Re: Linux kernel set the hypervisor vector table through ATF

From: Marc Zyngier <maz@kernel.org>
To: Dongjiu Geng <gengdongjiu1@gmail.com>
Cc: Mark Rutland <mark.rutland@arm.com>,
	tf-a@lists.trustedfirmware.org, catalin.marinas@arm.com,
	linux-arm-kernel@lists.infradead.org,
	gengdongjiu.gdj@alibaba-inc.com
Subject: Re: Linux kernel set the hypervisor vector table through ATF
Date: Tue, 01 Jun 2021 11:09:19 +0100	[thread overview]
Message-ID: <87wnrd28xc.wl-maz@kernel.org> (raw)
In-Reply-To: <CABSBigROBSgYDDWyY8OVfb2v8SNTtUQTFV7To7Y9hsiD9WPbHQ@mail.gmail.com>

On Tue, 01 Jun 2021 10:53:49 +0100,
Dongjiu Geng <gengdongjiu1@gmail.com> wrote:
> 
> Mark Rutland <mark.rutland@arm.com> 于2021年6月1日周二 下午5:19写道：
> >
> > On Fri, May 28, 2021 at 05:26:51PM +0800, Dongjiu Geng wrote:
> > > Hi All,
> > >       when Linux kernel boot from EL1,  there is no method to let
> > > kernel to enter EL2 to enable hypervisor.  so I want to add an SMC
> > > interface between kernel and EL3 ATF to let kernel can set the
> > > hypervisor vector table,  then can enter EL2 to enable hypervisor, as
> > > shown in [1].
> > > Do you agree?  Otherwise there is no method to enter EL2 hypervisor
> > > when kernel boot from EL1, because the hypervisor vector
> > > table(vbar_el2) is unknown.
> >
> > The kernel already supported being booted at EL2, where it will install
> > itself as the hypervisor (and will drop to EL1 if required). EL2 is the
> > preferred boot mode, as we document in:
> >
> > https://www.kernel.org/doc/html/latest/arm64/booting.html
> >
> > ... where we say:
> >
> > | The CPU must be in either EL2 (RECOMMENDED in order to have access to
> > | the virtualisation extensions) or non-secure EL1.
> >
> > We *strongly* prefer this over adding new ABIs to transition from EL1 to
> > EL2. Please boot the kernel at EL2 if you want to use KVM.
> 
> Thanks for the answer.
> If use KVM, it should boot from EL2.  But if the hypervisor is not
> KVM, such as Jailhouse hypervisor and some Chip manufacturer boot the
> host kernel from EL1(not follow above rule), it seems there is not way
> to enter the Jailhouse hypervisor.

We only deal with two cases:
- either the kernel uses its own, built-in hypervisor: it boots at
  EL2, and installs itself.

- or there is a pre-existing hypervisor, and the kernel boots at EL1.

In the past, Jailhouse used the exact same entry points as KVM. What
has changed?

Finally, if you can change the firmware to install the EL2 vectors,
you can also change it to enter the kernel at EL2. I suggest you do
that instead.

Thanks,

	M.

-- 
Without deviation from the norm, progress is not possible.

_______________________________________________
linux-arm-kernel mailing list
linux-arm-kernel@lists.infradead.org
http://lists.infradead.org/mailman/listinfo/linux-arm-kernel