From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: Received: (majordomo@vger.kernel.org) by vger.kernel.org via listexpand id S1757238AbcHVXmK (ORCPT ); Mon, 22 Aug 2016 19:42:10 -0400 Received: from mail-co1nam03on0049.outbound.protection.outlook.com ([104.47.40.49]:57312 "EHLO NAM03-CO1-obe.outbound.protection.outlook.com" rhost-flags-OK-OK-OK-FAIL) by vger.kernel.org with ESMTP id S1755092AbcHVXmE (ORCPT ); Mon, 22 Aug 2016 19:42:04 -0400 Authentication-Results: spf=none (sender IP is ) smtp.mailfrom=brijesh.singh@amd.com; Subject: [RFC PATCH v1 17/28] KVM: SVM: Enable SEV by setting the SEV_ENABLE cpu feature From: Brijesh Singh To: , , , , , , , , , , , , , , , , , , , , , , , , , , , , , , , , , , , , , , , , , , Date: Mon, 22 Aug 2016 19:27:07 -0400 Message-ID: <147190842748.9523.5605997278361096963.stgit@brijesh-build-machine> In-Reply-To: <147190820782.9523.4967724730957229273.stgit@brijesh-build-machine> References: <147190820782.9523.4967724730957229273.stgit@brijesh-build-machine> User-Agent: StGit/0.17.1-dirty MIME-Version: 1.0 Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: 7bit X-Originating-IP: [165.204.77.1] X-ClientProxiedBy: BN6PR17CA0048.namprd17.prod.outlook.com (10.175.189.34) To BY2PR12MB0664.namprd12.prod.outlook.com (10.163.113.153) X-MS-Office365-Filtering-Correlation-Id: c2e1616b-c51d-476b-a6e7-08d3cae3db44 X-Microsoft-Exchange-Diagnostics: 1;BY2PR12MB0664;2:rHdQYmzo3jkvomENO57LySEvWBBLxevumLNnfFS8H7yYE93+GoGmQavLUsLf8h5XSZY3dDOKWnte7hSwAr0YRrGFB2YKcJzOKzZCXO+JKg5k9468G5MnYj1d4fBNrUFwhKJ7URjjlZvNWofaKu50tElYr3XGp+j6gyAQA0lV2seSCOC4FfKJGPUR31q4M2JZ;3:E/eZi0icn3cyfPAno8ydPx74UyR5FPyjsJykjZOambEwoNiPtnFv6grIcNBokj8t2eLOT3RH/392jD3gdFgHptBlJW7Q6TnADMQFCxMdbauY852IgUzp//oetHppKLdV;25:d2d6Ee9vWaFKo/ePtWy2OAwEK++2CsBLL7KmB2B5Jq2WLNGO9s/RkqRy7Sz4MreP1SyKQ2B7T/Yr5FWYQ9XRlafM0VReWxCq9QpwDn2mwouScIh117H/arcLCt+TfoT0xH+Sqh9CIIl9UbJGugOF8OlJxj9R6NZjdCYBrL3xlXLCdq/TWhuaLKMddkf/iCICjSWl2Pj2g3aXIZEsjnqn0h7FMFV3xDRz8lW+lo/qWelISOYhnWSvQiRCIVBJ+lK/EcUS/A/hLoHgAAPV47cnWunO5Lu+Xy0UbUfyuHzLoKm7BYRyxfjdyz3gzqfeYGb3R6oKzhN6/9aAt0tfUqM7158A5nB0+AzLFsLOeKAqMxgBjZ0tP4ZvPIZfZgZouce6Eksb64yUhsz7pyScbmxmdcxTcLcWC0gSj+hhzn6o4rQ= X-Microsoft-Antispam: UriScan:;BCL:0;PCL:0;RULEID:;SRVR:BY2PR12MB0664; X-Microsoft-Exchange-Diagnostics: 1;BY2PR12MB0664;31:QW+55EL+X5li176ctd+K57FB8SoQgeRdyEDTTUiihqQWgpnSfaIm1ApNBw7KfndPZ5Pkv+nJus+A6dP1VpfQjz1yQSkbmXc1XXmSGPLj47ScWqBrwfQrpCx5NwYUDgHPcq2oPifHPzODtEA34q59qnFfyFf98yHHZEF+YJuYjBLTCrLZboPAsfmC+OtJ18S3FLWjL06W+wyu7ncRPnhlH7j/1nycUg99p3OQSUVxVk4=;20:R9xcUVQqHmf5Rnn526qhiJX0k/QUswDUxJ16ycAREU8K0x5b8RtVGPdm1VGoJ6Cpj4czCKXaoXZ2KPoJqEUjXnBuDkZWQdTB99hym8LZNPMFgNGuxBROkgfah+2xxC0k+mkJn75F5QepVmqUHLO8ZshAHDZnepc9zl4SQFvWPPQ1jBgLwku+D3oegE0eRTbYd3JGnVVL6iCYtM1FMFhe/FPbTu4nMRZsJLYw8NVMJl9w6mw4u1CsQDHvzGmMcZ8FbfWYBY/JDBn6x6okntq6uXLG5jCwbHSZ6IionPBw6yWV1rtUriZSG98ZX+kG69FXVKcM/lmi0ABsV3+gtJnwxiIT8aNiJEVCoDXBKXoQus2AWPv5XSKXfL1VTmw/TwsXOU8v121uCpuigYw+FEYMqYTpjVReM5PzjExlgR9cO2ziwCbSjQdbTMz9FjMpFanWpDxrqkrknvWVhfBFPg988nErgYJkZa6q1mh7/FAowZSBlVdTxQo27ifGKWD9DRra X-Microsoft-Antispam-PRVS: X-Exchange-Antispam-Report-Test: UriScan:(767451399110); X-Exchange-Antispam-Report-CFA-Test: BCL:0;PCL:0;RULEID:(6040176)(601004)(2401047)(5005006)(8121501046)(3002001)(10201501046)(6055026);SRVR:BY2PR12MB0664;BCL:0;PCL:0;RULEID:;SRVR:BY2PR12MB0664; X-Microsoft-Exchange-Diagnostics: 1;BY2PR12MB0664;4:WyFMTUv0uQSR0pcj/3zQh4sG0Usfs8QlwormEvW999xGHHAA+FP2kA1Id7A9Hct61xqqx98i/zV+HorCVJ8hb0Ljg3KlJfw4ISX88rOrWFUNkCToijDbNzAfkbWgpd05HhHZnEMdCV4NSz3frL4tkOpY/DoW8WsFjw+NK4tGum0iC6GCD7zEI1kWX1axs+Xyl1dW4YmDMKh9jHfbrgMhQzVGy0F3DS9VJxXgQfr6OWVYRZaZWxV17V33TeqpC57HxJJ4WgjMFB2XPCQ5fEx8AAy4b/tErguzI/QLpS86zMxAeGuzbBS3Y12ijFvkahKB/mgXJiUhjO6BaddjxU6hf68H5ZbzW7cLLvJnSI4qmriP4w7SUoGEuoAHj1SeaEjpYXADZHhHRUCNrOEwoZ9uccwUTZOfF0AFgxkA1cjAjtIhPNrzmb24SycSsPeHVqk1 X-Forefront-PRVS: 00429279BA X-Forefront-Antispam-Report: SFV:NSPM;SFS:(10009020)(4630300001)(6009001)(6049001)(7916002)(199003)(189002)(33716001)(68736007)(6116002)(229853001)(7406005)(7416002)(3846002)(50986999)(54356999)(76176999)(586003)(33646002)(83506001)(2201001)(2906002)(19580395003)(86362001)(50466002)(101416001)(2950100001)(5660300001)(575784001)(107886002)(47776003)(7736002)(8676002)(103116003)(9686002)(305945005)(81166006)(81156014)(66066001)(7846002)(105586002)(77096005)(106356001)(5001770100001)(92566002)(19580405001)(189998001)(4001350100001)(97736004)(230700001)(42186005)(23676002)(921003)(1121003)(217873001)(2101003)(83996005)(309714004);DIR:OUT;SFP:1101;SCL:1;SRVR:BY2PR12MB0664;H:[127.0.1.1];FPR:;SPF:None;PTR:InfoNoRecords;A:1;MX:1;LANG:en; X-Microsoft-Exchange-Diagnostics: =?utf-8?B?MTtCWTJQUjEyTUIwNjY0OzIzOitYaHFjUFRUMjc5SEgvRnFZa2p1RnNqZHpQ?= =?utf-8?B?czdqT1pxZjZKMW15a3hDaENBZjJ5L2p3Q0JCd2hVL2dpbFRYdkkxdlJJK0FJ?= =?utf-8?B?TTJ0alU0WGNQWVprb0VMenJ1WmtWcVVTbGdqRFFKd0U4bmtuYWFXZ3ZUTzZD?= =?utf-8?B?WVFKUzEyZ3FLRVF5MFFnU0g5R1JSUjVkTVpRYXhjQmUzLzdtSlJVMGNETmd0?= =?utf-8?B?TVdBK2doQTdDR2wxMklWc0RlUm9DOFdnb1pHUUtKMVhvS3lBYkpuOGdFK0Uy?= =?utf-8?B?ZG11NFFIMGRURThjd2VTMEFqWjRtdzlBRWVCS3BrczBLeU53aGtnVFhnQ1ov?= =?utf-8?B?aGlUYkNYYlFWemE1YVlFY2gxKy9ML243Q2d4bEtFMFZoV2QweFBDOWg1bDJJ?= =?utf-8?B?bGlDWllENXB2TzlXaTRPZXNjSTN3bVFhQU1yUzN2cXpCWklpQXhWcWVnR2g1?= =?utf-8?B?Q21uc3VkY3JtUkVhbFNkZzkyVXliMnM2WDhadmQ1OStSTmpSMmFYQU5LMFBQ?= =?utf-8?B?Sm9DSEVDQ2RGemNwNmxlUmN4aU9LZXFFNHlaOWNOdkFRMUJsREV5SVBrQUdV?= =?utf-8?B?TWtqWEZjOVhENjFaRk1kY1EwRHlEV2FiNUtRRXBFZFpCNVR6dWVwZHpNZzhG?= =?utf-8?B?azUxb3pvSVJDTWllYmZwZExLTXlJYThlUS9ENy9LNnNQdjJtSDdCM0ZDRUJT?= =?utf-8?B?UDRXanV4NVlPY0xENlRzTmdaM0lTejJFbkpRWUo3RkdXRHR6eFhKQlFiQ2pW?= =?utf-8?B?bUo5NjhoWmFUMThjRkcyTTBQem9mMjF4aktycjcrZDRpYzYrK1BlS1RvZUUv?= =?utf-8?B?VG9aUlZIRWt5OGZQNFJlY2RrVjBiaThFZDI4MkdFcUJlcWpmS2FYVXZuVFZz?= =?utf-8?B?TmZIUWdmMzlsK0JLeTdHUHdIcWpNNTg1S0g3Mk5Ta2ZGVjNmMXloUUdLM2tW?= =?utf-8?B?ZDZIMXhoQUFVWTErOFRkWkFYdEhrd0R1OW9URkpadVg4U3lQTlpIU0ViejlD?= =?utf-8?B?ZWRNRnlhY2lRcTFmZzNXTnVxcUMrSHN2U3JOUnUzRWoxbEJrWXIzaDZxc3Rv?= =?utf-8?B?N0k5Y21DNFZsVlo4cHNjYTFRMUxsUk9ZNHVicTUvdXo1bExoL0hseG95Ny9K?= =?utf-8?B?QmxOcU0yUDNadFFyMno2dVRORktxekl3YXpRc0pTV3FFTlVBNVA4YTdLL0po?= =?utf-8?B?V05tcEl2dlIrRytkeGNjbjJJUkNaT0J2ajZPaHNBOTUxYS9ocHlpSDdXUUJw?= =?utf-8?B?WDdNcXB3Q2ZDV1hJMEhOeDYwUWlUb2R6K0U3NUp1VExQVGEzVFhDdHB6bEtV?= =?utf-8?B?ZExYYVlkL3l0d2Q4dFVGaVAwUnorTHkyT2c2Vmp1NFkzU0lONzROQTRRNHVv?= =?utf-8?B?RG1COWNub0llU3VYajdYUDBtTlNjc2VkU01SZUZhb0VTcC9xZGl2Z00rNUJJ?= =?utf-8?B?bzN5dVg0OFFLYWw5ZThmQXJEVVEvUW1UN01oUFE4dGZ0bzNyQWJXSERjRXA4?= =?utf-8?B?aDNNK3lzenJ5ZE1uMGlRdjRWNk05c0RmY0x4dktRSS8yZ1BhTHk4L3kzOU41?= =?utf-8?B?VWpBSGxQYWFMUlVUY1d6UjRBaDhja09pWTA3RFA0RWhpR2JpdUphUEt4NzlN?= =?utf-8?B?U0ExbnV2QSt1Vjk3TktHN0Y2S2hiUUN1UzQ5VEkvVm5aUURhcWZEeEE3ZlZk?= =?utf-8?B?dlhuak1LaW9CUHMzMW4zQUErNTRoN3VJMlp0dkQ1VU0vQW1VMVRZRG5qWXh4?= =?utf-8?B?M3NWL2dwRTFWbVVWeHhMS3pXUFZDeDk5N3UyRktUb3JGSFFIci9RVzZsbm5T?= =?utf-8?B?Y3NxcVBFSFlNbWs0UkFZNjJHWXRTZzNrMXBsdEhteXdrdEg4RlFpUHBvNklh?= =?utf-8?Q?L5UeqbVdCXye6DHUhSEcVYNDT6Qk359V?= X-Microsoft-Exchange-Diagnostics: 1;BY2PR12MB0664;6:QIY29CJNGZcPIKXx9F4XceGR+aTQsMZBDs4nR5LL0LtfRzOPxXpXUU9uczZfmgNjjm7IGb0zR468notXUCR1zqhfgys8FbFOkK6Qw804UBNIn4JPLALZRLpFekuRHvktO8V+vKMmRAQcG4YId9YxRtnMwgW90e9s+d85OxPim7oi/vlKErMMfCTcmEjUcx2UOQgcsd1ITe0spurjUCALZd5HsGtMinQA4ebMr5Mq9dZDZhPqBEFLb0FyLMPPX/1is316PDqF2DYlq5DXsNl2N54TGQp5CyT4tU68xzZ+qYBawYhf7g6vVNvZOco12Hz1uGo+0C3LwI5rwnuxMNG/bA==;5:aTAcMXTTGJsTgSAKjc2dULldNcu2csvXU+rrMenXjFeAFaE1x9cy9eQQWIwQuZJF9K1hgyU2zn/7S2V5IF1uhRwDhrBUr7uEMbrZh4IDRPWaKe/eY72Cbfriuly+EK9MlBEOmhdbC1EMwnX2ZBSRXQ==;24:r74EhUNJ3AjIJTuunn0mugFzhfQy+LF4lorb4O7RpgI0GlWYjqlouApT6vUaovqo8KQDqP1x11NGo07qZNeDnM8VxK6EkyYK+wGuAhnX7to=;7:5t/vpd/gV1g8z8V4iUusm8wefls2T1VKKUK8y5+SHqjU/sdJfT5LECVg5a7H2uzFH84GqdleViorsCxha8+NIrFKNBAML5nW7LB4z50ec2r+egL/jTlhBOHfBqWbDVpI5ELHRbavwkWeDBYe1p68y3gbYD0NGl0VxBUq7p04K1gulH2Orpia+HQwsdDom7OoIB6PwArYfUpJkdfD/YDAI6xBm5Wp16lsmjvNjLB+6lwVAFA49Ozm/jltbPSRVvrp SpamDiagnosticOutput: 1:99 SpamDiagnosticMetadata: NSPM X-Microsoft-Exchange-Diagnostics: 1;BY2PR12MB0664;20:iQANSj1V8M2cT8p6GbcfhgnCDOydPw7XzxgOs3L3X0b7JJxX7zhfAk1qt5gI4p+y7/7iKGwI+57Cd5jNtcfYGp+tZ4cm2eNRgolYyvYWjtD6pf8NbDA2+LSBxk+akdT5VVwDp9a+jPIdzj2ohiH+9ml1QypcwjiZLzoBgT+ncH8EPDW0c05AeIyYNJbB4c6h22Xw/ke8twHd1M67it9OevMTTBvc1M4wP0PCKS64Fr4+4wNOviIrwIoDHYTNx7iL X-OriginatorOrg: amd.com X-MS-Exchange-CrossTenant-OriginalArrivalTime: 22 Aug 2016 23:27:12.8269 (UTC) X-MS-Exchange-CrossTenant-FromEntityHeader: Hosted X-MS-Exchange-Transport-CrossTenantHeadersStamped: BY2PR12MB0664 Sender: linux-kernel-owner@vger.kernel.org List-ID: X-Mailing-List: linux-kernel@vger.kernel.org From: Tom Lendacky Modify the SVM cpuid update function to indicate if Secure Encrypted Virtualization (SEV) is active by setting the SEV KVM cpu features bit if SEV is active. SEV is active if Secure Memory Encryption is active in the host and the SEV_ENABLE bit of the VMCB is set. Signed-off-by: Tom Lendacky --- arch/x86/kvm/cpuid.c | 4 +++- arch/x86/kvm/svm.c | 18 ++++++++++++++++++ 2 files changed, 21 insertions(+), 1 deletion(-) diff --git a/arch/x86/kvm/cpuid.c b/arch/x86/kvm/cpuid.c index 3235e0f..d34faea 100644 --- a/arch/x86/kvm/cpuid.c +++ b/arch/x86/kvm/cpuid.c @@ -583,7 +583,7 @@ static inline int __do_cpuid_ent(struct kvm_cpuid_entry2 *entry, u32 function, entry->edx = 0; break; case 0x80000000: - entry->eax = min(entry->eax, 0x8000001a); + entry->eax = min(entry->eax, 0x8000001f); break; case 0x80000001: entry->edx &= kvm_cpuid_8000_0001_edx_x86_features; @@ -616,6 +616,8 @@ static inline int __do_cpuid_ent(struct kvm_cpuid_entry2 *entry, u32 function, break; case 0x8000001d: break; + case 0x8000001f: + break; /*Add support for Centaur's CPUID instruction*/ case 0xC0000000: /*Just support up to 0xC0000004 now*/ diff --git a/arch/x86/kvm/svm.c b/arch/x86/kvm/svm.c index 9b59260..211be94 100644 --- a/arch/x86/kvm/svm.c +++ b/arch/x86/kvm/svm.c @@ -43,6 +43,7 @@ #include #include +#include #include "trace.h" #define __ex(x) __kvm_handle_fault_on_reboot(x) @@ -4677,10 +4678,27 @@ static void svm_cpuid_update(struct kvm_vcpu *vcpu) { struct vcpu_svm *svm = to_svm(vcpu); struct kvm_cpuid_entry2 *entry; + struct vmcb_control_area *ca = &svm->vmcb->control; + struct kvm_cpuid_entry2 *features, *sev_info; /* Update nrips enabled cache */ svm->nrips_enabled = !!guest_cpuid_has_nrips(&svm->vcpu); + /* Check for Secure Encrypted Virtualization support */ + features = kvm_find_cpuid_entry(vcpu, KVM_CPUID_FEATURES, 0); + if (!features) + return; + + sev_info = kvm_find_cpuid_entry(vcpu, 0x8000001f, 0); + if (!sev_info) + return; + + if (ca->nested_ctl & SVM_NESTED_CTL_SEV_ENABLE) { + features->eax |= (1 << KVM_FEATURE_SEV); + cpuid(0x8000001f, &sev_info->eax, &sev_info->ebx, + &sev_info->ecx, &sev_info->edx); + } + if (!kvm_vcpu_apicv_active(vcpu)) return;