All of lore.kernel.org
 help / color / mirror / Atom feed
From: Eduardo Habkost <ehabkost@redhat.com>
To: Paolo Bonzini <pbonzini@redhat.com>
Cc: "Edgar E. Iglesias" <edgar.iglesias@xilinx.com>,
	Peter Maydell <peter.maydell@linaro.org>,
	Borislav Petkov <bp@suse.de>,
	Brijesh Singh <brijesh.singh@amd.com>,
	kvm@vger.kernel.org, "Michael S. Tsirkin" <mst@redhat.com>,
	Stefan Hajnoczi <stefanha@gmail.com>,
	Alistair Francis <alistair.francis@xilinx.com>,
	Peter Crosthwaite <crosthwaite.peter@gmail.com>,
	Richard Henderson <richard.henderson@linaro.org>,
	qemu-devel@nongnu.org, Alexander Graf <agraf@suse.de>,
	Christian Borntraeger <borntraeger@de.ibm.com>,
	"Dr. David Alan Gilbert" <dgilbert@redhat.com>,
	Marcel Apfelbaum <marcel@redhat.com>,
	Thomas Lendacky <Thomas.Lendacky@amd.com>,
	Bruce Rogers <brogers@suse.com>,
	Cornelia Huck <cornelia.huck@de.ibm.com>,
	Markus Armbruster <armbru@redhat.com>,
	Richard Henderson <rth@twiddle.net>
Subject: Re: [PATCH v12 08/28] target/i386: add Secure Encrypted Virtulization (SEV) object
Date: Tue, 13 Mar 2018 15:49:50 -0300	[thread overview]
Message-ID: <20180313184950.GB3417@localhost.localdomain> (raw)
In-Reply-To: <8cf2f9bc-0339-1c80-b53b-ef5915248d1f@redhat.com>

On Tue, Mar 13, 2018 at 09:42:51AM +0100, Paolo Bonzini wrote:
> On 08/03/2018 23:44, Eduardo Habkost wrote:
> >> I think doing so will be an issue for the migration. Consider your above
> >> use case, a SEV guest is running on EPYC with cbitpos=47 and if we
> >> migrate to some $NEXT AMD CPU which uses need to use cbitpos=48 and we
> >> will fail to resume the guest on destination after migrating.
> > 
> > Exactly, in other words these two options are part of the guest
> > ABI, and QEMU promises to never make the guest ABI depend on the
> > host hardware unless you're using "-cpu host".
> 
> This is not entirely true; while MAXPHYADDR is constant downstream
> unless using "-cpu host", in practice that behavior is wrong and a guest
> could misbehave if passed a MAXPHYADDR that is different from the host's.
> 
> I think this is the same, and management software will have to live with it.
> 

I think they are very far from being equivalent.

In practice guests don't seem to mind if we don't perfectly
emulate behavior that depend on MAXPHYADDR, and live-migration
between hosts with different MAXPHYADDR works.

But if you tell the guest the wrong C-bit location, guests are
likely to rely on it and break.  Migration between hosts with
different C-bit locations won't work, will it?

-- 
Eduardo

WARNING: multiple messages have this Message-ID (diff)
From: Eduardo Habkost <ehabkost@redhat.com>
To: Paolo Bonzini <pbonzini@redhat.com>
Cc: Brijesh Singh <brijesh.singh@amd.com>,
	Peter Maydell <peter.maydell@linaro.org>,
	kvm@vger.kernel.org, "Michael S. Tsirkin" <mst@redhat.com>,
	Stefan Hajnoczi <stefanha@gmail.com>,
	qemu-devel@nongnu.org, Alexander Graf <agraf@suse.de>,
	"Edgar E. Iglesias" <edgar.iglesias@xilinx.com>,
	Markus Armbruster <armbru@redhat.com>,
	Bruce Rogers <brogers@suse.com>,
	Christian Borntraeger <borntraeger@de.ibm.com>,
	Marcel Apfelbaum <marcel@redhat.com>,
	Borislav Petkov <bp@suse.de>,
	Thomas Lendacky <Thomas.Lendacky@amd.com>,
	Richard Henderson <richard.henderson@linaro.org>,
	"Dr. David Alan Gilbert" <dgilbert@redhat.com>,
	Alistair Francis <alistair.francis@xilinx.com>,
	Cornelia Huck <cornelia.huck@de.ibm.com>,
	Richard Henderson <rth@twiddle.net>,
	Peter Crosthwaite <crosthwaite.peter@gmail.com>
Subject: Re: [Qemu-devel] [PATCH v12 08/28] target/i386: add Secure Encrypted Virtulization (SEV) object
Date: Tue, 13 Mar 2018 15:49:50 -0300	[thread overview]
Message-ID: <20180313184950.GB3417@localhost.localdomain> (raw)
In-Reply-To: <8cf2f9bc-0339-1c80-b53b-ef5915248d1f@redhat.com>

On Tue, Mar 13, 2018 at 09:42:51AM +0100, Paolo Bonzini wrote:
> On 08/03/2018 23:44, Eduardo Habkost wrote:
> >> I think doing so will be an issue for the migration. Consider your above
> >> use case, a SEV guest is running on EPYC with cbitpos=47 and if we
> >> migrate to some $NEXT AMD CPU which uses need to use cbitpos=48 and we
> >> will fail to resume the guest on destination after migrating.
> > 
> > Exactly, in other words these two options are part of the guest
> > ABI, and QEMU promises to never make the guest ABI depend on the
> > host hardware unless you're using "-cpu host".
> 
> This is not entirely true; while MAXPHYADDR is constant downstream
> unless using "-cpu host", in practice that behavior is wrong and a guest
> could misbehave if passed a MAXPHYADDR that is different from the host's.
> 
> I think this is the same, and management software will have to live with it.
> 

I think they are very far from being equivalent.

In practice guests don't seem to mind if we don't perfectly
emulate behavior that depend on MAXPHYADDR, and live-migration
between hosts with different MAXPHYADDR works.

But if you tell the guest the wrong C-bit location, guests are
likely to rely on it and break.  Migration between hosts with
different C-bit locations won't work, will it?

-- 
Eduardo

  reply	other threads:[~2018-03-13 18:49 UTC|newest]

Thread overview: 114+ messages / expand[flat|nested]  mbox.gz  Atom feed  top
2018-03-08 12:48 [PATCH v12 00/28] x86: Secure Encrypted Virtualization (AMD) Brijesh Singh
2018-03-08 12:48 ` [Qemu-devel] " Brijesh Singh
2018-03-08 12:48 ` [PATCH v12 01/28] memattrs: add debug attribute Brijesh Singh
2018-03-08 12:48   ` [Qemu-devel] " Brijesh Singh
2018-03-08 12:48 ` [PATCH v12 02/28] exec: add ram_debug_ops support Brijesh Singh
2018-03-08 12:48   ` [Qemu-devel] " Brijesh Singh
2018-03-08 12:48 ` [PATCH v12 03/28] exec: add debug version of physical memory read and write API Brijesh Singh
2018-03-08 12:48   ` [Qemu-devel] " Brijesh Singh
2018-03-08 12:48 ` [PATCH v12 04/28] monitor/i386: use debug APIs when accessing guest memory Brijesh Singh
2018-03-08 12:48   ` [Qemu-devel] " Brijesh Singh
2018-03-08 12:48 ` [PATCH v12 05/28] machine: add -memory-encryption property Brijesh Singh
2018-03-08 12:48   ` [Qemu-devel] " Brijesh Singh
2018-03-08 16:43   ` Daniel P. Berrangé
2018-03-08 16:43     ` [Qemu-devel] " Daniel P. Berrangé
2018-03-08 12:48 ` [PATCH v12 06/28] kvm: update kvm.h to include memory encryption ioctls Brijesh Singh
2018-03-08 12:48   ` [Qemu-devel] " Brijesh Singh
2018-03-08 12:48 ` [PATCH v12 07/28] docs: add AMD Secure Encrypted Virtualization (SEV) Brijesh Singh
2018-03-08 12:48   ` [Qemu-devel] " Brijesh Singh
2018-03-08 12:48 ` [PATCH v12 08/28] target/i386: add Secure Encrypted Virtulization (SEV) object Brijesh Singh
2018-03-08 12:48   ` [Qemu-devel] " Brijesh Singh
2018-03-08 16:49   ` Daniel P. Berrangé
2018-03-08 16:49     ` [Qemu-devel] " Daniel P. Berrangé
2018-03-08 22:22     ` Brijesh Singh
2018-03-08 22:22       ` [Qemu-devel] " Brijesh Singh
2018-03-08 22:44       ` Eduardo Habkost
2018-03-08 22:44         ` [Qemu-devel] " Eduardo Habkost
2018-03-13  8:42         ` Paolo Bonzini
2018-03-13  8:42           ` [Qemu-devel] " Paolo Bonzini
2018-03-13 18:49           ` Eduardo Habkost [this message]
2018-03-13 18:49             ` Eduardo Habkost
2018-03-13 19:04             ` Paolo Bonzini
2018-03-13 19:04               ` [Qemu-devel] " Paolo Bonzini
2018-03-13 19:20               ` Eduardo Habkost
2018-03-13 19:20                 ` [Qemu-devel] " Eduardo Habkost
2018-03-13 19:49                 ` Dr. David Alan Gilbert
2018-03-13 19:49                   ` [Qemu-devel] " Dr. David Alan Gilbert
2018-03-08 12:48 ` [PATCH v12 09/28] qmp: add query-sev command Brijesh Singh
2018-03-08 12:48   ` [Qemu-devel] " Brijesh Singh
2018-03-08 16:52   ` Daniel P. Berrangé
2018-03-08 16:52     ` [Qemu-devel] " Daniel P. Berrangé
2018-03-08 12:48 ` [PATCH v12 10/28] include: add psp-sev.h header file Brijesh Singh
2018-03-08 12:48   ` [Qemu-devel] " Brijesh Singh
2018-03-08 16:54   ` Daniel P. Berrangé
2018-03-08 16:54     ` [Qemu-devel] " Daniel P. Berrangé
2018-03-09 12:24     ` Dr. David Alan Gilbert
2018-03-09 12:24       ` [Qemu-devel] " Dr. David Alan Gilbert
2018-03-12 10:32       ` Daniel P. Berrangé
2018-03-12 10:32         ` [Qemu-devel] " Daniel P. Berrangé
2018-03-08 12:48 ` [PATCH v12 11/28] sev/i386: add command to initialize the memory encryption context Brijesh Singh
2018-03-08 12:48   ` [Qemu-devel] " Brijesh Singh
2018-03-08 16:57   ` Daniel P. Berrangé
2018-03-08 16:57     ` [Qemu-devel] " Daniel P. Berrangé
2018-03-08 12:48 ` [PATCH v12 12/28] sev/i386: register the guest memory range which may contain encrypted data Brijesh Singh
2018-03-08 12:48   ` [Qemu-devel] " Brijesh Singh
2018-03-08 12:48 ` [PATCH v12 13/28] kvm: introduce memory encryption APIs Brijesh Singh
2018-03-08 12:48   ` [Qemu-devel] " Brijesh Singh
2018-03-08 12:48 ` [PATCH v12 14/28] hmp: add 'info sev' command Brijesh Singh
2018-03-08 12:48   ` [Qemu-devel] " Brijesh Singh
2018-03-08 12:48 ` [PATCH v12 15/28] sev/i386: add command to create launch memory encryption context Brijesh Singh
2018-03-08 12:48   ` [Qemu-devel] " Brijesh Singh
2018-03-08 12:48 ` [PATCH v12 16/28] sev/i386: add command to encrypt guest memory region Brijesh Singh
2018-03-08 12:48   ` [Qemu-devel] " Brijesh Singh
2018-03-08 12:48 ` [PATCH v12 17/28] target/i386: encrypt bios rom Brijesh Singh
2018-03-08 12:48   ` [Qemu-devel] " Brijesh Singh
2018-03-08 12:48 ` [PATCH v12 18/28] sev/i386: add support to LAUNCH_MEASURE command Brijesh Singh
2018-03-08 12:48   ` [Qemu-devel] " Brijesh Singh
2018-03-08 12:48 ` [PATCH v12 19/28] sev/i386: finalize the SEV guest launch flow Brijesh Singh
2018-03-08 12:48   ` [Qemu-devel] " Brijesh Singh
2018-03-08 12:48 ` [PATCH v12 20/28] hw/i386: set ram_debug_ops when memory encryption is enabled Brijesh Singh
2018-03-08 12:48   ` [Qemu-devel] " Brijesh Singh
2018-03-08 12:48 ` [PATCH v12 21/28] sev/i386: add debug encrypt and decrypt commands Brijesh Singh
2018-03-08 12:48   ` [Qemu-devel] " Brijesh Singh
2018-03-08 12:48 ` [PATCH v12 22/28] target/i386: clear C-bit when walking SEV guest page table Brijesh Singh
2018-03-08 12:48   ` [Qemu-devel] " Brijesh Singh
2018-03-08 12:48 ` [PATCH v12 23/28] qmp: add query-sev-launch-measure command Brijesh Singh
2018-03-08 12:48   ` [Qemu-devel] " Brijesh Singh
2018-03-08 17:03   ` Daniel P. Berrangé
2018-03-08 17:03     ` [Qemu-devel] " Daniel P. Berrangé
2018-03-08 12:48 ` [PATCH v12 24/28] sev/i386: add migration blocker Brijesh Singh
2018-03-08 12:48   ` [Qemu-devel] " Brijesh Singh
2018-03-13  9:33   ` Paolo Bonzini
2018-03-13  9:33     ` [Qemu-devel] " Paolo Bonzini
2018-03-13 11:28     ` Brijesh Singh
2018-03-13 11:28       ` [Qemu-devel] " Brijesh Singh
2018-03-13 11:36       ` Paolo Bonzini
2018-03-13 11:36         ` [Qemu-devel] " Paolo Bonzini
2018-03-08 12:48 ` [PATCH v12 25/28] cpu/i386: populate CPUID 0x8000_001F when SEV is active Brijesh Singh
2018-03-08 12:48   ` [Qemu-devel] " Brijesh Singh
2018-03-08 12:48 ` [PATCH v12 26/28] qmp: add query-sev-capabilities command Brijesh Singh
2018-03-08 12:48   ` [Qemu-devel] " Brijesh Singh
2018-03-08 17:05   ` Daniel P. Berrangé
2018-03-08 17:05     ` [Qemu-devel] " Daniel P. Berrangé
2018-03-08 22:52     ` Brijesh Singh
2018-03-08 22:52       ` [Qemu-devel] " Brijesh Singh
2018-03-08 12:49 ` [PATCH v12 27/28] sev/i386: add sev_get_capabilities() Brijesh Singh
2018-03-08 12:49   ` [Qemu-devel] " Brijesh Singh
2018-03-08 12:49 ` [PATCH v12 28/28] tests/qmp-test: blacklist sev specific qmp commands Brijesh Singh
2018-03-08 12:49   ` [Qemu-devel] " Brijesh Singh
2018-03-08 17:08   ` Daniel P. Berrangé
2018-03-08 17:08     ` [Qemu-devel] " Daniel P. Berrangé
2018-03-08 20:18     ` Brijesh Singh
2018-03-08 20:18       ` [Qemu-devel] " Brijesh Singh
2018-03-08 21:45       ` Eduardo Habkost
2018-03-08 21:45         ` [Qemu-devel] " Eduardo Habkost
2018-03-08 23:22         ` Daniel P. Berrange
2018-03-08 23:22           ` [Qemu-devel] " Daniel P. Berrange
2018-03-09 10:12         ` Dr. David Alan Gilbert
2018-03-09 10:12           ` [Qemu-devel] " Dr. David Alan Gilbert
2018-03-13  9:07           ` Paolo Bonzini
2018-03-13  9:07             ` [Qemu-devel] " Paolo Bonzini
2018-03-13 11:21             ` Brijesh Singh
2018-03-13 11:21               ` [Qemu-devel] " Brijesh Singh
2018-03-13 11:36               ` Paolo Bonzini
2018-03-13 11:36                 ` [Qemu-devel] " Paolo Bonzini

Reply instructions:

You may reply publicly to this message via plain-text email
using any one of the following methods:

* Save the following mbox file, import it into your mail client,
  and reply-to-all from there: mbox

  Avoid top-posting and favor interleaved quoting:
  https://en.wikipedia.org/wiki/Posting_style#Interleaved_style

* Reply using the --to, --cc, and --in-reply-to
  switches of git-send-email(1):

  git send-email \
    --in-reply-to=20180313184950.GB3417@localhost.localdomain \
    --to=ehabkost@redhat.com \
    --cc=Thomas.Lendacky@amd.com \
    --cc=agraf@suse.de \
    --cc=alistair.francis@xilinx.com \
    --cc=armbru@redhat.com \
    --cc=borntraeger@de.ibm.com \
    --cc=bp@suse.de \
    --cc=brijesh.singh@amd.com \
    --cc=brogers@suse.com \
    --cc=cornelia.huck@de.ibm.com \
    --cc=crosthwaite.peter@gmail.com \
    --cc=dgilbert@redhat.com \
    --cc=edgar.iglesias@xilinx.com \
    --cc=kvm@vger.kernel.org \
    --cc=marcel@redhat.com \
    --cc=mst@redhat.com \
    --cc=pbonzini@redhat.com \
    --cc=peter.maydell@linaro.org \
    --cc=qemu-devel@nongnu.org \
    --cc=richard.henderson@linaro.org \
    --cc=rth@twiddle.net \
    --cc=stefanha@gmail.com \
    /path/to/YOUR_REPLY

  https://kernel.org/pub/software/scm/git/docs/git-send-email.html

* If your mail client supports setting the In-Reply-To header
  via mailto: links, try the mailto: link
Be sure your reply has a Subject: header at the top and a blank line before the message body.
This is an external index of several public inboxes,
see mirroring instructions on how to clone and mirror
all data and code used by this external index.