Skip to content

SEV-SNP guest policy bit support updates

Tom Lendacky kvm linux-crypto lkml 4 versions – Applied

Status from this message: Applied to kvm-x86 svm, thanks!

Get series with b4
b4 am [email protected]

Versions newest first · linked by author and title

  1. v4 Latest4 patches 6 repliesApplied
  2. v34 patches 2 repliesSuperseded
  3. v2 RFC4 patches 0 repliesSuperseded
Earlier versions · 1
VersionPostedPatchesRepliesStatus
v1 RFC4 patches4 repliesSuperseded

Changes in v4 from the cover letter

- Swizzle the patch order in order to preserve ABI.
- Use the new CCP API from the start for the KVM_X86_SNP_POLICY_BITS attribute.

Patches in v4 Applied

#Subject and filesSizeRepliesApplied
1/4KVM: SEV: Consolidate the SEV policy bits in a single header filearch/x86/kvm/svm/sev.c arch/x86/kvm/svm/svm.h include/linux/psp-sev.h+23 -150 replies
2/4crypto: ccp - Add an API to return the supported SEV-SNP policy bitsdrivers/crypto/ccp/sev-dev.c include/linux/psp-sev.h+57 -04 replies
3/4KVM: SEV: Publish supported SEV-SNP policy bitsarch/x86/include/uapi/asm/kvm.h arch/x86/kvm/svm/sev.c+12 -20 replies
4/4KVM: SEV: Add known supported SEV-SNP policy bitsarch/x86/kvm/svm/sev.c+16 -60 replies

Reviews trailers per patch

1 of 4 patches has a Reviewed-by or Acked-by.

PatchHerbert Xu
1/4
2/4A-b
3/4
4/4

Trailers given in replies are filled; those carried in the patches from earlier versions are outlined with dashes.

Read the v4 thread

Cover letter [PATCH v4 0/4] SEV-SNP guest policy bit support updates

This series aims to allow more flexibility in specifying SEV-SNP policy bits by improving discoverability of supported policy bits from userspace and enabling support for newer policy bits.

- The first patch consolidates the policy definitions into a single header file.

- The second patch adds a CCP driver API to return the supported policy bits. Policy bit support is dependent on the version of SEV firmware.

- The third patch adds a new KVM_X86_GRP_SEV attribute group, KVM_X86_SNP_POLICY_BITS, that can be used to return the supported SEV-SNP policy bits. The initial support for this attribute will use the new CCP driver API to return the firmware supported policy bits ANDed with the KVM supported policy bits.

- The fourth patch expands the number of policy bits that KVM supports.

The series is based off of:
git://git.kernel.org/pub/scm/virt/kvm/kvm.git master

---

Changes for v4:
- Swizzle the patch order in order to preserve ABI.
- Use the new CCP API from the start for the KVM_X86_SNP_POLICY_BITS attribute.

Changes for v3:
- Remove RFC tag.

Changes for v2:
- Marked the KVM supported policy bits as read-only after init.

Tom Lendacky (4):
KVM: SEV: Consolidate the SEV policy bits in a single header file
crypto: ccp - Add an API to return the supported SEV-SNP policy bits
KVM: SEV: Publish supported SEV-SNP policy bits
KVM: SEV: Add known supported SEV-SNP policy bits

 arch/x86/include/uapi/asm/kvm.h |  1 +
 arch/x86/kvm/svm/sev.c          | 45 ++++++++++++++++++++-------------
 arch/x86/kvm/svm/svm.h          |  3 ---
 drivers/crypto/ccp/sev-dev.c    | 37 +++++++++++++++++++++++++++
 include/linux/psp-sev.h         | 39 ++++++++++++++++++++++++++++
 5 files changed, 105 insertions(+), 20 deletions(-)

base-commit: 4361f5aa8bfcecbab3fc8db987482b9e08115a6a

Signature · 1 line
2.51.1