Re: [PATCH v3 10/15] KVM: x86: add fields to struct kvm_arch for CoCo features
From: Paolo Bonzini
Date: Mon Mar 18 2024 - 18:01:33 EST
On Thu, Mar 14, 2024 at 3:50 AM Michael Roth <michael.roth@xxxxxxx> wrote:
> I've been trying to get SNP running on top of these patches and hit and
> issue with these due to fpstate_set_confidential() being done during
> svm_vcpu_create(), so when QEMU tries to sync FPU state prior to calling
> SNP_LAUNCH_FINISH it errors out. I think the same would happen with
> SEV-ES as well.
>
> Maybe fpstate_set_confidential() should be relocated to SEV_LAUNCH_FINISH
> site as part of these patches?
To SEV_LAUNCH_UPDATE_VMSA, I think, since that's where the last
opportunity lies to sync the contents of struct kvm_vcpu.
> Also, do you happen to have a pointer to the WIP QEMU patches? Happy to
> help with posting/testing those since we'll need similar for
> SEV_INIT2-based SNP patches.
Pushed to https://gitlab.com/bonzini/qemu, branch sevinit2. There is a
hackish commit "runstate: skip initial CPU reset if reset is not
actually possible" that needs some auditing, because I'd like to
replace
- cpu_synchronize_all_post_reset();
+ if (cpus_are_resettable()) {
+ cpu_synchronize_all_post_reset();
+ } else {
+ /* Assume that cpu_synchronize_all_post_init() was enough. */
+ assert(runstate_check(RUN_STATE_PRELAUNCH));
+ }
with
- cpu_synchronize_all_post_reset();
+ /*
+ * cpu_synchronize_all_post_init() has already happened if the VM hasn't
+ * launched.
+ */
+ if (!runstate_check(RUN_STATE_PRELAUNCH)) {
+ cpu_synchronize_all_post_reset();
+ }
Paolo