From: Pierrick Bouvier
This boot an OP-TEE environment, and launch a nested guest VM inside it
using the Realms feature. We do it for virt and sbsa-ref platforms.
Signed-off-by: Pierrick Bouvier
Message-Id: <[email protected]>
[AJB: tweak ordering of setup, strip changelog from commit]
Signed-off-by: Alex Bennée
Tested-by: Thomas Huth
Message-Id: <[email protected]>
diff --git a/tests/functional/meson.build b/tests/functional/meson.build
index 7890dcb86d..bd3d903cfc 100644
--- a/tests/functional/meson.build
+++ b/tests/functional/meson.build
@@ -13,6 +13,8 @@ endif
test_timeouts = {
'aarch64_aspeed' : 600,
'aarch64_raspi4' : 480,
+ 'aarch64_rme_virt' : 1200,
+ 'aarch64_rme_sbsaref' : 1200,
'aarch64_sbsaref_alpine' : 720,
'aarch64_sbsaref_freebsd' : 720,
'aarch64_tuxrun' : 240,
@@ -60,6 +62,8 @@ tests_aarch64_system_thorough = [
'aarch64_aspeed',
'aarch64_raspi3',
'aarch64_raspi4',
+ 'aarch64_rme_virt',
+ 'aarch64_rme_sbsaref',
'aarch64_sbsaref',
'aarch64_sbsaref_alpine',
'aarch64_sbsaref_freebsd',
diff --git a/tests/functional/test_aarch64_rme_sbsaref.py
b/tests/functional/test_aarch64_rme_sbsaref.py
new file mode 100755
index 00..93bb528338
--- /dev/null
+++ b/tests/functional/test_aarch64_rme_sbsaref.py
@@ -0,0 +1,69 @@
+#!/usr/bin/env python3
+#
+# Functional test that boots a Realms environment on sbsa-ref machine and a
+# nested guest VM using it.
+#
+# Copyright (c) 2024 Linaro Ltd.
+#
+# Author: Pierrick Bouvier
+#
+# SPDX-License-Identifier: GPL-2.0-or-later
+
+import time
+import os
+import logging
+
+from qemu_test import QemuSystemTest, Asset
+from qemu_test import exec_command, wait_for_console_pattern
+from qemu_test import exec_command_and_wait_for_pattern
+from test_aarch64_rme_virt import test_realms_guest
+
+class Aarch64RMESbsaRefMachine(QemuSystemTest):
+
+# Stack is built with OP-TEE build environment from those instructions:
+# https://linaro.atlassian.net/wiki/spaces/QEMU/pages/29051027459/
+# https://github.com/pbo-linaro/qemu-rme-stack
+ASSET_RME_STACK_SBSA = Asset(
+('https://fileserver.linaro.org/s/KJyeBxL82mz2r7F/'
+ 'download/rme-stack-op-tee-4.2.0-cca-v4-sbsa.tar.gz'),
+ 'dd9ab28ec869bdf3b5376116cb3689103b43433fd5c4bca0f4a8d8b3c104999e')
+
+# This tests the FEAT_RME cpu implementation, by booting a VM supporting
it,
+# and launching a nested VM using it.
+def test_aarch64_rme_sbsaref(self):
+self.set_machine('sbsa-ref')
+self.require_accelerator('tcg')
+
+self.vm.set_console()
+
+stack_path_tar_gz = self.ASSET_RME_STACK_SBSA.fetch()
+self.archive_extract(stack_path_tar_gz, format="tar")
+
+rme_stack = self.scratch_file('rme-stack-op-tee-4.2.0-cca-v4-sbsa')
+pflash0 = os.path.join(rme_stack, 'images', 'SBSA_FLASH0.fd')
+pflash1 = os.path.join(rme_stack, 'images', 'SBSA_FLASH1.fd')
+virtual = os.path.join(rme_stack, 'images', 'disks', 'virtual')
+drive = os.path.join(rme_stack, 'out-br', 'images', 'rootfs.ext4')
+
+self.vm.add_args('-cpu', 'max,x-rme=on,pauth-impdef=on')
+self.vm.add_args('-m', '2G')
+self.vm.add_args('-M', 'sbsa-ref')
+self.vm.add_args('-drive', f'file={pflash0},format=raw,if=pflash')
+self.vm.add_args('-drive', f'file={pflash1},format=raw,if=pflash')
+self.vm.add_args('-drive', f'file=fat:rw:{virtual},format=raw')
+self.vm.add_args('-drive', f'format=raw,if=none,file={drive},id=hd0')
+self.vm.add_args('-device', 'virtio-blk-pci,drive=hd0')
+self.vm.add_args('-device', 'virtio-9p-pci,fsdev=shr0,mount_tag=shr0')
+self.vm.add_args('-fsdev',
f'local,security_model=none,path={rme_stack},id=shr0')
+self.vm.add_args('-device', 'virtio-net-pci,netdev=net0')
+self.vm.add_args('-netdev', 'user,id=net0')
+
+self.vm.launch()
+# Wait for host VM boot to complete.
+wait_for_console_pattern(self, 'Welcome to Buildroot')
+exec_command_and_wait_for_pattern(self, 'root', '#')
+
+test_realms_guest(self)
+
+if __name__ == '__main__':
+QemuSystemTest.main()
diff --git a/tests/functional/test_aarch64_rme_virt.py
b/tests/functional/test_aarch64_rme_virt.py
new file mode 100755
index 00..42b9229b4c
--- /dev/null
+++ b/tests/functional/test_aarch64_rme_virt.py
@@ -0,0 +1,98 @@
+#!/usr/bin/env python3
+#
+# Functional test that boots a Realms environment on virt machine and a nested
+# guest VM using it.
+#
+# Copyright (c) 2024 Linaro Ltd.
+#
+# Author: Pierrick Bouvier
+#
+# SPDX-License-Identifier: GPL-2.0-or-later
+
+import time
+import os
+import logging
+
+from qemu_test import QemuSystemTest, Asset
+from qemu_test import exec_command, wait_for_console_pattern
+from qemu_test import exec_command_and_wait_for_pattern
+
+def test_realms_guest(test_rme_instance):
+
+# Boot the (nest
