[v1] SEV Page Encryption Bitmap support for OVMF.

[edk2-devel] [PATCH v1 0/2] SEV Page Encryption Bitmap support for OVMF.

Ashish Kalra posted 2 patches 3 years, 4 months ago

Diff against v2 v3

Only 0 patches received!

There is a newer version of this series

OvmfPkg/OvmfPkgX64.dsc                        |   1 +
.../BaseMemEncryptSevLib.inf                  |   1 +
.../MemEncryptHypercallLib.inf                |  39 +++++++
.../Include/Library/MemEncryptHypercallLib.h  |  37 ++++++
.../BaseMemEncryptSevLib/X64/VirtualMemory.c  |  18 +++
.../MemEncryptHypercallLib.c                  | 105 ++++++++++++++++++
.../X64/AsmHelperStub.nasm                    |  39 +++++++
7 files changed, 240 insertions(+)
create mode 100644 OvmfPkg/Library/MemEncryptHypercallLib/MemEncryptHypercallLib.inf
create mode 100644 OvmfPkg/Include/Library/MemEncryptHypercallLib.h
create mode 100644 OvmfPkg/Library/MemEncryptHypercallLib/MemEncryptHypercallLib.c
create mode 100644 OvmfPkg/Library/MemEncryptHypercallLib/X64/AsmHelperStub.nasm

Expand all Fold all

[edk2-devel] [PATCH v1 0/2] SEV Page Encryption Bitmap support for OVMF.

Posted by Ashish Kalra 3 years, 4 months ago

From: Ashish Kalra <ashish.kalra@amd.com>

By default all the SEV guest memory regions are considered encrypted,
if a guest changes the encryption attribute of the page (e.g mark a
page as decrypted) then notify hypervisor. Hypervisor will need to
track the unencrypted pages. The information will be used during
guest live migration, guest page migration and guest debugging.

The patch-set also adds a new SEV and SEV-ES hypercall abstraction
library to support SEV Page encryption/decryption status hypercalls
for SEV and SEV-ES guests.

BaseMemEncryptSevLib invokes hypercalls via this new hypercall library.

A branch containing these patches is available here:
https://github.com/ashkalra/edk2/tree/sev_page_encryption_bitmap_v1

Ashish Kalra (1):
  OvmfPkg/MemEncryptHypercallLib: add library to support SEV hypercalls.

Brijesh Singh (1):
  OvmfPkg/BaseMemEncryptLib: Support to issue unencrypted hypercall

 OvmfPkg/OvmfPkgX64.dsc                        |   1 +
 .../BaseMemEncryptSevLib.inf                  |   1 +
 .../MemEncryptHypercallLib.inf                |  39 +++++++
 .../Include/Library/MemEncryptHypercallLib.h  |  37 ++++++
 .../BaseMemEncryptSevLib/X64/VirtualMemory.c  |  18 +++
 .../MemEncryptHypercallLib.c                  | 105 ++++++++++++++++++
 .../X64/AsmHelperStub.nasm                    |  39 +++++++
 7 files changed, 240 insertions(+)
 create mode 100644 OvmfPkg/Library/MemEncryptHypercallLib/MemEncryptHypercallLib.inf
 create mode 100644 OvmfPkg/Include/Library/MemEncryptHypercallLib.h
 create mode 100644 OvmfPkg/Library/MemEncryptHypercallLib/MemEncryptHypercallLib.c
 create mode 100644 OvmfPkg/Library/MemEncryptHypercallLib/X64/AsmHelperStub.nasm

-- 
2.17.1



-=-=-=-=-=-=-=-=-=-=-=-
Groups.io Links: You receive all messages sent to this group.
View/Reply Online (#68179): https://edk2.groups.io/g/devel/message/68179
Mute This Topic: https://groups.io/mt/78658197/1787277
Group Owner: devel+owner@edk2.groups.io
Unsubscribe: https://edk2.groups.io/g/devel/unsub [importer@patchew.org]
-=-=-=-=-=-=-=-=-=-=-=-

Re: [edk2-devel] [PATCH v1 0/2] SEV Page Encryption Bitmap support for OVMF.

Posted by Laszlo Ersek 3 years, 4 months ago

Hi Ashish,

On 12/02/20 08:28, Ashish Kalra wrote:
> From: Ashish Kalra <ashish.kalra@amd.com>
> 
> By default all the SEV guest memory regions are considered encrypted,
> if a guest changes the encryption attribute of the page (e.g mark a
> page as decrypted) then notify hypervisor. Hypervisor will need to
> track the unencrypted pages. The information will be used during
> guest live migration, guest page migration and guest debugging.
> 
> The patch-set also adds a new SEV and SEV-ES hypercall abstraction
> library to support SEV Page encryption/decryption status hypercalls
> for SEV and SEV-ES guests.
> 
> BaseMemEncryptSevLib invokes hypercalls via this new hypercall library.
> 
> A branch containing these patches is available here:
> https://github.com/ashkalra/edk2/tree/sev_page_encryption_bitmap_v1
> 
> Ashish Kalra (1):
>   OvmfPkg/MemEncryptHypercallLib: add library to support SEV hypercalls.
> 
> Brijesh Singh (1):
>   OvmfPkg/BaseMemEncryptLib: Support to issue unencrypted hypercall
> 
>  OvmfPkg/OvmfPkgX64.dsc                        |   1 +
>  .../BaseMemEncryptSevLib.inf                  |   1 +
>  .../MemEncryptHypercallLib.inf                |  39 +++++++
>  .../Include/Library/MemEncryptHypercallLib.h  |  37 ++++++
>  .../BaseMemEncryptSevLib/X64/VirtualMemory.c  |  18 +++
>  .../MemEncryptHypercallLib.c                  | 105 ++++++++++++++++++
>  .../X64/AsmHelperStub.nasm                    |  39 +++++++
>  7 files changed, 240 insertions(+)
>  create mode 100644 OvmfPkg/Library/MemEncryptHypercallLib/MemEncryptHypercallLib.inf
>  create mode 100644 OvmfPkg/Include/Library/MemEncryptHypercallLib.h
>  create mode 100644 OvmfPkg/Library/MemEncryptHypercallLib/MemEncryptHypercallLib.c
>  create mode 100644 OvmfPkg/Library/MemEncryptHypercallLib/X64/AsmHelperStub.nasm
> 

please resend the series with correct (shallow) threading.

Thanks
Laszlo



-=-=-=-=-=-=-=-=-=-=-=-
Groups.io Links: You receive all messages sent to this group.
View/Reply Online (#68231): https://edk2.groups.io/g/devel/message/68231
Mute This Topic: https://groups.io/mt/78658197/1787277
Group Owner: devel+owner@edk2.groups.io
Unsubscribe: https://edk2.groups.io/g/devel/unsub [importer@patchew.org]
-=-=-=-=-=-=-=-=-=-=-=-