linux-kernel - Re: [RFC] Support for Arm CCA VMs on Linux

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [<thread-prev] [thread-next>] [day] [month] [year] [list]

Date: Fri, 19 Jan 2024 10:26:59 +0900
From: Itaru Kitayama <itaru.kitayama@...ux.dev>
To: Suzuki K Poulose <suzuki.poulose@....com>
Cc: linux-coco@...ts.linux.dev, linux-kernel@...r.kernel.org,
	linux-arm-kernel@...ts.infradead.org, kvm@...r.kernel.org,
	kvmarm@...ts.linux.dev, catalin.marinas@....com, will@...nel.org,
	maz@...nel.org, steven.price@....com, alexandru.elisei@....com,
	joey.gouly@....com, james.morse@....com,
	Jonathan.Cameron@...wei.com, dgilbert@...hat.com, jpb@...nel.org,
	oliver.upton@...ux.dev, zhi.wang.linux@...il.com,
	yuzenghui@...wei.com, salil.mehta@...wei.com,
	Andrew Jones <andrew.jones@...ux.dev>,
	Chao Peng <chao.p.peng@...ux.intel.com>,
	Christoffer Dall <christoffer.dall@....com>,
	Fuad Tabba <tabba@...gle.com>,
	Jean-Philippe Brucker <jean-philippe@...aro.org>,
	Mark Rutland <mark.rutland@....com>,
	Paolo Bonzini <pbonzini@...hat.com>,
	Quentin Perret <qperret@...gle.com>,
	Sean Christopherson <seanjc@...gle.com>,
	Thomas Huth <thuth@...hat.com>, Ryan Roberts <Ryan.Roberts@....com>,
	Sami Mujawar <Sami.Mujawar@....com>
Subject: Re: [RFC] Support for Arm CCA VMs on Linux

On Wed, Jan 10, 2024 at 01:44:45PM +0000, Suzuki K Poulose wrote:
> On 10/01/2024 11:41, Suzuki K Poulose wrote:
> > Hi Itaru,
> > 
> > On 10/01/2024 05:40, Itaru Kitayama wrote:
> > > On Mon, Oct 02, 2023 at 01:43:11PM +0100, Suzuki K Poulose wrote:
> > > > Hi,
> > > > 
> > > > 
> 
> ...
> 
> > > 
> > > Suzuki,
> > > Any update to the Arm CCA series (v3?) since last October?
> > 
> > Yes, we now have a version that supports the final RMM-v1.0
> > specification (RMM-v1.0-EAC5). We also have the UEFI EDK2 firmware
> > support for Guests in Realm world.
> > 
> > We are planning to post the changes for review in the v6.8-rc cycle. We
> > are trying to integrate the guest_mem support (available in v6.8-rc1) as
> > well as reusing some of the arm64 kvm generic interface for configuring
> > the Realm parameters (e.g., PMU, SVE_VL etc).
> > 
> > Here is a version that is missing the items mentioned above, based
> > on v6.7-rc4, if anyone would like to try.
> > 
> > Also, the easiest way to get the components built and model kick started
> > is using the shrinkwrap [6] tool, using the cca-3world configuration.
> > The tool pulls all the required software components, builds (including
> > the buildroot for rootfs) and can run a model using these built
> > components.
> 
> Also, please see 'arm/run-realm-tests.sh' in the kvm-unit-tests-cca
> repository for sample command lines to invoke kvmtool to create Realm
> VMs.

Thank you, Suzuki. I have just run the script above, again in the
framework of shrinkwrap on the RevC FVP and the jobs ran fine. I need to
go look at the lots of logs.

Itaru.

> 
> 
> > 
> > 
> > 
> > [0] Linux Repo:
> >        Where: git@....gitlab.arm.com:linux-arm/linux-cca.git
> >        KVM Support branch: cca-host/rmm-v1.0-eac5
> >        Linux Guest branch: cca-guest/rmm-v1.0-eac5
> >        Full stack branch:  cca-full/rmm-v1.0-eac5
> > 
> > [1] kvmtool Repo:
> >        Where: git@....gitlab.arm.com:linux-arm/kvmtool-cca.git
> >        Branch: cca/rmm-v1.0-eac5
> > 
> > [2] kvm-unit-tests Repo:
> >        Where: git@....gitlab.arm.com:linux-arm/kvm-unit-tests-cca.git
> >        Branch: cca/rmm-v1.0-eac5
> > 
> > [3] UEFI Guest firmware:
> >        edk2:     https://git.gitlab.arm.com/linux-arm/edk2-cca.git
> >        revision: 2802_arm_cca_rmm-v1.0-eac5
> > 
> >        edk2-platforms:
> > https://git.gitlab.arm.com/linux-arm/edk2-platforms-cca.git
> >        revision:       2802_arm_cca_rmm-v1.0-eac5
> > 
> > 
> > [4] RMM Repo:
> >        Where: https://git.trustedfirmware.org/TF-RMM/tf-rmm.git
> >        tag : tf-rmm-v0.4.0
> > 
> > [5] TF-A repo:
> >        Where: https://git.trustedfirmware.org/TF-A/trusted-firmware-a.git
> >        Tag: v2.10
> > 
> > 
> > [6] https://shrinkwrap.docs.arm.com/en/latest/
> >      config: cca-3world.yaml
> > 
> 
> Suzuki
>