Commit 08a161fd authored by Brijesh Singh's avatar Brijesh Singh Committed by Paolo Bonzini
Browse files

sev/i386: qmp: add query-sev command 



The QMP query command can used to retrieve the SEV information when
memory encryption is enabled on AMD platform.

Cc: Eric Blake <eblake@redhat.com>
Cc: "Daniel P. Berrangé" <berrange@redhat.com>
Cc: "Dr. David Alan Gilbert" <dgilbert@redhat.com>
Cc: Markus Armbruster <armbru@redhat.com>
Reviewed-by: default avatarEric Blake <eblake@redhat.com>
Signed-off-by: default avatarBrijesh Singh <brijesh.singh@amd.com>
Signed-off-by: default avatarPaolo Bonzini <pbonzini@redhat.com>
parent a9b4942f

monitor.c

+7 −0
Original line number Diff line number Diff line
@@ -983,6 +983,7 @@ static void qmp_unregister_commands_hack(void) 
#endif

#ifndef TARGET_I386

    qmp_unregister_command(&qmp_commands, "rtc-reset-reinjection");

    qmp_unregister_command(&qmp_commands, "query-sev");

#endif

#ifndef TARGET_S390X

    qmp_unregister_command(&qmp_commands, "dump-skeys");
@@ -4103,6 +4104,12 @@ void qmp_rtc_reset_reinjection(Error **errp) 
{

    error_setg(errp, QERR_FEATURE_DISABLED, "rtc-reset-reinjection");

}



SevInfo *qmp_query_sev(Error **errp)

{

    error_setg(errp, QERR_FEATURE_DISABLED, "query-sev");

    return NULL;

}

#endif



#ifndef TARGET_S390X

qapi/misc.json

+77 −0
Original line number Diff line number Diff line
@@ -3216,3 +3216,80 @@ 
# Since: 2.9

##

{ 'command': 'query-vm-generation-id', 'returns': 'GuidInfo' }





##

# @SevState:

#

# An enumeration of SEV state information used during @query-sev.

#

# @uninit: The guest is uninitialized.

#

# @launch-update: The guest is currently being launched; plaintext data and

#                 register state is being imported.

#

# @launch-secret: The guest is currently being launched; ciphertext data

#                 is being imported.

#

# @running: The guest is fully launched or migrated in.

#

# @send-update: The guest is currently being migrated out to another machine.

#

# @receive-update: The guest is currently being migrated from another machine.

#

# Since: 2.12

##

{ 'enum': 'SevState',

  'data': ['uninit', 'launch-update', 'launch-secret', 'running',

           'send-update', 'receive-update' ] }



##

# @SevInfo:

#

# Information about Secure Encrypted Virtualization (SEV) support

#

# @enabled: true if SEV is active

#

# @api-major: SEV API major version

#

# @api-minor: SEV API minor version

#

# @build-id: SEV FW build id

#

# @policy: SEV policy value

#

# @state: SEV guest state

#

# @handle: SEV firmware handle

#

# Since: 2.12

##

{ 'struct': 'SevInfo',

    'data': { 'enabled': 'bool',

              'api-major': 'uint8',

              'api-minor' : 'uint8',

              'build-id' : 'uint8',

              'policy' : 'uint32',

              'state' : 'SevState',

              'handle' : 'uint32'

            }

}



##

# @query-sev:

#

# Returns information about SEV

#

# Returns: @SevInfo

#

# Since: 2.12

#

# Example:

#

# -> { "execute": "query-sev" }

# <- { "return": { "enabled": true, "api-major" : 0, "api-minor" : 0,

#                  "build-id" : 0, "policy" : 0, "state" : "running",

#                  "handle" : 1 } }

#

##

{ 'command': 'query-sev', 'returns': 'SevInfo' }

target/i386/monitor.c

+8 −0
Original line number Diff line number Diff line
@@ -30,6 +30,8 @@ 
#include "hw/i386/pc.h"

#include "sysemu/kvm.h"

#include "hmp.h"

#include "qapi/error.h"

#include "qapi/qapi-commands-misc.h"





static void print_pte(Monitor *mon, CPUArchState *env, hwaddr addr,
@@ -661,3 +663,9 @@ void hmp_info_io_apic(Monitor *mon, const QDict *qdict) 
        ioapic_dump_state(mon, qdict);

    }

}



SevInfo *qmp_query_sev(Error **errp)

{

    error_setg(errp, "SEV feature is not available");

    return NULL;

}

tests/qmp-test.c

+2 −0
Original line number Diff line number Diff line
@@ -204,6 +204,8 @@ static bool query_is_blacklisted(const char *cmd) 
        "query-gic-capabilities", /* arm */

        /* Success depends on target-specific build configuration: */

        "query-pci",              /* CONFIG_PCI */

        /* Success depends on Host or Hypervisor SEV support */

        "query-sev",

        NULL

    };

    int i;