From patchwork Tue Oct 18 20:58:40 2022 Content-Type: text/plain; charset="utf-8" MIME-Version: 1.0 Content-Transfer-Encoding: 7bit X-Patchwork-Submitter: Peter Gonda X-Patchwork-Id: 4315 Return-Path: Delivered-To: ouuuleilei@gmail.com Received: by 2002:a5d:4ac7:0:0:0:0:0 with SMTP id y7csp2159097wrs; Tue, 18 Oct 2022 14:03:22 -0700 (PDT) X-Google-Smtp-Source: AMsMyM6AFpExhur+cIK0KfBh9IQQhnbqGCgvruhWqjzKva3GISEB+dQXEmUDFFNa659CkZc4pLIE X-Received: by 2002:a05:6402:1941:b0:457:13a:cce9 with SMTP id f1-20020a056402194100b00457013acce9mr4402325edz.265.1666127002438; Tue, 18 Oct 2022 14:03:22 -0700 (PDT) ARC-Seal: i=1; a=rsa-sha256; t=1666127002; cv=none; d=google.com; s=arc-20160816; b=FAvRRLgXxHi8PcUvNqKUf/fJYMss0IuM03fioHXqPK/6ucbJDXi4R3Rs+6dlolScrU 4Pnon1egWUAYM55tr2hAsyccsQrovDpaxFW9c+yC7nAMq2kc4brRtKBsr7sIAdDjPoO8 Ytc4eMms1eqwSJeJJoXNXQwYEVGDTxLBLaszm7pL6VE7nsZAhvPCMAhLNsqjsrvaU1RL S9bbgh2zMJ1kWHI80JjEGBnuF9N3sb3D3zECZcTqu0KnPwKwt/emUkcmOTQT3v3v6kQ2 GWnwMLvDSQZ8CWQUFdk22LSca79Mj9Br4+RZLz8D6ENgGOg2zd/fGFtbtc+g2jSu8tWp pHvg== ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=google.com; s=arc-20160816; h=list-id:precedence:cc:to:from:subject:references:mime-version :message-id:in-reply-to:date:dkim-signature; bh=dm0BAJRXbXrs7kBcZp+dxeyPGUHjPB12rWArnLP7msg=; b=rY/VCBAO1BK1psPGIlbIr+6EEdUK2ceC7J1LMuaPj+iAuIjfM90TZ+7U98v6YYwqjz TNX1iHOPcoalz0tZdXj3z0/58gSBMNJYPRzAyW5VOrlK72SxUY4JlkVKHKEsRxL0Ebfw MxOqtxjTEceKEbbYcNFhVdIvcEa72t2NMWTzN21hqIU4TzWn2mjuRpwNlcFLnuZPuqXz VC83nlYyGurdzT1vpjvz/NwpoULR2EJlsG5/2L07n/3+FaO92e+9kC2ClkD5Rg3t0RfG N68ZoSj2DiQubRToaPDXunpTSC7z7+qAkBUuiIRzNYoG2R4+qPdhJGI17UOdpn+t+KYC 4t1w== ARC-Authentication-Results: i=1; mx.google.com; dkim=pass header.i=@google.com header.s=20210112 header.b=YF5VeFDy; spf=pass (google.com: domain of linux-kernel-owner@vger.kernel.org designates 2620:137:e000::1:20 as permitted sender) smtp.mailfrom=linux-kernel-owner@vger.kernel.org; dmarc=pass (p=REJECT sp=REJECT dis=NONE) header.from=google.com Received: from out1.vger.email (out1.vger.email. [2620:137:e000::1:20]) by mx.google.com with ESMTP id c11-20020a0564021f8b00b00458ab55ccc9si13435323edc.168.2022.10.18.14.02.41; Tue, 18 Oct 2022 14:03:22 -0700 (PDT) Received-SPF: pass (google.com: domain of linux-kernel-owner@vger.kernel.org designates 2620:137:e000::1:20 as permitted sender) client-ip=2620:137:e000::1:20; Authentication-Results: mx.google.com; dkim=pass header.i=@google.com header.s=20210112 header.b=YF5VeFDy; spf=pass (google.com: domain of linux-kernel-owner@vger.kernel.org designates 2620:137:e000::1:20 as permitted sender) smtp.mailfrom=linux-kernel-owner@vger.kernel.org; dmarc=pass (p=REJECT sp=REJECT dis=NONE) header.from=google.com Received: (majordomo@vger.kernel.org) by vger.kernel.org via listexpand id S230199AbiJRU7I (ORCPT + 99 others); Tue, 18 Oct 2022 16:59:08 -0400 Received: from lindbergh.monkeyblade.net ([23.128.96.19]:33670 "EHLO lindbergh.monkeyblade.net" rhost-flags-OK-OK-OK-OK) by vger.kernel.org with ESMTP id S230150AbiJRU7C (ORCPT ); Tue, 18 Oct 2022 16:59:02 -0400 Received: from mail-pl1-x64a.google.com (mail-pl1-x64a.google.com [IPv6:2607:f8b0:4864:20::64a]) by lindbergh.monkeyblade.net (Postfix) with ESMTPS id 181B6C06BF for ; Tue, 18 Oct 2022 13:58:58 -0700 (PDT) Received: by mail-pl1-x64a.google.com with SMTP id j7-20020a170902da8700b0018540711393so8763615plx.18 for ; Tue, 18 Oct 2022 13:58:58 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=google.com; s=20210112; h=cc:to:from:subject:references:mime-version:message-id:in-reply-to :date:from:to:cc:subject:date:message-id:reply-to; bh=dm0BAJRXbXrs7kBcZp+dxeyPGUHjPB12rWArnLP7msg=; b=YF5VeFDyNQJ2ym8Y57EPDOEDneGD4XW9dGLt9NeoeMOFKRBStFaGBkpzLuIXnhrTct bFMMNIywz3eMLsi027WLwkml7N8AyUIDWSsdQ71xnTB3lclRIIJTZElOQJ3u5+uci4wM HffV50ggDKpdmFDKqClp0HneDe6g2Yq13ulSWP3AI6XpAHnjWln5bE0NWeGYDiHEnONB tUGhWPphmBjlL6y/JjPRQKod8MY4Le7inveQ2BSMPyrMLe9A3wIzJ5RifwreZJSiIYWI EsN41+348W/E7vAZ+gJ6SzsGkCRP4NtAzBVCrDNazMXZzRhmVNMaH60LlZHWLMaBcAEE oADA== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20210112; h=cc:to:from:subject:references:mime-version:message-id:in-reply-to :date:x-gm-message-state:from:to:cc:subject:date:message-id:reply-to; bh=dm0BAJRXbXrs7kBcZp+dxeyPGUHjPB12rWArnLP7msg=; b=cDiveu9TPa2lCSgcJL97nLvwTJIAvis5YYNqmOCtcy75aewmvisaAiQ4FaEgaDYT6f gGqeS37gU8ED5O8NSBLq/d8wx/d7qeQylY6MIKGkTNAy6Decm2Md7jd7XZ+5UMJXAfTd FDHPbdlBqjExlyJj67gOPCUi4AlpNr7uv/6v4t+4KGaR2Axy3qPIl9CvamFF/g7jB2ng 3XCVD3xc5lM/BvEGnPgukbndoV6f5fVl8wkJIv7pAHtTOtJ4gzexs0K0wW46mPWq6bqu S8wEc9ZU6CtoYo4Eh0Fb09siwxDXkStZE5uTBob/ybh69PTmRhyn34JVJmwQXWndWTDe dnkw== X-Gm-Message-State: ACrzQf21Rtx2OciOnhFJs8/JJsvixNJJx0l++Rd5bPRiOHvE0J3NLn8u Dn6fmwscQllHL0vBuTcCajhdzXhG/Z0= X-Received: from pgonda1.kir.corp.google.com ([2620:15c:29:203:c89b:7f49:3437:9db8]) (user=pgonda job=sendgmr) by 2002:aa7:8e8c:0:b0:562:a549:efc5 with SMTP id a12-20020aa78e8c000000b00562a549efc5mr5126346pfr.20.1666126738024; Tue, 18 Oct 2022 13:58:58 -0700 (PDT) Date: Tue, 18 Oct 2022 13:58:40 -0700 In-Reply-To: <20221018205845.770121-1-pgonda@google.com> Message-Id: <20221018205845.770121-3-pgonda@google.com> Mime-Version: 1.0 References: <20221018205845.770121-1-pgonda@google.com> X-Mailer: git-send-email 2.38.0.413.g74048e4d9e-goog Subject: [PATCH V5 2/7] KVM: selftests: add hooks for managing protected guest memory From: Peter Gonda To: kvm@vger.kernel.org Cc: linux-kernel@vger.kernel.org, marcorr@google.com, seanjc@google.com, michael.roth@amd.com, thomas.lendacky@amd.com, joro@8bytes.org, mizhang@google.com, pbonzini@redhat.com, andrew.jones@linux.dev, pgonda@google.com, vannapurve@google.com X-Spam-Status: No, score=-9.6 required=5.0 tests=BAYES_00,DKIMWL_WL_MED, DKIM_SIGNED,DKIM_VALID,DKIM_VALID_AU,DKIM_VALID_EF,RCVD_IN_DNSWL_NONE, SPF_HELO_NONE,SPF_PASS,USER_IN_DEF_DKIM_WL autolearn=unavailable autolearn_force=no version=3.4.6 X-Spam-Checker-Version: SpamAssassin 3.4.6 (2021-04-09) on lindbergh.monkeyblade.net Precedence: bulk List-ID: X-Mailing-List: linux-kernel@vger.kernel.org X-getmail-retrieved-from-mailbox: =?utf-8?q?INBOX?= X-GMAIL-THRID: =?utf-8?q?1747060787402767470?= X-GMAIL-MSGID: =?utf-8?q?1747060787402767470?= Add kvm_vm.protected metadata. Protected VMs memory, potentially register and other state may not be accessible to KVM. This combined with a new protected_phy_pages bitmap will allow the selftests to check if a given pages is accessible. Originally-by: Michael Roth Signed-off-by: Peter Gonda --- .../selftests/kvm/include/kvm_util_base.h | 14 ++++++++++++-- tools/testing/selftests/kvm/lib/kvm_util.c | 16 +++++++++++++--- 2 files changed, 25 insertions(+), 5 deletions(-) diff --git a/tools/testing/selftests/kvm/include/kvm_util_base.h b/tools/testing/selftests/kvm/include/kvm_util_base.h index c14d531a942a..625f13cf3b58 100644 --- a/tools/testing/selftests/kvm/include/kvm_util_base.h +++ b/tools/testing/selftests/kvm/include/kvm_util_base.h @@ -33,6 +33,7 @@ typedef uint64_t vm_vaddr_t; /* Virtual Machine (Guest) virtual address */ struct userspace_mem_region { struct kvm_userspace_memory_region region; struct sparsebit *unused_phy_pages; + struct sparsebit *protected_phy_pages; int fd; off_t offset; void *host_mem; @@ -90,6 +91,9 @@ struct kvm_vm { vm_vaddr_t handlers; uint32_t dirty_ring_size; + /* VM protection enabled: SEV, etc*/ + bool protected; + /* Cache of information for binary stats interface */ int stats_fd; struct kvm_stats_header stats_header; @@ -638,10 +642,16 @@ const char *exit_reason_str(unsigned int exit_reason); vm_paddr_t vm_phy_page_alloc(struct kvm_vm *vm, vm_paddr_t paddr_min, uint32_t memslot); -vm_paddr_t vm_phy_pages_alloc(struct kvm_vm *vm, size_t num, - vm_paddr_t paddr_min, uint32_t memslot); +vm_paddr_t _vm_phy_pages_alloc(struct kvm_vm *vm, size_t num, + vm_paddr_t paddr_min, uint32_t memslot, bool protected); vm_paddr_t vm_alloc_page_table(struct kvm_vm *vm); +static inline vm_paddr_t vm_phy_pages_alloc(struct kvm_vm *vm, size_t num, + vm_paddr_t paddr_min, uint32_t memslot) +{ + return _vm_phy_pages_alloc(vm, num, paddr_min, memslot, vm->protected); +} + /* * ____vm_create() does KVM_CREATE_VM and little else. __vm_create() also * loads the test binary into guest memory and creates an IRQ chip (x86 only). diff --git a/tools/testing/selftests/kvm/lib/kvm_util.c b/tools/testing/selftests/kvm/lib/kvm_util.c index f12ebd27f6e5..0ce5cdb52f0c 100644 --- a/tools/testing/selftests/kvm/lib/kvm_util.c +++ b/tools/testing/selftests/kvm/lib/kvm_util.c @@ -595,6 +595,7 @@ static void __vm_mem_region_delete(struct kvm_vm *vm, vm_ioctl(vm, KVM_SET_USER_MEMORY_REGION, ®ion->region); sparsebit_free(®ion->unused_phy_pages); + sparsebit_free(®ion->protected_phy_pages); ret = munmap(region->mmap_start, region->mmap_size); TEST_ASSERT(!ret, __KVM_SYSCALL_ERROR("munmap()", ret)); @@ -935,6 +936,7 @@ void vm_userspace_mem_region_add(struct kvm_vm *vm, } region->unused_phy_pages = sparsebit_alloc(); + region->protected_phy_pages = sparsebit_alloc(); sparsebit_set_num(region->unused_phy_pages, guest_paddr >> vm->page_shift, npages); region->region.slot = slot; @@ -1711,6 +1713,10 @@ void vm_dump(FILE *stream, struct kvm_vm *vm, uint8_t indent) region->host_mem); fprintf(stream, "%*sunused_phy_pages: ", indent + 2, ""); sparsebit_dump(stream, region->unused_phy_pages, 0); + if (vm->protected) { + fprintf(stream, "%*sprotected_phy_pages: ", indent + 2, ""); + sparsebit_dump(stream, region->protected_phy_pages, 0); + } } fprintf(stream, "%*sMapped Virtual Pages:\n", indent, ""); sparsebit_dump(stream, vm->vpages_mapped, indent + 2); @@ -1807,8 +1813,9 @@ const char *exit_reason_str(unsigned int exit_reason) * and their base address is returned. A TEST_ASSERT failure occurs if * not enough pages are available at or above paddr_min. */ -vm_paddr_t vm_phy_pages_alloc(struct kvm_vm *vm, size_t num, - vm_paddr_t paddr_min, uint32_t memslot) +vm_paddr_t _vm_phy_pages_alloc(struct kvm_vm *vm, size_t num, + vm_paddr_t paddr_min, uint32_t memslot, + bool protected) { struct userspace_mem_region *region; sparsebit_idx_t pg, base; @@ -1841,8 +1848,11 @@ vm_paddr_t vm_phy_pages_alloc(struct kvm_vm *vm, size_t num, abort(); } - for (pg = base; pg < base + num; ++pg) + for (pg = base; pg < base + num; ++pg) { sparsebit_clear(region->unused_phy_pages, pg); + if (protected) + sparsebit_set(region->protected_phy_pages, pg); + } return base * vm->page_size; }