linux-kernel - Re: [RFC] Support for Arm CCA VMs on Linux

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [<thread-prev] [thread-next>] [day] [month] [year] [list]

Message-ID: <d47e8b8c-50e4-4ad3-8f00-cadaede1eca9@arm.com>
Date: Wed, 10 Jan 2024 13:44:45 +0000
From: Suzuki K Poulose <suzuki.poulose@....com>
To: Itaru Kitayama <itaru.kitayama@...ux.dev>
Cc: linux-coco@...ts.linux.dev, linux-kernel@...r.kernel.org,
 linux-arm-kernel@...ts.infradead.org, kvm@...r.kernel.org,
 kvmarm@...ts.linux.dev, catalin.marinas@....com, will@...nel.org,
 maz@...nel.org, steven.price@....com, alexandru.elisei@....com,
 joey.gouly@....com, james.morse@....com, Jonathan.Cameron@...wei.com,
 dgilbert@...hat.com, jpb@...nel.org, oliver.upton@...ux.dev,
 zhi.wang.linux@...il.com, yuzenghui@...wei.com, salil.mehta@...wei.com,
 Andrew Jones <andrew.jones@...ux.dev>,
 Chao Peng <chao.p.peng@...ux.intel.com>,
 Christoffer Dall <christoffer.dall@....com>, Fuad Tabba <tabba@...gle.com>,
 Jean-Philippe Brucker <jean-philippe@...aro.org>,
 Mark Rutland <mark.rutland@....com>, Paolo Bonzini <pbonzini@...hat.com>,
 Quentin Perret <qperret@...gle.com>, Sean Christopherson
 <seanjc@...gle.com>, Thomas Huth <thuth@...hat.com>,
 Ryan Roberts <Ryan.Roberts@....com>, Sami Mujawar <Sami.Mujawar@....com>
Subject: Re: [RFC] Support for Arm CCA VMs on Linux

On 10/01/2024 11:41, Suzuki K Poulose wrote:
> Hi Itaru,
> 
> On 10/01/2024 05:40, Itaru Kitayama wrote:
>> On Mon, Oct 02, 2023 at 01:43:11PM +0100, Suzuki K Poulose wrote:
>>> Hi,
>>>
>>>

..

>>
>> Suzuki,
>> Any update to the Arm CCA series (v3?) since last October?
> 
> Yes, we now have a version that supports the final RMM-v1.0
> specification (RMM-v1.0-EAC5). We also have the UEFI EDK2 firmware
> support for Guests in Realm world.
> 
> We are planning to post the changes for review in the v6.8-rc cycle. We
> are trying to integrate the guest_mem support (available in v6.8-rc1) as
> well as reusing some of the arm64 kvm generic interface for configuring
> the Realm parameters (e.g., PMU, SVE_VL etc).
> 
> Here is a version that is missing the items mentioned above, based
> on v6.7-rc4, if anyone would like to try.
> 
> Also, the easiest way to get the components built and model kick started
> is using the shrinkwrap [6] tool, using the cca-3world configuration.
> The tool pulls all the required software components, builds (including
> the buildroot for rootfs) and can run a model using these built
> components.

Also, please see 'arm/run-realm-tests.sh' in the kvm-unit-tests-cca 
repository for sample command lines to invoke kvmtool to create Realm
VMs.


> 
> 
> 
> [0] Linux Repo:
>        Where: git@....gitlab.arm.com:linux-arm/linux-cca.git
>        KVM Support branch: cca-host/rmm-v1.0-eac5
>        Linux Guest branch: cca-guest/rmm-v1.0-eac5
>        Full stack branch:  cca-full/rmm-v1.0-eac5
> 
> [1] kvmtool Repo:
>        Where: git@....gitlab.arm.com:linux-arm/kvmtool-cca.git
>        Branch: cca/rmm-v1.0-eac5
> 
> [2] kvm-unit-tests Repo:
>        Where: git@....gitlab.arm.com:linux-arm/kvm-unit-tests-cca.git
>        Branch: cca/rmm-v1.0-eac5
> 
> [3] UEFI Guest firmware:
>        edk2:     https://git.gitlab.arm.com/linux-arm/edk2-cca.git
>        revision: 2802_arm_cca_rmm-v1.0-eac5
> 
>        edk2-platforms: 
> https://git.gitlab.arm.com/linux-arm/edk2-platforms-cca.git
>        revision:       2802_arm_cca_rmm-v1.0-eac5
> 
> 
> [4] RMM Repo:
>        Where: https://git.trustedfirmware.org/TF-RMM/tf-rmm.git
>        tag : tf-rmm-v0.4.0
> 
> [5] TF-A repo:
>        Where: https://git.trustedfirmware.org/TF-A/trusted-firmware-a.git
>        Tag: v2.10
> 
> 
> [6] https://shrinkwrap.docs.arm.com/en/latest/
>      config: cca-3world.yaml
> 

Suzuki