This series adds another vendor-neutral part of the SEV-SNP/TDX support patches, namely support for KVM_CAP_VM_TYPES. In Linux 6.10 this will also be available for SEV and SEV-ES, so introduce it now already.
Also, Linux 6.10 will _not_ allow KVM_GET/SET_* ioctls for VMs with encrypted state and a VM type other than KVM_X86_DEFAULT_VM, so prepare for that. The patches are not yet available in kvm.git, hence the hackish linux-headers update in patch 1. Apart from that, however, the API should be final. Tested by booting a SEV-ES guest. Paolo Based-on: <20240229060038.606591-1-xiaoyao...@intel.com> Paolo Bonzini (6): linux-headers hack runstate: skip initial CPU reset if reset is not actually possible KVM: track whether guest state is encrypted KVM: remove kvm_arch_cpu_check_are_resettable target/i386: introduce x86-confidential-guest target/i386: SEV: use KVM_SEV_INIT2 if possible Xiaoyao Li (1): target/i386: Implement mc->kvm_type() to get VM type include/sysemu/kvm.h | 12 ++----- include/sysemu/kvm_int.h | 1 + linux-headers/asm-x86/kvm.h | 8 +++++ linux-headers/linux/kvm.h | 2 ++ target/i386/confidential-guest.h | 59 ++++++++++++++++++++++++++++++++ target/i386/kvm/kvm_i386.h | 2 ++ accel/kvm/kvm-accel-ops.c | 2 +- accel/kvm/kvm-all.c | 19 ++++++---- hw/i386/x86.c | 6 ++++ system/runstate.c | 15 +++++++- target/arm/kvm.c | 5 --- target/i386/confidential-guest.c | 33 ++++++++++++++++++ target/i386/kvm/kvm.c | 49 +++++++++++++++++++++++--- target/i386/sev.c | 48 ++++++++++++++++++++++---- target/loongarch/kvm/kvm.c | 5 --- target/mips/kvm.c | 5 --- target/ppc/kvm.c | 5 --- target/riscv/kvm/kvm-cpu.c | 5 --- target/s390x/kvm/kvm.c | 5 --- target/i386/meson.build | 2 +- 20 files changed, 226 insertions(+), 62 deletions(-) create mode 100644 target/i386/confidential-guest.h create mode 100644 target/i386/confidential-guest.c -- 2.44.0
