Progress on page allocator verification

Signed-off-by: Lennard Gäher <[email protected]>

Author: lgaeher

confidential-vms/linux_vm/Makefile

@@ -14,7 +14,7 @@ LINUX_VM_ROOTFS_SOURCE_DIR			?= $(CONFIDENTIAL_VMS_LINUX_SOURCE_DIR)/hypervisor_
 LINUX_VM_BUILDROOT_SOURCE_DIR		?= $(CONFIDENTIAL_VMS_LINUX_SOURCE_DIR)/../../hypervisor/buildroot
 LINUX_VM_BUILDROOT_WORK_DIR			?= $(CONFIDENTIAL_VMS_LINUX_WORK_DIR)/buildroot
 LINUX_VM_BUILDROOT_ROOTFS			?= $(LINUX_VM_BUILDROOT_WORK_DIR)/images/rootfs.ext2
-LINUX_VM_BUILDROOT_ROOTFS_SIZE		?= "256M"
+LINUX_VM_BUILDROOT_ROOTFS_SIZE		?= "128M"
 LINUX_VM_OVERLAY_SOURCE_DIR			?= $(CONFIDENTIAL_VMS_LINUX_SOURCE_DIR)/overlay
 LINUX_VM_OVERLAY_WORK_DIR			?= $(CONFIDENTIAL_VMS_LINUX_WORK_DIR)/overlay
 LINUX_VM_OVERLAY_WORK_ROOT_DIR		?= $(LINUX_VM_OVERLAY_WORK_DIR)/root

confidential-vms/linux_vm/configurations/qemu_riscv64_virt_defconfig

@@ -34,7 +34,7 @@ BR2_TARGET_ROOTFS_EXT2=y
 BR2_TARGET_ROOTFS_EXT2_2=n
 BR2_TARGET_ROOTFS_EXT2_3=n
 BR2_TARGET_ROOTFS_EXT2_4=y
-BR2_TARGET_ROOTFS_EXT2_SIZE="5G"
+BR2_TARGET_ROOTFS_EXT2_SIZE="1G"
 
 # Kernel
 BR2_LINUX_KERNEL=y

hypervisor/Makefile

@@ -14,7 +14,7 @@ BUILDROOT_SOURCE_DIR				?= $(MAKEFILE_SOURCE_DIR)/buildroot
 HYPERVISOR_BUILDROOT_CONFIG_DIR		?= $(HYPERVISOR_CONFIGURATION_DIR)/qemu_riscv64_virt_defconfig
 HYPERVISOR_LINUX_CONFIG				?= $(HYPERVISOR_CONFIGURATION_DIR)/linux64-defconfig
 HYPERVISOR_BUILDROOT_OVERRIDE_DIR 	?= $(HYPERVISOR_CONFIGURATION_DIR)/package_override.dev
-HYPERVISOR_ROOTFS_SIZE				?= "1G"
+HYPERVISOR_ROOTFS_SIZE				?= "512M"
 HYPERVISOR_OVERLAY_DIR				?= $(HYPERVISOR_WORK_DIR)/overlay
 HYPERVISOR_OVERLAY_ROOT_DIR			?= $(HYPERVISOR_OVERLAY_DIR)/root
 HYPERVISOR_PATCHES_DIR				?= $(MAKEFILE_SOURCE_DIR)/patches

security-monitor/src/confidential_flow/handlers/shutdown/shutdown_vm.rs

@@ -14,6 +14,7 @@ use crate::core::control_data::{ConfidentialHart, ConfidentialHartRemoteCommand,
 /// shutdown (lifecycle state `Shutdown`). To do so, we send `Shutdown IPI` to all confidential harts. The last
 /// confidential hart that shutdowns itself, will remove the entire confidential VM from the control data.
 #[derive(Clone, PartialEq)]
+#[rr::skip]
 pub struct ShutdownRequest {
     calling_hart_id: usize,
 }

security-monitor/src/confidential_flow/handlers/symmetrical_multiprocessing/fence_i.rs

@@ -10,6 +10,7 @@ use crate::core::control_data::{
 
 /// Handles a request from one confidential hart to execute fence.i instruction on remote confidential harts.
 #[derive(Clone, PartialEq)]
+#[rr::skip]
 pub struct RemoteFenceI {
     ipi: Ipi,
 }

security-monitor/src/confidential_flow/handlers/symmetrical_multiprocessing/hfence_gvma_vmid.rs

@@ -8,6 +8,7 @@ use crate::core::memory_layout::ConfidentialVmPhysicalAddress;
 
 /// An inter hart request sent by the security monitor to clear G-stage level cached address translations.
 #[derive(Clone, PartialEq)]
+#[rr::skip]
 pub struct RemoteHfenceGvmaVmid {
     ipi: Ipi,
     _start_address: Option<ConfidentialVmPhysicalAddress>,

security-monitor/src/confidential_flow/handlers/symmetrical_multiprocessing/ipi.rs

@@ -10,6 +10,7 @@ use crate::core::control_data::{
 
 /// Handles a request from one confidential hart to execute IPI on other confidential harts.
 #[derive(PartialEq, Debug, Clone)]
+#[rr::skip]
 pub struct Ipi {
     hart_mask: usize,
     hart_mask_base: usize,

security-monitor/src/confidential_flow/handlers/symmetrical_multiprocessing/sfence_vma.rs

@@ -11,6 +11,7 @@ use crate::core::control_data::{
 
 /// Handles a request from one confidential hart to execute sfence.vma instruction on remote confidential harts.
 #[derive(Clone, PartialEq)]
+#[rr::skip]
 pub struct RemoteSfenceVma {
     ipi: Ipi,
     _start_address: usize,

security-monitor/src/confidential_flow/handlers/symmetrical_multiprocessing/sfence_vma_asid.rs

@@ -12,6 +12,7 @@ use crate::core::control_data::{
 /// Handles a request from one confidential hart to execute sfence.vma instruction on remote confidential harts. It represents an inter hart
 /// request.
 #[derive(Clone, PartialEq)]
+#[rr::skip]
 pub struct RemoteSfenceVmaAsid {
     ipi: Ipi,
     _start_address: usize,

security-monitor/src/core/architecture/riscv/control_status_registers.rs

@@ -314,6 +314,7 @@ pub const CSR: &ControlStatusRegister = &ControlStatusRegister {
 };
 
 #[derive(Copy, Clone)]
+#[rr::skip]
 pub struct ReadWriteRiscvCsr<const V: u16>(usize);
 
 impl<const V: u16> ReadWriteRiscvCsr<V> {