test: enable secret freedom in uffd tests

This includes both functional and performance tests.

Signed-off-by: Nikita Kalyazin <[email protected]>

Author: kalyazin

tests/integration_tests/functional/test_uffd.py

@@ -12,12 +12,12 @@
 
 
 @pytest.fixture(scope="function", name="snapshot")
-def snapshot_fxt(microvm_factory, guest_kernel_linux_5_10, rootfs):
+def snapshot_fxt(microvm_factory, guest_kernel_linux_5_10, rootfs, secret_free):
     """Create a snapshot of a microVM."""
 
     basevm = microvm_factory.build(guest_kernel_linux_5_10, rootfs)
     basevm.spawn()
-    basevm.basic_config(vcpu_count=2, mem_size_mib=256)
+    basevm.basic_config(vcpu_count=2, mem_size_mib=256, secret_free=secret_free)
     basevm.add_net_iface()
 
     # Add a memory balloon.

tests/integration_tests/performance/test_snapshot.py

@@ -44,7 +44,9 @@ def id(self):
         """Computes a unique id for this test instance"""
         return "all_dev" if self.all_devices else f"{self.vcpus}vcpu_{self.mem}mb"
 
-    def boot_vm(self, microvm_factory, guest_kernel, rootfs, pci_enabled) -> Microvm:
+    def boot_vm(
+        self, microvm_factory, guest_kernel, rootfs, pci_enabled, secret_free
+    ) -> Microvm:
         """Creates the initial snapshot that will be loaded repeatedly to sample latencies"""
         vm = microvm_factory.build(
             guest_kernel,
@@ -59,6 +61,7 @@ def boot_vm(self, microvm_factory, guest_kernel, rootfs, pci_enabled) -> Microvm
             mem_size_mib=self.mem,
             rootfs_io_engine="Sync",
             huge_pages=self.huge_pages,
+            secret_free=secret_free,
         )
 
         for _ in range(self.nets):
@@ -107,7 +110,7 @@ def test_restore_latency(
     We only test a single guest kernel, as the guest kernel does not "participate" in snapshot restore.
     """
     vm = test_setup.boot_vm(
-        microvm_factory, guest_kernel_linux_5_10, rootfs, pci_enabled
+        microvm_factory, guest_kernel_linux_5_10, rootfs, pci_enabled, False
     )
 
     metrics.set_dimensions(
@@ -154,14 +157,21 @@ def test_post_restore_latency(
     metrics,
     uffd_handler,
     huge_pages,
+    secret_free,
 ):
     """Collects latency metric of post-restore memory accesses done inside the guest"""
     if huge_pages != HugePagesConfig.NONE and uffd_handler is None:
         pytest.skip("huge page snapshots can only be restored using uffd")
 
+    if secret_free and uffd_handler is None:
+        pytest.skip("Restoring from a file is not compatible with Secret Freedom")
+
+    if secret_free and huge_pages != HugePagesConfig.NONE:
+        pytest.skip("Huge pages are not supported with Secret Freedom yet")
+
     test_setup = SnapshotRestoreTest(mem=1024, vcpus=2, huge_pages=huge_pages)
     vm = test_setup.boot_vm(
-        microvm_factory, guest_kernel_linux_5_10, rootfs, pci_enabled
+        microvm_factory, guest_kernel_linux_5_10, rootfs, pci_enabled, secret_free
     )
 
     metrics.set_dimensions(
@@ -215,11 +225,15 @@ def test_population_latency(
     huge_pages,
     vcpus,
     mem,
+    secret_free,
 ):
     """Collects population latency metrics (e.g. how long it takes UFFD handler to fault in all memory)"""
+    if secret_free and huge_pages != HugePagesConfig.NONE:
+        pytest.skip("Huge pages are not supported with Secret Freedom yet")
+
     test_setup = SnapshotRestoreTest(mem=mem, vcpus=vcpus, huge_pages=huge_pages)
     vm = test_setup.boot_vm(
-        microvm_factory, guest_kernel_linux_5_10, rootfs, pci_enabled
+        microvm_factory, guest_kernel_linux_5_10, rootfs, pci_enabled, secret_free
     )
 
     metrics.set_dimensions(
@@ -267,15 +281,21 @@ def test_snapshot_create_latency(
     uvm_plain,
     metrics,
     snapshot_type,
+    secret_free,
 ):
     """Measure the latency of creating a Full snapshot"""
 
+    if secret_free and snapshot_type.needs_dirty_page_tracking:
+        pytest.skip("secret freedom and dirty pgae tracking are mutually exclusive")
+
     vm = uvm_plain
+    vm.memory_monitor = None
     vm.spawn()
     vm.basic_config(
         vcpu_count=2,
         mem_size_mib=512,
         track_dirty_pages=snapshot_type.needs_dirty_page_tracking,
+        secret_free=secret_free,
     )
     vm.start()
     vm.pin_threads(0)