* Re: unable to execute QEMU command 'qom-get': Property 'sgx-epc.unavailable-features' not found
@ 2022-01-17 2:53 ` Jarkko Sakkinen
0 siblings, 0 replies; 10+ messages in thread
From: Jarkko Sakkinen @ 2022-01-17 2:53 UTC (permalink / raw)
To: Yang Zhong; +Cc: pbonzini, eblake, qemu-devel, linux-sgx
On Tue, Nov 30, 2021 at 08:15:36PM +0800, Yang Zhong wrote:
> On Thu, Nov 25, 2021 at 08:47:22PM +0800, Yang Zhong wrote:
> > Hello Paolo,
> >
> > Our customer used the Libvirt XML to start a SGX VM, but failed.
> >
> > libvirt.libvirtError: internal error: unable to execute QEMU command 'qom-get': Property 'sgx-epc.unavailable-features' not found
> >
> > The XML file,
> > <qemu:commandline>
> > <qemu:arg value="-cpu"/>
> > <qemu:arg value="host,+sgx,+sgx-debug,+sgx-exinfo,+sgx-kss,+sgx-mode64,+sgx-provisionkey,+sgx-tokenkey,+sgx1,+sgx2,+sgxlc"/>
> > <qemu:arg value="-object"/>
> > <qemu:arg value="memory-backend-epc,id=mem1,size=16M,prealloc=on"/>
> > <qemu:arg value="-M"/>
> > <qemu:arg value="sgx-epc.0.memdev=mem1"/>
> > </qemu:commandline>
> >
> > The new compound property command should be located in /machine path,
> > which are different with old command '-sgx-epc id=epc1,memdev=mem1'.
> >
> > I also tried this from Qemu monitor tool,
> > (qemu) qom-list /machine
> > type (string)
> > kernel (string)
> > ......
> > sgx-epc (SgxEPC)
> > ......
> > sgx-epc[0] (child<memory-region>)
> > ......
> >
> > We can find sgx-epc from /machine list.
> >
>
> This issue is clear now, which is caused by Libvirt to get the CPU's unavailable-features by below command:
> {"execute":"qom-get","arguments":{"path":"/machine/unattached/device[0]","property":"unavailable-features"}
>
> but in SGX vm, since the sgx is initialized before VCPU because sgx need set the virtual EPC info in the cpuid.
>
> So the /machine/unattached/device[0] is occupied by sgx, which fail to get the unvailable-features from
> /machine/unattached/device[0].
>
>
> We need fix this issue, but this can be done in Qemu or Libvirt side.
>
> 1) Libvirt side
> If the libvirt support SGX EPCs, libvirt can use /machine/unattached/device[n] to check "unavailable-features".
> n is the next number of sgx's unattached_count.
>
> 2) Qemu side
>
> One temp patch to create one /sgx in the /machine in the device_set_realized()
> diff --git a/hw/core/qdev.c b/hw/core/qdev.c
> index 84f3019440..4154eef0d8 100644
> --- a/hw/core/qdev.c
> +++ b/hw/core/qdev.c
> @@ -497,7 +497,7 @@ static void device_set_realized(Object *obj, bool value, Error **errp)
> NamedClockList *ncl;
> Error *local_err = NULL;
> bool unattached_parent = false;
> - static int unattached_count;
> + static int unattached_count, sgx_count;
>
> if (dev->hotplugged && !dc->hotpluggable) {
> error_setg(errp, QERR_DEVICE_NO_HOTPLUG, object_get_typename(obj));
> @@ -509,7 +509,15 @@ static void device_set_realized(Object *obj, bool value, Error **errp)
> goto fail;
> }
>
> - if (!obj->parent) {
> + if (!obj->parent && !strcmp(object_get_typename(obj), "sgx-epc")) {
> + gchar *name = g_strdup_printf("device[%d]", sgx_count++);
> +
> + object_property_add_child(container_get(qdev_get_machine(),
> + "/sgx"),
> + name, obj);
> + unattached_parent = true;
> + g_free(name);
> + } else if (!obj->parent) {
> gchar *name = g_strdup_printf("device[%d]", unattached_count++);
>
> object_property_add_child(container_get(qdev_get_machine()
>
> This patch can make sure vcpu is still /machine/unattached/device[0].
>
>
> Which solution is best? thanks!
Has either of the fixes reached yet reached upstream or not?
> Yang
BR, Jarkko
^ permalink raw reply [flat|nested] 10+ messages in thread* Re: unable to execute QEMU command 'qom-get': Property 'sgx-epc.unavailable-features' not found
2022-01-17 2:53 ` Jarkko Sakkinen
@ 2022-01-17 6:09 ` Yang Zhong
-1 siblings, 0 replies; 10+ messages in thread
From: Yang Zhong @ 2022-01-17 6:09 UTC (permalink / raw)
To: Jarkko Sakkinen; +Cc: qemu-devel, pbonzini, eblake, linux-sgx, yang.zhong
On Mon, Jan 17, 2022 at 04:53:45AM +0200, Jarkko Sakkinen wrote:
> On Tue, Nov 30, 2021 at 08:15:36PM +0800, Yang Zhong wrote:
> > On Thu, Nov 25, 2021 at 08:47:22PM +0800, Yang Zhong wrote:
> > > Hello Paolo,
> > >
> > > Our customer used the Libvirt XML to start a SGX VM, but failed.
> > >
> > > libvirt.libvirtError: internal error: unable to execute QEMU command 'qom-get': Property 'sgx-epc.unavailable-features' not found
> > >
> > > The XML file,
> > > <qemu:commandline>
> > > <qemu:arg value="-cpu"/>
> > > <qemu:arg value="host,+sgx,+sgx-debug,+sgx-exinfo,+sgx-kss,+sgx-mode64,+sgx-provisionkey,+sgx-tokenkey,+sgx1,+sgx2,+sgxlc"/>
> > > <qemu:arg value="-object"/>
> > > <qemu:arg value="memory-backend-epc,id=mem1,size=16M,prealloc=on"/>
> > > <qemu:arg value="-M"/>
> > > <qemu:arg value="sgx-epc.0.memdev=mem1"/>
> > > </qemu:commandline>
> > >
> > > The new compound property command should be located in /machine path,
> > > which are different with old command '-sgx-epc id=epc1,memdev=mem1'.
> > >
> > > I also tried this from Qemu monitor tool,
> > > (qemu) qom-list /machine
> > > type (string)
> > > kernel (string)
> > > ......
> > > sgx-epc (SgxEPC)
> > > ......
> > > sgx-epc[0] (child<memory-region>)
> > > ......
> > >
> > > We can find sgx-epc from /machine list.
> > >
> >
> > This issue is clear now, which is caused by Libvirt to get the CPU's unavailable-features by below command:
> > {"execute":"qom-get","arguments":{"path":"/machine/unattached/device[0]","property":"unavailable-features"}
> >
> > but in SGX vm, since the sgx is initialized before VCPU because sgx need set the virtual EPC info in the cpuid.
> >
> > So the /machine/unattached/device[0] is occupied by sgx, which fail to get the unvailable-features from
> > /machine/unattached/device[0].
> >
> >
> > We need fix this issue, but this can be done in Qemu or Libvirt side.
> >
> > 1) Libvirt side
> > If the libvirt support SGX EPCs, libvirt can use /machine/unattached/device[n] to check "unavailable-features".
> > n is the next number of sgx's unattached_count.
> >
> > 2) Qemu side
> >
> > One temp patch to create one /sgx in the /machine in the device_set_realized()
> > diff --git a/hw/core/qdev.c b/hw/core/qdev.c
> > index 84f3019440..4154eef0d8 100644
> > --- a/hw/core/qdev.c
> > +++ b/hw/core/qdev.c
> > @@ -497,7 +497,7 @@ static void device_set_realized(Object *obj, bool value, Error **errp)
> > NamedClockList *ncl;
> > Error *local_err = NULL;
> > bool unattached_parent = false;
> > - static int unattached_count;
> > + static int unattached_count, sgx_count;
> >
> > if (dev->hotplugged && !dc->hotpluggable) {
> > error_setg(errp, QERR_DEVICE_NO_HOTPLUG, object_get_typename(obj));
> > @@ -509,7 +509,15 @@ static void device_set_realized(Object *obj, bool value, Error **errp)
> > goto fail;
> > }
> >
> > - if (!obj->parent) {
> > + if (!obj->parent && !strcmp(object_get_typename(obj), "sgx-epc")) {
> > + gchar *name = g_strdup_printf("device[%d]", sgx_count++);
> > +
> > + object_property_add_child(container_get(qdev_get_machine(),
> > + "/sgx"),
> > + name, obj);
> > + unattached_parent = true;
> > + g_free(name);
> > + } else if (!obj->parent) {
> > gchar *name = g_strdup_printf("device[%d]", unattached_count++);
> >
> > object_property_add_child(container_get(qdev_get_machine()
> >
> > This patch can make sure vcpu is still /machine/unattached/device[0].
> >
> >
> > Which solution is best? thanks!
>
> Has either of the fixes reached yet reached upstream or not?
Jarkko, I sent out one patch to fix this issue last week,
https://lists.nongnu.org/archive/html/qemu-devel/2022-01/msg02502.html
Daniel regarded this fix is special code for SGX in the generic object code.
So, this fix can be done in Libvirt side. Did you face this issue? or you can
use this patch as TEMP fix. thanks!
Yang
>
> > Yang
>
> BR, Jarkko
^ permalink raw reply [flat|nested] 10+ messages in thread* Re: unable to execute QEMU command 'qom-get': Property 'sgx-epc.unavailable-features' not found
@ 2022-01-17 6:09 ` Yang Zhong
0 siblings, 0 replies; 10+ messages in thread
From: Yang Zhong @ 2022-01-17 6:09 UTC (permalink / raw)
To: Jarkko Sakkinen; +Cc: yang.zhong, pbonzini, eblake, qemu-devel, linux-sgx
On Mon, Jan 17, 2022 at 04:53:45AM +0200, Jarkko Sakkinen wrote:
> On Tue, Nov 30, 2021 at 08:15:36PM +0800, Yang Zhong wrote:
> > On Thu, Nov 25, 2021 at 08:47:22PM +0800, Yang Zhong wrote:
> > > Hello Paolo,
> > >
> > > Our customer used the Libvirt XML to start a SGX VM, but failed.
> > >
> > > libvirt.libvirtError: internal error: unable to execute QEMU command 'qom-get': Property 'sgx-epc.unavailable-features' not found
> > >
> > > The XML file,
> > > <qemu:commandline>
> > > <qemu:arg value="-cpu"/>
> > > <qemu:arg value="host,+sgx,+sgx-debug,+sgx-exinfo,+sgx-kss,+sgx-mode64,+sgx-provisionkey,+sgx-tokenkey,+sgx1,+sgx2,+sgxlc"/>
> > > <qemu:arg value="-object"/>
> > > <qemu:arg value="memory-backend-epc,id=mem1,size=16M,prealloc=on"/>
> > > <qemu:arg value="-M"/>
> > > <qemu:arg value="sgx-epc.0.memdev=mem1"/>
> > > </qemu:commandline>
> > >
> > > The new compound property command should be located in /machine path,
> > > which are different with old command '-sgx-epc id=epc1,memdev=mem1'.
> > >
> > > I also tried this from Qemu monitor tool,
> > > (qemu) qom-list /machine
> > > type (string)
> > > kernel (string)
> > > ......
> > > sgx-epc (SgxEPC)
> > > ......
> > > sgx-epc[0] (child<memory-region>)
> > > ......
> > >
> > > We can find sgx-epc from /machine list.
> > >
> >
> > This issue is clear now, which is caused by Libvirt to get the CPU's unavailable-features by below command:
> > {"execute":"qom-get","arguments":{"path":"/machine/unattached/device[0]","property":"unavailable-features"}
> >
> > but in SGX vm, since the sgx is initialized before VCPU because sgx need set the virtual EPC info in the cpuid.
> >
> > So the /machine/unattached/device[0] is occupied by sgx, which fail to get the unvailable-features from
> > /machine/unattached/device[0].
> >
> >
> > We need fix this issue, but this can be done in Qemu or Libvirt side.
> >
> > 1) Libvirt side
> > If the libvirt support SGX EPCs, libvirt can use /machine/unattached/device[n] to check "unavailable-features".
> > n is the next number of sgx's unattached_count.
> >
> > 2) Qemu side
> >
> > One temp patch to create one /sgx in the /machine in the device_set_realized()
> > diff --git a/hw/core/qdev.c b/hw/core/qdev.c
> > index 84f3019440..4154eef0d8 100644
> > --- a/hw/core/qdev.c
> > +++ b/hw/core/qdev.c
> > @@ -497,7 +497,7 @@ static void device_set_realized(Object *obj, bool value, Error **errp)
> > NamedClockList *ncl;
> > Error *local_err = NULL;
> > bool unattached_parent = false;
> > - static int unattached_count;
> > + static int unattached_count, sgx_count;
> >
> > if (dev->hotplugged && !dc->hotpluggable) {
> > error_setg(errp, QERR_DEVICE_NO_HOTPLUG, object_get_typename(obj));
> > @@ -509,7 +509,15 @@ static void device_set_realized(Object *obj, bool value, Error **errp)
> > goto fail;
> > }
> >
> > - if (!obj->parent) {
> > + if (!obj->parent && !strcmp(object_get_typename(obj), "sgx-epc")) {
> > + gchar *name = g_strdup_printf("device[%d]", sgx_count++);
> > +
> > + object_property_add_child(container_get(qdev_get_machine(),
> > + "/sgx"),
> > + name, obj);
> > + unattached_parent = true;
> > + g_free(name);
> > + } else if (!obj->parent) {
> > gchar *name = g_strdup_printf("device[%d]", unattached_count++);
> >
> > object_property_add_child(container_get(qdev_get_machine()
> >
> > This patch can make sure vcpu is still /machine/unattached/device[0].
> >
> >
> > Which solution is best? thanks!
>
> Has either of the fixes reached yet reached upstream or not?
Jarkko, I sent out one patch to fix this issue last week,
https://lists.nongnu.org/archive/html/qemu-devel/2022-01/msg02502.html
Daniel regarded this fix is special code for SGX in the generic object code.
So, this fix can be done in Libvirt side. Did you face this issue? or you can
use this patch as TEMP fix. thanks!
Yang
>
> > Yang
>
> BR, Jarkko
^ permalink raw reply [flat|nested] 10+ messages in thread* Re: unable to execute QEMU command 'qom-get': Property 'sgx-epc.unavailable-features' not found
2022-01-17 6:09 ` Yang Zhong
@ 2022-01-17 6:58 ` Jarkko Sakkinen
-1 siblings, 0 replies; 10+ messages in thread
From: Jarkko Sakkinen @ 2022-01-17 6:58 UTC (permalink / raw)
To: Yang Zhong; +Cc: qemu-devel, pbonzini, eblake, linux-sgx
On Mon, Jan 17, 2022 at 02:09:00PM +0800, Yang Zhong wrote:
> On Mon, Jan 17, 2022 at 04:53:45AM +0200, Jarkko Sakkinen wrote:
> > On Tue, Nov 30, 2021 at 08:15:36PM +0800, Yang Zhong wrote:
> > > On Thu, Nov 25, 2021 at 08:47:22PM +0800, Yang Zhong wrote:
> > > > Hello Paolo,
> > > >
> > > > Our customer used the Libvirt XML to start a SGX VM, but failed.
> > > >
> > > > libvirt.libvirtError: internal error: unable to execute QEMU command 'qom-get': Property 'sgx-epc.unavailable-features' not found
> > > >
> > > > The XML file,
> > > > <qemu:commandline>
> > > > <qemu:arg value="-cpu"/>
> > > > <qemu:arg value="host,+sgx,+sgx-debug,+sgx-exinfo,+sgx-kss,+sgx-mode64,+sgx-provisionkey,+sgx-tokenkey,+sgx1,+sgx2,+sgxlc"/>
> > > > <qemu:arg value="-object"/>
> > > > <qemu:arg value="memory-backend-epc,id=mem1,size=16M,prealloc=on"/>
> > > > <qemu:arg value="-M"/>
> > > > <qemu:arg value="sgx-epc.0.memdev=mem1"/>
> > > > </qemu:commandline>
> > > >
> > > > The new compound property command should be located in /machine path,
> > > > which are different with old command '-sgx-epc id=epc1,memdev=mem1'.
> > > >
> > > > I also tried this from Qemu monitor tool,
> > > > (qemu) qom-list /machine
> > > > type (string)
> > > > kernel (string)
> > > > ......
> > > > sgx-epc (SgxEPC)
> > > > ......
> > > > sgx-epc[0] (child<memory-region>)
> > > > ......
> > > >
> > > > We can find sgx-epc from /machine list.
> > > >
> > >
> > > This issue is clear now, which is caused by Libvirt to get the CPU's unavailable-features by below command:
> > > {"execute":"qom-get","arguments":{"path":"/machine/unattached/device[0]","property":"unavailable-features"}
> > >
> > > but in SGX vm, since the sgx is initialized before VCPU because sgx need set the virtual EPC info in the cpuid.
> > >
> > > So the /machine/unattached/device[0] is occupied by sgx, which fail to get the unvailable-features from
> > > /machine/unattached/device[0].
> > >
> > >
> > > We need fix this issue, but this can be done in Qemu or Libvirt side.
> > >
> > > 1) Libvirt side
> > > If the libvirt support SGX EPCs, libvirt can use /machine/unattached/device[n] to check "unavailable-features".
> > > n is the next number of sgx's unattached_count.
> > >
> > > 2) Qemu side
> > >
> > > One temp patch to create one /sgx in the /machine in the device_set_realized()
> > > diff --git a/hw/core/qdev.c b/hw/core/qdev.c
> > > index 84f3019440..4154eef0d8 100644
> > > --- a/hw/core/qdev.c
> > > +++ b/hw/core/qdev.c
> > > @@ -497,7 +497,7 @@ static void device_set_realized(Object *obj, bool value, Error **errp)
> > > NamedClockList *ncl;
> > > Error *local_err = NULL;
> > > bool unattached_parent = false;
> > > - static int unattached_count;
> > > + static int unattached_count, sgx_count;
> > >
> > > if (dev->hotplugged && !dc->hotpluggable) {
> > > error_setg(errp, QERR_DEVICE_NO_HOTPLUG, object_get_typename(obj));
> > > @@ -509,7 +509,15 @@ static void device_set_realized(Object *obj, bool value, Error **errp)
> > > goto fail;
> > > }
> > >
> > > - if (!obj->parent) {
> > > + if (!obj->parent && !strcmp(object_get_typename(obj), "sgx-epc")) {
> > > + gchar *name = g_strdup_printf("device[%d]", sgx_count++);
> > > +
> > > + object_property_add_child(container_get(qdev_get_machine(),
> > > + "/sgx"),
> > > + name, obj);
> > > + unattached_parent = true;
> > > + g_free(name);
> > > + } else if (!obj->parent) {
> > > gchar *name = g_strdup_printf("device[%d]", unattached_count++);
> > >
> > > object_property_add_child(container_get(qdev_get_machine()
> > >
> > > This patch can make sure vcpu is still /machine/unattached/device[0].
> > >
> > >
> > > Which solution is best? thanks!
> >
> > Has either of the fixes reached yet reached upstream or not?
>
>
> Jarkko, I sent out one patch to fix this issue last week,
> https://lists.nongnu.org/archive/html/qemu-devel/2022-01/msg02502.html
>
> Daniel regarded this fix is special code for SGX in the generic object code.
> So, this fix can be done in Libvirt side. Did you face this issue? or you can
> use this patch as TEMP fix. thanks!
Great, thank you! You can add my tested-by to the patch.
> Yang
BR, Jarkko
^ permalink raw reply [flat|nested] 10+ messages in thread* Re: unable to execute QEMU command 'qom-get': Property 'sgx-epc.unavailable-features' not found
@ 2022-01-17 6:58 ` Jarkko Sakkinen
0 siblings, 0 replies; 10+ messages in thread
From: Jarkko Sakkinen @ 2022-01-17 6:58 UTC (permalink / raw)
To: Yang Zhong; +Cc: pbonzini, eblake, qemu-devel, linux-sgx
On Mon, Jan 17, 2022 at 02:09:00PM +0800, Yang Zhong wrote:
> On Mon, Jan 17, 2022 at 04:53:45AM +0200, Jarkko Sakkinen wrote:
> > On Tue, Nov 30, 2021 at 08:15:36PM +0800, Yang Zhong wrote:
> > > On Thu, Nov 25, 2021 at 08:47:22PM +0800, Yang Zhong wrote:
> > > > Hello Paolo,
> > > >
> > > > Our customer used the Libvirt XML to start a SGX VM, but failed.
> > > >
> > > > libvirt.libvirtError: internal error: unable to execute QEMU command 'qom-get': Property 'sgx-epc.unavailable-features' not found
> > > >
> > > > The XML file,
> > > > <qemu:commandline>
> > > > <qemu:arg value="-cpu"/>
> > > > <qemu:arg value="host,+sgx,+sgx-debug,+sgx-exinfo,+sgx-kss,+sgx-mode64,+sgx-provisionkey,+sgx-tokenkey,+sgx1,+sgx2,+sgxlc"/>
> > > > <qemu:arg value="-object"/>
> > > > <qemu:arg value="memory-backend-epc,id=mem1,size=16M,prealloc=on"/>
> > > > <qemu:arg value="-M"/>
> > > > <qemu:arg value="sgx-epc.0.memdev=mem1"/>
> > > > </qemu:commandline>
> > > >
> > > > The new compound property command should be located in /machine path,
> > > > which are different with old command '-sgx-epc id=epc1,memdev=mem1'.
> > > >
> > > > I also tried this from Qemu monitor tool,
> > > > (qemu) qom-list /machine
> > > > type (string)
> > > > kernel (string)
> > > > ......
> > > > sgx-epc (SgxEPC)
> > > > ......
> > > > sgx-epc[0] (child<memory-region>)
> > > > ......
> > > >
> > > > We can find sgx-epc from /machine list.
> > > >
> > >
> > > This issue is clear now, which is caused by Libvirt to get the CPU's unavailable-features by below command:
> > > {"execute":"qom-get","arguments":{"path":"/machine/unattached/device[0]","property":"unavailable-features"}
> > >
> > > but in SGX vm, since the sgx is initialized before VCPU because sgx need set the virtual EPC info in the cpuid.
> > >
> > > So the /machine/unattached/device[0] is occupied by sgx, which fail to get the unvailable-features from
> > > /machine/unattached/device[0].
> > >
> > >
> > > We need fix this issue, but this can be done in Qemu or Libvirt side.
> > >
> > > 1) Libvirt side
> > > If the libvirt support SGX EPCs, libvirt can use /machine/unattached/device[n] to check "unavailable-features".
> > > n is the next number of sgx's unattached_count.
> > >
> > > 2) Qemu side
> > >
> > > One temp patch to create one /sgx in the /machine in the device_set_realized()
> > > diff --git a/hw/core/qdev.c b/hw/core/qdev.c
> > > index 84f3019440..4154eef0d8 100644
> > > --- a/hw/core/qdev.c
> > > +++ b/hw/core/qdev.c
> > > @@ -497,7 +497,7 @@ static void device_set_realized(Object *obj, bool value, Error **errp)
> > > NamedClockList *ncl;
> > > Error *local_err = NULL;
> > > bool unattached_parent = false;
> > > - static int unattached_count;
> > > + static int unattached_count, sgx_count;
> > >
> > > if (dev->hotplugged && !dc->hotpluggable) {
> > > error_setg(errp, QERR_DEVICE_NO_HOTPLUG, object_get_typename(obj));
> > > @@ -509,7 +509,15 @@ static void device_set_realized(Object *obj, bool value, Error **errp)
> > > goto fail;
> > > }
> > >
> > > - if (!obj->parent) {
> > > + if (!obj->parent && !strcmp(object_get_typename(obj), "sgx-epc")) {
> > > + gchar *name = g_strdup_printf("device[%d]", sgx_count++);
> > > +
> > > + object_property_add_child(container_get(qdev_get_machine(),
> > > + "/sgx"),
> > > + name, obj);
> > > + unattached_parent = true;
> > > + g_free(name);
> > > + } else if (!obj->parent) {
> > > gchar *name = g_strdup_printf("device[%d]", unattached_count++);
> > >
> > > object_property_add_child(container_get(qdev_get_machine()
> > >
> > > This patch can make sure vcpu is still /machine/unattached/device[0].
> > >
> > >
> > > Which solution is best? thanks!
> >
> > Has either of the fixes reached yet reached upstream or not?
>
>
> Jarkko, I sent out one patch to fix this issue last week,
> https://lists.nongnu.org/archive/html/qemu-devel/2022-01/msg02502.html
>
> Daniel regarded this fix is special code for SGX in the generic object code.
> So, this fix can be done in Libvirt side. Did you face this issue? or you can
> use this patch as TEMP fix. thanks!
Great, thank you! You can add my tested-by to the patch.
> Yang
BR, Jarkko
^ permalink raw reply [flat|nested] 10+ messages in thread
* Re: unable to execute QEMU command 'qom-get': Property 'sgx-epc.unavailable-features' not found
2022-01-17 2:53 ` Jarkko Sakkinen
@ 2022-01-17 6:56 ` Jarkko Sakkinen
-1 siblings, 0 replies; 10+ messages in thread
From: Jarkko Sakkinen @ 2022-01-17 6:56 UTC (permalink / raw)
To: Yang Zhong; +Cc: qemu-devel, pbonzini, eblake, linux-sgx
On Mon, Jan 17, 2022 at 04:53:48AM +0200, Jarkko Sakkinen wrote:
> On Tue, Nov 30, 2021 at 08:15:36PM +0800, Yang Zhong wrote:
> > On Thu, Nov 25, 2021 at 08:47:22PM +0800, Yang Zhong wrote:
> > > Hello Paolo,
> > >
> > > Our customer used the Libvirt XML to start a SGX VM, but failed.
> > >
> > > libvirt.libvirtError: internal error: unable to execute QEMU command 'qom-get': Property 'sgx-epc.unavailable-features' not found
> > >
> > > The XML file,
> > > <qemu:commandline>
> > > <qemu:arg value="-cpu"/>
> > > <qemu:arg value="host,+sgx,+sgx-debug,+sgx-exinfo,+sgx-kss,+sgx-mode64,+sgx-provisionkey,+sgx-tokenkey,+sgx1,+sgx2,+sgxlc"/>
> > > <qemu:arg value="-object"/>
> > > <qemu:arg value="memory-backend-epc,id=mem1,size=16M,prealloc=on"/>
> > > <qemu:arg value="-M"/>
> > > <qemu:arg value="sgx-epc.0.memdev=mem1"/>
> > > </qemu:commandline>
> > >
> > > The new compound property command should be located in /machine path,
> > > which are different with old command '-sgx-epc id=epc1,memdev=mem1'.
> > >
> > > I also tried this from Qemu monitor tool,
> > > (qemu) qom-list /machine
> > > type (string)
> > > kernel (string)
> > > ......
> > > sgx-epc (SgxEPC)
> > > ......
> > > sgx-epc[0] (child<memory-region>)
> > > ......
> > >
> > > We can find sgx-epc from /machine list.
> > >
> >
> > This issue is clear now, which is caused by Libvirt to get the CPU's unavailable-features by below command:
> > {"execute":"qom-get","arguments":{"path":"/machine/unattached/device[0]","property":"unavailable-features"}
> >
> > but in SGX vm, since the sgx is initialized before VCPU because sgx need set the virtual EPC info in the cpuid.
> >
> > So the /machine/unattached/device[0] is occupied by sgx, which fail to get the unvailable-features from
> > /machine/unattached/device[0].
> >
> >
> > We need fix this issue, but this can be done in Qemu or Libvirt side.
> >
> > 1) Libvirt side
> > If the libvirt support SGX EPCs, libvirt can use /machine/unattached/device[n] to check "unavailable-features".
> > n is the next number of sgx's unattached_count.
> >
> > 2) Qemu side
> >
> > One temp patch to create one /sgx in the /machine in the device_set_realized()
> > diff --git a/hw/core/qdev.c b/hw/core/qdev.c
> > index 84f3019440..4154eef0d8 100644
> > --- a/hw/core/qdev.c
> > +++ b/hw/core/qdev.c
> > @@ -497,7 +497,7 @@ static void device_set_realized(Object *obj, bool value, Error **errp)
> > NamedClockList *ncl;
> > Error *local_err = NULL;
> > bool unattached_parent = false;
> > - static int unattached_count;
> > + static int unattached_count, sgx_count;
> >
> > if (dev->hotplugged && !dc->hotpluggable) {
> > error_setg(errp, QERR_DEVICE_NO_HOTPLUG, object_get_typename(obj));
> > @@ -509,7 +509,15 @@ static void device_set_realized(Object *obj, bool value, Error **errp)
> > goto fail;
> > }
> >
> > - if (!obj->parent) {
> > + if (!obj->parent && !strcmp(object_get_typename(obj), "sgx-epc")) {
> > + gchar *name = g_strdup_printf("device[%d]", sgx_count++);
> > +
> > + object_property_add_child(container_get(qdev_get_machine(),
> > + "/sgx"),
> > + name, obj);
> > + unattached_parent = true;
> > + g_free(name);
> > + } else if (!obj->parent) {
> > gchar *name = g_strdup_printf("device[%d]", unattached_count++);
> >
> > object_property_add_child(container_get(qdev_get_machine()
> >
> > This patch can make sure vcpu is still /machine/unattached/device[0].
> >
> >
> > Which solution is best? thanks!
>
> Has either of the fixes reached yet reached upstream or not?
I built qemu from git with the fix applied. It fixed the issue for me.
Tested-by: Jarkko Sakkinen <jarkko@kernel.org>
> > Yang
BR, Jarkko
^ permalink raw reply [flat|nested] 10+ messages in thread* Re: unable to execute QEMU command 'qom-get': Property 'sgx-epc.unavailable-features' not found
@ 2022-01-17 6:56 ` Jarkko Sakkinen
0 siblings, 0 replies; 10+ messages in thread
From: Jarkko Sakkinen @ 2022-01-17 6:56 UTC (permalink / raw)
To: Yang Zhong; +Cc: pbonzini, eblake, qemu-devel, linux-sgx
On Mon, Jan 17, 2022 at 04:53:48AM +0200, Jarkko Sakkinen wrote:
> On Tue, Nov 30, 2021 at 08:15:36PM +0800, Yang Zhong wrote:
> > On Thu, Nov 25, 2021 at 08:47:22PM +0800, Yang Zhong wrote:
> > > Hello Paolo,
> > >
> > > Our customer used the Libvirt XML to start a SGX VM, but failed.
> > >
> > > libvirt.libvirtError: internal error: unable to execute QEMU command 'qom-get': Property 'sgx-epc.unavailable-features' not found
> > >
> > > The XML file,
> > > <qemu:commandline>
> > > <qemu:arg value="-cpu"/>
> > > <qemu:arg value="host,+sgx,+sgx-debug,+sgx-exinfo,+sgx-kss,+sgx-mode64,+sgx-provisionkey,+sgx-tokenkey,+sgx1,+sgx2,+sgxlc"/>
> > > <qemu:arg value="-object"/>
> > > <qemu:arg value="memory-backend-epc,id=mem1,size=16M,prealloc=on"/>
> > > <qemu:arg value="-M"/>
> > > <qemu:arg value="sgx-epc.0.memdev=mem1"/>
> > > </qemu:commandline>
> > >
> > > The new compound property command should be located in /machine path,
> > > which are different with old command '-sgx-epc id=epc1,memdev=mem1'.
> > >
> > > I also tried this from Qemu monitor tool,
> > > (qemu) qom-list /machine
> > > type (string)
> > > kernel (string)
> > > ......
> > > sgx-epc (SgxEPC)
> > > ......
> > > sgx-epc[0] (child<memory-region>)
> > > ......
> > >
> > > We can find sgx-epc from /machine list.
> > >
> >
> > This issue is clear now, which is caused by Libvirt to get the CPU's unavailable-features by below command:
> > {"execute":"qom-get","arguments":{"path":"/machine/unattached/device[0]","property":"unavailable-features"}
> >
> > but in SGX vm, since the sgx is initialized before VCPU because sgx need set the virtual EPC info in the cpuid.
> >
> > So the /machine/unattached/device[0] is occupied by sgx, which fail to get the unvailable-features from
> > /machine/unattached/device[0].
> >
> >
> > We need fix this issue, but this can be done in Qemu or Libvirt side.
> >
> > 1) Libvirt side
> > If the libvirt support SGX EPCs, libvirt can use /machine/unattached/device[n] to check "unavailable-features".
> > n is the next number of sgx's unattached_count.
> >
> > 2) Qemu side
> >
> > One temp patch to create one /sgx in the /machine in the device_set_realized()
> > diff --git a/hw/core/qdev.c b/hw/core/qdev.c
> > index 84f3019440..4154eef0d8 100644
> > --- a/hw/core/qdev.c
> > +++ b/hw/core/qdev.c
> > @@ -497,7 +497,7 @@ static void device_set_realized(Object *obj, bool value, Error **errp)
> > NamedClockList *ncl;
> > Error *local_err = NULL;
> > bool unattached_parent = false;
> > - static int unattached_count;
> > + static int unattached_count, sgx_count;
> >
> > if (dev->hotplugged && !dc->hotpluggable) {
> > error_setg(errp, QERR_DEVICE_NO_HOTPLUG, object_get_typename(obj));
> > @@ -509,7 +509,15 @@ static void device_set_realized(Object *obj, bool value, Error **errp)
> > goto fail;
> > }
> >
> > - if (!obj->parent) {
> > + if (!obj->parent && !strcmp(object_get_typename(obj), "sgx-epc")) {
> > + gchar *name = g_strdup_printf("device[%d]", sgx_count++);
> > +
> > + object_property_add_child(container_get(qdev_get_machine(),
> > + "/sgx"),
> > + name, obj);
> > + unattached_parent = true;
> > + g_free(name);
> > + } else if (!obj->parent) {
> > gchar *name = g_strdup_printf("device[%d]", unattached_count++);
> >
> > object_property_add_child(container_get(qdev_get_machine()
> >
> > This patch can make sure vcpu is still /machine/unattached/device[0].
> >
> >
> > Which solution is best? thanks!
>
> Has either of the fixes reached yet reached upstream or not?
I built qemu from git with the fix applied. It fixed the issue for me.
Tested-by: Jarkko Sakkinen <jarkko@kernel.org>
> > Yang
BR, Jarkko
^ permalink raw reply [flat|nested] 10+ messages in thread