mirror of
https://github.com/torvalds/linux.git
synced 2026-04-19 23:34:00 -04:00
40e09b3ccf
Extend sev_smoke_test to also run a minimal SEV-ES smoke test so that it's possible to test KVM's unique VMRUN=>#VMEXIT path for SEV-ES guests without needing a full blown SEV-ES capable VM, which requires a rather absurd amount of properly configured collateral. Punt on proper GHCB and ucall support, and instead use the GHCB MSR protocol to signal test completion. The most important thing at this point is to have _any_ kind of testing of KVM's __svm_sev_es_vcpu_run(). Cc: Tom Lendacky <thomas.lendacky@amd.com> Cc: Michael Roth <michael.roth@amd.com> Cc: Peter Gonda <pgonda@google.com> Cc: Carlos Bilbao <carlos.bilbao@amd.com> Tested-by: Carlos Bilbao <carlos.bilbao@amd.com> Link: https://lore.kernel.org/r/20240223004258.3104051-12-seanjc@google.com Signed-off-by: Sean Christopherson <seanjc@google.com>
89 lines
2.1 KiB
C
89 lines
2.1 KiB
C
// SPDX-License-Identifier: GPL-2.0-only
|
|
#include <fcntl.h>
|
|
#include <stdio.h>
|
|
#include <stdlib.h>
|
|
#include <string.h>
|
|
#include <sys/ioctl.h>
|
|
|
|
#include "test_util.h"
|
|
#include "kvm_util.h"
|
|
#include "processor.h"
|
|
#include "svm_util.h"
|
|
#include "linux/psp-sev.h"
|
|
#include "sev.h"
|
|
|
|
|
|
static void guest_sev_es_code(void)
|
|
{
|
|
/* TODO: Check CPUID after GHCB-based hypercall support is added. */
|
|
GUEST_ASSERT(rdmsr(MSR_AMD64_SEV) & MSR_AMD64_SEV_ENABLED);
|
|
GUEST_ASSERT(rdmsr(MSR_AMD64_SEV) & MSR_AMD64_SEV_ES_ENABLED);
|
|
|
|
/*
|
|
* TODO: Add GHCB and ucall support for SEV-ES guests. For now, simply
|
|
* force "termination" to signal "done" via the GHCB MSR protocol.
|
|
*/
|
|
wrmsr(MSR_AMD64_SEV_ES_GHCB, GHCB_MSR_TERM_REQ);
|
|
__asm__ __volatile__("rep; vmmcall");
|
|
}
|
|
|
|
static void guest_sev_code(void)
|
|
{
|
|
GUEST_ASSERT(this_cpu_has(X86_FEATURE_SEV));
|
|
GUEST_ASSERT(rdmsr(MSR_AMD64_SEV) & MSR_AMD64_SEV_ENABLED);
|
|
|
|
GUEST_DONE();
|
|
}
|
|
|
|
static void test_sev(void *guest_code, uint64_t policy)
|
|
{
|
|
struct kvm_vcpu *vcpu;
|
|
struct kvm_vm *vm;
|
|
struct ucall uc;
|
|
|
|
vm = vm_sev_create_with_one_vcpu(policy, guest_code, &vcpu);
|
|
|
|
for (;;) {
|
|
vcpu_run(vcpu);
|
|
|
|
if (policy & SEV_POLICY_ES) {
|
|
TEST_ASSERT(vcpu->run->exit_reason == KVM_EXIT_SYSTEM_EVENT,
|
|
"Wanted SYSTEM_EVENT, got %s",
|
|
exit_reason_str(vcpu->run->exit_reason));
|
|
TEST_ASSERT_EQ(vcpu->run->system_event.type, KVM_SYSTEM_EVENT_SEV_TERM);
|
|
TEST_ASSERT_EQ(vcpu->run->system_event.ndata, 1);
|
|
TEST_ASSERT_EQ(vcpu->run->system_event.data[0], GHCB_MSR_TERM_REQ);
|
|
break;
|
|
}
|
|
|
|
switch (get_ucall(vcpu, &uc)) {
|
|
case UCALL_SYNC:
|
|
continue;
|
|
case UCALL_DONE:
|
|
return;
|
|
case UCALL_ABORT:
|
|
REPORT_GUEST_ASSERT(uc);
|
|
default:
|
|
TEST_FAIL("Unexpected exit: %s",
|
|
exit_reason_str(vcpu->run->exit_reason));
|
|
}
|
|
}
|
|
|
|
kvm_vm_free(vm);
|
|
}
|
|
|
|
int main(int argc, char *argv[])
|
|
{
|
|
TEST_REQUIRE(kvm_cpu_has(X86_FEATURE_SEV));
|
|
|
|
test_sev(guest_sev_code, SEV_POLICY_NO_DBG);
|
|
test_sev(guest_sev_code, 0);
|
|
|
|
if (kvm_cpu_has(X86_FEATURE_SEV_ES)) {
|
|
test_sev(guest_sev_es_code, SEV_POLICY_ES | SEV_POLICY_NO_DBG);
|
|
test_sev(guest_sev_es_code, SEV_POLICY_ES);
|
|
}
|
|
|
|
return 0;
|
|
}
|