1b2441318SGreg Kroah-Hartman# SPDX-License-Identifier: GPL-2.0 2edf88417SAvi Kivity# 3edf88417SAvi Kivity# KVM configuration 4edf88417SAvi Kivity# 5edf88417SAvi Kivity 60ba12d10SAvi Kivitysource "virt/kvm/Kconfig" 75d9b8e30SAvi Kivity 8edf88417SAvi Kivitymenuconfig VIRTUALIZATION 9edf88417SAvi Kivity bool "Virtualization" 10edf88417SAvi Kivity depends on HAVE_KVM || X86 11edf88417SAvi Kivity default y 12a7f7f624SMasahiro Yamada help 13edf88417SAvi Kivity Say Y here to get to see options for using your Linux host to run other 14edf88417SAvi Kivity operating systems inside virtual machines (guests). 15edf88417SAvi Kivity This option alone does not add any kernel code. 16edf88417SAvi Kivity 17edf88417SAvi Kivity If you say N, all options in this submenu will be skipped and disabled. 18edf88417SAvi Kivity 19edf88417SAvi Kivityif VIRTUALIZATION 20edf88417SAvi Kivity 21edf88417SAvi Kivityconfig KVM 22edf88417SAvi Kivity tristate "Kernel-based Virtual Machine (KVM) support" 23268fe02aSAvi Kivity depends on HAVE_KVM 2492b5265dSLiu, Jinsong depends on HIGH_RES_TIMERS 25e42eef4bSArnd Bergmann depends on X86_LOCAL_APIC 26edf88417SAvi Kivity select PREEMPT_NOTIFIERS 27cddb8a5cSAndrea Arcangeli select MMU_NOTIFIER 280ba12d10SAvi Kivity select HAVE_KVM_IRQCHIP 29982ed0deSDavid Woodhouse select HAVE_KVM_PFNCACHE 30297e2105SPaul Mackerras select HAVE_KVM_IRQFD 3117601bfeSMarc Zyngier select HAVE_KVM_DIRTY_RING_TSO 32fc0693d4SMarc Zyngier select HAVE_KVM_DIRTY_RING_ACQ_REL 3387276880SFeng Wu select IRQ_BYPASS_MANAGER 3487276880SFeng Wu select HAVE_KVM_IRQ_BYPASS 35a725d56aSAlexander Graf select HAVE_KVM_IRQ_ROUTING 36721eecbfSGregory Haskins select HAVE_KVM_EVENTFD 37af585b92SGleb Natapov select KVM_ASYNC_PF 3818863bddSAvi Kivity select USER_RETURN_NOTIFIER 3950eb2a3cSAvi Kivity select KVM_MMIO 4063b3f96eSPeter Zijlstra select SCHED_INFO 41f5132b01SGleb Natapov select PERF_EVENTS 422aef6f30SSean Christopherson select GUEST_PERF_EVENTS 4307975ad3SJan Kiszka select HAVE_KVM_MSI 44f2a74347SRaghavendra K T select HAVE_KVM_CPU_RELAX_INTERCEPT 452d5ba19bSMarcelo Tosatti select HAVE_KVM_NO_POLL 4672c3c0feSThomas Gleixner select KVM_XFER_TO_GUEST_WORK 47e108ff2fSPaolo Bonzini select KVM_GENERIC_DIRTYLOG_READ_PROTECT 48ec53500fSAlex Williamson select KVM_VFIO 4983fe27eaSPranith Kumar select SRCU 50ed922739SMaciej S. Szmigiero select INTERVAL_TREE 517d62874fSSergey Senozhatsky select HAVE_KVM_PM_NOTIFIER if PM 52*441f7bfaSSean Christopherson select KVM_GENERIC_HARDWARE_ENABLING 53a7f7f624SMasahiro Yamada help 54edf88417SAvi Kivity Support hosting fully virtualized guest machines using hardware 55edf88417SAvi Kivity virtualization extensions. You will need a fairly recent 56edf88417SAvi Kivity processor equipped with virtualization extensions. You will also 57edf88417SAvi Kivity need to select one or more of the processor modules below. 58edf88417SAvi Kivity 59edf88417SAvi Kivity This module provides access to the hardware capabilities through 60edf88417SAvi Kivity a character device node named /dev/kvm. 61edf88417SAvi Kivity 62edf88417SAvi Kivity To compile this as a module, choose M here: the module 63edf88417SAvi Kivity will be called kvm. 64edf88417SAvi Kivity 65edf88417SAvi Kivity If unsure, say N. 66edf88417SAvi Kivity 674f337fafSPaolo Bonziniconfig KVM_WERROR 684f337fafSPaolo Bonzini bool "Compile KVM with -Werror" 694f337fafSPaolo Bonzini # KASAN may cause the build to fail due to larger frames 704f337fafSPaolo Bonzini default y if X86_64 && !KASAN 714f337fafSPaolo Bonzini # We use the dependency on !COMPILE_TEST to not be enabled 724f337fafSPaolo Bonzini # blindly in allmodconfig or allyesconfig configurations 738f116a6cSMatteo Croce depends on KVM 744f337fafSPaolo Bonzini depends on (X86_64 && !KASAN) || !COMPILE_TEST 754f337fafSPaolo Bonzini depends on EXPERT 764f337fafSPaolo Bonzini help 77a754acc3SJason A. Donenfeld Add -Werror to the build flags for KVM. 784f337fafSPaolo Bonzini 794f337fafSPaolo Bonzini If in doubt, say "N". 804f337fafSPaolo Bonzini 81edf88417SAvi Kivityconfig KVM_INTEL 828f63aaf5SSean Christopherson tristate "KVM for Intel (and compatible) processors support" 838f63aaf5SSean Christopherson depends on KVM && IA32_FEAT_CTL 84a7f7f624SMasahiro Yamada help 858f63aaf5SSean Christopherson Provides support for KVM on processors equipped with Intel's VT 868f63aaf5SSean Christopherson extensions, a.k.a. Virtual Machine Extensions (VMX). 87edf88417SAvi Kivity 8858f8ac27SRobert P. J. Day To compile this as a module, choose M here: the module 8958f8ac27SRobert P. J. Day will be called kvm-intel. 9058f8ac27SRobert P. J. Day 91540745ddSSean Christophersonconfig X86_SGX_KVM 92540745ddSSean Christopherson bool "Software Guard eXtensions (SGX) Virtualization" 93540745ddSSean Christopherson depends on X86_SGX && KVM_INTEL 94540745ddSSean Christopherson help 95540745ddSSean Christopherson 96540745ddSSean Christopherson Enables KVM guests to create SGX enclaves. 97540745ddSSean Christopherson 98540745ddSSean Christopherson This includes support to expose "raw" unreclaimable enclave memory to 99540745ddSSean Christopherson guests via a device node, e.g. /dev/sgx_vepc. 100540745ddSSean Christopherson 101540745ddSSean Christopherson If unsure, say N. 102540745ddSSean Christopherson 103edf88417SAvi Kivityconfig KVM_AMD 104edf88417SAvi Kivity tristate "KVM for AMD processors support" 105edf88417SAvi Kivity depends on KVM 106a7f7f624SMasahiro Yamada help 107edf88417SAvi Kivity Provides support for KVM on AMD processors equipped with the AMD-V 108edf88417SAvi Kivity (SVM) extensions. 109edf88417SAvi Kivity 11058f8ac27SRobert P. J. Day To compile this as a module, choose M here: the module 11158f8ac27SRobert P. J. Day will be called kvm-amd. 11258f8ac27SRobert P. J. Day 1135dd0a57cSBrijesh Singhconfig KVM_AMD_SEV 1145dd0a57cSBrijesh Singh def_bool y 1155dd0a57cSBrijesh Singh bool "AMD Secure Encrypted Virtualization (SEV) support" 1165dd0a57cSBrijesh Singh depends on KVM_AMD && X86_64 117d30f370dSJanakarajan Natarajan depends on CRYPTO_DEV_SP_PSP && !(KVM_AMD=y && CRYPTO_DEV_CCP_DD=m) 118a7f7f624SMasahiro Yamada help 119916391a2STom Lendacky Provides support for launching Encrypted VMs (SEV) and Encrypted VMs 120916391a2STom Lendacky with Encrypted State (SEV-ES) on AMD processors. 1215dd0a57cSBrijesh Singh 1224b8e1b32SPaolo Bonziniconfig KVM_SMM 1234b8e1b32SPaolo Bonzini bool "System Management Mode emulation" 1244b8e1b32SPaolo Bonzini default y 1254b8e1b32SPaolo Bonzini depends on KVM 1264b8e1b32SPaolo Bonzini help 1274b8e1b32SPaolo Bonzini Provides support for KVM to emulate System Management Mode (SMM) 1284b8e1b32SPaolo Bonzini in virtual machines. This can be used by the virtual machine 1294b8e1b32SPaolo Bonzini firmware to implement UEFI secure boot. 1304b8e1b32SPaolo Bonzini 1314b8e1b32SPaolo Bonzini If unsure, say Y. 1324b8e1b32SPaolo Bonzini 133b59b153dSPaolo Bonziniconfig KVM_XEN 134b59b153dSPaolo Bonzini bool "Support for Xen hypercall interface" 135b59b153dSPaolo Bonzini depends on KVM 136b59b153dSPaolo Bonzini help 137b59b153dSPaolo Bonzini Provides KVM support for the hosting Xen HVM guests and 138b59b153dSPaolo Bonzini passing Xen hypercalls to userspace. 139b59b153dSPaolo Bonzini 140b59b153dSPaolo Bonzini If in doubt, say "N". 141b59b153dSPaolo Bonzini 142e9d0c0c4SDavid Stevensconfig KVM_EXTERNAL_WRITE_TRACKING 143e9d0c0c4SDavid Stevens bool 144e9d0c0c4SDavid Stevens 145edf88417SAvi Kivityendif # VIRTUALIZATION 146