ANDROID: pkvm: Spawn protected guests with an 8MiB restricted DMA pool
Android kernels with pKVM support the creation of protected VMs using
bit 31 of the virtual machine type specifier. By default, the memory of
VMs spawned in this way is inaccessible to the host system.
Hack kvmtool to create protected VMs, request an 8MiB restricted DMA
pool for PCI devices so that virtio traffic can be bounced through a
shared memory window and advertise VIRTIO_F_ACCESS_PLATFORM for its PCI
devices.
Signed-off-by: Will Deacon <willdeacon@google.com>
5 files changed
