Commit fddecf6a authored by Brijesh Singh's avatar Brijesh Singh Committed by Paolo Bonzini
Browse files

KVM: SVM: Add KVM_SEV_SEND_FINISH command 



The command is used to finailize the encryption context created with
KVM_SEV_SEND_START command.

Cc: Thomas Gleixner <tglx@linutronix.de>
Cc: Ingo Molnar <mingo@redhat.com>
Cc: "H. Peter Anvin" <hpa@zytor.com>
Cc: Paolo Bonzini <pbonzini@redhat.com>
Cc: Joerg Roedel <joro@8bytes.org>
Cc: Borislav Petkov <bp@suse.de>
Cc: Tom Lendacky <thomas.lendacky@amd.com>
Cc: x86@kernel.org
Cc: kvm@vger.kernel.org
Cc: linux-kernel@vger.kernel.org
Reviewed-by: default avatarSteve Rutherford <srutherford@google.com>
Signed-off-by: default avatarBrijesh Singh <brijesh.singh@amd.com>
Signed-off-by: default avatarAshish Kalra <ashish.kalra@amd.com>
Message-Id: <5082bd6a8539d24bc55a1dd63a1b341245bb168f.1618498113.git.ashish.kalra@amd.com>
Signed-off-by: default avatarPaolo Bonzini <pbonzini@redhat.com>
parent d3d1af85

Documentation/virt/kvm/amd-memory-encryption.rst

+8 −0
Original line number Diff line number Diff line
@@ -348,6 +348,14 @@ Returns: 0 on success, -negative on error 
                __u32 trans_len;

        };



13. KVM_SEV_SEND_FINISH

------------------------



After completion of the migration flow, the KVM_SEV_SEND_FINISH command can be

issued by the hypervisor to delete the encryption context.



Returns: 0 on success, -negative on error



References

==========

arch/x86/kvm/svm/sev.c

+23 −0
Original line number Diff line number Diff line
@@ -1357,6 +1357,26 @@ static int sev_send_update_data(struct kvm *kvm, struct kvm_sev_cmd *argp) 
	return ret;

}



static int sev_send_finish(struct kvm *kvm, struct kvm_sev_cmd *argp)

{

	struct kvm_sev_info *sev = &to_kvm_svm(kvm)->sev_info;

	struct sev_data_send_finish *data;

	int ret;



	if (!sev_guest(kvm))

		return -ENOTTY;



	data = kzalloc(sizeof(*data), GFP_KERNEL);

	if (!data)

		return -ENOMEM;



	data->handle = sev->handle;

	ret = sev_issue_cmd(kvm, SEV_CMD_SEND_FINISH, data, &argp->error);



	kfree(data);

	return ret;

}



int svm_mem_enc_op(struct kvm *kvm, void __user *argp)

{

	struct kvm_sev_cmd sev_cmd;
@@ -1425,6 +1445,9 @@ int svm_mem_enc_op(struct kvm *kvm, void __user *argp) 
	case KVM_SEV_SEND_UPDATE_DATA:

		r = sev_send_update_data(kvm, &sev_cmd);

		break;

	case KVM_SEV_SEND_FINISH:

		r = sev_send_finish(kvm, &sev_cmd);

		break;

	default:

		r = -EINVAL;

		goto out;