Re: [RFC PATCH 04/16] hw/arm/virt: Add support for Arm RME

2023-02-08 Thread Jean-Philippe Brucker
On Fri, Jan 27, 2023 at 11:07:35AM -1000, Richard Henderson wrote: > > +/* > > + * Since the devicetree is included in the initial measurement, it must > > + * not contain random data. > > + */ > > +if (virt_machine_is_confidential(vms)) { > > +vms->dtb_randomness =

Re: [RFC PATCH 04/16] hw/arm/virt: Add support for Arm RME

2023-01-27 Thread Richard Henderson
On 1/27/23 05:07, Jean-Philippe Brucker wrote: When confidential-guest-support is enabled for the virt machine, call the RME init function, and add the RME flag to the VM type. * The Realm differentiates non-secure from realm memory using the upper GPA bit. Reserve that bit when creating the

[RFC PATCH 04/16] hw/arm/virt: Add support for Arm RME

2023-01-27 Thread Jean-Philippe Brucker
When confidential-guest-support is enabled for the virt machine, call the RME init function, and add the RME flag to the VM type. * The Realm differentiates non-secure from realm memory using the upper GPA bit. Reserve that bit when creating the memory map, to make sure that device MMIO