Ruben Hakobyan 883ca3feb2 vmm: reserve memory regions for stage0 and VMSA on KVM SEV-SNP ...

A bootloader/firmware (e.g. stage0) and the VMSA page require dedicated
memory regions at fixed GPAs.

Add reserve_region_for_stage0() to allocate these regions before IGVM
loading begins:
- Stage0 at GPA 0xffc0_0000 (4 MB)
- VMSA page at GPA 0xffff_ffff_f000 (4 KB)

These reservations are KVM-only; MSHV handles stage0/VMSA placement
through its own isolated import path.

Also add fw_cfg device creation and SYS_statx to the vCPU seccomp
allowlist (needed by stage0's file access pattern).

Co-authored-by: Keith Adler <kadler@cloudflare.com>
Signed-off-by: Keith Adler <kadler@cloudflare.com>
Co-authored-by: Alex Orozco <aorozco@google.com>
Signed-off-by: Alex Orozco <aorozco@google.com>
Signed-off-by: Ruben Hakobyan <hruben@meta.com>

2026-04-17 12:28:55 +00:00

..

api

vmm: openapi: Add pci_device_id to the required device entries

2026-04-17 07:45:22 +00:00

igvm

vmm: add KVM SEV-SNP support to IGVM loader

2026-04-17 12:28:55 +00:00

acpi.rs

vmm: acpi: Take &T instead of &Arc<Mutex<T>>

2026-04-02 11:52:04 +00:00

clone3.rs

build: treewide: fmt for edition 2024

2025-09-10 18:35:38 +00:00

config.rs

vmm: add KVM SEV-SNP support to IGVM loader

2026-04-17 12:28:55 +00:00

console_devices.rs

vmm: Improve naming of ConsoleInfo struct members

2026-03-06 21:04:14 +00:00

coredump.rs

misc: vmm: streamline error Display::fmt()

2025-06-13 19:55:54 +00:00

cpu.rs

vmm: add KVM SEV-SNP support to IGVM loader

2026-04-17 12:28:55 +00:00

device_manager.rs

hypervisor, vmm: Add KVM SEV_{INIT2, SNP_LAUNCH_START} support

2026-04-17 12:28:55 +00:00

device_tree.rs

tests: streamline module names to unit_tests

2025-11-20 21:15:03 +00:00

gdb.rs

vmm: gdb: Use map_or instead of map().unwrap_or()

2026-03-06 12:32:38 +00:00

interrupt.rs

vmm: interrupt: Allocate GSIs for MSI/MSI-X interrupt vectors lazily

2026-04-01 01:25:44 +00:00

landlock.rs

misc: clippy: add unnecessary_semicolon

2025-11-21 09:32:11 +00:00

lib.rs

hypervisor, vmm: Add KVM SEV_{INIT2, SNP_LAUNCH_START} support

2026-04-17 12:28:55 +00:00

memory_manager.rs

vmm: add per-zone mergeable option to --memory-zone

2026-04-11 09:01:57 +00:00

migration_transport.rs

vmm: add upper limit for amount of parallel connections during migration

2026-04-02 23:43:42 +00:00

migration.rs

misc: clippy: add uninlined_format_args

2025-11-21 09:32:11 +00:00

pci_segment.rs

pci: Add support for reserving but not allocating slots

2026-04-17 07:45:22 +00:00

seccomp_filters.rs

vmm: reserve memory regions for stage0 and VMSA on KVM SEV-SNP

2026-04-17 12:28:55 +00:00

serial_manager.rs

vmm: serial_manager: Use OwnedFd for the epoll FD

2026-03-06 21:04:14 +00:00

sigwinch_listener.rs

misc: clippy: add needless_pass_by_value

2025-11-27 17:11:14 +00:00

sync_utils.rs

vmm: implement a gate

2026-04-02 23:43:42 +00:00

uffd.rs

vmm: add uffd abstraction module

2026-03-13 21:17:21 +00:00

userfaultfd.rs

vmm: add compile-time validation for userfaultfd ioctl constants

2026-04-14 14:17:40 +00:00

vm_config.rs

vmm: allow IGVM payload alongside a kernel

2026-04-17 12:28:55 +00:00

vm.rs

vmm: reserve memory regions for stage0 and VMSA on KVM SEV-SNP

2026-04-17 12:28:55 +00:00