All of lore.kernel.org
 help / color / mirror / Atom feed
From: "Michael S. Tsirkin" <mst@redhat.com>
To: Jean-Philippe Brucker <jean-philippe@linaro.org>
Cc: kevin.tian@intel.com, virtualization@lists.linux-foundation.org,
	iommu@lists.linux-foundation.org, sebastien.boeuf@intel.com,
	will@kernel.org, jasowang@redhat.com
Subject: Re: [PATCH 0/5] iommu/virtio: Add identity domains
Date: Fri, 22 Oct 2021 06:16:27 -0400	[thread overview]
Message-ID: <20211022061534-mutt-send-email-mst@kernel.org> (raw)
In-Reply-To: <20211013121052.518113-1-jean-philippe@linaro.org>

On Wed, Oct 13, 2021 at 01:10:48PM +0100, Jean-Philippe Brucker wrote:
> Support identity domains, allowing to only enable IOMMU protection for a
> subset of endpoints (those assigned to userspace, for example). Users
> may enable identity domains at compile time
> (CONFIG_IOMMU_DEFAULT_PASSTHROUGH), boot time (iommu.passthrough=1) or
> runtime (/sys/kernel/iommu_groups/*/type = identity).


I put this in my branch so it can get testing under linux-next,
but pls notice if the ballot does not conclude in time
for the merge window I won't send it to Linus.

> Patches 1-2 support identity domains using the optional
> VIRTIO_IOMMU_F_BYPASS_CONFIG feature. The feature bit is not yet in the
> spec, see [1] for the latest proposal.
> 
> Patches 3-5 add a fallback to identity mappings, when the feature is not
> supported.
> 
> Note that this series doesn't touch the global bypass bit added by
> VIRTIO_IOMMU_F_BYPASS_CONFIG. All endpoints managed by the IOMMU should
> be attached to a domain, so global bypass isn't in use after endpoints
> are probed. Before that, the global bypass policy is decided by the
> hypervisor and firmware. So I don't think Linux needs to touch the
> global bypass bit, but there are some patches available on my
> virtio-iommu/bypass branch [2] to test it.
> 
> QEMU patches are on my virtio-iommu/bypass branch [3] (and the list)
> 
> [1] https://www.mail-archive.com/virtio-dev@lists.oasis-open.org/msg07898.html
> [2] https://jpbrucker.net/git/linux/log/?h=virtio-iommu/bypass
> [3] https://jpbrucker.net/git/qemu/log/?h=virtio-iommu/bypass
> 
> Jean-Philippe Brucker (5):
>   iommu/virtio: Add definitions for VIRTIO_IOMMU_F_BYPASS_CONFIG
>   iommu/virtio: Support bypass domains
>   iommu/virtio: Sort reserved regions
>   iommu/virtio: Pass end address to viommu_add_mapping()
>   iommu/virtio: Support identity-mapped domains
> 
>  include/uapi/linux/virtio_iommu.h |   8 ++-
>  drivers/iommu/virtio-iommu.c      | 113 +++++++++++++++++++++++++-----
>  2 files changed, 101 insertions(+), 20 deletions(-)
> 
> -- 
> 2.33.0

_______________________________________________
iommu mailing list
iommu@lists.linux-foundation.org
https://lists.linuxfoundation.org/mailman/listinfo/iommu

WARNING: multiple messages have this Message-ID (diff)
From: "Michael S. Tsirkin" <mst@redhat.com>
To: Jean-Philippe Brucker <jean-philippe@linaro.org>
Cc: joro@8bytes.org, virtualization@lists.linux-foundation.org,
	eric.auger@redhat.com, iommu@lists.linux-foundation.org,
	sebastien.boeuf@intel.com, will@kernel.org
Subject: Re: [PATCH 0/5] iommu/virtio: Add identity domains
Date: Fri, 22 Oct 2021 06:16:27 -0400	[thread overview]
Message-ID: <20211022061534-mutt-send-email-mst@kernel.org> (raw)
In-Reply-To: <20211013121052.518113-1-jean-philippe@linaro.org>

On Wed, Oct 13, 2021 at 01:10:48PM +0100, Jean-Philippe Brucker wrote:
> Support identity domains, allowing to only enable IOMMU protection for a
> subset of endpoints (those assigned to userspace, for example). Users
> may enable identity domains at compile time
> (CONFIG_IOMMU_DEFAULT_PASSTHROUGH), boot time (iommu.passthrough=1) or
> runtime (/sys/kernel/iommu_groups/*/type = identity).


I put this in my branch so it can get testing under linux-next,
but pls notice if the ballot does not conclude in time
for the merge window I won't send it to Linus.

> Patches 1-2 support identity domains using the optional
> VIRTIO_IOMMU_F_BYPASS_CONFIG feature. The feature bit is not yet in the
> spec, see [1] for the latest proposal.
> 
> Patches 3-5 add a fallback to identity mappings, when the feature is not
> supported.
> 
> Note that this series doesn't touch the global bypass bit added by
> VIRTIO_IOMMU_F_BYPASS_CONFIG. All endpoints managed by the IOMMU should
> be attached to a domain, so global bypass isn't in use after endpoints
> are probed. Before that, the global bypass policy is decided by the
> hypervisor and firmware. So I don't think Linux needs to touch the
> global bypass bit, but there are some patches available on my
> virtio-iommu/bypass branch [2] to test it.
> 
> QEMU patches are on my virtio-iommu/bypass branch [3] (and the list)
> 
> [1] https://www.mail-archive.com/virtio-dev@lists.oasis-open.org/msg07898.html
> [2] https://jpbrucker.net/git/linux/log/?h=virtio-iommu/bypass
> [3] https://jpbrucker.net/git/qemu/log/?h=virtio-iommu/bypass
> 
> Jean-Philippe Brucker (5):
>   iommu/virtio: Add definitions for VIRTIO_IOMMU_F_BYPASS_CONFIG
>   iommu/virtio: Support bypass domains
>   iommu/virtio: Sort reserved regions
>   iommu/virtio: Pass end address to viommu_add_mapping()
>   iommu/virtio: Support identity-mapped domains
> 
>  include/uapi/linux/virtio_iommu.h |   8 ++-
>  drivers/iommu/virtio-iommu.c      | 113 +++++++++++++++++++++++++-----
>  2 files changed, 101 insertions(+), 20 deletions(-)
> 
> -- 
> 2.33.0

_______________________________________________
Virtualization mailing list
Virtualization@lists.linux-foundation.org
https://lists.linuxfoundation.org/mailman/listinfo/virtualization

  parent reply	other threads:[~2021-10-22 10:16 UTC|newest]

Thread overview: 38+ messages / expand[flat|nested]  mbox.gz  Atom feed  top
2021-10-13 12:10 [PATCH 0/5] iommu/virtio: Add identity domains Jean-Philippe Brucker
2021-10-13 12:10 ` Jean-Philippe Brucker
2021-10-13 12:10 ` [PATCH 1/5] iommu/virtio: Add definitions for VIRTIO_IOMMU_F_BYPASS_CONFIG Jean-Philippe Brucker
2021-10-13 12:10   ` Jean-Philippe Brucker
2021-10-13 12:10 ` [PATCH 2/5] iommu/virtio: Support bypass domains Jean-Philippe Brucker
2021-10-13 12:10   ` Jean-Philippe Brucker
2021-10-14  3:25   ` Tian, Kevin
2021-10-14  3:25     ` Tian, Kevin
2021-10-14  3:27   ` Tian, Kevin
2021-10-14  3:27     ` Tian, Kevin
2021-10-13 12:10 ` [PATCH 3/5] iommu/virtio: Sort reserved regions Jean-Philippe Brucker
2021-10-13 12:10   ` Jean-Philippe Brucker
2021-10-13 12:10 ` [PATCH 4/5] iommu/virtio: Pass end address to viommu_add_mapping() Jean-Philippe Brucker
2021-10-13 12:10   ` Jean-Philippe Brucker
2021-10-13 12:10 ` [PATCH 5/5] iommu/virtio: Support identity-mapped domains Jean-Philippe Brucker
2021-10-13 12:10   ` Jean-Philippe Brucker
2021-10-14  3:00 ` [PATCH 0/5] iommu/virtio: Add identity domains Tian, Kevin
2021-10-14  3:00   ` Tian, Kevin
2021-10-18 11:37   ` joro
2021-10-18 11:37     ` joro
2021-10-21  6:42     ` Tian, Kevin
2021-10-21  6:42       ` Tian, Kevin
2021-10-18 15:23   ` Jean-Philippe Brucker
2021-10-18 15:23     ` Jean-Philippe Brucker
2021-10-18 15:34     ` Michael S. Tsirkin
2021-10-18 15:34       ` Michael S. Tsirkin
2021-10-19  1:22       ` Jason Wang
2021-10-19  1:22         ` Jason Wang
2021-10-19 15:31         ` Jean-Philippe Brucker
2021-10-19 15:31           ` Jean-Philippe Brucker
2021-10-21  6:45     ` Tian, Kevin
2021-10-21  6:45       ` Tian, Kevin
2021-10-21  6:48 ` Tian, Kevin
2021-10-21  6:48   ` Tian, Kevin
2021-10-22 10:16 ` Michael S. Tsirkin [this message]
2021-10-22 10:16   ` Michael S. Tsirkin
2021-10-22 12:26   ` Jean-Philippe Brucker
2021-10-22 12:26     ` Jean-Philippe Brucker

Reply instructions:

You may reply publicly to this message via plain-text email
using any one of the following methods:

* Save the following mbox file, import it into your mail client,
  and reply-to-all from there: mbox

  Avoid top-posting and favor interleaved quoting:
  https://en.wikipedia.org/wiki/Posting_style#Interleaved_style

* Reply using the --to, --cc, and --in-reply-to
  switches of git-send-email(1):

  git send-email \
    --in-reply-to=20211022061534-mutt-send-email-mst@kernel.org \
    --to=mst@redhat.com \
    --cc=iommu@lists.linux-foundation.org \
    --cc=jasowang@redhat.com \
    --cc=jean-philippe@linaro.org \
    --cc=kevin.tian@intel.com \
    --cc=sebastien.boeuf@intel.com \
    --cc=virtualization@lists.linux-foundation.org \
    --cc=will@kernel.org \
    /path/to/YOUR_REPLY

  https://kernel.org/pub/software/scm/git/docs/git-send-email.html

* If your mail client supports setting the In-Reply-To header
  via mailto: links, try the mailto: link
Be sure your reply has a Subject: header at the top and a blank line before the message body.
This is an external index of several public inboxes,
see mirroring instructions on how to clone and mirror
all data and code used by this external index.