tree 02df9aa605f1babf25b1d27b256c4967ec834751
parent 102c0d4723e5562fd1bf8e603b0b03f253abd7bb
author Will Deacon <willdeacon@google.com> 1660128367 +0100
committer Mostafa Saleh <smostafa@google.com> 1699371228 +0000

ANDROID: pkvm: Spawn protected guests with an 8MiB restricted DMA pool

Android kernels with pKVM support the creation of protected VMs using
bit 31 of the virtual machine type specifier. By default, the memory of
VMs spawned in this way is inaccessible to the host system.

Hack kvmtool to create protected VMs, request an 8MiB restricted DMA
pool for PCI devices so that virtio traffic can be bounced through a
shared memory window and advertise VIRTIO_F_ACCESS_PLATFORM for its PCI
devices.

Signed-off-by: Will Deacon <willdeacon@google.com>