1 /* SPDX-License-Identifier: GPL-2.0 */
2 #ifndef _ASM_X86_SHARED_TDX_H
3 #define _ASM_X86_SHARED_TDX_H
4
5 #include <linux/bits.h>
6 #include <linux/types.h>
7
8 #define TDX_HYPERCALL_STANDARD 0
9
10 #define TDX_CPUID_LEAF_ID 0x21
11 #define TDX_IDENT "IntelTDX "
12
13 /* TDX module Call Leaf IDs */
14 #define TDG_VP_VMCALL 0
15 #define TDG_VP_INFO 1
16 #define TDG_VP_VEINFO_GET 3
17 #define TDG_MR_REPORT 4
18 #define TDG_MEM_PAGE_ACCEPT 6
19 #define TDG_VM_RD 7
20 #define TDG_VM_WR 8
21
22 /* TDX attributes */
23 #define TDX_ATTR_DEBUG_BIT 0
24 #define TDX_ATTR_DEBUG BIT_ULL(TDX_ATTR_DEBUG_BIT)
25 #define TDX_ATTR_HGS_PLUS_PROF_BIT 4
26 #define TDX_ATTR_HGS_PLUS_PROF BIT_ULL(TDX_ATTR_HGS_PLUS_PROF_BIT)
27 #define TDX_ATTR_PERF_PROF_BIT 5
28 #define TDX_ATTR_PERF_PROF BIT_ULL(TDX_ATTR_PERF_PROF_BIT)
29 #define TDX_ATTR_PMT_PROF_BIT 6
30 #define TDX_ATTR_PMT_PROF BIT_ULL(TDX_ATTR_PMT_PROF_BIT)
31 #define TDX_ATTR_ICSSD_BIT 16
32 #define TDX_ATTR_ICSSD BIT_ULL(TDX_ATTR_ICSSD_BIT)
33 #define TDX_ATTR_LASS_BIT 27
34 #define TDX_ATTR_LASS BIT_ULL(TDX_ATTR_LASS_BIT)
35 #define TDX_ATTR_SEPT_VE_DISABLE_BIT 28
36 #define TDX_ATTR_SEPT_VE_DISABLE BIT_ULL(TDX_ATTR_SEPT_VE_DISABLE_BIT)
37 #define TDX_ATTR_MIGRTABLE_BIT 29
38 #define TDX_ATTR_MIGRTABLE BIT_ULL(TDX_ATTR_MIGRTABLE_BIT)
39 #define TDX_ATTR_PKS_BIT 30
40 #define TDX_ATTR_PKS BIT_ULL(TDX_ATTR_PKS_BIT)
41 #define TDX_ATTR_KL_BIT 31
42 #define TDX_ATTR_KL BIT_ULL(TDX_ATTR_KL_BIT)
43 #define TDX_ATTR_TPA_BIT 62
44 #define TDX_ATTR_TPA BIT_ULL(TDX_ATTR_TPA_BIT)
45 #define TDX_ATTR_PERFMON_BIT 63
46 #define TDX_ATTR_PERFMON BIT_ULL(TDX_ATTR_PERFMON_BIT)
47
48 /* TDX TD-Scope Metadata. To be used by TDG.VM.WR and TDG.VM.RD */
49 #define TDCS_CONFIG_FLAGS 0x1110000300000016
50 #define TDCS_TD_CTLS 0x1110000300000017
51 #define TDCS_NOTIFY_ENABLES 0x9100000000000010
52 #define TDCS_TOPOLOGY_ENUM_CONFIGURED 0x9100000000000019
53
54 /* TDCS_CONFIG_FLAGS bits */
55 #define TDCS_CONFIG_FLEXIBLE_PENDING_VE BIT_ULL(1)
56
57 /* TDCS_TD_CTLS bits */
58 #define TD_CTLS_PENDING_VE_DISABLE_BIT 0
59 #define TD_CTLS_PENDING_VE_DISABLE BIT_ULL(TD_CTLS_PENDING_VE_DISABLE_BIT)
60 #define TD_CTLS_ENUM_TOPOLOGY_BIT 1
61 #define TD_CTLS_ENUM_TOPOLOGY BIT_ULL(TD_CTLS_ENUM_TOPOLOGY_BIT)
62 #define TD_CTLS_VIRT_CPUID2_BIT 2
63 #define TD_CTLS_VIRT_CPUID2 BIT_ULL(TD_CTLS_VIRT_CPUID2_BIT)
64 #define TD_CTLS_REDUCE_VE_BIT 3
65 #define TD_CTLS_REDUCE_VE BIT_ULL(TD_CTLS_REDUCE_VE_BIT)
66 #define TD_CTLS_LOCK_BIT 63
67 #define TD_CTLS_LOCK BIT_ULL(TD_CTLS_LOCK_BIT)
68
69 /* TDX hypercall Leaf IDs */
70 #define TDVMCALL_MAP_GPA 0x10001
71 #define TDVMCALL_GET_QUOTE 0x10002
72 #define TDVMCALL_REPORT_FATAL_ERROR 0x10003
73
74 #define TDVMCALL_STATUS_RETRY 1
75
76 /*
77 * Bitmasks of exposed registers (with VMM).
78 */
79 #define TDX_RDX BIT(2)
80 #define TDX_RBX BIT(3)
81 #define TDX_RSI BIT(6)
82 #define TDX_RDI BIT(7)
83 #define TDX_R8 BIT(8)
84 #define TDX_R9 BIT(9)
85 #define TDX_R10 BIT(10)
86 #define TDX_R11 BIT(11)
87 #define TDX_R12 BIT(12)
88 #define TDX_R13 BIT(13)
89 #define TDX_R14 BIT(14)
90 #define TDX_R15 BIT(15)
91
92 /*
93 * These registers are clobbered to hold arguments for each
94 * TDVMCALL. They are safe to expose to the VMM.
95 * Each bit in this mask represents a register ID. Bit field
96 * details can be found in TDX GHCI specification, section
97 * titled "TDCALL [TDG.VP.VMCALL] leaf".
98 */
99 #define TDVMCALL_EXPOSE_REGS_MASK \
100 (TDX_RDX | TDX_RBX | TDX_RSI | TDX_RDI | TDX_R8 | TDX_R9 | \
101 TDX_R10 | TDX_R11 | TDX_R12 | TDX_R13 | TDX_R14 | TDX_R15)
102
103 /* TDX supported page sizes from the TDX module ABI. */
104 #define TDX_PS_4K 0
105 #define TDX_PS_2M 1
106 #define TDX_PS_1G 2
107 #define TDX_PS_NR (TDX_PS_1G + 1)
108
109 #ifndef __ASSEMBLY__
110
111 #include <linux/compiler_attributes.h>
112
113 /*
114 * Used in __tdcall*() to gather the input/output registers' values of the
115 * TDCALL instruction when requesting services from the TDX module. This is a
116 * software only structure and not part of the TDX module/VMM ABI
117 */
118 struct tdx_module_args {
119 /* callee-clobbered */
120 u64 rcx;
121 u64 rdx;
122 u64 r8;
123 u64 r9;
124 /* extra callee-clobbered */
125 u64 r10;
126 u64 r11;
127 /* callee-saved + rdi/rsi */
128 u64 r12;
129 u64 r13;
130 u64 r14;
131 u64 r15;
132 u64 rbx;
133 u64 rdi;
134 u64 rsi;
135 };
136
137 /* Used to communicate with the TDX module */
138 u64 __tdcall(u64 fn, struct tdx_module_args *args);
139 u64 __tdcall_ret(u64 fn, struct tdx_module_args *args);
140 u64 __tdcall_saved_ret(u64 fn, struct tdx_module_args *args);
141
142 /* Used to request services from the VMM */
143 u64 __tdx_hypercall(struct tdx_module_args *args);
144
145 /*
146 * Wrapper for standard use of __tdx_hypercall with no output aside from
147 * return code.
148 */
_tdx_hypercall(u64 fn,u64 r12,u64 r13,u64 r14,u64 r15)149 static inline u64 _tdx_hypercall(u64 fn, u64 r12, u64 r13, u64 r14, u64 r15)
150 {
151 struct tdx_module_args args = {
152 .r10 = TDX_HYPERCALL_STANDARD,
153 .r11 = fn,
154 .r12 = r12,
155 .r13 = r13,
156 .r14 = r14,
157 .r15 = r15,
158 };
159
160 return __tdx_hypercall(&args);
161 }
162
163
164 /* Called from __tdx_hypercall() for unrecoverable failure */
165 void __noreturn __tdx_hypercall_failed(void);
166
167 bool tdx_accept_memory(phys_addr_t start, phys_addr_t end);
168
169 /*
170 * The TDG.VP.VMCALL-Instruction-execution sub-functions are defined
171 * independently from but are currently matched 1:1 with VMX EXIT_REASONs.
172 * Reusing the KVM EXIT_REASON macros makes it easier to connect the host and
173 * guest sides of these calls.
174 */
hcall_func(u64 exit_reason)175 static __always_inline u64 hcall_func(u64 exit_reason)
176 {
177 return exit_reason;
178 }
179
180 #endif /* !__ASSEMBLY__ */
181 #endif /* _ASM_X86_SHARED_TDX_H */
182