KVM: arm64: Allow userspace to create protected VMs when pKVM is enabled

Browse source

Introduce a new VM type for KVM/arm64 to allow userspace to request the
creation of a "protected VM" when the host has booted with pKVM enabled.

For now, this feature results in a taint on first use as many aspects of
a protected VM are not yet protected!

Tested-by: Fuad Tabba <tabba@google.com>
Tested-by: Mostafa Saleh <smostafa@google.com>
Signed-off-by: Will Deacon <will@kernel.org>
Link: https://patch.msgid.link/20260330144841.26181-32-will@kernel.org
Signed-off-by: Marc Zyngier <maz@kernel.org>

...

This commit is contained in:

Will Deacon 2026-03-30 15:48:32 +01:00 • committed by Marc Zyngier

parent 246c976c37

commit 8800dbf661

5 changed files with 20 additions and 6 deletions

Show all changes Ignore whitespace when comparing lines Ignore changes in amount of whitespace Ignore changes in whitespace at EOL

Download patch file Download diff file Expand all files Collapse all files

2

arch/arm64/include/asm/kvm_pkvm.h

View file

8

arch/arm64/kvm/arm.c

View file

3

arch/arm64/kvm/mmu.c

View file

8

arch/arm64/kvm/pkvm.c

View file

5

include/uapi/linux/kvm.h

View file