lkml.org 
[lkml]   [2021]   [Mar]   [2]   [last100]   RSS Feed
Views: [wrap][no wrap]   [headers]  [forward] 
 
Messages in this thread
    /
    Date
    Subject[PATCH v3 00/32] KVM: arm64: A stage 2 for the host
    From
    Hi all,

    This is the v3 of the series previously posted here:

    https://lore.kernel.org/kvmarm/20201117181607.1761516-1-qperret@google.com/

    This basically allows us to wrap the host with a stage 2 when running in
    nVHE, hence paving the way for protecting guest memory from the host in
    the future (among other use-cases). For more details about the
    motivation and the design angle taken here, I would recommend to have a
    look at the cover letter of v1, and/or to watch these presentations at
    LPC [1] and KVM forum 2020 [2].

    V3 includes a bunch of clean-ups and small refactorings all over the
    place as well as a few new features. Specifically, this now allows us to
    remove memory pages from the host stage 2 cleanly, and this series does
    so for all the .hyp memory sections (which has uncovered existing bugs
    upstream and in v2 of this series -- see [3] and [4]). This also now
    makes good use of block mappings whenever that is possible, and has
    gotten a bit more testing on real hardware (which helped uncover other
    bugs [5]).

    The other changes to v3 include:

    - clean-ups, refactoring and extra comments all over the place (Will);

    - dropped fdt hook in favor of memblock API now that the relevant
    patches ([6]) are merged (Rob);

    - moved the CPU feature copy stuff to __init/__initdata (Marc);

    - fixed FWB support (Mate);

    - rebased on v5.12-rc1.

    This series depends on Will's vCPU context fix ([5]) and Marc's PMU
    fixes ([7]). And here's a branch with all the goodies applied:

    https://android-kvm.googlesource.com/linux qperret/host-stage2-v3

    Thanks,
    Quentin

    [1] https://youtu.be/54q6RzS9BpQ?t=10859
    [2] https://youtu.be/wY-u6n75iXc
    [3] https://lore.kernel.org/kvmarm/20210203141931.615898-1-qperret@google.com/
    [4] https://lore.kernel.org/kvmarm/20210128173850.2478161-1-qperret@google.com/
    [5] https://lore.kernel.org/kvmarm/20210226181211.14542-1-will@kernel.org/
    [6] https://lore.kernel.org/lkml/20210115114544.1830068-1-qperret@google.com/
    [7] https://git.kernel.org/pub/scm/linux/kernel/git/maz/arm-platforms.git/log/?h=kvm-arm64/pmu-undef-NV


    Quentin Perret (29):
    KVM: arm64: Initialize kvm_nvhe_init_params early
    KVM: arm64: Avoid free_page() in page-table allocator
    KVM: arm64: Factor memory allocation out of pgtable.c
    KVM: arm64: Introduce a BSS section for use at Hyp
    KVM: arm64: Make kvm_call_hyp() a function call at Hyp
    KVM: arm64: Allow using kvm_nvhe_sym() in hyp code
    KVM: arm64: Introduce an early Hyp page allocator
    KVM: arm64: Stub CONFIG_DEBUG_LIST at Hyp
    KVM: arm64: Introduce a Hyp buddy page allocator
    KVM: arm64: Enable access to sanitized CPU features at EL2
    KVM: arm64: Factor out vector address calculation
    KVM: arm64: Prepare the creation of s1 mappings at EL2
    KVM: arm64: Elevate hypervisor mappings creation at EL2
    KVM: arm64: Use kvm_arch for stage 2 pgtable
    KVM: arm64: Use kvm_arch in kvm_s2_mmu
    KVM: arm64: Set host stage 2 using kvm_nvhe_init_params
    KVM: arm64: Refactor kvm_arm_setup_stage2()
    KVM: arm64: Refactor __load_guest_stage2()
    KVM: arm64: Refactor __populate_fault_info()
    KVM: arm64: Make memcache anonymous in pgtable allocator
    KVM: arm64: Reserve memory for host stage 2
    KVM: arm64: Sort the hypervisor memblocks
    KVM: arm64: Introduce PROT_NONE mappings for stage 2
    KVM: arm64: Refactor stage2_map_set_prot_attr()
    KVM: arm64: Add kvm_pgtable_stage2_idmap_greedy()
    KVM: arm64: Wrap the host with a stage 2
    KVM: arm64: Page-align the .hyp sections
    KVM: arm64: Disable PMU support in protected mode
    KVM: arm64: Protect the .hyp sections from the host

    Will Deacon (3):
    arm64: lib: Annotate {clear,copy}_page() as position-independent
    KVM: arm64: Link position-independent string routines into .hyp.text
    arm64: kvm: Add standalone ticket spinlock implementation for use at
    hyp

    arch/arm64/include/asm/cpufeature.h | 1 +
    arch/arm64/include/asm/hyp_image.h | 7 +
    arch/arm64/include/asm/kvm_asm.h | 9 +
    arch/arm64/include/asm/kvm_cpufeature.h | 19 ++
    arch/arm64/include/asm/kvm_host.h | 19 +-
    arch/arm64/include/asm/kvm_hyp.h | 8 +
    arch/arm64/include/asm/kvm_mmu.h | 23 +-
    arch/arm64/include/asm/kvm_pgtable.h | 117 ++++++-
    arch/arm64/include/asm/sections.h | 1 +
    arch/arm64/kernel/asm-offsets.c | 3 +
    arch/arm64/kernel/cpufeature.c | 13 +
    arch/arm64/kernel/image-vars.h | 30 ++
    arch/arm64/kernel/vmlinux.lds.S | 74 +++--
    arch/arm64/kvm/arm.c | 199 ++++++++++--
    arch/arm64/kvm/hyp/Makefile | 2 +-
    arch/arm64/kvm/hyp/include/hyp/switch.h | 37 ++-
    arch/arm64/kvm/hyp/include/nvhe/early_alloc.h | 14 +
    arch/arm64/kvm/hyp/include/nvhe/gfp.h | 55 ++++
    arch/arm64/kvm/hyp/include/nvhe/mem_protect.h | 36 +++
    arch/arm64/kvm/hyp/include/nvhe/memory.h | 52 +++
    arch/arm64/kvm/hyp/include/nvhe/mm.h | 92 ++++++
    arch/arm64/kvm/hyp/include/nvhe/spinlock.h | 92 ++++++
    arch/arm64/kvm/hyp/nvhe/Makefile | 9 +-
    arch/arm64/kvm/hyp/nvhe/cache.S | 13 +
    arch/arm64/kvm/hyp/nvhe/cpufeature.c | 8 +
    arch/arm64/kvm/hyp/nvhe/early_alloc.c | 54 ++++
    arch/arm64/kvm/hyp/nvhe/hyp-init.S | 46 ++-
    arch/arm64/kvm/hyp/nvhe/hyp-main.c | 69 ++++
    arch/arm64/kvm/hyp/nvhe/hyp.lds.S | 1 +
    arch/arm64/kvm/hyp/nvhe/mem_protect.c | 235 ++++++++++++++
    arch/arm64/kvm/hyp/nvhe/mm.c | 173 ++++++++++
    arch/arm64/kvm/hyp/nvhe/page_alloc.c | 195 ++++++++++++
    arch/arm64/kvm/hyp/nvhe/psci-relay.c | 4 +-
    arch/arm64/kvm/hyp/nvhe/setup.c | 212 +++++++++++++
    arch/arm64/kvm/hyp/nvhe/stub.c | 22 ++
    arch/arm64/kvm/hyp/nvhe/switch.c | 12 +-
    arch/arm64/kvm/hyp/nvhe/tlb.c | 4 +-
    arch/arm64/kvm/hyp/pgtable.c | 298 ++++++++++++++----
    arch/arm64/kvm/hyp/reserved_mem.c | 113 +++++++
    arch/arm64/kvm/mmu.c | 115 ++++++-
    arch/arm64/kvm/perf.c | 3 +-
    arch/arm64/kvm/pmu.c | 8 +-
    arch/arm64/kvm/reset.c | 42 +--
    arch/arm64/kvm/sys_regs.c | 21 ++
    arch/arm64/lib/clear_page.S | 4 +-
    arch/arm64/lib/copy_page.S | 4 +-
    arch/arm64/mm/init.c | 3 +
    47 files changed, 2356 insertions(+), 215 deletions(-)
    create mode 100644 arch/arm64/include/asm/kvm_cpufeature.h
    create mode 100644 arch/arm64/kvm/hyp/include/nvhe/early_alloc.h
    create mode 100644 arch/arm64/kvm/hyp/include/nvhe/gfp.h
    create mode 100644 arch/arm64/kvm/hyp/include/nvhe/mem_protect.h
    create mode 100644 arch/arm64/kvm/hyp/include/nvhe/memory.h
    create mode 100644 arch/arm64/kvm/hyp/include/nvhe/mm.h
    create mode 100644 arch/arm64/kvm/hyp/include/nvhe/spinlock.h
    create mode 100644 arch/arm64/kvm/hyp/nvhe/cache.S
    create mode 100644 arch/arm64/kvm/hyp/nvhe/cpufeature.c
    create mode 100644 arch/arm64/kvm/hyp/nvhe/early_alloc.c
    create mode 100644 arch/arm64/kvm/hyp/nvhe/mem_protect.c
    create mode 100644 arch/arm64/kvm/hyp/nvhe/mm.c
    create mode 100644 arch/arm64/kvm/hyp/nvhe/page_alloc.c
    create mode 100644 arch/arm64/kvm/hyp/nvhe/setup.c
    create mode 100644 arch/arm64/kvm/hyp/nvhe/stub.c
    create mode 100644 arch/arm64/kvm/hyp/reserved_mem.c

    --
    2.30.1.766.gb4fecdf3b7-goog

    \
     
     \ /
      Last update: 2021-03-02 19:13    [W:7.735 / U:0.260 seconds]
    ©2003-2020 Jasper Spaans|hosted at Digital Ocean and TransIP|Read the blog|Advertise on this site