For the Kernel Support: ---------------
commit 28c1c9fabf48d6ad596273a11c46e0d0da3e14cd Author: KarimAllah Ahmed <[email protected]> Date: Thu Feb 1 19:59:44 2018 KVM/VMX: Emulate MSR_IA32_ARCH_CAPABILITIES Disco: OK - https://bugs.launchpad.net/bugs/1823060 Bionic: OK - https://bugs.launchpad.net/bugs/1838116 - commit 801e459a6f3a63af9d447e6249088c76ae16efc4 Author: Tom Lendacky <[email protected]> Date: Wed Feb 21 16:39:51 2018 KVM: x86: Add a framework for supporting MSR-based features Disco: OK Bionic: OK - since Ubuntu-4.15.0-32.34 - commit 772439717dbf703b39990be58d8d4e3e4ad0598a Author: Konrad Rzeszutek Wilk <[email protected]> Date: Wed Apr 25 23:04:22 2018 x86/bugs/intel: Set proper CPU features and setup RDS Disco: OK Bionic: OK - since Ubuntu-4.15.0-22.24 - commit 9f65fb29374ee37856dbad847b4e121aab72b510 Author: Konrad Rzeszutek Wilk <[email protected]> Date: Wed May 9 16:41:38 2018 x86/bugs: Rename _RDS to _SSBD Disco: OK Bionic: OK - since Ubuntu-4.15.0-22.24 - commit 1eaafe91a0df4157521b6417b3dd8430bf5f52f0 Author: Jim Mattson <[email protected]> Date: Wed May 9 18:29:35 2018 kvm: x86: IA32_ARCH_CAPABILITIES is always supported Disco: OK Bionic: OK - http://bugs.launchpad.net/bugs/1786352 - commit cd28325249a1ca0d771557ce823e0308ad629f98 Author: Paolo Bonzini <[email protected]> Date: Mon Jun 25 09:04:37 2018 KVM: VMX: support MSR_IA32_ARCH_CAPABILITIES as a feature MSR Disco: OK Bionic: OK - since Ubuntu-4.15.0-32.34 - commit 0cf9135b773bf32fba9dd8e6699c1b331ee4b749 Author: Sean Christopherson <[email protected]> Date: Thu Mar 7 20:43:02 2019 KVM: x86: Emulate MSR_IA32_ARCH_CAPABILITIES on AMD hosts Disco: OK - https://bugs.launchpad.net/bugs/1823060 Bionic: OK - https://bugs.launchpad.net/bugs/1838116 - commit 2bdb76c015df7125783d8394d6339d181cb5bc30 Author: Xiaoyao Li <[email protected]> Date: Fri Mar 8 04:57:20 2019 kvm/x86: Move MSR_IA32_ARCH_CAPABILITIES to array emulated_msrs Disco: OK - https://bugs.launchpad.net/bugs/1830934 Bionic: Missing - Possibly no need --------------- I believe we're all set. I'll have to test in CascadeLake machine to make though. ** Changed in: linux (Ubuntu Bionic) Status: Confirmed => Fix Released ** Changed in: linux (Ubuntu Disco) Status: Confirmed => Fix Released ** Changed in: linux (Ubuntu Eoan) Status: In Progress => Fix Released ** Changed in: linux (Ubuntu) Status: In Progress => Fix Released ** Changed in: intel Status: New => Fix Released ** Changed in: intel Importance: Undecided => Wishlist ** Changed in: libvirt (Ubuntu Disco) Assignee: Rafael David Tinoco (rafaeldtinoco) => (unassigned) ** Changed in: linux (Ubuntu) Assignee: Rafael David Tinoco (rafaeldtinoco) => (unassigned) ** Changed in: linux (Ubuntu Eoan) Assignee: Rafael David Tinoco (rafaeldtinoco) => (unassigned) -- You received this bug notification because you are a member of Kernel Packages, which is subscribed to linux in Ubuntu. https://bugs.launchpad.net/bugs/1828495 Title: [KVM][CLX] CPUID_7_0_EDX_ARCH_CAPABILITIES is not enabled in VM. Status in intel: Fix Released Status in libvirt package in Ubuntu: Fix Released Status in linux package in Ubuntu: Fix Released Status in qemu package in Ubuntu: Fix Released Status in libvirt source package in Bionic: Won't Fix Status in linux source package in Bionic: Fix Released Status in qemu source package in Bionic: Fix Released Status in libvirt source package in Disco: Won't Fix Status in linux source package in Disco: Fix Released Status in qemu source package in Disco: Fix Released Status in libvirt source package in Eoan: Fix Released Status in linux source package in Eoan: Fix Released Status in qemu source package in Eoan: Fix Released Bug description: [Impact] * QEMU does not support IceLake and CascadeLake CPUs specific features. * Most important feature to be supported is: IA32_ARCH_CAPABILITIES MSR. * With IA32_ARCH_CAPABILITIES, QEMU is able to advertise HW mitigations: - Rogue Data Cache Load - Enhanced IBRS - RSB Alternate - L1D flush need on VMENTRY - speculative Store Bypass to guests, as described in document: Intel 336996-Speculative-Execution-Side-Channel-Mitigations.pdf [Test Case] * From Original Description: """ 1. Boot up guest using: -cpu Cascadelake-Server [root@clx-2s2 yexin]# qemu-system-x86_64 -accel kvm -drive if=virtio,id=hd,file=/home/x/x,format=qcow2 -m 4096 -smp 4 -cpu Cascadelake-Server -serial stdio char device redirected to /dev/pts/3 (label serial0) qemu-system-x86_64: warning: host doesn't support requested feature: CPUID.07H:ECX [bit 4] qemu-system-x86_64: warning: host doesn't support requested feature: CPUID.07H:ECX [bit 4] qemu-system-x86_64: warning: host doesn't support requested feature: CPUID.07H:ECX [bit 4] qemu-system-x86_64: warning: host doesn't support requested feature: CPUID.07H:ECX [bit 4] 2. To check CPU ID related to features[FEAT_7_0_EDX] :CPUID_7_0_EDX_ARCH_CAPABILITIES Expected Result: Both host and guest's CPUID.07H EDX bit 29 should be 1. Actual Result: Host's cpuid: 0x00000007 0x00: eax=0x00000000 ebx=0xd39ffffb ecx=0x00000818 edx=0xbc000000 (EDX bit 29=1) Guest's cpuid : 0x00000007 0x00: eax=0x00000000 ebx=0xd19f0fb9 ecx=0x00000818 edx=0x84000000 (EDX bit 29=0) Commit:2bdb76c015df7125783d8394d6339d181cb5bc30 Target Kerned: 5.1 Target Release: 19.10 """ [Regression Potential] * Most changes are related to CPU type definitions and its supported features. They are all based in upstream changes but, for obvious reasons, backporting and/or cherry-picking those could bring issues. Biggest concern is breaking something that currently works. Right now, the parts being changed that could affect other CPU types would be related to a small refactoring of how the features are organized, and that would be seen right away when trying to start a new VM after the package is installed. * Other tests, related to the features being backported, are being done by our KVM regression tests, including migration combinations, to reduce chances that a regression is introduced. [Other Info] * N/A To manage notifications about this bug go to: https://bugs.launchpad.net/intel/+bug/1828495/+subscriptions -- Mailing list: https://launchpad.net/~kernel-packages Post to : [email protected] Unsubscribe : https://launchpad.net/~kernel-packages More help : https://help.launchpad.net/ListHelp

