[qemu-8.2.0] Enable SEV SNP Support · Pull Request !1547 · openEuler/qemu

1.	i386/kvm: Move architectural CPUID leaf generation to separate helper
2.	pci-host/q35: Move PAM initialization above SMRAM initialization
3.	q35: Introduce smm_ranges property for q35-pci-host
4.	hw/i386/acpi: Set PCAT_COMPAT bit only when pic is not disabled
5.	confidential guest support: Add kvm_init() and kvm_reset() in class
6.	i386/sev: Switch to use confidential_guest_kvm_init()
7.	ppc/pef: switch to use confidential_guest_kvm_init/reset()
8.	s390: Switch to use confidential_guest_kvm_init()
9.	scripts/update-linux-headers: Add setup_data.h to import list
10.	scripts/update-linux-headers: Add bits.h to file imports
11.	linux-headers: Update to Linux v6.8-rc6
12.	linux-headers: update to current kvm/next
13.	runstate: skip initial CPU reset if reset is not actually possible
14.	KVM: track whether guest state is encrypted
15.	KVM: remove kvm_arch_cpu_check_are_resettable
16.	target/i386: introduce x86-confidential-guest
17.	target/i386: Implement mc->kvm_type() to get VM type
18.	target/i386: SEV: use KVM_SEV_INIT2 if possible
19.	i386/sev: Add 'legacy-vm-type' parameter for SEV guest objects
20.	hw: Add compat machines for 9.0
21.	hw: Add compat machines for 9.1
22.	target/i386: add guest-phys-bits cpu property
23.	hw/i386/sev: Use legacy SEV VM types for older machine types
24.	trace/kvm: Split address space and slot id in trace_kvm_set_user_memory()
25.	migration: prevent migration when VM has poisoned memory
26.	kvm: Introduce support for memory_attributes
27.	RAMBlock: Add support of KVM private guest memfd
28.	kvm: Enable KVM_SET_USER_MEMORY_REGION2 for memslot
29.	kvm/memory: Make memory type private by default if it has guest memfd backend
30.	backends: Use g_autofree in HostMemoryBackendClass::alloc() handlers
31.	backends: Simplify host_memory_backend_memory_complete()
32.	HostMem: Add mechanism to opt in kvm guest memfd via MachineState
33.	RAMBlock: make guest_memfd require uncoordinated discard
34.	physmem: Introduce ram_block_discard_guest_memfd_range()
35.	kvm: handle KVM_EXIT_MEMORY_FAULT
36.	linux-headers: Update to current kvm/next
37.	linux-headers: riscv: add ptrace.h
38.	scripts/update-linux-header.sh: be more src tree friendly
39.	update-linux-headers: import linux/kvm_para.h header
40.	machine: allow early use of machine_require_guest_memfd
41.	i386/sev: Replace error_report with error_setg
42.	i386/sev: Introduce "sev-common" type to encapsulate common SEV state
43.	i386/sev: Move sev_launch_update to separate class method
44.	i386/sev: Move sev_launch_finish to separate class method
45.	i386/sev: Introduce 'sev-snp-guest' object
46.	i386/sev: Add a sev_snp_enabled() helper
47.	i386/sev: Add sev_kvm_init() override for SEV class
48.	i386/sev: Add snp_kvm_init() override for SNP class
49.	i386/cpu: Set SEV-SNP CPUID bit when SNP enabled
50.	i386/sev: Don't return launch measurements for SEV-SNP guests
51.	i386/sev: Add a class method to determine KVM VM type for SNP guests
52.	i386/sev: Update query-sev QAPI format to handle SEV-SNP
53.	i386/sev: Add the SNP launch start context
54.	i386/sev: Add handling to encrypt/finalize guest launch data
55.	i386/sev: Set CPU state to protected once SNP guest payload is finalized
56.	hw/i386/sev: Add function to get SEV metadata from OVMF header
57.	i386/sev: Add support for populating OVMF metadata pages
58.	i386/sev: Add support for SNP CPUID validation
59.	system/cpus: rename qemu_mutex_lock_iothread() to bql_lock()
60.	i386/tcg: implement x2APIC registers MSR access
61.	apic: add support for x2APIC mode
62.	hw/i386/x86: Reverse if statement
63.	hw/i386/x86: Fix PIC interrupt handling if APIC is globally disabled
64.	hw/i386/q35: Simplify pc_q35_init() since PCI is always enabled
65.	hw/i386/x86: Let ioapic_init_gsi() take parent as pointer
66.	hw/core: Declare CPUArchId::cpu as CPUState instead of Object
67.	hw/i386/pc_sysfw: Remove unused parameter from pc_isa_bios_init()
68.	hw/i386/x86: Eliminate two if statements in x86_bios_rom_init()
69.	hw/i386: Have x86_bios_rom_init() take X86MachineState rather than MachineState
70.	hw/i386/x86: Don't leak "isa-bios" memory regions
71.	hw/i386/x86: Don't leak "pc.bios" memory region
72.	hw/i386/x86: Extract x86_isa_bios_init() from x86_bios_rom_init()
73.	hw/i386: split x86.c in multiple parts
74.	hw/i386/sev: Add support to encrypt BIOS when SEV-SNP is enabled
75.	i386/sev: Invoke launch_updata_data() for SEV class
76.	i386/sev: Invoke launch_updata_data() for SNP class
77.	i386/kvm: Add KVM_EXIT_HYPERCALL handling for KVM_HC_MAP_GPA_RANGE
78.	i386/sev: Enable KVM_HC_MAP_GPA_RANGE hcall for SNP guests
79.	i386/sev: Extract build_kernel_loader_hashes
80.	i386/sev: Reorder struct declarations
81.	i386/sev: Allow measured direct kernel boot on SNP
82.	memory: Have memory_region_init_ram_flags_nomigrate() return a boolean
83.	memory: Have memory_region_init_ram_nomigrate() handler return a boolean
84.	memory: Have memory_region_init_rom_nomigrate() handler return a boolean
85.	memory: Simplify memory_region_init_rom_nomigrate() calls
86.	memory: Simplify memory_region_init_ram_from_fd() calls
87.	memory: Have memory_region_init_ram() handler return a boolean
88.	memory: Have memory_region_init_rom() handler return a boolean
89.	memory: Have memory_region_init_rom_device_nomigrate() return a boolean
90.	memory: Simplify memory_region_init_rom_device_nomigrate() calls
91.	memory: Have memory_region_init_rom_device() handler return a boolean
92.	memory: Have memory_region_init_resizeable_ram() return a boolean
93.	memory: Have memory_region_init_ram_from_file() handler return a boolean
94.	memory: Have memory_region_init_ram_from_fd() handler return a boolean
95.	memory: Introduce memory_region_init_ram_guest_memfd()
96.	hw/i386/pc_sysfw: Alias rather than copy isa-bios region
97.	hw/i386/sev: Use guest_memfd for legacy ROMs
98.	hw/i386: Add support for loading BIOS using guest_memfd
99.	i386/sev: fix unreachable code coverity issue
100.	i386/sev: Move SEV_COMMON null check before dereferencing
101.	i386/sev: Return when sev_common is null
102.	target/i386: SEV: do not assume machine->cgs is SEV
103.	target/i386: SEV: rename sev_snp_guest->id_block
104.	target/i386: SEV: store pointer to decoded id_block in SevSnpGuest
105.	target/i386: SEV: rename sev_snp_guest->id_auth
106.	target/i386: SEV: store pointer to decoded id_auth in SevSnpGuest
107.	target/i386/sev: Use size_t for object sizes
108.	target/i386/sev: Fix printf formats
109.	target/i386: SEV: fix formatting of CPUID mismatch message
110.	i386/sev: Fix error message in sev_get_capabilities()
111.	i386/sev: Fallback to the default SEV device if none provided in sev_get_capabilities()
112.	target/i386: add support for masking CPUID features in confidential guests
113.	target/i386/SEV: implement mask_cpuid_features
114.	i386/sev: Don't allow automatic fallback to legacy KVM_SEV*_INIT
115.	target/i386: SEV: fix mismatch in vcek-disabled property name
116.	i386/pc: Drop pc_machine_kvm_type()

**Run Test cases** 
Validation of support for sev-snp backport onto qemu-8.2.0 is done using following command
 **Without Patches** 
```bash
$./qemu-system-x86_64 -object help | grep -i sev
 sev-guest
```
 **With Patches** 
```bash
$./qemu-system-x86_64 -object help | grep -i sev
 sev-guest
 sev-snp-guest
```

openEuler/qemu .gitee-modal { width: 500px !important; }

搜索帮助

openEuler/qemu