From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: Received: (majordomo@vger.kernel.org) by vger.kernel.org via listexpand id S1752731AbeCBTtB (ORCPT ); Fri, 2 Mar 2018 14:49:01 -0500 Received: from mx0b-001b2d01.pphosted.com ([148.163.158.5]:45308 "EHLO mx0a-001b2d01.pphosted.com" rhost-flags-OK-OK-OK-FAIL) by vger.kernel.org with ESMTP id S1750924AbeCBTs7 (ORCPT ); Fri, 2 Mar 2018 14:48:59 -0500 Subject: Re: [PATCH v2 13/15] KVM: s390: Configure the guest's CRYCB To: David Hildenbrand , linux-s390@vger.kernel.org, linux-kernel@vger.kernel.org, kvm@vger.kernel.org Cc: freude@de.ibm.com, schwidefsky@de.ibm.com, heiko.carstens@de.ibm.com, borntraeger@de.ibm.com, cohuck@redhat.com, kwankhede@nvidia.com, bjsdjshi@linux.vnet.ibm.com, pbonzini@redhat.com, alex.williamson@redhat.com, pmorel@linux.vnet.ibm.com, alifm@linux.vnet.ibm.com, mjrosato@linux.vnet.ibm.com, jjherne@linux.vnet.ibm.com, thuth@redhat.com, pasic@linux.vnet.ibm.com, fiuczy@linux.vnet.ibm.com, buendgen@de.ibm.com, akrowiak@linux.vnet.ibm.com References: <1519741693-17440-1-git-send-email-akrowiak@linux.vnet.ibm.com> <1519741693-17440-14-git-send-email-akrowiak@linux.vnet.ibm.com> <99b24fc7-3df9-6620-d1df-917214fbdda2@redhat.com> <081eab40-0bbd-5842-76bc-2974f4544529@redhat.com> <4763e223-1c78-c9a3-42bc-2d3569a716ff@linux.vnet.ibm.com> <56f576ba-4eee-696e-45aa-f4db1e96bd57@redhat.com> From: Tony Krowiak Date: Fri, 2 Mar 2018 14:48:50 -0500 User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:52.0) Gecko/20100101 Thunderbird/52.2.0 MIME-Version: 1.0 In-Reply-To: <56f576ba-4eee-696e-45aa-f4db1e96bd57@redhat.com> Content-Type: text/plain; charset=utf-8; format=flowed Content-Transfer-Encoding: 7bit Content-Language: en-US X-TM-AS-GCONF: 00 x-cbid: 18030219-0040-0000-0000-000004012448 X-IBM-SpamModules-Scores: X-IBM-SpamModules-Versions: BY=3.00008610; HX=3.00000241; KW=3.00000007; PH=3.00000004; SC=3.00000254; SDB=6.00997407; UDB=6.00507153; IPR=6.00776725; MB=3.00019824; MTD=3.00000008; XFM=3.00000015; UTC=2018-03-02 19:48:56 X-IBM-AV-DETECTION: SAVI=unused REMOTE=unused XFE=unused x-cbparentid: 18030219-0041-0000-0000-0000080225AE Message-Id: <6e5e25e3-271e-bc19-cc82-75b62ca407f9@linux.vnet.ibm.com> X-Proofpoint-Virus-Version: vendor=fsecure engine=2.50.10432:,, definitions=2018-03-02_10:,, signatures=0 X-Proofpoint-Spam-Details: rule=outbound_notspam policy=outbound score=0 priorityscore=1501 malwarescore=0 suspectscore=0 phishscore=0 bulkscore=0 spamscore=0 clxscore=1015 lowpriorityscore=0 impostorscore=0 adultscore=0 classifier=spam adjust=0 reason=mlx scancount=1 engine=8.0.1-1709140000 definitions=main-1803020232 Sender: linux-kernel-owner@vger.kernel.org List-ID: X-Mailing-List: linux-kernel@vger.kernel.org On 03/02/2018 05:08 AM, David Hildenbrand wrote: > On 01.03.2018 21:42, Tony Krowiak wrote: >> On 03/01/2018 04:37 AM, David Hildenbrand wrote: >>> On 28.02.2018 21:45, Tony Krowiak wrote: >>>> On 02/28/2018 04:49 AM, David Hildenbrand wrote: >>>>>> +static int vfio_ap_mdev_open(struct mdev_device *mdev) >>>>>> +{ >>>>>> + struct ap_matrix_mdev *matrix_mdev = mdev_get_drvdata(mdev); >>>>>> + unsigned long events; >>>>>> + int ret; >>>>>> + >>>>>> + matrix_mdev->group_notifier.notifier_call = vfio_ap_mdev_group_notifier; >>>>>> + events = VFIO_GROUP_NOTIFY_SET_KVM; >>>>>> + ret = vfio_register_notifier(mdev_dev(mdev), VFIO_GROUP_NOTIFY, >>>>>> + &events, &matrix_mdev->group_notifier); >>>>>> + >>>>>> + ret = kvm_ap_configure_matrix(matrix_mdev->kvm, >>>>>> + matrix_mdev->matrix); >>>>>> + if (ret) >>>>>> + return ret; >>>>>> + >>>>>> + ret = kvm_ap_enable_ie_mode(matrix_mdev->kvm); >>>>> Can't this happen while the guest is already running? Or what hinders us >>>>> from doing that? >>>> I'm not sure exactly what you're asking here. Are you asking if the >>>> vfio_ap_mdev_open() >>>> function can be called multiple times while the guest is running? AFAIK >>>> this will be >>>> called only once when the mediated device's file descriptor is opened. >>>> This happens in >>>> QEMU when the -device vfio-ap device is realized. >>> Okay, but from a pure interface point of view, this could happen any >>> time, even while the guest is already running. Patching in the SCB of a >>> running VCPU is evil. >> How can this happen while the guest is running? QEMU opens the fd when the >> device is realized and AFAIK vfio mdev will not allow any other process to >> open it until the guest is terminated. What am I missing? > It can't happen right now (the way QEMU uses it), but the kernel > interface allows it, no? > > Anyhow, as discussed this should be handled directly while creating a > VCPU. Then also CPU hotplug is properly covered. Here is what I think we should do: * Set ECA.28 in the VCPU setup function based on whether the CPU model feature has been turned on by user space as you suggest. * Replace the kvm_ap_enable_ie_mode() call in the open() above with a query of the CPU model feature and return an error if it is not turned on. Does this sound reasonable? Would it be more appropriate in this case to rename the feature to KVM_S390_VM_CPU_FEAT_APIE? > >