containers / libkrun

A dynamic library providing Virtualization-based process isolation capabilities
Apache License 2.0
807 stars 67 forks source link

Add support for arm cca #211

Open MatiasVara opened 1 month ago

MatiasVara commented 1 month ago

This PR aims at adding support to build realm guests. First commit adds support for create_guest_memfd() and set_user_memory_region2(). To do this, the memory_init() is modified by adding a boolean parameter. This is required when building a confidential guest for arm cca and probably also required by other technos. Note that set_user_memory_region2() fails if type == KVM_X86_SW_PROTECTED_VM in x86, or a realm in aarch64. The second commit imports the virtee/cca crate and add the steps to build a cca guest. This is a very early draft. Feedback is welcome.