On 2/8/22 06:21, Haibin Huang wrote: > From: Lin Yang <lin.a.yang@xxxxxxxxx> > > <devices> > ... > <memory model='sgx-epc'> > <target> > <size unit='KiB'>512</size> > </target> > </memory> > ... > </devices> > > Signed-off-by: Lin Yang <lin.a.yang@xxxxxxxxx> > --- > docs/formatdomain.rst | 9 +++- > docs/schemas/domaincommon.rng | 1 + > src/conf/domain_conf.c | 6 +++ > src/conf/domain_conf.h | 1 + > src/conf/domain_validate.c | 16 ++++++ > src/qemu/qemu_alias.c | 3 ++ > src/qemu/qemu_command.c | 1 + > src/qemu/qemu_domain.c | 38 +++++++++----- > src/qemu/qemu_domain_address.c | 6 +++ > src/qemu/qemu_driver.c | 1 + > src/qemu/qemu_process.c | 2 + > src/qemu/qemu_validate.c | 8 +++ > src/security/security_apparmor.c | 1 + > src/security/security_dac.c | 2 + > src/security/security_selinux.c | 2 + > tests/qemuxml2argvdata/sgx-epc.xml | 36 +++++++++++++ > .../sgx-epc.x86_64-latest.xml | 52 +++++++++++++++++++ > tests/qemuxml2xmltest.c | 2 + > 18 files changed, 172 insertions(+), 15 deletions(-) > create mode 100644 tests/qemuxml2argvdata/sgx-epc.xml > create mode 100644 tests/qemuxml2xmloutdata/sgx-epc.x86_64-latest.xml > > diff --git a/docs/formatdomain.rst b/docs/formatdomain.rst > index e2f99c60a6..ee9328ca36 100644 > --- a/docs/formatdomain.rst > +++ b/docs/formatdomain.rst > @@ -7912,6 +7912,11 @@ Example: usage of the memory devices > <current unit='KiB'>524288</current> > </target> > </memory> > + <memory model='sgx-epc'> > + <target> > + <size unit='KiB'>16384</size> > + </target> > + </memory> > </devices> > ... > > @@ -7920,7 +7925,9 @@ Example: usage of the memory devices > 1.2.14` Provide ``nvdimm`` model that adds a Non-Volatile DIMM module. > :since:`Since 3.2.0` Provide ``virtio-pmem`` model to add a paravirtualized > persistent memory device. :since:`Since 7.1.0` Provide ``virtio-mem`` model > - to add paravirtualized memory device. :since:`Since 7.9.0` > + to add paravirtualized memory device. :since:`Since 7.9.0` Provide > + ``sgx-epc`` model to add a SGX enclave page cache (EPC) memory to the guest. > + :since:`Since 8.0.0` > Since 8.1.0. > ``access`` > An optional attribute ``access`` ( :since:`since 3.2.0` ) that provides > diff --git a/docs/schemas/domaincommon.rng b/docs/schemas/domaincommon.rng > index 64a797de46..0aca97618f 100644 > --- a/docs/schemas/domaincommon.rng > +++ b/docs/schemas/domaincommon.rng > @@ -6641,6 +6641,7 @@ > <value>nvdimm</value> > <value>virtio-pmem</value> > <value>virtio-mem</value> > + <value>sgx-epc</value> > </choice> > </attribute> > <optional> > diff --git a/src/conf/domain_conf.c b/src/conf/domain_conf.c > index 58e696416d..1745ecff7f 100644 > --- a/src/conf/domain_conf.c > +++ b/src/conf/domain_conf.c > @@ -1415,6 +1415,7 @@ VIR_ENUM_IMPL(virDomainMemoryModel, > "nvdimm", > "virtio-pmem", > "virtio-mem", > + "sgx-epc", > ); > > VIR_ENUM_IMPL(virDomainShmemModel, > @@ -5606,6 +5607,7 @@ virDomainMemoryDefPostParse(virDomainMemoryDef *mem, > > case VIR_DOMAIN_MEMORY_MODEL_VIRTIO_MEM: > case VIR_DOMAIN_MEMORY_MODEL_DIMM: > + case VIR_DOMAIN_MEMORY_MODEL_SGX_EPC: > case VIR_DOMAIN_MEMORY_MODEL_NONE: > case VIR_DOMAIN_MEMORY_MODEL_LAST: > break; > @@ -14558,6 +14560,7 @@ virDomainMemorySourceDefParseXML(xmlNodePtr node, > def->nvdimmPath = virXPathString("string(./path)", ctxt); > break; > > + case VIR_DOMAIN_MEMORY_MODEL_SGX_EPC: > case VIR_DOMAIN_MEMORY_MODEL_NONE: > case VIR_DOMAIN_MEMORY_MODEL_LAST: > break; > @@ -14626,6 +14629,7 @@ virDomainMemoryTargetDefParseXML(xmlNodePtr node, > case VIR_DOMAIN_MEMORY_MODEL_NONE: > case VIR_DOMAIN_MEMORY_MODEL_DIMM: > case VIR_DOMAIN_MEMORY_MODEL_VIRTIO_PMEM: > + case VIR_DOMAIN_MEMORY_MODEL_SGX_EPC: > case VIR_DOMAIN_MEMORY_MODEL_LAST: > break; > } > @@ -16415,6 +16419,7 @@ virDomainMemoryFindByDefInternal(virDomainDef *def, > continue; > break; > > + case VIR_DOMAIN_MEMORY_MODEL_SGX_EPC: > case VIR_DOMAIN_MEMORY_MODEL_NONE: > case VIR_DOMAIN_MEMORY_MODEL_LAST: > break; > @@ -25851,6 +25856,7 @@ virDomainMemorySourceDefFormat(virBuffer *buf, > virBufferEscapeString(&childBuf, "<path>%s</path>\n", def->nvdimmPath); > break; > > + case VIR_DOMAIN_MEMORY_MODEL_SGX_EPC: > case VIR_DOMAIN_MEMORY_MODEL_NONE: > case VIR_DOMAIN_MEMORY_MODEL_LAST: > break; > diff --git a/src/conf/domain_conf.h b/src/conf/domain_conf.h > index 0731007355..2b12e9d1ef 100644 > --- a/src/conf/domain_conf.h > +++ b/src/conf/domain_conf.h > @@ -2518,6 +2518,7 @@ typedef enum { > VIR_DOMAIN_MEMORY_MODEL_NVDIMM, /* nvdimm memory device */ > VIR_DOMAIN_MEMORY_MODEL_VIRTIO_PMEM, /* virtio-pmem memory device */ > VIR_DOMAIN_MEMORY_MODEL_VIRTIO_MEM, /* virtio-mem memory device */ > + VIR_DOMAIN_MEMORY_MODEL_SGX_EPC, /* SGX enclave page cache */ > > VIR_DOMAIN_MEMORY_MODEL_LAST > } virDomainMemoryModel; > diff --git a/src/conf/domain_validate.c b/src/conf/domain_validate.c > index f0b8aa2655..0bdb7a507f 100644 > --- a/src/conf/domain_validate.c > +++ b/src/conf/domain_validate.c > @@ -2074,6 +2074,22 @@ virDomainMemoryDefValidate(const virDomainMemoryDef *mem, > case VIR_DOMAIN_MEMORY_MODEL_DIMM: > break; > > + case VIR_DOMAIN_MEMORY_MODEL_SGX_EPC: > + if (mem->info.type != VIR_DOMAIN_DEVICE_ADDRESS_TYPE_NONE) { > + virReportError(VIR_ERR_CONFIG_UNSUPPORTED, > + _("memory device address is not supported for model '%s'"), > + virDomainMemoryModelTypeToString(mem->model)); > + return -1; > + } Alright, so EPC module doesn't go onto any bus. Fair enough. > + > + if (mem->targetNode != -1) { > + virReportError(VIR_ERR_CONFIG_UNSUPPORTED, > + _("NUMA nodes is not supported for model '%s'"), > + virDomainMemoryModelTypeToString(mem->model)); > + return -1; > + } > + break; > + > case VIR_DOMAIN_MEMORY_MODEL_NONE: > case VIR_DOMAIN_MEMORY_MODEL_LAST: > default: > diff --git a/tests/qemuxml2argvdata/sgx-epc.xml b/tests/qemuxml2argvdata/sgx-epc.xml > new file mode 100644 > index 0000000000..65ae8ae296 > --- /dev/null > +++ b/tests/qemuxml2argvdata/sgx-epc.xml > @@ -0,0 +1,36 @@ > +<domain type='qemu'> > + <name>QEMUGuest1</name> > + <uuid>c7a5fdbd-edaf-9455-926a-d65c16db1809</uuid> > + <memory unit='KiB'>219100</memory> > + <currentMemory unit='KiB'>219100</currentMemory> > + <vcpu placement='static'>1</vcpu> > + <os> > + <type arch='x86_64' machine='q35'>hvm</type> > + <boot dev='hd'/> > + </os> > + <clock offset='utc'/> > + <on_poweroff>destroy</on_poweroff> > + <on_reboot>restart</on_reboot> > + <on_crash>destroy</on_crash> > + <devices> > + <emulator>/usr/bin/qemu-system-x86_64</emulator> > + <controller type='pci' index='0' model='pcie-root'/> > + <controller type='usb' index='0' model='none'/> > + <controller type='sata' index='0'> > + <address type='pci' domain='0x0000' bus='0x00' slot='0x1f' function='0x2'/> > + </controller> > + <input type='mouse' bus='ps2'/> > + <input type='keyboard' bus='ps2'/> > + <audio id='1' type='none'/> > + <memory model='sgx-epc'> > + <target> > + <size unit='MiB'>64</size> > + </target> > + </memory> > + <memory model='sgx-epc'> > + <target> > + <size unit='MiB'>16</size> > + </target> > + </memory> > + </devices> > +</domain> > diff --git a/tests/qemuxml2xmloutdata/sgx-epc.x86_64-latest.xml b/tests/qemuxml2xmloutdata/sgx-epc.x86_64-latest.xml > new file mode 100644 > index 0000000000..1f2a9c418f > --- /dev/null > +++ b/tests/qemuxml2xmloutdata/sgx-epc.x86_64-latest.xml > @@ -0,0 +1,52 @@ > +<domain type='qemu'> Effectively, what we want to test here is that XML can be parsed and formatted back. In this case we don't really care whether devices are automatically inserted. Having said that, this output XML can be just a symlink to the original XML. Michal