From: Isaku Yamahata <isaku.yamahata@intel.com> To: qemu-devel@nongnu.org, pbonzini@redhat.com, alistair@alistair23.me, ehabkost@redhat.com, marcel.apfelbaum@gmail.com, mst@redhat.com, cohuck@redhat.com, mtosatti@redhat.com, xiaoyao.li@intel.com, seanjc@google.com Cc: kvm@vger.kernel.org, isaku.yamahata@gmail.com, isaku.yamahata@intel.com Subject: [RFC PATCH 00/23] [RFC PATCH 00/24] TDX support Date: Mon, 15 Feb 2021 18:12:56 -0800 [thread overview] Message-ID: <cover.1613188118.git.isaku.yamahata@intel.com> (raw) This patch series is to enable TDX support. This needs corresponding KVM patch for TDX[] and more patches are needed that addresses generic corner cases, e.g. ACPI related stuff, are needed. So This patch series is RFC. More emulated devices and their behavior needs to be adjusted as some operations are disallowed. Patch series is organized as follows 1- 5 code refactoring and simple hooks that will be used later 6- 9 introduce kvm type and tdx type. disallow non-usable operations 10-15 wire up necessary TDX kvm ioctl to initialize TD guest 16-21 load TDVF and setup necessary info for TDVF 22-23 force x2apic and disable PIC Isaku Yamahata (12): kvm: Switch KVM_CAP_READONLY_MEM to a per-VM ioctl() KVM: i386: use VM capability check for KVM_CAP_X86_SMM vl: Introduce machine_init_done_late notifier i386/kvm: Skip KVM_X86_SETUP_MCE for TDX guests target/i386: kvm: don't synchronize guest tsc for TD guest i386/tdx: Frame in the call for KVM_TDX_INIT_VCPU hw/i386: Add definitions from UEFI spec for volumes, resources, etc... i386/tdx: Add definitions for TDVF metadata i386/tdx: Parse tdvf metadata and store the result into TdxGuest i386/tdx: Create the TD HOB list upon machine init done i386/tdx: Add TDVF memory via INIT_MEM_REGION i386/tdx: Use KVM_TDX_INIT_VCPU to pass HOB to TDVF Sean Christopherson (7): target/i386: Expose x86_cpu_get_supported_feature_word() for TDX i386/kvm: Move architectural CPUID leaf generation to separarte helper i386/kvm: Squash getting/putting guest state for TDX VMs i386/tdx: Frame in tdx_get_supported_cpuid with KVM_TDX_CAPABILITIES i386/tdx: Add hook to require generic device loader i386/tdx: Force x2apic mode and routing for TDs target/i386: Add machine option to disable PIC/8259 Xiaoyao Li (4): hw/i386: Introduce kvm-type for TDX guest linux-headers: Update headers to pull in TDX API changes hw/i386: Initialize TDX via KVM ioctl() when kvm_type is TDX target/i386/tdx: Finalize the TD's measurement when machine is done accel/kvm/kvm-all.c | 4 +- default-configs/devices/i386-softmmu.mak | 1 + hw/core/generic-loader.c | 5 + hw/core/machine.c | 26 ++ hw/core/meson.build | 3 + hw/core/tdvf-stub.c | 6 + hw/i386/Kconfig | 5 + hw/i386/meson.build | 1 + hw/i386/pc.c | 18 + hw/i386/pc_piix.c | 4 +- hw/i386/pc_q35.c | 4 +- hw/i386/pc_sysfw.c | 6 + hw/i386/tdvf-hob.c | 226 +++++++++++ hw/i386/tdvf-hob.h | 25 ++ hw/i386/tdvf.c | 305 ++++++++++++++ hw/i386/uefi.h | 496 +++++++++++++++++++++++ hw/i386/x86.c | 46 +++ hw/intc/apic_common.c | 12 + include/hw/i386/apic.h | 1 + include/hw/i386/apic_internal.h | 1 + include/hw/i386/pc.h | 2 + include/hw/i386/tdvf.h | 55 +++ include/hw/i386/x86.h | 1 + include/sysemu/sysemu.h | 2 + include/sysemu/tdvf.h | 6 + include/sysemu/tdx.h | 15 + linux-headers/asm-x86/kvm.h | 55 +++ linux-headers/linux/kvm.h | 2 + target/i386/cpu.c | 4 +- target/i386/cpu.h | 3 + target/i386/kvm/kvm-stub.c | 5 + target/i386/kvm/kvm.c | 227 +++++++---- target/i386/kvm/kvm_i386.h | 5 + target/i386/kvm/meson.build | 1 + target/i386/kvm/tdx-stub.c | 23 ++ target/i386/kvm/tdx.c | 329 +++++++++++++++ target/i386/kvm/tdx.h | 55 +++ 37 files changed, 1893 insertions(+), 92 deletions(-) create mode 100644 hw/core/tdvf-stub.c create mode 100644 hw/i386/tdvf-hob.c create mode 100644 hw/i386/tdvf-hob.h create mode 100644 hw/i386/tdvf.c create mode 100644 hw/i386/uefi.h create mode 100644 include/hw/i386/tdvf.h create mode 100644 include/sysemu/tdvf.h create mode 100644 include/sysemu/tdx.h create mode 100644 target/i386/kvm/tdx-stub.c create mode 100644 target/i386/kvm/tdx.c create mode 100644 target/i386/kvm/tdx.h -- 2.17.1
WARNING: multiple messages have this Message-ID (diff)
From: Isaku Yamahata <isaku.yamahata@intel.com> To: qemu-devel@nongnu.org, pbonzini@redhat.com, alistair@alistair23.me, ehabkost@redhat.com, marcel.apfelbaum@gmail.com, mst@redhat.com, cohuck@redhat.com, mtosatti@redhat.com, xiaoyao.li@intel.com, seanjc@google.com Cc: isaku.yamahata@intel.com, isaku.yamahata@gmail.com, kvm@vger.kernel.org Subject: [RFC PATCH 00/23] [RFC PATCH 00/24] TDX support Date: Mon, 15 Feb 2021 18:12:56 -0800 [thread overview] Message-ID: <cover.1613188118.git.isaku.yamahata@intel.com> (raw) This patch series is to enable TDX support. This needs corresponding KVM patch for TDX[] and more patches are needed that addresses generic corner cases, e.g. ACPI related stuff, are needed. So This patch series is RFC. More emulated devices and their behavior needs to be adjusted as some operations are disallowed. Patch series is organized as follows 1- 5 code refactoring and simple hooks that will be used later 6- 9 introduce kvm type and tdx type. disallow non-usable operations 10-15 wire up necessary TDX kvm ioctl to initialize TD guest 16-21 load TDVF and setup necessary info for TDVF 22-23 force x2apic and disable PIC Isaku Yamahata (12): kvm: Switch KVM_CAP_READONLY_MEM to a per-VM ioctl() KVM: i386: use VM capability check for KVM_CAP_X86_SMM vl: Introduce machine_init_done_late notifier i386/kvm: Skip KVM_X86_SETUP_MCE for TDX guests target/i386: kvm: don't synchronize guest tsc for TD guest i386/tdx: Frame in the call for KVM_TDX_INIT_VCPU hw/i386: Add definitions from UEFI spec for volumes, resources, etc... i386/tdx: Add definitions for TDVF metadata i386/tdx: Parse tdvf metadata and store the result into TdxGuest i386/tdx: Create the TD HOB list upon machine init done i386/tdx: Add TDVF memory via INIT_MEM_REGION i386/tdx: Use KVM_TDX_INIT_VCPU to pass HOB to TDVF Sean Christopherson (7): target/i386: Expose x86_cpu_get_supported_feature_word() for TDX i386/kvm: Move architectural CPUID leaf generation to separarte helper i386/kvm: Squash getting/putting guest state for TDX VMs i386/tdx: Frame in tdx_get_supported_cpuid with KVM_TDX_CAPABILITIES i386/tdx: Add hook to require generic device loader i386/tdx: Force x2apic mode and routing for TDs target/i386: Add machine option to disable PIC/8259 Xiaoyao Li (4): hw/i386: Introduce kvm-type for TDX guest linux-headers: Update headers to pull in TDX API changes hw/i386: Initialize TDX via KVM ioctl() when kvm_type is TDX target/i386/tdx: Finalize the TD's measurement when machine is done accel/kvm/kvm-all.c | 4 +- default-configs/devices/i386-softmmu.mak | 1 + hw/core/generic-loader.c | 5 + hw/core/machine.c | 26 ++ hw/core/meson.build | 3 + hw/core/tdvf-stub.c | 6 + hw/i386/Kconfig | 5 + hw/i386/meson.build | 1 + hw/i386/pc.c | 18 + hw/i386/pc_piix.c | 4 +- hw/i386/pc_q35.c | 4 +- hw/i386/pc_sysfw.c | 6 + hw/i386/tdvf-hob.c | 226 +++++++++++ hw/i386/tdvf-hob.h | 25 ++ hw/i386/tdvf.c | 305 ++++++++++++++ hw/i386/uefi.h | 496 +++++++++++++++++++++++ hw/i386/x86.c | 46 +++ hw/intc/apic_common.c | 12 + include/hw/i386/apic.h | 1 + include/hw/i386/apic_internal.h | 1 + include/hw/i386/pc.h | 2 + include/hw/i386/tdvf.h | 55 +++ include/hw/i386/x86.h | 1 + include/sysemu/sysemu.h | 2 + include/sysemu/tdvf.h | 6 + include/sysemu/tdx.h | 15 + linux-headers/asm-x86/kvm.h | 55 +++ linux-headers/linux/kvm.h | 2 + target/i386/cpu.c | 4 +- target/i386/cpu.h | 3 + target/i386/kvm/kvm-stub.c | 5 + target/i386/kvm/kvm.c | 227 +++++++---- target/i386/kvm/kvm_i386.h | 5 + target/i386/kvm/meson.build | 1 + target/i386/kvm/tdx-stub.c | 23 ++ target/i386/kvm/tdx.c | 329 +++++++++++++++ target/i386/kvm/tdx.h | 55 +++ 37 files changed, 1893 insertions(+), 92 deletions(-) create mode 100644 hw/core/tdvf-stub.c create mode 100644 hw/i386/tdvf-hob.c create mode 100644 hw/i386/tdvf-hob.h create mode 100644 hw/i386/tdvf.c create mode 100644 hw/i386/uefi.h create mode 100644 include/hw/i386/tdvf.h create mode 100644 include/sysemu/tdvf.h create mode 100644 include/sysemu/tdx.h create mode 100644 target/i386/kvm/tdx-stub.c create mode 100644 target/i386/kvm/tdx.c create mode 100644 target/i386/kvm/tdx.h -- 2.17.1
next reply other threads:[~2021-02-16 2:16 UTC|newest] Thread overview: 54+ messages / expand[flat|nested] mbox.gz Atom feed top 2021-02-16 2:12 Isaku Yamahata [this message] 2021-02-16 2:12 ` [RFC PATCH 00/23] [RFC PATCH 00/24] TDX support Isaku Yamahata 2021-02-16 2:12 ` [RFC PATCH 01/23] target/i386: Expose x86_cpu_get_supported_feature_word() for TDX Isaku Yamahata 2021-02-16 2:12 ` Isaku Yamahata 2021-02-16 7:53 ` Philippe Mathieu-Daudé 2021-02-16 7:53 ` Philippe Mathieu-Daudé 2021-02-16 2:12 ` [RFC PATCH 02/23] kvm: Switch KVM_CAP_READONLY_MEM to a per-VM ioctl() Isaku Yamahata 2021-02-16 2:12 ` Isaku Yamahata 2021-02-16 7:56 ` Philippe Mathieu-Daudé 2021-02-16 7:56 ` Philippe Mathieu-Daudé 2021-02-23 3:23 ` Isaku Yamahata 2021-02-23 3:23 ` Isaku Yamahata 2021-02-16 2:12 ` [RFC PATCH 03/23] KVM: i386: use VM capability check for KVM_CAP_X86_SMM Isaku Yamahata 2021-02-16 2:12 ` Isaku Yamahata 2021-02-16 2:13 ` [RFC PATCH 04/23] i386/kvm: Move architectural CPUID leaf generation to separarte helper Isaku Yamahata 2021-02-16 2:13 ` Isaku Yamahata 2021-02-16 2:13 ` [RFC PATCH 05/23] vl: Introduce machine_init_done_late notifier Isaku Yamahata 2021-02-16 2:13 ` Isaku Yamahata 2021-02-16 2:13 ` [RFC PATCH 06/23] hw/i386: Introduce kvm-type for TDX guest Isaku Yamahata 2021-02-16 2:13 ` Isaku Yamahata 2021-02-16 2:13 ` [RFC PATCH 07/23] i386/kvm: Squash getting/putting guest state for TDX VMs Isaku Yamahata 2021-02-16 2:13 ` Isaku Yamahata 2021-02-16 2:13 ` [RFC PATCH 08/23] i386/kvm: Skip KVM_X86_SETUP_MCE for TDX guests Isaku Yamahata 2021-02-16 2:13 ` Isaku Yamahata 2021-02-16 2:13 ` [RFC PATCH 09/23] target/i386: kvm: don't synchronize guest tsc for TD guest Isaku Yamahata 2021-02-16 2:13 ` Isaku Yamahata 2021-02-16 2:13 ` [RFC PATCH 10/23] linux-headers: Update headers to pull in TDX API changes Isaku Yamahata 2021-02-16 2:13 ` Isaku Yamahata 2021-02-16 2:13 ` [RFC PATCH 11/23] hw/i386: Initialize TDX via KVM ioctl() when kvm_type is TDX Isaku Yamahata 2021-02-16 2:13 ` Isaku Yamahata 2021-02-16 2:13 ` [RFC PATCH 12/23] target/i386/tdx: Finalize the TD's measurement when machine is done Isaku Yamahata 2021-02-16 2:13 ` Isaku Yamahata 2021-02-16 2:13 ` [RFC PATCH 13/23] i386/tdx: Frame in tdx_get_supported_cpuid with KVM_TDX_CAPABILITIES Isaku Yamahata 2021-02-16 2:13 ` Isaku Yamahata 2021-02-16 2:13 ` [RFC PATCH 14/23] i386/tdx: Frame in the call for KVM_TDX_INIT_VCPU Isaku Yamahata 2021-02-16 2:13 ` Isaku Yamahata 2021-02-16 2:13 ` [RFC PATCH 15/23] i386/tdx: Add hook to require generic device loader Isaku Yamahata 2021-02-16 2:13 ` Isaku Yamahata 2021-02-16 2:13 ` [RFC PATCH 16/23] hw/i386: Add definitions from UEFI spec for volumes, resources, etc Isaku Yamahata 2021-02-16 2:13 ` Isaku Yamahata 2021-02-16 2:13 ` [RFC PATCH 17/23] i386/tdx: Add definitions for TDVF metadata Isaku Yamahata 2021-02-16 2:13 ` Isaku Yamahata 2021-02-16 2:13 ` [RFC PATCH 18/23] i386/tdx: Parse tdvf metadata and store the result into TdxGuest Isaku Yamahata 2021-02-16 2:13 ` Isaku Yamahata 2021-02-16 2:13 ` [RFC PATCH 19/23] i386/tdx: Create the TD HOB list upon machine init done Isaku Yamahata 2021-02-16 2:13 ` Isaku Yamahata 2021-02-16 2:13 ` [RFC PATCH 20/23] i386/tdx: Add TDVF memory via INIT_MEM_REGION Isaku Yamahata 2021-02-16 2:13 ` Isaku Yamahata 2021-02-16 2:13 ` [RFC PATCH 21/23] i386/tdx: Use KVM_TDX_INIT_VCPU to pass HOB to TDVF Isaku Yamahata 2021-02-16 2:13 ` Isaku Yamahata 2021-02-16 2:13 ` [RFC PATCH 22/23] i386/tdx: Force x2apic mode and routing for TDs Isaku Yamahata 2021-02-16 2:13 ` Isaku Yamahata 2021-02-16 2:13 ` [RFC PATCH 23/23] target/i386: Add machine option to disable PIC/8259 Isaku Yamahata 2021-02-16 2:13 ` Isaku Yamahata
Reply instructions: You may reply publicly to this message via plain-text email using any one of the following methods: * Save the following mbox file, import it into your mail client, and reply-to-all from there: mbox Avoid top-posting and favor interleaved quoting: https://en.wikipedia.org/wiki/Posting_style#Interleaved_style * Reply using the --to, --cc, and --in-reply-to switches of git-send-email(1): git send-email \ --in-reply-to=cover.1613188118.git.isaku.yamahata@intel.com \ --to=isaku.yamahata@intel.com \ --cc=alistair@alistair23.me \ --cc=cohuck@redhat.com \ --cc=ehabkost@redhat.com \ --cc=isaku.yamahata@gmail.com \ --cc=kvm@vger.kernel.org \ --cc=marcel.apfelbaum@gmail.com \ --cc=mst@redhat.com \ --cc=mtosatti@redhat.com \ --cc=pbonzini@redhat.com \ --cc=qemu-devel@nongnu.org \ --cc=seanjc@google.com \ --cc=xiaoyao.li@intel.com \ /path/to/YOUR_REPLY https://kernel.org/pub/software/scm/git/docs/git-send-email.html * If your mail client supports setting the In-Reply-To header via mailto: links, try the mailto: linkBe sure your reply has a Subject: header at the top and a blank line before the message body.
This is an external index of several public inboxes, see mirroring instructions on how to clone and mirror all data and code used by this external index.