v1: https://lore.kernel.org/r/[email protected] v2: https://lore.kernel.org/r/[email protected] v3: https://lore.kernel.org/r/[email protected]/ v4: - Picked up v3 series from Peter Xu and rebased on 11.1.0 - Collected pending Reviewed-by's - Per-patch changes: [01/12] Fix blank space (Xiaoyao) Fix commit message typos [02/12] Drop duplicated error-handling for capability checks [05/12] Fix up commit message, disambigurate "in-place" terminology (Xiaoyao) [07/12] Fix up commit message, disambigurate "in-place" terminology (Xiaoyao) [08/12] Disallow 'seal' and 'hugetlb' options based on guest-memfd=on Fix minor typo in comment [11/12] Fix up typo in g_test_skip() reason Pending: Move kvm_guest_memfd_init_shared_supported() to migration-util.c (Fabiano)
This patchset is also available at: https://github.com/amdese/qemu/commits/gmem-shared-mem-v4 and is based on top of v11.1.0 OVERVIEW ======== (cover letter shamelessly adapted from Peter's prior postings) Recent kernels allow guest_memfd to be initialized with an 'init-shared' flag that will default to allocating normal/non-private memory that can be used to back non-confidential VMs. This allows QEMU to make use of these init-shared guest_memfd instances via a common memory backend that's usable for either provide a common memory backend. On the QEMU side, before this series, guest_memfd was only used for private guest memory (and thus only applied to confidential VMs), and the guest_memfd FDs would be created implicitly whenever a confidential environment was detected/specified. With this series, users can now explicitly configure QEMU to use guest_memfd for non-private memory; thus, it can be used for non-confidential VMs. It also has implications for confidential VMs, since with this series an init-shared guest_memfd instance can now be specified for the shared memory while the internally-allocated guest_memfd continues to be used for private memory. This same infrastructure will also be used as the base for enabling in-place conversion for confidential VMs, where these separate shared/private paths will be modified to act on the same underlying guest_memfd instance and use a unified pool of shared/private memory. IMPLEMENTATION ============== In the current patchset, I reused the memory-backend-memfd object, rather than creating a new type of object. After all, guest-memfd (at least from userspace POV) works similarly like a memfd, except that it was tailored for VM's use case. While there is potential that new guest_memfd features may eventually necessitate introducing a dedicated guest_memfd memory backend object, for now the memory-backend-memfd object is a good fit for the current feature set. This will also make it easier when in-place conversion comes around, since confidential VMs typically already use memory-backend-memfd for their shared memory, so by also making using that approach to specify the guest_memfd backend for in-place conversion the command-line syntax remains similar, and even allow choosing between memfd vs. guest_memfd to be handled automatically based on whether or not we're dealing with a Confidential VM with in-place conversion enabled. This approach so far also does not involve gmem bindings to KVM instances, hence it is not prone to issues when the same chunk of RAM will be attached to more than one KVM memslots. Now, instead of using a normal memfd backend using: -object memory-backend-memfd,id=ID,size=SIZE,share=on One can also boot a VM with guest-memfd: -object memory-backend-memfd,id=ID,size=SIZE,share=on,guest-memfd=on The init-shared guest-memfd relies on a recent kernel (6.18+). When run it on an older qemu, you'll see errors like: qemu-system-x86_64: KVM does not support guest_memfd One thing to mention is live migration is by default supported, however postcopy is still currently not supported. The postcopy support will have some kernel dependency work to be merged in Linux first. Thanks, Peter Xu (11): kvm: Detect guest-memfd flags supported kvm: Provide explicit error for kvm_create_guest_memfd() ramblock: Rename guest_memfd to guest_memfd_private memory: Rename RAM_GUEST_MEMFD to RAM_GUEST_MEMFD_PRIVATE memory: Rename memory_region_has_guest_memfd() to *_private() hostmem: Rename guest_memfd to guest_memfd_private hostmem: Support fully shared guest memfd to back a VM machine: Rename machine_require_guest_memfd() to *_private() memory: Rename memory_region_init_ram_guest_memfd() to *_private() tests/migration-test: Support guest-memfd init shared mem type tests/migration-test: Add a precopy test for guest-memfd Xiaoyao Li (1): kvm: Decouple memory attribute check from kvm_guest_memfd_supported qapi/qom.json | 6 ++- include/hw/boards.h | 2 +- include/system/hostmem.h | 2 +- include/system/kvm.h | 1 + include/system/memory.h | 27 ++++++------ include/system/ram_addr.h | 2 +- include/system/ramblock.h | 7 +++- tests/qtest/migration/framework.h | 4 ++ accel/kvm/kvm-all.c | 33 ++++++++++++--- accel/stubs/kvm-stub.c | 6 +++ backends/hostmem-file.c | 2 +- backends/hostmem-memfd.c | 55 +++++++++++++++++++++--- backends/hostmem-ram.c | 2 +- backends/hostmem-shm.c | 2 +- backends/hostmem.c | 2 +- backends/igvm.c | 4 +- hw/core/machine.c | 2 +- hw/i386/pc.c | 6 +-- hw/i386/pc_sysfw.c | 8 ++-- hw/i386/x86-common.c | 8 ++-- system/memory.c | 17 ++++---- system/physmem.c | 37 ++++++++++------- target/i386/kvm/kvm.c | 3 +- tests/qtest/migration/framework.c | 60 +++++++++++++++++++++++++++ tests/qtest/migration/precopy-tests.c | 12 ++++++ 25 files changed, 239 insertions(+), 71 deletions(-) -- 2.50.1
