• Linus Torvalds's avatar
    Merge tag 'x86_sev_for_v6.9_rc1' of git://git.kernel.org/pub/scm/linux/kernel/git/tip/tip · 38b334fc
    Linus Torvalds authored
    Pull x86 SEV updates from Borislav Petkov:
    
     - Add the x86 part of the SEV-SNP host support.
    
       This will allow the kernel to be used as a KVM hypervisor capable of
       running SNP (Secure Nested Paging) guests. Roughly speaking, SEV-SNP
       is the ultimate goal of the AMD confidential computing side,
       providing the most comprehensive confidential computing environment
       up to date.
    
       This is the x86 part and there is a KVM part which did not get ready
       in time for the merge window so latter will be forthcoming in the
       next cycle.
    
     - Rework the early code's position-dependent SEV variable references in
       order to allow building the kernel with clang and -fPIE/-fPIC and
       -mcmodel=kernel
    
     - The usual set of fixes, cleanups and improvements all over the place
    
    * tag 'x86_sev_for_v6.9_rc1' of git://git.kernel.org/pub/scm/linux/kernel/git/tip/tip: (36 commits)
      x86/sev: Disable KMSAN for memory encryption TUs
      x86/sev: Dump SEV_STATUS
      crypto: ccp - Have it depend on AMD_IOMMU
      iommu/amd: Fix failure return from snp_lookup_rmpentry()
      x86/sev: Fix position dependent variable references in startup code
      crypto: ccp: Make snp_range_list static
      x86/Kconfig: Remove CONFIG_AMD_MEM_ENCRYPT_ACTIVE_BY_DEFAULT
      Documentation: virt: Fix up pre-formatted text block for SEV ioctls
      crypto: ccp: Add the SNP_SET_CONFIG command
      crypto: ccp: Add the SNP_COMMIT command
      crypto: ccp: Add the SNP_PLATFORM_STATUS command
      x86/cpufeatures: Enable/unmask SEV-SNP CPU feature
      KVM: SEV: Make AVIC backing, VMSA and VMCB memory allocation SNP safe
      crypto: ccp: Add panic notifier for SEV/SNP firmware shutdown on kdump
      iommu/amd: Clean up RMP entries for IOMMU pages during SNP shutdown
      crypto: ccp: Handle legacy SEV commands when SNP is enabled
      crypto: ccp: Handle non-volatile INIT_EX data when SNP is enabled
      crypto: ccp: Handle the legacy TMR allocation when SNP is enabled
      x86/sev: Introduce an SNP leaked pages list
      crypto: ccp: Provide an API to issue SEV and SNP commands
      ...
    38b334fc
amd.c 31.2 KB