From: Gavin Shan <gshan@redhat.com>
To: Mathieu Poirier <mathieu.poirier@linaro.org>,
berrange@redhat.com, kchamart@redhat.com,
pierrick.bouvier@oss.qualcomm.com, peter.maydell@linaro.org,
mst@redhat.com, cohuck@redhat.com, pbonzini@redhat.com,
eblake@redhat.com, armbru@redhat.com, jpb@kernel.org,
lorenzo.pieralisi@linaro.org
Cc: qemu-devel@nongnu.org, qemu-arm@nongnu.org, kvm@vger.kernel.org
Subject: Re: [RFC v1 07/25] target/arm/kvm: Create scratch Realm VM when requested
Date: Mon, 13 Jul 2026 15:30:31 +1000 [thread overview]
Message-ID: <ac26ac91-6809-4429-9750-e7d671e952bc@redhat.com> (raw)
In-Reply-To: <20260707224306.1202330-8-mathieu.poirier@linaro.org>
On 7/8/26 8:42 AM, Mathieu Poirier wrote:
> From: Jean-Philippe Brucker <jean-philippe@linaro.org>
>
> When a Realm is requested, create a scratch Realm VM by setting bit 8
> of the argument given to the KVM_CREATE_VM ioctl(). Bit 7-0 are reserved
> for the guest PA size.
>
> Signed-off-by: Jean-Philippe Brucker <jean-philippe@linaro.org>
> Signed-off-by: Mathieu Poirier <mathieu.poirier@linaro.org>
> ---
> target/arm/kvm-rme.c | 8 ++++++++
> target/arm/kvm-stub.c | 5 +++++
> target/arm/kvm.c | 4 +++-
> target/arm/kvm_arm.h | 8 ++++++++
> 4 files changed, 24 insertions(+), 1 deletion(-)
>
> diff --git a/target/arm/kvm-rme.c b/target/arm/kvm-rme.c
> index 90c1d30ba24c..f763d5ed6199 100644
> --- a/target/arm/kvm-rme.c
> +++ b/target/arm/kvm-rme.c
> @@ -99,3 +99,11 @@ void kvm_arm_rme_vcpu_init(ARMCPU *cpu)
>
> cpu->kvm_rme = true;
> }
> +
> +int kvm_arm_rme_vm_type(void)
> +{
> + if (rme_guest) {
> + return KVM_VM_TYPE_ARM_REALM;
> + }
> + return 0;
> +}
We had official name for 0, which is KVM_VM_TYPE_ARM_NORMAL. Another question if
it's worthwhile to have this helper since it's equivalent to something as below,
which can be directly applied to the caller.
int vm_type = (current_machine && current_machine->cgs) ? KVM_VM_TYPE_ARM_REALM :
KVM_VM_TYPE_ARM_NORMAL;
> diff --git a/target/arm/kvm-stub.c b/target/arm/kvm-stub.c
> index 4ab6f08637d1..6d52f172c5df 100644
> --- a/target/arm/kvm-stub.c
> +++ b/target/arm/kvm-stub.c
> @@ -129,3 +129,8 @@ void kvm_arm_rme_vcpu_init(ARMCPU *cpu)
> {
> g_assert_not_reached();
> }
> +
> +int kvm_arm_rme_vm_type(void)
> +{
> + g_assert_not_reached();
> +}
> diff --git a/target/arm/kvm.c b/target/arm/kvm.c
> index 4c212ed0c337..6aa1cd04e484 100644
> --- a/target/arm/kvm.c
> +++ b/target/arm/kvm.c
> @@ -108,6 +108,7 @@ bool kvm_arm_create_scratch_host_vcpu(int *fdarray,
> {
> int ret = 0, kvmfd = -1, vmfd = -1, cpufd = -1;
> int max_vm_pa_size;
> + int vm_type;
>
> kvmfd = qemu_open_old("/dev/kvm", O_RDWR);
> if (kvmfd < 0) {
> @@ -117,8 +118,9 @@ bool kvm_arm_create_scratch_host_vcpu(int *fdarray,
> if (max_vm_pa_size < 0) {
> max_vm_pa_size = 0;
> }
> + vm_type = kvm_arm_rme_vm_type();
> do {
> - vmfd = ioctl(kvmfd, KVM_CREATE_VM, max_vm_pa_size);
> + vmfd = ioctl(kvmfd, KVM_CREATE_VM, max_vm_pa_size | vm_type);
> } while (vmfd == -1 && errno == EINTR);
> if (vmfd < 0) {
> goto err;
> diff --git a/target/arm/kvm_arm.h b/target/arm/kvm_arm.h
> index 12ed1eee18b4..65ec1b970606 100644
> --- a/target/arm/kvm_arm.h
> +++ b/target/arm/kvm_arm.h
> @@ -259,4 +259,12 @@ int kvm_arm_rme_init(MachineState *ms, KVMState *s);
> */
> void kvm_arm_rme_vcpu_init(ARMCPU *cpu);
>
> +/**
> + * kvm_arm_rme_vm_type
> + * @ms: the machine state
> + *
> + * Returns the Realm KVM VM type if the user requested a Realm, 0 otherwise.
> + */
> +int kvm_arm_rme_vm_type(void);
> +
> #endif
Thanks,
Gavin
next prev parent reply other threads:[~2026-07-13 5:30 UTC|newest]
Thread overview: 47+ messages / expand[flat|nested] mbox.gz Atom feed top
2026-07-07 22:42 [RFC v1 00/25] Add Realm support to QEMU-VMM Mathieu Poirier
2026-07-07 22:42 ` [RFC v1 01/25] linux-headers: Add RME related definitions Mathieu Poirier
2026-07-10 1:09 ` Gavin Shan
2026-07-10 7:36 ` Lorenzo Pieralisi
2026-07-10 10:46 ` Lorenzo Pieralisi
2026-07-13 0:41 ` Gavin Shan
2026-07-13 21:11 ` Mathieu Poirier
2026-07-07 22:42 ` [RFC v1 02/25] target/arm/kvm: Return immediately on error in kvm_arch_init() Mathieu Poirier
2026-07-08 5:08 ` Philippe Mathieu-Daudé
2026-07-07 22:42 ` [RFC v1 03/25] target/arm: Add confidential guest support Mathieu Poirier
2026-07-08 4:39 ` Markus Armbruster
2026-07-09 20:22 ` Mathieu Poirier
2026-07-07 22:42 ` [RFC v1 04/25] target/arm/kvm-rme: Add mechanic to initialize realms Mathieu Poirier
2026-07-13 5:14 ` Gavin Shan
2026-07-13 22:44 ` Mathieu Poirier
2026-07-13 5:34 ` Gavin Shan
2026-07-07 22:42 ` [RFC v1 05/25] target/arm/kvm: Split kvm_arch_get/put_registers Mathieu Poirier
2026-07-07 22:42 ` [RFC v1 06/25] target/arm/kvm-rme: Initialize vCPU Mathieu Poirier
2026-07-07 22:42 ` [RFC v1 07/25] target/arm/kvm: Create scratch Realm VM when requested Mathieu Poirier
2026-07-13 5:30 ` Gavin Shan [this message]
2026-07-07 22:42 ` [RFC v1 08/25] target/arm/kvm: Use kvm_vm_check_extension() where necessary Mathieu Poirier
2026-07-13 0:43 ` Gavin Shan
2026-07-07 22:42 ` [RFC v1 09/25] target/arm/kvm-rme: Initialise Realm Initial Address space Mathieu Poirier
2026-07-09 23:44 ` Gavin Shan
2026-07-10 7:37 ` Lorenzo Pieralisi
2026-07-07 22:42 ` [RFC v1 10/25] hw/core/loader: Add a ROM loader notifier Mathieu Poirier
2026-07-14 10:52 ` Gavin Shan
2026-07-07 22:42 ` [RFC v1 11/25] target/arm/kvm-rme: Keep track of images loaded in Realm memory Mathieu Poirier
2026-07-07 22:42 ` [RFC v1 12/25] target/arm/kvm-rme: Populate Realm with runtime images Mathieu Poirier
2026-07-14 10:56 ` Gavin Shan
2026-07-07 22:42 ` [RFC v1 13/25] target/arm/cpu: Set number of breakpoints and watchpoints in KVM Mathieu Poirier
2026-07-07 22:42 ` [RFC v1 14/25] target/arm/cpu: Set number of PMU counters " Mathieu Poirier
2026-07-07 22:42 ` [RFC v1 15/25] target/arm/cpu: Don't read Realm registers Mathieu Poirier
2026-07-07 22:42 ` [RFC v1 16/25] hw/arm/virt: Set proper conduit method for Realms Mathieu Poirier
2026-07-08 5:12 ` Philippe Mathieu-Daudé
2026-07-07 22:42 ` [RFC v1 17/25] hw/arm/virt: Embed Realm VM type with IPA address space Mathieu Poirier
2026-07-07 22:42 ` [RFC v1 18/25] hw/arm/virt: Reserve one bit of guest physical address for RME Mathieu Poirier
2026-07-07 22:43 ` [RFC v1 19/25] hw/arm/virt: Disable DTB randomness for confidential VMs Mathieu Poirier
2026-07-07 22:43 ` [RFC v1 20/25] hw/arm/virt: Move virt_flash_create() to machvirt_init() Mathieu Poirier
2026-07-08 5:14 ` Philippe Mathieu-Daudé
2026-07-07 22:43 ` [RFC v1 21/25] hw/arm/virt: Use RAM instead of flash for confidential guest firmware Mathieu Poirier
2026-07-07 22:43 ` [RFC v1 22/25] target/arm/kvm-rme: Add DMA remapping for the shared memory region Mathieu Poirier
2026-07-07 22:43 ` [RFC v1 23/25] docs/interop/firmware.json: Add arm-rme firmware feature Mathieu Poirier
2026-07-08 4:37 ` Markus Armbruster
2026-07-08 5:16 ` Philippe Mathieu-Daudé
2026-07-07 22:43 ` [RFC v1 24/25] hw/arm/boot: Load DTB as is for confidential VMs Mathieu Poirier
2026-07-07 22:43 ` [RFC v1 25/25] hw/arm/boot: Skip bootloader for confidential guests Mathieu Poirier
Reply instructions:
You may reply publicly to this message via plain-text email
using any one of the following methods:
* Save the following mbox file, import it into your mail client,
and reply-to-all from there: mbox
Avoid top-posting and favor interleaved quoting:
https://en.wikipedia.org/wiki/Posting_style#Interleaved_style
* Reply using the --to, --cc, and --in-reply-to
switches of git-send-email(1):
git send-email \
--in-reply-to=ac26ac91-6809-4429-9750-e7d671e952bc@redhat.com \
--to=gshan@redhat.com \
--cc=armbru@redhat.com \
--cc=berrange@redhat.com \
--cc=cohuck@redhat.com \
--cc=eblake@redhat.com \
--cc=jpb@kernel.org \
--cc=kchamart@redhat.com \
--cc=kvm@vger.kernel.org \
--cc=lorenzo.pieralisi@linaro.org \
--cc=mathieu.poirier@linaro.org \
--cc=mst@redhat.com \
--cc=pbonzini@redhat.com \
--cc=peter.maydell@linaro.org \
--cc=pierrick.bouvier@oss.qualcomm.com \
--cc=qemu-arm@nongnu.org \
--cc=qemu-devel@nongnu.org \
/path/to/YOUR_REPLY
https://kernel.org/pub/software/scm/git/docs/git-send-email.html
* If your mail client supports setting the In-Reply-To header
via mailto: links, try the mailto: link
Be sure your reply has a Subject: header at the top and a blank line
before the message body.
This is an external index of several public inboxes,
see mirroring instructions on how to clone and mirror
all data and code used by this external index.