[PATCH 3/3] arm64/coco: Add pKVM as a CC platform

Catalin Marinas catalin.marinas at arm.com
Thu Jul 9 02:11:32 PDT 2026


On Wed, Jun 03, 2026 at 11:05:22AM +0000, Mostafa Saleh wrote:
> pKVM does support memory encryption, expose that to the rest of
> the kernel through cc_platform_has()
> 
> At the moment, all devices inside the guest are emulated which
> requires its memory to be shared back to the host (decrypted), so
> set force_dma_unencrypted() to always return true.
> 
> Although, typically pKVM guests rely on restricted-dma-pools to
> bounce traffic, with this change, it is possible to solely rely on
> the default SWIOTLB for that (assuming the appropriate size is set
> from the command line)
> 
> Signed-off-by: Mostafa Saleh <smostafa at google.com>

Good to see reamls and pkvm guests aligned, easier to reason about the
code paths. Thanks!

Reviewed-by: Catalin Marinas <catalin.marinas at arm.com>



More information about the linux-arm-kernel mailing list