On 03/02/2020 14.19, Christian Borntraeger wrote: > From: Janosch Frank <frankja@xxxxxxxxxxxxx> > > Add documentation for KVM_CAP_S390_PROTECTED capability and the > KVM_S390_PV_COMMAND and KVM_S390_PV_COMMAND_VCPU ioctls. > > Signed-off-by: Janosch Frank <frankja@xxxxxxxxxxxxx> > --- > Documentation/virt/kvm/api.txt | 62 ++++++++++++++++++++++++++++++++++ > 1 file changed, 62 insertions(+) > > diff --git a/Documentation/virt/kvm/api.txt b/Documentation/virt/kvm/api.txt > index 73448764f544..a73fdae40e26 100644 > --- a/Documentation/virt/kvm/api.txt > +++ b/Documentation/virt/kvm/api.txt > @@ -4204,6 +4204,61 @@ the clear cpu reset definition in the POP. However, the cpu is not put > into ESA mode. This reset is a superset of the initial reset. > > > +4.125 KVM_S390_PV_COMMAND > + > +Capability: KVM_CAP_S390_PROTECTED > +Architectures: s390 > +Type: vm ioctl > +Parameters: struct kvm_pv_cmd > +Returns: 0 on success, < 0 on error > + > +struct kvm_pv_cmd { > + __u32 cmd; /* Command to be executed */ > + __u16 rc; /* Ultravisor return code */ > + __u16 rrc; /* Ultravisor return reason code */ > + __u64 data; /* Data or address */ > +}; > + > +cmd values: > +KVM_PV_VM_CREATE > +Allocate memory and register the VM with the Ultravisor, thereby > +donating memory to the Ultravisor making it inaccessible to KVM. > + > +KVM_PV_VM_DESTROY > +Unregisters the VM from the Ultravisor and frees memory that was s/Unregisters/Deregisters/ ? > +donated, so the kernel can use it again. All registered VCPUs have to > +be unregistered beforehand and all memory has to be exported or > +shared. > + > +KVM_PV_VM_SET_SEC_PARMS > +Pass the image header from VM memory to the Ultravisor in preparation > +of image unpacking and verification. > + > +KVM_PV_VM_UNPACK > +Unpack (protect and decrypt) a page of the encrypted boot image. > + > +KVM_PV_VM_VERIFY > +Verify the integrity of the unpacked image. Only if this succeeds, KVM > + > +is allowed to start protected VCPUs. Please remove the empty line between "KVM" and "is allowed". Apart from the two nits, the patch looks fine to me. Thomas