| 12345678910111213141516171819202122232425262728293031323334353637383940414243444546474849505152535455565758596061626364656667686970717273747576777879808182838485868788899091929394959697989910010110210310410510610710810911011111211311411511611711811912012112212312412512612712812913013113213313413513613713813914014114214314414514614714814915015115215315415515615715815916016116216316416516616716816917017117217317417517617717817918018118218318418518618718818919019119219319419519619719819920020120220320420520620720820921021121221321421521621721821922022122222322422522622722822923023123223323423523623723823924024124224324424524624724824925025125225325425525625725825926026126226326426526626726826927027127227327427527627727827928028128228328428528628728828929029129229329429529629729829930030130230330430530630730830931031131231331431531631731831932032132232332432532632732832933033133233333433533633733833934034134234334434534634734834935035135235335435535635735835936036136236336436536636736836937037137237337437537637737837938038138238338438538638738838939039139239339439539639739839940040140240340440540640740840941041141241341441541641741841942042142242342442542642742842943043143243343443543643743843944044144244344444544644744844945045145245345445545645745845946046146246346446546646746846947047147247347447547647747847948048148248348448548648748848949049149249349449549649749849950050150250350450550650750850951051151251351451551651751851952052152252352452552652752852953053153253353453553653753853954054154254354454554654754854955055155255355455555655755855956056156256356456556656756856957057157257357457557657757857958058158258358458558658758858959059159259359459559659759859960060160260360460560660760860961061161261361461561661761861962062162262362462562662762862963063163263363463563663763863964064164264364464564664764864965065165265365465565665765865966066166266366466566666766866967067167267367467567667767867968068168268368468568668768868969069169269369469569669769869970070170270370470570670770870971071171271371471571671771871972072172272372472572672772872973073173273373473573673773873974074174274374474574674774874975075175275375475575675775875976076176276376476576676776876977077177277377477577677777877978078178278378478578678778878979079179279379479579679779879980080180280380480580680780880981081181281381481581681781881982082182282382482582682782882983083183283383483583683783883984084184284384484584684784884985085185285385485585685785885986086186286386486586686786886987087187287387487587687787887988088188288388488588688788888989089189289389489589689789889990090190290390490590690790890991091191291391491591691791891992092192292392492592692792892993093193293393493593693793893994094194294394494594694794894995095195295395495595695795895996096196296396496596696796896997097197297397497597697797897998098198298398498598698798898999099199299399499599699799899910001001100210031004100510061007100810091010101110121013101410151016101710181019102010211022102310241025102610271028102910301031103210331034103510361037103810391040104110421043104410451046104710481049 |
- /* SPDX-License-Identifier: GPL-2.0 WITH Linux-syscall-note */
- #ifndef _ASM_X86_KVM_H
- #define _ASM_X86_KVM_H
- /*
- * KVM x86 specific structures and definitions
- *
- */
- #include <linux/const.h>
- #include <linux/bits.h>
- #include <linux/types.h>
- #include <linux/ioctl.h>
- #include <linux/stddef.h>
- #define KVM_PIO_PAGE_OFFSET 1
- #define KVM_COALESCED_MMIO_PAGE_OFFSET 2
- #define KVM_DIRTY_LOG_PAGE_OFFSET 64
- #define DE_VECTOR 0
- #define DB_VECTOR 1
- #define BP_VECTOR 3
- #define OF_VECTOR 4
- #define BR_VECTOR 5
- #define UD_VECTOR 6
- #define NM_VECTOR 7
- #define DF_VECTOR 8
- #define TS_VECTOR 10
- #define NP_VECTOR 11
- #define SS_VECTOR 12
- #define GP_VECTOR 13
- #define PF_VECTOR 14
- #define MF_VECTOR 16
- #define AC_VECTOR 17
- #define MC_VECTOR 18
- #define XM_VECTOR 19
- #define VE_VECTOR 20
- #define CP_VECTOR 21
- #define HV_VECTOR 28
- #define VC_VECTOR 29
- #define SX_VECTOR 30
- /* Select x86 specific features in <linux/kvm.h> */
- #define __KVM_HAVE_PIT
- #define __KVM_HAVE_IOAPIC
- #define __KVM_HAVE_IRQ_LINE
- #define __KVM_HAVE_MSI
- #define __KVM_HAVE_USER_NMI
- #define __KVM_HAVE_MSIX
- #define __KVM_HAVE_MCE
- #define __KVM_HAVE_PIT_STATE2
- #define __KVM_HAVE_XEN_HVM
- #define __KVM_HAVE_VCPU_EVENTS
- #define __KVM_HAVE_DEBUGREGS
- #define __KVM_HAVE_XSAVE
- #define __KVM_HAVE_XCRS
- /* Architectural interrupt line count. */
- #define KVM_NR_INTERRUPTS 256
- /* for KVM_GET_IRQCHIP and KVM_SET_IRQCHIP */
- struct kvm_pic_state {
- __u8 last_irr; /* edge detection */
- __u8 irr; /* interrupt request register */
- __u8 imr; /* interrupt mask register */
- __u8 isr; /* interrupt service register */
- __u8 priority_add; /* highest irq priority */
- __u8 irq_base;
- __u8 read_reg_select;
- __u8 poll;
- __u8 special_mask;
- __u8 init_state;
- __u8 auto_eoi;
- __u8 rotate_on_auto_eoi;
- __u8 special_fully_nested_mode;
- __u8 init4; /* true if 4 byte init */
- __u8 elcr; /* PIIX edge/trigger selection */
- __u8 elcr_mask;
- };
- #define KVM_IOAPIC_NUM_PINS 24
- struct kvm_ioapic_state {
- __u64 base_address;
- __u32 ioregsel;
- __u32 id;
- __u32 irr;
- __u32 pad;
- union {
- __u64 bits;
- struct {
- __u8 vector;
- __u8 delivery_mode:3;
- __u8 dest_mode:1;
- __u8 delivery_status:1;
- __u8 polarity:1;
- __u8 remote_irr:1;
- __u8 trig_mode:1;
- __u8 mask:1;
- __u8 reserve:7;
- __u8 reserved[4];
- __u8 dest_id;
- } fields;
- } redirtbl[KVM_IOAPIC_NUM_PINS];
- };
- #define KVM_IRQCHIP_PIC_MASTER 0
- #define KVM_IRQCHIP_PIC_SLAVE 1
- #define KVM_IRQCHIP_IOAPIC 2
- #define KVM_NR_IRQCHIPS 3
- #define KVM_RUN_X86_SMM (1 << 0)
- #define KVM_RUN_X86_BUS_LOCK (1 << 1)
- #define KVM_RUN_X86_GUEST_MODE (1 << 2)
- /* for KVM_GET_REGS and KVM_SET_REGS */
- struct kvm_regs {
- /* out (KVM_GET_REGS) / in (KVM_SET_REGS) */
- __u64 rax, rbx, rcx, rdx;
- __u64 rsi, rdi, rsp, rbp;
- __u64 r8, r9, r10, r11;
- __u64 r12, r13, r14, r15;
- __u64 rip, rflags;
- };
- /* for KVM_GET_LAPIC and KVM_SET_LAPIC */
- #define KVM_APIC_REG_SIZE 0x400
- struct kvm_lapic_state {
- char regs[KVM_APIC_REG_SIZE];
- };
- struct kvm_segment {
- __u64 base;
- __u32 limit;
- __u16 selector;
- __u8 type;
- __u8 present, dpl, db, s, l, g, avl;
- __u8 unusable;
- __u8 padding;
- };
- struct kvm_dtable {
- __u64 base;
- __u16 limit;
- __u16 padding[3];
- };
- /* for KVM_GET_SREGS and KVM_SET_SREGS */
- struct kvm_sregs {
- /* out (KVM_GET_SREGS) / in (KVM_SET_SREGS) */
- struct kvm_segment cs, ds, es, fs, gs, ss;
- struct kvm_segment tr, ldt;
- struct kvm_dtable gdt, idt;
- __u64 cr0, cr2, cr3, cr4, cr8;
- __u64 efer;
- __u64 apic_base;
- __u64 interrupt_bitmap[(KVM_NR_INTERRUPTS + 63) / 64];
- };
- struct kvm_sregs2 {
- /* out (KVM_GET_SREGS2) / in (KVM_SET_SREGS2) */
- struct kvm_segment cs, ds, es, fs, gs, ss;
- struct kvm_segment tr, ldt;
- struct kvm_dtable gdt, idt;
- __u64 cr0, cr2, cr3, cr4, cr8;
- __u64 efer;
- __u64 apic_base;
- __u64 flags;
- __u64 pdptrs[4];
- };
- #define KVM_SREGS2_FLAGS_PDPTRS_VALID 1
- /* for KVM_GET_FPU and KVM_SET_FPU */
- struct kvm_fpu {
- __u8 fpr[8][16];
- __u16 fcw;
- __u16 fsw;
- __u8 ftwx; /* in fxsave format */
- __u8 pad1;
- __u16 last_opcode;
- __u64 last_ip;
- __u64 last_dp;
- __u8 xmm[16][16];
- __u32 mxcsr;
- __u32 pad2;
- };
- struct kvm_msr_entry {
- __u32 index;
- __u32 reserved;
- __u64 data;
- };
- /* for KVM_GET_MSRS and KVM_SET_MSRS */
- struct kvm_msrs {
- __u32 nmsrs; /* number of msrs in entries */
- __u32 pad;
- __DECLARE_FLEX_ARRAY(struct kvm_msr_entry, entries);
- };
- /* for KVM_GET_MSR_INDEX_LIST */
- struct kvm_msr_list {
- __u32 nmsrs; /* number of msrs in entries */
- __DECLARE_FLEX_ARRAY(__u32, indices);
- };
- /* Maximum size of any access bitmap in bytes */
- #define KVM_MSR_FILTER_MAX_BITMAP_SIZE 0x600
- /* for KVM_X86_SET_MSR_FILTER */
- struct kvm_msr_filter_range {
- #define KVM_MSR_FILTER_READ (1 << 0)
- #define KVM_MSR_FILTER_WRITE (1 << 1)
- #define KVM_MSR_FILTER_RANGE_VALID_MASK (KVM_MSR_FILTER_READ | \
- KVM_MSR_FILTER_WRITE)
- __u32 flags;
- __u32 nmsrs; /* number of msrs in bitmap */
- __u32 base; /* MSR index the bitmap starts at */
- __u8 *bitmap; /* a 1 bit allows the operations in flags, 0 denies */
- };
- #define KVM_MSR_FILTER_MAX_RANGES 16
- struct kvm_msr_filter {
- #define KVM_MSR_FILTER_DEFAULT_ALLOW (0 << 0)
- #define KVM_MSR_FILTER_DEFAULT_DENY (1 << 0)
- #define KVM_MSR_FILTER_VALID_MASK (KVM_MSR_FILTER_DEFAULT_DENY)
- __u32 flags;
- struct kvm_msr_filter_range ranges[KVM_MSR_FILTER_MAX_RANGES];
- };
- struct kvm_cpuid_entry {
- __u32 function;
- __u32 eax;
- __u32 ebx;
- __u32 ecx;
- __u32 edx;
- __u32 padding;
- };
- /* for KVM_SET_CPUID */
- struct kvm_cpuid {
- __u32 nent;
- __u32 padding;
- __DECLARE_FLEX_ARRAY(struct kvm_cpuid_entry, entries);
- };
- struct kvm_cpuid_entry2 {
- __u32 function;
- __u32 index;
- __u32 flags;
- __u32 eax;
- __u32 ebx;
- __u32 ecx;
- __u32 edx;
- __u32 padding[3];
- };
- #define KVM_CPUID_FLAG_SIGNIFCANT_INDEX (1 << 0)
- #define KVM_CPUID_FLAG_STATEFUL_FUNC (1 << 1)
- #define KVM_CPUID_FLAG_STATE_READ_NEXT (1 << 2)
- /* for KVM_SET_CPUID2 */
- struct kvm_cpuid2 {
- __u32 nent;
- __u32 padding;
- __DECLARE_FLEX_ARRAY(struct kvm_cpuid_entry2, entries);
- };
- /* for KVM_GET_PIT and KVM_SET_PIT */
- struct kvm_pit_channel_state {
- __u32 count; /* can be 65536 */
- __u16 latched_count;
- __u8 count_latched;
- __u8 status_latched;
- __u8 status;
- __u8 read_state;
- __u8 write_state;
- __u8 write_latch;
- __u8 rw_mode;
- __u8 mode;
- __u8 bcd;
- __u8 gate;
- __s64 count_load_time;
- };
- struct kvm_debug_exit_arch {
- __u32 exception;
- __u32 pad;
- __u64 pc;
- __u64 dr6;
- __u64 dr7;
- };
- #define KVM_GUESTDBG_USE_SW_BP 0x00010000
- #define KVM_GUESTDBG_USE_HW_BP 0x00020000
- #define KVM_GUESTDBG_INJECT_DB 0x00040000
- #define KVM_GUESTDBG_INJECT_BP 0x00080000
- #define KVM_GUESTDBG_BLOCKIRQ 0x00100000
- /* for KVM_SET_GUEST_DEBUG */
- struct kvm_guest_debug_arch {
- __u64 debugreg[8];
- };
- struct kvm_pit_state {
- struct kvm_pit_channel_state channels[3];
- };
- #define KVM_PIT_FLAGS_HPET_LEGACY 0x00000001
- #define KVM_PIT_FLAGS_SPEAKER_DATA_ON 0x00000002
- struct kvm_pit_state2 {
- struct kvm_pit_channel_state channels[3];
- __u32 flags;
- __u32 reserved[9];
- };
- struct kvm_reinject_control {
- __u8 pit_reinject;
- __u8 reserved[31];
- };
- /* When set in flags, include corresponding fields on KVM_SET_VCPU_EVENTS */
- #define KVM_VCPUEVENT_VALID_NMI_PENDING 0x00000001
- #define KVM_VCPUEVENT_VALID_SIPI_VECTOR 0x00000002
- #define KVM_VCPUEVENT_VALID_SHADOW 0x00000004
- #define KVM_VCPUEVENT_VALID_SMM 0x00000008
- #define KVM_VCPUEVENT_VALID_PAYLOAD 0x00000010
- #define KVM_VCPUEVENT_VALID_TRIPLE_FAULT 0x00000020
- /* Interrupt shadow states */
- #define KVM_X86_SHADOW_INT_MOV_SS 0x01
- #define KVM_X86_SHADOW_INT_STI 0x02
- /* for KVM_GET/SET_VCPU_EVENTS */
- struct kvm_vcpu_events {
- struct {
- __u8 injected;
- __u8 nr;
- __u8 has_error_code;
- __u8 pending;
- __u32 error_code;
- } exception;
- struct {
- __u8 injected;
- __u8 nr;
- __u8 soft;
- __u8 shadow;
- } interrupt;
- struct {
- __u8 injected;
- __u8 pending;
- __u8 masked;
- __u8 pad;
- } nmi;
- __u32 sipi_vector;
- __u32 flags;
- struct {
- __u8 smm;
- __u8 pending;
- __u8 smm_inside_nmi;
- __u8 latched_init;
- } smi;
- struct {
- __u8 pending;
- } triple_fault;
- __u8 reserved[26];
- __u8 exception_has_payload;
- __u64 exception_payload;
- };
- /* for KVM_GET/SET_DEBUGREGS */
- struct kvm_debugregs {
- __u64 db[4];
- __u64 dr6;
- __u64 dr7;
- __u64 flags;
- __u64 reserved[9];
- };
- /* for KVM_CAP_XSAVE and KVM_CAP_XSAVE2 */
- struct kvm_xsave {
- /*
- * KVM_GET_XSAVE2 and KVM_SET_XSAVE write and read as many bytes
- * as are returned by KVM_CHECK_EXTENSION(KVM_CAP_XSAVE2)
- * respectively, when invoked on the vm file descriptor.
- *
- * The size value returned by KVM_CHECK_EXTENSION(KVM_CAP_XSAVE2)
- * will always be at least 4096. Currently, it is only greater
- * than 4096 if a dynamic feature has been enabled with
- * ``arch_prctl()``, but this may change in the future.
- *
- * The offsets of the state save areas in struct kvm_xsave follow
- * the contents of CPUID leaf 0xD on the host.
- */
- __u32 region[1024];
- __DECLARE_FLEX_ARRAY(__u32, extra);
- };
- #define KVM_MAX_XCRS 16
- struct kvm_xcr {
- __u32 xcr;
- __u32 reserved;
- __u64 value;
- };
- struct kvm_xcrs {
- __u32 nr_xcrs;
- __u32 flags;
- struct kvm_xcr xcrs[KVM_MAX_XCRS];
- __u64 padding[16];
- };
- #define KVM_X86_REG_TYPE_MSR 2
- #define KVM_X86_REG_TYPE_KVM 3
- #define KVM_X86_KVM_REG_SIZE(reg) \
- ({ \
- reg == KVM_REG_GUEST_SSP ? KVM_REG_SIZE_U64 : 0; \
- })
- #define KVM_X86_REG_TYPE_SIZE(type, reg) \
- ({ \
- __u64 type_size = (__u64)type << 32; \
- \
- type_size |= type == KVM_X86_REG_TYPE_MSR ? KVM_REG_SIZE_U64 : \
- type == KVM_X86_REG_TYPE_KVM ? KVM_X86_KVM_REG_SIZE(reg) : \
- 0; \
- type_size; \
- })
- #define KVM_X86_REG_ID(type, index) \
- (KVM_REG_X86 | KVM_X86_REG_TYPE_SIZE(type, index) | index)
- #define KVM_X86_REG_MSR(index) \
- KVM_X86_REG_ID(KVM_X86_REG_TYPE_MSR, index)
- #define KVM_X86_REG_KVM(index) \
- KVM_X86_REG_ID(KVM_X86_REG_TYPE_KVM, index)
- /* KVM-defined registers starting from 0 */
- #define KVM_REG_GUEST_SSP 0
- #define KVM_SYNC_X86_REGS (1UL << 0)
- #define KVM_SYNC_X86_SREGS (1UL << 1)
- #define KVM_SYNC_X86_EVENTS (1UL << 2)
- #define KVM_SYNC_X86_VALID_FIELDS \
- (KVM_SYNC_X86_REGS| \
- KVM_SYNC_X86_SREGS| \
- KVM_SYNC_X86_EVENTS)
- /* kvm_sync_regs struct included by kvm_run struct */
- struct kvm_sync_regs {
- /* Members of this structure are potentially malicious.
- * Care must be taken by code reading, esp. interpreting,
- * data fields from them inside KVM to prevent TOCTOU and
- * double-fetch types of vulnerabilities.
- */
- struct kvm_regs regs;
- struct kvm_sregs sregs;
- struct kvm_vcpu_events events;
- };
- #define KVM_X86_QUIRK_LINT0_REENABLED (1 << 0)
- #define KVM_X86_QUIRK_CD_NW_CLEARED (1 << 1)
- #define KVM_X86_QUIRK_LAPIC_MMIO_HOLE (1 << 2)
- #define KVM_X86_QUIRK_OUT_7E_INC_RIP (1 << 3)
- #define KVM_X86_QUIRK_MISC_ENABLE_NO_MWAIT (1 << 4)
- #define KVM_X86_QUIRK_FIX_HYPERCALL_INSN (1 << 5)
- #define KVM_X86_QUIRK_MWAIT_NEVER_UD_FAULTS (1 << 6)
- #define KVM_X86_QUIRK_SLOT_ZAP_ALL (1 << 7)
- #define KVM_X86_QUIRK_STUFF_FEATURE_MSRS (1 << 8)
- #define KVM_X86_QUIRK_IGNORE_GUEST_PAT (1 << 9)
- #define KVM_X86_QUIRK_VMCS12_ALLOW_FREEZE_IN_SMM (1 << 10)
- #define KVM_STATE_NESTED_FORMAT_VMX 0
- #define KVM_STATE_NESTED_FORMAT_SVM 1
- #define KVM_STATE_NESTED_GUEST_MODE 0x00000001
- #define KVM_STATE_NESTED_RUN_PENDING 0x00000002
- #define KVM_STATE_NESTED_EVMCS 0x00000004
- #define KVM_STATE_NESTED_MTF_PENDING 0x00000008
- #define KVM_STATE_NESTED_GIF_SET 0x00000100
- #define KVM_STATE_NESTED_SMM_GUEST_MODE 0x00000001
- #define KVM_STATE_NESTED_SMM_VMXON 0x00000002
- #define KVM_STATE_NESTED_VMX_VMCS_SIZE 0x1000
- #define KVM_STATE_NESTED_SVM_VMCB_SIZE 0x1000
- #define KVM_STATE_VMX_PREEMPTION_TIMER_DEADLINE 0x00000001
- /* vendor-independent attributes for system fd (group 0) */
- #define KVM_X86_GRP_SYSTEM 0
- # define KVM_X86_XCOMP_GUEST_SUPP 0
- /* vendor-specific groups and attributes for system fd */
- #define KVM_X86_GRP_SEV 1
- # define KVM_X86_SEV_VMSA_FEATURES 0
- # define KVM_X86_SNP_POLICY_BITS 1
- # define KVM_X86_SEV_SNP_REQ_CERTS 2
- struct kvm_vmx_nested_state_data {
- __u8 vmcs12[KVM_STATE_NESTED_VMX_VMCS_SIZE];
- __u8 shadow_vmcs12[KVM_STATE_NESTED_VMX_VMCS_SIZE];
- };
- struct kvm_vmx_nested_state_hdr {
- __u64 vmxon_pa;
- __u64 vmcs12_pa;
- struct {
- __u16 flags;
- } smm;
- __u16 pad;
- __u32 flags;
- __u64 preemption_timer_deadline;
- };
- struct kvm_svm_nested_state_data {
- /* Save area only used if KVM_STATE_NESTED_RUN_PENDING. */
- __u8 vmcb12[KVM_STATE_NESTED_SVM_VMCB_SIZE];
- };
- struct kvm_svm_nested_state_hdr {
- __u64 vmcb_pa;
- };
- /* for KVM_CAP_NESTED_STATE */
- struct kvm_nested_state {
- __u16 flags;
- __u16 format;
- __u32 size;
- union {
- struct kvm_vmx_nested_state_hdr vmx;
- struct kvm_svm_nested_state_hdr svm;
- /* Pad the header to 128 bytes. */
- __u8 pad[120];
- } hdr;
- /*
- * Define data region as 0 bytes to preserve backwards-compatability
- * to old definition of kvm_nested_state in order to avoid changing
- * KVM_{GET,PUT}_NESTED_STATE ioctl values.
- */
- union {
- __DECLARE_FLEX_ARRAY(struct kvm_vmx_nested_state_data, vmx);
- __DECLARE_FLEX_ARRAY(struct kvm_svm_nested_state_data, svm);
- } data;
- };
- /* for KVM_CAP_PMU_EVENT_FILTER */
- struct kvm_pmu_event_filter {
- __u32 action;
- __u32 nevents;
- __u32 fixed_counter_bitmap;
- __u32 flags;
- __u32 pad[4];
- __DECLARE_FLEX_ARRAY(__u64, events);
- };
- #define KVM_PMU_EVENT_ALLOW 0
- #define KVM_PMU_EVENT_DENY 1
- #define KVM_PMU_EVENT_FLAG_MASKED_EVENTS _BITUL(0)
- #define KVM_PMU_EVENT_FLAGS_VALID_MASK (KVM_PMU_EVENT_FLAG_MASKED_EVENTS)
- /* for KVM_CAP_MCE */
- struct kvm_x86_mce {
- __u64 status;
- __u64 addr;
- __u64 misc;
- __u64 mcg_status;
- __u8 bank;
- __u8 pad1[7];
- __u64 pad2[3];
- };
- /* for KVM_CAP_XEN_HVM */
- #define KVM_XEN_HVM_CONFIG_HYPERCALL_MSR (1 << 0)
- #define KVM_XEN_HVM_CONFIG_INTERCEPT_HCALL (1 << 1)
- #define KVM_XEN_HVM_CONFIG_SHARED_INFO (1 << 2)
- #define KVM_XEN_HVM_CONFIG_RUNSTATE (1 << 3)
- #define KVM_XEN_HVM_CONFIG_EVTCHN_2LEVEL (1 << 4)
- #define KVM_XEN_HVM_CONFIG_EVTCHN_SEND (1 << 5)
- #define KVM_XEN_HVM_CONFIG_RUNSTATE_UPDATE_FLAG (1 << 6)
- #define KVM_XEN_HVM_CONFIG_PVCLOCK_TSC_UNSTABLE (1 << 7)
- #define KVM_XEN_HVM_CONFIG_SHARED_INFO_HVA (1 << 8)
- #define KVM_XEN_MSR_MIN_INDEX 0x40000000u
- #define KVM_XEN_MSR_MAX_INDEX 0x4fffffffu
- struct kvm_xen_hvm_config {
- __u32 flags;
- __u32 msr;
- __u64 blob_addr_32;
- __u64 blob_addr_64;
- __u8 blob_size_32;
- __u8 blob_size_64;
- __u8 pad2[30];
- };
- struct kvm_xen_hvm_attr {
- __u16 type;
- __u16 pad[3];
- union {
- __u8 long_mode;
- __u8 vector;
- __u8 runstate_update_flag;
- union {
- __u64 gfn;
- #define KVM_XEN_INVALID_GFN ((__u64)-1)
- __u64 hva;
- } shared_info;
- struct {
- __u32 send_port;
- __u32 type; /* EVTCHNSTAT_ipi / EVTCHNSTAT_interdomain */
- __u32 flags;
- #define KVM_XEN_EVTCHN_DEASSIGN (1 << 0)
- #define KVM_XEN_EVTCHN_UPDATE (1 << 1)
- #define KVM_XEN_EVTCHN_RESET (1 << 2)
- /*
- * Events sent by the guest are either looped back to
- * the guest itself (potentially on a different port#)
- * or signalled via an eventfd.
- */
- union {
- struct {
- __u32 port;
- __u32 vcpu;
- __u32 priority;
- } port;
- struct {
- __u32 port; /* Zero for eventfd */
- __s32 fd;
- } eventfd;
- __u32 padding[4];
- } deliver;
- } evtchn;
- __u32 xen_version;
- __u64 pad[8];
- } u;
- };
- /* Available with KVM_CAP_XEN_HVM / KVM_XEN_HVM_CONFIG_SHARED_INFO */
- #define KVM_XEN_ATTR_TYPE_LONG_MODE 0x0
- #define KVM_XEN_ATTR_TYPE_SHARED_INFO 0x1
- #define KVM_XEN_ATTR_TYPE_UPCALL_VECTOR 0x2
- /* Available with KVM_CAP_XEN_HVM / KVM_XEN_HVM_CONFIG_EVTCHN_SEND */
- #define KVM_XEN_ATTR_TYPE_EVTCHN 0x3
- #define KVM_XEN_ATTR_TYPE_XEN_VERSION 0x4
- /* Available with KVM_CAP_XEN_HVM / KVM_XEN_HVM_CONFIG_RUNSTATE_UPDATE_FLAG */
- #define KVM_XEN_ATTR_TYPE_RUNSTATE_UPDATE_FLAG 0x5
- /* Available with KVM_CAP_XEN_HVM / KVM_XEN_HVM_CONFIG_SHARED_INFO_HVA */
- #define KVM_XEN_ATTR_TYPE_SHARED_INFO_HVA 0x6
- struct kvm_xen_vcpu_attr {
- __u16 type;
- __u16 pad[3];
- union {
- __u64 gpa;
- #define KVM_XEN_INVALID_GPA ((__u64)-1)
- __u64 hva;
- __u64 pad[8];
- struct {
- __u64 state;
- __u64 state_entry_time;
- __u64 time_running;
- __u64 time_runnable;
- __u64 time_blocked;
- __u64 time_offline;
- } runstate;
- __u32 vcpu_id;
- struct {
- __u32 port;
- __u32 priority;
- __u64 expires_ns;
- } timer;
- __u8 vector;
- } u;
- };
- /* Available with KVM_CAP_XEN_HVM / KVM_XEN_HVM_CONFIG_SHARED_INFO */
- #define KVM_XEN_VCPU_ATTR_TYPE_VCPU_INFO 0x0
- #define KVM_XEN_VCPU_ATTR_TYPE_VCPU_TIME_INFO 0x1
- #define KVM_XEN_VCPU_ATTR_TYPE_RUNSTATE_ADDR 0x2
- #define KVM_XEN_VCPU_ATTR_TYPE_RUNSTATE_CURRENT 0x3
- #define KVM_XEN_VCPU_ATTR_TYPE_RUNSTATE_DATA 0x4
- #define KVM_XEN_VCPU_ATTR_TYPE_RUNSTATE_ADJUST 0x5
- /* Available with KVM_CAP_XEN_HVM / KVM_XEN_HVM_CONFIG_EVTCHN_SEND */
- #define KVM_XEN_VCPU_ATTR_TYPE_VCPU_ID 0x6
- #define KVM_XEN_VCPU_ATTR_TYPE_TIMER 0x7
- #define KVM_XEN_VCPU_ATTR_TYPE_UPCALL_VECTOR 0x8
- /* Available with KVM_CAP_XEN_HVM / KVM_XEN_HVM_CONFIG_SHARED_INFO_HVA */
- #define KVM_XEN_VCPU_ATTR_TYPE_VCPU_INFO_HVA 0x9
- /* Secure Encrypted Virtualization command */
- enum sev_cmd_id {
- /* Guest initialization commands */
- KVM_SEV_INIT = 0,
- KVM_SEV_ES_INIT,
- /* Guest launch commands */
- KVM_SEV_LAUNCH_START,
- KVM_SEV_LAUNCH_UPDATE_DATA,
- KVM_SEV_LAUNCH_UPDATE_VMSA,
- KVM_SEV_LAUNCH_SECRET,
- KVM_SEV_LAUNCH_MEASURE,
- KVM_SEV_LAUNCH_FINISH,
- /* Guest migration commands (outgoing) */
- KVM_SEV_SEND_START,
- KVM_SEV_SEND_UPDATE_DATA,
- KVM_SEV_SEND_UPDATE_VMSA,
- KVM_SEV_SEND_FINISH,
- /* Guest migration commands (incoming) */
- KVM_SEV_RECEIVE_START,
- KVM_SEV_RECEIVE_UPDATE_DATA,
- KVM_SEV_RECEIVE_UPDATE_VMSA,
- KVM_SEV_RECEIVE_FINISH,
- /* Guest status and debug commands */
- KVM_SEV_GUEST_STATUS,
- KVM_SEV_DBG_DECRYPT,
- KVM_SEV_DBG_ENCRYPT,
- /* Guest certificates commands */
- KVM_SEV_CERT_EXPORT,
- /* Attestation report */
- KVM_SEV_GET_ATTESTATION_REPORT,
- /* Guest Migration Extension */
- KVM_SEV_SEND_CANCEL,
- /* Second time is the charm; improved versions of the above ioctls. */
- KVM_SEV_INIT2,
- /* SNP-specific commands */
- KVM_SEV_SNP_LAUNCH_START = 100,
- KVM_SEV_SNP_LAUNCH_UPDATE,
- KVM_SEV_SNP_LAUNCH_FINISH,
- KVM_SEV_SNP_ENABLE_REQ_CERTS,
- KVM_SEV_NR_MAX,
- };
- struct kvm_sev_cmd {
- __u32 id;
- __u32 pad0;
- __u64 data;
- __u32 error;
- __u32 sev_fd;
- };
- struct kvm_sev_init {
- __u64 vmsa_features;
- __u32 flags;
- __u16 ghcb_version;
- __u16 pad1;
- __u32 pad2[8];
- };
- struct kvm_sev_launch_start {
- __u32 handle;
- __u32 policy;
- __u64 dh_uaddr;
- __u32 dh_len;
- __u32 pad0;
- __u64 session_uaddr;
- __u32 session_len;
- __u32 pad1;
- };
- struct kvm_sev_launch_update_data {
- __u64 uaddr;
- __u32 len;
- __u32 pad0;
- };
- struct kvm_sev_launch_secret {
- __u64 hdr_uaddr;
- __u32 hdr_len;
- __u32 pad0;
- __u64 guest_uaddr;
- __u32 guest_len;
- __u32 pad1;
- __u64 trans_uaddr;
- __u32 trans_len;
- __u32 pad2;
- };
- struct kvm_sev_launch_measure {
- __u64 uaddr;
- __u32 len;
- __u32 pad0;
- };
- struct kvm_sev_guest_status {
- __u32 handle;
- __u32 policy;
- __u32 state;
- };
- struct kvm_sev_dbg {
- __u64 src_uaddr;
- __u64 dst_uaddr;
- __u32 len;
- __u32 pad0;
- };
- struct kvm_sev_attestation_report {
- __u8 mnonce[16];
- __u64 uaddr;
- __u32 len;
- __u32 pad0;
- };
- struct kvm_sev_send_start {
- __u32 policy;
- __u32 pad0;
- __u64 pdh_cert_uaddr;
- __u32 pdh_cert_len;
- __u32 pad1;
- __u64 plat_certs_uaddr;
- __u32 plat_certs_len;
- __u32 pad2;
- __u64 amd_certs_uaddr;
- __u32 amd_certs_len;
- __u32 pad3;
- __u64 session_uaddr;
- __u32 session_len;
- __u32 pad4;
- };
- struct kvm_sev_send_update_data {
- __u64 hdr_uaddr;
- __u32 hdr_len;
- __u32 pad0;
- __u64 guest_uaddr;
- __u32 guest_len;
- __u32 pad1;
- __u64 trans_uaddr;
- __u32 trans_len;
- __u32 pad2;
- };
- struct kvm_sev_receive_start {
- __u32 handle;
- __u32 policy;
- __u64 pdh_uaddr;
- __u32 pdh_len;
- __u32 pad0;
- __u64 session_uaddr;
- __u32 session_len;
- __u32 pad1;
- };
- struct kvm_sev_receive_update_data {
- __u64 hdr_uaddr;
- __u32 hdr_len;
- __u32 pad0;
- __u64 guest_uaddr;
- __u32 guest_len;
- __u32 pad1;
- __u64 trans_uaddr;
- __u32 trans_len;
- __u32 pad2;
- };
- struct kvm_sev_snp_launch_start {
- __u64 policy;
- __u8 gosvw[16];
- __u16 flags;
- __u8 pad0[6];
- __u64 pad1[4];
- };
- /* Kept in sync with firmware values for simplicity. */
- #define KVM_SEV_PAGE_TYPE_INVALID 0x0
- #define KVM_SEV_SNP_PAGE_TYPE_NORMAL 0x1
- #define KVM_SEV_SNP_PAGE_TYPE_ZERO 0x3
- #define KVM_SEV_SNP_PAGE_TYPE_UNMEASURED 0x4
- #define KVM_SEV_SNP_PAGE_TYPE_SECRETS 0x5
- #define KVM_SEV_SNP_PAGE_TYPE_CPUID 0x6
- struct kvm_sev_snp_launch_update {
- __u64 gfn_start;
- __u64 uaddr;
- __u64 len;
- __u8 type;
- __u8 pad0;
- __u16 flags;
- __u32 pad1;
- __u64 pad2[4];
- };
- #define KVM_SEV_SNP_ID_BLOCK_SIZE 96
- #define KVM_SEV_SNP_ID_AUTH_SIZE 4096
- #define KVM_SEV_SNP_FINISH_DATA_SIZE 32
- struct kvm_sev_snp_launch_finish {
- __u64 id_block_uaddr;
- __u64 id_auth_uaddr;
- __u8 id_block_en;
- __u8 auth_key_en;
- __u8 vcek_disabled;
- __u8 host_data[KVM_SEV_SNP_FINISH_DATA_SIZE];
- __u8 pad0[3];
- __u16 flags;
- __u64 pad1[4];
- };
- #define KVM_X2APIC_API_USE_32BIT_IDS _BITULL(0)
- #define KVM_X2APIC_API_DISABLE_BROADCAST_QUIRK _BITULL(1)
- #define KVM_X2APIC_ENABLE_SUPPRESS_EOI_BROADCAST _BITULL(2)
- #define KVM_X2APIC_DISABLE_SUPPRESS_EOI_BROADCAST _BITULL(3)
- struct kvm_hyperv_eventfd {
- __u32 conn_id;
- __s32 fd;
- __u32 flags;
- __u32 padding[3];
- };
- #define KVM_HYPERV_CONN_ID_MASK 0x00ffffff
- #define KVM_HYPERV_EVENTFD_DEASSIGN (1 << 0)
- /*
- * Masked event layout.
- * Bits Description
- * ---- -----------
- * 7:0 event select (low bits)
- * 15:8 umask match
- * 31:16 unused
- * 35:32 event select (high bits)
- * 36:54 unused
- * 55 exclude bit
- * 63:56 umask mask
- */
- #define KVM_PMU_ENCODE_MASKED_ENTRY(event_select, mask, match, exclude) \
- (((event_select) & 0xFFULL) | (((event_select) & 0XF00ULL) << 24) | \
- (((mask) & 0xFFULL) << 56) | \
- (((match) & 0xFFULL) << 8) | \
- ((__u64)(!!(exclude)) << 55))
- #define KVM_PMU_MASKED_ENTRY_EVENT_SELECT \
- (__GENMASK_ULL(7, 0) | __GENMASK_ULL(35, 32))
- #define KVM_PMU_MASKED_ENTRY_UMASK_MASK (__GENMASK_ULL(63, 56))
- #define KVM_PMU_MASKED_ENTRY_UMASK_MATCH (__GENMASK_ULL(15, 8))
- #define KVM_PMU_MASKED_ENTRY_EXCLUDE (_BITULL(55))
- #define KVM_PMU_MASKED_ENTRY_UMASK_MASK_SHIFT (56)
- /* for KVM_{GET,SET,HAS}_DEVICE_ATTR */
- #define KVM_VCPU_TSC_CTRL 0 /* control group for the timestamp counter (TSC) */
- #define KVM_VCPU_TSC_OFFSET 0 /* attribute for the TSC offset */
- /* x86-specific KVM_EXIT_HYPERCALL flags. */
- #define KVM_EXIT_HYPERCALL_LONG_MODE _BITULL(0)
- #define KVM_X86_DEFAULT_VM 0
- #define KVM_X86_SW_PROTECTED_VM 1
- #define KVM_X86_SEV_VM 2
- #define KVM_X86_SEV_ES_VM 3
- #define KVM_X86_SNP_VM 4
- #define KVM_X86_TDX_VM 5
- /* Trust Domain eXtension sub-ioctl() commands. */
- enum kvm_tdx_cmd_id {
- KVM_TDX_CAPABILITIES = 0,
- KVM_TDX_INIT_VM,
- KVM_TDX_INIT_VCPU,
- KVM_TDX_INIT_MEM_REGION,
- KVM_TDX_FINALIZE_VM,
- KVM_TDX_GET_CPUID,
- KVM_TDX_CMD_NR_MAX,
- };
- struct kvm_tdx_cmd {
- /* enum kvm_tdx_cmd_id */
- __u32 id;
- /* flags for sub-commend. If sub-command doesn't use this, set zero. */
- __u32 flags;
- /*
- * data for each sub-command. An immediate or a pointer to the actual
- * data in process virtual address. If sub-command doesn't use it,
- * set zero.
- */
- __u64 data;
- /*
- * Auxiliary error code. The sub-command may return TDX SEAMCALL
- * status code in addition to -Exxx.
- */
- __u64 hw_error;
- };
- struct kvm_tdx_capabilities {
- __u64 supported_attrs;
- __u64 supported_xfam;
- __u64 kernel_tdvmcallinfo_1_r11;
- __u64 user_tdvmcallinfo_1_r11;
- __u64 kernel_tdvmcallinfo_1_r12;
- __u64 user_tdvmcallinfo_1_r12;
- __u64 reserved[250];
- /* Configurable CPUID bits for userspace */
- struct kvm_cpuid2 cpuid;
- };
- struct kvm_tdx_init_vm {
- __u64 attributes;
- __u64 xfam;
- __u64 mrconfigid[6]; /* sha384 digest */
- __u64 mrowner[6]; /* sha384 digest */
- __u64 mrownerconfig[6]; /* sha384 digest */
- /* The total space for TD_PARAMS before the CPUIDs is 256 bytes */
- __u64 reserved[12];
- /*
- * Call KVM_TDX_INIT_VM before vcpu creation, thus before
- * KVM_SET_CPUID2.
- * This configuration supersedes KVM_SET_CPUID2s for VCPUs because the
- * TDX module directly virtualizes those CPUIDs without VMM. The user
- * space VMM, e.g. qemu, should make KVM_SET_CPUID2 consistent with
- * those values. If it doesn't, KVM may have wrong idea of vCPUIDs of
- * the guest, and KVM may wrongly emulate CPUIDs or MSRs that the TDX
- * module doesn't virtualize.
- */
- struct kvm_cpuid2 cpuid;
- };
- #define KVM_TDX_MEASURE_MEMORY_REGION _BITULL(0)
- struct kvm_tdx_init_mem_region {
- __u64 source_addr;
- __u64 gpa;
- __u64 nr_pages;
- };
- #endif /* _ASM_X86_KVM_H */
|