show description for 251dab3
  roy-hopkins

  committed
  251dab3

  Copy full SHA for 251dab3

• docs/system: Add documentation on support for IGVM

  Show description for 9fc7c34
  roy-hopkins

  committed
  9fc7c34

  Copy full SHA for 9fc7c34

• i386/sev: Fix error handling in sev_get_capabilities()

  Show description for 896d803
  roy-hopkins

  committed
  896d803

  Copy full SHA for 896d803

Commits on Apr 3, 2024

• backends/confidential-guest-support: Add set_guest_policy() function

  Show description for 5785124
  roy-hopkins

  committed
  5785124

  Copy full SHA for 5785124

Commits on Apr 8, 2024

• backends/igvm: Process initialization sections in IGVM file

  Show description for b6fb543
  roy-hopkins

  committed
  b6fb543

  Copy full SHA for b6fb543

• backends/igvm: Handle policy for SEV guests

  Show description for ff68d54
  roy-hopkins

  committed
  ff68d54

  Copy full SHA for ff68d54

• i386/sev: Add implementation of CGS set_guest_policy()

  Show description for 0fd5b1f
  roy-hopkins

  committed
  0fd5b1f

  Copy full SHA for 0fd5b1f

• i386/sev: Fix error handling in sev_snp_launch_finish()

  Show description for e0eece1
  roy-hopkins

  committed
  e0eece1

  Copy full SHA for e0eece1

• i386/sev: Sync additional VMSA segment registers

  Show description for 7910d8b
  roy-hopkins

  committed
  7910d8b

  Copy full SHA for 7910d8b

Commits on Apr 11, 2024

• backends/igvm: Fix compile error when built without --enable-igvm

  Show description for 72da3a9
  vijaydhanraj

  committed
  72da3a9

  Copy full SHA for 72da3a9

Commits on Apr 12, 2024

• Merge pull request qemu#9 from vijaydhanraj/svsm-igvm

  Show description for 026267e
  joergroedel

  authored
  026267e

  Copy full SHA for 026267e

• Merge pull request qemu#7 from roy-hopkins/snp-v3-wip-igvm_v2_idblock

  Show description for 260df2b
  joergroedel

  authored
  260df2b

  Copy full SHA for 260df2b

Commits on May 14, 2024

• q35: add virtio-mmio slots

  Show description for e2efb6f
  

  kraxel

  authored and

  osteffenrh

  committed
  e2efb6f

  Copy full SHA for e2efb6f