NVIDIA: add Arm CCA Realm and RME device-assignment support - #40

Open

ianm-nv wants to merge 44 commits into

NVIDIA:nvidia_unstable-11.0from

ianm-nv:nvidia_unstable-11.0+cca/latest

Commits on Sep 10, 2026

NVIDIA: SAUCE: linux-headers: Add RME related definitions

Jean-Philippe Brucker
authored and
ianm-nv
committed
0ac5408
NVIDIA: SAUCE: target/arm/kvm: Return immediately on error in kvm_arch_init()

Jean-Philippe Brucker
authored and
ianm-nv
committed
3bb2036
NVIDIA: SAUCE: target/arm: Add confidential guest support

Jean-Philippe Brucker
authored and
ianm-nv
committed
ce04135
NVIDIA: SAUCE: target/arm/kvm-rme: Add mechanic to initialize realms

mathieupoirier
authored and
ianm-nv
committed
4e0578e
NVIDIA: SAUCE: target/arm/kvm: Split kvm_arch_get/put_registers

Jean-Philippe Brucker
authored and
ianm-nv
committed
2f3d762
NVIDIA: SAUCE: target/arm/kvm-rme: Initialize vCPU

Jean-Philippe Brucker
authored and
ianm-nv
committed
e98829e
NVIDIA: SAUCE: target/arm/kvm: Create scratch Realm VM when requested

Jean-Philippe Brucker
authored and
ianm-nv
committed
09a6806
NVIDIA: SAUCE: target/arm/kvm: Use kvm_vm_check_extension() where necessary

Jean-Philippe Brucker
authored and
ianm-nv
committed
5f36350
NVIDIA: SAUCE: hw/core/loader: Add a ROM loader notifier

Jean-Philippe Brucker
authored and
ianm-nv
committed
25e234b
NVIDIA: SAUCE: target/arm/kvm-rme: Keep track of images loaded in Realm memory

Jean-Philippe Brucker
authored and
ianm-nv
committed
c425e54
NVIDIA: SAUCE: target/arm/kvm-rme: Populate Realm with runtime images

Jean-Philippe Brucker
authored and
ianm-nv
committed
464d18f
NVIDIA: SAUCE: target/arm/cpu: Set number of breakpoints and watchpoints in KVM

Jean-Philippe Brucker
authored and
ianm-nv
committed
0fdf517
NVIDIA: SAUCE: target/arm/cpu: Set number of PMU counters in KVM

Jean-Philippe Brucker
authored and
ianm-nv
committed
f20e586
NVIDIA: SAUCE: target/arm/cpu: Don't read Realm registers

Jean-Philippe Brucker
authored and
ianm-nv
committed
5d4d9bc
NVIDIA: SAUCE: hw/arm/virt: Set proper conduit method for Realms

Jean-Philippe Brucker
authored and
ianm-nv
committed
4ecd8ef
NVIDIA: SAUCE: hw/arm/virt: Embed Realm VM type with IPA address space

Jean-Philippe Brucker
authored and
ianm-nv
committed
594426e
NVIDIA: SAUCE: hw/arm/virt: Reserve one bit of guest physical address for RME

Jean-Philippe Brucker
authored and
ianm-nv
committed
71afe1b
NVIDIA: SAUCE: hw/arm/virt: Disable DTB randomness for confidential VMs

Jean-Philippe Brucker
authored and
ianm-nv
committed
ab6aed2
NVIDIA: SAUCE: hw/arm/virt: Move virt_flash_create() to machvirt_init()

Jean-Philippe Brucker
authored and
ianm-nv
committed
896eae7
NVIDIA: SAUCE: hw/arm/virt: Use RAM instead of flash for confidential guest firmware

Jean-Philippe Brucker
authored and
ianm-nv
committed
ad06de2
NVIDIA: SAUCE: target/arm/kvm-rme: Add DMA remapping for the shared memory region

Jean-Philippe Brucker
authored and
ianm-nv
committed
7b3a9f3
NVIDIA: SAUCE: docs/interop/firmware.json: Add arm-rme firmware feature

Jean-Philippe Brucker
authored and
ianm-nv
committed
fcceb67
NVIDIA: SAUCE: hw/arm/boot: Load DTB as is for confidential VMs

Jean-Philippe Brucker
authored and
ianm-nv
committed
0b8453e
NVIDIA: SAUCE: hw/arm/boot: Skip bootloader for confidential guests

Jean-Philippe Brucker
authored and
ianm-nv
committed
7edd474
NVIDIA: SAUCE: accel/kvm: Add kvm_guest_state_protected() helper

jodh-nvidia
authored and
ianm-nv
committed
c241098
NVIDIA: SAUCE: target/arm/kvm-rme: only activate a Realm once

jodh-nvidia
authored and
ianm-nv
committed
de29a7d
NVIDIA: SAUCE: linux-headers: encode ARM VM type in bits[11:8]
ianm-nv
committed
fb38e94
NVIDIA: SAUCE: arm/kvm: align Realm capability and vCPU setup with KVM
ianm-nv
committed
a031cec
NVIDIA: SAUCE: hw/arm: validate Realm firmware and DTB loading
ianm-nv
committed
f517ec4
NVIDIA: SAUCE: hw/arm/virt: validate Realm machine configuration
ianm-nv
committed
dd8766d
NVIDIA: SAUCE: arm: fix Realm DMA address-space setup
ianm-nv
committed
5379e9f
NVIDIA: SAUCE: accel/kvm: reject partial memory conversion
ianm-nv
committed
25a2a71
NVIDIA: SAUCE: target/arm/kvm-rme: snapshot Realm images safely
ianm-nv
committed
835c4a1
NVIDIA: SAUCE: qapi: add CCA capability query for libvirt
ianm-nv
committed
346dc1d
NVIDIA: SAUCE: linux-headers: add Arm CCA device assignment UAPI

amerilainen
authored and
ianm-nv
committed
c3ae3c8
NVIDIA: SAUCE: system/ram-block-attributes: serialize updates
ianm-nv
committed
164b38d
NVIDIA: SAUCE: accel/kvm: set assigned-memory attributes

amerilainen
authored and
ianm-nv
committed
8b1d90c
NVIDIA: SAUCE: vfio/iommufd: support Arm RME device assignment

amerilainen
authored and
ianm-nv
committed
c3b9fdc
NVIDIA: SAUCE: target/arm/kvm: handle RME-DA exits

amerilainen
authored and
ianm-nv
committed
ef5ab89
NVIDIA: SAUCE: arm/kvm-rme: fix Realm DMA lifetime and mappings
ianm-nv
committed
477cf9e
NVIDIA: SAUCE: vfio: fail closed on Realm DMA map errors
ianm-nv
committed
a32539f
NVIDIA: SAUCE: target/arm/kvm-rme: split population at RAM boundaries
ianm-nv
committed
ba20cef
NVIDIA: SAUCE: hw/core/loader: preserve sparse ROM notifier data
ianm-nv
committed
65630bc

Commits on Sep 11, 2026

NVIDIA: SAUCE: target/arm/kvm: align RHI-DA calls with beta1
ianm-nv
committed
b987c80