This PR aims at adding support to build realm guests. First commit adds support for create_guest_memfd() and set_user_memory_region2(). To do this, the memory_init() is modified by adding a boolean parameter. This is required when building a confidential guest for arm cca and probably also required by other technos. Note that set_user_memory_region2() fails if type == KVM_X86_SW_PROTECTED_VM in x86, or a realm in aarch64.
The second commit imports the virtee/cca crate and add the steps to build a cca guest. This is a very early draft. Feedback is welcome.
This PR aims at adding support to build realm guests. First commit adds support for
create_guest_memfd()
andset_user_memory_region2()
. To do this, thememory_init()
is modified by adding a boolean parameter. This is required when building a confidential guest for arm cca and probably also required by other technos. Note thatset_user_memory_region2()
fails iftype == KVM_X86_SW_PROTECTED_VM
in x86, or a realm in aarch64. The second commit imports the virtee/cca crate and add the steps to build a cca guest. This is a very early draft. Feedback is welcome.