target/i386/SEV: implement mask_cpuid_features
Drop features that are listed as "BitMask" in the PPR and currently not supported by AMD processors. The only ones that may become useful in the future are TSC deadline timer and x2APIC, everything else is not needed for SEV-SNP guests (e.g. VIRT_SSBD) or would require processor support (e.g. TSC_ADJUST). This allows running SEV-SNP guests with "-cpu host". Signed-off-by: Paolo Bonzini <pbonzini@redhat.com>
This commit is contained in:
parent
c28d8b097f
commit
188569c10d
@ -812,6 +812,8 @@ uint64_t x86_cpu_get_supported_feature_word(X86CPU *cpu, FeatureWord w);
|
||||
|
||||
/* Support RDFSBASE/RDGSBASE/WRFSBASE/WRGSBASE */
|
||||
#define CPUID_7_0_EBX_FSGSBASE (1U << 0)
|
||||
/* Support TSC adjust MSR */
|
||||
#define CPUID_7_0_EBX_TSC_ADJUST (1U << 1)
|
||||
/* Support SGX */
|
||||
#define CPUID_7_0_EBX_SGX (1U << 2)
|
||||
/* 1st Group of Advanced Bit Manipulation Extensions */
|
||||
@ -1002,6 +1004,8 @@ uint64_t x86_cpu_get_supported_feature_word(X86CPU *cpu, FeatureWord w);
|
||||
#define CPUID_8000_0008_EBX_STIBP_ALWAYS_ON (1U << 17)
|
||||
/* Speculative Store Bypass Disable */
|
||||
#define CPUID_8000_0008_EBX_AMD_SSBD (1U << 24)
|
||||
/* Paravirtualized Speculative Store Bypass Disable MSR */
|
||||
#define CPUID_8000_0008_EBX_VIRT_SSBD (1U << 25)
|
||||
/* Predictive Store Forwarding Disable */
|
||||
#define CPUID_8000_0008_EBX_AMD_PSFD (1U << 28)
|
||||
|
||||
|
@ -945,6 +945,38 @@ out:
|
||||
return ret;
|
||||
}
|
||||
|
||||
static uint32_t
|
||||
sev_snp_mask_cpuid_features(X86ConfidentialGuest *cg, uint32_t feature, uint32_t index,
|
||||
int reg, uint32_t value)
|
||||
{
|
||||
switch (feature) {
|
||||
case 1:
|
||||
if (reg == R_ECX) {
|
||||
return value & ~CPUID_EXT_TSC_DEADLINE_TIMER;
|
||||
}
|
||||
break;
|
||||
case 7:
|
||||
if (index == 0 && reg == R_EBX) {
|
||||
return value & ~CPUID_7_0_EBX_TSC_ADJUST;
|
||||
}
|
||||
if (index == 0 && reg == R_EDX) {
|
||||
return value & ~(CPUID_7_0_EDX_SPEC_CTRL |
|
||||
CPUID_7_0_EDX_STIBP |
|
||||
CPUID_7_0_EDX_FLUSH_L1D |
|
||||
CPUID_7_0_EDX_ARCH_CAPABILITIES |
|
||||
CPUID_7_0_EDX_CORE_CAPABILITY |
|
||||
CPUID_7_0_EDX_SPEC_CTRL_SSBD);
|
||||
}
|
||||
break;
|
||||
case 0x80000008:
|
||||
if (reg == R_EBX) {
|
||||
return value & ~CPUID_8000_0008_EBX_VIRT_SSBD;
|
||||
}
|
||||
break;
|
||||
}
|
||||
return value;
|
||||
}
|
||||
|
||||
static int
|
||||
sev_launch_update_data(SevCommonState *sev_common, hwaddr gpa,
|
||||
uint8_t *addr, size_t len)
|
||||
@ -2315,6 +2347,7 @@ sev_snp_guest_class_init(ObjectClass *oc, void *data)
|
||||
klass->launch_finish = sev_snp_launch_finish;
|
||||
klass->launch_update_data = sev_snp_launch_update_data;
|
||||
klass->kvm_init = sev_snp_kvm_init;
|
||||
x86_klass->mask_cpuid_features = sev_snp_mask_cpuid_features;
|
||||
x86_klass->kvm_type = sev_snp_kvm_type;
|
||||
|
||||
object_class_property_add(oc, "policy", "uint64",
|
||||
|
Loading…
Reference in New Issue
Block a user