From patchwork Mon Mar 6 14:13:57 2023 Content-Type: text/plain; charset="utf-8" MIME-Version: 1.0 Content-Transfer-Encoding: 7bit X-Patchwork-Submitter: "Huang, Kai" X-Patchwork-Id: 13161227 Return-Path: X-Spam-Checker-Version: SpamAssassin 3.4.0 (2014-02-07) on aws-us-west-2-korg-lkml-1.web.codeaurora.org Received: from kanga.kvack.org (kanga.kvack.org [205.233.56.17]) by smtp.lore.kernel.org (Postfix) with ESMTP id 8AB42C678D4 for ; Mon, 6 Mar 2023 14:15:31 +0000 (UTC) Received: by kanga.kvack.org (Postfix) id EAF86280003; Mon, 6 Mar 2023 09:15:30 -0500 (EST) Received: by kanga.kvack.org (Postfix, from userid 40) id E5EF66B0073; Mon, 6 Mar 2023 09:15:30 -0500 (EST) X-Delivered-To: int-list-linux-mm@kvack.org Received: by kanga.kvack.org (Postfix, from userid 63042) id D26B9280003; Mon, 6 Mar 2023 09:15:30 -0500 (EST) X-Delivered-To: linux-mm@kvack.org Received: from relay.hostedemail.com (smtprelay0016.hostedemail.com [216.40.44.16]) by kanga.kvack.org (Postfix) with ESMTP id C1F4D6B0071 for ; Mon, 6 Mar 2023 09:15:30 -0500 (EST) Received: from smtpin27.hostedemail.com (a10.router.float.18 [10.200.18.1]) by unirelay06.hostedemail.com (Postfix) with ESMTP id 6241AAAD51 for ; Mon, 6 Mar 2023 14:15:30 +0000 (UTC) X-FDA: 80538671220.27.D8A487B Received: from mga09.intel.com (mga09.intel.com [134.134.136.24]) by imf05.hostedemail.com (Postfix) with ESMTP id 399AF100014 for ; Mon, 6 Mar 2023 14:15:28 +0000 (UTC) Authentication-Results: imf05.hostedemail.com; dkim=pass header.d=intel.com header.s=Intel header.b="Fbd/sutP"; dmarc=pass (policy=none) header.from=intel.com; spf=pass (imf05.hostedemail.com: domain of kai.huang@intel.com designates 134.134.136.24 as permitted sender) smtp.mailfrom=kai.huang@intel.com ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=hostedemail.com; s=arc-20220608; t=1678112128; h=from:from:sender:reply-to:subject:subject:date:date: message-id:message-id:to:to:cc:cc:mime-version:mime-version: content-type:content-transfer-encoding:content-transfer-encoding: in-reply-to:in-reply-to:references:references:dkim-signature; bh=u5vNtzDXOazhHJgMjKZtV05G28Ic8ScGqx4FkjZOidc=; b=poJqnHPqBpHkb68AqCJ+fL/Wn4Z7mpryE8OdTAkG4U0m8hOKP5l2bkm0mUsQq8FWst8Z0U DIZzCu7XtYgflnSaPDPbbHxI+6RJUYkFDoxTt+4VMqojQqSkdUxPcg5Mw+wRW0g5lWJAcI U4DhfmA+LYsJydrXPihfaKr2qz/+5Ww= ARC-Authentication-Results: i=1; imf05.hostedemail.com; dkim=pass header.d=intel.com header.s=Intel header.b="Fbd/sutP"; dmarc=pass (policy=none) header.from=intel.com; spf=pass (imf05.hostedemail.com: domain of kai.huang@intel.com designates 134.134.136.24 as permitted sender) smtp.mailfrom=kai.huang@intel.com ARC-Seal: i=1; s=arc-20220608; d=hostedemail.com; t=1678112128; a=rsa-sha256; cv=none; b=o8Q5iFl4rVNqq2TNjg2/PuFWvhJ/Eomsz91YEMnk3IzJmjTluO0w6R1aTqWLwyH0C5Y2O4 FFZeCHHI8jUSz84jsYRblkPua5W7vL37D3O004oruvfU0nU38wswAgCESqG7yr6SmG9IWD JRFxHCFSB3rYnzOwQzRtM6juhKQFaYE= DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=intel.com; i=@intel.com; q=dns/txt; s=Intel; t=1678112128; x=1709648128; h=from:to:cc:subject:date:message-id:in-reply-to: references:mime-version:content-transfer-encoding; bh=q2ZzkvRd96FY3VJXKPI1qSfLMJtLptSGiDgztHPFXG0=; b=Fbd/sutPnSpZBV9VuPtdqEPpTX/jep3A5Jtq6c/t24gHTwLYGAjLpxp8 AbMLNnMHq8bXbKUrAJzdGlghMZ34kTRHSNlCwxncG5ItMIBVjikwINI6p fh+yy+7EICp9WPfrj1+uEy3sbG/8Q4cL1K/hW2D32jpogVF60Jj4ju1b7 Zl3HfijklaN4YU7aZpTJhcLk7OyRX0fZ73xWLJSKovKxFjUewPQpabyGn vGGWHQS4dXPs5pSTU/mnORd+RLRuhBO26I7dLFEAI5HquLy+TNjBRQS77 B+qpor4XYLlCl0WCc86CVL/GybUY+pSwy0pjEUdOHLtfGh5r3RCBV9IRZ g==; X-IronPort-AV: E=McAfee;i="6500,9779,10641"; a="337080261" X-IronPort-AV: E=Sophos;i="5.98,238,1673942400"; d="scan'208";a="337080261" Received: from fmsmga003.fm.intel.com ([10.253.24.29]) by orsmga102.jf.intel.com with ESMTP/TLS/ECDHE-RSA-AES256-GCM-SHA384; 06 Mar 2023 06:15:27 -0800 X-ExtLoop1: 1 X-IronPort-AV: E=McAfee;i="6500,9779,10641"; a="765232461" X-IronPort-AV: E=Sophos;i="5.98,238,1673942400"; d="scan'208";a="765232461" Received: from jwhisle1-mobl2.amr.corp.intel.com (HELO khuang2-desk.gar.corp.intel.com) ([10.212.92.57]) by fmsmga003-auth.fm.intel.com with ESMTP/TLS/ECDHE-RSA-AES256-GCM-SHA384; 06 Mar 2023 06:15:23 -0800 From: Kai Huang To: linux-kernel@vger.kernel.org, kvm@vger.kernel.org Cc: linux-mm@kvack.org, dave.hansen@intel.com, peterz@infradead.org, tglx@linutronix.de, seanjc@google.com, pbonzini@redhat.com, dan.j.williams@intel.com, rafael.j.wysocki@intel.com, kirill.shutemov@linux.intel.com, ying.huang@intel.com, reinette.chatre@intel.com, len.brown@intel.com, tony.luck@intel.com, ak@linux.intel.com, isaku.yamahata@intel.com, chao.gao@intel.com, sathyanarayanan.kuppuswamy@linux.intel.com, david@redhat.com, bagasdotme@gmail.com, sagis@google.com, imammedo@redhat.com, kai.huang@intel.com Subject: [PATCH v10 12/16] x86/virt/tdx: Configure TDX module with the TDMRs and global KeyID Date: Tue, 7 Mar 2023 03:13:57 +1300 Message-Id: <1685ddaf26d80bc356cfe0d0d571d142293bbd34.1678111292.git.kai.huang@intel.com> X-Mailer: git-send-email 2.39.2 In-Reply-To: References: MIME-Version: 1.0 X-Rspamd-Queue-Id: 399AF100014 X-Rspamd-Server: rspam09 X-Rspam-User: X-Stat-Signature: qftfpsdfifpjhnyzu7457sn7nrg8tb1z X-HE-Tag: 1678112128-804347 X-HE-Meta: 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 fXGTiGEn WdwTYeus4VyLze+3bvEfjIxz3KlaKNk3DwtUcuGLqqR1IOT1vDD7OSYp4ufGjEKrNkFP72w2w8FmmhN4j+Uq/i9p2lyYpLorpPSgbYo1bFEIdUlo+WO4gZa7QrQDEmosXYJ4AeKFYlaRJfzhBwTUlhbKWh1BLqLSG+AUE0fPnbLZ65X0= X-Bogosity: Ham, tests=bogofilter, spamicity=0.000000, version=1.2.4 Sender: owner-linux-mm@kvack.org Precedence: bulk X-Loop: owner-majordomo@kvack.org List-ID: The TDX module uses a private KeyID as the "global KeyID" for mapping things like the PAMT and other TDX metadata. This KeyID has already been reserved when detecting TDX during the kernel early boot. After the list of "TD Memory Regions" (TDMRs) has been constructed to cover all TDX-usable memory regions, the next step is to pass them to the TDX module together with the global KeyID. Signed-off-by: Kai Huang Reviewed-by: Isaku Yamahata --- v9 -> v10: - Code change due to change static 'tdx_tdmr_list' to local 'tdmr_list'. v8 -> v9: - Removed 'i.e.' in changelog and removed the passive voice (Dave). - Improved changelog (Dave). - Changed the way to allocate aligned PA array (Dave). - Moved reserving the TDX global KeyID to the second patch, and also changed 'tdx_keyid_start' and 'nr_tdx_keyid' to guest's KeyIDs in that patch (Dave). v7 -> v8: - Merged "Reserve TDX module global KeyID" patch to this patch, and removed 'tdx_global_keyid' but use 'tdx_keyid_start' directly. - Changed changelog accordingly. - Changed how to allocate aligned array (Dave). --- arch/x86/virt/vmx/tdx/tdx.c | 41 ++++++++++++++++++++++++++++++++++++- arch/x86/virt/vmx/tdx/tdx.h | 2 ++ 2 files changed, 42 insertions(+), 1 deletion(-) diff --git a/arch/x86/virt/vmx/tdx/tdx.c b/arch/x86/virt/vmx/tdx/tdx.c index 99d2e8d939d3..28562cf88414 100644 --- a/arch/x86/virt/vmx/tdx/tdx.c +++ b/arch/x86/virt/vmx/tdx/tdx.c @@ -26,6 +26,7 @@ #include #include #include +#include #include #include #include @@ -1025,6 +1026,39 @@ static int construct_tdmrs(struct list_head *tmb_list, return ret; } +static int config_tdx_module(struct tdmr_info_list *tdmr_list, u64 global_keyid) +{ + u64 *tdmr_pa_array; + size_t array_sz; + int i, ret; + + /* + * TDMRs are passed to the TDX module via an array of physical + * addresses of each TDMR. The array itself also has certain + * alignment requirement. + */ + array_sz = tdmr_list->nr_consumed_tdmrs * sizeof(u64); + array_sz = roundup_pow_of_two(array_sz); + if (array_sz < TDMR_INFO_PA_ARRAY_ALIGNMENT) + array_sz = TDMR_INFO_PA_ARRAY_ALIGNMENT; + + tdmr_pa_array = kzalloc(array_sz, GFP_KERNEL); + if (!tdmr_pa_array) + return -ENOMEM; + + for (i = 0; i < tdmr_list->nr_consumed_tdmrs; i++) + tdmr_pa_array[i] = __pa(tdmr_entry(tdmr_list, i)); + + ret = seamcall(TDH_SYS_CONFIG, __pa(tdmr_pa_array), + tdmr_list->nr_consumed_tdmrs, + global_keyid, 0, NULL, NULL); + + /* Free the array as it is not required anymore. */ + kfree(tdmr_pa_array); + + return ret; +} + static int init_tdx_module(void) { static DECLARE_PADDED_STRUCT(tdsysinfo_struct, tdsysinfo, @@ -1065,10 +1099,14 @@ static int init_tdx_module(void) if (ret) goto out_free_tdmrs; + /* Pass the TDMRs and the global KeyID to the TDX module */ + ret = config_tdx_module(&tdmr_list, tdx_global_keyid); + if (ret) + goto out_free_pamts; + /* * TODO: * - * - Configure the TDMRs and the global KeyID to the TDX module. * - Configure the global KeyID on all packages. * - Initialize all TDMRs. * @@ -1076,6 +1114,7 @@ static int init_tdx_module(void) */ ret = -EINVAL; +out_free_pamts: if (ret) tdmrs_free_pamt_all(&tdmr_list); else diff --git a/arch/x86/virt/vmx/tdx/tdx.h b/arch/x86/virt/vmx/tdx/tdx.h index 65fe34f21025..6cab15184af5 100644 --- a/arch/x86/virt/vmx/tdx/tdx.h +++ b/arch/x86/virt/vmx/tdx/tdx.h @@ -19,6 +19,7 @@ #define TDH_SYS_INIT 33 #define TDH_SYS_LP_INIT 35 #define TDH_SYS_INFO 32 +#define TDH_SYS_CONFIG 45 struct cmr_info { u64 base; @@ -95,6 +96,7 @@ struct tdmr_reserved_area { } __packed; #define TDMR_INFO_ALIGNMENT 512 +#define TDMR_INFO_PA_ARRAY_ALIGNMENT 512 struct tdmr_info { u64 base;