This is the v9 series of TDX QEMU enabling. The series is also available at github: https://github.com/intel-staging/qemu-tdx/tree/tdx-qemu-upstream-v9
Note, this series has a dependency on https://lore.kernel.org/qemu-devel/20241217123932.948789-1-xiaoyao...@intel.com/ ============= Changes in v9 Comparing to v8, no big change in v9. V9 mainly collects Reviewed-by tags from Daniel and Zhao Liu (Thanks to their review!) and v9 does some small change according to the review feedback of them. Please see the individual patch for the detailed change history. =========== future work - CPU model It now only supports booting TD VM with "-cpu host". It is the only case that is not supposed to hit any warning/error. When using named CPU model, even the same model as host, it likely hits warning like some feature not supported or some feature enforced on. It's a future work to decide if needs to introduce TDX specific named CPU models. - Attestation support Atttestation support will be submitted separately since it depends on the GHCI clarification on the format of the `datai` filed of the shared buffer of <GetQuote>.[1] - gdb support gdb support to debug a TD in off-debug mode is left as future work. [1] https://lore.kernel.org/qemu-devel/f1b0c905-3804-4c34-bc17-e437a8ae8...@intel.com/ ======= history v8: https://lore.kernel.org/qemu-devel/20250401130205.2198253-1-xiaoyao...@intel.com/ v7: https://lore.kernel.org/qemu-devel/20250124132048.3229049-1-xiaoyao...@intel.com/ Chao Peng (1): i386/tdx: load TDVF for TD guest Isaku Yamahata (5): i386/tdx: Make sept_ve_disable set by default i386/tdx: Support user configurable mrconfigid/mrowner/mrownerconfig i386/tdvf: Introduce function to parse TDVF metadata i386/tdx: Add TDVF memory via KVM_TDX_INIT_MEM_REGION i386/tdx: Don't synchronize guest tsc for TDs Xiaoyao Li (49): *** HACK *** linux-headers: Update headers to pull in TDX API changes i386: Introduce tdx-guest object i386/tdx: Implement tdx_kvm_type() for TDX i386/tdx: Implement tdx_kvm_init() to initialize TDX VM context i386/tdx: Get tdx_capabilities via KVM_TDX_CAPABILITIES i386/tdx: Introduce is_tdx_vm() helper and cache tdx_guest object kvm: Introduce kvm_arch_pre_create_vcpu() i386/tdx: Initialize TDX before creating TD vcpus i386/tdx: Add property sept-ve-disable for tdx-guest object i386/tdx: Wire CPU features up with attributes of TD guest i386/tdx: Validate TD attributes i386/tdx: Set APIC bus rate to match with what TDX module enforces i386/tdx: Implement user specified tsc frequency i386/tdx: Parse TDVF metadata for TDX VM i386/tdx: Don't initialize pc.rom for TDX VMs i386/tdx: Track mem_ptr for each firmware entry of TDVF i386/tdx: Track RAM entries for TDX VM headers: Add definitions from UEFI spec for volumes, resources, etc... i386/tdx: Setup the TD HOB list i386/tdx: Call KVM_TDX_INIT_VCPU to initialize TDX vcpu i386/tdx: Finalize TDX VM i386/tdx: Enable user exit on KVM_HC_MAP_GPA_RANGE i386/tdx: Handle KVM_SYSTEM_EVENT_TDX_FATAL i386/tdx: Wire TDX_REPORT_FATAL_ERROR with GuestPanic facility kvm: Check KVM_CAP_MAX_VCPUS at vm level i386/cpu: introduce x86_confidential_guest_cpu_instance_init() i386/tdx: implement tdx_cpu_instance_init() i386/cpu: Introduce enable_cpuid_0x1f to force exposing CPUID 0x1f i386/tdx: Force exposing CPUID 0x1f i386/tdx: Set kvm_readonly_mem_enabled to false for TDX VM i386/tdx: Disable SMM for TDX VMs i386/tdx: Disable PIC for TDX VMs i386/tdx: Set and check kernel_irqchip mode for TDX i386/tdx: Only configure MSR_IA32_UCODE_REV in kvm_init_msrs() for TDs i386/apic: Skip kvm_apic_put() for TDX cpu: Don't set vcpu_dirty when guest_state_protected i386/cgs: Rename *mask_cpuid_features() to *adjust_cpuid_features() i386/tdx: Implement adjust_cpuid_features() for TDX i386/tdx: Add TDX fixed1 bits to supported CPUIDs i386/tdx: Add supported CPUID bits related to TD Attributes i386/tdx: Add supported CPUID bits relates to XFAM i386/tdx: Add XFD to supported bit of TDX i386/tdx: Define supported KVM features for TDX i386/cgs: Introduce x86_confidential_guest_check_features() i386/tdx: Fetch and validate CPUID of TD guest i386/tdx: Don't treat SYSCALL as unavailable i386/tdx: Make invtsc default on i386/tdx: Validate phys_bits against host value docs: Add TDX documentation accel/kvm/kvm-all.c | 11 +- configs/devices/i386-softmmu/default.mak | 1 + docs/system/confidential-guest-support.rst | 1 + docs/system/i386/tdx.rst | 161 +++ docs/system/target-i386.rst | 1 + hw/i386/Kconfig | 6 + hw/i386/kvm/apic.c | 5 + hw/i386/meson.build | 1 + hw/i386/pc.c | 29 +- hw/i386/pc_sysfw.c | 7 + hw/i386/tdvf-hob.c | 130 ++ hw/i386/tdvf-hob.h | 26 + hw/i386/tdvf.c | 188 +++ hw/i386/x86-common.c | 6 +- include/hw/i386/tdvf.h | 45 + include/standard-headers/uefi/uefi.h | 187 +++ include/system/kvm.h | 1 + linux-headers/asm-x86/kvm.h | 69 ++ linux-headers/linux/kvm.h | 1 + qapi/qom.json | 35 + qapi/run-state.json | 31 +- system/runstate.c | 65 + target/arm/kvm.c | 5 + target/i386/confidential-guest.h | 44 +- target/i386/cpu.c | 69 +- target/i386/cpu.h | 40 + target/i386/host-cpu.c | 2 +- target/i386/host-cpu.h | 1 + target/i386/kvm/kvm.c | 114 +- target/i386/kvm/kvm_i386.h | 15 + target/i386/kvm/meson.build | 2 + target/i386/kvm/tdx-stub.c | 20 + target/i386/kvm/tdx.c | 1296 ++++++++++++++++++++ target/i386/kvm/tdx.h | 65 + target/i386/sev.c | 12 +- target/loongarch/kvm/kvm.c | 4 + target/mips/kvm.c | 5 + target/ppc/kvm.c | 5 + target/riscv/kvm/kvm-cpu.c | 5 + target/s390x/kvm/kvm.c | 5 + 40 files changed, 2620 insertions(+), 96 deletions(-) create mode 100644 docs/system/i386/tdx.rst create mode 100644 hw/i386/tdvf-hob.c create mode 100644 hw/i386/tdvf-hob.h create mode 100644 hw/i386/tdvf.c create mode 100644 include/hw/i386/tdvf.h create mode 100644 include/standard-headers/uefi/uefi.h create mode 100644 target/i386/kvm/tdx-stub.c create mode 100644 target/i386/kvm/tdx.c create mode 100644 target/i386/kvm/tdx.h base-commit: 7c949c53e936aa3a658d84ab53bae5cadaa5d59c -- 2.43.0
