[v5,00/16] Add TDX Guest Support (shared-mm support)

Message

Kuppuswamy Sathyanarayanan Oct. 9, 2021, 12:36 a.m. UTC

Hi All,

Intel's Trust Domain Extensions (TDX) protect guest VMs from malicious
hosts and some physical attacks. Since VMM is untrusted entity, it does
not allow VMM to access guest private memory. Any memory that is required
for communication with VMM must be shared explicitly. This series adds
support to securely share guest memory with VMM when it is required by
guest.

Originally TDX did automatic sharing of every ioremap. But it was found that
this ends up with a lot of memory shared that is supposed to be private, for
example ACPI tables. Also in general since only a few drivers are expected
to be used it's safer to mark them explicitly (for virtio it actually only
needs two places). This gives the advantage of automatically preventing
other drivers from doing MMIO, which can happen in some cases even with
the device filter. There is still a command line option to override this option,
which allows to use all drivers.

This series is the continuation of the patch series titled "Add TDX Guest
Support (Initial support)", "Add TDX Guest Support (#VE handler support)"
and "Add TDX Guest Support (boot support)" which added initial support,
 #VE handler support and boot fixes for TDX guests. You  can find the
related patchsets in the following links.

[set 1, v9] - https://lore.kernel.org/lkml/[e-mail]/
[set 2, v7] - https://lore.kernel.org/lkml/[e-mail]/
[set 3, v7] - https://lore.kernel.org/lkml/[e-mail]/

Also please note that this series alone is not necessarily fully
functional. You need to apply all the above 3 patch series to get
a fully functional TDX guest.

You can find TDX related documents in the following link.

https://software.intel.com/content/www/br/pt/develop/articles/intel-trust-domain-extensions.html

Also, ioremap related changes in mips, parisc, alpha, sparch archs' are
only compile tested, and hence need help from the community users of these
archs' to make sure that it does not break any functionality.

In this patch series, following patches are in PCI domain and are
meant for the PCI domain reviewers.

  pci: Consolidate pci_iomap* and pci_iomap*wc
  pci: Add pci_iomap_shared{,_range}
  pci: Mark MSI data shared

Patch titled "asm/io.h: Add ioremap_host_shared fallback" adds
generic and arch specific ioremap_host_shared headers and are
meant to be reviewed by [e-mail],
[e-mail], [e-mail],
[e-mail], [e-mail].

Similarly patch titled "virtio: Use shared mappings for virtio
PCI devices" adds ioremap_host_shared() support for virtio drivers
and are meant to be reviewed by virtio driver maintainers.

I have CCed this patch series to all the related domain maintainers
and open lists. If you prefer to get only patches specific to your
domain, please let me know. I will fix this in next submission.

Changes since v4:
 * Since patch titled "x86/tdx: Get TD execution environment
   information via TDINFO" is required only by this patch set,
   moved it here.
 * Rest of the change log is included per patch.

Changes since v3:
 * Rebased on top of Tom Lendacky's protected guest
   changes (https://lore.kernel.org/patchwork/cover/1468760/)
 * Added new API to share io-reamapped memory selectively
   (using ioremap_shared())
 * Added new wrapper (pci_iomap_shared_range()) for PCI IO
   remap shared mappings use case.

Changes since v2:
 * Rebased on top of v5.14-rc1.
 * No functional changes.

Andi Kleen (6):
  PCI: Consolidate pci_iomap_range(), pci_iomap_wc_range()
  asm/io.h: Add ioremap_host_shared fallback
  PCI: Add pci_iomap_host_shared(), pci_iomap_host_shared_range()
  PCI: Mark MSI data shared
  virtio: Use shared mappings for virtio PCI devices
  x86/tdx: Implement ioremap_host_shared for x86

Isaku Yamahata (1):
  x86/tdx: ioapic: Add shared bit for IOAPIC base address

Kirill A. Shutemov (7):
  x86/mm: Move force_dma_unencrypted() to common code
  x86/tdx: Get TD execution environment information via TDINFO
  x86/tdx: Exclude Shared bit from physical_mask
  x86/tdx: Make pages shared in ioremap()
  x86/tdx: Add helper to do MapGPA hypercall
  x86/tdx: Make DMA pages shared
  x86/kvm: Use bounce buffers for TD guest

Kuppuswamy Sathyanarayanan (2):
  x86/tdx: Enable shared memory confidential guest flags for TDX guest
  x86/tdx: Add cmdline option to force use of ioremap_host_shared

 .../admin-guide/kernel-parameters.rst         |   1 +
 .../admin-guide/kernel-parameters.txt         |  12 ++
 Documentation/driver-api/device-io.rst        |   7 +
 arch/alpha/include/asm/io.h                   |   2 +
 arch/mips/include/asm/io.h                    |   2 +
 arch/parisc/include/asm/io.h                  |   2 +
 arch/sparc/include/asm/io_64.h                |   2 +
 arch/x86/Kconfig                              |   9 +-
 arch/x86/include/asm/io.h                     |   6 +
 arch/x86/include/asm/mem_encrypt_common.h     |  21 +++
 arch/x86/include/asm/pgtable.h                |   5 +
 arch/x86/include/asm/tdx.h                    |  22 +++
 arch/x86/kernel/apic/io_apic.c                |  18 ++-
 arch/x86/kernel/cc_platform.c                 |   3 +
 arch/x86/kernel/tdx.c                         | 109 +++++++++++++++
 arch/x86/mm/Makefile                          |   2 +
 arch/x86/mm/ioremap.c                         |  64 +++++++--
 arch/x86/mm/mem_encrypt.c                     |   8 +-
 arch/x86/mm/mem_encrypt_common.c              |  40 ++++++
 arch/x86/mm/pat/set_memory.c                  |  45 +++++-
 drivers/pci/msi.c                             |   2 +-
 drivers/virtio/virtio_pci_modern_dev.c        |   2 +-
 include/asm-generic/io.h                      |   5 +
 include/asm-generic/pci_iomap.h               |   6 +
 include/linux/cc_platform.h                   |  13 ++
 lib/pci_iomap.c                               | 131 +++++++++++++-----
 26 files changed, 475 insertions(+), 64 deletions(-)
 create mode 100644 arch/x86/include/asm/mem_encrypt_common.h
 create mode 100644 arch/x86/mm/mem_encrypt_common.c