From mboxrd@z Thu Jan 1 00:00:00 1970 Received: from mail-pj1-f73.google.com (mail-pj1-f73.google.com [209.85.216.73]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by smtp.subspace.kernel.org (Postfix) with ESMTPS id 66A572EA728 for ; Thu, 21 Aug 2025 04:29:41 +0000 (UTC) Authentication-Results: smtp.subspace.kernel.org; arc=none smtp.client-ip=209.85.216.73 ARC-Seal:i=1; a=rsa-sha256; d=subspace.kernel.org; s=arc-20240116; t=1755750584; cv=none; b=Eyc1oSp1VrxUA4+D6necOE6NGXLNkiPpkaIapzzy4k+Dj3I6n4dacKpZ+Mike7scdLB3ieJtSXGe+ZsJVlj0YVl6fSUpggE6PvqI7yEM/0sllZG0Yu3OtcdILrMWFaCCCr6OLDy5hhkaBsMg5lW4a+kG02XzfrG9YJ8mMYsdnm0= ARC-Message-Signature:i=1; a=rsa-sha256; d=subspace.kernel.org; s=arc-20240116; t=1755750584; c=relaxed/simple; bh=FpYo1ms5I2w2FSdE2WWD0f2b2tjuJeIdKXug1uiSfdI=; h=Date:In-Reply-To:Mime-Version:References:Message-ID:Subject:From: To:Cc:Content-Type; b=u/fdGUgLYplQcUfKH0ynKzkGKN3ByKGjtE0Gy6imL6IhMdDqBKt4VhUJOYuWn8+0pZWMMV82Anv5AP73KVn5gjWSzc6qKCypyUzZpjX1MhCuSvcpFP/fRp9f6cbQSmGxhU+VzETNBnKi7Pr6lKRmPuyYSbWQFkyjgpClAVpVF/I= ARC-Authentication-Results:i=1; smtp.subspace.kernel.org; dmarc=pass (p=reject dis=none) header.from=google.com; spf=pass smtp.mailfrom=flex--sagis.bounces.google.com; dkim=pass (2048-bit key) header.d=google.com header.i=@google.com header.b=3ROBvQiy; arc=none smtp.client-ip=209.85.216.73 Authentication-Results: smtp.subspace.kernel.org; dmarc=pass (p=reject dis=none) header.from=google.com Authentication-Results: smtp.subspace.kernel.org; spf=pass smtp.mailfrom=flex--sagis.bounces.google.com Authentication-Results: smtp.subspace.kernel.org; dkim=pass (2048-bit key) header.d=google.com header.i=@google.com header.b="3ROBvQiy" Received: by mail-pj1-f73.google.com with SMTP id 98e67ed59e1d1-324e318d628so709010a91.3 for ; Wed, 20 Aug 2025 21:29:41 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=google.com; s=20230601; t=1755750581; x=1756355381; darn=vger.kernel.org; h=cc:to:from:subject:message-id:references:mime-version:in-reply-to :date:from:to:cc:subject:date:message-id:reply-to; bh=vSLWtY+GKeQEYDQMa4cXM5mk60zIsuzRFHdNMwLX5Fs=; b=3ROBvQiyBa++nIrqv5d2VirdY4/R8FOweeLCMmPMY67cUpNkBtJg/hLc5+RHRN9DL9 Dblp8EoSVIoM8kgV57fmz+u+ZTeN4CYqjF7D+vxTPfG7rV8xLdsIt+B0HKSvnQuN5x3W DPwYHJrwhkrRwFYzDE5KfawfMm3KY8dNrjjFX3uXdRf4HuuuhKUZYcauFayDsfvvXdRH ldntrH3V8ThrXjyiApYpDcL6YALqvY+3I9emwjTRbUmz4Hoikqkgg4qplbQNvIFBXL5m c/T3KLaZtSAUDZ0R5g63s/qmmIpfEA3QTjWA8qtzBD4s5BJs3iSRxJuwgh0TOjq/XF9c CtuA== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20230601; t=1755750581; x=1756355381; h=cc:to:from:subject:message-id:references:mime-version:in-reply-to :date:x-gm-message-state:from:to:cc:subject:date:message-id:reply-to; bh=vSLWtY+GKeQEYDQMa4cXM5mk60zIsuzRFHdNMwLX5Fs=; b=Lp1LEsWqYEbHYGfPYJp+Zn7KF3t2v8KllEti1O2TQdKS0CZxht0/fC6cAjRbtOD308 pFReFz96jIb5aqiCDDR3+ivK5CmrlemXl4ZtaMAu6zxoavMM/mygJ6hWqHCj/p05+PMX 5Jfk6cPAFoMDVhqNZEg6zjP13JSfo5ODPY65ctRS9vUN9B7S3ciADBpseL036dKU9Jbx nALePWSTlkNPQaLcgNgGGAPM842gQBLpbgQTBfRh+ZICy1J7oAWLMwu8Kclw7O1FPNen Ulpehz9vrPPKvW/yYmjL+G33YOtfzEjEj0Ynq9ZQ9vBfWGidzm2XlyB6lhCfSBkBNO99 V2AA== X-Gm-Message-State: AOJu0YzbrQ7wrUbqtdmdq2VIvKHuYfshIc8pEDJrLNHvILmjlEAZKcSb /Q8a8KzDFr34Pepi45QLhyGGpRpFITuxspItP9kefO13C3ieXH3gSSxjoHhxcOswU9yce6WqY1b 9zUsT6dzEJGDnCmiQAphW+HrtjdiJd1ZKFe5jMn9O48De5hxhhLYYNuA/Xj15gX2JprQZKX7CBL OQudrGAKGvdO4FMb0uVy55sZVCU4x+C9HRNp/hnv9ayFY= X-Google-Smtp-Source: AGHT+IGE2GEJUcGNKEQmBkApaYqJ8IVfqmnRGMrQ0Rbu+EA1KbNaVBMaF+VhfLNDi6fLEoJVkODux/wMuA== X-Received: from pjboh13.prod.google.com ([2002:a17:90b:3a4d:b0:31f:26b:cc66]) (user=sagis job=prod-delivery.src-stubby-dispatcher) by 2002:a17:90b:4a0e:b0:31a:ab75:6e45 with SMTP id 98e67ed59e1d1-324ed12d30emr1584154a91.28.1755750580482; Wed, 20 Aug 2025 21:29:40 -0700 (PDT) Date: Wed, 20 Aug 2025 21:29:04 -0700 In-Reply-To: <20250821042915.3712925-1-sagis@google.com> Precedence: bulk X-Mailing-List: linux-kselftest@vger.kernel.org List-Id: List-Subscribe: List-Unsubscribe: Mime-Version: 1.0 References: <20250821042915.3712925-1-sagis@google.com> X-Mailer: git-send-email 2.51.0.rc1.193.gad69d77794-goog Message-ID: <20250821042915.3712925-12-sagis@google.com> Subject: [PATCH v9 11/19] KVM: selftests: Set up TDX boot parameters region From: Sagi Shahar To: linux-kselftest@vger.kernel.org, Paolo Bonzini , Shuah Khan , Sean Christopherson , Ackerley Tng , Ryan Afranji , Andrew Jones , Isaku Yamahata , Erdem Aktas , Rick Edgecombe , Sagi Shahar , Roger Wang , Binbin Wu , Oliver Upton , "Pratik R. Sampat" , Reinette Chatre , Ira Weiny , Chao Gao , Chenyi Qiang Cc: linux-kernel@vger.kernel.org, kvm@vger.kernel.org Content-Type: text/plain; charset="UTF-8" Allocate memory for TDX boot parameters and define the utility functions necessary to fill this memory with the boot parameters. Co-developed-by: Ackerley Tng Signed-off-by: Ackerley Tng Signed-off-by: Sagi Shahar --- .../selftests/kvm/include/x86/tdx/tdx_util.h | 4 + .../selftests/kvm/lib/x86/tdx/tdx_util.c | 73 +++++++++++++++++++ 2 files changed, 77 insertions(+) diff --git a/tools/testing/selftests/kvm/include/x86/tdx/tdx_util.h b/tools/testing/selftests/kvm/include/x86/tdx/tdx_util.h index ec05bcd59145..dafdc7e46abe 100644 --- a/tools/testing/selftests/kvm/include/x86/tdx/tdx_util.h +++ b/tools/testing/selftests/kvm/include/x86/tdx/tdx_util.h @@ -12,5 +12,9 @@ static inline bool is_tdx_vm(struct kvm_vm *vm) } void vm_tdx_setup_boot_code_region(struct kvm_vm *vm); +void vm_tdx_setup_boot_parameters_region(struct kvm_vm *vm, uint32_t nr_runnable_vcpus); +void vm_tdx_load_common_boot_parameters(struct kvm_vm *vm); +void vm_tdx_load_vcpu_boot_parameters(struct kvm_vm *vm, struct kvm_vcpu *vcpu); +void vm_tdx_set_vcpu_entry_point(struct kvm_vcpu *vcpu, void *guest_code); #endif // SELFTESTS_TDX_TDX_UTIL_H diff --git a/tools/testing/selftests/kvm/lib/x86/tdx/tdx_util.c b/tools/testing/selftests/kvm/lib/x86/tdx/tdx_util.c index 15833b9eb5d5..52dc25e0cce4 100644 --- a/tools/testing/selftests/kvm/lib/x86/tdx/tdx_util.c +++ b/tools/testing/selftests/kvm/lib/x86/tdx/tdx_util.c @@ -5,10 +5,12 @@ #include "kvm_util.h" #include "processor.h" #include "tdx/td_boot.h" +#include "tdx/td_boot_asm.h" #include "tdx/tdx_util.h" /* Arbitrarily selected to avoid overlaps with anything else */ #define TD_BOOT_CODE_SLOT 20 +#define TD_BOOT_PARAMETERS_SLOT 21 #define X86_RESET_VECTOR 0xfffffff0ul #define X86_RESET_VECTOR_SIZE 16 @@ -52,3 +54,74 @@ void vm_tdx_setup_boot_code_region(struct kvm_vm *vm) hva[1] = 256 - 2 - TD_BOOT_CODE_SIZE; hva[2] = 0xcc; } + +void vm_tdx_setup_boot_parameters_region(struct kvm_vm *vm, uint32_t nr_runnable_vcpus) +{ + size_t boot_params_size = + sizeof(struct td_boot_parameters) + + nr_runnable_vcpus * sizeof(struct td_per_vcpu_parameters); + int npages = DIV_ROUND_UP(boot_params_size, PAGE_SIZE); + vm_paddr_t gpa; + + vm_userspace_mem_region_add(vm, VM_MEM_SRC_ANONYMOUS, + TD_BOOT_PARAMETERS_GPA, + TD_BOOT_PARAMETERS_SLOT, npages, + KVM_MEM_GUEST_MEMFD); + gpa = vm_phy_pages_alloc(vm, npages, TD_BOOT_PARAMETERS_GPA, TD_BOOT_PARAMETERS_SLOT); + TEST_ASSERT(gpa == TD_BOOT_PARAMETERS_GPA, "Failed vm_phy_pages_alloc\n"); + + virt_map(vm, TD_BOOT_PARAMETERS_GPA, TD_BOOT_PARAMETERS_GPA, npages); +} + +void vm_tdx_load_common_boot_parameters(struct kvm_vm *vm) +{ + struct td_boot_parameters *params = + addr_gpa2hva(vm, TD_BOOT_PARAMETERS_GPA); + uint32_t cr4; + + TEST_ASSERT_EQ(vm->mode, VM_MODE_PXXV48_4K); + + cr4 = kvm_get_default_cr4(); + + /* TDX spec 11.6.2: CR4 bit MCE is fixed to 1 */ + cr4 |= X86_CR4_MCE; + + /* Set this because UEFI also sets this up, to handle XMM exceptions */ + cr4 |= X86_CR4_OSXMMEXCPT; + + /* TDX spec 11.6.2: CR4 bit VMXE and SMXE are fixed to 0 */ + cr4 &= ~(X86_CR4_VMXE | X86_CR4_SMXE); + + /* Set parameters! */ + params->cr0 = kvm_get_default_cr0(); + params->cr3 = vm->pgd; + params->cr4 = cr4; + params->idtr.base = vm->arch.idt; + params->idtr.limit = kvm_get_default_idt_limit(); + params->gdtr.base = vm->arch.gdt; + params->gdtr.limit = kvm_get_default_gdt_limit(); + + TEST_ASSERT(params->cr0 != 0, "cr0 should not be 0"); + TEST_ASSERT(params->cr3 != 0, "cr3 should not be 0"); + TEST_ASSERT(params->cr4 != 0, "cr4 should not be 0"); + TEST_ASSERT(params->gdtr.base != 0, "gdt base address should not be 0"); + TEST_ASSERT(params->idtr.base != 0, "idt base address should not be 0"); +} + +void vm_tdx_load_vcpu_boot_parameters(struct kvm_vm *vm, struct kvm_vcpu *vcpu) +{ + struct td_boot_parameters *params = + addr_gpa2hva(vm, TD_BOOT_PARAMETERS_GPA); + struct td_per_vcpu_parameters *vcpu_params = + ¶ms->per_vcpu[vcpu->id]; + + vcpu_params->esp_gva = kvm_allocate_vcpu_stack(vm); +} + +void vm_tdx_set_vcpu_entry_point(struct kvm_vcpu *vcpu, void *guest_code) +{ + struct td_boot_parameters *params = addr_gpa2hva(vcpu->vm, TD_BOOT_PARAMETERS_GPA); + struct td_per_vcpu_parameters *vcpu_params = ¶ms->per_vcpu[vcpu->id]; + + vcpu_params->guest_code = (uint64_t)guest_code; +} -- 2.51.0.rc1.193.gad69d77794-goog