KVM: SEV: Allow per-guest configuration of GHCB protocol version

Browse source

The GHCB protocol version may be different from one guest to the next.
Add a field to track it for each KVM instance and extend KVM_SEV_INIT2
to allow it to be configured by userspace.

Now that all SEV-ES support for GHCB protocol version 2 is in place, go
ahead and default to it when creating SEV-ES guests through the new
KVM_SEV_INIT2 interface. Keep the older KVM_SEV_ES_INIT interface
restricted to GHCB protocol version 1.

Suggested-by: Sean Christopherson <seanjc@google.com>
Signed-off-by: Michael Roth <michael.roth@amd.com>
Message-ID: <20240501071048.2208265-5-michael.roth@amd.com>
Signed-off-by: Paolo Bonzini <pbonzini@redhat.com>

...

This commit is contained in:

Michael Roth 2024-05-01 02:10:48 -05:00 • committed by Paolo Bonzini

parent 8d1a36e42b

commit 4af663c2f6

4 changed files with 42 additions and 6 deletions

Show all changes Ignore whitespace when comparing lines Ignore changes in amount of whitespace Ignore changes in whitespace at EOL

Download patch file Download diff file Expand all files Collapse all files

11

Documentation/virt/kvm/x86/amd-memory-encryption.rst

View file

4

arch/x86/include/uapi/asm/kvm.h

View file

32

arch/x86/kvm/svm/sev.c

View file

1

arch/x86/kvm/svm/svm.h

View file