public inbox for kvm@vger.kernel.org
 help / color / mirror / Atom feed
From: Tony Krowiak <akrowiak@linux.ibm.com>
To: linux-s390@vger.kernel.org, linux-kernel@vger.kernel.org,
	kvm@vger.kernel.org
Cc: jjherne@linux.ibm.com, freude@linux.ibm.com,
	borntraeger@de.ibm.com, cohuck@redhat.com,
	mjrosato@linux.ibm.com, pasic@linux.ibm.com,
	alex.williamson@redhat.com, kwankhede@nvidia.com,
	fiuczy@linux.ibm.com
Subject: [PATCH 00/12] s390/vfio_ap: crypto pass-through for SE guests
Date: Tue, 15 Aug 2023 14:43:21 -0400	[thread overview]
Message-ID: <20230815184333.6554-1-akrowiak@linux.ibm.com> (raw)

This patch series is for the changes required in the vfio_ap device 
driver to facilitate pass-through of crypto devices to a secure 
execution guest. In particular, it is critical that no data from the
queues passed through to the SE guest is leaked when the guest is 
destroyed. There are also some new response codes returned from the
PQAP(ZAPQ) and PQAP(TAPQ) commands that have been added to the
architecture in support of pass-through of crypto devices to SE guests;
these need to be accounted for when handling the reset of queues.


Janosch Frank (1):
  s390/uv: export uv_pin_shared for direct usage

Tony Krowiak (11):
  s390/vfio-ap: No need to check the 'E' and 'I' bits in APQSW after
    TAPQ
  s390/vfio-ap: clean up irq resources if possible
  s390/vfio-ap: wait for response code 05 to clear on queue reset
  s390/vfio-ap: allow deconfigured queue to be passed through to a guest
  s390/vfio-ap: remove upper limit on wait for queue reset to complete
  s390/vfio-ap: store entire AP queue status word with the queue object
  s390/vfio-ap: use work struct to verify queue reset
  s390/vfio-ap: handle queue state change in progress on reset
  s390/vfio-ap: check for TAPQ response codes 0x35 and 0x36
  kvm: s390: export kvm_s390_pv*_is_protected functions
  s390/vfio-ap: Make sure nib is shared

 arch/s390/include/asm/kvm_host.h      |   3 +
 arch/s390/include/asm/uv.h            |   6 +
 arch/s390/kernel/uv.c                 |   3 +-
 arch/s390/kvm/kvm-s390.h              |  12 --
 arch/s390/kvm/pv.c                    |  14 +++
 drivers/s390/crypto/vfio_ap_ops.c     | 164 +++++++++++++++++---------
 drivers/s390/crypto/vfio_ap_private.h |   6 +-
 7 files changed, 135 insertions(+), 73 deletions(-)

-- 
2.39.3


             reply	other threads:[~2023-08-15 18:44 UTC|newest]

Thread overview: 16+ messages / expand[flat|nested]  mbox.gz  Atom feed  top
2023-08-15 18:43 Tony Krowiak [this message]
2023-08-15 18:43 ` [PATCH 01/12] s390/vfio-ap: No need to check the 'E' and 'I' bits in APQSW after TAPQ Tony Krowiak
2023-08-15 18:43 ` [PATCH 02/12] s390/vfio-ap: clean up irq resources if possible Tony Krowiak
2023-08-15 18:43 ` [PATCH 03/12] s390/vfio-ap: wait for response code 05 to clear on queue reset Tony Krowiak
2023-08-15 18:43 ` [PATCH 04/12] s390/vfio-ap: allow deconfigured queue to be passed through to a guest Tony Krowiak
2023-08-15 18:43 ` [PATCH 05/12] s390/vfio-ap: remove upper limit on wait for queue reset to complete Tony Krowiak
2023-08-15 18:43 ` [PATCH 06/12] s390/vfio-ap: store entire AP queue status word with the queue object Tony Krowiak
2023-08-15 18:43 ` [PATCH 07/12] s390/vfio-ap: use work struct to verify queue reset Tony Krowiak
2023-08-15 18:43 ` [PATCH 08/12] s390/vfio-ap: handle queue state change in progress on reset Tony Krowiak
2023-08-15 18:43 ` [PATCH 09/12] s390/vfio-ap: check for TAPQ response codes 0x35 and 0x36 Tony Krowiak
2023-08-15 18:43 ` [PATCH 10/12] s390/uv: export uv_pin_shared for direct usage Tony Krowiak
2023-08-15 18:43 ` [PATCH 11/12] kvm: s390: export kvm_s390_pv*_is_protected functions Tony Krowiak
2023-08-15 18:43 ` [PATCH 12/12] s390/vfio-ap: Make sure nib is shared Tony Krowiak
2023-08-16 11:39 ` [PATCH 00/12] s390/vfio_ap: crypto pass-through for SE guests Janosch Frank
2023-08-16 12:12   ` Janosch Frank
2023-08-18 13:35     ` Heiko Carstens

Reply instructions:

You may reply publicly to this message via plain-text email
using any one of the following methods:

* Save the following mbox file, import it into your mail client,
  and reply-to-all from there: mbox

  Avoid top-posting and favor interleaved quoting:
  https://en.wikipedia.org/wiki/Posting_style#Interleaved_style

* Reply using the --to, --cc, and --in-reply-to
  switches of git-send-email(1):

  git send-email \
    --in-reply-to=20230815184333.6554-1-akrowiak@linux.ibm.com \
    --to=akrowiak@linux.ibm.com \
    --cc=alex.williamson@redhat.com \
    --cc=borntraeger@de.ibm.com \
    --cc=cohuck@redhat.com \
    --cc=fiuczy@linux.ibm.com \
    --cc=freude@linux.ibm.com \
    --cc=jjherne@linux.ibm.com \
    --cc=kvm@vger.kernel.org \
    --cc=kwankhede@nvidia.com \
    --cc=linux-kernel@vger.kernel.org \
    --cc=linux-s390@vger.kernel.org \
    --cc=mjrosato@linux.ibm.com \
    --cc=pasic@linux.ibm.com \
    /path/to/YOUR_REPLY

  https://kernel.org/pub/software/scm/git/docs/git-send-email.html

* If your mail client supports setting the In-Reply-To header
  via mailto: links, try the mailto: link
Be sure your reply has a Subject: header at the top and a blank line before the message body.
This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox