1# SPDX-License-Identifier: GPL-2.0-only 2# The IOVA library may also be used by non-IOMMU_API users 3config IOMMU_IOVA 4 tristate 5 6# IOMMU_API always gets selected by whoever wants it. 7config IOMMU_API 8 bool 9 10menuconfig IOMMU_SUPPORT 11 bool "IOMMU Hardware Support" 12 depends on MMU 13 default y 14 help 15 Say Y here if you want to compile device drivers for IO Memory 16 Management Units into the kernel. These devices usually allow to 17 remap DMA requests and/or remap interrupts from other devices on the 18 system. 19 20if IOMMU_SUPPORT 21 22menu "Generic IOMMU Pagetable Support" 23 24# Selected by the actual pagetable implementations 25config IOMMU_IO_PGTABLE 26 bool 27 28config IOMMU_IO_PGTABLE_LPAE 29 bool "ARMv7/v8 Long Descriptor Format" 30 select IOMMU_IO_PGTABLE 31 depends on ARM || ARM64 || COMPILE_TEST 32 depends on !GENERIC_ATOMIC64 # for cmpxchg64() 33 help 34 Enable support for the ARM long descriptor pagetable format. 35 This allocator supports 4K/2M/1G, 16K/32M and 64K/512M page 36 sizes at both stage-1 and stage-2, as well as address spaces 37 up to 48-bits in size. 38 39config IOMMU_IO_PGTABLE_LPAE_SELFTEST 40 bool "LPAE selftests" 41 depends on IOMMU_IO_PGTABLE_LPAE 42 help 43 Enable self-tests for LPAE page table allocator. This performs 44 a series of page-table consistency checks during boot. 45 46 If unsure, say N here. 47 48config IOMMU_IO_PGTABLE_ARMV7S 49 bool "ARMv7/v8 Short Descriptor Format" 50 select IOMMU_IO_PGTABLE 51 depends on ARM || ARM64 || COMPILE_TEST 52 help 53 Enable support for the ARM Short-descriptor pagetable format. 54 This supports 32-bit virtual and physical addresses mapped using 55 2-level tables with 4KB pages/1MB sections, and contiguous entries 56 for 64KB pages/16MB supersections if indicated by the IOMMU driver. 57 58config IOMMU_IO_PGTABLE_ARMV7S_SELFTEST 59 bool "ARMv7s selftests" 60 depends on IOMMU_IO_PGTABLE_ARMV7S 61 help 62 Enable self-tests for ARMv7s page table allocator. This performs 63 a series of page-table consistency checks during boot. 64 65 If unsure, say N here. 66 67config IOMMU_IO_PGTABLE_DART 68 bool "Apple DART Formats" 69 select IOMMU_IO_PGTABLE 70 depends on ARM64 || COMPILE_TEST 71 depends on !GENERIC_ATOMIC64 # for cmpxchg64() 72 help 73 Enable support for the Apple DART pagetable formats. These include 74 the t8020 and t6000/t8110 DART formats used in Apple M1/M2 family 75 SoCs. 76 77 If unsure, say N here. 78 79endmenu 80 81config IOMMU_DEBUGFS 82 bool "Export IOMMU internals in DebugFS" 83 depends on DEBUG_FS 84 help 85 Allows exposure of IOMMU device internals. This option enables 86 the use of debugfs by IOMMU drivers as required. Devices can, 87 at initialization time, cause the IOMMU code to create a top-level 88 debug/iommu directory, and then populate a subdirectory with 89 entries as required. 90 91choice 92 prompt "IOMMU default domain type" 93 depends on IOMMU_API 94 default IOMMU_DEFAULT_DMA_LAZY if X86 || IA64 95 default IOMMU_DEFAULT_DMA_STRICT 96 help 97 Choose the type of IOMMU domain used to manage DMA API usage by 98 device drivers. The options here typically represent different 99 levels of tradeoff between robustness/security and performance, 100 depending on the IOMMU driver. Not all IOMMUs support all options. 101 This choice can be overridden at boot via the command line, and for 102 some devices also at runtime via sysfs. 103 104 If unsure, keep the default. 105 106config IOMMU_DEFAULT_DMA_STRICT 107 bool "Translated - Strict" 108 help 109 Trusted devices use translation to restrict their access to only 110 DMA-mapped pages, with strict TLB invalidation on unmap. Equivalent 111 to passing "iommu.passthrough=0 iommu.strict=1" on the command line. 112 113 Untrusted devices always use this mode, with an additional layer of 114 bounce-buffering such that they cannot gain access to any unrelated 115 data within a mapped page. 116 117config IOMMU_DEFAULT_DMA_LAZY 118 bool "Translated - Lazy" 119 help 120 Trusted devices use translation to restrict their access to only 121 DMA-mapped pages, but with "lazy" batched TLB invalidation. This 122 mode allows higher performance with some IOMMUs due to reduced TLB 123 flushing, but at the cost of reduced isolation since devices may be 124 able to access memory for some time after it has been unmapped. 125 Equivalent to passing "iommu.passthrough=0 iommu.strict=0" on the 126 command line. 127 128 If this mode is not supported by the IOMMU driver, the effective 129 runtime default will fall back to IOMMU_DEFAULT_DMA_STRICT. 130 131config IOMMU_DEFAULT_PASSTHROUGH 132 bool "Passthrough" 133 help 134 Trusted devices are identity-mapped, giving them unrestricted access 135 to memory with minimal performance overhead. Equivalent to passing 136 "iommu.passthrough=1" (historically "iommu=pt") on the command line. 137 138 If this mode is not supported by the IOMMU driver, the effective 139 runtime default will fall back to IOMMU_DEFAULT_DMA_STRICT. 140 141endchoice 142 143config OF_IOMMU 144 def_bool y 145 depends on OF && IOMMU_API 146 147# IOMMU-agnostic DMA-mapping layer 148config IOMMU_DMA 149 def_bool ARM64 || IA64 || X86 150 select DMA_OPS 151 select IOMMU_API 152 select IOMMU_IOVA 153 select IRQ_MSI_IOMMU 154 select NEED_SG_DMA_LENGTH 155 select NEED_SG_DMA_FLAGS if SWIOTLB 156 157# Shared Virtual Addressing 158config IOMMU_SVA 159 bool 160 161config FSL_PAMU 162 bool "Freescale IOMMU support" 163 depends on PCI 164 depends on PHYS_64BIT 165 depends on PPC_E500MC || (COMPILE_TEST && PPC) 166 select IOMMU_API 167 select GENERIC_ALLOCATOR 168 help 169 Freescale PAMU support. PAMU is the IOMMU present on Freescale QorIQ platforms. 170 PAMU can authorize memory access, remap the memory address, and remap I/O 171 transaction types. 172 173# MSM IOMMU support 174config MSM_IOMMU 175 bool "MSM IOMMU Support" 176 depends on ARM 177 depends on ARCH_MSM8X60 || ARCH_MSM8960 || COMPILE_TEST 178 select IOMMU_API 179 select IOMMU_IO_PGTABLE_ARMV7S 180 help 181 Support for the IOMMUs found on certain Qualcomm SOCs. 182 These IOMMUs allow virtualization of the address space used by most 183 cores within the multimedia subsystem. 184 185 If unsure, say N here. 186 187source "drivers/iommu/amd/Kconfig" 188source "drivers/iommu/intel/Kconfig" 189source "drivers/iommu/iommufd/Kconfig" 190 191config IRQ_REMAP 192 bool "Support for Interrupt Remapping" 193 depends on X86_64 && X86_IO_APIC && PCI_MSI && ACPI 194 select DMAR_TABLE 195 help 196 Supports Interrupt remapping for IO-APIC and MSI devices. 197 To use x2apic mode in the CPU's which support x2APIC enhancements or 198 to support platforms with CPU's having > 8 bit APIC ID, say Y. 199 200# OMAP IOMMU support 201config OMAP_IOMMU 202 bool "OMAP IOMMU Support" 203 depends on ARCH_OMAP2PLUS || COMPILE_TEST 204 select IOMMU_API 205 help 206 The OMAP3 media platform drivers depend on iommu support, 207 if you need them say Y here. 208 209config OMAP_IOMMU_DEBUG 210 bool "Export OMAP IOMMU internals in DebugFS" 211 depends on OMAP_IOMMU && DEBUG_FS 212 help 213 Select this to see extensive information about 214 the internal state of OMAP IOMMU in debugfs. 215 216 Say N unless you know you need this. 217 218config ROCKCHIP_IOMMU 219 bool "Rockchip IOMMU Support" 220 depends on ARCH_ROCKCHIP || COMPILE_TEST 221 select IOMMU_API 222 select ARM_DMA_USE_IOMMU 223 help 224 Support for IOMMUs found on Rockchip rk32xx SOCs. 225 These IOMMUs allow virtualization of the address space used by most 226 cores within the multimedia subsystem. 227 Say Y here if you are using a Rockchip SoC that includes an IOMMU 228 device. 229 230config SUN50I_IOMMU 231 bool "Allwinner H6 IOMMU Support" 232 depends on HAS_DMA 233 depends on ARCH_SUNXI || COMPILE_TEST 234 select ARM_DMA_USE_IOMMU 235 select IOMMU_API 236 help 237 Support for the IOMMU introduced in the Allwinner H6 SoCs. 238 239config TEGRA_IOMMU_GART 240 bool "Tegra GART IOMMU Support" 241 depends on ARCH_TEGRA_2x_SOC 242 depends on TEGRA_MC 243 select IOMMU_API 244 help 245 Enables support for remapping discontiguous physical memory 246 shared with the operating system into contiguous I/O virtual 247 space through the GART (Graphics Address Relocation Table) 248 hardware included on Tegra SoCs. 249 250config TEGRA_IOMMU_SMMU 251 bool "NVIDIA Tegra SMMU Support" 252 depends on ARCH_TEGRA 253 depends on TEGRA_AHB 254 depends on TEGRA_MC 255 select IOMMU_API 256 help 257 This driver supports the IOMMU hardware (SMMU) found on NVIDIA Tegra 258 SoCs (Tegra30 up to Tegra210). 259 260config EXYNOS_IOMMU 261 bool "Exynos IOMMU Support" 262 depends on ARCH_EXYNOS || COMPILE_TEST 263 depends on !CPU_BIG_ENDIAN # revisit driver if we can enable big-endian ptes 264 select IOMMU_API 265 select ARM_DMA_USE_IOMMU 266 help 267 Support for the IOMMU (System MMU) of Samsung Exynos application 268 processor family. This enables H/W multimedia accelerators to see 269 non-linear physical memory chunks as linear memory in their 270 address space. 271 272 If unsure, say N here. 273 274config EXYNOS_IOMMU_DEBUG 275 bool "Debugging log for Exynos IOMMU" 276 depends on EXYNOS_IOMMU 277 help 278 Select this to see the detailed log message that shows what 279 happens in the IOMMU driver. 280 281 Say N unless you need kernel log message for IOMMU debugging. 282 283config IPMMU_VMSA 284 bool "Renesas VMSA-compatible IPMMU" 285 depends on ARCH_RENESAS || COMPILE_TEST 286 depends on !GENERIC_ATOMIC64 # for IOMMU_IO_PGTABLE_LPAE 287 select IOMMU_API 288 select IOMMU_IO_PGTABLE_LPAE 289 select ARM_DMA_USE_IOMMU 290 help 291 Support for the Renesas VMSA-compatible IPMMU found in the R-Mobile 292 APE6, R-Car Gen{2,3} and RZ/G{1,2} SoCs. 293 294 If unsure, say N. 295 296config SPAPR_TCE_IOMMU 297 bool "sPAPR TCE IOMMU Support" 298 depends on PPC_POWERNV || PPC_PSERIES 299 select IOMMU_API 300 help 301 Enables bits of IOMMU API required by VFIO. The iommu_ops 302 is not implemented as it is not necessary for VFIO. 303 304config APPLE_DART 305 tristate "Apple DART IOMMU Support" 306 depends on ARCH_APPLE || COMPILE_TEST 307 depends on !GENERIC_ATOMIC64 # for IOMMU_IO_PGTABLE_DART 308 select IOMMU_API 309 select IOMMU_IO_PGTABLE_DART 310 default ARCH_APPLE 311 help 312 Support for Apple DART (Device Address Resolution Table) IOMMUs 313 found in Apple ARM SoCs like the M1. 314 This IOMMU is required for most peripherals using DMA to access 315 the main memory. 316 317 Say Y here if you are using an Apple SoC. 318 319# ARM IOMMU support 320config ARM_SMMU 321 tristate "ARM Ltd. System MMU (SMMU) Support" 322 depends on ARM64 || ARM || COMPILE_TEST 323 depends on !GENERIC_ATOMIC64 # for IOMMU_IO_PGTABLE_LPAE 324 select IOMMU_API 325 select IOMMU_IO_PGTABLE_LPAE 326 select ARM_DMA_USE_IOMMU if ARM 327 help 328 Support for implementations of the ARM System MMU architecture 329 versions 1 and 2. 330 331 Say Y here if your SoC includes an IOMMU device implementing 332 the ARM SMMU architecture. 333 334config ARM_SMMU_LEGACY_DT_BINDINGS 335 bool "Support the legacy \"mmu-masters\" devicetree bindings" 336 depends on ARM_SMMU=y && OF 337 help 338 Support for the badly designed and deprecated "mmu-masters" 339 devicetree bindings. This allows some DMA masters to attach 340 to the SMMU but does not provide any support via the DMA API. 341 If you're lucky, you might be able to get VFIO up and running. 342 343 If you say Y here then you'll make me very sad. Instead, say N 344 and move your firmware to the utopian future that was 2016. 345 346config ARM_SMMU_DISABLE_BYPASS_BY_DEFAULT 347 bool "Default to disabling bypass on ARM SMMU v1 and v2" 348 depends on ARM_SMMU 349 default y 350 help 351 Say Y here to (by default) disable bypass streams such that 352 incoming transactions from devices that are not attached to 353 an iommu domain will report an abort back to the device and 354 will not be allowed to pass through the SMMU. 355 356 Any old kernels that existed before this KConfig was 357 introduced would default to _allowing_ bypass (AKA the 358 equivalent of NO for this config). However the default for 359 this option is YES because the old behavior is insecure. 360 361 There are few reasons to allow unmatched stream bypass, and 362 even fewer good ones. If saying YES here breaks your board 363 you should work on fixing your board. This KConfig option 364 is expected to be removed in the future and we'll simply 365 hardcode the bypass disable in the code. 366 367 NOTE: the kernel command line parameter 368 'arm-smmu.disable_bypass' will continue to override this 369 config. 370 371config ARM_SMMU_QCOM 372 def_tristate y 373 depends on ARM_SMMU && ARCH_QCOM 374 select QCOM_SCM 375 help 376 When running on a Qualcomm platform that has the custom variant 377 of the ARM SMMU, this needs to be built into the SMMU driver. 378 379config ARM_SMMU_QCOM_DEBUG 380 bool "ARM SMMU QCOM implementation defined debug support" 381 depends on ARM_SMMU_QCOM 382 help 383 Support for implementation specific debug features in ARM SMMU 384 hardware found in QTI platforms. 385 386 Say Y here to enable debug for issues such as TLB sync timeouts 387 which requires implementation defined register dumps. 388 389config ARM_SMMU_V3 390 tristate "ARM Ltd. System MMU Version 3 (SMMUv3) Support" 391 depends on ARM64 392 select IOMMU_API 393 select IOMMU_IO_PGTABLE_LPAE 394 select GENERIC_MSI_IRQ 395 help 396 Support for implementations of the ARM System MMU architecture 397 version 3 providing translation support to a PCIe root complex. 398 399 Say Y here if your system includes an IOMMU device implementing 400 the ARM SMMUv3 architecture. 401 402config ARM_SMMU_V3_SVA 403 bool "Shared Virtual Addressing support for the ARM SMMUv3" 404 depends on ARM_SMMU_V3 405 select IOMMU_SVA 406 select MMU_NOTIFIER 407 help 408 Support for sharing process address spaces with devices using the 409 SMMUv3. 410 411 Say Y here if your system supports SVA extensions such as PCIe PASID 412 and PRI. 413 414config S390_IOMMU 415 def_bool y if S390 && PCI 416 depends on S390 && PCI 417 select IOMMU_API 418 help 419 Support for the IOMMU API for s390 PCI devices. 420 421config MTK_IOMMU 422 tristate "MediaTek IOMMU Support" 423 depends on ARCH_MEDIATEK || COMPILE_TEST 424 select ARM_DMA_USE_IOMMU 425 select IOMMU_API 426 select IOMMU_IO_PGTABLE_ARMV7S 427 select MEMORY 428 select MTK_SMI 429 help 430 Support for the M4U on certain Mediatek SOCs. M4U is MultiMedia 431 Memory Management Unit. This option enables remapping of DMA memory 432 accesses for the multimedia subsystem. 433 434 If unsure, say N here. 435 436config MTK_IOMMU_V1 437 tristate "MediaTek IOMMU Version 1 (M4U gen1) Support" 438 depends on ARM 439 depends on ARCH_MEDIATEK || COMPILE_TEST 440 select ARM_DMA_USE_IOMMU 441 select IOMMU_API 442 select MEMORY 443 select MTK_SMI 444 help 445 Support for the M4U on certain Mediatek SoCs. M4U generation 1 HW is 446 Multimedia Memory Managememt Unit. This option enables remapping of 447 DMA memory accesses for the multimedia subsystem. 448 449 if unsure, say N here. 450 451config QCOM_IOMMU 452 # Note: iommu drivers cannot (yet?) be built as modules 453 bool "Qualcomm IOMMU Support" 454 depends on ARCH_QCOM || COMPILE_TEST 455 depends on !GENERIC_ATOMIC64 # for IOMMU_IO_PGTABLE_LPAE 456 select QCOM_SCM 457 select IOMMU_API 458 select IOMMU_IO_PGTABLE_LPAE 459 select ARM_DMA_USE_IOMMU 460 help 461 Support for IOMMU on certain Qualcomm SoCs. 462 463config HYPERV_IOMMU 464 bool "Hyper-V IRQ Handling" 465 depends on HYPERV && X86 466 select IOMMU_API 467 default HYPERV 468 help 469 Stub IOMMU driver to handle IRQs to support Hyper-V Linux 470 guest and root partitions. 471 472config VIRTIO_IOMMU 473 tristate "Virtio IOMMU driver" 474 depends on VIRTIO 475 depends on (ARM64 || X86) 476 select IOMMU_API 477 select INTERVAL_TREE 478 select ACPI_VIOT if ACPI 479 help 480 Para-virtualised IOMMU driver with virtio. 481 482 Say Y here if you intend to run this kernel as a guest. 483 484config SPRD_IOMMU 485 tristate "Unisoc IOMMU Support" 486 depends on ARCH_SPRD || COMPILE_TEST 487 select IOMMU_API 488 help 489 Support for IOMMU on Unisoc's SoCs, this IOMMU can be used by 490 Unisoc's multimedia devices, such as display, Image codec(jpeg) 491 and a few signal processors, including VSP(video), GSP(graphic), 492 ISP(image), and CPP(camera pixel processor), etc. 493 494 Say Y here if you want to use the multimedia devices listed above. 495 496endif # IOMMU_SUPPORT 497