a447edb5e5
- Include upstream patches targeted for the next stable release (bug fixes only) block-io-fix-bdrv_co_do_copy_on_readv.patch compat-disable-edid-on-correct-virtio-gp.patch target-ppc-Fix-rlwinm-on-ppc64.patch vhost-correctly-turn-on-VIRTIO_F_IOMMU_P.patch - s390x Protected Virtualization support - start and control guest in secure mode. (note: binary patch from patch series dropped since for s390x we rebuild the patched binary anyways) (bsc#1167075 jsc#SLE-7407) s390-sclp-improve-special-wait-psw-logic.patch s390x-Add-missing-vcpu-reset-functions.patch s390x-Add-SIDA-memory-ops.patch s390x-Add-unpack-facility-feature-to-GA1.patch s390x-Beautify-diag308-handling.patch s390x-Don-t-do-a-normal-reset-on-the-ini.patch s390x-ipl-Consolidate-iplb-validity-chec.patch s390x-kvm-Make-kvm_sclp_service_call-voi.patch s390x-Move-clear-reset.patch s390x-Move-diagnose-308-subcodes-and-rcs.patch s390x-Move-initial-reset.patch s390x-Move-reset-normal-to-shared-reset-.patch s390x-protvirt-Add-migration-blocker.patch s390x-protvirt-Disable-address-checks-fo.patch s390x-protvirt-Handle-SIGP-store-status-.patch s390x-protvirt-Inhibit-balloon-when-swit.patch s390x-protvirt-KVM-intercept-changes.patch s390x-protvirt-Move-diag-308-data-over-S.patch s390x-protvirt-Move-IO-control-structure.patch s390x-protvirt-Move-STSI-data-over-SIDAD.patch s390x-protvirt-SCLP-interpretation.patch s390x-protvirt-Set-guest-IPL-PSW.patch s390x-protvirt-Support-unpack-facility.patch Sync-pv.patch OBS-URL: https://build.opensuse.org/request/show/787000 OBS-URL: https://build.opensuse.org/package/show/Virtualization/qemu?expand=0&rev=538
136 lines
5.0 KiB
Diff
136 lines
5.0 KiB
Diff
From: Janosch Frank <frankja@linux.ibm.com>
|
|
Date: Wed, 5 Feb 2020 06:57:35 -0500
|
|
Subject: s390x: Add SIDA memory ops
|
|
|
|
References: bsc#1167075
|
|
|
|
Protected guests save the instruction control blocks in the SIDA
|
|
instead of QEMU/KVM directly accessing the guest's memory.
|
|
|
|
Let's introduce new functions to access the SIDA.
|
|
|
|
The memops for doing so are available with KVM_CAP_S390_PROTECTED, so
|
|
let's check for that.
|
|
|
|
Signed-off-by: Janosch Frank <frankja@linux.ibm.com>
|
|
Reviewed-by: David Hildenbrand <david@redhat.com>
|
|
Reviewed-by: Christian Borntraeger <borntraeger@de.ibm.com>
|
|
Reviewed-by: Claudio Imbrenda <imbrenda@linux.ibm.com>
|
|
Reviewed-by: Cornelia Huck <cohuck@redhat.com>
|
|
(cherry picked from commit a9f21cec3bc9c86062c7c24bb2143d22cb3c2950)
|
|
Signed-off-by: Bruce Rogers <brogers@suse.com>
|
|
---
|
|
target/s390x/cpu.h | 7 ++++++-
|
|
target/s390x/kvm.c | 26 ++++++++++++++++++++++++++
|
|
target/s390x/kvm_s390x.h | 2 ++
|
|
target/s390x/mmu_helper.c | 14 ++++++++++++++
|
|
4 files changed, 48 insertions(+), 1 deletion(-)
|
|
|
|
diff --git a/target/s390x/cpu.h b/target/s390x/cpu.h
|
|
index d2af13b345ccd9094f82385cd528..2ec0f78b48ee15978b62f5fdc1b2 100644
|
|
--- a/target/s390x/cpu.h
|
|
+++ b/target/s390x/cpu.h
|
|
@@ -821,7 +821,12 @@ int s390_cpu_virt_mem_rw(S390CPU *cpu, vaddr laddr, uint8_t ar, void *hostbuf,
|
|
#define s390_cpu_virt_mem_check_write(cpu, laddr, ar, len) \
|
|
s390_cpu_virt_mem_rw(cpu, laddr, ar, NULL, len, true)
|
|
void s390_cpu_virt_mem_handle_exc(S390CPU *cpu, uintptr_t ra);
|
|
-
|
|
+int s390_cpu_pv_mem_rw(S390CPU *cpu, unsigned int offset, void *hostbuf,
|
|
+ int len, bool is_write);
|
|
+#define s390_cpu_pv_mem_read(cpu, offset, dest, len) \
|
|
+ s390_cpu_pv_mem_rw(cpu, offset, dest, len, false)
|
|
+#define s390_cpu_pv_mem_write(cpu, offset, dest, len) \
|
|
+ s390_cpu_pv_mem_rw(cpu, offset, dest, len, true)
|
|
|
|
/* sigp.c */
|
|
int s390_cpu_restart(S390CPU *cpu);
|
|
diff --git a/target/s390x/kvm.c b/target/s390x/kvm.c
|
|
index abeeaaa67452b0b938557b0d0dea..941e4df630ad9b3dc780d3c92e6b 100644
|
|
--- a/target/s390x/kvm.c
|
|
+++ b/target/s390x/kvm.c
|
|
@@ -154,6 +154,7 @@ static int cap_ri;
|
|
static int cap_gs;
|
|
static int cap_hpage_1m;
|
|
static int cap_vcpu_resets;
|
|
+static int cap_protected;
|
|
|
|
static int active_cmma;
|
|
|
|
@@ -351,6 +352,7 @@ int kvm_arch_init(MachineState *ms, KVMState *s)
|
|
cap_mem_op = kvm_check_extension(s, KVM_CAP_S390_MEM_OP);
|
|
cap_s390_irq = kvm_check_extension(s, KVM_CAP_S390_INJECT_IRQ);
|
|
cap_vcpu_resets = kvm_check_extension(s, KVM_CAP_S390_VCPU_RESETS);
|
|
+ cap_protected = kvm_check_extension(s, KVM_CAP_S390_PROTECTED);
|
|
|
|
if (!kvm_check_extension(s, KVM_CAP_S390_GMAP)
|
|
|| !kvm_check_extension(s, KVM_CAP_S390_COW)) {
|
|
@@ -848,6 +850,30 @@ int kvm_s390_mem_op(S390CPU *cpu, vaddr addr, uint8_t ar, void *hostbuf,
|
|
return ret;
|
|
}
|
|
|
|
+int kvm_s390_mem_op_pv(S390CPU *cpu, uint64_t offset, void *hostbuf,
|
|
+ int len, bool is_write)
|
|
+{
|
|
+ struct kvm_s390_mem_op mem_op = {
|
|
+ .sida_offset = offset,
|
|
+ .size = len,
|
|
+ .op = is_write ? KVM_S390_MEMOP_SIDA_WRITE
|
|
+ : KVM_S390_MEMOP_SIDA_READ,
|
|
+ .buf = (uint64_t)hostbuf,
|
|
+ };
|
|
+ int ret;
|
|
+
|
|
+ if (!cap_mem_op || !cap_protected) {
|
|
+ return -ENOSYS;
|
|
+ }
|
|
+
|
|
+ ret = kvm_vcpu_ioctl(CPU(cpu), KVM_S390_MEM_OP, &mem_op);
|
|
+ if (ret < 0) {
|
|
+ error_report("KVM_S390_MEM_OP failed: %s", strerror(-ret));
|
|
+ abort();
|
|
+ }
|
|
+ return ret;
|
|
+}
|
|
+
|
|
/*
|
|
* Legacy layout for s390:
|
|
* Older S390 KVM requires the topmost vma of the RAM to be
|
|
diff --git a/target/s390x/kvm_s390x.h b/target/s390x/kvm_s390x.h
|
|
index dea813f450153c34e1269424772d..6ab17c81b73a0011e32213552698 100644
|
|
--- a/target/s390x/kvm_s390x.h
|
|
+++ b/target/s390x/kvm_s390x.h
|
|
@@ -19,6 +19,8 @@ void kvm_s390_vcpu_interrupt(S390CPU *cpu, struct kvm_s390_irq *irq);
|
|
void kvm_s390_access_exception(S390CPU *cpu, uint16_t code, uint64_t te_code);
|
|
int kvm_s390_mem_op(S390CPU *cpu, vaddr addr, uint8_t ar, void *hostbuf,
|
|
int len, bool is_write);
|
|
+int kvm_s390_mem_op_pv(S390CPU *cpu, vaddr addr, void *hostbuf, int len,
|
|
+ bool is_write);
|
|
void kvm_s390_program_interrupt(S390CPU *cpu, uint16_t code);
|
|
int kvm_s390_set_cpu_state(S390CPU *cpu, uint8_t cpu_state);
|
|
void kvm_s390_vcpu_interrupt_pre_save(S390CPU *cpu);
|
|
diff --git a/target/s390x/mmu_helper.c b/target/s390x/mmu_helper.c
|
|
index c9f3f347501097b894333a36cac3..ec8befbdc87d4c88d83baeeab20e 100644
|
|
--- a/target/s390x/mmu_helper.c
|
|
+++ b/target/s390x/mmu_helper.c
|
|
@@ -474,6 +474,20 @@ static int translate_pages(S390CPU *cpu, vaddr addr, int nr_pages,
|
|
return 0;
|
|
}
|
|
|
|
+int s390_cpu_pv_mem_rw(S390CPU *cpu, unsigned int offset, void *hostbuf,
|
|
+ int len, bool is_write)
|
|
+{
|
|
+ int ret;
|
|
+
|
|
+ if (kvm_enabled()) {
|
|
+ ret = kvm_s390_mem_op_pv(cpu, offset, hostbuf, len, is_write);
|
|
+ } else {
|
|
+ /* Protected Virtualization is a KVM/Hardware only feature */
|
|
+ g_assert_not_reached();
|
|
+ }
|
|
+ return ret;
|
|
+}
|
|
+
|
|
/**
|
|
* s390_cpu_virt_mem_rw:
|
|
* @laddr: the logical start address
|