From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: X-Spam-Checker-Version: SpamAssassin 3.4.0 (2014-02-07) on aws-us-west-2-korg-lkml-1.web.codeaurora.org X-Spam-Level: X-Spam-Status: No, score=-16.0 required=3.0 tests=BAYES_00,DKIMWL_WL_HIGH, DKIM_SIGNED,DKIM_VALID,DKIM_VALID_AU,INCLUDES_CR_TRAILER,MAILING_LIST_MULTI, MENTIONS_GIT_HOSTING,SPF_HELO_NONE,SPF_PASS autolearn=unavailable autolearn_force=no version=3.4.0 Received: from mail.kernel.org (mail.kernel.org [198.145.29.99]) by smtp.lore.kernel.org (Postfix) with ESMTP id 53A7EC43460 for ; Wed, 31 Mar 2021 23:24:02 +0000 (UTC) Received: from vger.kernel.org (vger.kernel.org [23.128.96.18]) by mail.kernel.org (Postfix) with ESMTP id 19D8261059 for ; Wed, 31 Mar 2021 23:24:02 +0000 (UTC) Received: (majordomo@vger.kernel.org) by vger.kernel.org via listexpand id S232292AbhCaXXc (ORCPT ); Wed, 31 Mar 2021 19:23:32 -0400 Received: from mail.kernel.org ([198.145.29.99]:57586 "EHLO mail.kernel.org" rhost-flags-OK-OK-OK-OK) by vger.kernel.org with ESMTP id S229486AbhCaXXJ (ORCPT ); Wed, 31 Mar 2021 19:23:09 -0400 Received: by mail.kernel.org (Postfix) with ESMTPSA id AE02761057; Wed, 31 Mar 2021 23:23:08 +0000 (UTC) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=kernel.org; s=k20201202; t=1617232989; bh=7qKTBZ33hsy0BLYk+KPdaZQgCrEQ9vlK7Wd8SViwxuM=; h=Date:From:To:Cc:Subject:References:In-Reply-To:From; b=qdb3yZHk2W0dyxqN/4+bvUqhSr7elqo/zWtwqvOr4AVxTosVDl6gIFQDnf1rO1O4x emqTSt032zJmSMr24mtgtvF3dGqqdF/5VTLijI8ouoHy/RVNtob72pNvXsZ5sgFCtv tApUeQ4AoB+61iIQSMNwJNc44T0suz2jC4J6HUg/CFIW41jFAhR11f6ciYoGMKcdJ0 4YEHWHiKP6LrorJJv43/m6mPY6lVRq31lzhb8zP3dk4X71WiCh0U58ZT5Li6XoZnYw W0ZBY7xOiBVXwMC/mOB2HLr/dAqX53y8XZa8FPelA7K6YNOYcKEhSZp3nONbkFYICx qafoo+Wf2+/uQ== Date: Thu, 1 Apr 2021 02:23:06 +0300 From: Jarkko Sakkinen To: "Huang, Kai" Cc: "kvm@vger.kernel.org" , "x86@kernel.org" , "linux-sgx@vger.kernel.org" , "linux-kernel@vger.kernel.org" , "seanjc@google.com" , "luto@kernel.org" , "Hansen, Dave" , "Edgecombe, Rick P" , "Huang, Haitao" , "pbonzini@redhat.com" , "bp@alien8.de" , "tglx@linutronix.de" , "mingo@redhat.com" , "hpa@zytor.com" , "jethro@fortanix.com" , "b.thiel@posteo.de" , "jmattson@google.com" , "joro@8bytes.org" , "vkuznets@redhat.com" , "wanpengli@tencent.com" , "corbet@lwn.net" Subject: Re: [PATCH v3 00/25] KVM SGX virtualization support Message-ID: References: <490103d033674dbeb812def2def69543@intel.com> MIME-Version: 1.0 Content-Type: text/plain; charset=us-ascii Content-Disposition: inline In-Reply-To: <490103d033674dbeb812def2def69543@intel.com> Precedence: bulk List-ID: X-Mailing-List: linux-kernel@vger.kernel.org On Sun, Mar 28, 2021 at 09:01:38PM +0000, Huang, Kai wrote: > > On Fri, Mar 19, 2021 at 08:29:27PM +1300, Kai Huang wrote: > > > This series adds KVM SGX virtualization support. The first 14 patches > > > starting with x86/sgx or x86/cpu.. are necessary changes to x86 and > > > SGX core/driver to support KVM SGX virtualization, while the rest are patches > > to KVM subsystem. > > > > > > This series is based against latest tip/x86/sgx, which has Jarkko's > > > NUMA allocation support. > > > > > > You can also get the code from upstream branch of kvm-sgx repo on github: > > > > > > https://github.com/intel/kvm-sgx.git upstream > > > > > > It also requires Qemu changes to create VM with SGX support. You can > > > find Qemu repo here: > > > > > > https://github.com/intel/qemu-sgx.git upstream > > > > > > Please refer to README.md of above qemu-sgx repo for detail on how to > > > create guest with SGX support. At meantime, for your quick reference > > > you can use below command to create SGX guest: > > > > > > #qemu-system-x86_64 -smp 4 -m 2G -drive > > file=,if=virtio \ > > > -cpu host,+sgx_provisionkey \ > > > -sgx-epc id=epc1,memdev=mem1 \ > > > -object memory-backend-epc,id=mem1,size=64M,prealloc > > > > > > Please note that the SGX relevant part is: > > > > > > -cpu host,+sgx_provisionkey \ > > > -sgx-epc id=epc1,memdev=mem1 \ > > > -object memory-backend-epc,id=mem1,size=64M,prealloc > > > > > > And you can change other parameters of your qemu command based on your > > needs. > > > > Please also put tested-by from me to all patches (including pure KVM > > patches): > > > > Tested-by: Jarkko Sakkinen > > > > I did the basic test, i.e. run selftest in a VM. I think that is sufficient at this point. > > > > Thanks Jarkko for doing the test! Sure, have had it in my queue for some time :-) /Jarkko