These are the common bits for TDX and SEV-SNP support for QEMU 9.1. The main changes compared to what Michael posted is:
1) I am including KVM_SEV_INIT2 support patches without the linux-headers update hack (however the linux-headers update in these patches is still not final). This also includes the bits to track whether guest state are encrypted, that are needed by TDX as well as SEV-ES/SNP. 2) VFIO currently is blocked, pending a decision on what is worse between possibly consuming twice the memory and disallowing device assignment; or someone biting the bullet and implementing the RamDiscardManager interface. 3) I included another easy patch from the TDX series, "i386/kvm: Move architectural CPUID leaf generation to separate helper". Please test. :) Paolo Chao Peng (2): kvm: Enable KVM_SET_USER_MEMORY_REGION2 for memslot kvm: handle KVM_EXIT_MEMORY_FAULT Isaku Yamahata (2): pci-host/q35: Move PAM initialization above SMRAM initialization q35: Introduce smm_ranges property for q35-pci-host Michael Roth (5): scripts/update-linux-headers: Add setup_data.h to import list scripts/update-linux-headers: Add bits.h to file imports [HACK] linux-headers: Update headers for 6.8 + kvm-coco-queue + SNP [TO SQUASH] hw/i386: Remove redeclaration of struct setup_data RAMBlock: Add support of KVM private guest memfd Paolo Bonzini (7): runstate: skip initial CPU reset if reset is not actually possible KVM: track whether guest state is encrypted KVM: remove kvm_arch_cpu_check_are_resettable target/i386: introduce x86-confidential-guest target/i386: Implement mc->kvm_type() to get VM type target/i386: SEV: use KVM_SEV_INIT2 if possible RAMBlock: make guest_memfd require uncoordinated discard Sean Christopherson (1): i386/kvm: Move architectural CPUID leaf generation to separate helper Xiaoyao Li (9): confidential guest support: Add kvm_init() and kvm_reset() in class i386/sev: Switch to use confidential_guest_kvm_init() ppc/pef: switch to use confidential_guest_kvm_init/reset() s390: Switch to use confidential_guest_kvm_init() trace/kvm: Split address space and slot id in trace_kvm_set_user_memory() kvm: Introduce support for memory_attributes kvm/memory: Make memory type private by default if it has guest memfd backend HostMem: Add mechanism to opt in kvm guest memfd via MachineState physmem: Introduce ram_block_discard_guest_memfd_range() include/exec/confidential-guest-support.h | 34 +- include/exec/cpu-common.h | 2 + include/exec/memory.h | 20 +- include/exec/ram_addr.h | 2 +- include/exec/ramblock.h | 1 + include/hw/boards.h | 2 + include/hw/i386/pc.h | 1 + include/hw/pci-host/q35.h | 1 + include/hw/ppc/pef.h | 17 - include/standard-headers/asm-x86/bootparam.h | 17 +- include/standard-headers/asm-x86/kvm_para.h | 3 +- include/standard-headers/asm-x86/setup_data.h | 83 ++ include/standard-headers/linux/ethtool.h | 48 ++ include/standard-headers/linux/fuse.h | 39 +- .../linux/input-event-codes.h | 1 + include/standard-headers/linux/virtio_gpu.h | 2 + include/standard-headers/linux/virtio_snd.h | 154 ++++ include/sysemu/hostmem.h | 1 + include/sysemu/kvm.h | 19 +- include/sysemu/kvm_int.h | 3 + linux-headers/asm-arm64/kvm.h | 15 +- linux-headers/asm-arm64/sve_context.h | 11 + linux-headers/asm-generic/bitsperlong.h | 4 + linux-headers/asm-loongarch/kvm.h | 2 - linux-headers/asm-mips/kvm.h | 2 - linux-headers/asm-powerpc/kvm.h | 45 +- linux-headers/asm-riscv/kvm.h | 3 +- linux-headers/asm-s390/kvm.h | 315 +++++++- linux-headers/asm-x86/kvm.h | 364 ++++++++- linux-headers/linux/bits.h | 15 + linux-headers/linux/kvm.h | 717 +----------------- linux-headers/linux/psp-sev.h | 71 ++ target/i386/confidential-guest.h | 59 ++ target/i386/kvm/kvm_i386.h | 2 + target/i386/sev.h | 2 - target/s390x/kvm/pv.h | 14 - accel/kvm/kvm-accel-ops.c | 2 +- accel/kvm/kvm-all.c | 236 +++++- accel/stubs/kvm-stub.c | 5 + backends/hostmem-file.c | 1 + backends/hostmem-memfd.c | 1 + backends/hostmem-ram.c | 1 + backends/hostmem.c | 1 + hw/core/machine.c | 5 + hw/i386/pc_q35.c | 2 + hw/i386/x86.c | 19 +- hw/pci-host/q35.c | 61 +- hw/ppc/pef.c | 9 +- hw/ppc/spapr.c | 10 +- hw/s390x/s390-virtio-ccw.c | 5 +- system/memory.c | 5 + system/physmem.c | 65 +- system/runstate.c | 15 +- target/arm/kvm.c | 5 - target/i386/confidential-guest.c | 33 + target/i386/kvm/kvm.c | 507 +++++++------ target/i386/kvm/sev-stub.c | 21 - target/i386/sev.c | 173 +++-- target/loongarch/kvm/kvm.c | 5 - target/mips/kvm.c | 5 - target/ppc/kvm.c | 5 - target/riscv/kvm/kvm-cpu.c | 5 - target/s390x/kvm/kvm.c | 5 - target/s390x/kvm/pv.c | 8 + accel/kvm/trace-events | 4 +- roms/edk2 | 2 +- scripts/update-linux-headers.sh | 8 +- target/i386/kvm/meson.build | 2 - target/i386/meson.build | 2 +- 69 files changed, 2124 insertions(+), 1200 deletions(-) delete mode 100644 include/hw/ppc/pef.h create mode 100644 include/standard-headers/asm-x86/setup_data.h create mode 100644 linux-headers/linux/bits.h create mode 100644 target/i386/confidential-guest.h create mode 100644 target/i386/confidential-guest.c delete mode 100644 target/i386/kvm/sev-stub.c -- 2.44.0