Commit be250ff4 authored by Peter Gonda's avatar Peter Gonda Committed by Sean Christopherson
Browse files

KVM: selftests: Add a basic SEV smoke test 



Add a basic smoke test for SEV guests to verify that KVM can launch an
SEV guest and run a few instructions without exploding.  To verify that
SEV is indeed enabled, assert that SEV is reported as enabled in
MSR_AMD64_SEV, a.k.a. SEV_STATUS, which cannot be intercepted by KVM
(architecturally enforced).

Cc: Paolo Bonzini <pbonzini@redhat.com>
Cc: Sean Christopherson <seanjc@google.com>
Cc: Vishal Annapurve <vannapurve@google.com>
Cc: Ackerly Tng <ackerleytng@google.com>
cc: Andrew Jones <andrew.jones@linux.dev>
Cc: Tom Lendacky <thomas.lendacky@amd.com>
Cc: Michael Roth <michael.roth@amd.com>
Suggested-by: default avatarMichael Roth <michael.roth@amd.com>
Tested-by: default avatarCarlos Bilbao <carlos.bilbao@amd.com>
Signed-off-by: default avatarPeter Gonda <pgonda@google.com>
[sean: rename to "sev_smoke_test"]
Link: https://lore.kernel.org/r/20240223004258.3104051-11-seanjc@google.com


Signed-off-by: default avatarSean Christopherson <seanjc@google.com>
parent 69f8e15a

tools/testing/selftests/kvm/Makefile

+1 −0
Original line number Diff line number Diff line
@@ -118,6 +118,7 @@ TEST_GEN_PROGS_x86_64 += x86_64/vmx_pmu_caps_test 
TEST_GEN_PROGS_x86_64 += x86_64/xen_shinfo_test

TEST_GEN_PROGS_x86_64 += x86_64/xen_vmcall_test

TEST_GEN_PROGS_x86_64 += x86_64/sev_migrate_tests

TEST_GEN_PROGS_x86_64 += x86_64/sev_smoke_test

TEST_GEN_PROGS_x86_64 += x86_64/amx_test

TEST_GEN_PROGS_x86_64 += x86_64/max_vcpuid_cap_test

TEST_GEN_PROGS_x86_64 += x86_64/triple_fault_event_test

tools/testing/selftests/kvm/x86_64/sev_smoke_test.c

0 → 100644
+58 −0
Original line number Diff line number Diff line 
// SPDX-License-Identifier: GPL-2.0-only

#include <fcntl.h>

#include <stdio.h>

#include <stdlib.h>

#include <string.h>

#include <sys/ioctl.h>



#include "test_util.h"

#include "kvm_util.h"

#include "processor.h"

#include "svm_util.h"

#include "linux/psp-sev.h"

#include "sev.h"



static void guest_sev_code(void)

{

	GUEST_ASSERT(this_cpu_has(X86_FEATURE_SEV));

	GUEST_ASSERT(rdmsr(MSR_AMD64_SEV) & MSR_AMD64_SEV_ENABLED);



	GUEST_DONE();

}



static void test_sev(void *guest_code, uint64_t policy)

{

	struct kvm_vcpu *vcpu;

	struct kvm_vm *vm;

	struct ucall uc;



	vm = vm_sev_create_with_one_vcpu(policy, guest_code, &vcpu);



	for (;;) {

		vcpu_run(vcpu);



		switch (get_ucall(vcpu, &uc)) {

		case UCALL_SYNC:

			continue;

		case UCALL_DONE:

			return;

		case UCALL_ABORT:

			REPORT_GUEST_ASSERT(uc);

		default:

			TEST_FAIL("Unexpected exit: %s",

				  exit_reason_str(vcpu->run->exit_reason));

		}

	}



	kvm_vm_free(vm);

}



int main(int argc, char *argv[])

{

	TEST_REQUIRE(kvm_cpu_has(X86_FEATURE_SEV));



	test_sev(guest_sev_code, SEV_POLICY_NO_DBG);

	test_sev(guest_sev_code, 0);



	return 0;

}