mbox series

[V3,0/8] KVM: selftests: SEV: selftests for fd-based private memory

Message ID 20221223001352.3873203-1-vannapurve@google.com
Headers show
Series KVM: selftests: SEV: selftests for fd-based private memory | expand

Message

Vishal Annapurve Dec. 23, 2022, 12:13 a.m. UTC 
This series implements selftests executing SEV VMs to target the feature
implemented by Chao via:
https://lore.kernel.org/lkml/20221220074318.GC1724933@chaop.bj.intel.com/T/

Below changes aim to test the fd based approach for guest private memory
in context of SEV VMs executing on AMD SEV compatible platforms.

sev_private_mem_test.c file adds selftest to access private memory from
the guest via private/shared accesses and checking if the contents can be
leaked to/accessed by vmm via shared memory view before/after
conversions.

To allow SEV/SEV-ES VMs to toggle the encryption bit during memory
conversion, support is added for mapping guest pagetables to guest va
ranges and passing the mapping information to guests via shared pages.

Updates in v3:
1) Dropped RFC tag.
2) Pagetable mapping logic is revisited to reduce the APIs and passing
the information to guest is simplified.
3) Additional changes to execute hypercall as per cpu type are added
4) Selftest implementation is based on revised non-confidential VM
selftests.

Link to RFC v2:
https://lore.kernel.org/lkml/20220830224259.412342-8-vannapurve@google.com/T/

This series has dependency on following patch series:
1) Series mentioned above from Chao
2) Selftests testing fd based memory for non-confidential VMs:
https://lore.kernel.org/lkml/20221205232341.4131240-5-vannapurve@google.com/T/
3) Selftests to add SEV VM creation and execution from Peter and Michael:
https://lore.kernel.org/lkml/20221018205845.770121-3-pgonda@google.com/T/
4) Series to execute hypercall natively:
https://lore.kernel.org/lkml/20221222230458.3828342-1-vannapurve@google.com/

Github link for the patches posted as part of this series:
https://github.com/vishals4gh/linux/commits/sev_upm_selftests_rfc_v3

Vishal Annapurve (8):
  KVM: selftests: private_mem: Use native hypercall
  KVM: selftests: Support mapping pagetables to guest virtual memory
  KVM: selftests: x86: Support changing gpa encryption masks
  KVM: selftests: Split SEV VM creation logic
  KVM: selftests: Enable pagetable mapping for SEV VMs
  KVM: selftests: Refactor private_mem_test
  KVM: selftests: private_mem_test: Add support for SEV VMs
  KVM: selftests: Add private mem test for SEV VMs

 tools/testing/selftests/kvm/.gitignore        |   1 +
 tools/testing/selftests/kvm/Makefile          |   2 +
 .../selftests/kvm/include/kvm_util_base.h     |  88 +++++++
 .../include/x86_64/private_mem_test_helper.h  |  18 ++
 .../selftests/kvm/include/x86_64/processor.h  |   4 +
 .../selftests/kvm/include/x86_64/sev.h        |   4 +
 tools/testing/selftests/kvm/lib/kvm_util.c    |  88 ++++++-
 .../selftests/kvm/lib/x86_64/private_mem.c    |   2 +-
 .../kvm/lib/x86_64/private_mem_test_helper.c  | 228 ++++++++++++++++++
 .../selftests/kvm/lib/x86_64/processor.c      |  80 ++++++
 tools/testing/selftests/kvm/lib/x86_64/sev.c  |  25 +-
 .../selftests/kvm/x86_64/private_mem_test.c   | 187 +-------------
 .../kvm/x86_64/sev_private_mem_test.c         |  26 ++
 13 files changed, 562 insertions(+), 191 deletions(-)
 create mode 100644 tools/testing/selftests/kvm/include/x86_64/private_mem_test_helper.h
 create mode 100644 tools/testing/selftests/kvm/lib/x86_64/private_mem_test_helper.c
 create mode 100644 tools/testing/selftests/kvm/x86_64/sev_private_mem_test.c