ee88612df1
KVM is introducing a new API to create confidential guests, which
will be used by TDX and SEV-SNP but is also available for SEV and
SEV-ES. The API uses the VM type argument to KVM_CREATE_VM to
identify which confidential computing technology to use.
Since there are no other expected uses of VM types, delegate
mc->kvm_type() for x86 boards to the confidential-guest-support
object pointed to by ms->cgs.
For example, if a sev-guest object is specified to confidential-guest-support,
like,
qemu -machine ...,confidential-guest-support=sev0 \
-object sev-guest,id=sev0,...
it will check if a VM type KVM_X86_SEV_VM or KVM_X86_SEV_ES_VM
is supported, and if so use them together with the KVM_SEV_INIT2
function of the KVM_MEMORY_ENCRYPT_OP ioctl. If not, it will fall back to
KVM_SEV_INIT and KVM_SEV_ES_INIT.
This is a preparatory work towards TDX and SEV-SNP support, but it
will also enable support for VMSA features such as DebugSwap, which
are only available via KVM_SEV_INIT2.
Co-developed-by: Xiaoyao Li <xiaoyao.li@intel.com>
Signed-off-by: Xiaoyao Li <xiaoyao.li@intel.com>
Signed-off-by: Paolo Bonzini <pbonzini@redhat.com>
84 lines
2.4 KiB
C
84 lines
2.4 KiB
C
/*
|
|
* QEMU KVM support -- x86 specific functions.
|
|
*
|
|
* Copyright (c) 2012 Linaro Limited
|
|
*
|
|
* This work is licensed under the terms of the GNU GPL, version 2 or later.
|
|
* See the COPYING file in the top-level directory.
|
|
*
|
|
*/
|
|
|
|
#ifndef QEMU_KVM_I386_H
|
|
#define QEMU_KVM_I386_H
|
|
|
|
#include "sysemu/kvm.h"
|
|
|
|
#ifdef CONFIG_KVM
|
|
|
|
#define kvm_pit_in_kernel() \
|
|
(kvm_irqchip_in_kernel() && !kvm_irqchip_is_split())
|
|
#define kvm_pic_in_kernel() \
|
|
(kvm_irqchip_in_kernel() && !kvm_irqchip_is_split())
|
|
#define kvm_ioapic_in_kernel() \
|
|
(kvm_irqchip_in_kernel() && !kvm_irqchip_is_split())
|
|
|
|
#else
|
|
|
|
#define kvm_pit_in_kernel() 0
|
|
#define kvm_pic_in_kernel() 0
|
|
#define kvm_ioapic_in_kernel() 0
|
|
|
|
#endif /* CONFIG_KVM */
|
|
|
|
bool kvm_has_smm(void);
|
|
bool kvm_enable_x2apic(void);
|
|
bool kvm_hv_vpindex_settable(void);
|
|
|
|
bool kvm_enable_sgx_provisioning(KVMState *s);
|
|
bool kvm_hyperv_expand_features(X86CPU *cpu, Error **errp);
|
|
|
|
int kvm_get_vm_type(MachineState *ms);
|
|
void kvm_arch_reset_vcpu(X86CPU *cs);
|
|
void kvm_arch_after_reset_vcpu(X86CPU *cpu);
|
|
void kvm_arch_do_init_vcpu(X86CPU *cs);
|
|
uint32_t kvm_arch_get_supported_cpuid(KVMState *env, uint32_t function,
|
|
uint32_t index, int reg);
|
|
uint64_t kvm_arch_get_supported_msr_feature(KVMState *s, uint32_t index);
|
|
|
|
void kvm_set_max_apic_id(uint32_t max_apic_id);
|
|
void kvm_request_xsave_components(X86CPU *cpu, uint64_t mask);
|
|
|
|
#ifdef CONFIG_KVM
|
|
|
|
bool kvm_is_vm_type_supported(int type);
|
|
bool kvm_has_adjust_clock_stable(void);
|
|
bool kvm_has_exception_payload(void);
|
|
void kvm_synchronize_all_tsc(void);
|
|
|
|
void kvm_get_apic_state(DeviceState *d, struct kvm_lapic_state *kapic);
|
|
void kvm_put_apicbase(X86CPU *cpu, uint64_t value);
|
|
|
|
bool kvm_has_x2apic_api(void);
|
|
bool kvm_has_waitpkg(void);
|
|
|
|
uint64_t kvm_swizzle_msi_ext_dest_id(uint64_t address);
|
|
void kvm_update_msi_routes_all(void *private, bool global,
|
|
uint32_t index, uint32_t mask);
|
|
|
|
typedef bool QEMURDMSRHandler(X86CPU *cpu, uint32_t msr, uint64_t *val);
|
|
typedef bool QEMUWRMSRHandler(X86CPU *cpu, uint32_t msr, uint64_t val);
|
|
typedef struct kvm_msr_handlers {
|
|
uint32_t msr;
|
|
QEMURDMSRHandler *rdmsr;
|
|
QEMUWRMSRHandler *wrmsr;
|
|
} KVMMSRHandlers;
|
|
|
|
bool kvm_filter_msr(KVMState *s, uint32_t msr, QEMURDMSRHandler *rdmsr,
|
|
QEMUWRMSRHandler *wrmsr);
|
|
|
|
#endif /* CONFIG_KVM */
|
|
|
|
void kvm_pc_setup_irq_routing(bool pci_enabled);
|
|
|
|
#endif
|