• Paolo Bonzini's avatar
    Merge branch 'kvm-6.11-sev-snp' into HEAD · ab978c62
    Paolo Bonzini authored
    Pull base x86 KVM support for running SEV-SNP guests from Michael Roth:
    
    * add some basic infrastructure and introduces a new KVM_X86_SNP_VM
      vm_type to handle differences versus the existing KVM_X86_SEV_VM and
      KVM_X86_SEV_ES_VM types.
    
    * implement the KVM API to handle the creation of a cryptographic
      launch context, encrypt/measure the initial image into guest memory,
      and finalize it before launching it.
    
    * implement handling for various guest-generated events such as page
      state changes, onlining of additional vCPUs, etc.
    
    * implement the gmem/mmu hooks needed to prepare gmem-allocated pages
      before mapping them into guest private memory ranges as well as
      cleaning them up prior to returning them to the host for use as
      normal memory. Because those cleanup hooks supplant certain
      activities like issuing WBINVDs during KVM MMU invalidations, avoid
      duplicating that work to avoid unecessary overhead.
    
    This merge leaves out support support for attestation guest requests
    and for loading the signing keys to be used for attestation requests.
    ab978c62
x86.c 374 KB