[PATCH 0/5] drivers/virt: pkvm: Protected VMs with PAGE_SIZE smaller than the hypervisor granule
Vincent Donnefort
vdonnefort at google.com
Wed Oct 7 08:02:50 PDT 2026
This series allows a protected VM to boot with a hypervisor whose
protection granule is larger than the guest's PAGE_SIZE (e.g. a 4K guest
on a 16K host).
This is best-effort: non-granule-aligned sharing requests are rejected.
In practice this works because only the swiotlb is shared with the host,
which is allocated early and large enough to be aligned with the
granule.
Tested with a 4K protected guest on both upstream and android17-6.18 16K
hosts (with MMIO guard auto-enrollment forced).
Fuad Tabba (1):
drivers/virt: pkvm: Handle a granule larger than PAGE_SIZE for
MEM_SHARE
Vincent Donnefort (4):
drivers/virt: pkvm: Make pkvm_init_hyp_services() __init
drivers/virt: pkvm: Make pkvm_granule __ro_after_init
drivers/virt: pkvm: Handle a granule larger than PAGE_SIZE for
MMIO_GUARD
drivers/virt: pkvm: Allow granule larger than PAGE_SIZE
drivers/virt/coco/pkvm-guest/arm-pkvm-guest.c | 102 +++++++++++-------
1 file changed, 63 insertions(+), 39 deletions(-)
base-commit: a90ee4305c4a5df72c11b31dacfdc76e00fcf78a
--
2.56.0.rc1.315.gc6ed9934b7-goog
More information about the linux-arm-kernel
mailing list