[RFC v3] KVM: x86: Support KVM VMs sharing SEV context

2021-04-08 Thread Nathan Tempelman
as it does not handle handing off attested VMSAs to the mirror. For additional context, we need a Migration Helper because SEV PSP migration is far too slow for our live migration on its own. Using an in-guest migrator lets us speed this up significantly. Signed-off-by: Nathan Temp

Re: [PATCH] KVM: SVM: Add support for KVM_SEV_SEND_CANCEL command

2021-04-08 Thread Nathan Tempelman
t; --- a/include/uapi/linux/kvm.h > +++ b/include/uapi/linux/kvm.h > @@ -1671,6 +1671,8 @@ enum sev_cmd_id { > KVM_SEV_CERT_EXPORT, > /* Attestation report */ > KVM_SEV_GET_ATTESTATION_REPORT, > + /* Guest Migration Extension */ > + KVM_SEV_SEND_CANCEL, > > KVM_SEV_NR_MAX, > }; > -- > 2.31.0.208.g409f899ff0-goog > Reviewed-by: Nathan Tempelman

[RFC v2] KVM: x86: Support KVM VMs sharing SEV context

2021-03-15 Thread Nathan Tempelman
as it does not handle handing off attested VMSAs to the mirror. For additional context, we need a Migration Helper because SEV PSP migration is far too slow for our live migration on its own. Using an in-guest migrator lets us speed this up significantly. Signed-off-by: Nathan Temp

Re: [RFC] KVM: x86: Support KVM VMs sharing SEV context

2021-03-12 Thread Nathan Tempelman
On Wed, Feb 24, 2021 at 9:37 AM Sean Christopherson wrote: > > On Wed, Feb 24, 2021, Nathan Tempelman wrote: > > static bool __sev_recycle_asids(int min_asid, int max_asid) > > { > > @@ -1124,6 +1129,10 @@ int svm_mem_enc_op(struct kvm *kvm, void __user > > *argp

Re: [RFC] KVM: x86: Support KVM VMs sharing SEV context

2021-03-05 Thread Nathan Tempelman
On Fri, Mar 5, 2021 at 7:13 AM Paolo Bonzini wrote: > > On 05/03/21 15:04, Ashish Kalra wrote: > >> +/* Mirrors of mirrors should work, but let's not get silly */ > >> +if (is_mirroring_enc_context(kvm)) { > >> +ret = -ENOTTY; > >> +goto failed; > >> +} > > How

[RFC] KVM: x86: Support KVM VMs sharing SEV context

2021-02-24 Thread Nathan Tempelman
as it does not handle handing off attested VMSAs to the mirror. For additional context, we need a Migration Helper because SEV PSP migration is far too slow for our live migration on its own. Using an in-guest migrator lets us speed this up significantly. Signed-off-by: Nathan Temp