60061b
From 3c65320ce5b8ad3bb8c0d8fd13a88c464d5c5845 Mon Sep 17 00:00:00 2001
902636
From: Miroslav Rezanina <mrezanin@redhat.com>
902636
Date: Fri, 19 Oct 2018 13:27:13 +0200
902636
Subject: Add ppc64 machine types
902636
902636
Adding changes to add RHEL machine types for ppc64 architecture.
902636
902636
Signed-off-by: Miroslav Rezanina <mrezanin@redhat.com>
902636
902636
Rebase changes (4.0.0):
902636
- remove instance options and use upstream solution
902636
- Use upstream compat handling
902636
- Replace SPAPR_PCI_2_7_MMIO_WIN_SIZE with value (changed upstream)
902636
- re-add handling of instance_options (removed upstream)
902636
- Use p8 as default for rhel machine types (p9 default upstream)
902636
- sPAPRMachineClass renamed to SpaprMachineClass (upstream)
902636
902636
Rebase changes (4.1.0):
902636
- Update format for compat structures
902636
60061b
Rebase notes (weekly-210303):
60061b
- Use rhel-8.4.0 hw compat
60061b
902636
Merged patches (4.0.0):
902636
- 467d59a redhat: define pseries-rhel8.0.0 machine type
902636
902636
Merged patches (4.1.0):
902636
- f21757edc target/ppc/spapr: Enable mitigations by default for pseries-4.0 machine type
902636
- 2511c63 redhat: sync pseries-rhel7.6.0 with rhel-av-8.0.1
902636
- 89f01da redhat: define pseries-rhel8.1.0 machine type
902636
902636
Merged patches (4.2.0):
902636
- bcba728 redhat: update pseries-rhel8.1.0 machine type
902636
- redhat: update pseries-rhel-7.6.0 machine type (patch 93039)
902636
- redhat: define pseries-rhel8.2.0 machine type (patch 93041)
902636
60061b
Merged patches (5.1.0):
60061b
- eb121ff spapr: Enable DD2.3 accelerated count cache flush in pseries-5.0 machine (partial)
60061b
60061b
Merged patches (5.2.0 rc0):
60061b
- 311a20f redhat: define pseries-rhel8.3.0 machine type
60061b
- 1284167 ppc: Set correct max_cpus value on spapr-rhel* machine types
60061b
- 1ab8783 redhat: update pseries-rhel8.2.0 machine type
60061b
- b162af531a target/ppc: Add experimental option for enabling secure guests
60061b
60061b
Merged patches (weekly-201216):
60061b
- 943c936df3 redhat: Add spapr_machine_rhel_default_class_options()
60061b
- 030b5e6fba redhat: Define pseries-rhel8.4.0 machine type
60061b
60061b
Merged patches (weekly-210602):
60061b
- b7128d8ef7 redhat: Define pseries-rhel8.5.0 machine type
60061b
60061b
Merged patches (weekly-211006):
60061b
- c8f68b47e9 redhat: Update pseries-rhel8.5.0
902636
---
60061b
 hw/ppc/spapr.c          | 382 ++++++++++++++++++++++++++++++++++++++++
902636
 hw/ppc/spapr_cpu_core.c |  13 ++
60061b
 include/hw/ppc/spapr.h  |   4 +
902636
 target/ppc/compat.c     |  13 +-
902636
 target/ppc/cpu.h        |   1 +
60061b
 target/ppc/kvm.c        |  27 +++
60061b
 target/ppc/kvm_ppc.h    |  13 ++
60061b
 7 files changed, 452 insertions(+), 1 deletion(-)
902636
902636
diff --git a/hw/ppc/spapr.c b/hw/ppc/spapr.c
60061b
index 3b5fd749be..cace86028d 100644
902636
--- a/hw/ppc/spapr.c
902636
+++ b/hw/ppc/spapr.c
60061b
@@ -1593,6 +1593,9 @@ static void spapr_machine_reset(MachineState *machine)
60061b
 
60061b
     pef_kvm_reset(machine->cgs, &error_fatal);
60061b
     spapr_caps_apply(spapr);
60061b
+    if (spapr->svm_allowed) {
60061b
+        kvmppc_svm_allow(&error_fatal);
60061b
+    }
60061b
 
60061b
     first_ppc_cpu = POWERPC_CPU(first_cpu);
60061b
     if (kvm_enabled() && kvmppc_has_cap_mmu_radix() &&
60061b
@@ -3288,6 +3291,20 @@ static void spapr_set_host_serial(Object *obj, const char *value, Error **errp)
60061b
     spapr->host_serial = g_strdup(value);
60061b
 }
60061b
 
60061b
+static bool spapr_get_svm_allowed(Object *obj, Error **errp)
60061b
+{
60061b
+    SpaprMachineState *spapr = SPAPR_MACHINE(obj);
60061b
+
60061b
+    return spapr->svm_allowed;
60061b
+}
60061b
+
60061b
+static void spapr_set_svm_allowed(Object *obj, bool value, Error **errp)
60061b
+{
60061b
+    SpaprMachineState *spapr = SPAPR_MACHINE(obj);
60061b
+
60061b
+    spapr->svm_allowed = value;
60061b
+}
60061b
+
60061b
 static void spapr_instance_init(Object *obj)
60061b
 {
60061b
     SpaprMachineState *spapr = SPAPR_MACHINE(obj);
60061b
@@ -3366,6 +3383,12 @@ static void spapr_instance_init(Object *obj)
60061b
         spapr_get_host_serial, spapr_set_host_serial);
60061b
     object_property_set_description(obj, "host-serial",
60061b
         "Host serial number to advertise in guest device tree");
60061b
+    object_property_add_bool(obj, "x-svm-allowed",
60061b
+                            spapr_get_svm_allowed,
60061b
+                            spapr_set_svm_allowed);
60061b
+    object_property_set_description(obj, "x-svm-allowed",
60061b
+                                    "Allow the guest to become a Secure Guest"
60061b
+                                    " (experimental only)");
60061b
 }
60061b
 
60061b
 static void spapr_machine_finalizefn(Object *obj)
60061b
@@ -4614,6 +4637,7 @@ static void spapr_machine_class_init(ObjectClass *oc, void *data)
60061b
     vmc->client_architecture_support = spapr_vof_client_architecture_support;
60061b
     vmc->quiesce = spapr_vof_quiesce;
60061b
     vmc->setprop = spapr_vof_setprop;
902636
+    smc->has_power9_support = true;
902636
 }
902636
 
902636
 static const TypeInfo spapr_machine_info = {
60061b
@@ -4665,6 +4689,7 @@ static void spapr_machine_latest_class_options(MachineClass *mc)
902636
     }                                                                \
902636
     type_init(spapr_machine_register_##suffix)
902636
 
902636
+#if 0 /* Disabled for Red Hat Enterprise Linux */
902636
 /*
60061b
  * pseries-6.2
902636
  */
60061b
@@ -4781,6 +4806,7 @@ static void spapr_machine_4_1_class_options(MachineClass *mc)
902636
 }
902636
 
902636
 DEFINE_SPAPR_MACHINE(4_1, "4.1", false);
902636
+#endif
902636
 
902636
 /*
902636
  * pseries-4.0
60061b
@@ -4800,6 +4826,8 @@ static bool phb_placement_4_0(SpaprMachineState *spapr, uint32_t index,
902636
     *nv2atsd = 0;
60061b
     return true;
902636
 }
60061b
+
902636
+#if 0 /* Disabled for Red Hat Enterprise Linux */
902636
 static void spapr_machine_4_0_class_options(MachineClass *mc)
902636
 {
902636
     SpaprMachineClass *smc = SPAPR_MACHINE_CLASS(mc);
60061b
@@ -4958,6 +4986,7 @@ DEFINE_SPAPR_MACHINE(2_8, "2.8", false);
902636
 /*
902636
  * pseries-2.7
902636
  */
902636
+#endif
902636
 
60061b
 static bool phb_placement_2_7(SpaprMachineState *spapr, uint32_t index,
902636
                               uint64_t *buid, hwaddr *pio,
60061b
@@ -5013,6 +5042,7 @@ static bool phb_placement_2_7(SpaprMachineState *spapr, uint32_t index,
60061b
     return true;
902636
 }
902636
 
902636
+#if 0 /* Disabled for Red Hat Enterprise Linux */
902636
 static void spapr_machine_2_7_class_options(MachineClass *mc)
902636
 {
902636
     SpaprMachineClass *smc = SPAPR_MACHINE_CLASS(mc);
60061b
@@ -5127,6 +5157,358 @@ static void spapr_machine_2_1_class_options(MachineClass *mc)
902636
     compat_props_add(mc->compat_props, hw_compat_2_1, hw_compat_2_1_len);
902636
 }
902636
 DEFINE_SPAPR_MACHINE(2_1, "2.1", false);
902636
+#endif
902636
+
60061b
+static void spapr_machine_rhel_default_class_options(MachineClass *mc)
60061b
+{
60061b
+    /*
60061b
+     * Defaults for the latest behaviour inherited from the base class
60061b
+     * can be overriden here for all pseries-rhel* machines.
60061b
+     */
60061b
+
60061b
+    /* Maximum supported VCPU count */
60061b
+    mc->max_cpus = 384;
60061b
+}
60061b
+
60061b
+/*
60061b
+ * pseries-rhel8.5.0
60061b
+ * like pseries-6.0
60061b
+ */
60061b
+
60061b
+static void spapr_machine_rhel850_class_options(MachineClass *mc)
60061b
+{
60061b
+    /* The default machine type must apply the RHEL specific defaults */
60061b
+    spapr_machine_rhel_default_class_options(mc);
60061b
+    compat_props_add(mc->compat_props, hw_compat_rhel_8_5,
60061b
+                     hw_compat_rhel_8_5_len);
60061b
+}
60061b
+
60061b
+DEFINE_SPAPR_MACHINE(rhel850, "rhel8.5.0", true);
60061b
+
60061b
+/*
60061b
+ * pseries-rhel8.4.0
60061b
+ * like pseries-5.2
60061b
+ */
60061b
+
60061b
+static void spapr_machine_rhel840_class_options(MachineClass *mc)
60061b
+{
60061b
+    spapr_machine_rhel850_class_options(mc);
60061b
+    compat_props_add(mc->compat_props, hw_compat_rhel_8_4,
60061b
+                     hw_compat_rhel_8_4_len);
60061b
+}
60061b
+
60061b
+DEFINE_SPAPR_MACHINE(rhel840, "rhel8.4.0", false);
60061b
+
60061b
+/*
60061b
+ * pseries-rhel8.3.0
60061b
+ * like pseries-5.1
60061b
+ */
60061b
+
60061b
+static void spapr_machine_rhel830_class_options(MachineClass *mc)
60061b
+{
60061b
+    SpaprMachineClass *smc = SPAPR_MACHINE_CLASS(mc);
60061b
+
60061b
+    spapr_machine_rhel840_class_options(mc);
60061b
+    compat_props_add(mc->compat_props, hw_compat_rhel_8_3,
60061b
+                     hw_compat_rhel_8_3_len);
60061b
+
60061b
+    /* from pseries-5.1 */
60061b
+    smc->pre_5_2_numa_associativity = true;
60061b
+}
60061b
+
60061b
+DEFINE_SPAPR_MACHINE(rhel830, "rhel8.3.0", false);
60061b
+
902636
+/*
902636
+ * pseries-rhel8.2.0
60061b
+ * like pseries-4.2 + pseries-5.0
60061b
+ * except SPAPR_CAP_CCF_ASSIST that has been backported to pseries-rhel8.1.0
902636
+ */
902636
+
902636
+static void spapr_machine_rhel820_class_options(MachineClass *mc)
902636
+{
60061b
+    SpaprMachineClass *smc = SPAPR_MACHINE_CLASS(mc);
60061b
+    /* from pseries-5.0 */
60061b
+    static GlobalProperty compat[] = {
60061b
+        { TYPE_SPAPR_PCI_HOST_BRIDGE, "pre-5.1-associativity", "on" },
60061b
+    };
60061b
+
60061b
+    spapr_machine_rhel830_class_options(mc);
60061b
+    compat_props_add(mc->compat_props, hw_compat_rhel_8_2,
60061b
+                     hw_compat_rhel_8_2_len);
60061b
+    compat_props_add(mc->compat_props, compat, G_N_ELEMENTS(compat));
60061b
+
60061b
+    /* from pseries-4.2 */
60061b
+    smc->default_caps.caps[SPAPR_CAP_FWNMI] = SPAPR_CAP_OFF;
60061b
+    smc->rma_limit = 16 * GiB;
60061b
+    mc->nvdimm_supported = false;
60061b
+
60061b
+    /* from pseries-5.0 */
60061b
+    mc->numa_mem_supported = true;
60061b
+    smc->pre_5_1_assoc_refpoints = true;
902636
+}
902636
+
60061b
+DEFINE_SPAPR_MACHINE(rhel820, "rhel8.2.0", false);
902636
+
902636
+/*
902636
+ * pseries-rhel8.1.0
902636
+ * like pseries-4.1
902636
+ */
902636
+
902636
+static void spapr_machine_rhel810_class_options(MachineClass *mc)
902636
+{
902636
+    SpaprMachineClass *smc = SPAPR_MACHINE_CLASS(mc);
902636
+    static GlobalProperty compat[] = {
902636
+        /* Only allow 4kiB and 64kiB IOMMU pagesizes */
902636
+        { TYPE_SPAPR_PCI_HOST_BRIDGE, "pgsz", "0x11000" },
902636
+    };
902636
+
902636
+    spapr_machine_rhel820_class_options(mc);
902636
+
902636
+    /* from pseries-4.1 */
902636
+    smc->linux_pci_probe = false;
902636
+    smc->smp_threads_vsmt = false;
902636
+    compat_props_add(mc->compat_props, hw_compat_rhel_8_1,
902636
+                     hw_compat_rhel_8_1_len);
902636
+    compat_props_add(mc->compat_props, compat, G_N_ELEMENTS(compat));
902636
+
60061b
+    /* from pseries-4.2 */
60061b
+    smc->default_caps.caps[SPAPR_CAP_CCF_ASSIST] = SPAPR_CAP_OFF;
902636
+}
902636
+
902636
+DEFINE_SPAPR_MACHINE(rhel810, "rhel8.1.0", false);
902636
+
902636
+/*
902636
+ * pseries-rhel8.0.0
902636
+ * like pseries-3.1 and pseries-4.0
902636
+ * except SPAPR_CAP_CFPC, SPAPR_CAP_SBBC and SPAPR_CAP_IBS
902636
+ * that have been backported to pseries-rhel8.0.0
902636
+ */
902636
+
902636
+static void spapr_machine_rhel800_class_options(MachineClass *mc)
902636
+{
902636
+    SpaprMachineClass *smc = SPAPR_MACHINE_CLASS(mc);
902636
+
902636
+    spapr_machine_rhel810_class_options(mc);
902636
+    compat_props_add(mc->compat_props, hw_compat_rhel_8_0,
902636
+                     hw_compat_rhel_8_0_len);
902636
+
902636
+    /* pseries-4.0 */
902636
+    smc->phb_placement = phb_placement_4_0;
902636
+    smc->irq = &spapr_irq_xics;
902636
+    smc->pre_4_1_migration = true;
902636
+
902636
+    /* pseries-3.1 */
902636
+    mc->default_cpu_type = POWERPC_CPU_TYPE_NAME("power8_v2.0");
902636
+    smc->update_dt_enabled = false;
902636
+    smc->dr_phb_enabled = false;
902636
+    smc->broken_host_serial_model = true;
902636
+    smc->default_caps.caps[SPAPR_CAP_LARGE_DECREMENTER] = SPAPR_CAP_OFF;
902636
+}
902636
+
902636
+DEFINE_SPAPR_MACHINE(rhel800, "rhel8.0.0", false);
902636
+
902636
+/*
902636
+ * pseries-rhel7.6.0
902636
+ * like spapr_compat_2_12 and spapr_compat_3_0
902636
+ * spapr_compat_0 is empty
902636
+ */
902636
+GlobalProperty spapr_compat_rhel7_6[] = {
902636
+    { TYPE_POWERPC_CPU, "pre-3.0-migration", "on" },
902636
+    { TYPE_SPAPR_CPU_CORE, "pre-3.0-migration", "on" },
902636
+};
902636
+const size_t spapr_compat_rhel7_6_len = G_N_ELEMENTS(spapr_compat_rhel7_6);
902636
+
902636
+
902636
+static void spapr_machine_rhel760_class_options(MachineClass *mc)
902636
+{
902636
+    SpaprMachineClass *smc = SPAPR_MACHINE_CLASS(mc);
902636
+
902636
+    spapr_machine_rhel800_class_options(mc);
902636
+    compat_props_add(mc->compat_props, hw_compat_rhel_7_6, hw_compat_rhel_7_6_len);
902636
+    compat_props_add(mc->compat_props, spapr_compat_rhel7_6, spapr_compat_rhel7_6_len);
902636
+
902636
+    /* from spapr_machine_3_0_class_options() */
902636
+    smc->legacy_irq_allocation = true;
902636
+    smc->nr_xirqs = 0x400;
902636
+    smc->irq = &spapr_irq_xics_legacy;
902636
+
902636
+    /* from spapr_machine_2_12_class_options() */
902636
+    /* We depend on kvm_enabled() to choose a default value for the
902636
+     * hpt-max-page-size capability. Of course we can't do it here
902636
+     * because this is too early and the HW accelerator isn't initialzed
902636
+     * yet. Postpone this to machine init (see default_caps_with_cpu()).
902636
+     */
902636
+    smc->default_caps.caps[SPAPR_CAP_HPT_MAXPAGESIZE] = 0;
902636
+
902636
+    /* SPAPR_CAP_WORKAROUND enabled in pseries-rhel800 by
902636
+     * f21757edc554
902636
+     * "Enable mitigations by default for pseries-4.0 machine type")
902636
+     */
902636
+    smc->default_caps.caps[SPAPR_CAP_CFPC] = SPAPR_CAP_BROKEN;
902636
+    smc->default_caps.caps[SPAPR_CAP_SBBC] = SPAPR_CAP_BROKEN;
902636
+    smc->default_caps.caps[SPAPR_CAP_IBS] = SPAPR_CAP_BROKEN;
902636
+}
902636
+
902636
+DEFINE_SPAPR_MACHINE(rhel760, "rhel7.6.0", false);
902636
+
902636
+/*
902636
+ * pseries-rhel7.6.0-sxxm
902636
+ *
902636
+ * pseries-rhel7.6.0 with speculative execution exploit mitigations enabled by default
902636
+ */
902636
+
902636
+static void spapr_machine_rhel760sxxm_class_options(MachineClass *mc)
902636
+{
902636
+    SpaprMachineClass *smc = SPAPR_MACHINE_CLASS(mc);
902636
+
902636
+    spapr_machine_rhel760_class_options(mc);
902636
+    smc->default_caps.caps[SPAPR_CAP_CFPC] = SPAPR_CAP_WORKAROUND;
902636
+    smc->default_caps.caps[SPAPR_CAP_SBBC] = SPAPR_CAP_WORKAROUND;
902636
+    smc->default_caps.caps[SPAPR_CAP_IBS] = SPAPR_CAP_FIXED_CCD;
902636
+}
902636
+
902636
+DEFINE_SPAPR_MACHINE(rhel760sxxm, "rhel7.6.0-sxxm", false);
902636
+
902636
+static void spapr_machine_rhel750_class_options(MachineClass *mc)
902636
+{
902636
+    spapr_machine_rhel760_class_options(mc);
902636
+    compat_props_add(mc->compat_props, hw_compat_rhel_7_5, hw_compat_rhel_7_5_len);
902636
+
902636
+}
902636
+
902636
+DEFINE_SPAPR_MACHINE(rhel750, "rhel7.5.0", false);
902636
+
902636
+/*
902636
+ * pseries-rhel7.5.0-sxxm
902636
+ *
902636
+ * pseries-rhel7.5.0 with speculative execution exploit mitigations enabled by default
902636
+ */
902636
+
902636
+static void spapr_machine_rhel750sxxm_class_options(MachineClass *mc)
902636
+{
902636
+    SpaprMachineClass *smc = SPAPR_MACHINE_CLASS(mc);
902636
+
902636
+    spapr_machine_rhel750_class_options(mc);
902636
+    smc->default_caps.caps[SPAPR_CAP_CFPC] = SPAPR_CAP_WORKAROUND;
902636
+    smc->default_caps.caps[SPAPR_CAP_SBBC] = SPAPR_CAP_WORKAROUND;
902636
+    smc->default_caps.caps[SPAPR_CAP_IBS] = SPAPR_CAP_FIXED_CCD;
902636
+}
902636
+
902636
+DEFINE_SPAPR_MACHINE(rhel750sxxm, "rhel7.5.0-sxxm", false);
902636
+
902636
+/*
902636
+ * pseries-rhel7.4.0
902636
+ * like spapr_compat_2_9
902636
+ */
902636
+GlobalProperty spapr_compat_rhel7_4[] = {
902636
+    { TYPE_POWERPC_CPU, "pre-2.10-migration", "on" },
902636
+};
902636
+const size_t spapr_compat_rhel7_4_len = G_N_ELEMENTS(spapr_compat_rhel7_4);
902636
+
902636
+static void spapr_machine_rhel740_class_options(MachineClass *mc)
902636
+{
902636
+    SpaprMachineClass *smc = SPAPR_MACHINE_CLASS(mc);
902636
+
902636
+    spapr_machine_rhel750_class_options(mc);
902636
+    compat_props_add(mc->compat_props, hw_compat_rhel_7_4, hw_compat_rhel_7_4_len);
902636
+    compat_props_add(mc->compat_props, spapr_compat_rhel7_4, spapr_compat_rhel7_4_len);
902636
+    smc->has_power9_support = false;
902636
+    smc->pre_2_10_has_unused_icps = true;
902636
+    smc->resize_hpt_default = SPAPR_RESIZE_HPT_DISABLED;
902636
+    smc->default_caps.caps[SPAPR_CAP_HTM] = SPAPR_CAP_ON;
902636
+}
902636
+
902636
+DEFINE_SPAPR_MACHINE(rhel740, "rhel7.4.0", false);
902636
+
902636
+/*
902636
+ * pseries-rhel7.4.0-sxxm
902636
+ *
902636
+ * pseries-rhel7.4.0 with speculative execution exploit mitigations enabled by default
902636
+ */
902636
+
902636
+static void spapr_machine_rhel740sxxm_class_options(MachineClass *mc)
902636
+{
902636
+    SpaprMachineClass *smc = SPAPR_MACHINE_CLASS(mc);
902636
+
902636
+    spapr_machine_rhel740_class_options(mc);
902636
+    smc->default_caps.caps[SPAPR_CAP_CFPC] = SPAPR_CAP_WORKAROUND;
902636
+    smc->default_caps.caps[SPAPR_CAP_SBBC] = SPAPR_CAP_WORKAROUND;
902636
+    smc->default_caps.caps[SPAPR_CAP_IBS] = SPAPR_CAP_FIXED_CCD;
902636
+}
902636
+
902636
+DEFINE_SPAPR_MACHINE(rhel740sxxm, "rhel7.4.0-sxxm", false);
902636
+
902636
+/*
902636
+ * pseries-rhel7.3.0
902636
+ * like spapr_compat_2_6/_2_7/_2_8 but "ddw" has been backported to RHEL7_3
902636
+ */
902636
+GlobalProperty spapr_compat_rhel7_3[] = {
902636
+    { TYPE_SPAPR_PCI_HOST_BRIDGE, "mem_win_size", "0xf80000000" },
902636
+    { TYPE_SPAPR_PCI_HOST_BRIDGE, "mem64_win_size", "0" },
902636
+    { TYPE_POWERPC_CPU, "pre-2.8-migration", "on" },
902636
+    { TYPE_SPAPR_PCI_HOST_BRIDGE, "pre-2.8-migration", "on" },
902636
+    { TYPE_SPAPR_PCI_HOST_BRIDGE, "pcie-extended-configuration-space", "off" },
902636
+};
902636
+const size_t spapr_compat_rhel7_3_len = G_N_ELEMENTS(spapr_compat_rhel7_3);
902636
+
902636
+static void spapr_machine_rhel730_class_options(MachineClass *mc)
902636
+{
902636
+    SpaprMachineClass *smc = SPAPR_MACHINE_CLASS(mc);
902636
+
902636
+    spapr_machine_rhel740_class_options(mc);
902636
+    mc->default_cpu_type = POWERPC_CPU_TYPE_NAME("power7_v2.3");
902636
+    mc->default_machine_opts = "modern-hotplug-events=off";
902636
+    compat_props_add(mc->compat_props, hw_compat_rhel_7_3, hw_compat_rhel_7_3_len);
902636
+    compat_props_add(mc->compat_props, spapr_compat_rhel7_3, spapr_compat_rhel7_3_len);
902636
+
902636
+    smc->phb_placement = phb_placement_2_7;
902636
+}
902636
+
902636
+DEFINE_SPAPR_MACHINE(rhel730, "rhel7.3.0", false);
902636
+
902636
+/*
902636
+ * pseries-rhel7.3.0-sxxm
902636
+ *
902636
+ * pseries-rhel7.3.0 with speculative execution exploit mitigations enabled by default
902636
+ */
902636
+
902636
+static void spapr_machine_rhel730sxxm_class_options(MachineClass *mc)
902636
+{
902636
+    SpaprMachineClass *smc = SPAPR_MACHINE_CLASS(mc);
902636
+
902636
+    spapr_machine_rhel730_class_options(mc);
902636
+    smc->default_caps.caps[SPAPR_CAP_CFPC] = SPAPR_CAP_WORKAROUND;
902636
+    smc->default_caps.caps[SPAPR_CAP_SBBC] = SPAPR_CAP_WORKAROUND;
902636
+    smc->default_caps.caps[SPAPR_CAP_IBS] = SPAPR_CAP_FIXED_CCD;
902636
+}
902636
+
902636
+DEFINE_SPAPR_MACHINE(rhel730sxxm, "rhel7.3.0-sxxm", false);
902636
+
902636
+/*
902636
+ * pseries-rhel7.2.0
902636
+ */
902636
+/* Should be like spapr_compat_2_5 + 2_4 + 2_3, but "dynamic-reconfiguration"
902636
+ * has been backported to RHEL7_2 so we don't need it here.
902636
+ */
902636
+
902636
+GlobalProperty spapr_compat_rhel7_2[] = {
902636
+    { "spapr-vlan", "use-rx-buffer-pools", "off" },
902636
+    { TYPE_SPAPR_PCI_HOST_BRIDGE, "ddw", "off" },
902636
+};
902636
+const size_t spapr_compat_rhel7_2_len = G_N_ELEMENTS(spapr_compat_rhel7_2);
902636
+
902636
+static void spapr_machine_rhel720_class_options(MachineClass *mc)
902636
+{
902636
+    SpaprMachineClass *smc = SPAPR_MACHINE_CLASS(mc);
902636
+
902636
+    spapr_machine_rhel730_class_options(mc);
902636
+    smc->use_ohci_by_default = true;
902636
+    mc->has_hotpluggable_cpus = NULL;
902636
+    compat_props_add(mc->compat_props, hw_compat_rhel_7_2, hw_compat_rhel_7_2_len);
902636
+    compat_props_add(mc->compat_props, spapr_compat_rhel7_2, spapr_compat_rhel7_2_len);
902636
+}
902636
+
902636
+DEFINE_SPAPR_MACHINE(rhel720, "rhel7.2.0", false);
902636
 
902636
 static void spapr_machine_register_types(void)
902636
 {
902636
diff --git a/hw/ppc/spapr_cpu_core.c b/hw/ppc/spapr_cpu_core.c
60061b
index 8ba34f6a1d..78eca1c04a 100644
902636
--- a/hw/ppc/spapr_cpu_core.c
902636
+++ b/hw/ppc/spapr_cpu_core.c
902636
@@ -24,6 +24,7 @@
902636
 #include "sysemu/reset.h"
902636
 #include "sysemu/hw_accel.h"
902636
 #include "qemu/error-report.h"
902636
+#include "cpu-models.h"
902636
 
902636
 static void spapr_reset_vcpu(PowerPCCPU *cpu)
902636
 {
60061b
@@ -250,6 +251,7 @@ static bool spapr_realize_vcpu(PowerPCCPU *cpu, SpaprMachineState *spapr,
60061b
 {
902636
     CPUPPCState *env = &cpu->env;
902636
     CPUState *cs = CPU(cpu);
902636
+    SpaprMachineClass *smc = SPAPR_MACHINE_GET_CLASS(spapr);
902636
 
60061b
     if (!qdev_realize(DEVICE(cpu), NULL, errp)) {
60061b
         return false;
60061b
@@ -261,6 +263,17 @@ static bool spapr_realize_vcpu(PowerPCCPU *cpu, SpaprMachineState *spapr,
902636
     cpu_ppc_set_vhyp(cpu, PPC_VIRTUAL_HYPERVISOR(spapr));
902636
     kvmppc_set_papr(cpu);
902636
 
902636
+    if (!smc->has_power9_support &&
902636
+        (((spapr->max_compat_pvr &&
902636
+           ppc_compat_cmp(spapr->max_compat_pvr,
902636
+                          CPU_POWERPC_LOGICAL_3_00) >= 0)) ||
902636
+          (!spapr->max_compat_pvr &&
902636
+           ppc_check_compat(cpu, CPU_POWERPC_LOGICAL_3_00, 0, 0)))) {
902636
+        error_set(errp, ERROR_CLASS_DEVICE_NOT_FOUND,
902636
+                  "POWER9 CPU is not supported by this machine class");
60061b
+        return false;
902636
+    }
902636
+
60061b
     if (spapr_irq_cpu_intc_create(spapr, cpu, errp) < 0) {
60061b
         qdev_unrealize(DEVICE(cpu));
60061b
         return false;
902636
diff --git a/include/hw/ppc/spapr.h b/include/hw/ppc/spapr.h
60061b
index ee7504b976..37a014d59c 100644
902636
--- a/include/hw/ppc/spapr.h
902636
+++ b/include/hw/ppc/spapr.h
60061b
@@ -154,6 +154,7 @@ struct SpaprMachineClass {
60061b
     bool pre_5_2_numa_associativity;
60061b
     bool pre_6_2_numa_affinity;
902636
 
902636
+    bool has_power9_support;
60061b
     bool (*phb_placement)(SpaprMachineState *spapr, uint32_t index,
60061b
                           uint64_t *buid, hwaddr *pio,
902636
                           hwaddr *mmio32, hwaddr *mmio64,
60061b
@@ -237,6 +238,9 @@ struct SpaprMachineState {
60061b
 
60061b
     /* Set by -boot */
60061b
     char *boot_device;
60061b
+ 
60061b
+    /* Secure Guest support via x-svm-allowed */
60061b
+    bool svm_allowed;
60061b
 
60061b
     /*< public >*/
60061b
     char *kvm_type;
902636
diff --git a/target/ppc/compat.c b/target/ppc/compat.c
60061b
index 7949a24f5a..f207a9ba01 100644
902636
--- a/target/ppc/compat.c
902636
+++ b/target/ppc/compat.c
60061b
@@ -114,8 +114,19 @@ static const CompatInfo *compat_by_pvr(uint32_t pvr)
902636
     return NULL;
902636
 }
902636
 
902636
+long ppc_compat_cmp(uint32_t pvr1, uint32_t pvr2)
902636
+{
902636
+    const CompatInfo *compat1 = compat_by_pvr(pvr1);
902636
+    const CompatInfo *compat2 = compat_by_pvr(pvr2);
902636
+
902636
+    g_assert(compat1);
902636
+    g_assert(compat2);
902636
+
902636
+    return compat1 - compat2;
902636
+}
902636
+
902636
 static bool pcc_compat(PowerPCCPUClass *pcc, uint32_t compat_pvr,
902636
-                       uint32_t min_compat_pvr, uint32_t max_compat_pvr)
902636
+                      uint32_t min_compat_pvr, uint32_t max_compat_pvr)
902636
 {
902636
     const CompatInfo *compat = compat_by_pvr(compat_pvr);
902636
     const CompatInfo *min = compat_by_pvr(min_compat_pvr);
902636
diff --git a/target/ppc/cpu.h b/target/ppc/cpu.h
60061b
index e946da5f3a..23e8b76c85 100644
902636
--- a/target/ppc/cpu.h
902636
+++ b/target/ppc/cpu.h
60061b
@@ -1401,6 +1401,7 @@ static inline int cpu_mmu_index(CPUPPCState *env, bool ifetch)
902636
 
902636
 /* Compatibility modes */
902636
 #if defined(TARGET_PPC64)
902636
+long ppc_compat_cmp(uint32_t pvr1, uint32_t pvr2);
902636
 bool ppc_check_compat(PowerPCCPU *cpu, uint32_t compat_pvr,
902636
                       uint32_t min_compat_pvr, uint32_t max_compat_pvr);
902636
 bool ppc_type_check_compat(const char *cputype, uint32_t compat_pvr,
60061b
diff --git a/target/ppc/kvm.c b/target/ppc/kvm.c
60061b
index dc93b99189..154888cce5 100644
60061b
--- a/target/ppc/kvm.c
60061b
+++ b/target/ppc/kvm.c
60061b
@@ -90,6 +90,7 @@ static int cap_ppc_nested_kvm_hv;
60061b
 static int cap_large_decr;
60061b
 static int cap_fwnmi;
60061b
 static int cap_rpt_invalidate;
60061b
+static int cap_ppc_secure_guest;
60061b
 
60061b
 static uint32_t debug_inst_opcode;
60061b
 
60061b
@@ -137,6 +138,7 @@ int kvm_arch_init(MachineState *ms, KVMState *s)
60061b
     cap_resize_hpt = kvm_vm_check_extension(s, KVM_CAP_SPAPR_RESIZE_HPT);
60061b
     kvmppc_get_cpu_characteristics(s);
60061b
     cap_ppc_nested_kvm_hv = kvm_vm_check_extension(s, KVM_CAP_PPC_NESTED_HV);
60061b
+    cap_ppc_secure_guest = kvm_vm_check_extension(s, KVM_CAP_PPC_SECURE_GUEST);
60061b
     cap_large_decr = kvmppc_get_dec_bits();
60061b
     cap_fwnmi = kvm_vm_check_extension(s, KVM_CAP_PPC_FWNMI);
60061b
     /*
60061b
@@ -2563,6 +2565,16 @@ int kvmppc_has_cap_rpt_invalidate(void)
60061b
     return cap_rpt_invalidate;
60061b
 }
60061b
 
60061b
+bool kvmppc_has_cap_secure_guest(void)
60061b
+{
60061b
+    return !!cap_ppc_secure_guest;
60061b
+}
60061b
+
60061b
+int kvmppc_enable_cap_secure_guest(void)
60061b
+{
60061b
+    return kvm_vm_enable_cap(kvm_state, KVM_CAP_PPC_SECURE_GUEST, 0, 1);
60061b
+}
60061b
+
60061b
 PowerPCCPUClass *kvm_ppc_get_host_cpu_class(void)
60061b
 {
60061b
     uint32_t host_pvr = mfpvr();
60061b
@@ -2959,3 +2971,18 @@ bool kvm_arch_cpu_check_are_resettable(void)
60061b
 {
60061b
     return true;
60061b
 }
60061b
+
60061b
+void kvmppc_svm_allow(Error **errp)
60061b
+{
60061b
+    if (!kvm_enabled()) {
60061b
+        error_setg(errp, "No PEF support in tcg, try x-svm-allowed=off");
60061b
+        return;
60061b
+    }
60061b
+
60061b
+    if (!kvmppc_has_cap_secure_guest()) {
60061b
+        error_setg(errp, "KVM implementation does not support secure guests, "
60061b
+                   "try x-svm-allowed=off");
60061b
+    } else if (kvmppc_enable_cap_secure_guest() < 0) {
60061b
+        error_setg(errp, "Error enabling x-svm-allowed, try x-svm-allowed=off");
60061b
+    }
60061b
+}
60061b
diff --git a/target/ppc/kvm_ppc.h b/target/ppc/kvm_ppc.h
60061b
index ee9325bf9a..20dbb95989 100644
60061b
--- a/target/ppc/kvm_ppc.h
60061b
+++ b/target/ppc/kvm_ppc.h
60061b
@@ -40,6 +40,7 @@ int kvmppc_booke_watchdog_enable(PowerPCCPU *cpu);
60061b
 target_ulong kvmppc_configure_v3_mmu(PowerPCCPU *cpu,
60061b
                                      bool radix, bool gtse,
60061b
                                      uint64_t proc_tbl);
60061b
+void kvmppc_svm_allow(Error **errp);
60061b
 #ifndef CONFIG_USER_ONLY
60061b
 bool kvmppc_spapr_use_multitce(void);
60061b
 int kvmppc_spapr_enable_inkernel_multitce(void);
60061b
@@ -74,6 +75,8 @@ int kvmppc_get_cap_large_decr(void);
60061b
 int kvmppc_enable_cap_large_decr(PowerPCCPU *cpu, int enable);
60061b
 int kvmppc_has_cap_rpt_invalidate(void);
60061b
 int kvmppc_enable_hwrng(void);
60061b
+bool kvmppc_has_cap_secure_guest(void);
60061b
+int kvmppc_enable_cap_secure_guest(void);
60061b
 int kvmppc_put_books_sregs(PowerPCCPU *cpu);
60061b
 PowerPCCPUClass *kvm_ppc_get_host_cpu_class(void);
60061b
 void kvmppc_check_papr_resize_hpt(Error **errp);
60061b
@@ -393,6 +396,16 @@ static inline int kvmppc_has_cap_rpt_invalidate(void)
60061b
     return false;
60061b
 }
60061b
 
60061b
+static inline bool kvmppc_has_cap_secure_guest(void)
60061b
+{
60061b
+    return false;
60061b
+}
60061b
+
60061b
+static inline int kvmppc_enable_cap_secure_guest(void)
60061b
+{
60061b
+    return -1;
60061b
+}
60061b
+
60061b
 static inline int kvmppc_enable_hwrng(void)
60061b
 {
60061b
     return -1;
902636
-- 
60061b
2.27.0
902636