From 61ca954c06b4688cfa57cdd896d9b6b9260b739d Mon Sep 17 00:00:00 2001 From: Alexander Potapenko Date: Thu, 17 Jul 2025 18:59:40 +0200 Subject: sys/linux/dev_kvm_amd64.txt: define KVM_MEMORY_ENCRYPT_REG_REGION and KVM_MEMORY_ENCRYPT_UNREG_REGION See https://docs.kernel.org/virt/kvm/api.html#kvm-memory-encrypt-reg-region --- sys/linux/dev_kvm_amd64.txt | 14 ++++++++++++-- 1 file changed, 12 insertions(+), 2 deletions(-) (limited to 'sys/linux/dev_kvm_amd64.txt') diff --git a/sys/linux/dev_kvm_amd64.txt b/sys/linux/dev_kvm_amd64.txt index 0e1a27297..b97409a91 100644 --- a/sys/linux/dev_kvm_amd64.txt +++ b/sys/linux/dev_kvm_amd64.txt @@ -201,6 +201,11 @@ ioctl$KVM_SEV_SNP_LAUNCH_START(fd fd_kvmvm, cmd const[KVM_MEMORY_ENCRYPT_OP], ar ioctl$KVM_SEV_SNP_LAUNCH_UPDATE(fd fd_kvmvm, cmd const[KVM_MEMORY_ENCRYPT_OP], arg ptr[inout, kvm_memory_encrypt_op[KVM_SEV_SNP_LAUNCH_UPDATE, ptr[in, kvm_sev_snp_launch_update]]]) ioctl$KVM_SEV_SNP_LAUNCH_FINISH(fd fd_kvmvm, cmd const[KVM_MEMORY_ENCRYPT_OP], arg ptr[inout, kvm_memory_encrypt_op[KVM_SEV_SNP_LAUNCH_FINISH, ptr[in, kvm_sev_snp_launch_finish]]]) +# Apparently KVM_MEMORY_ENCRYPT_REG_REGION and KVM_MEMORY_ENCRYPT_UNREG_REGION are VM ioctls, despite +# https://docs.kernel.org/virt/kvm/api.html#kvm-memory-encrypt-reg-region says they are system. +ioctl$KVM_MEMORY_ENCRYPT_REG_REGION(fd fd_kvmvm, cmd const[KVM_MEMORY_ENCRYPT_REG_REGION], arg ptr[in, kvm_enc_region]) +ioctl$KVM_MEMORY_ENCRYPT_UNREG_REGION(fd fd_kvmvm, cmd const[KVM_MEMORY_ENCRYPT_UNREG_REGION], arg ptr[in, kvm_enc_region]) + type kvm_memory_encrypt_op[ID, DATA] { id const[ID, int32] data DATA @@ -355,6 +360,11 @@ kvm_sev_snp_launch_finish { pad1 array[const[0, int64], 4] } +kvm_enc_region { + addr flags[kvm_guest_addrs, int64] + size flags[kvm_guest_addr_size, int64] +} + #x86(-64) specific ioctls ioctl$KVM_GET_MSR_INDEX_LIST(fd fd_kvm, cmd const[KVM_GET_MSR_INDEX_LIST], arg ptr[inout, kvm_msr_list]) ioctl$KVM_GET_MSR_FEATURE_INDEX_LIST(fd fd_kvm, cmd const[KVM_GET_MSR_FEATURE_INDEX_LIST], arg ptr[inout, kvm_msr_list]) @@ -621,8 +631,8 @@ kvm_msr_filter_range { bitmap ptr[in, array[int8]] } -define KVM_MSR_FILTER_DEFAULT_ALLOW (0 << 0) -define KVM_MSR_FILTER_DEFAULT_DENY (1 << 0) +define KVM_MSR_FILTER_DEFAULT_ALLOW (0 << 0) +define KVM_MSR_FILTER_DEFAULT_DENY (1 << 0) kvm_msr_filter_flags = KVM_MSR_FILTER_DEFAULT_ALLOW, KVM_MSR_FILTER_DEFAULT_DENY kvm_msr_filter { -- cgit mrf-deployment