| lists.openwall.net | lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC | |
|
Open Source and information security mailing list archives
| ||
|
Message-ID: <20241114100802.4116-1-liju-clr.chen@mediatek.com>
Date: Thu, 14 Nov 2024 18:07:37 +0800
From: Liju-clr Chen <liju-clr.chen@...iatek.com>
To: Rob Herring <robh@...nel.org>, Krzysztof Kozlowski <krzk+dt@...nel.org>,
Conor Dooley <conor+dt@...nel.org>, Jonathan Corbet <corbet@....net>, Catalin
Marinas <catalin.marinas@....com>, Will Deacon <will@...nel.org>, Steven
Rostedt <rostedt@...dmis.org>, Masami Hiramatsu <mhiramat@...nel.org>,
Mathieu Desnoyers <mathieu.desnoyers@...icios.com>, Richard Cochran
<richardcochran@...il.com>, Matthias Brugger <matthias.bgg@...il.com>,
AngeloGioacchino Del Regno <angelogioacchino.delregno@...labora.com>,
Liju-clr Chen <Liju-clr.Chen@...iatek.com>, Yingshiuan Pan
<Yingshiuan.Pan@...iatek.com>, Ze-yu Wang <Ze-yu.Wang@...iatek.com>
CC: <devicetree@...r.kernel.org>, <linux-kernel@...r.kernel.org>,
<linux-doc@...r.kernel.org>, <linux-arm-kernel@...ts.infradead.org>,
<linux-trace-kernel@...r.kernel.org>, <netdev@...r.kernel.org>,
<linux-mediatek@...ts.infradead.org>, Shawn Hsiao <shawn.hsiao@...iatek.com>,
PeiLun Suei <PeiLun.Suei@...iatek.com>, Chi-shen Yeh
<Chi-shen.Yeh@...iatek.com>, Kevenny Hsieh <Kevenny.Hsieh@...iatek.com>
Subject: [PATCH v13 00/25] GenieZone hypervisor drivers
From: Liju Chen <liju-clr.chen@...iatek.com>
This series is based on linux-next, tag: next-20241114.
GenieZone hypervisor(gzvm) is a type-I hypervisor that supports various
virtual machine types and provides security features such as TEE-like
scenarios and secure boot. It can create guest VMs for security use cases
and has virtualization capabilities for both platform and interrupt.
Although the hypervisor can be booted independently, it requires the
assistance of GenieZone hypervisor kernel driver(gzvm-ko) to leverage the
ability of Linux kernel for vCPU scheduling, memory management, inter-VM
communication and virtio backend support.
Changes in v13:
- Fix deadlock issue when removing module (rmmod) while there are still
running VMs.
- Introduce a hypervisor version hypercall to check the hypervisor version.
- Introduce gzvm_drv struct to maintain in-module information.
- Reduce blocked duration in the hypervisor when destroying a VM by
splitting a single hypercall into multiple calls and make the amount of
work of each call be adjustable.
- Reduce blocked duration in the hypervisor during block-based demand
paging with the same approach as done for destroying VM.
- Update documentation content based on reviewer's suggestions.
- Fix typos in documentation and YAML files.
- Fix errors reported by checkpatch.pl --codespell.
Changes in v12:
https://lore.kernel.org/lkml/20240730082436.9151-1-liju-clr.chen@mediatek.com/
- Introduce a mechanism to migrate the ARM64 virtual timer from the
guest VM to the host Linux system when the execution context switches
from the guest VM to the host.
- Implement CPU idle functionality for guest VMs to reduce CPU usage
and achieve power savings.
- Emulate Inter-Processor Interrupts (IPI) handling for guest VMs.
- Add Co-developed-by tags, adjust the order of Signed-off-by lines, and
remove "From:" lines.
- Fix coding style from viewer suggestion.
Changes in v11:
https://lore.kernel.org/all/20240529084239.11478-1-liju-clr.chen@mediatek.com/
- Resolve low memory issue by using only one api to get pages for guest VM.
- The GenieZone hypervisor acts as a vendor firmware to enable platform
virtualization, offering an implementation that is independent of
Linux-specific implementations. So, relocate dt-binding yaml file to
the firmware path, as the dts node is used to confirm the presence of
the geniezone hypervisor firmware.
- Fix coding style from viewer suggestion and checking tools.
Changes in v10:
https://lore.kernel.org/all/20240412065718.29105-1-yi-de.wu@mediatek.com/
- Optimize memory allocation: query hypervisor demand paging capability
before VM memory population.
- Fix goto syntax according to ACK reviewer in `gzvm_vcpu.c`.
- Fix coding style from viewer suggestion and checking tools.
Changes in v9:
https://lore.kernel.org/all/20240129083302.26044-1-yi-de.wu@mediatek.com/
- Add gzvm_vm_allocate_guest_page function for demand paging support and
protected VM memory performance optimization.
- Fix coding style from viewer suggestion and checking tools.
Changes in v8:
https://lore.kernel.org/all/20231228105147.13752-1-yi-de.wu@mediatek.com/
- Add reasons for using dt solution in dt-bindings.
- Add locks for memory pin/unpin and relinquish operations.
- Add VM memory stats in debugfs.
- Add tracing support for hypercall and vcpu exit reasons.
- Enable PTP for timing synchronization between host and guests.
- Optimize memory performance for protected VMs.
- Refactor wording and titles in documentation.
Changes in v7:
https://lore.kernel.org/all/20231116152756.4250-1-yi-de.wu@mediatek.com/
- Rebase these patches to the Linux 6.7-rc1 release.
- Refactor patches 1 to 15 to improve coding style while ensuring they do
not violate the majority of the changes made in v6
- Provide individual VM memory statistics within debugfs in patch 16.
- Add tracing support for hyper call and vcpu exit_reason.
Changes in v6:
https://lore.kernel.org/all/20230919111210.19615-1-yi-de.wu@mediatek.com/
- Rebase based on kernel 6.6-rc1
- Keep dt solution and leave the reasons in the commit message
- Remove arch/arm64/include/uapi/asm/gzvm_arch.h due to simplicity
- Remove resampler in drivers/virt/geniezone/gzvm_irqfd.c due to defeature
for now
- Remove PPI in arch/arm64/geniezone/vgic.c
- Refactor vm related components into 3 smaller patches, namely adding vm
support, setting user memory region and checking vm capability
- Refactor vcpu and vm component to remove unnecessary ARM prefix
- Add demand paging to fix crash on destroying memory page, acclerate on
booting and support ballooning deflate
- Add memory pin/unpin memory mechanism to support protected VM
- Add block-based demand paging for performance concern
- Response to reviewers and fix coding style accordingly
Changes in v5:
https://lore.kernel.org/all/20230727080005.14474-1-yi-de.wu@mediatek.com/
- Add dt solution back for device initialization
- Add GZVM_EXIT_GZ reason for gzvm_vcpu_run()
- Add patch for guest page fault handler
- Add patch for supporitng pin/unpin memory
- Remove unused enum members, namely GZVM_FUNC_GET_REGS and
GZVM_FUNC_SET_REGS
- Use dev_debug() for debugging when platform device is available, and use
pr_debug() otherwise
- Response to reviewers and fix bugs accordingly
Changes in v4:
https://lore.kernel.org/all/20230609085214.31071-1-yi-de.wu@mediatek.com/
- Add macro to set VM as protected without triggering pvmfw in AVF.
- Add support to pass dtb config to hypervisor.
- Add support for virtual timer.
- Add UAPI to pass memory region metadata to hypervisor.
- Define our own macros for ARM's interrupt number
- Elaborate more on GenieZone hyperivsor in documentation
- Fix coding style.
- Implement our own module for coverting ipa to pa
- Modify the way of initializing device from dt to a more discoverable way
- Move refactoring changes into indepedent patches.
Changes in v3:
https://lore.kernel.org/all/20230512080405.12043-1-yi-de.wu@mediatek.com/
- Refactor: separate arch/arm64/geniezone/gzvm_arch.c into
vm.c/vcpu.c/vgic.c
- Remove redundant functions
- Fix reviewer's comments
Changes in v2:
https://lore.kernel.org/all/20230428103622.18291-1-yi-de.wu@mediatek.com/
- Refactor: move to drivers/virt/geniezone
- Refactor: decouple arch-dependent and arch-independent
- Check pending signal before entering guest context
- Fix reviewer's comments
Initial Commit in v1:
https://lore.kernel.org/all/20230413090735.4182-1-yi-de.wu@mediatek.com/
Jerry Wang (6):
virt: geniezone: Add memory region purpose for hypervisor
virt: geniezone: Add dtb config support
virt: geniezone: Add memory pin/unpin support
virt: geniezone: Add memory relinquish support
virt: geniezone: Provide individual VM memory statistics within
debugfs
virt: geniezone: Reduce blocked duration in hypervisor when destroying
a VM
Kevenny Hsieh (3):
virt: geniezone: Enable PTP for synchronizing time between host and
guest VMs
virt: geniezone: Add support for guest VM CPU idle
virt: geniezone: Emulate IPI for guest VM
Liju Chen (1):
virt: geniezone: Add tracing support for hyp call and vcpu exit_reason
Willix Yeh (1):
virt: geniezone: Add support for virtual timer migration
Yingshiuan Pan (14):
virt: geniezone: enable gzvm-ko in defconfig
docs: geniezone: Introduce GenieZone hypervisor
dt-bindings: hypervisor: Add MediaTek GenieZone hypervisor
virt: geniezone: Add GenieZone hypervisor driver
virt: geniezone: Add vm support
virt: geniezone: Add set_user_memory_region for vm
virt: geniezone: Add vm capability check
virt: geniezone: Add vcpu support
virt: geniezone: Add irqchip support for virtual interrupt injection
virt: geniezone: Add irqfd support
virt: geniezone: Add ioeventfd support
virt: geniezone: Optimize performance of protected VM memory
virt: geniezone: Add demand paging support
virt: geniezone: Add block-based demand paging support
.../bindings/firmware/mediatek,geniezone.yaml | 34 +
Documentation/virt/geniezone/introduction.rst | 87 +++
Documentation/virt/index.rst | 1 +
MAINTAINERS | 11 +
arch/arm64/Kbuild | 1 +
arch/arm64/configs/defconfig | 2 +
arch/arm64/geniezone/Makefile | 9 +
arch/arm64/geniezone/gzvm_arch_common.h | 120 ++++
arch/arm64/geniezone/hvc.c | 73 ++
arch/arm64/geniezone/vcpu.c | 96 +++
arch/arm64/geniezone/vgic.c | 50 ++
arch/arm64/geniezone/vm.c | 511 ++++++++++++++
drivers/virt/Kconfig | 2 +
drivers/virt/geniezone/Kconfig | 16 +
drivers/virt/geniezone/Makefile | 12 +
drivers/virt/geniezone/gzvm_common.h | 12 +
drivers/virt/geniezone/gzvm_exception.c | 112 +++
drivers/virt/geniezone/gzvm_ioeventfd.c | 281 ++++++++
drivers/virt/geniezone/gzvm_irqfd.c | 382 +++++++++++
drivers/virt/geniezone/gzvm_main.c | 352 ++++++++++
drivers/virt/geniezone/gzvm_mmu.c | 249 +++++++
drivers/virt/geniezone/gzvm_vcpu.c | 332 +++++++++
drivers/virt/geniezone/gzvm_vm.c | 642 ++++++++++++++++++
include/linux/soc/mediatek/gzvm_drv.h | 301 ++++++++
include/trace/events/geniezone.h | 84 +++
include/uapi/linux/gzvm.h | 407 +++++++++++
26 files changed, 4179 insertions(+)
create mode 100644 Documentation/devicetree/bindings/firmware/mediatek,geniezone.yaml
create mode 100644 Documentation/virt/geniezone/introduction.rst
create mode 100644 arch/arm64/geniezone/Makefile
create mode 100644 arch/arm64/geniezone/gzvm_arch_common.h
create mode 100644 arch/arm64/geniezone/hvc.c
create mode 100644 arch/arm64/geniezone/vcpu.c
create mode 100644 arch/arm64/geniezone/vgic.c
create mode 100644 arch/arm64/geniezone/vm.c
create mode 100644 drivers/virt/geniezone/Kconfig
create mode 100644 drivers/virt/geniezone/Makefile
create mode 100644 drivers/virt/geniezone/gzvm_common.h
create mode 100644 drivers/virt/geniezone/gzvm_exception.c
create mode 100644 drivers/virt/geniezone/gzvm_ioeventfd.c
create mode 100644 drivers/virt/geniezone/gzvm_irqfd.c
create mode 100644 drivers/virt/geniezone/gzvm_main.c
create mode 100644 drivers/virt/geniezone/gzvm_mmu.c
create mode 100644 drivers/virt/geniezone/gzvm_vcpu.c
create mode 100644 drivers/virt/geniezone/gzvm_vm.c
create mode 100644 include/linux/soc/mediatek/gzvm_drv.h
create mode 100644 include/trace/events/geniezone.h
create mode 100644 include/uapi/linux/gzvm.h
--
2.18.0
Powered by blists - more mailing lists