[RFC Patch 0/2] KVM: SVM: Cgroup support for SVM SEV ASIDs

From: Vipin Sharma
Date: Mon Sep 21 2020 - 20:40:46 EST


Hello,

This patch series adds a new SEV controller for tracking and limiting
the usage of SEV ASIDs on the AMD SVM platform.

SEV ASIDs are used in creating encrypted VM and lightweight sandboxes
but this resource is in very limited quantity on a host.

This limited quantity creates issues like SEV ASID starvation and
unoptimized scheduling in the cloud infrastructure.

SEV controller provides SEV ASID tracking and resource control
mechanisms.

Patch 1 - Overview, motivation, and implementation details of the SEV
controller.
Patch 2 - Kernel documentation of the SEV controller for both
cgroup v1 and v2.

Thanks

Vipin Sharma (2):
KVM: SVM: Create SEV cgroup controller.
KVM: SVM: SEV cgroup controller documentation

Documentation/admin-guide/cgroup-v1/sev.rst | 94 +++++
Documentation/admin-guide/cgroup-v2.rst | 56 ++-
arch/x86/kvm/Makefile | 1 +
arch/x86/kvm/svm/sev.c | 16 +-
arch/x86/kvm/svm/sev_cgroup.c | 414 ++++++++++++++++++++
arch/x86/kvm/svm/sev_cgroup.h | 40 ++
include/linux/cgroup_subsys.h | 3 +
init/Kconfig | 14 +
8 files changed, 634 insertions(+), 4 deletions(-)
create mode 100644 Documentation/admin-guide/cgroup-v1/sev.rst
create mode 100644 arch/x86/kvm/svm/sev_cgroup.c
create mode 100644 arch/x86/kvm/svm/sev_cgroup.h

--
2.28.0.681.g6f77f65b4e-goog