[00/10] KVM: MMU changes for confidential computing

Message

Paolo Bonzini April 12, 2024, 5:35 p.m. UTC

This includes the MMU parts of "TDX/SNP part 1 of n"[1] while the rest
was posted as "KVM: guest_memfd: New hooks and functionality for SEV-SNP
and TDX"[2] last week.

It includes two basic parts:

- Allow non-zero value for non-present SPTE and removed SPTE, so that
  TDX can set the "suppress VE" bit

- Use PFERR_GUEST_ENC_MASK to indicate fault is private.

The changes from v1 are:

- splitting #VE architectural definitions to their own patch

- replace the module parameter to trap #VE with a Kconfig symbol,
  enabling it by default if PROVE_MMU || DEBUG_KERNEL.

- Sean's suggestion that "if we're going to bother plumbing in the error
  code, then we should use it to do sanity checks" on async page faults.

- removing the dead function kvm_mmu_set_mmio_spte_value(), which can
  be added by TDX patches when they need it

Paolo

[1] https://patchew.org/linux/[e-mail]/
[2] https://patchew.org/linux/[e-mail]/

Isaku Yamahata (3):
  KVM: x86/mmu: Add Suppress VE bit to EPT
    shadow_mmio_mask/shadow_present_mask
  KVM: VMX: Introduce test mode related to EPT violation VE
  KVM: x86/mmu: Pass around full 64-bit error code for KVM page faults

Paolo Bonzini (3):
  KVM, x86: add architectural support code for #VE
  KVM: x86/mmu: Use PFERR_GUEST_ENC_MASK to indicate fault is private
  KVM: x86/mmu: check for invalid async page faults involving private
    memory

Sean Christopherson (4):
  KVM: Allow page-sized MMU caches to be initialized with custom 64-bit
    values
  KVM: x86/mmu: Replace hardcoded value 0 for the initial value for SPTE
  KVM: x86/mmu: Allow non-zero value for non-present SPTE and removed
    SPTE
  KVM: x86/mmu: Track shadow MMIO value on a per-VM basis

 arch/x86/include/asm/kvm_host.h |  5 +++
 arch/x86/include/asm/vmx.h      | 13 +++++++
 arch/x86/kvm/Kconfig            | 13 +++++++
 arch/x86/kvm/mmu/mmu.c          | 50 ++++++++++++++++---------
 arch/x86/kvm/mmu/mmu_internal.h |  6 +--
 arch/x86/kvm/mmu/mmutrace.h     |  2 +-
 arch/x86/kvm/mmu/paging_tmpl.h  |  4 +-
 arch/x86/kvm/mmu/spte.c         | 10 +++--
 arch/x86/kvm/mmu/spte.h         | 22 +++++++++--
 arch/x86/kvm/mmu/tdp_mmu.c      | 18 ++++-----
 arch/x86/kvm/vmx/vmcs.h         |  5 +++
 arch/x86/kvm/vmx/vmx.c          | 65 ++++++++++++++++++++++++++++++++-
 arch/x86/kvm/vmx/vmx.h          |  6 ++-
 include/linux/kvm_types.h       |  1 +
 virt/kvm/kvm_main.c             | 16 +++++++-
 15 files changed, 193 insertions(+), 43 deletions(-)