4ae47fa7 - x86/virt: Move SEV-specific parsing into arch/x86/virt/svm

Mon, 14 Oct 2024 13:09:47 +0000

x86/virt: Move SEV-specific parsing into arch/x86/virt/svmMove SEV-specific kernel command line option parsing support fromarch/x86/coco/sev/core.c to arch/x86/virt/svm/cmdline.c so that bothhost and guest related SEV command line options can be supported.No functional changes intended.Signed-off-by: Pavan Kumar Paluri Signed-off-by: Borislav Petkov (AMD) Reviewed-by: Tom Lendacky Link: https://lore.kernel.org/r/20241014130948.1476946-2-papaluri@amd.com List of files: /linux-6.15/arch/x86/virt/svm/Makefile

216d106c - x86/sev: Add SEV-SNP host initialization support

Fri, 26 Jan 2024 04:11:04 +0000

x86/sev: Add SEV-SNP host initialization supportThe memory integrity guarantees of SEV-SNP are enforced through a newstructure called the Reverse Map Table (RMP). The RMP is a single datastructure shared across the system that contains one entry for every 4Kpage of DRAM that may be used by SEV-SNP VMs. The APM Volume 2 sectionon Secure Nested Paging (SEV-SNP) details a number of steps needed todetect/enable SEV-SNP and RMP table support on the host: - Detect SEV-SNP support based on CPUID bit - Initialize the RMP table memory reported by the RMP base/end MSR registers and configure IOMMU to be compatible with RMP access restrictions - Set the MtrrFixDramModEn bit in SYSCFG MSR - Set the SecureNestedPagingEn and VMPLEn bits in the SYSCFG MSR - Configure IOMMURMP table entry format is non-architectural and it can vary byprocessor. It is defined by the PPR document for each respective CPUfamily. Restrict SNP support to CPU models/families which are compatiblewith the current RMP table entry format to guard against any undefinedbehavior when running on other system types. Future models/support willhandle this through an architectural mechanism to allow for broadercompatibility.SNP host code depends on CONFIG_KVM_AMD_SEV config flag which may beenabled even when CONFIG_AMD_MEM_ENCRYPT isn't set, so update theSNP-specific IOMMU helpers used here to rely on CONFIG_KVM_AMD_SEVinstead of CONFIG_AMD_MEM_ENCRYPT.Signed-off-by: Brijesh Singh Co-developed-by: Ashish Kalra Signed-off-by: Ashish Kalra Co-developed-by: Tom Lendacky Signed-off-by: Tom Lendacky Co-developed-by: Borislav Petkov (AMD) Signed-off-by: Borislav Petkov (AMD) Co-developed-by: Michael Roth Signed-off-by: Michael Roth Link: https://lore.kernel.org/r/20240126041126.1927228-5-michael.roth@amd.com List of files: /linux-6.15/arch/x86/virt/svm/Makefile

Changes in Makefile

4ae47fa7 - x86/virt: Move SEV-specific parsing into arch/x86/virt/svm

216d106c - x86/sev: Add SEV-SNP host initialization support