[edk2-devel] [PATCH v7 5/6] OvmfPkg/PlatformPei: Mark SEC GHCB page as unencrypted via hypercall
Ashish Kalra via groups.io
ashish.kalra=amd.com at groups.io
Tue May 31 17:50:40 UTC 2022
[AMD Official Use Only - General]
Hello Nikunj,
That is true, but there is no SEV live migration happening before GHCB pages are re-setup and the hypercalls are invoked again for GHCB pages from
the guest kernel after it checks the live migration runtime environment flag setup by OVMF.
Thanks,
Ashish
-----Original Message-----
From: Dadhania, Nikunj <NikunjAmritlal.Dadhania at amd.com>
Sent: Tuesday, May 31, 2022 10:14 AM
To: devel at edk2.groups.io; Kalra, Ashish <Ashish.Kalra at amd.com>
Cc: dovmurik at linux.vnet.ibm.com; brijesh.singh at amd.com; tobin at ibm.com; Lendacky, Thomas <Thomas.Lendacky at amd.com>; jejb at linux.ibm.com; erdemaktas at google.com; jiewen.yao at intel.com; min.m.xu at intel.com; jordan.l.justen at intel.com; ard.biesheuvel at arm.com
Subject: Re: [edk2-devel] [PATCH v7 5/6] OvmfPkg/PlatformPei: Mark SEC GHCB page as unencrypted via hypercall
Hi Ashish,
On 8/19/2021 7:36 PM, Ashish Kalra via groups.io wrote:
> From: Ashish Kalra <ashish.kalra at amd.com>
>
> Mark the SEC GHCB page (that is mapped as unencrypted in ResetVector
> code) in the hypervisor's guest page encryption state tracking.
>
> Cc: Jordan Justen <jordan.l.justen at intel.com>
> Cc: Ard Biesheuvel <ard.biesheuvel at arm.com>
> Signed-off-by: Ashish Kalra <ashish.kalra at amd.com>
> ---
> OvmfPkg/PlatformPei/AmdSev.c | 11 +++++++++++
> 1 file changed, 11 insertions(+)
>
> diff --git a/OvmfPkg/PlatformPei/AmdSev.c
> b/OvmfPkg/PlatformPei/AmdSev.c index a8bf610022..1d38056ec0 100644
> --- a/OvmfPkg/PlatformPei/AmdSev.c
> +++ b/OvmfPkg/PlatformPei/AmdSev.c
> @@ -52,6 +52,17 @@ AmdSevEsInitialize (
> PcdStatus = PcdSetBoolS (PcdSevEsIsEnabled, TRUE);
> ASSERT_RETURN_ERROR (PcdStatus);
>
> + //
> + // The SEC Ghcb setup during reset-vector needs to be marked as //
> + decrypted in the hypervisor's guest page encryption state //
> + tracking.
> + //
> + SetMemoryEncDecHypercall3 (
> + FixedPcdGet32 (PcdOvmfSecGhcbBase),
> + EFI_SIZE_TO_PAGES(FixedPcdGet32 (PcdOvmfSecGhcbSize)),
> + FALSE
> + );
PcdOvmfSecGhcbSize is set to 2 pages (8192 bytes). AFAIU, only first page needs to be change to shared, second page should be kept private.
> //
> // Allocate GHCB and per-CPU variable pages.
> // Since the pages must survive across the UEFI to OS transition
>
Regards
Nikunj
-=-=-=-=-=-=-=-=-=-=-=-
Groups.io Links: You receive all messages sent to this group.
View/Reply Online (#90113): https://edk2.groups.io/g/devel/message/90113
Mute This Topic: https://groups.io/mt/84997535/1813853
Group Owner: devel+owner at edk2.groups.io
Unsubscribe: https://edk2.groups.io/g/devel/unsub [edk2-devel-archive at redhat.com]
-=-=-=-=-=-=-=-=-=-=-=-
More information about the edk2-devel-archive
mailing list