| lists.openwall.net | lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC | |
|
Open Source and information security mailing list archives
| ||
|
Message-Id: <20230127113932.166089-17-suzuki.poulose@arm.com>
Date: Fri, 27 Jan 2023 11:39:17 +0000
From: Suzuki K Poulose <suzuki.poulose@....com>
To: kvm@...r.kernel.org, kvmarm@...ts.linux.dev
Cc: suzuki.poulose@....com,
Alexandru Elisei <alexandru.elisei@....com>,
Andrew Jones <andrew.jones@...ux.dev>,
Christoffer Dall <christoffer.dall@....com>,
Fuad Tabba <tabba@...gle.com>,
Jean-Philippe Brucker <jean-philippe@...aro.org>,
Joey Gouly <Joey.Gouly@....com>, Marc Zyngier <maz@...nel.org>,
Mark Rutland <mark.rutland@....com>,
Oliver Upton <oliver.upton@...ux.dev>,
Paolo Bonzini <pbonzini@...hat.com>,
Quentin Perret <qperret@...gle.com>,
Steven Price <steven.price@....com>,
Thomas Huth <thuth@...hat.com>, Will Deacon <will@...nel.org>,
Zenghui Yu <yuzenghui@...wei.com>, linux-coco@...ts.linux.dev,
kvmarm@...ts.cs.columbia.edu, linux-arm-kernel@...ts.infradead.org,
linux-kernel@...r.kernel.org
Subject: [RFC kvmtool 16/31] arm64: Add support for specifying the SVE vector length for Realm
Add option to specify SVE vector length for realms.
Signed-off-by: Suzuki K Poulose <suzuki.poulose@....com>
---
arm/aarch64/include/kvm/kvm-config-arch.h | 6 ++++--
arm/aarch64/kvm.c | 23 +++++++++++++++++++++++
arm/aarch64/realm.c | 21 +++++++++++++++++++++
arm/include/arm-common/kvm-arch.h | 1 +
arm/include/arm-common/kvm-config-arch.h | 1 +
5 files changed, 50 insertions(+), 2 deletions(-)
diff --git a/arm/aarch64/include/kvm/kvm-config-arch.h b/arm/aarch64/include/kvm/kvm-config-arch.h
index f2e659ad..0f42c2c2 100644
--- a/arm/aarch64/include/kvm/kvm-config-arch.h
+++ b/arm/aarch64/include/kvm/kvm-config-arch.h
@@ -29,8 +29,10 @@ int vcpu_affinity_parser(const struct option *opt, const char *arg, int unset);
"Realm Measurement algorithm, default: sha256"),\
OPT_STRING('\0', "realm-pv", &(cfg)->realm_pv, \
"personalisation value", \
- "Personalisation Value (only) for Realm VMs"),
-
+ "Personalisation Value (only) for Realm VMs"), \
+ OPT_U64('\0', "sve-vl", &(cfg)->sve_vl, \
+ "SVE Vector Length the VM" \
+ "(only supported for Realms)"),
#include "arm-common/kvm-config-arch.h"
diff --git a/arm/aarch64/kvm.c b/arm/aarch64/kvm.c
index 4798e359..fca1410b 100644
--- a/arm/aarch64/kvm.c
+++ b/arm/aarch64/kvm.c
@@ -51,13 +51,19 @@ static void validate_mem_cfg(struct kvm *kvm)
}
}
+#define SVE_VL_ALIGN 128
+
static void validate_realm_cfg(struct kvm *kvm)
{
+ u32 sve_vl;
+
if (!kvm->cfg.arch.is_realm) {
if (kvm->cfg.arch.measurement_algo)
die("--measurement-algo valid only with --realm");
if (kvm->cfg.arch.realm_pv)
die("--realm-pv valid only with --realm");
+ if (kvm->cfg.arch.sve_vl)
+ die("--sve-vl valid only with --realm");
return;
}
@@ -76,6 +82,23 @@ static void validate_realm_cfg(struct kvm *kvm)
kvm->arch.measurement_algo = KVM_CAP_ARM_RME_MEASUREMENT_ALGO_SHA256;
}
+ sve_vl = kvm->cfg.arch.sve_vl;
+ if (sve_vl) {
+ if (kvm->cfg.arch.disable_sve)
+ die("SVE VL requested when SVE is disabled");
+ if (!IS_ALIGNED(sve_vl, SVE_VL_ALIGN))
+ die("SVE VL is not aligned to %dbit\n", SVE_VL_ALIGN);
+ kvm->arch.sve_vq = (sve_vl / SVE_VL_ALIGN) - 1;
+ } else {
+ /*
+ * Disable SVE for Realms, if a VL is not requested.
+ * The SVE VL will be measured as part of the parameter
+ * and we do not want to add an unknown entity to the
+ * measurement.
+ */
+ kvm->cfg.arch.disable_sve = true;
+ }
+
if (kvm->cfg.arch.realm_pv) {
if (strlen(kvm->cfg.arch.realm_pv) > KVM_CAP_ARM_RME_RPV_SIZE)
die("Invalid size for Realm Personalization Value\n");
diff --git a/arm/aarch64/realm.c b/arm/aarch64/realm.c
index 2e0be982..fc7f8d6a 100644
--- a/arm/aarch64/realm.c
+++ b/arm/aarch64/realm.c
@@ -42,10 +42,31 @@ static void realm_configure_rpv(struct kvm *kvm)
die_perror("KVM_CAP_RME(KVM_CAP_ARM_RME_CONFIG_REALM) RPV");
}
+static void realm_configure_sve(struct kvm *kvm)
+{
+ struct kvm_cap_arm_rme_config_item sve_cfg = {
+ .cfg = KVM_CAP_ARM_RME_CFG_SVE,
+ .sve_vq = kvm->arch.sve_vq,
+ };
+
+ struct kvm_enable_cap rme_config = {
+ .cap = KVM_CAP_ARM_RME,
+ .args[0] = KVM_CAP_ARM_RME_CONFIG_REALM,
+ .args[1] = (u64)&sve_cfg,
+ };
+
+ if (kvm->cfg.arch.disable_sve)
+ return;
+
+ if (ioctl(kvm->vm_fd, KVM_ENABLE_CAP, &rme_config) < 0)
+ die_perror("KVM_CAP_RME(KVM_CAP_ARM_RME_CONFIG_REALM) SVE");
+}
+
static void realm_configure_parameters(struct kvm *kvm)
{
realm_configure_hash_algo(kvm);
realm_configure_rpv(kvm);
+ realm_configure_sve(kvm);
}
void kvm_arm_realm_create_realm_descriptor(struct kvm *kvm)
diff --git a/arm/include/arm-common/kvm-arch.h b/arm/include/arm-common/kvm-arch.h
index 68224b1c..41b31f11 100644
--- a/arm/include/arm-common/kvm-arch.h
+++ b/arm/include/arm-common/kvm-arch.h
@@ -114,6 +114,7 @@ struct kvm_arch {
cpu_set_t *vcpu_affinity_cpuset;
u64 measurement_algo;
+ u64 sve_vq;
};
#endif /* ARM_COMMON__KVM_ARCH_H */
diff --git a/arm/include/arm-common/kvm-config-arch.h b/arm/include/arm-common/kvm-config-arch.h
index 80a3b18e..d923fd9e 100644
--- a/arm/include/arm-common/kvm-config-arch.h
+++ b/arm/include/arm-common/kvm-config-arch.h
@@ -19,6 +19,7 @@ struct kvm_config_arch {
u64 fw_addr;
bool no_pvtime;
bool disable_sve;
+ u64 sve_vl;
};
int irqchip_parser(const struct option *opt, const char *arg, int unset);
--
2.34.1
Powered by blists - more mailing lists