[next-6.6]Hygon: CSV3 patch series part 3 (Support live migration for Hygon CSV3 guest, and manage shared page by rbtree) · Pull Request !171 · OpenCloudOS/OpenCloudOS-Kernel

1. Patches and description:
 **crypto: ccp: Define CSV3 migration command id** 
desc: Introduce CSV3 command identifiers and data structures for migration
 **KVM: SVM: CSV: Add KVM_CSV3_SEND_ENCRYPT_DATA command** 
desc: Support migrate CSV3 guest's memory page at send side
 **KVM: SVM: CSV: Add KVM_CSV3_SEND_ENCRYPT_CONTEXT command** 
desc: Support migrate CSV3 guest's reg and control states at send side
 **KVM: SVM: CSV: Add KVM_CSV3_RECEIVE_ENCRYPT_DATA command** 
desc: Support migrate CSV3 guest's memory page at receive side
 **KVM: SVM: CSV: Add KVM_CSV3_RECEIVE_ENCRYPT_CONTEXT command** 
desc: Support migrate CSV3 guest's reg and control states at receive side
 **KVM: SVM: CSV: Add ioctl API to unpin shared pages of CSV3 guest** 
desc: Provides KVM ioctl interfaces to unpin the shared page of the CSV3 guest
 **KVM: SVM: CSV: Manage CSV3 guest's shared pages by rbtree** 
desc: Optimize the shared page management by rbtree
 **x86/mm: Merge contiguous pages into a large range when notifying pages enc status changes** 
desc: Optimize page enc/dec status notification in the guest

2. Test:
Assume HostA is the source machine, HostB is the target machine.
2.1 Do things on the HostB
2.1.1 launch a CSV3 guest
```
$ /usr/bin/qemu-system-x86_64 \
-name csv3-receive --enable-kvm -cpu host -m 6G -smp 40 \
-drive if=pflash,format=raw,unit=0,file=OVMF_CODE.fd,readonly=on \
-object sev-guest,id=sev0,policy=0x65,cbitpos=47,reduced-phys-bits=5 \
-machine memory-encryption=sev0 \
-device virtio-blk-pci,scsi=off,drive=drive0,disable-legacy=on,iommu_platform=on,bootindex=1 \
-drive file=csv3_receive.qcow2,format=qcow2,if=none,id=drive0 \
-vnc 0.0.0.0:1 -qmp tcp:localhost:4445,server,nowait \
-incoming tcp:${HostB_IP}:6666 &
```
2.1.2 Generate cert chain
```
$ sudo ./hag csv export_cert_chain
$cat hsk.cert hrk.cert > vendor_cert.bin
$cat pek.cert oca.cert cek.cert > plat_cert.bin
$cat pdh.cert > pdh.bin
$base64 -w 0 vendor_cert.bin > vendor_cert.base64
$base64 -w 0 plat_cert.bin > plat_cert.base64
$base64 -w 0 pdh.bin > pdh.base64
$sudo chmod 666 *.base64
$cp -a *.base64 /tmp
```
2.2 Do things on the HostA
2.2.1 launch a CSV3 guest, wait it into login state
```
$ /usr/bin/qemu-system-x86_64 \
-name csv3-send --enable-kvm -cpu host -m 6G -smp 40 \
-drive if=pflash,format=raw,unit=0,file=OVMF_CODE.fd,readonly=on \
-object sev-guest,id=sev0,policy=0x65,cbitpos=47,reduced-phys-bits=5 \
-machine memory-encryption=sev0 \
-device virtio-blk-pci,scsi=off,drive=drive0,disable-legacy=on,iommu_platform=on,bootindex=1 \
-drive file=csv3_send.qcow2,format=qcow2,if=none,id=drive0 \
-vnc 0.0.0.0:0 -qmp tcp:localhost:4444,server,nowait &
```
![输入图片说明](https://foruda.gitee.com/images/1716010186781070885/6484c146_7824598.png "屏幕截图")
2.2.2 Fetch cert chain from HostB
```
$ scp ${HostB_IP}:/tmp/*.base64 /tmp/
```
2.2.3 Exec migration by qemu monitor
```
$ socat - tcp:localhost:4444
{"QMP": {"version": {"qemu": {"micro": 2, "minor": 2, "major": 8}, "package": "qemu-8.2.2-3.oc9"}, "capabilities": ["oob"]}}
{"execute":"qmp_capabilities"}
{"return": {}}
{"execute":"migrate-set-parameters","arguments":{"sev-pdh":"/tmp/pdh.base64","sev-plat-cert":"/tmp/plat_cert.base64","sev-amd-cert":"/tmp/vendor_cert.base64"}}
{"return": {}}
{"execute":"migrate","arguments":{"uri":"tcp:${HostB_IP}:6666"}}
{"return": {}}
```
![输入图片说明](https://foruda.gitee.com/images/1716010303719056197/2578349d_7824598.png "屏幕截图")

类型	指派人员	状态
审查	chinaljp030 刘诗	已完成 (0/0人)
测试	chinaljp030 刘诗	已完成 (0/0人)

GVPOpenCloudOS/OpenCloudOS-Kernel

搜索帮助

GVP OpenCloudOS/OpenCloudOS-Kernel