[WIP] rebase of feature/secret-hiding onto main#5379

Closed

roypat wants to merge 58 commits intofirecracker-microvm:mainfrom

roypat:sh_rebased

Commits on Aug 14, 2025

ci: Create script for installing custom kernel

JackThomson2
authored and
roypat
committed
test: Add test for kernel build

JackThomson2
authored and
roypat
committed
ci: Add secret hiding kernel to defaults buildkite

JackThomson2
authored and
roypat
committed
tests: Mark kernels newer than 6.12 as next

JackThomson2
authored and
roypat
committed
ci: Move away from using dir stacks

JackThomson2
authored and
roypat
committed
tests(bk): Run the kernel build in our nightly PR

JackThomson2
authored and
roypat
committed
ci: Add linux patches for secret hiding
roypat
committed
fix(ci): actually test kernel builds if patches are added
roypat
committed
ci: Update script to install for AL23

JackThomson2
authored and
roypat
committed
ci: Update the script to support x86 on AL23

JackThomson2
authored and
roypat
committed
fix: test_hiding_kernel.py

bchalios
authored and
roypat
committed
chore: allow clippy::needless_update
roypat
committed
refactor(test): Move MachineConfig::update tests to machine_config.rs
roypat
committed
add helper for Read/Write[Volatile] through bounce buffer
roypat
committed
allow persistent bounce buffers in MaybeBounce
roypat
committed
implement userspace bounce buffering support
roypat
committed
ci: dont fail downloading artifacts if no firecracker binaries exist
roypat
committed
add Vm::create_guest_memfd
roypat
committed
refactor: generify "these features are incompatible" error variants
roypat
committed
add "secret_free" parameter to /machine-config endpoint
roypat
committed
use bounce buffers for loading kernel if secret freedom is enabled
roypat
committed
use userspace bounce buffers if secret freedom is enabled
roypat
committed
switch to using kvm_userspace_region2
roypat
committed
tmp: call mmap outselves
roypat
committed
add concept of "secret free" VMs
roypat
committed
Use guest_memfd to back memory if secret freedom is enabled
roypat
committed
allow creation of snapshots of secret hidden VMs
roypat
committed
fix: Stop the scan for vmlinux failing

JackThomson2
authored and
roypat
committed
chore(hiding_ci): skip non-patch files when applying

kalyazin
authored and
roypat
committed
test: run throughput perf tests with secret freedom enabled
roypat
committed
test: add functional tests for booting secret free VMs
roypat
committed
test: disable memory monitor in boottime tests
roypat
committed
ci: Use AL23 for secret hiding CI

JackThomson2
authored and
roypat
committed
ci: Include config in boot directory

JackThomson2
authored and
roypat
committed
hiding_ci: remove support for everything but .patch files
roypat
committed
test(uffd_utils): add protocol definitions for secret freedom

kalyazin
authored and
roypat
committed
test(uffd_utils): add UserfaultBitmap

kalyazin
authored and
roypat
committed
test(uffd_utils): accept guest_memfd and bitmap memfd

kalyazin
and
roypat
committed
test(uffd_utils): add handling for FaultRequest in secret freedom

kalyazin
authored and
roypat
committed
feat(vmm): add secret free userfault definitions

kalyazin
authored and
roypat
committed
feat(vmm): extend register_memory_regions with userfault bitmap

kalyazin
authored and
roypat
committed
feat(vmm): configure kvm userfault if secret free is enabled

kalyazin
authored and
roypat
committed
feat(vmm): add offset/gpa conversion functions

kalyazin
authored and
roypat
committed
feat(vmm): implement secret-free fault handling protocol

kalyazin
authored and
roypat
committed
chore(vmm): prohibit restoring from a file if secret free

kalyazin
authored and
roypat
committed
test: enable secret freedom in uffd tests

kalyazin
authored and
roypat
committed
test(uffd/valid_handler): do not use balloon if secret free

kalyazin
authored and
roypat
committed
test: update expected error strings

kalyazin
authored and
roypat
committed
tmp(test/api): disable x86 tests that use reboot

kalyazin
authored and
roypat
committed
tmp: Stop tweaking turbo/pstates in perf tests
roypat
committed
fix: pass -y to yum in build_and_install_kernel.sh
roypat
committed
example(uffd): dont panic if read(2) from uffd returns -EAGAIN
roypat
committed
fix(ci): Dont run functional tests if changing patch series
roypat
committed
fix(vmm): propagate errors in secret freedom

kalyazin
authored and
roypat
committed
fix(vmm): do not unwrap in gpa_to_offset

kalyazin
authored and
roypat
committed
fix(vmm): write_all in process_vcpu_userfault

kalyazin
authored and
roypat
committed
fix(vmm): handle EINTR in process_uffd_socket

kalyazin
authored and
roypat
committed
fix(vmm): simplify vcpus_handles dereferencing in process_uffd_socket

kalyazin
authored and
roypat
committed