1 /* 2 * bootloader support 3 * 4 * Copyright IBM, Corp. 2012 5 * 6 * Authors: 7 * Christian Borntraeger <borntraeger@de.ibm.com> 8 * 9 * This work is licensed under the terms of the GNU GPL, version 2 or (at your 10 * option) any later version. See the COPYING file in the top-level directory. 11 * 12 */ 13 14 #include "qemu/osdep.h" 15 #include "qapi/error.h" 16 #include "sysemu/sysemu.h" 17 #include "cpu.h" 18 #include "elf.h" 19 #include "hw/loader.h" 20 #include "hw/boards.h" 21 #include "hw/s390x/virtio-ccw.h" 22 #include "hw/s390x/css.h" 23 #include "hw/s390x/ebcdic.h" 24 #include "ipl.h" 25 #include "qemu/error-report.h" 26 #include "qemu/config-file.h" 27 #include "qemu/cutils.h" 28 #include "qemu/option.h" 29 #include "exec/exec-all.h" 30 31 #define KERN_IMAGE_START 0x010000UL 32 #define LINUX_MAGIC_ADDR 0x010008UL 33 #define KERN_PARM_AREA 0x010480UL 34 #define INITRD_START 0x800000UL 35 #define INITRD_PARM_START 0x010408UL 36 #define INITRD_PARM_SIZE 0x010410UL 37 #define PARMFILE_START 0x001000UL 38 #define ZIPL_IMAGE_START 0x009000UL 39 #define IPL_PSW_MASK (PSW_MASK_32 | PSW_MASK_64) 40 41 static bool iplb_extended_needed(void *opaque) 42 { 43 S390IPLState *ipl = S390_IPL(object_resolve_path(TYPE_S390_IPL, NULL)); 44 45 return ipl->iplbext_migration; 46 } 47 48 static const VMStateDescription vmstate_iplb_extended = { 49 .name = "ipl/iplb_extended", 50 .version_id = 0, 51 .minimum_version_id = 0, 52 .needed = iplb_extended_needed, 53 .fields = (VMStateField[]) { 54 VMSTATE_UINT8_ARRAY(reserved_ext, IplParameterBlock, 4096 - 200), 55 VMSTATE_END_OF_LIST() 56 } 57 }; 58 59 static const VMStateDescription vmstate_iplb = { 60 .name = "ipl/iplb", 61 .version_id = 0, 62 .minimum_version_id = 0, 63 .fields = (VMStateField[]) { 64 VMSTATE_UINT8_ARRAY(reserved1, IplParameterBlock, 110), 65 VMSTATE_UINT16(devno, IplParameterBlock), 66 VMSTATE_UINT8_ARRAY(reserved2, IplParameterBlock, 88), 67 VMSTATE_END_OF_LIST() 68 }, 69 .subsections = (const VMStateDescription*[]) { 70 &vmstate_iplb_extended, 71 NULL 72 } 73 }; 74 75 static const VMStateDescription vmstate_ipl = { 76 .name = "ipl", 77 .version_id = 0, 78 .minimum_version_id = 0, 79 .fields = (VMStateField[]) { 80 VMSTATE_UINT64(compat_start_addr, S390IPLState), 81 VMSTATE_UINT64(compat_bios_start_addr, S390IPLState), 82 VMSTATE_STRUCT(iplb, S390IPLState, 0, vmstate_iplb, IplParameterBlock), 83 VMSTATE_BOOL(iplb_valid, S390IPLState), 84 VMSTATE_UINT8(cssid, S390IPLState), 85 VMSTATE_UINT8(ssid, S390IPLState), 86 VMSTATE_UINT16(devno, S390IPLState), 87 VMSTATE_END_OF_LIST() 88 } 89 }; 90 91 static S390IPLState *get_ipl_device(void) 92 { 93 return S390_IPL(object_resolve_path_type("", TYPE_S390_IPL, NULL)); 94 } 95 96 static uint64_t bios_translate_addr(void *opaque, uint64_t srcaddr) 97 { 98 uint64_t dstaddr = *(uint64_t *) opaque; 99 /* 100 * Assuming that our s390-ccw.img was linked for starting at address 0, 101 * we can simply add the destination address for the final location 102 */ 103 return srcaddr + dstaddr; 104 } 105 106 static void s390_ipl_realize(DeviceState *dev, Error **errp) 107 { 108 S390IPLState *ipl = S390_IPL(dev); 109 uint32_t *ipl_psw; 110 uint64_t pentry; 111 char *magic; 112 int kernel_size; 113 Error *err = NULL; 114 115 int bios_size; 116 char *bios_filename; 117 118 /* 119 * Always load the bios if it was enforced, 120 * even if an external kernel has been defined. 121 */ 122 if (!ipl->kernel || ipl->enforce_bios) { 123 uint64_t fwbase = (MIN(ram_size, 0x80000000U) - 0x200000) & ~0xffffUL; 124 125 if (bios_name == NULL) { 126 bios_name = ipl->firmware; 127 } 128 129 bios_filename = qemu_find_file(QEMU_FILE_TYPE_BIOS, bios_name); 130 if (bios_filename == NULL) { 131 error_setg(&err, "could not find stage1 bootloader"); 132 goto error; 133 } 134 135 bios_size = load_elf(bios_filename, bios_translate_addr, &fwbase, 136 &ipl->bios_start_addr, NULL, NULL, 1, 137 EM_S390, 0, 0); 138 if (bios_size > 0) { 139 /* Adjust ELF start address to final location */ 140 ipl->bios_start_addr += fwbase; 141 } else { 142 /* Try to load non-ELF file */ 143 bios_size = load_image_targphys(bios_filename, ZIPL_IMAGE_START, 144 4096); 145 ipl->bios_start_addr = ZIPL_IMAGE_START; 146 } 147 g_free(bios_filename); 148 149 if (bios_size == -1) { 150 error_setg(&err, "could not load bootloader '%s'", bios_name); 151 goto error; 152 } 153 154 /* default boot target is the bios */ 155 ipl->start_addr = ipl->bios_start_addr; 156 } 157 158 if (ipl->kernel) { 159 kernel_size = load_elf(ipl->kernel, NULL, NULL, &pentry, NULL, 160 NULL, 1, EM_S390, 0, 0); 161 if (kernel_size < 0) { 162 kernel_size = load_image_targphys(ipl->kernel, 0, ram_size); 163 if (kernel_size < 0) { 164 error_setg(&err, "could not load kernel '%s'", ipl->kernel); 165 goto error; 166 } 167 /* if this is Linux use KERN_IMAGE_START */ 168 magic = rom_ptr(LINUX_MAGIC_ADDR); 169 if (magic && !memcmp(magic, "S390EP", 6)) { 170 pentry = KERN_IMAGE_START; 171 } else { 172 /* if not Linux load the address of the (short) IPL PSW */ 173 ipl_psw = rom_ptr(4); 174 if (ipl_psw) { 175 pentry = be32_to_cpu(*ipl_psw) & 0x7fffffffUL; 176 } else { 177 error_setg(&err, "Could not get IPL PSW"); 178 goto error; 179 } 180 } 181 } 182 /* 183 * Is it a Linux kernel (starting at 0x10000)? If yes, we fill in the 184 * kernel parameters here as well. Note: For old kernels (up to 3.2) 185 * we can not rely on the ELF entry point - it was 0x800 (the SALIPL 186 * loader) and it won't work. For this case we force it to 0x10000, too. 187 */ 188 if (pentry == KERN_IMAGE_START || pentry == 0x800) { 189 ipl->start_addr = KERN_IMAGE_START; 190 /* Overwrite parameters in the kernel image, which are "rom" */ 191 strcpy(rom_ptr(KERN_PARM_AREA), ipl->cmdline); 192 } else { 193 ipl->start_addr = pentry; 194 } 195 196 if (ipl->initrd) { 197 ram_addr_t initrd_offset; 198 int initrd_size; 199 200 initrd_offset = INITRD_START; 201 while (kernel_size + 0x100000 > initrd_offset) { 202 initrd_offset += 0x100000; 203 } 204 initrd_size = load_image_targphys(ipl->initrd, initrd_offset, 205 ram_size - initrd_offset); 206 if (initrd_size == -1) { 207 error_setg(&err, "could not load initrd '%s'", ipl->initrd); 208 goto error; 209 } 210 211 /* 212 * we have to overwrite values in the kernel image, 213 * which are "rom" 214 */ 215 stq_p(rom_ptr(INITRD_PARM_START), initrd_offset); 216 stq_p(rom_ptr(INITRD_PARM_SIZE), initrd_size); 217 } 218 } 219 /* 220 * Don't ever use the migrated values, they could come from a different 221 * BIOS and therefore don't work. But still migrate the values, so 222 * QEMUs relying on it don't break. 223 */ 224 ipl->compat_start_addr = ipl->start_addr; 225 ipl->compat_bios_start_addr = ipl->bios_start_addr; 226 qemu_register_reset(qdev_reset_all_fn, dev); 227 error: 228 error_propagate(errp, err); 229 } 230 231 static Property s390_ipl_properties[] = { 232 DEFINE_PROP_STRING("kernel", S390IPLState, kernel), 233 DEFINE_PROP_STRING("initrd", S390IPLState, initrd), 234 DEFINE_PROP_STRING("cmdline", S390IPLState, cmdline), 235 DEFINE_PROP_STRING("firmware", S390IPLState, firmware), 236 DEFINE_PROP_STRING("netboot_fw", S390IPLState, netboot_fw), 237 DEFINE_PROP_BOOL("enforce_bios", S390IPLState, enforce_bios, false), 238 DEFINE_PROP_BOOL("iplbext_migration", S390IPLState, iplbext_migration, 239 true), 240 DEFINE_PROP_END_OF_LIST(), 241 }; 242 243 static void s390_ipl_set_boot_menu(S390IPLState *ipl) 244 { 245 QemuOptsList *plist = qemu_find_opts("boot-opts"); 246 QemuOpts *opts = QTAILQ_FIRST(&plist->head); 247 uint8_t *flags = &ipl->qipl.qipl_flags; 248 uint32_t *timeout = &ipl->qipl.boot_menu_timeout; 249 const char *tmp; 250 unsigned long splash_time = 0; 251 252 if (!get_boot_device(0)) { 253 if (boot_menu) { 254 error_report("boot menu requires a bootindex to be specified for " 255 "the IPL device"); 256 } 257 return; 258 } 259 260 switch (ipl->iplb.pbt) { 261 case S390_IPL_TYPE_CCW: 262 /* In the absence of -boot menu, use zipl parameters */ 263 if (!qemu_opt_get(opts, "menu")) { 264 *flags |= QIPL_FLAG_BM_OPTS_ZIPL; 265 return; 266 } 267 break; 268 case S390_IPL_TYPE_QEMU_SCSI: 269 break; 270 default: 271 if (boot_menu) { 272 error_report("boot menu is not supported for this device type"); 273 } 274 return; 275 } 276 277 if (!boot_menu) { 278 return; 279 } 280 281 *flags |= QIPL_FLAG_BM_OPTS_CMD; 282 283 tmp = qemu_opt_get(opts, "splash-time"); 284 285 if (tmp && qemu_strtoul(tmp, NULL, 10, &splash_time)) { 286 error_report("splash-time is invalid, forcing it to 0"); 287 *timeout = 0; 288 return; 289 } 290 291 if (splash_time > 0xffffffff) { 292 error_report("splash-time is too large, forcing it to max value"); 293 *timeout = 0xffffffff; 294 return; 295 } 296 297 *timeout = cpu_to_be32(splash_time); 298 } 299 300 static CcwDevice *s390_get_ccw_device(DeviceState *dev_st) 301 { 302 CcwDevice *ccw_dev = NULL; 303 304 if (dev_st) { 305 VirtioCcwDevice *virtio_ccw_dev = (VirtioCcwDevice *) 306 object_dynamic_cast(OBJECT(qdev_get_parent_bus(dev_st)->parent), 307 TYPE_VIRTIO_CCW_DEVICE); 308 if (virtio_ccw_dev) { 309 ccw_dev = CCW_DEVICE(virtio_ccw_dev); 310 } else { 311 SCSIDevice *sd = (SCSIDevice *) 312 object_dynamic_cast(OBJECT(dev_st), 313 TYPE_SCSI_DEVICE); 314 if (sd) { 315 SCSIBus *bus = scsi_bus_from_device(sd); 316 VirtIOSCSI *vdev = container_of(bus, VirtIOSCSI, bus); 317 VirtIOSCSICcw *scsi_ccw = container_of(vdev, VirtIOSCSICcw, 318 vdev); 319 320 ccw_dev = (CcwDevice *)object_dynamic_cast(OBJECT(scsi_ccw), 321 TYPE_CCW_DEVICE); 322 } 323 } 324 } 325 return ccw_dev; 326 } 327 328 static bool s390_gen_initial_iplb(S390IPLState *ipl) 329 { 330 DeviceState *dev_st; 331 CcwDevice *ccw_dev = NULL; 332 333 dev_st = get_boot_device(0); 334 if (dev_st) { 335 ccw_dev = s390_get_ccw_device(dev_st); 336 } 337 338 /* 339 * Currently allow IPL only from CCW devices. 340 */ 341 if (ccw_dev) { 342 SCSIDevice *sd = (SCSIDevice *) object_dynamic_cast(OBJECT(dev_st), 343 TYPE_SCSI_DEVICE); 344 345 if (sd) { 346 ipl->iplb.len = cpu_to_be32(S390_IPLB_MIN_QEMU_SCSI_LEN); 347 ipl->iplb.blk0_len = 348 cpu_to_be32(S390_IPLB_MIN_QEMU_SCSI_LEN - S390_IPLB_HEADER_LEN); 349 ipl->iplb.pbt = S390_IPL_TYPE_QEMU_SCSI; 350 ipl->iplb.scsi.lun = cpu_to_be32(sd->lun); 351 ipl->iplb.scsi.target = cpu_to_be16(sd->id); 352 ipl->iplb.scsi.channel = cpu_to_be16(sd->channel); 353 ipl->iplb.scsi.devno = cpu_to_be16(ccw_dev->sch->devno); 354 ipl->iplb.scsi.ssid = ccw_dev->sch->ssid & 3; 355 } else { 356 VirtIONet *vn = (VirtIONet *) object_dynamic_cast(OBJECT(dev_st), 357 TYPE_VIRTIO_NET); 358 359 ipl->iplb.len = cpu_to_be32(S390_IPLB_MIN_CCW_LEN); 360 ipl->iplb.blk0_len = 361 cpu_to_be32(S390_IPLB_MIN_CCW_LEN - S390_IPLB_HEADER_LEN); 362 ipl->iplb.pbt = S390_IPL_TYPE_CCW; 363 ipl->iplb.ccw.devno = cpu_to_be16(ccw_dev->sch->devno); 364 ipl->iplb.ccw.ssid = ccw_dev->sch->ssid & 3; 365 366 if (vn) { 367 ipl->netboot = true; 368 } 369 } 370 371 if (!s390_ipl_set_loadparm(ipl->iplb.loadparm)) { 372 ipl->iplb.flags |= DIAG308_FLAGS_LP_VALID; 373 } 374 375 return true; 376 } 377 378 return false; 379 } 380 381 int s390_ipl_set_loadparm(uint8_t *loadparm) 382 { 383 MachineState *machine = MACHINE(qdev_get_machine()); 384 char *lp = object_property_get_str(OBJECT(machine), "loadparm", NULL); 385 386 if (lp) { 387 int i; 388 389 /* lp is an uppercase string without leading/embedded spaces */ 390 for (i = 0; i < 8 && lp[i]; i++) { 391 loadparm[i] = ascii2ebcdic[(uint8_t) lp[i]]; 392 } 393 394 if (i < 8) { 395 memset(loadparm + i, 0x40, 8 - i); /* fill with EBCDIC spaces */ 396 } 397 398 g_free(lp); 399 return 0; 400 } 401 402 return -1; 403 } 404 405 static int load_netboot_image(Error **errp) 406 { 407 S390IPLState *ipl = get_ipl_device(); 408 char *netboot_filename; 409 MemoryRegion *sysmem = get_system_memory(); 410 MemoryRegion *mr = NULL; 411 void *ram_ptr = NULL; 412 int img_size = -1; 413 414 mr = memory_region_find(sysmem, 0, 1).mr; 415 if (!mr) { 416 error_setg(errp, "Failed to find memory region at address 0"); 417 return -1; 418 } 419 420 ram_ptr = memory_region_get_ram_ptr(mr); 421 if (!ram_ptr) { 422 error_setg(errp, "No RAM found"); 423 goto unref_mr; 424 } 425 426 netboot_filename = qemu_find_file(QEMU_FILE_TYPE_BIOS, ipl->netboot_fw); 427 if (netboot_filename == NULL) { 428 error_setg(errp, "Could not find network bootloader '%s'", 429 ipl->netboot_fw); 430 goto unref_mr; 431 } 432 433 img_size = load_elf_ram(netboot_filename, NULL, NULL, &ipl->start_addr, 434 NULL, NULL, 1, EM_S390, 0, 0, NULL, false); 435 436 if (img_size < 0) { 437 img_size = load_image_size(netboot_filename, ram_ptr, ram_size); 438 ipl->start_addr = KERN_IMAGE_START; 439 } 440 441 if (img_size < 0) { 442 error_setg(errp, "Failed to load network bootloader"); 443 } 444 445 g_free(netboot_filename); 446 447 unref_mr: 448 memory_region_unref(mr); 449 return img_size; 450 } 451 452 static bool is_virtio_ccw_device_of_type(IplParameterBlock *iplb, 453 int virtio_id) 454 { 455 uint8_t cssid; 456 uint8_t ssid; 457 uint16_t devno; 458 uint16_t schid; 459 SubchDev *sch = NULL; 460 461 if (iplb->pbt != S390_IPL_TYPE_CCW) { 462 return false; 463 } 464 465 devno = be16_to_cpu(iplb->ccw.devno); 466 ssid = iplb->ccw.ssid & 3; 467 468 for (schid = 0; schid < MAX_SCHID; schid++) { 469 for (cssid = 0; cssid < MAX_CSSID; cssid++) { 470 sch = css_find_subch(1, cssid, ssid, schid); 471 472 if (sch && sch->devno == devno) { 473 return sch->id.cu_model == virtio_id; 474 } 475 } 476 } 477 return false; 478 } 479 480 static bool is_virtio_net_device(IplParameterBlock *iplb) 481 { 482 return is_virtio_ccw_device_of_type(iplb, VIRTIO_ID_NET); 483 } 484 485 static bool is_virtio_scsi_device(IplParameterBlock *iplb) 486 { 487 return is_virtio_ccw_device_of_type(iplb, VIRTIO_ID_SCSI); 488 } 489 490 void s390_ipl_update_diag308(IplParameterBlock *iplb) 491 { 492 S390IPLState *ipl = get_ipl_device(); 493 494 ipl->iplb = *iplb; 495 ipl->iplb_valid = true; 496 ipl->netboot = is_virtio_net_device(iplb); 497 } 498 499 IplParameterBlock *s390_ipl_get_iplb(void) 500 { 501 S390IPLState *ipl = get_ipl_device(); 502 503 if (!ipl->iplb_valid) { 504 return NULL; 505 } 506 return &ipl->iplb; 507 } 508 509 void s390_ipl_reset_request(CPUState *cs, enum s390_reset reset_type) 510 { 511 S390IPLState *ipl = get_ipl_device(); 512 513 if (reset_type == S390_RESET_EXTERNAL || reset_type == S390_RESET_REIPL) { 514 /* use CPU 0 for full resets */ 515 ipl->reset_cpu_index = 0; 516 } else { 517 ipl->reset_cpu_index = cs->cpu_index; 518 } 519 ipl->reset_type = reset_type; 520 521 if (reset_type == S390_RESET_REIPL && 522 ipl->iplb_valid && 523 !ipl->netboot && 524 ipl->iplb.pbt == S390_IPL_TYPE_CCW && 525 is_virtio_scsi_device(&ipl->iplb)) { 526 CcwDevice *ccw_dev = s390_get_ccw_device(get_boot_device(0)); 527 528 if (ccw_dev && 529 cpu_to_be16(ccw_dev->sch->devno) == ipl->iplb.ccw.devno && 530 (ccw_dev->sch->ssid & 3) == ipl->iplb.ccw.ssid) { 531 /* 532 * this is the original boot device's SCSI 533 * so restore IPL parameter info from it 534 */ 535 ipl->iplb_valid = s390_gen_initial_iplb(ipl); 536 } 537 } 538 qemu_system_reset_request(SHUTDOWN_CAUSE_GUEST_RESET); 539 /* as this is triggered by a CPU, make sure to exit the loop */ 540 if (tcg_enabled()) { 541 cpu_loop_exit(cs); 542 } 543 } 544 545 void s390_ipl_get_reset_request(CPUState **cs, enum s390_reset *reset_type) 546 { 547 S390IPLState *ipl = get_ipl_device(); 548 549 *cs = qemu_get_cpu(ipl->reset_cpu_index); 550 if (!*cs) { 551 /* use any CPU */ 552 *cs = first_cpu; 553 } 554 *reset_type = ipl->reset_type; 555 } 556 557 void s390_ipl_clear_reset_request(void) 558 { 559 S390IPLState *ipl = get_ipl_device(); 560 561 ipl->reset_type = S390_RESET_EXTERNAL; 562 /* use CPU 0 for full resets */ 563 ipl->reset_cpu_index = 0; 564 } 565 566 static void s390_ipl_prepare_qipl(S390CPU *cpu) 567 { 568 S390IPLState *ipl = get_ipl_device(); 569 uint8_t *addr; 570 uint64_t len = 4096; 571 572 addr = cpu_physical_memory_map(cpu->env.psa, &len, 1); 573 if (!addr || len < QIPL_ADDRESS + sizeof(QemuIplParameters)) { 574 error_report("Cannot set QEMU IPL parameters"); 575 return; 576 } 577 memcpy(addr + QIPL_ADDRESS, &ipl->qipl, sizeof(QemuIplParameters)); 578 cpu_physical_memory_unmap(addr, len, 1, len); 579 } 580 581 void s390_ipl_prepare_cpu(S390CPU *cpu) 582 { 583 S390IPLState *ipl = get_ipl_device(); 584 Error *err = NULL; 585 586 cpu->env.psw.addr = ipl->start_addr; 587 cpu->env.psw.mask = IPL_PSW_MASK; 588 589 if (!ipl->kernel || ipl->iplb_valid) { 590 cpu->env.psw.addr = ipl->bios_start_addr; 591 if (!ipl->iplb_valid) { 592 ipl->iplb_valid = s390_gen_initial_iplb(ipl); 593 } 594 } 595 if (ipl->netboot) { 596 if (load_netboot_image(&err) < 0) { 597 error_report_err(err); 598 exit(1); 599 } 600 ipl->qipl.netboot_start_addr = cpu_to_be64(ipl->start_addr); 601 } 602 s390_ipl_set_boot_menu(ipl); 603 s390_ipl_prepare_qipl(cpu); 604 } 605 606 static void s390_ipl_reset(DeviceState *dev) 607 { 608 S390IPLState *ipl = S390_IPL(dev); 609 610 if (ipl->reset_type != S390_RESET_REIPL) { 611 ipl->iplb_valid = false; 612 memset(&ipl->iplb, 0, sizeof(IplParameterBlock)); 613 } 614 } 615 616 static void s390_ipl_class_init(ObjectClass *klass, void *data) 617 { 618 DeviceClass *dc = DEVICE_CLASS(klass); 619 620 dc->realize = s390_ipl_realize; 621 dc->props = s390_ipl_properties; 622 dc->reset = s390_ipl_reset; 623 dc->vmsd = &vmstate_ipl; 624 set_bit(DEVICE_CATEGORY_MISC, dc->categories); 625 /* Reason: Loads the ROMs and thus can only be used one time - internally */ 626 dc->user_creatable = false; 627 } 628 629 static const TypeInfo s390_ipl_info = { 630 .class_init = s390_ipl_class_init, 631 .parent = TYPE_DEVICE, 632 .name = TYPE_S390_IPL, 633 .instance_size = sizeof(S390IPLState), 634 }; 635 636 static void s390_ipl_register_types(void) 637 { 638 type_register_static(&s390_ipl_info); 639 } 640 641 type_init(s390_ipl_register_types) 642