linux/Documentation/virt/kvm/x86
Brijesh Singh ad27ce1555 KVM: SEV: Add KVM_SEV_SNP_LAUNCH_FINISH command
Add a KVM_SEV_SNP_LAUNCH_FINISH command to finalize the cryptographic
launch digest which stores the measurement of the guest at launch time.
Also extend the existing SNP firmware data structures to support
disabling the use of Versioned Chip Endorsement Keys (VCEK) by guests as
part of this command.

While finalizing the launch flow, the code also issues the LAUNCH_UPDATE
SNP firmware commands to encrypt/measure the initial VMSA pages for each
configured vCPU, which requires setting the RMP entries for those pages
to private, so also add handling to clean up the RMP entries for these
pages whening freeing vCPUs during shutdown.

Signed-off-by: Brijesh Singh <brijesh.singh@amd.com>
Co-developed-by: Michael Roth <michael.roth@amd.com>
Signed-off-by: Michael Roth <michael.roth@amd.com>
Signed-off-by: Harald Hoyer <harald@profian.com>
Signed-off-by: Ashish Kalra <ashish.kalra@amd.com>
Message-ID: <20240501085210.2213060-8-michael.roth@amd.com>
Signed-off-by: Paolo Bonzini <pbonzini@redhat.com>
2024-05-12 04:09:30 -04:00
..
amd-memory-encryption.rst KVM: SEV: Add KVM_SEV_SNP_LAUNCH_FINISH command 2024-05-12 04:09:30 -04:00
cpuid.rst
errata.rst KVM: x86: Honor architectural behavior for aliased 8-bit APIC IDs 2023-01-13 10:45:30 -05:00
hypercalls.rst Documentation: KVM: update s390-diag.rst reference 2022-07-07 13:10:00 -06:00
index.rst KVM: Move halt-polling documentation into common directory 2022-12-02 13:20:30 -05:00
mmu.rst KVM: Documentation: Add the missing description for tdp_mmu_page into kvm_mmu_page 2023-09-27 13:32:18 -07:00
msr.rst KVM: x86: Improve documentation of MSR_KVM_ASYNC_PF_EN 2024-02-06 10:59:52 -08:00
nested-vmx.rst
running-nested-guests.rst Documentation: Fix typos 2023-08-18 11:29:03 -06:00
timekeeping.rst