1# SPDX-License-Identifier: GPL-2.0 2# 3# KVM configuration 4# 5 6source "virt/kvm/Kconfig" 7 8menuconfig VIRTUALIZATION 9 bool "Virtualization" 10 depends on HAVE_KVM || X86 11 default y 12 help 13 Say Y here to get to see options for using your Linux host to run other 14 operating systems inside virtual machines (guests). 15 This option alone does not add any kernel code. 16 17 If you say N, all options in this submenu will be skipped and disabled. 18 19if VIRTUALIZATION 20 21config KVM 22 tristate "Kernel-based Virtual Machine (KVM) support" 23 depends on HAVE_KVM 24 depends on HIGH_RES_TIMERS 25 depends on X86_LOCAL_APIC 26 select PREEMPT_NOTIFIERS 27 select MMU_NOTIFIER 28 select HAVE_KVM_IRQCHIP 29 select HAVE_KVM_PFNCACHE 30 select HAVE_KVM_IRQFD 31 select HAVE_KVM_DIRTY_RING_TSO 32 select HAVE_KVM_DIRTY_RING_ACQ_REL 33 select IRQ_BYPASS_MANAGER 34 select HAVE_KVM_IRQ_BYPASS 35 select HAVE_KVM_IRQ_ROUTING 36 select HAVE_KVM_EVENTFD 37 select KVM_ASYNC_PF 38 select USER_RETURN_NOTIFIER 39 select KVM_MMIO 40 select SCHED_INFO 41 select PERF_EVENTS 42 select GUEST_PERF_EVENTS 43 select HAVE_KVM_MSI 44 select HAVE_KVM_CPU_RELAX_INTERCEPT 45 select HAVE_KVM_NO_POLL 46 select KVM_XFER_TO_GUEST_WORK 47 select KVM_GENERIC_DIRTYLOG_READ_PROTECT 48 select KVM_VFIO 49 select INTERVAL_TREE 50 select HAVE_KVM_PM_NOTIFIER if PM 51 select KVM_GENERIC_HARDWARE_ENABLING 52 help 53 Support hosting fully virtualized guest machines using hardware 54 virtualization extensions. You will need a fairly recent 55 processor equipped with virtualization extensions. You will also 56 need to select one or more of the processor modules below. 57 58 This module provides access to the hardware capabilities through 59 a character device node named /dev/kvm. 60 61 To compile this as a module, choose M here: the module 62 will be called kvm. 63 64 If unsure, say N. 65 66config KVM_WERROR 67 bool "Compile KVM with -Werror" 68 # KASAN may cause the build to fail due to larger frames 69 default y if X86_64 && !KASAN 70 # We use the dependency on !COMPILE_TEST to not be enabled 71 # blindly in allmodconfig or allyesconfig configurations 72 depends on KVM 73 depends on (X86_64 && !KASAN) || !COMPILE_TEST 74 depends on EXPERT 75 help 76 Add -Werror to the build flags for KVM. 77 78 If in doubt, say "N". 79 80config KVM_INTEL 81 tristate "KVM for Intel (and compatible) processors support" 82 depends on KVM && IA32_FEAT_CTL 83 help 84 Provides support for KVM on processors equipped with Intel's VT 85 extensions, a.k.a. Virtual Machine Extensions (VMX). 86 87 To compile this as a module, choose M here: the module 88 will be called kvm-intel. 89 90config X86_SGX_KVM 91 bool "Software Guard eXtensions (SGX) Virtualization" 92 depends on X86_SGX && KVM_INTEL 93 help 94 95 Enables KVM guests to create SGX enclaves. 96 97 This includes support to expose "raw" unreclaimable enclave memory to 98 guests via a device node, e.g. /dev/sgx_vepc. 99 100 If unsure, say N. 101 102config KVM_AMD 103 tristate "KVM for AMD processors support" 104 depends on KVM && (CPU_SUP_AMD || CPU_SUP_HYGON) 105 help 106 Provides support for KVM on AMD processors equipped with the AMD-V 107 (SVM) extensions. 108 109 To compile this as a module, choose M here: the module 110 will be called kvm-amd. 111 112config KVM_AMD_SEV 113 def_bool y 114 bool "AMD Secure Encrypted Virtualization (SEV) support" 115 depends on KVM_AMD && X86_64 116 depends on CRYPTO_DEV_SP_PSP && !(KVM_AMD=y && CRYPTO_DEV_CCP_DD=m) 117 help 118 Provides support for launching Encrypted VMs (SEV) and Encrypted VMs 119 with Encrypted State (SEV-ES) on AMD processors. 120 121config KVM_SMM 122 bool "System Management Mode emulation" 123 default y 124 depends on KVM 125 help 126 Provides support for KVM to emulate System Management Mode (SMM) 127 in virtual machines. This can be used by the virtual machine 128 firmware to implement UEFI secure boot. 129 130 If unsure, say Y. 131 132config KVM_XEN 133 bool "Support for Xen hypercall interface" 134 depends on KVM 135 help 136 Provides KVM support for the hosting Xen HVM guests and 137 passing Xen hypercalls to userspace. 138 139 If in doubt, say "N". 140 141config KVM_PROVE_MMU 142 bool "Prove KVM MMU correctness" 143 depends on DEBUG_KERNEL 144 depends on KVM 145 depends on EXPERT 146 help 147 Enables runtime assertions in KVM's MMU that are too costly to enable 148 in anything remotely resembling a production environment, e.g. this 149 gates code that verifies a to-be-freed page table doesn't have any 150 present SPTEs. 151 152 If in doubt, say "N". 153 154config KVM_EXTERNAL_WRITE_TRACKING 155 bool 156 157endif # VIRTUALIZATION 158