arm64/coco: Add pKVM as a CC platform

Browse source

pKVM does support memory encryption, expose that to the rest of
the kernel through cc_platform_has()

At the moment, all devices inside the guest are emulated which
requires its memory to be shared back to the host (decrypted), so
set force_dma_unencrypted() to always return true.

Although, typically pKVM guests rely on restricted-dma-pools to
bounce traffic, with this change, it is possible to solely rely on
the default SWIOTLB for that (assuming the appropriate size is set
from the command line)

Signed-off-by: Mostafa Saleh <smostafa@google.com>
Reviewed-by: Catalin Marinas <catalin.marinas@arm.com>
Tested-by: Aneesh Kumar K.V (Arm) <aneesh.kumar@kernel.org>
Signed-off-by: Will Deacon <will@kernel.org>

...

This commit is contained in:

Mostafa Saleh 2026-06-03 11:05:22 +00:00 • committed by Will Deacon

parent 442d366cc1

commit e62decaf98

5 changed files with 32 additions and 14 deletions

Show all changes Ignore whitespace when comparing lines Ignore changes in amount of whitespace Ignore changes in whitespace at EOL

Download patch file Download diff file Expand all files Collapse all files

13

arch/arm64/include/asm/hypervisor.h

View file

3

arch/arm64/include/asm/mem_encrypt.h

View file

12

arch/arm64/kernel/rsi.c

View file

15

arch/arm64/mm/init.c

View file

3

drivers/virt/coco/pkvm-guest/arm-pkvm-guest.c

View file