github-mirror/linux
1
0
Fork 0
mirror of https://github.com/torvalds/linux.git synced 2026-07-28 01:55:51 +02:00
Code Issues Actions Packages Projects Releases Wiki Activity Graph

KVM: selftests: Verify SNP VMs are rejected from migration and mirroring

Browse Source 
Migration and mirroring of SEV-SNP VMs are not supported yet.

Add two selftests that verify KVM rejects intra-host migration and
mirroring when the source VM is an SNP VM, so the restriction stays enforced
until proper SNP state transfer is implemented.

Signed-off-by: Atish Patra <atishp@meta.com>
Link: https://patch.msgid.link/20260602-sev_snp_fixes-v3-2-24bfd3ae047c@meta.com
Signed-off-by: Sean Christopherson <seanjc@google.com>
This commit is contained in:
Atish Patra 2026-06-02 15:36:33 -07:00 committed by Sean Christopherson
parent 6ee4140788
commit df371f2c62
1 changed files with 47 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

47
tools/testing/selftests/kvm/x86/sev_migrate_tests.c
View File

@ -313,6 +313,49 @@ static void test_sev_mirror_parameters(void)
kvm_vm_free(vm_no_vcpu);
}
static void test_sev_snp_migrate_reject(void)
{
struct kvm_vm *src_vm, *dst_vm;
int ret;
src_vm = vm_create_barebones_type(KVM_X86_SNP_VM);
snp_vm_init(src_vm);
__vm_vcpu_add(src_vm, 0);
vm_sev_launch(src_vm, snp_default_policy(), NULL);
dst_vm = vm_create_barebones_type(KVM_X86_SNP_VM);
__vm_vcpu_add(dst_vm, 0);
ret = __sev_migrate_from(dst_vm, src_vm);
TEST_ASSERT(ret == -1 && errno == EINVAL,
"SNP VM migration should be rejected. ret: %d, errno: %d",
ret, errno);
kvm_vm_free(src_vm);
kvm_vm_free(dst_vm);
}
static void test_sev_snp_mirror_reject(void)
{
struct kvm_vm *src_vm, *dst_vm;
int ret;
src_vm = vm_create_barebones_type(KVM_X86_SNP_VM);
snp_vm_init(src_vm);
__vm_vcpu_add(src_vm, 0);
vm_sev_launch(src_vm, snp_default_policy(), NULL);
dst_vm = aux_vm_create(false);
ret = __sev_mirror_create(dst_vm, src_vm);
TEST_ASSERT(ret == -1 && errno == EINVAL,
"SNP VM mirroring should be rejected. ret: %d, errno: %d",
ret, errno);
kvm_vm_free(src_vm);
kvm_vm_free(dst_vm);
}
static void test_sev_move_copy(void)
{
struct kvm_vm *dst_vm, *dst2_vm, *dst3_vm, *sev_vm, *mirror_vm,
@ -384,12 +427,16 @@ int main(int argc, char *argv[])
test_sev_migrate_parameters();
if (kvm_has_cap(KVM_CAP_VM_COPY_ENC_CONTEXT_FROM))
test_sev_move_copy();
if (kvm_cpu_has(X86_FEATURE_SEV_SNP))
test_sev_snp_migrate_reject();
}
if (kvm_has_cap(KVM_CAP_VM_COPY_ENC_CONTEXT_FROM)) {
test_sev_mirror(/* es= */ false);
if (have_sev_es)
test_sev_mirror(/* es= */ true);
test_sev_mirror_parameters();
if (kvm_cpu_has(X86_FEATURE_SEV_SNP))
test_sev_snp_mirror_reject();
}
return 0;
}