From: isaku.yamahata@intel.com
To: kvm@vger.kernel.org, linux-kernel@vger.kernel.org
Cc: isaku.yamahata@intel.com, isaku.yamahata@gmail.com,
Paolo Bonzini <pbonzini@redhat.com>,
erdemaktas@google.com, Sean Christopherson <seanjc@google.com>,
Sagi Shahar <sagis@google.com>, Kai Huang <kai.huang@intel.com>,
chen.bo@intel.com, hang.yuan@intel.com, tina.zhang@intel.com
Subject: [PATCH v18 116/121] Documentation/virt/kvm: Document on Trust Domain Extensions(TDX)
Date: Mon, 22 Jan 2024 15:54:32 -0800 [thread overview]
Message-ID: <2f32572b915922602b52c874d0ad9c5aba7a2c16.1705965635.git.isaku.yamahata@intel.com> (raw)
In-Reply-To: <cover.1705965634.git.isaku.yamahata@intel.com>
From: Isaku Yamahata <isaku.yamahata@intel.com>
Add documentation to Intel Trusted Domain Extensions(TDX) support.
Signed-off-by: Isaku Yamahata <isaku.yamahata@intel.com>
---
Documentation/virt/kvm/api.rst | 9 +-
Documentation/virt/kvm/x86/index.rst | 1 +
Documentation/virt/kvm/x86/intel-tdx.rst | 362 +++++++++++++++++++++++
3 files changed, 371 insertions(+), 1 deletion(-)
create mode 100644 Documentation/virt/kvm/x86/intel-tdx.rst
diff --git a/Documentation/virt/kvm/api.rst b/Documentation/virt/kvm/api.rst
index 3ec0b7a455a0..2dafa5296978 100644
--- a/Documentation/virt/kvm/api.rst
+++ b/Documentation/virt/kvm/api.rst
@@ -1394,6 +1394,9 @@ the memory region are automatically reflected into the guest. For example, an
mmap() that affects the region will be made visible immediately. Another
example is madvise(MADV_DROP).
+For TDX guest, deleting/moving memory region loses guest memory contents.
+Read only region isn't supported. Only as-id 0 is supported.
+
Note: On arm64, a write generated by the page-table walker (to update
the Access and Dirty flags, for example) never results in a
KVM_EXIT_MMIO exit when the slot has the KVM_MEM_READONLY flag. This
@@ -4734,7 +4737,7 @@ H_GET_CPU_CHARACTERISTICS hypercall.
:Capability: basic
:Architectures: x86
-:Type: vm
+:Type: vm ioctl, vcpu ioctl
:Parameters: an opaque platform specific structure (in/out)
:Returns: 0 on success; -1 on error
@@ -4746,6 +4749,10 @@ Currently, this ioctl is used for issuing Secure Encrypted Virtualization
(SEV) commands on AMD Processors. The SEV commands are defined in
Documentation/virt/kvm/x86/amd-memory-encryption.rst.
+Currently, this ioctl is used for issuing Trusted Domain Extensions
+(TDX) commands on Intel Processors. The TDX commands are defined in
+Documentation/virt/kvm/x86/intel-tdx.rst.
+
4.111 KVM_MEMORY_ENCRYPT_REG_REGION
-----------------------------------
diff --git a/Documentation/virt/kvm/x86/index.rst b/Documentation/virt/kvm/x86/index.rst
index 9ece6b8dc817..851e99174762 100644
--- a/Documentation/virt/kvm/x86/index.rst
+++ b/Documentation/virt/kvm/x86/index.rst
@@ -11,6 +11,7 @@ KVM for x86 systems
cpuid
errata
hypercalls
+ intel-tdx
mmu
msr
nested-vmx
diff --git a/Documentation/virt/kvm/x86/intel-tdx.rst b/Documentation/virt/kvm/x86/intel-tdx.rst
new file mode 100644
index 000000000000..a1b10e99c1ff
--- /dev/null
+++ b/Documentation/virt/kvm/x86/intel-tdx.rst
@@ -0,0 +1,362 @@
+.. SPDX-License-Identifier: GPL-2.0
+
+===================================
+Intel Trust Domain Extensions (TDX)
+===================================
+
+Overview
+========
+TDX stands for Trust Domain Extensions which isolates VMs from
+the virtual-machine manager (VMM)/hypervisor and any other software on
+the platform. For details, see the specifications [1]_, whitepaper [2]_,
+architectural extensions specification [3]_, module documentation [4]_,
+loader interface specification [5]_, guest-hypervisor communication
+interface [6]_, virtual firmware design guide [7]_, and other resources
+([8]_, [9]_, [10]_, [11]_, and [12]_).
+
+
+API description
+===============
+
+KVM_MEMORY_ENCRYPT_OP
+---------------------
+:Type: vm ioctl, vcpu ioctl
+
+For TDX operations, KVM_MEMORY_ENCRYPT_OP is re-purposed to be generic
+ioctl with TDX specific sub ioctl command.
+
+::
+
+ /* Trust Domain eXtension sub-ioctl() commands. */
+ enum kvm_tdx_cmd_id {
+ KVM_TDX_CAPABILITIES = 0,
+ KVM_TDX_INIT_VM,
+ KVM_TDX_INIT_VCPU,
+ KVM_TDX_INIT_MEM_REGION,
+ KVM_TDX_FINALIZE_VM,
+
+ KVM_TDX_CMD_NR_MAX,
+ };
+
+ struct kvm_tdx_cmd {
+ /* enum kvm_tdx_cmd_id */
+ __u32 id;
+ /* flags for sub-commend. If sub-command doesn't use this, set zero. */
+ __u32 flags;
+ /*
+ * data for each sub-command. An immediate or a pointer to the actual
+ * data in process virtual address. If sub-command doesn't use it,
+ * set zero.
+ */
+ __u64 data;
+ /*
+ * Auxiliary error code. The sub-command may return TDX SEAMCALL
+ * status code in addition to -Exxx.
+ * Defined for consistency with struct kvm_sev_cmd.
+ */
+ __u64 error;
+ /* Reserved: Defined for consistency with struct kvm_sev_cmd. */
+ __u64 unused;
+ };
+
+KVM_TDX_CAPABILITIES
+--------------------
+:Type: vm ioctl
+
+Subset of TDSYSINFO_STRCUCT retrieved by TDH.SYS.INFO TDX SEAM call will be
+returned. Which describes about Intel TDX module.
+
+- id: KVM_TDX_CAPABILITIES
+- flags: must be 0
+- data: pointer to struct kvm_tdx_capabilities
+- error: must be 0
+- unused: must be 0
+
+::
+
+ struct kvm_tdx_cpuid_config {
+ __u32 leaf;
+ __u32 sub_leaf;
+ __u32 eax;
+ __u32 ebx;
+ __u32 ecx;
+ __u32 edx;
+ };
+
+ struct kvm_tdx_capabilities {
+ __u64 attrs_fixed0;
+ __u64 attrs_fixed1;
+ __u64 xfam_fixed0;
+ __u64 xfam_fixed1;
+ #define TDX_CAP_GPAW_48 (1 << 0)
+ #define TDX_CAP_GPAW_52 (1 << 1)
+ __u32 supported_gpaw;
+ __u32 padding;
+ __u64 reserved[251];
+
+ __u32 nr_cpuid_configs;
+ struct kvm_tdx_cpuid_config cpuid_configs[];
+ };
+
+
+KVM_TDX_INIT_VM
+---------------
+:Type: vm ioctl
+
+Does additional VM initialization specific to TDX which corresponds to
+TDH.MNG.INIT TDX SEAM call.
+
+- id: KVM_TDX_INIT_VM
+- flags: must be 0
+- data: pointer to struct kvm_tdx_init_vm
+- error: must be 0
+- unused: must be 0
+
+::
+
+ struct kvm_tdx_init_vm {
+ __u64 attributes;
+ __u64 mrconfigid[6]; /* sha384 digest */
+ __u64 mrowner[6]; /* sha384 digest */
+ __u64 mrownerconfig[6]; /* sha348 digest */
+ __u64 reserved[1004]; /* must be zero for future extensibility */
+
+ struct kvm_cpuid2 cpuid;
+ };
+
+
+KVM_TDX_INIT_VCPU
+-----------------
+:Type: vcpu ioctl
+
+Does additional VCPU initialization specific to TDX which corresponds to
+TDH.VP.INIT TDX SEAM call.
+
+- id: KVM_TDX_INIT_VCPU
+- flags: must be 0
+- data: initial value of the guest TD VCPU RCX
+- error: must be 0
+- unused: must be 0
+
+KVM_TDX_INIT_MEM_REGION
+-----------------------
+:Type: vm ioctl
+
+Encrypt a memory continuous region which corresponding to TDH.MEM.PAGE.ADD
+TDX SEAM call.
+If KVM_TDX_MEASURE_MEMORY_REGION flag is specified, it also extends measurement
+which corresponds to TDH.MR.EXTEND TDX SEAM call.
+
+- id: KVM_TDX_INIT_VCPU
+- flags: flags
+ currently only KVM_TDX_MEASURE_MEMORY_REGION is defined
+- data: pointer to struct kvm_tdx_init_mem_region
+- error: must be 0
+- unused: must be 0
+
+::
+
+ #define KVM_TDX_MEASURE_MEMORY_REGION (1UL << 0)
+
+ struct kvm_tdx_init_mem_region {
+ __u64 source_addr;
+ __u64 gpa;
+ __u64 nr_pages;
+ };
+
+
+KVM_TDX_FINALIZE_VM
+-------------------
+:Type: vm ioctl
+
+Complete measurement of the initial TD contents and mark it ready to run
+which corresponds to TDH.MR.FINALIZE
+
+- id: KVM_TDX_FINALIZE_VM
+- flags: must be 0
+- data: must be 0
+- error: must be 0
+- unused: must be 0
+
+KVM TDX creation flow
+=====================
+In addition to KVM normal flow, new TDX ioctls need to be called. The control flow
+looks like as follows.
+
+#. system wide capability check
+
+ * KVM_CAP_VM_TYPES: check if VM type is supported and if KVM_X86_TDX_VM
+ is supported.
+
+#. creating VM
+
+ * KVM_CREATE_VM
+ * KVM_TDX_CAPABILITIES: query if TDX is supported on the platform.
+ * KVM_ENABLE_CAP_VM(KVM_CAP_MAX_VCPUS): set max_vcpus. KVM_MAX_VCPUS by
+ default. KVM_MAX_VCPUS is not a part of ABI, but kernel internal constant
+ that is subject to change. Because max vcpus is a part of attestation, max
+ vcpus should be explicitly set.
+ * KVM_SET_TSC_KHZ for vm. optional
+ * KVM_TDX_INIT_VM: pass TDX specific VM parameters.
+
+#. creating VCPU
+
+ * KVM_CREATE_VCPU
+ * KVM_TDX_INIT_VCPU: pass TDX specific VCPU parameters.
+ * KVM_SET_CPUID2: Enable CPUID[0x1].ECX.X2APIC(bit 21)=1 so that the following
+ setting of MSR_IA32_APIC_BASE success. Without this,
+ KVM_SET_MSRS(MSR_IA32_APIC_BASE) fails.
+ * KVM_SET_MSRS: Set the initial reset value of MSR_IA32_APIC_BASE to
+ APIC_DEFAULT_ADDRESS(0xfee00000) | XAPIC_ENABLE(bit 10) |
+ X2APIC_ENABLE(bit 11) [| MSR_IA32_APICBASE_BSP(bit 8) optional]
+
+#. initializing guest memory
+
+ * allocate guest memory and initialize page same to normal KVM case
+ In TDX case, parse and load TDVF into guest memory in addition.
+ * KVM_TDX_INIT_MEM_REGION to add and measure guest pages.
+ If the pages has contents above, those pages need to be added.
+ Otherwise the contents will be lost and guest sees zero pages.
+ * KVM_TDX_FINALIAZE_VM: Finalize VM and measurement
+ This must be after KVM_TDX_INIT_MEM_REGION.
+
+#. run vcpu
+
+Design discussion
+=================
+
+Coexistence of normal(VMX) VM and TD VM
+---------------------------------------
+It's required to allow both legacy(normal VMX) VMs and new TD VMs to
+coexist. Otherwise the benefits of VM flexibility would be eliminated.
+The main issue for it is that the logic of kvm_x86_ops callbacks for
+TDX is different from VMX. On the other hand, the variable,
+kvm_x86_ops, is global single variable. Not per-VM, not per-vcpu.
+
+Several points to be considered:
+
+ * No or minimal overhead when TDX is disabled(CONFIG_INTEL_TDX_HOST=n).
+ * Avoid overhead of indirect call via function pointers.
+ * Contain the changes under arch/x86/kvm/vmx directory and share logic
+ with VMX for maintenance.
+ Even though the ways to operation on VM (VMX instruction vs TDX
+ SEAM call) are different, the basic idea remains the same. So, many
+ logic can be shared.
+ * Future maintenance
+ The huge change of kvm_x86_ops in (near) future isn't expected.
+ a centralized file is acceptable.
+
+- Wrapping kvm x86_ops: The current choice
+
+ Introduce dedicated file for arch/x86/kvm/vmx/main.c (the name,
+ main.c, is just chosen to show main entry points for callbacks.) and
+ wrapper functions around all the callbacks with
+ "if (is-tdx) tdx-callback() else vmx-callback()".
+
+ Pros:
+
+ - No major change in common x86 KVM code. The change is (mostly)
+ contained under arch/x86/kvm/vmx/.
+ - When TDX is disabled(CONFIG_INTEL_TDX_HOST=n), the overhead is
+ optimized out.
+ - Micro optimization by avoiding function pointer.
+
+ Cons:
+
+ - Many boiler plates in arch/x86/kvm/vmx/main.c.
+
+KVM MMU Changes
+---------------
+KVM MMU needs to be enhanced to handle Secure/Shared-EPT. The
+high-level execution flow is mostly same to normal EPT case.
+EPT violation/misconfiguration -> invoke TDP fault handler ->
+resolve TDP fault -> resume execution. (or emulate MMIO)
+The difference is, that S-EPT is operated(read/write) via TDX SEAM
+call which is expensive instead of direct read/write EPT entry.
+One bit of GPA (51 or 47 bit) is repurposed so that it means shared
+with host(if set to 1) or private to TD(if cleared to 0).
+
+- The current implementation
+
+ * Reuse the existing MMU code with minimal update. Because the
+ execution flow is mostly same. But additional operation, TDX call
+ for S-EPT, is needed. So add hooks for it to kvm_x86_ops.
+ * For performance, minimize TDX SEAM call to operate on S-EPT. When
+ getting corresponding S-EPT pages/entry from faulting GPA, don't
+ use TDX SEAM call to read S-EPT entry. Instead create shadow copy
+ in host memory.
+ Repurpose the existing kvm_mmu_page as shadow copy of S-EPT and
+ associate S-EPT to it.
+ * Treats share bit as attributes. mask/unmask the bit where
+ necessary to keep the existing traversing code works.
+ Introduce kvm.arch.gfn_shared_mask and use "if (gfn_share_mask)"
+ for special case.
+
+ * 0 : for non-TDX case
+ * 51 or 47 bit set for TDX case.
+
+ Pros:
+
+ - Large code reuse with minimal new hooks.
+ - Execution path is same.
+
+ Cons:
+
+ - Complicates the existing code.
+ - Repurpose kvm_mmu_page as shadow of Secure-EPT can be confusing.
+
+New KVM API, ioctl (sub)command, to manage TD VMs
+-------------------------------------------------
+Additional KVM APIs are needed to control TD VMs. The operations on TD
+VMs are specific to TDX.
+
+- Piggyback and repurpose KVM_MEMORY_ENCRYPT_OP
+
+ Although operations for TD VMs aren't necessarily related to memory
+ encryption, define sub operations of KVM_MEMORY_ENCRYPT_OP for TDX specific
+ ioctls.
+
+ Pros:
+
+ - No major change in common x86 KVM code.
+ - Follows the SEV case.
+
+ Cons:
+
+ - The sub operations of KVM_MEMORY_ENCRYPT_OP aren't necessarily memory
+ encryption, but operations on TD VMs.
+
+References
+==========
+
+.. [1] TDX specification
+ https://software.intel.com/content/www/us/en/develop/articles/intel-trust-domain-extensions.html
+.. [2] Intel Trust Domain Extensions (Intel TDX)
+ https://software.intel.com/content/dam/develop/external/us/en/documents/tdx-whitepaper-final9-17.pdf
+.. [3] Intel CPU Architectural Extensions Specification
+ https://software.intel.com/content/dam/develop/external/us/en/documents/intel-tdx-cpu-architectural-specification.pdf
+.. [4] Intel TDX Module 1.0 EAS
+ https://software.intel.com/content/dam/develop/external/us/en/documents/intel-tdx-module-1eas.pdf
+.. [5] Intel TDX Loader Interface Specification
+ https://software.intel.com/content/dam/develop/external/us/en/documents/intel-tdx-seamldr-interface-specification.pdf
+.. [6] Intel TDX Guest-Hypervisor Communication Interface
+ https://software.intel.com/content/dam/develop/external/us/en/documents/intel-tdx-guest-hypervisor-communication-interface.pdf
+.. [7] Intel TDX Virtual Firmware Design Guide
+ https://software.intel.com/content/dam/develop/external/us/en/documents/tdx-virtual-firmware-design-guide-rev-1.
+.. [8] intel public github
+
+ * kvm TDX branch: https://github.com/intel/tdx/tree/kvm
+ * TDX guest branch: https://github.com/intel/tdx/tree/guest
+
+.. [9] tdvf
+ https://github.com/tianocore/edk2-staging/tree/TDVF
+.. [10] KVM forum 2020: Intel Virtualization Technology Extensions to
+ Enable Hardware Isolated VMs
+ https://osseu2020.sched.com/event/eDzm/intel-virtualization-technology-extensions-to-enable-hardware-isolated-vms-sean-christopherson-intel
+.. [11] Linux Security Summit EU 2020:
+ Architectural Extensions for Hardware Virtual Machine Isolation
+ to Advance Confidential Computing in Public Clouds - Ravi Sahita
+ & Jun Nakajima, Intel Corporation
+ https://osseu2020.sched.com/event/eDOx/architectural-extensions-for-hardware-virtual-machine-isolation-to-advance-confidential-computing-in-public-clouds-ravi-sahita-jun-nakajima-intel-corporation
+.. [12] [RFCv2,00/16] KVM protected memory extension
+ https://lore.kernel.org/all/20201020061859.18385-1-kirill.shutemov@linux.intel.com/
--
2.25.1
next prev parent reply other threads:[~2024-01-22 23:56 UTC|newest]
Thread overview: 212+ messages / expand[flat|nested] mbox.gz Atom feed top
2024-01-22 23:52 [PATCH v18 000/121] KVM TDX basic feature support isaku.yamahata
2024-01-22 23:52 ` [PATCH v18 001/121] x86/virt/tdx: Export TDX KeyID information isaku.yamahata
2024-02-01 1:57 ` Yuan Yao
2024-02-26 18:46 ` Isaku Yamahata
2024-01-22 23:52 ` [PATCH v18 002/121] x86/virt/tdx: Export SEAMCALL functions isaku.yamahata
2024-02-08 13:30 ` Paolo Bonzini
2024-02-26 17:51 ` Isaku Yamahata
2024-01-22 23:52 ` [PATCH v18 003/121] KVM: x86: Add is_vm_type_supported callback isaku.yamahata
2024-01-29 6:54 ` Yuan Yao
2024-01-22 23:52 ` [PATCH v18 004/121] KVM: VMX: Move out vmx_x86_ops to 'main.c' to wrap VMX and TDX isaku.yamahata
2024-01-29 7:03 ` Yuan Yao
2024-01-31 14:34 ` Xiaoyao Li
2024-01-22 23:52 ` [PATCH v18 005/121] KVM: x86/vmx: initialize loaded_vmcss_on_cpu in vmx_hardware_setup() isaku.yamahata
2024-01-29 7:50 ` Yuan Yao
2024-01-22 23:52 ` [PATCH v18 006/121] KVM: x86/vmx: Refactor KVM VMX module init/exit functions isaku.yamahata
2024-02-01 1:41 ` Xiaoyao Li
2024-01-22 23:52 ` [PATCH v18 007/121] KVM: VMX: Reorder vmx initialization with kvm vendor initialization isaku.yamahata
2024-01-23 3:42 ` Binbin Wu
2024-01-29 8:56 ` Yuan Yao
2024-02-01 1:47 ` Xiaoyao Li
2024-02-01 9:34 ` Xiaoyao Li
2024-02-26 18:48 ` Isaku Yamahata
2024-01-22 23:52 ` [PATCH v18 008/121] KVM: TDX: Initialize the TDX module when loading the KVM intel kernel module isaku.yamahata
2024-02-01 8:55 ` Xiaoyao Li
2024-01-22 23:52 ` [PATCH v18 009/121] KVM: TDX: Add placeholders for TDX VM/vcpu structure isaku.yamahata
2024-02-01 9:39 ` Xiaoyao Li
2024-01-22 23:52 ` [PATCH v18 010/121] KVM: TDX: Make TDX VM type supported isaku.yamahata
2024-01-22 23:52 ` [PATCH v18 011/121] [MARKER] The start of TDX KVM patch series: TDX architectural definitions isaku.yamahata
2024-01-22 23:52 ` [PATCH v18 012/121] KVM: TDX: Define " isaku.yamahata
2024-01-31 6:51 ` Yuan Yao
2024-02-02 1:02 ` Xiaoyao Li
2024-01-22 23:52 ` [PATCH v18 013/121] KVM: TDX: Add TDX "architectural" error codes isaku.yamahata
2024-01-31 7:22 ` Yuan Yao
2024-02-02 8:04 ` Xiaoyao Li
2024-01-22 23:52 ` [PATCH v18 014/121] KVM: TDX: Add C wrapper functions for SEAMCALLs to the TDX module isaku.yamahata
2024-01-31 8:12 ` Yuan Yao
2024-01-22 23:52 ` [PATCH v18 015/121] KVM: TDX: Retry SEAMCALL on the lack of entropy error isaku.yamahata
2024-01-23 8:32 ` Binbin Wu
2024-02-12 10:05 ` Paolo Bonzini
2024-01-22 23:52 ` [PATCH v18 016/121] KVM: TDX: Add helper functions to print TDX SEAMCALL error isaku.yamahata
2024-02-01 1:47 ` Yuan Yao
2024-01-22 23:52 ` [PATCH v18 017/121] [MARKER] The start of TDX KVM patch series: TD VM creation/destruction isaku.yamahata
2024-01-22 23:52 ` [PATCH v18 018/121] KVM: TDX: Add helper functions to allocate/free TDX private host key id isaku.yamahata
2024-01-23 9:26 ` Binbin Wu
2024-01-22 23:52 ` [PATCH v18 019/121] KVM: TDX: Add helper function to read TDX metadata in array isaku.yamahata
2024-01-22 23:52 ` [PATCH v18 020/121] x86/virt/tdx: Get system-wide info about TDX module on initialization isaku.yamahata
2024-02-01 5:32 ` Yuan Yao
2024-01-22 23:52 ` [PATCH v18 021/121] KVM: TDX: Add place holder for TDX VM specific mem_enc_op ioctl isaku.yamahata
2024-01-22 23:52 ` [PATCH v18 022/121] KVM: TDX: x86: Add ioctl to get TDX systemwide parameters isaku.yamahata
2024-01-22 23:52 ` [PATCH v18 023/121] KVM: TDX: Make KVM_CAP_MAX_VCPUS backend specific isaku.yamahata
2024-01-24 1:17 ` Binbin Wu
2024-02-01 6:16 ` Yuan Yao
2024-02-04 2:00 ` Binbin Wu
2024-02-26 18:52 ` Isaku Yamahata
2024-03-14 10:39 ` Chao Gao
2024-01-22 23:53 ` [PATCH v18 024/121] KVM: TDX: create/destroy VM structure isaku.yamahata
2024-02-01 8:32 ` Yuan Yao
2024-02-26 18:56 ` Isaku Yamahata
2024-01-22 23:53 ` [PATCH v18 025/121] KVM: TDX: initialize VM with TDX specific parameters isaku.yamahata
2024-01-25 2:19 ` Binbin Wu
2024-02-26 18:57 ` Isaku Yamahata
2024-01-22 23:53 ` [PATCH v18 026/121] KVM: TDX: Make pmu_intel.c ignore guest TD case isaku.yamahata
2024-01-22 23:53 ` [PATCH v18 027/121] KVM: TDX: Refuse to unplug the last cpu on the package isaku.yamahata
2024-01-22 23:53 ` [PATCH v18 028/121] [MARKER] The start of TDX KVM patch series: TD vcpu creation/destruction isaku.yamahata
2024-01-22 23:53 ` [PATCH v18 029/121] KVM: TDX: create/free TDX vcpu structure isaku.yamahata
2024-01-25 3:06 ` Binbin Wu
2024-02-26 18:58 ` Isaku Yamahata
2024-02-20 2:53 ` Yuan Yao
2024-01-22 23:53 ` [PATCH v18 030/121] KVM: TDX: Do TDX specific vcpu initialization isaku.yamahata
2024-01-25 7:56 ` Binbin Wu
2024-02-26 19:01 ` Isaku Yamahata
2024-01-22 23:53 ` [PATCH v18 031/121] [MARKER] The start of TDX KVM patch series: KVM MMU GPA shared bits isaku.yamahata
2024-01-22 23:53 ` [PATCH v18 032/121] KVM: x86/mmu: introduce config for PRIVATE KVM MMU isaku.yamahata
2024-02-12 14:18 ` Paolo Bonzini
2024-02-13 2:57 ` Sean Christopherson
2024-02-13 16:47 ` Paolo Bonzini
2024-02-26 17:48 ` Isaku Yamahata
2024-01-22 23:53 ` [PATCH v18 033/121] KVM: x86/mmu: Add address conversion functions for TDX shared bit of GPA isaku.yamahata
2024-01-22 23:53 ` [PATCH v18 034/121] [MARKER] The start of TDX KVM patch series: KVM TDP refactoring for TDX isaku.yamahata
2024-01-22 23:53 ` [PATCH v18 035/121] KVM: Allow page-sized MMU caches to be initialized with custom 64-bit values isaku.yamahata
2024-01-22 23:53 ` [PATCH v18 036/121] KVM: x86/mmu: Replace hardcoded value 0 for the initial value for SPTE isaku.yamahata
2024-01-22 23:53 ` [PATCH v18 037/121] KVM: x86/mmu: Allow non-zero value for non-present SPTE and removed SPTE isaku.yamahata
2024-01-28 13:29 ` Binbin Wu
2024-01-22 23:53 ` [PATCH v18 038/121] KVM: x86/mmu: Add Suppress VE bit to shadow_mmio_mask/shadow_present_mask isaku.yamahata
2024-01-22 23:53 ` [PATCH v18 039/121] KVM: x86/mmu: Track shadow MMIO value on a per-VM basis isaku.yamahata
2024-01-28 13:50 ` Binbin Wu
2024-02-26 19:03 ` Isaku Yamahata
2024-01-22 23:53 ` [PATCH v18 040/121] KVM: x86/mmu: Disallow fast page fault on private GPA isaku.yamahata
2024-01-28 13:56 ` Binbin Wu
2024-02-12 17:01 ` Paolo Bonzini
2024-02-26 17:55 ` Isaku Yamahata
2024-02-26 18:02 ` Isaku Yamahata
2024-01-22 23:53 ` [PATCH v18 041/121] KVM: x86/mmu: Allow per-VM override of the TDP max page level isaku.yamahata
2024-01-28 14:12 ` Binbin Wu
2024-02-12 10:34 ` Paolo Bonzini
2024-01-22 23:53 ` [PATCH v18 042/121] KVM: VMX: Introduce test mode related to EPT violation VE isaku.yamahata
2024-01-22 23:53 ` [PATCH v18 043/121] [MARKER] The start of TDX KVM patch series: KVM TDP MMU hooks isaku.yamahata
2024-01-22 23:53 ` [PATCH v18 044/121] KVM: x86/mmu: Assume guest MMIOs are shared isaku.yamahata
2024-02-12 10:29 ` Paolo Bonzini
2024-02-26 18:06 ` Isaku Yamahata
2024-02-26 18:39 ` Sean Christopherson
2024-01-22 23:53 ` [PATCH v18 045/121] KVM: x86/tdp_mmu: Init role member of struct kvm_mmu_page at allocation isaku.yamahata
2024-01-22 23:53 ` [PATCH v18 046/121] KVM: x86/mmu: Add a new is_private member for union kvm_mmu_page_role isaku.yamahata
2024-01-29 1:50 ` Binbin Wu
2024-01-22 23:53 ` [PATCH v18 047/121] KVM: x86/mmu: Add a private pointer to struct kvm_mmu_page isaku.yamahata
2024-01-29 4:29 ` Binbin Wu
2024-01-22 23:53 ` [PATCH v18 048/121] KVM: x86/tdp_mmu: Don't zap private pages for unsupported cases isaku.yamahata
2024-01-30 6:09 ` Binbin Wu
2024-01-22 23:53 ` [PATCH v18 049/121] KVM: x86/tdp_mmu: Apply mmu notifier callback to only shared GPA isaku.yamahata
2024-01-30 7:19 ` Binbin Wu
2024-01-22 23:53 ` [PATCH v18 050/121] KVM: x86/tdp_mmu: Sprinkle __must_check isaku.yamahata
2024-01-30 8:14 ` Binbin Wu
2024-01-22 23:53 ` [PATCH v18 051/121] KVM: x86/tdp_mmu: Support TDX private mapping for TDP MMU isaku.yamahata
2024-01-22 23:53 ` [PATCH v18 052/121] [MARKER] The start of TDX KVM patch series: TDX EPT violation isaku.yamahata
2024-01-22 23:53 ` [PATCH v18 053/121] KVM: x86/mmu: TDX: Do not enable page track for TD guest isaku.yamahata
2024-02-04 8:46 ` Binbin Wu
2024-01-22 23:53 ` [PATCH v18 054/121] KVM: VMX: Split out guts of EPT violation to common/exposed function isaku.yamahata
2024-02-04 8:53 ` Binbin Wu
2024-01-22 23:53 ` [PATCH v18 055/121] KVM: VMX: Move setting of EPT MMU masks to common VT-x code isaku.yamahata
2024-02-04 9:21 ` Binbin Wu
2024-01-22 23:53 ` [PATCH v18 056/121] KVM: TDX: Add accessors VMX VMCS helpers isaku.yamahata
2024-02-05 1:53 ` Binbin Wu
2024-01-22 23:53 ` [PATCH v18 057/121] KVM: TDX: Add load_mmu_pgd method for TDX isaku.yamahata
2024-02-05 2:23 ` Binbin Wu
2024-02-26 19:15 ` Isaku Yamahata
2024-01-22 23:53 ` [PATCH v18 058/121] KVM: TDX: Retry seamcall when TDX_OPERAND_BUSY with operand SEPT isaku.yamahata
2024-02-05 3:14 ` Binbin Wu
2024-01-22 23:53 ` [PATCH v18 059/121] KVM: TDX: Require TDP MMU and mmio caching for TDX isaku.yamahata
2024-01-22 23:53 ` [PATCH v18 060/121] KVM: TDX: TDP MMU TDX support isaku.yamahata
2024-01-23 8:43 ` Chenyi Qiang
2024-01-30 15:31 ` Binbin Wu
2024-02-26 19:21 ` Isaku Yamahata
2024-01-22 23:53 ` [PATCH v18 061/121] KVM: TDX: MTRR: implement get_mt_mask() for TDX isaku.yamahata
2024-02-19 5:20 ` Binbin Wu
2024-02-26 19:22 ` Isaku Yamahata
2024-01-22 23:53 ` [PATCH v18 062/121] [MARKER] The start of TDX KVM patch series: TD finalization isaku.yamahata
2024-01-22 23:53 ` [PATCH v18 063/121] KVM: x86/mmu: Introduce kvm_mmu_map_tdp_page() for use by TDX isaku.yamahata
2024-02-06 19:26 ` Sagi Shahar
2024-01-22 23:53 ` [PATCH v18 064/121] KVM: TDX: Create initial guest memory isaku.yamahata
2024-02-01 0:20 ` Sean Christopherson
2024-02-01 23:06 ` David Matlack
2024-02-26 18:07 ` Isaku Yamahata
2024-02-26 18:50 ` Sean Christopherson
2024-02-27 14:12 ` Isaku Yamahata
2024-02-27 17:30 ` Sean Christopherson
2024-03-08 1:07 ` Isaku Yamahata
2024-02-19 8:54 ` Binbin Wu
2024-01-22 23:53 ` [PATCH v18 065/121] KVM: TDX: Finalize VM initialization isaku.yamahata
2024-01-22 23:53 ` [PATCH v18 066/121] [MARKER] The start of TDX KVM patch series: TD vcpu enter/exit isaku.yamahata
2024-01-22 23:53 ` [PATCH v18 067/121] KVM: TDX: Implement TDX vcpu enter/exit path isaku.yamahata
2024-02-20 7:27 ` Binbin Wu
2024-01-22 23:53 ` [PATCH v18 068/121] KVM: TDX: vcpu_run: save/restore host state(host kernel gs) isaku.yamahata
2024-01-22 23:53 ` [PATCH v18 069/121] KVM: TDX: restore host xsave state when exit from the guest TD isaku.yamahata
2024-02-20 8:56 ` Binbin Wu
2024-01-22 23:53 ` [PATCH v18 070/121] KVM: x86: Allow to update cached values in kvm_user_return_msrs w/o wrmsr isaku.yamahata
2024-01-22 23:53 ` [PATCH v18 071/121] KVM: TDX: restore user ret MSRs isaku.yamahata
2024-02-20 9:14 ` Binbin Wu
2024-02-26 19:24 ` Isaku Yamahata
2024-01-22 23:53 ` [PATCH v18 072/121] KVM: TDX: Add TSX_CTRL msr into uret_msrs list isaku.yamahata
2024-02-21 6:59 ` Binbin Wu
2024-01-22 23:53 ` [PATCH v18 073/121] [MARKER] The start of TDX KVM patch series: TD vcpu exits/interrupts/hypercalls isaku.yamahata
2024-01-22 23:53 ` [PATCH v18 074/121] KVM: TDX: complete interrupts after tdexit isaku.yamahata
2024-02-22 14:37 ` Binbin Wu
2024-01-22 23:53 ` [PATCH v18 075/121] KVM: TDX: restore debug store when TD exit isaku.yamahata
2024-01-22 23:53 ` [PATCH v18 076/121] KVM: TDX: handle vcpu migration over logical processor isaku.yamahata
2024-01-22 23:53 ` [PATCH v18 077/121] KVM: x86: Add a switch_db_regs flag to handle TDX's auto-switched behavior isaku.yamahata
2024-02-26 1:27 ` Binbin Wu
2024-01-22 23:53 ` [PATCH v18 078/121] KVM: TDX: Add support for find pending IRQ in a protected local APIC isaku.yamahata
2024-01-22 23:53 ` [PATCH v18 079/121] KVM: x86: Assume timer IRQ was injected if APIC state is proteced isaku.yamahata
2024-01-22 23:53 ` [PATCH v18 080/121] KVM: TDX: remove use of struct vcpu_vmx from posted_interrupt.c isaku.yamahata
2024-01-22 23:53 ` [PATCH v18 081/121] KVM: TDX: Implement interrupt injection isaku.yamahata
2024-01-22 23:53 ` [PATCH v18 082/121] KVM: TDX: Implements vcpu request_immediate_exit isaku.yamahata
2024-01-22 23:53 ` [PATCH v18 083/121] KVM: TDX: Implement methods to inject NMI isaku.yamahata
2024-01-22 23:54 ` [PATCH v18 084/121] KVM: VMX: Modify NMI and INTR handlers to take intr_info as function argument isaku.yamahata
2024-01-22 23:54 ` [PATCH v18 085/121] KVM: VMX: Move NMI/exception handler to common helper isaku.yamahata
2024-01-22 23:54 ` [PATCH v18 086/121] KVM: x86: Split core of hypercall emulation to helper function isaku.yamahata
2024-01-22 23:54 ` [PATCH v18 087/121] KVM: TDX: Add a place holder to handle TDX VM exit isaku.yamahata
2024-01-22 23:54 ` [PATCH v18 088/121] KVM: TDX: Handle vmentry failure for INTEL TD guest isaku.yamahata
2024-01-22 23:54 ` [PATCH v18 089/121] KVM: TDX: handle EXIT_REASON_OTHER_SMI isaku.yamahata
2024-01-22 23:54 ` [PATCH v18 090/121] KVM: TDX: handle ept violation/misconfig exit isaku.yamahata
2024-01-22 23:54 ` [PATCH v18 091/121] KVM: TDX: handle EXCEPTION_NMI and EXTERNAL_INTERRUPT isaku.yamahata
2024-01-22 23:54 ` [PATCH v18 092/121] KVM: TDX: Handle EXIT_REASON_OTHER_SMI with MSMI isaku.yamahata
2024-01-22 23:54 ` [PATCH v18 093/121] KVM: TDX: Add a place holder for handler of TDX hypercalls (TDG.VP.VMCALL) isaku.yamahata
2024-01-22 23:54 ` [PATCH v18 094/121] KVM: TDX: handle KVM hypercall with TDG.VP.VMCALL isaku.yamahata
2024-01-22 23:54 ` [PATCH v18 095/121] KVM: TDX: Add KVM Exit for TDX TDG.VP.VMCALL isaku.yamahata
2024-01-22 23:54 ` [PATCH v18 096/121] KVM: TDX: Handle TDX PV CPUID hypercall isaku.yamahata
2024-01-22 23:54 ` [PATCH v18 097/121] KVM: TDX: Handle TDX PV HLT hypercall isaku.yamahata
2024-01-22 23:54 ` [PATCH v18 098/121] KVM: TDX: Handle TDX PV port io hypercall isaku.yamahata
2024-01-22 23:54 ` [PATCH v18 099/121] KVM: TDX: Handle TDX PV MMIO hypercall isaku.yamahata
2024-01-22 23:54 ` [PATCH v18 100/121] KVM: TDX: Implement callbacks for MSR operations for TDX isaku.yamahata
2024-01-22 23:54 ` [PATCH v18 101/121] KVM: TDX: Handle TDX PV rdmsr/wrmsr hypercall isaku.yamahata
2024-01-22 23:54 ` [PATCH v18 102/121] KVM: TDX: Handle MSR MTRRCap and MTRRDefType access isaku.yamahata
2024-01-22 23:54 ` [PATCH v18 103/121] KVM: TDX: Handle MSR IA32_FEAT_CTL MSR and IA32_MCG_EXT_CTL isaku.yamahata
2024-01-22 23:54 ` [PATCH v18 104/121] KVM: TDX: Handle TDG.VP.VMCALL<GetTdVmCallInfo> hypercall isaku.yamahata
2024-01-22 23:54 ` [PATCH v18 105/121] KVM: TDX: Silently discard SMI request isaku.yamahata
2024-01-22 23:54 ` [PATCH v18 106/121] KVM: TDX: Silently ignore INIT/SIPI isaku.yamahata
2024-01-22 23:54 ` [PATCH v18 107/121] KVM: TDX: Add methods to ignore accesses to CPU state isaku.yamahata
2024-01-22 23:54 ` [PATCH v18 108/121] KVM: TDX: Add methods to ignore guest instruction emulation isaku.yamahata
2024-01-22 23:54 ` [PATCH v18 109/121] KVM: TDX: Add a method to ignore dirty logging isaku.yamahata
2024-01-22 23:54 ` [PATCH v18 110/121] KVM: TDX: Add methods to ignore VMX preemption timer isaku.yamahata
2024-01-22 23:54 ` [PATCH v18 111/121] KVM: TDX: Add methods to ignore accesses to TSC isaku.yamahata
2024-01-22 23:54 ` [PATCH v18 112/121] KVM: TDX: Ignore setting up mce isaku.yamahata
2024-01-22 23:54 ` [PATCH v18 113/121] KVM: TDX: Add a method to ignore for TDX to ignore hypercall patch isaku.yamahata
2024-01-22 23:54 ` [PATCH v18 114/121] KVM: TDX: Add methods to ignore virtual apic related operation isaku.yamahata
2024-01-22 23:54 ` [PATCH v18 115/121] KVM: TDX: Inhibit APICv for TDX guest isaku.yamahata
2024-01-22 23:54 ` isaku.yamahata [this message]
2024-01-22 23:54 ` [PATCH v18 117/121] KVM: x86: design documentation on TDX support of x86 KVM TDP MMU isaku.yamahata
2024-01-22 23:54 ` [PATCH v18 118/121] KVM: TDX: Add hint TDX ioctl to release Secure-EPT isaku.yamahata
2024-01-22 23:54 ` [PATCH v18 119/121] RFC: KVM: x86: Add x86 callback to check cpuid isaku.yamahata
2024-01-22 23:54 ` [PATCH v18 120/121] RFC: KVM: x86, TDX: Add check for KVM_SET_CPUID2 isaku.yamahata
2024-01-22 23:54 ` [PATCH v18 121/121] [MARKER] the end of (the first phase of) TDX KVM patch series isaku.yamahata
2024-01-29 6:21 ` [PATCH v18 000/121] KVM TDX basic feature support Yuan Yao
Reply instructions:
You may reply publicly to this message via plain-text email
using any one of the following methods:
* Save the following mbox file, import it into your mail client,
and reply-to-all from there: mbox
Avoid top-posting and favor interleaved quoting:
https://en.wikipedia.org/wiki/Posting_style#Interleaved_style
* Reply using the --to, --cc, and --in-reply-to
switches of git-send-email(1):
git send-email \
--in-reply-to=2f32572b915922602b52c874d0ad9c5aba7a2c16.1705965635.git.isaku.yamahata@intel.com \
--to=isaku.yamahata@intel.com \
--cc=chen.bo@intel.com \
--cc=erdemaktas@google.com \
--cc=hang.yuan@intel.com \
--cc=isaku.yamahata@gmail.com \
--cc=kai.huang@intel.com \
--cc=kvm@vger.kernel.org \
--cc=linux-kernel@vger.kernel.org \
--cc=pbonzini@redhat.com \
--cc=sagis@google.com \
--cc=seanjc@google.com \
--cc=tina.zhang@intel.com \
/path/to/YOUR_REPLY
https://kernel.org/pub/software/scm/git/docs/git-send-email.html
* If your mail client supports setting the In-Reply-To header
via mailto: links, try the mailto: link
Be sure your reply has a Subject: header at the top and a blank line
before the message body.
This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox;
as well as URLs for NNTP newsgroup(s).