From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: X-Spam-Checker-Version: SpamAssassin 3.4.0 (2014-02-07) on aws-us-west-2-korg-lkml-1.web.codeaurora.org Received: from bombadil.infradead.org (bombadil.infradead.org [198.137.202.133]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by smtp.lore.kernel.org (Postfix) with ESMTPS id 0D19CC3DA42 for ; Wed, 10 Jul 2024 15:35:01 +0000 (UTC) DKIM-Signature: v=1; a=rsa-sha256; q=dns/txt; c=relaxed/relaxed; d=lists.infradead.org; s=bombadil.20210309; h=Sender:List-Subscribe:List-Help :List-Post:List-Archive:List-Unsubscribe:List-Id:Content-Transfer-Encoding: Content-Type:In-Reply-To:From:References:Cc:To:Subject:MIME-Version:Date: Message-ID:Reply-To:Content-ID:Content-Description:Resent-Date:Resent-From: Resent-Sender:Resent-To:Resent-Cc:Resent-Message-ID:List-Owner; bh=ZWFwYGCWKdEJBmsju1Jsjh7iCVneEloibrMeyimcF9Y=; b=mKZe9IY/MlPV9oTD+tGDvycR8x vbu1flvxGc7VM6UYGrl9EDMT6QFbD+SxdKuL7O6FKny0sC5yAADVpLKXJXhtFuUnhepOJyxu9h47I 5jwpTqx4QhbhiQRvzMvNqWzkcV+1/krUooqZB4ekCeM7ffvwMfcrTX8Axyg/CD0qWp+DUBA6LEGgp akf/SGEhUHoNyE/MFc60DW9XzG7kFx9Hl67nipwLsHG43nAAIW7oNcSsqSObJePPbaZsPoMazyvrf cx73FoxlFQ6OUddXmx5lRTBxhoFFY1Yx23G7wQg4xgAm6DgiFjsvaYvZl9MRjQZNDToOMFWZaM85n K+OsMIIQ==; Received: from localhost ([::1] helo=bombadil.infradead.org) by bombadil.infradead.org with esmtp (Exim 4.97.1 #2 (Red Hat Linux)) id 1sRZLH-0000000AyJ1-2IpT; Wed, 10 Jul 2024 15:34:51 +0000 Received: from foss.arm.com ([217.140.110.172]) by bombadil.infradead.org with esmtp (Exim 4.97.1 #2 (Red Hat Linux)) id 1sRZKn-0000000Ay7v-1rSy for linux-arm-kernel@lists.infradead.org; Wed, 10 Jul 2024 15:34:22 +0000 Received: from usa-sjc-imap-foss1.foss.arm.com (unknown [10.121.207.14]) by usa-sjc-mx-foss1.foss.arm.com (Postfix) with ESMTP id 0510B113E; Wed, 10 Jul 2024 08:34:46 -0700 (PDT) Received: from [10.57.8.115] (unknown [10.57.8.115]) by usa-sjc-imap-foss1.foss.arm.com (Postfix) with ESMTPSA id 8CC303F766; Wed, 10 Jul 2024 08:34:15 -0700 (PDT) Message-ID: Date: Wed, 10 Jul 2024 16:34:12 +0100 MIME-Version: 1.0 User-Agent: Mozilla Thunderbird Subject: Re: [PATCH v4 02/15] firmware/psci: Add psci_early_test_conduit() To: Will Deacon Cc: kvm@vger.kernel.org, kvmarm@lists.linux.dev, Jean-Philippe Brucker , Catalin Marinas , Marc Zyngier , James Morse , Oliver Upton , Suzuki K Poulose , Zenghui Yu , linux-arm-kernel@lists.infradead.org, linux-kernel@vger.kernel.org, Joey Gouly , Alexandru Elisei , Christoffer Dall , Fuad Tabba , linux-coco@lists.linux.dev, Ganapatrao Kulkarni References: <20240701095505.165383-1-steven.price@arm.com> <20240701095505.165383-3-steven.price@arm.com> <20240709104851.GE12978@willie-the-truck> From: Steven Price Content-Language: en-GB In-Reply-To: <20240709104851.GE12978@willie-the-truck> Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 7bit X-CRM114-Version: 20100106-BlameMichelson ( TRE 0.8.0 (BSD) ) MR-646709E3 X-CRM114-CacheID: sfid-20240710_083421_618102_B4AD7F56 X-CRM114-Status: GOOD ( 28.33 ) X-BeenThere: linux-arm-kernel@lists.infradead.org X-Mailman-Version: 2.1.34 Precedence: list List-Id: List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Sender: "linux-arm-kernel" Errors-To: linux-arm-kernel-bounces+linux-arm-kernel=archiver.kernel.org@lists.infradead.org Hi Will! On 09/07/2024 11:48, Will Deacon wrote: > On Mon, Jul 01, 2024 at 10:54:52AM +0100, Steven Price wrote: >> From: Jean-Philippe Brucker >> >> Add a function to test early if PSCI is present and what conduit it >> uses. Because the PSCI conduit corresponds to the SMCCC one, this will >> let the kernel know whether it can use SMC instructions to discuss with >> the Realm Management Monitor (RMM), early enough to enable RAM and >> serial access when running in a Realm. >> >> Signed-off-by: Jean-Philippe Brucker >> Signed-off-by: Steven Price >> --- >> v4: New patch >> --- >> drivers/firmware/psci/psci.c | 25 +++++++++++++++++++++++++ >> include/linux/psci.h | 5 +++++ >> 2 files changed, 30 insertions(+) >> >> diff --git a/drivers/firmware/psci/psci.c b/drivers/firmware/psci/psci.c >> index d9629ff87861..a40dcaf17822 100644 >> --- a/drivers/firmware/psci/psci.c >> +++ b/drivers/firmware/psci/psci.c >> @@ -13,6 +13,7 @@ >> #include >> #include >> #include >> +#include >> #include >> #include >> #include >> @@ -767,6 +768,30 @@ int __init psci_dt_init(void) >> return ret; >> } >> >> +/* >> + * Test early if PSCI is supported, and if its conduit matches @conduit >> + */ >> +bool __init psci_early_test_conduit(enum arm_smccc_conduit conduit) >> +{ >> + int len; >> + int psci_node; >> + const char *method; >> + unsigned long dt_root; >> + >> + /* DT hasn't been unflattened yet, we have to work with the flat blob */ >> + dt_root = of_get_flat_dt_root(); >> + psci_node = of_get_flat_dt_subnode_by_name(dt_root, "psci"); >> + if (psci_node <= 0) >> + return false; >> + >> + method = of_get_flat_dt_prop(psci_node, "method", &len); >> + if (!method) >> + return false; >> + >> + return (conduit == SMCCC_CONDUIT_SMC && strncmp(method, "smc", len) == 0) || >> + (conduit == SMCCC_CONDUIT_HVC && strncmp(method, "hvc", len) == 0); >> +} > > Hmm, I don't think this is sufficient to check for SMCCC reliably. > Instead, I think you need to do something more involved: > > 1. Check for PSCI in the DT > 2. Check that the PSCI major version is >= 1 > 3. Use PSCI_FEATURES to check that you have SMCCC > 4. Use SMCCC_VERSION to find out which version of SMCCC you have > > That's roughly what the PSCI driver does, so we should avoid duplicating > that logic. Hmm, you have a point. This was an improvement over the previous (assume that making an SMC call is going to work well enough to return at error for non-realms), but I guess it's technically possible for a system to have PSCI but not implement enough of SMCCC to reliably get an error code back. Do you have any pointers on how pKVM detects it is a guest? Currently we have a couple of things we have to do very early as a realm guest: * Mark memory as RIPAS_RAM. My preference would be to punt this problem to the VMM (or UEFI) and make it a boot requirement. But it gets in the way for attestation purposes as you can't have the same attestation report for VMs which differ only by available RAM in that case. * earlycon - we need to know if the serial device is in unprotected MMIO as that needs mapping with the top IPA bit set. (I think that's all that's really early - everything else I can think of should be after the usual PSCI probe should have happened) Thanks for taking a look! Steve