From mboxrd@z Thu Jan 1 00:00:00 1970 Received: from us-smtp-delivery-124.mimecast.com (us-smtp-delivery-124.mimecast.com [170.10.133.124]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by smtp.subspace.kernel.org (Postfix) with ESMTPS id 8E9AE3B3C0F for ; Thu, 10 Sep 2026 05:53:19 +0000 (UTC) Authentication-Results: smtp.subspace.kernel.org; arc=none smtp.client-ip=170.10.133.124 ARC-Seal:i=1; a=rsa-sha256; d=subspace.kernel.org; s=arc-20240116; t=1789019601; cv=none; b=DLb7dLVccAB7FNlqhb9jaE3XHn+YuVroxgjMY/Y1A5obo3cDZqn+UbbOlWa/rYVCXS4fxalPUjsURw6anpR3DQIE/gjvnM3272rONlKO9uzc1D9Pr3V0NjtbYlCcqyMEoofG5rQMnfD4zQw3tWNSlI0RzQvmtCI0U/mIqyCStsc= ARC-Message-Signature:i=1; a=rsa-sha256; d=subspace.kernel.org; s=arc-20240116; t=1789019601; c=relaxed/simple; bh=H0YWLVNt1VspJyW++/mL2xiGGQ1f0zXMz1fyGHmQyZM=; h=Message-ID:Date:MIME-Version:Subject:To:Cc:References:From: In-Reply-To:Content-Type; b=GqjXF09FqSDrp9uOdowcaeqUYlgtY+lzWiVpahbqOOJOXhJEmU0W13C7HIc7P/6uwP14MK7I8VBFG9m4ePRx0BL6qKVdxo8W0K1DC97yvwzxJpkTLaBdMKdJMVOFf2aLEM1KqIvlESEsm0gnqmeWpgDt9ytGGYJAEJid3HwmFFA= ARC-Authentication-Results:i=1; smtp.subspace.kernel.org; dmarc=pass (p=quarantine dis=none) header.from=redhat.com; spf=pass smtp.mailfrom=redhat.com; dkim=pass (1024-bit key) header.d=redhat.com header.i=@redhat.com header.b=FIUlFVjd; arc=none smtp.client-ip=170.10.133.124 Authentication-Results: smtp.subspace.kernel.org; dmarc=pass (p=quarantine dis=none) header.from=redhat.com Authentication-Results: smtp.subspace.kernel.org; spf=pass smtp.mailfrom=redhat.com Authentication-Results: smtp.subspace.kernel.org; dkim=pass (1024-bit key) header.d=redhat.com header.i=@redhat.com header.b="FIUlFVjd" DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=redhat.com; s=mimecast20190719; t=1789019598; h=from:from:reply-to:subject:subject:date:date:message-id:message-id: to:to:cc:cc:mime-version:mime-version:content-type:content-type: content-transfer-encoding:content-transfer-encoding: in-reply-to:in-reply-to:references:references; bh=aMvkKeYrjNymKP3nzuev6PMvw+A1W0w+cadnXyWgZ8s=; b=FIUlFVjdBJdbgYI/plRk4/jeGHJ6lH51+p8Rk5sm4E5xMGMuczK3o4FU4kO60SlY7V09Jm mMnZw9peX8L9OYOYhL+cfaVZB+PixMZv3j/Vjz5wqjFXZuW4jeVd9v4MmkwbYMQECj8ME8 UPGFIVG+sqj8UXdZRDHv/HF33N8t11g= Received: from mail-pl1-f198.google.com (mail-pl1-f198.google.com [209.85.214.198]) by relay.mimecast.com with ESMTP with STARTTLS (version=TLSv1.3, cipher=TLS_AES_256_GCM_SHA384) id us-mta-398-0QZ1K1DXOqWOPJzO7p8Cmw-1; Thu, 10 Sep 2026 01:53:15 -0400 X-MC-Unique: 0QZ1K1DXOqWOPJzO7p8Cmw-1 X-Mimecast-MFC-AGG-ID: 0QZ1K1DXOqWOPJzO7p8Cmw_1789019594 Received: by mail-pl1-f198.google.com with SMTP id d9443c01a7336-2db3734d06dso101205025ad.0 for ; Wed, 09 Sep 2026 22:53:14 -0700 (PDT) X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20251104; t=1789019594; x=1789624394; h=content-transfer-encoding:content-type:in-reply-to:from :content-language:references:cc:to:subject:user-agent:mime-version :date:message-id:x-gm-gg:x-gm-message-state:from:to:cc:subject:date :message-id:reply-to:content-type; bh=aMvkKeYrjNymKP3nzuev6PMvw+A1W0w+cadnXyWgZ8s=; b=C4wrFXxNf99vOlj94263qdskDCu7q8ey7BQ+NdQvW69jw6Tt7WsR1kaGlANWWuFTMy 8bUVhln6zpAVYHc2KSOqnJQfVe/0uT9FMIWXGIOISPWWMZBaZ5XjoAVZFOtN2dF9+JQX m8PxSCIuOdo3eKZsghro9VstV5zsRhJGQJrkSpKDyIKa+az4GwjH2oNEuVoyvmlmbsN8 Me8H82bUbbY1cjoiYgmiwFmZAitCwaQpA2XtGfEXfFI3ZCOCH6YzeY/LW/WRbK3Oc2NY UZX1t0Cq0cXd50ogO1La4ylj3Fs+VXlmGhOABbCNjKG2RdavHcOzKhlH1vRxRWTkzXMo lM1w== X-Forwarded-Encrypted: i=1; AKwUvBynhcLW/yZ3FM9QBHESchXyXMSTSKQw3QqunH5CG3GWvZa7SyG77jrWJYaHiw3bTvufOeuSX74=@lists.linux.dev X-Gm-Message-State: AFuF++mJVw7lDLtKebRtabH9yy0LdKJMZnDsTsQepW8QvtzuHqjZOje3 kH4ubGVSeeyMo7eFeME+mFbW9/ILYdXRThkI6P1uvUlQuTP8n5WV1a+D4Mfpr4NHOh+EuyJPRdh P8u5tAvg3Qlp6quljdi9pEfmD/ywCd/KbYT2ZotafYlVCEepkUKCet5Mv7g== X-Gm-Gg: AYBFou0HQBAUNctzPjtxbA1ZkP/TbkBMddlpHEFDj37NNK87pTb7S5aSF6koTTWF4CQ Hrgj7AElaVhadxfSiRWHcoofQZsW4ANR2LcPFcPM3k1qu85Pm0yF0FVKj08smQiRQSulwy7S7CH nl2ZqZmTPfzthG6i9Pgi3wk8vz6PDZXswzDfVAc/2qQVJkBwsu0CYoF20CiT+iJNU+SlUe+MTZx mL428s35kPPEhARKoWwu8x/vFGa8Y5oxhi9uuxfjfCAhGg3cDU1mVirbRCa4EHX0hBMctrKq4h7 C4N0NKA1IEjcmLhng7n1mjqKoEs+YkQ0/LWLEstWMTfD+y69hqgVKjfmriyGwEVA9rS4tQycr+d jF7LpChE6hPa81vIgIKJMVxrZ/y9ltKFSacesplxmhA== X-Received: by 2002:a17:90b:5905:b0:398:9bd5:490b with SMTP id 98e67ed59e1d1-39b262133ccmr56583389a91.18.1789019593824; Wed, 09 Sep 2026 22:53:13 -0700 (PDT) X-Received: by 2002:a17:90b:5905:b0:398:9bd5:490b with SMTP id 98e67ed59e1d1-39b262133ccmr56583277a91.18.1789019593097; Wed, 09 Sep 2026 22:53:13 -0700 (PDT) Received: from [192.168.68.52] (n175-34-8-244.mrk21.qld.optusnet.com.au. [175.34.8.244]) by smtp.gmail.com with ESMTPSA id 98e67ed59e1d1-39bae615657sm2525614a91.0.2026.09.09.22.53.03 (version=TLS1_3 cipher=TLS_AES_128_GCM_SHA256 bits=128/128); Wed, 09 Sep 2026 22:53:12 -0700 (PDT) Message-ID: Date: Thu, 10 Sep 2026 15:53:00 +1000 Precedence: bulk X-Mailing-List: kvmarm@lists.linux.dev List-Id: List-Subscribe: List-Unsubscribe: MIME-Version: 1.0 User-Agent: Mozilla Thunderbird Subject: Re: [PATCH v17 06/20] KVM: arm64: CCA: Add a new mode for supporting Realm guests To: Suzuki K Poulose , kvm@vger.kernel.org, kvmarm@lists.linux.dev Cc: maz@kernel.org, will@kernel.org, catalin.marinas@arm.com, linux-kernel@vger.kernel.org, linux-arm-kernel@lists.infradead.org, steven.price@arm.com, aneesh.kumar@kernel.org, oupton@kernel.org, joey.gouly@arm.com, tabba@google.com, yuzenghui@huawei.com, linux-coco@lists.linux.dev, gankulkarni@os.amperecomputing.com, sdonthineni@nvidia.com, alpergun@google.com, fj0570is@fujitsu.com, WeiLin.Chang@arm.com, lpieralisi@kernel.org, enju.kohei@fujitsu.com References: <20260908162223.1683432-1-suzuki.poulose@arm.com> <20260908162223.1683432-7-suzuki.poulose@arm.com> From: Gavin Shan In-Reply-To: <20260908162223.1683432-7-suzuki.poulose@arm.com> X-Mimecast-Spam-Score: 0 X-Mimecast-MFC-PROC-ID: 4akn2aBDRwnPjDBG3L3ENsr-dhYFGPOuD-US699T-Ho_1789019594 X-Mimecast-Originator: redhat.com Content-Language: en-US Content-Type: text/plain; charset=UTF-8; format=flowed Content-Transfer-Encoding: 7bit Hi Suzuki, On 9/9/26 2:22 AM, Suzuki K Poulose wrote: > Add an explicit mode to support Arm CCA guests. > > Signed-off-by: Suzuki K Poulose > --- > Documentation/admin-guide/kernel-parameters.txt | 3 +++ > arch/arm64/include/asm/kvm_host.h | 1 + > arch/arm64/kvm/arm.c | 5 +++++ > 3 files changed, 9 insertions(+) > > diff --git a/Documentation/admin-guide/kernel-parameters.txt b/Documentation/admin-guide/kernel-parameters.txt > index 68647ff4bdd24..1afe3df3b923e 100644 > --- a/Documentation/admin-guide/kernel-parameters.txt > +++ b/Documentation/admin-guide/kernel-parameters.txt > @@ -3256,6 +3256,9 @@ Kernel parameters > nested: VHE-based mode with support for nested > virtualization. Requires at least ARMv8.4 > hardware (with FEAT_NV2). > + rmm: Support for running confidential guests in Realm > + world using RMM, as defined by Arm Confidential > + Compute Architecture (CCA) > I'm not sure, but 'realm' would be more appropriate name. rmm (Real Management Monitor) is the term limited to the firmware to me. Besides, we have been using 'realm' broadly in this series like kvm_vm_is_realm(), kvm_realm_state() and so on. > Defaults to VHE/nVHE based on hardware support. Setting > mode to "protected" will disable kexec and hibernation > diff --git a/arch/arm64/include/asm/kvm_host.h b/arch/arm64/include/asm/kvm_host.h > index b2e99c5cb1cd3..31ae9d8d8e92f 100644 > --- a/arch/arm64/include/asm/kvm_host.h > +++ b/arch/arm64/include/asm/kvm_host.h > @@ -69,6 +69,7 @@ enum kvm_mode { > KVM_MODE_DEFAULT, > KVM_MODE_PROTECTED, > KVM_MODE_NV, > + KVM_MODE_RMM, > KVM_MODE_NONE, > }; > #ifdef CONFIG_KVM > diff --git a/arch/arm64/kvm/arm.c b/arch/arm64/kvm/arm.c > index 9af3bbb2f8c24..50f0adfadab38 100644 > --- a/arch/arm64/kvm/arm.c > +++ b/arch/arm64/kvm/arm.c > @@ -3264,6 +3264,11 @@ static int __init early_kvm_mode_cfg(char *arg) > return 0; > } > > + if (strcmp(arg, "rmm") == 0 && !WARN_ON(!is_kernel_in_hyp_mode())) { > + kvm_mode = KVM_MODE_RMM; > + return 0; > + } > + > return -EINVAL; > } > early_param("kvm-arm.mode", early_kvm_mode_cfg); Thanks, Gavin