KVM: SVM: Add support for the SEV-ES VMSA

Browse source

Allocate a page during vCPU creation to be used as the encrypted VM save
area (VMSA) for the SEV-ES guest. Provide a flag in the kvm_vcpu_arch
structure that indicates whether the guest state is protected.

When freeing a VMSA page that has been encrypted, the cache contents must
be flushed using the MSR_AMD64_VM_PAGE_FLUSH before freeing the page.

[ i386 build warnings ]
Reported-by: kernel test robot <lkp@intel.com>
Signed-off-by: Tom Lendacky <thomas.lendacky@amd.com>
Message-Id: <fde272b17eec804f3b9db18c131262fe074015c5.1607620209.git.thomas.lendacky@amd.com>
Signed-off-by: Paolo Bonzini <pbonzini@redhat.com>

...

This commit is contained in:

Tom Lendacky 2020-12-10 11:09:40 -06:00 • committed by Paolo Bonzini

parent 0f60bde15e

commit add5e2f045

4 changed files with 97 additions and 2 deletions

Show all changes Ignore whitespace when comparing lines Ignore changes in amount of whitespace Ignore changes in whitespace at EOL

Download patch file Download diff file Expand all files Collapse all files

3

arch/x86/include/asm/kvm_host.h

View file

67

arch/x86/kvm/svm/sev.c

View file

24

arch/x86/kvm/svm/svm.c

View file

5

arch/x86/kvm/svm/svm.h

View file