From mboxrd@z Thu Jan 1 00:00:00 1970 Received: from DM1PR04CU001.outbound.protection.outlook.com (mail-centralusazon11010044.outbound.protection.outlook.com [52.101.61.44]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by smtp.subspace.kernel.org (Postfix) with ESMTPS id 4AD8F33F5B1 for ; Thu, 30 Jul 2026 01:50:34 +0000 (UTC) Authentication-Results: smtp.subspace.kernel.org; arc=fail smtp.client-ip=52.101.61.44 ARC-Seal:i=2; a=rsa-sha256; d=subspace.kernel.org; s=arc-20240116; t=1785376236; cv=fail; b=FkUSqFVtZ+Y/GbzC173fqOKTCGKj44BwFyxDa5tk5QAfGUbfZYaf8eMJxLsypa0RZlf/SWOGWPY+3DrIbJh+HSc3dCgj1IEc3MAiimpiTKeIs6Z08RHsBCt5GEvQ2wlSa8kMS/YvZ5kdb9yxJeUgmMCt9FqKPyEzzu9M0Hvd6VE= ARC-Message-Signature:i=2; a=rsa-sha256; d=subspace.kernel.org; s=arc-20240116; t=1785376236; c=relaxed/simple; bh=iIe2+E7cSqSAGnaGQsNAUaY5MxUZ3yIug4Z5Mc67Zlw=; h=From:To:CC:Subject:Date:Message-ID:In-Reply-To:References: MIME-Version:Content-Type; b=IYjo91+ERs4QVTNYPEQewDK+n2Gykf9vL1GyTGtX0KVfYjhna6kiiKASqGW8xsS45sXXzi7kmZ+DSSEPy3/lGAdGWTVvDG06xQuBeUukm7gFONfoqef9RmB6SpcCuEhG8Mhv7dy0ISHoUf20o4ix99SDLNs1n4fEXdatUBuoxdM= ARC-Authentication-Results:i=2; smtp.subspace.kernel.org; dmarc=pass (p=quarantine dis=none) header.from=amd.com; spf=fail smtp.mailfrom=amd.com; dkim=pass (1024-bit key) header.d=amd.com header.i=@amd.com header.b=fbTr+MN4; arc=fail smtp.client-ip=52.101.61.44 Authentication-Results: smtp.subspace.kernel.org; dmarc=pass (p=quarantine dis=none) header.from=amd.com Authentication-Results: smtp.subspace.kernel.org; spf=fail smtp.mailfrom=amd.com Authentication-Results: smtp.subspace.kernel.org; dkim=pass (1024-bit key) header.d=amd.com header.i=@amd.com header.b="fbTr+MN4" ARC-Seal: i=1; a=rsa-sha256; s=arcselector10001; d=microsoft.com; cv=none; b=KeoPuTQ70imjvIpEPSBVP2XO4m/ATWckV4PTeYrwf8f/Lgw5SNw46zmE9TfcGZg6LUwFysx+bw2jAOWACzXtwiGcDqDGEwlR1nEER/2vmsxCQK+IAX2dl8r549hPnVSEXB2CvEEG5KG80R4//eg8TZkhdaO8Ifg/G58sB9HtzYQJYwoDPVdvv8eGLw7fhelYkzK6+LPIsCEl9AaDLrI7T16d3eVF5Mxbojnk8jvnCKNlw5qLbSpCWcVMgev+sjwWAwqVzpEeEcG/c5Z9IQJQozJxWte5VySZvBo00ZwjDykXFmR/cvkW97ewS30897YPvryKMZ1YvshbXv4JPUsd4w== ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com; s=arcselector10001; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-AntiSpam-MessageData-ChunkCount:X-MS-Exchange-AntiSpam-MessageData-0:X-MS-Exchange-AntiSpam-MessageData-1; bh=dI35GbVY9zMWsS73VpJxi6+N84UMS10bJXv9HqMQ9R0=; b=RSNg9d3Kc5cfy3L9DgxYerLqLMU5bKCyB/7zSWKSwgySm/cp4jn0yGkb8GXbveuDuyLqcDQIDKDEq7WkOe9hhHUGTmUrXaw9qpDYTGr9vQtjdjdmguXH7//k6ijc5sUdjU4FbUZBys8sRK7PdM+CyOLVK3RWfWGwEI+WdlwWNNC7GOtC+rDitfLSRfjjDbY/0zSU3RtReQsfgqFlRJ438DFcbWc3IHI6PftL3aefu+pGYDTbNWn+sIJFGJG867oBPKkHBibAw1Ifk9EOLWSwAvt6UMc5pYaknCFDhXmFUmCv/5Rm41u0qhzc8YRwJ6bsyjWtrJCLNfUC9pxrA1nqKQ== ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=pass (sender ip is 165.204.84.17) smtp.rcpttodomain=kernel.org smtp.mailfrom=amd.com; dmarc=pass (p=quarantine sp=quarantine pct=100) action=none header.from=amd.com; dkim=none (message not signed); arc=none (0) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=amd.com; s=selector1; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=dI35GbVY9zMWsS73VpJxi6+N84UMS10bJXv9HqMQ9R0=; b=fbTr+MN4B0nzQLN3Q7ztvaNkgIXGeKfRLVFKX/q76hGTNdIxLh5ULzDM0FzxPSc7cHnYH9QKeYioNJn87/eFqsdeOcxLfAMR9Uk5vRgCk/LW6cj3tTRuSWLgUhvGRRcS13slto/FUNJZkpmtyMWIn/rEs8ovoNTszzvLCR42wZ4= Received: from CH5P223CA0022.NAMP223.PROD.OUTLOOK.COM (2603:10b6:610:1f3::12) by SA3PR12MB9159.namprd12.prod.outlook.com (2603:10b6:806:3a0::11) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.21.270.14; Thu, 30 Jul 2026 01:50:28 +0000 Received: from CH2PEPF00000140.namprd02.prod.outlook.com (2603:10b6:610:1f3:cafe::5f) by CH5P223CA0022.outlook.office365.com (2603:10b6:610:1f3::12) with Microsoft SMTP Server (version=TLS1_3, cipher=TLS_AES_256_GCM_SHA384) id 15.21.270.14 via Frontend Transport; Thu, 30 Jul 2026 01:50:28 +0000 X-MS-Exchange-Authentication-Results: spf=pass (sender IP is 165.204.84.17) smtp.mailfrom=amd.com; dkim=none (message not signed) header.d=none;dmarc=pass action=none header.from=amd.com; Received-SPF: Pass (protection.outlook.com: domain of amd.com designates 165.204.84.17 as permitted sender) receiver=protection.outlook.com; client-ip=165.204.84.17; helo=satlexmb07.amd.com; pr=C Received: from satlexmb07.amd.com (165.204.84.17) by CH2PEPF00000140.mail.protection.outlook.com (10.167.244.72) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.21.292.8 via Frontend Transport; Thu, 30 Jul 2026 01:50:28 +0000 Received: from purico-9dcchost.amd.com (10.180.168.240) by satlexmb07.amd.com (10.181.42.216) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.2.2562.41; Wed, 29 Jul 2026 20:50:27 -0500 From: Melody Wang To: CC: LKML , Tom Lendacky , Melody Wang Subject: [PATCH 6/7] x86/sev: Register the guest with the SVSM APIC protocol Date: Thu, 30 Jul 2026 01:48:46 +0000 Message-ID: <0321fc1324c66bfc02b3c0f65ff5e7a9130a969f.1785375271.git.huibo.wang@amd.com> X-Mailer: git-send-email 2.43.0 In-Reply-To: References: Precedence: bulk X-Mailing-List: linux-kernel@vger.kernel.org List-Id: List-Subscribe: List-Unsubscribe: MIME-Version: 1.0 Content-Transfer-Encoding: 8bit Content-Type: text/plain X-ClientProxiedBy: satlexmb08.amd.com (10.181.42.217) To satlexmb07.amd.com (10.181.42.216) X-EOPAttributedMessage: 0 X-MS-PublicTrafficType: Email X-MS-TrafficTypeDiagnostic: CH2PEPF00000140:EE_|SA3PR12MB9159:EE_ X-MS-Office365-Filtering-Correlation-Id: 78e47aae-8703-428b-07a3-08deeddcee8e X-MS-Exchange-SenderADCheck: 1 X-MS-Exchange-AntiSpam-Relay: 0 X-Microsoft-Antispam: BCL:0;ARA:13230040|36860700016|23010399003|376014|1800799024|82310400026|10067099003|11063799006|56012099006|18002099003|22082099003|3023799007; X-Microsoft-Antispam-Message-Info: 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 X-Forefront-Antispam-Report: CIP:165.204.84.17;CTRY:US;LANG:en;SCL:1;SRV:;IPV:NLI;SFV:NSPM;H:satlexmb07.amd.com;PTR:InfoDomainNonexistent;CAT:NONE;SFS:(13230040)(36860700016)(23010399003)(376014)(1800799024)(82310400026)(10067099003)(11063799006)(56012099006)(18002099003)(22082099003)(3023799007);DIR:OUT;SFP:1101; X-MS-Exchange-AntiSpam-MessageData-ChunkCount: 1 X-MS-Exchange-AntiSpam-MessageData-0: m/p8OZ0qCCDOvlvLxmL6KKlAjoa5YkH2PtzRFDatmX5nWo3+/mzItsp9q4d6TgigHS8olC517Hu3x4tTSDfZXDhXENeN4/cJeK4cOKvjdI3+SMDDaN8BVTswOc483bTi/V0BClPjUxQ+H09aKhRzopv9jz1l0179ylqQ71ADcQvQ+YbLkh5lglxBc23ujJ7DhIwh3bRQ8whHZ8XkEJiK57gODjb8+03zrSInHBTboSU1RZsw0gi+MVKTaZumuySfrd0RzpE30R8iQp7T5Uin1OZrVeIgtPnkRy6UzLK2rg43RGRl1mnVfYohOoCdgWvuJhEWtMhumImvKyiBA6qpxblWjadx7ku8gVU3EMFweYyD5/8HwwhF02Uy3fXrlmi3aFhyT1XcKt+nfOej8aOrF3DpvkInh2s3H33Q1u4Qq8WCjMHV7/+CtfqXK5kTd/0o X-OriginatorOrg: amd.com X-MS-Exchange-CrossTenant-OriginalArrivalTime: 30 Jul 2026 01:50:28.3494 (UTC) X-MS-Exchange-CrossTenant-Network-Message-Id: 78e47aae-8703-428b-07a3-08deeddcee8e X-MS-Exchange-CrossTenant-Id: 3dd8961f-e488-4e60-8e11-a82d994e183d X-MS-Exchange-CrossTenant-OriginalAttributedTenantConnectingIp: TenantId=3dd8961f-e488-4e60-8e11-a82d994e183d;Ip=[165.204.84.17];Helo=[satlexmb07.amd.com] X-MS-Exchange-CrossTenant-AuthSource: CH2PEPF00000140.namprd02.prod.outlook.com X-MS-Exchange-CrossTenant-AuthAs: Anonymous X-MS-Exchange-CrossTenant-FromEntityHeader: HybridOnPrem X-MS-Exchange-Transport-CrossTenantHeadersStamped: SA3PR12MB9159 The SVSM APIC protocol supports 5 calls. SVSM_APIC_CONFIGURE_EMULATION (shortened to SVSM_APIC_CONFIG_EMULATION for brevity), call 1, provides the controls whether the guest can make use of the SVSM APIC protocol. Implement this call, and register Alternate Injection for the guest by default. Signed-off-by: Melody Wang --- arch/x86/boot/compressed/sev.c | 17 +++++++++++++++++ arch/x86/boot/compressed/sev.h | 6 ++++++ 2 files changed, 23 insertions(+) diff --git a/arch/x86/boot/compressed/sev.c b/arch/x86/boot/compressed/sev.c index 655291a03dcc..a98185b3869a 100644 --- a/arch/x86/boot/compressed/sev.c +++ b/arch/x86/boot/compressed/sev.c @@ -518,5 +518,22 @@ u64 sev_prepare(void) if (unsupported) return unsupported; + /* Register Alternate Injection */ + if (early_is_sevsnp_guest() && snp_vmpl) { + struct svsm_call call = {}; + int ret; + + if (!(sev_get_status() & MSR_AMD64_SNP_ALTERNATE_INJ)) + return 0; + + call.caa = (struct svsm_ca *)boot_svsm_caa_pa; + call.rax = SVSM_APIC_CALL(SVSM_APIC_CONFIG_EMULATION); + call.rcx = SVSM_AI_REGISTER; + + ret = svsm_call_msr_protocol(&call); + if (ret) + sev_es_terminate(SEV_TERM_SET_GEN, GHCB_SNP_UNSUPPORTED); + } + return 0; } diff --git a/arch/x86/boot/compressed/sev.h b/arch/x86/boot/compressed/sev.h index 22637b416b46..dd058af2e7aa 100644 --- a/arch/x86/boot/compressed/sev.h +++ b/arch/x86/boot/compressed/sev.h @@ -12,6 +12,12 @@ #include +enum svsm_ai_ctrl { + SVSM_AI_DISABLE, + SVSM_AI_DEREGISTER, + SVSM_AI_REGISTER, +}; + void snp_accept_memory(phys_addr_t start, phys_addr_t end); u64 sev_get_status(void); bool early_is_sevsnp_guest(void); -- 2.43.0