xref: /openbmc/linux/arch/x86/kvm/Kconfig (revision 540745ddbc70eabdc7dbd3fcc00fe4fb17cd59ba)
1b2441318SGreg Kroah-Hartman# SPDX-License-Identifier: GPL-2.0
2edf88417SAvi Kivity#
3edf88417SAvi Kivity# KVM configuration
4edf88417SAvi Kivity#
5edf88417SAvi Kivity
60ba12d10SAvi Kivitysource "virt/kvm/Kconfig"
75d9b8e30SAvi Kivity
8edf88417SAvi Kivitymenuconfig VIRTUALIZATION
9edf88417SAvi Kivity	bool "Virtualization"
10edf88417SAvi Kivity	depends on HAVE_KVM || X86
11edf88417SAvi Kivity	default y
12a7f7f624SMasahiro Yamada	help
13edf88417SAvi Kivity	  Say Y here to get to see options for using your Linux host to run other
14edf88417SAvi Kivity	  operating systems inside virtual machines (guests).
15edf88417SAvi Kivity	  This option alone does not add any kernel code.
16edf88417SAvi Kivity
17edf88417SAvi Kivity	  If you say N, all options in this submenu will be skipped and disabled.
18edf88417SAvi Kivity
19edf88417SAvi Kivityif VIRTUALIZATION
20edf88417SAvi Kivity
21edf88417SAvi Kivityconfig KVM
22edf88417SAvi Kivity	tristate "Kernel-based Virtual Machine (KVM) support"
23268fe02aSAvi Kivity	depends on HAVE_KVM
2492b5265dSLiu, Jinsong	depends on HIGH_RES_TIMERS
25df3d8ae1SRandy Dunlap	# for TASKSTATS/TASK_DELAY_ACCT:
26c2ce3f5dSArnd Bergmann	depends on NET && MULTIUSER
27e42eef4bSArnd Bergmann	depends on X86_LOCAL_APIC
28edf88417SAvi Kivity	select PREEMPT_NOTIFIERS
29cddb8a5cSAndrea Arcangeli	select MMU_NOTIFIER
300ba12d10SAvi Kivity	select HAVE_KVM_IRQCHIP
31297e2105SPaul Mackerras	select HAVE_KVM_IRQFD
3287276880SFeng Wu	select IRQ_BYPASS_MANAGER
3387276880SFeng Wu	select HAVE_KVM_IRQ_BYPASS
34a725d56aSAlexander Graf	select HAVE_KVM_IRQ_ROUTING
35721eecbfSGregory Haskins	select HAVE_KVM_EVENTFD
36af585b92SGleb Natapov	select KVM_ASYNC_PF
3718863bddSAvi Kivity	select USER_RETURN_NOTIFIER
3850eb2a3cSAvi Kivity	select KVM_MMIO
39fd079facSRandy Dunlap	select TASKSTATS
40c9aaa895SGlauber Costa	select TASK_DELAY_ACCT
41f5132b01SGleb Natapov	select PERF_EVENTS
4207975ad3SJan Kiszka	select HAVE_KVM_MSI
43f2a74347SRaghavendra K T	select HAVE_KVM_CPU_RELAX_INTERCEPT
442d5ba19bSMarcelo Tosatti	select HAVE_KVM_NO_POLL
4572c3c0feSThomas Gleixner	select KVM_XFER_TO_GUEST_WORK
46e108ff2fSPaolo Bonzini	select KVM_GENERIC_DIRTYLOG_READ_PROTECT
47ec53500fSAlex Williamson	select KVM_VFIO
4883fe27eaSPranith Kumar	select SRCU
49a7f7f624SMasahiro Yamada	help
50edf88417SAvi Kivity	  Support hosting fully virtualized guest machines using hardware
51edf88417SAvi Kivity	  virtualization extensions.  You will need a fairly recent
52edf88417SAvi Kivity	  processor equipped with virtualization extensions. You will also
53edf88417SAvi Kivity	  need to select one or more of the processor modules below.
54edf88417SAvi Kivity
55edf88417SAvi Kivity	  This module provides access to the hardware capabilities through
56edf88417SAvi Kivity	  a character device node named /dev/kvm.
57edf88417SAvi Kivity
58edf88417SAvi Kivity	  To compile this as a module, choose M here: the module
59edf88417SAvi Kivity	  will be called kvm.
60edf88417SAvi Kivity
61edf88417SAvi Kivity	  If unsure, say N.
62edf88417SAvi Kivity
634f337fafSPaolo Bonziniconfig KVM_WERROR
644f337fafSPaolo Bonzini	bool "Compile KVM with -Werror"
654f337fafSPaolo Bonzini	# KASAN may cause the build to fail due to larger frames
664f337fafSPaolo Bonzini	default y if X86_64 && !KASAN
674f337fafSPaolo Bonzini	# We use the dependency on !COMPILE_TEST to not be enabled
684f337fafSPaolo Bonzini	# blindly in allmodconfig or allyesconfig configurations
698f116a6cSMatteo Croce	depends on KVM
704f337fafSPaolo Bonzini	depends on (X86_64 && !KASAN) || !COMPILE_TEST
714f337fafSPaolo Bonzini	depends on EXPERT
724f337fafSPaolo Bonzini	help
73a754acc3SJason A. Donenfeld	  Add -Werror to the build flags for KVM.
744f337fafSPaolo Bonzini
754f337fafSPaolo Bonzini	  If in doubt, say "N".
764f337fafSPaolo Bonzini
77edf88417SAvi Kivityconfig KVM_INTEL
788f63aaf5SSean Christopherson	tristate "KVM for Intel (and compatible) processors support"
798f63aaf5SSean Christopherson	depends on KVM && IA32_FEAT_CTL
80a7f7f624SMasahiro Yamada	help
818f63aaf5SSean Christopherson	  Provides support for KVM on processors equipped with Intel's VT
828f63aaf5SSean Christopherson	  extensions, a.k.a. Virtual Machine Extensions (VMX).
83edf88417SAvi Kivity
8458f8ac27SRobert P. J. Day	  To compile this as a module, choose M here: the module
8558f8ac27SRobert P. J. Day	  will be called kvm-intel.
8658f8ac27SRobert P. J. Day
87*540745ddSSean Christophersonconfig X86_SGX_KVM
88*540745ddSSean Christopherson	bool "Software Guard eXtensions (SGX) Virtualization"
89*540745ddSSean Christopherson	depends on X86_SGX && KVM_INTEL
90*540745ddSSean Christopherson	help
91*540745ddSSean Christopherson
92*540745ddSSean Christopherson	  Enables KVM guests to create SGX enclaves.
93*540745ddSSean Christopherson
94*540745ddSSean Christopherson	  This includes support to expose "raw" unreclaimable enclave memory to
95*540745ddSSean Christopherson	  guests via a device node, e.g. /dev/sgx_vepc.
96*540745ddSSean Christopherson
97*540745ddSSean Christopherson	  If unsure, say N.
98*540745ddSSean Christopherson
99edf88417SAvi Kivityconfig KVM_AMD
100edf88417SAvi Kivity	tristate "KVM for AMD processors support"
101edf88417SAvi Kivity	depends on KVM
102a7f7f624SMasahiro Yamada	help
103edf88417SAvi Kivity	  Provides support for KVM on AMD processors equipped with the AMD-V
104edf88417SAvi Kivity	  (SVM) extensions.
105edf88417SAvi Kivity
10658f8ac27SRobert P. J. Day	  To compile this as a module, choose M here: the module
10758f8ac27SRobert P. J. Day	  will be called kvm-amd.
10858f8ac27SRobert P. J. Day
1095dd0a57cSBrijesh Singhconfig KVM_AMD_SEV
1105dd0a57cSBrijesh Singh	def_bool y
1115dd0a57cSBrijesh Singh	bool "AMD Secure Encrypted Virtualization (SEV) support"
1125dd0a57cSBrijesh Singh	depends on KVM_AMD && X86_64
113d30f370dSJanakarajan Natarajan	depends on CRYPTO_DEV_SP_PSP && !(KVM_AMD=y && CRYPTO_DEV_CCP_DD=m)
114a7f7f624SMasahiro Yamada	help
115916391a2STom Lendacky	  Provides support for launching Encrypted VMs (SEV) and Encrypted VMs
116916391a2STom Lendacky	  with Encrypted State (SEV-ES) on AMD processors.
1175dd0a57cSBrijesh Singh
118b59b153dSPaolo Bonziniconfig KVM_XEN
119b59b153dSPaolo Bonzini	bool "Support for Xen hypercall interface"
120b59b153dSPaolo Bonzini	depends on KVM
121b59b153dSPaolo Bonzini	help
122b59b153dSPaolo Bonzini	  Provides KVM support for the hosting Xen HVM guests and
123b59b153dSPaolo Bonzini	  passing Xen hypercalls to userspace.
124b59b153dSPaolo Bonzini
125b59b153dSPaolo Bonzini	  If in doubt, say "N".
126b59b153dSPaolo Bonzini
1278b1fe17cSXiao Guangrongconfig KVM_MMU_AUDIT
1288b1fe17cSXiao Guangrong	bool "Audit KVM MMU"
1298b1fe17cSXiao Guangrong	depends on KVM && TRACEPOINTS
130a7f7f624SMasahiro Yamada	help
1318b1fe17cSXiao Guangrong	 This option adds a R/W kVM module parameter 'mmu_audit', which allows
13294491620SRandy Dunlap	 auditing of KVM MMU events at runtime.
1338b1fe17cSXiao Guangrong
134edf88417SAvi Kivityendif # VIRTUALIZATION
135