All of lore.kernel.org
 help / color / mirror / Atom feed
* [PATCH v3 00/23] Opt-in always-on nVHE hypervisor
@ 2020-11-26 15:53 ` David Brazdil
  0 siblings, 0 replies; 147+ messages in thread
From: David Brazdil @ 2020-11-26 15:53 UTC (permalink / raw)
  To: kvmarm
  Cc: Jonathan Corbet, Catalin Marinas, Will Deacon, Marc Zyngier,
	James Morse, Julien Thierry, Suzuki K Poulose, Dennis Zhou,
	Tejun Heo, Christoph Lameter, Mark Rutland, Lorenzo Pieralisi,
	Sudeep Holla, linux-doc, linux-kernel, linux-arm-kernel,
	kernel-team, David Brazdil

As we progress towards being able to keep guest state private to the
host running nVHE hypervisor, this series allows the hypervisor to
install itself on newly booted CPUs before the host is allowed to run
on them.

All functionality described below is opt-in, guarded by an early param
'kvm-arm.protected'. Future patches specific to the new "protected" mode
should be hidden behind the same param.

The hypervisor starts trapping host SMCs and intercepting host's PSCI
CPU_ON/SUSPEND calls. It replaces the host's entry point with its own,
initializes the EL2 state of the new CPU and installs the nVHE hyp vector
before ERETing to the host's entry point.

The kernel checks new cores' features against the finalized system
capabilities. To avoid the need to move this code/data to EL2, the
implementation only allows to boot cores that were online at the time of
KVM initialization and therefore had been checked already.

Other PSCI SMCs are forwarded to EL3, though only the known set of SMCs
implemented in the kernel is allowed. Non-PSCI SMCs are also forwarded
to EL3. Future changes will need to ensure the safety of all SMCs wrt.
private guests.

The host is still allowed to reset EL2 back to the stub vector, eg. for
hibernation or kexec, but will not disable nVHE when there are no VMs.

Tested on Rock Pi 4B, based on kvmarm/queue, itself on top of 5.10-rc4.

Patches also available at:
    https://android-kvm.googlesource.com/linux topic/psci-on-master_v3

changes since v2:
  * avoid non-spec error in CPU_SUSPEND
  * refuse to init without PSCI
  * compute hyp VA args of hyp-init in hyp instead of using params struct
  * use hyp_symbol_addr in per-cpu calls
  * simplify memory.h/sysreg.h includes
  * rebase on kvmarm/queue, use trap handler args macros

changes since v1:
  * early param sets a capability instead of a static key
  * assume SMCCC v1.2 for host SMC forwarding
  * fix reserved SMC ID range for PSCI
  * split init_el2_state into smaller macros, move to el2_setup.h
  * many small cleanups

changes since RFC:
  * add early param to make features opt-in
  * simplify CPU_ON/SUSPEND implementation
  * replace spinlocks with CAS atomic
  * make cpu_logical_map ro_after_init

David Brazdil (23):
  psci: Support psci_ops.get_version for v0.1
  psci: Accessor for configured PSCI function IDs
  arm64: Make cpu_logical_map() take unsigned int
  arm64: Move MAIR_EL1_SET to asm/memory.h
  arm64: Extract parts of el2_setup into a macro
  kvm: arm64: Add kvm-arm.protected early kernel parameter
  kvm: arm64: Initialize MAIR_EL2 using a constant
  kvm: arm64: Remove vector_ptr param of hyp-init
  kvm: arm64: Move hyp-init params to a per-CPU struct
  kvm: arm64: Add .hyp.data..ro_after_init ELF section
  kvm: arm64: Support per_cpu_ptr in nVHE hyp code
  kvm: arm64: Create nVHE copy of cpu_logical_map
  kvm: arm64: Add SMC handler in nVHE EL2
  kvm: arm64: Bootstrap PSCI SMC handler in nVHE EL2
  kvm: arm64: Add offset for hyp VA <-> PA conversion
  kvm: arm64: Forward safe PSCI SMCs coming from host
  kvm: arm64: Extract __do_hyp_init into a helper function
  kvm: arm64: Add function to enter host from KVM nVHE hyp code
  kvm: arm64: Intercept host's CPU_ON SMCs
  kvm: arm64: Intercept host's CPU_SUSPEND PSCI SMCs
  kvm: arm64: Keep nVHE EL2 vector installed
  kvm: arm64: Trap host SMCs in protected mode
  kvm: arm64: Fix EL2 mode availability checks

 .../admin-guide/kernel-parameters.txt         |   5 +
 arch/arm64/include/asm/cpucaps.h              |   3 +-
 arch/arm64/include/asm/el2_setup.h            | 182 +++++++++++
 arch/arm64/include/asm/kvm_arm.h              |   1 +
 arch/arm64/include/asm/kvm_asm.h              |   8 +-
 arch/arm64/include/asm/kvm_hyp.h              |   4 +-
 arch/arm64/include/asm/kvm_mmu.h              |  26 +-
 arch/arm64/include/asm/memory.h               |  13 +
 arch/arm64/include/asm/percpu.h               |   6 +
 arch/arm64/include/asm/sections.h             |   1 +
 arch/arm64/include/asm/smp.h                  |   4 +-
 arch/arm64/include/asm/virt.h                 |  26 ++
 arch/arm64/kernel/asm-offsets.c               |   3 +
 arch/arm64/kernel/cpufeature.c                |  29 ++
 arch/arm64/kernel/head.S                      | 144 +--------
 arch/arm64/kernel/image-vars.h                |   3 +
 arch/arm64/kernel/setup.c                     |   2 +-
 arch/arm64/kernel/vmlinux.lds.S               |  10 +
 arch/arm64/kvm/arm.c                          | 101 ++++--
 .../arm64/kvm/hyp/include/nvhe/trap_handler.h |  18 ++
 arch/arm64/kvm/hyp/nvhe/Makefile              |   3 +-
 arch/arm64/kvm/hyp/nvhe/host.S                |  47 +++
 arch/arm64/kvm/hyp/nvhe/hyp-init.S            |  97 +++++-
 arch/arm64/kvm/hyp/nvhe/hyp-main.c            |  45 ++-
 arch/arm64/kvm/hyp/nvhe/hyp-smp.c             |  40 +++
 arch/arm64/kvm/hyp/nvhe/hyp.lds.S             |   1 +
 arch/arm64/kvm/hyp/nvhe/psci-relay.c          | 296 ++++++++++++++++++
 arch/arm64/kvm/hyp/nvhe/switch.c              |   5 +-
 arch/arm64/kvm/va_layout.c                    |  30 +-
 arch/arm64/mm/proc.S                          |  15 +-
 drivers/firmware/psci/psci.c                  |  23 +-
 include/linux/psci.h                          |  10 +
 32 files changed, 999 insertions(+), 202 deletions(-)
 create mode 100644 arch/arm64/include/asm/el2_setup.h
 create mode 100644 arch/arm64/kvm/hyp/include/nvhe/trap_handler.h
 create mode 100644 arch/arm64/kvm/hyp/nvhe/hyp-smp.c
 create mode 100644 arch/arm64/kvm/hyp/nvhe/psci-relay.c

--
2.29.2.454.gaff20da3a2-goog

^ permalink raw reply	[flat|nested] 147+ messages in thread

end of thread, other threads:[~2020-12-02 17:50 UTC | newest]

Thread overview: 147+ messages (download: mbox.gz / follow: Atom feed)
-- links below jump to the message on this page --
2020-11-26 15:53 [PATCH v3 00/23] Opt-in always-on nVHE hypervisor David Brazdil
2020-11-26 15:53 ` David Brazdil
2020-11-26 15:53 ` David Brazdil
2020-11-26 15:53 ` [PATCH v3 01/23] psci: Support psci_ops.get_version for v0.1 David Brazdil
2020-11-26 15:53   ` David Brazdil
2020-11-26 15:53   ` David Brazdil
2020-11-26 17:21   ` Mark Rutland
2020-11-26 17:21     ` Mark Rutland
2020-11-26 17:21     ` Mark Rutland
2020-11-26 15:54 ` [PATCH v3 02/23] psci: Accessor for configured PSCI function IDs David Brazdil
2020-11-26 15:54   ` David Brazdil
2020-11-26 15:54   ` David Brazdil
2020-11-26 17:24   ` Mark Rutland
2020-11-26 17:24     ` Mark Rutland
2020-11-26 17:24     ` Mark Rutland
2020-11-26 17:29     ` David Brazdil
2020-11-26 17:29       ` David Brazdil
2020-11-26 17:29       ` David Brazdil
2020-11-26 17:34   ` Lorenzo Pieralisi
2020-11-26 17:34     ` Lorenzo Pieralisi
2020-11-26 17:34     ` Lorenzo Pieralisi
2020-11-26 15:54 ` [PATCH v3 03/23] arm64: Make cpu_logical_map() take unsigned int David Brazdil
2020-11-26 15:54   ` David Brazdil
2020-11-26 15:54   ` David Brazdil
2020-11-26 17:28   ` Mark Rutland
2020-11-26 17:28     ` Mark Rutland
2020-11-26 17:28     ` Mark Rutland
2020-12-02 15:44     ` David Brazdil
2020-12-02 15:44       ` David Brazdil
2020-12-02 15:44       ` David Brazdil
2020-11-26 15:54 ` [PATCH v3 04/23] arm64: Move MAIR_EL1_SET to asm/memory.h David Brazdil
2020-11-26 15:54   ` David Brazdil
2020-11-26 15:54   ` David Brazdil
2020-11-26 17:35   ` Mark Rutland
2020-11-26 17:35     ` Mark Rutland
2020-11-26 17:35     ` Mark Rutland
2020-12-01 13:58     ` David Brazdil
2020-12-01 13:58       ` David Brazdil
2020-12-01 13:58       ` David Brazdil
2020-11-26 15:54 ` [PATCH v3 05/23] arm64: Extract parts of el2_setup into a macro David Brazdil
2020-11-26 15:54   ` David Brazdil
2020-11-26 15:54   ` David Brazdil
2020-11-26 18:06   ` Mark Rutland
2020-11-26 18:06     ` Mark Rutland
2020-11-26 18:06     ` Mark Rutland
2020-12-01 13:55     ` David Brazdil
2020-12-01 13:55       ` David Brazdil
2020-12-01 13:55       ` David Brazdil
2020-11-26 15:54 ` [PATCH v3 06/23] kvm: arm64: Add kvm-arm.protected early kernel parameter David Brazdil
2020-11-26 15:54   ` David Brazdil
2020-11-26 15:54   ` David Brazdil
2020-11-27 16:32   ` Sudeep Holla
2020-11-27 16:32     ` Sudeep Holla
2020-11-27 16:32     ` Sudeep Holla
2020-12-01 13:19     ` David Brazdil
2020-12-01 13:19       ` David Brazdil
2020-12-01 13:19       ` David Brazdil
2020-12-01 14:07       ` Mark Rutland
2020-12-01 14:07         ` Mark Rutland
2020-12-01 14:07         ` Mark Rutland
2020-12-01 14:43         ` David Brazdil
2020-12-01 14:43           ` David Brazdil
2020-12-01 14:43           ` David Brazdil
2020-12-01 14:58           ` Mark Rutland
2020-12-01 14:58             ` Mark Rutland
2020-12-01 14:58             ` Mark Rutland
2020-11-26 15:54 ` [PATCH v3 07/23] kvm: arm64: Initialize MAIR_EL2 using a constant David Brazdil
2020-11-26 15:54   ` David Brazdil
2020-11-26 15:54   ` David Brazdil
2020-11-26 15:54 ` [PATCH v3 08/23] kvm: arm64: Remove vector_ptr param of hyp-init David Brazdil
2020-11-26 15:54   ` David Brazdil
2020-11-26 15:54   ` David Brazdil
2020-11-26 15:54 ` [PATCH v3 09/23] kvm: arm64: Move hyp-init params to a per-CPU struct David Brazdil
2020-11-26 15:54   ` David Brazdil
2020-11-26 15:54   ` David Brazdil
2020-11-26 15:54 ` [PATCH v3 10/23] kvm: arm64: Add .hyp.data..ro_after_init ELF section David Brazdil
2020-11-26 15:54   ` David Brazdil
2020-11-26 15:54   ` David Brazdil
2020-11-26 15:54 ` [PATCH v3 11/23] kvm: arm64: Support per_cpu_ptr in nVHE hyp code David Brazdil
2020-11-26 15:54   ` David Brazdil
2020-11-26 15:54   ` David Brazdil
2020-11-26 15:54 ` [PATCH v3 12/23] kvm: arm64: Create nVHE copy of cpu_logical_map David Brazdil
2020-11-26 15:54   ` David Brazdil
2020-11-26 15:54   ` David Brazdil
2020-11-26 15:54 ` [PATCH v3 13/23] kvm: arm64: Add SMC handler in nVHE EL2 David Brazdil
2020-11-26 15:54   ` David Brazdil
2020-11-26 15:54   ` David Brazdil
2020-11-26 15:54 ` [PATCH v3 14/23] kvm: arm64: Bootstrap PSCI " David Brazdil
2020-11-26 15:54   ` David Brazdil
2020-11-26 15:54   ` David Brazdil
2020-11-26 15:54 ` [PATCH v3 15/23] kvm: arm64: Add offset for hyp VA <-> PA conversion David Brazdil
2020-11-26 15:54   ` David Brazdil
2020-11-26 15:54   ` David Brazdil
2020-11-26 15:54 ` [PATCH v3 16/23] kvm: arm64: Forward safe PSCI SMCs coming from host David Brazdil
2020-11-26 15:54   ` David Brazdil
2020-11-26 15:54   ` David Brazdil
2020-11-27 10:14   ` Lorenzo Pieralisi
2020-11-27 10:14     ` Lorenzo Pieralisi
2020-11-27 10:14     ` Lorenzo Pieralisi
2020-12-02 17:49     ` David Brazdil
2020-12-02 17:49       ` David Brazdil
2020-12-02 17:49       ` David Brazdil
2020-11-27 16:51   ` Sudeep Holla
2020-11-27 16:51     ` Sudeep Holla
2020-11-27 16:51     ` Sudeep Holla
2020-12-01 13:20     ` David Brazdil
2020-12-01 13:20       ` David Brazdil
2020-12-01 13:20       ` David Brazdil
2020-11-26 15:54 ` [PATCH v3 17/23] kvm: arm64: Extract __do_hyp_init into a helper function David Brazdil
2020-11-26 15:54   ` David Brazdil
2020-11-26 15:54   ` David Brazdil
2020-11-26 15:54 ` [PATCH v3 18/23] kvm: arm64: Add function to enter host from KVM nVHE hyp code David Brazdil
2020-11-26 15:54   ` David Brazdil
2020-11-26 15:54   ` David Brazdil
2020-11-26 15:54 ` [PATCH v3 19/23] kvm: arm64: Intercept host's CPU_ON SMCs David Brazdil
2020-11-26 15:54   ` David Brazdil
2020-11-26 15:54   ` David Brazdil
2020-11-27 17:47   ` Sudeep Holla
2020-11-27 17:47     ` Sudeep Holla
2020-11-27 17:47     ` Sudeep Holla
2020-12-01 13:51     ` David Brazdil
2020-12-01 13:51       ` David Brazdil
2020-12-01 13:51       ` David Brazdil
2020-11-26 15:54 ` [PATCH v3 20/23] kvm: arm64: Intercept host's CPU_SUSPEND PSCI SMCs David Brazdil
2020-11-26 15:54   ` David Brazdil
2020-11-26 15:54   ` David Brazdil
2020-12-01 14:57   ` Mark Rutland
2020-12-01 14:57     ` Mark Rutland
2020-12-01 14:57     ` Mark Rutland
2020-11-26 15:54 ` [PATCH v3 21/23] kvm: arm64: Keep nVHE EL2 vector installed David Brazdil
2020-11-26 15:54   ` David Brazdil
2020-11-26 15:54   ` David Brazdil
2020-11-26 15:54 ` [PATCH v3 22/23] kvm: arm64: Trap host SMCs in protected mode David Brazdil
2020-11-26 15:54   ` David Brazdil
2020-11-26 15:54   ` David Brazdil
2020-11-26 15:54 ` [PATCH v3 23/23] kvm: arm64: Fix EL2 mode availability checks David Brazdil
2020-11-26 15:54   ` David Brazdil
2020-11-26 15:54   ` David Brazdil
2020-11-26 15:57 ` [PATCH v3 00/23] Opt-in always-on nVHE hypervisor Matthew Wilcox
2020-11-26 15:57   ` Matthew Wilcox
2020-11-26 15:57   ` Matthew Wilcox
2020-11-26 16:19   ` Marc Zyngier
2020-11-26 16:19     ` Marc Zyngier
2020-11-26 16:19     ` Marc Zyngier
2020-11-26 16:23     ` Matthew Wilcox
2020-11-26 16:23       ` Matthew Wilcox
2020-11-26 16:23       ` Matthew Wilcox

This is an external index of several public inboxes,
see mirroring instructions on how to clone and mirror
all data and code used by this external index.