[PATCH 0/7] Add WorldGuard hwiso support
Raymond Mao
raymondmaoca at gmail.com
Mon Jul 20 08:09:24 PDT 2026
Hi Anup,
On Mon, Jul 20, 2026 at 4:41 AM Anup Patel <anup at brainfault.org> wrote:
>
> On Wed, May 20, 2026 at 2:03 AM Raymond Mao <raymondmaoca at gmail.com> wrote:
> >
> > From: Raymond Mao <raymond.mao at riscstar.com>
> >
> > This series adds WorldGuard implementation for OpenSBI on top of the
> > generic hardware isolation (HWISO) hooks.
> >
> > The goal is to let OpenSBI:
> > - program platform WorldGuard checker state at boot
> > - parse per-domain WorldGuard metadata from the device tree
> > - reprogram hart WorldGuard runtime state during domain transitions
> >
> > The current implementation targets the WorldGuard model of
> > `sifive,wgchecker2` checker plus per-hart and per-domain WorldGuard
> > metadata from DT.
> >
> > The series is organized as follows:
> > 1. add the WorldGuard CSR definitions and hart extension flags needed
> > to detect support for MLWID, MWIDDELEG, and SLWID
> > 2. document the HWISO / WorldGuard device-tree metadata used by the
> > current implementation
> > 3. add a QEMU virt DT overlay that describes domain WID/WID list
> > assignment and checker permission policy for the current test flow
> > 4. add generic-platform WorldGuard runtime support together with
> > `wgchecker2` checker parsing and boot-time MMIO programming
> > 5. add generic HWISO SBIUNIT coverage
> > 6. add QEMU virt WorldGuard mechanism-specific SBIUNIT checks for
> > boot-time checker programming and runtime CSR state
> > 7. add a QEMU virt failure-mode SBIUNIT test that intentionally
> > triggers a denied WorldGuard access and verifies the expected trap
> >
> > Notes:
> > - The implementation has been verified with QEMU virt that supports
> > `wg=on`[1].
> > - This series depends on previous patches ([2] and [3]) for
> > introducing HWISO framework.
> >
> > [1] https://github.com/cwshu/qemu/tree/riscv-wg-dts
> > [2] [PATCH 1/2] sbi: add hardware isolation abstraction framework
> > https://lore.kernel.org/opensbi/20260504173948.1663823-1-raymondmaoca@gmail.com/
> > [3] [PATCH 2/2] sbi: route domain lifecycle transitions through hwiso hooks
> > https://lore.kernel.org/opensbi/20260504173948.1663823-2-raymondmaoca@gmail.com/
> >
> > Raymond Mao (7):
> > hart: add WorldGuard CSR IDs and hart extension flags
> > docs: document hwiso WorldGuard DT bindings
> > [NOT-FOR-UPSTREAM] platform: virt: add QEMU WorldGuard hwiso overlay
> > platform: generic: add WorldGuard hwiso support with wgchecker2
> > test: add generic hwiso SBI unit coverage
> > platform: virt: add QEMU virt WorldGuard hwiso tests
> > platform: virt: add WorldGuard HWISO failure-mode SBIUNIT test
>
> I will consider this series superseded by "Add RISC-V Worlds ISA
> support to OpenSBI" posted by Yu-Chein Peter Lin (SiFive).
>
Not really, the one from Peter is with the ISA and DT-bings but
without the WG implementations.
But I will rebase my series on top of his one and send a v2.
Regards,
Raymond
> Regards,
> Anup
More information about the opensbi
mailing list