xref: /openbmc/linux/arch/x86/kvm/Kconfig (revision 84b102f5)
1# SPDX-License-Identifier: GPL-2.0
2#
3# KVM configuration
4#
5
6source "virt/kvm/Kconfig"
7
8menuconfig VIRTUALIZATION
9	bool "Virtualization"
10	depends on HAVE_KVM || X86
11	default y
12	help
13	  Say Y here to get to see options for using your Linux host to run other
14	  operating systems inside virtual machines (guests).
15	  This option alone does not add any kernel code.
16
17	  If you say N, all options in this submenu will be skipped and disabled.
18
19if VIRTUALIZATION
20
21config KVM
22	tristate "Kernel-based Virtual Machine (KVM) support"
23	depends on HAVE_KVM
24	depends on HIGH_RES_TIMERS
25	# for TASKSTATS/TASK_DELAY_ACCT:
26	depends on NET && MULTIUSER
27	depends on X86_LOCAL_APIC
28	select PREEMPT_NOTIFIERS
29	select MMU_NOTIFIER
30	select HAVE_KVM_IRQCHIP
31	select HAVE_KVM_IRQFD
32	select IRQ_BYPASS_MANAGER
33	select HAVE_KVM_IRQ_BYPASS
34	select HAVE_KVM_IRQ_ROUTING
35	select HAVE_KVM_EVENTFD
36	select KVM_ASYNC_PF
37	select USER_RETURN_NOTIFIER
38	select KVM_MMIO
39	select TASKSTATS
40	select TASK_DELAY_ACCT
41	select PERF_EVENTS
42	select HAVE_KVM_MSI
43	select HAVE_KVM_CPU_RELAX_INTERCEPT
44	select HAVE_KVM_NO_POLL
45	select KVM_XFER_TO_GUEST_WORK
46	select KVM_GENERIC_DIRTYLOG_READ_PROTECT
47	select KVM_VFIO
48	select SRCU
49	help
50	  Support hosting fully virtualized guest machines using hardware
51	  virtualization extensions.  You will need a fairly recent
52	  processor equipped with virtualization extensions. You will also
53	  need to select one or more of the processor modules below.
54
55	  This module provides access to the hardware capabilities through
56	  a character device node named /dev/kvm.
57
58	  To compile this as a module, choose M here: the module
59	  will be called kvm.
60
61	  If unsure, say N.
62
63config KVM_WERROR
64	bool "Compile KVM with -Werror"
65	# KASAN may cause the build to fail due to larger frames
66	default y if X86_64 && !KASAN
67	# We use the dependency on !COMPILE_TEST to not be enabled
68	# blindly in allmodconfig or allyesconfig configurations
69	depends on KVM
70	depends on (X86_64 && !KASAN) || !COMPILE_TEST
71	depends on EXPERT
72	help
73	  Add -Werror to the build flags for KVM.
74
75	  If in doubt, say "N".
76
77config KVM_INTEL
78	tristate "KVM for Intel (and compatible) processors support"
79	depends on KVM && IA32_FEAT_CTL
80	help
81	  Provides support for KVM on processors equipped with Intel's VT
82	  extensions, a.k.a. Virtual Machine Extensions (VMX).
83
84	  To compile this as a module, choose M here: the module
85	  will be called kvm-intel.
86
87config KVM_AMD
88	tristate "KVM for AMD processors support"
89	depends on KVM
90	help
91	  Provides support for KVM on AMD processors equipped with the AMD-V
92	  (SVM) extensions.
93
94	  To compile this as a module, choose M here: the module
95	  will be called kvm-amd.
96
97config KVM_AMD_SEV
98	def_bool y
99	bool "AMD Secure Encrypted Virtualization (SEV) support"
100	depends on KVM_AMD && X86_64
101	depends on CRYPTO_DEV_SP_PSP && !(KVM_AMD=y && CRYPTO_DEV_CCP_DD=m)
102	help
103	  Provides support for launching Encrypted VMs (SEV) and Encrypted VMs
104	  with Encrypted State (SEV-ES) on AMD processors.
105
106config KVM_MMU_AUDIT
107	bool "Audit KVM MMU"
108	depends on KVM && TRACEPOINTS
109	help
110	 This option adds a R/W kVM module parameter 'mmu_audit', which allows
111	 auditing of KVM MMU events at runtime.
112
113endif # VIRTUALIZATION
114