[OLK-5.10] Support live migration for SEV/CSV guest · Pull Request !18932 · openEuler/kernel

Support live migration for SEV/CSV guest

issue:
https://gitee.com/openeuler/kernel/issues/ID5F38

1.In order to support migration for SEV guest, we backported the following patches from upstream:
```
KVM: SVM: Fix SEV SEND_START session length & SEND_UPDATE_DATA query length after commit 238eca821cee
x86/kvm: Add kexec support for SEV Live Migration.
x86/kvm: Add guest support for detecting and enabling SEV Live Migration feature.
EFI: Introduce the new AMD Memory Encryption GUID.
mm: x86: Invoke hypercall when page encryption status is changed
x86/kvm: Add AMD SEV specific Hypercall3
KVM: SEV: Flush cache on non-coherent systems before RECEIVE_UPDATE_DATA
KVM: SEV: Pin guest memory for write for RECEIVE_UPDATE_DATA
KVM: SVM: fix missing sev_decommission in sev_receive_start
KVM: SVM: Return -EFAULT if copy_to_user() for SEV mig packet header fails
KVM: X86: Introduce KVM_HC_MAP_GPA_RANGE hypercall
KVM: SVM: Add KVM_SEV_RECEIVE_FINISH command
KVM: SVM: Add KVM_SEV_RECEIVE_UPDATE_DATA command
KVM: SVM: Add support for KVM_SEV_RECEIVE_START command
KVM: SVM: Add support for KVM_SEV_SEND_CANCEL command
KVM: SVM: Add KVM_SEV_SEND_FINISH command
KVM: SVM: Add KVM_SEND_UPDATE_DATA command
KVM: SVM: Add KVM_SEV SEND_START command
```

2.To improve the migration speed of CSV guest, we have introduced the following patches:
```
KVM: SVM: Add RECEIVE_UPDATE_DATA command helper to support KVM_CSV_COMMAND_BATCH
KVM: SVM: Add SEND_UPDATE_DATA command helper to support KVM_CSV_COMMAND_BATCH
KVM: SVM: Prepare memory pool to allocate buffers for KVM_CSV_COMMAND_BATCH
KVM: SVM: Add KVM_CSV_COMMAND_BATCH command for applying CSV RING_BUFFER mode
crypto: ccp: Add support for issue commands in CSV RING_BUFFER mode
crypto: ccp: Add support to switch to CSV RING_BUFFER mode
crypto: ccp: Add support for dequeue status in CSV RING_BUFFER mode
crypto: ccp: Add support for enqueue command pointers in CSV RING_BUFFER mode
crypto: ccp: Introduce init and free helpers to manage CSV RING_BUFFER queues
```

3.To improve the stability of SEV guest operations, we backported the following patches from upstream:
```
KVM: SVM: Don't apply SEV+SMAP workaround on code fetch or PT access
KVM: SVM: Inject #UD on attempted emulation for SEV guest w/o insn buffer
KVM: SVM: WARN if KVM attempts emulation on #UD or #GP for SEV guests
KVM: x86: Pass emulation type to can_emulate_instruction()
KVM: SVM: Explicitly require DECODEASSISTS to enable SEV support
KVM: SVM: Don't intercept #GP for SEV guests
swiotlb: do not zero buffer in set_memory_decrypted()
crypto: ccp - Add SEV_INIT rc error logging on init
dma-direct: always leak memory that can't be re-encrypted
dma-direct: factor out dma_set_{de,en}crypted helpers
KVM: SVM: Fix sev_pin_memory() error checks in SEV migration utilities
x86/sev: Make enc_dec_hypercall() accept a size instead of npages
KVM: SVM: Skip SEV cache flush if no ASIDs have been used
KVM: SVM: Remove an unnecessary prototype declaration of sev_flush_asids()
```

GVPopenEuler/kernel

搜索帮助

GVP openEuler/kernel