xref: /openbmc/qemu/hw/s390x/ipl.c (revision f7160f32)
1 /*
2  * bootloader support
3  *
4  * Copyright IBM, Corp. 2012, 2020
5  *
6  * Authors:
7  *  Christian Borntraeger <borntraeger@de.ibm.com>
8  *  Janosch Frank <frankja@linux.ibm.com>
9  *
10  * This work is licensed under the terms of the GNU GPL, version 2 or (at your
11  * option) any later version.  See the COPYING file in the top-level directory.
12  *
13  */
14 
15 #include "qemu/osdep.h"
16 #include "qemu-common.h"
17 #include "qapi/error.h"
18 #include "sysemu/reset.h"
19 #include "sysemu/runstate.h"
20 #include "sysemu/sysemu.h"
21 #include "sysemu/tcg.h"
22 #include "cpu.h"
23 #include "elf.h"
24 #include "hw/loader.h"
25 #include "hw/qdev-properties.h"
26 #include "hw/boards.h"
27 #include "hw/s390x/virtio-ccw.h"
28 #include "hw/s390x/vfio-ccw.h"
29 #include "hw/s390x/css.h"
30 #include "hw/s390x/ebcdic.h"
31 #include "hw/s390x/pv.h"
32 #include "ipl.h"
33 #include "qemu/error-report.h"
34 #include "qemu/config-file.h"
35 #include "qemu/cutils.h"
36 #include "qemu/option.h"
37 #include "exec/exec-all.h"
38 
39 #define KERN_IMAGE_START                0x010000UL
40 #define LINUX_MAGIC_ADDR                0x010008UL
41 #define KERN_PARM_AREA                  0x010480UL
42 #define INITRD_START                    0x800000UL
43 #define INITRD_PARM_START               0x010408UL
44 #define PARMFILE_START                  0x001000UL
45 #define ZIPL_IMAGE_START                0x009000UL
46 #define IPL_PSW_MASK                    (PSW_MASK_32 | PSW_MASK_64)
47 
48 static bool iplb_extended_needed(void *opaque)
49 {
50     S390IPLState *ipl = S390_IPL(object_resolve_path(TYPE_S390_IPL, NULL));
51 
52     return ipl->iplbext_migration;
53 }
54 
55 static const VMStateDescription vmstate_iplb_extended = {
56     .name = "ipl/iplb_extended",
57     .version_id = 0,
58     .minimum_version_id = 0,
59     .needed = iplb_extended_needed,
60     .fields = (VMStateField[]) {
61         VMSTATE_UINT8_ARRAY(reserved_ext, IplParameterBlock, 4096 - 200),
62         VMSTATE_END_OF_LIST()
63     }
64 };
65 
66 static const VMStateDescription vmstate_iplb = {
67     .name = "ipl/iplb",
68     .version_id = 0,
69     .minimum_version_id = 0,
70     .fields = (VMStateField[]) {
71         VMSTATE_UINT8_ARRAY(reserved1, IplParameterBlock, 110),
72         VMSTATE_UINT16(devno, IplParameterBlock),
73         VMSTATE_UINT8_ARRAY(reserved2, IplParameterBlock, 88),
74         VMSTATE_END_OF_LIST()
75     },
76     .subsections = (const VMStateDescription*[]) {
77         &vmstate_iplb_extended,
78         NULL
79     }
80 };
81 
82 static const VMStateDescription vmstate_ipl = {
83     .name = "ipl",
84     .version_id = 0,
85     .minimum_version_id = 0,
86     .fields = (VMStateField[]) {
87         VMSTATE_UINT64(compat_start_addr, S390IPLState),
88         VMSTATE_UINT64(compat_bios_start_addr, S390IPLState),
89         VMSTATE_STRUCT(iplb, S390IPLState, 0, vmstate_iplb, IplParameterBlock),
90         VMSTATE_BOOL(iplb_valid, S390IPLState),
91         VMSTATE_UINT8(cssid, S390IPLState),
92         VMSTATE_UINT8(ssid, S390IPLState),
93         VMSTATE_UINT16(devno, S390IPLState),
94         VMSTATE_END_OF_LIST()
95      }
96 };
97 
98 static S390IPLState *get_ipl_device(void)
99 {
100     return S390_IPL(object_resolve_path_type("", TYPE_S390_IPL, NULL));
101 }
102 
103 static uint64_t bios_translate_addr(void *opaque, uint64_t srcaddr)
104 {
105     uint64_t dstaddr = *(uint64_t *) opaque;
106     /*
107      * Assuming that our s390-ccw.img was linked for starting at address 0,
108      * we can simply add the destination address for the final location
109      */
110     return srcaddr + dstaddr;
111 }
112 
113 static void s390_ipl_realize(DeviceState *dev, Error **errp)
114 {
115     S390IPLState *ipl = S390_IPL(dev);
116     uint32_t *ipl_psw;
117     uint64_t pentry;
118     char *magic;
119     int kernel_size;
120 
121     int bios_size;
122     char *bios_filename;
123 
124     /*
125      * Always load the bios if it was enforced,
126      * even if an external kernel has been defined.
127      */
128     if (!ipl->kernel || ipl->enforce_bios) {
129         uint64_t fwbase = (MIN(ram_size, 0x80000000U) - 0x200000) & ~0xffffUL;
130 
131         if (bios_name == NULL) {
132             bios_name = ipl->firmware;
133         }
134 
135         bios_filename = qemu_find_file(QEMU_FILE_TYPE_BIOS, bios_name);
136         if (bios_filename == NULL) {
137             error_setg(errp, "could not find stage1 bootloader");
138             return;
139         }
140 
141         bios_size = load_elf(bios_filename, NULL,
142                              bios_translate_addr, &fwbase,
143                              &ipl->bios_start_addr, NULL, NULL, NULL, 1,
144                              EM_S390, 0, 0);
145         if (bios_size > 0) {
146             /* Adjust ELF start address to final location */
147             ipl->bios_start_addr += fwbase;
148         } else {
149             /* Try to load non-ELF file */
150             bios_size = load_image_targphys(bios_filename, ZIPL_IMAGE_START,
151                                             4096);
152             ipl->bios_start_addr = ZIPL_IMAGE_START;
153         }
154         g_free(bios_filename);
155 
156         if (bios_size == -1) {
157             error_setg(errp, "could not load bootloader '%s'", bios_name);
158             return;
159         }
160 
161         /* default boot target is the bios */
162         ipl->start_addr = ipl->bios_start_addr;
163     }
164 
165     if (ipl->kernel) {
166         kernel_size = load_elf(ipl->kernel, NULL, NULL, NULL,
167                                &pentry, NULL,
168                                NULL, NULL, 1, EM_S390, 0, 0);
169         if (kernel_size < 0) {
170             kernel_size = load_image_targphys(ipl->kernel, 0, ram_size);
171             if (kernel_size < 0) {
172                 error_setg(errp, "could not load kernel '%s'", ipl->kernel);
173                 return;
174             }
175             /* if this is Linux use KERN_IMAGE_START */
176             magic = rom_ptr(LINUX_MAGIC_ADDR, 6);
177             if (magic && !memcmp(magic, "S390EP", 6)) {
178                 pentry = KERN_IMAGE_START;
179             } else {
180                 /* if not Linux load the address of the (short) IPL PSW */
181                 ipl_psw = rom_ptr(4, 4);
182                 if (ipl_psw) {
183                     pentry = be32_to_cpu(*ipl_psw) & PSW_MASK_SHORT_ADDR;
184                 } else {
185                     error_setg(errp, "Could not get IPL PSW");
186                     return;
187                 }
188             }
189         }
190         /*
191          * Is it a Linux kernel (starting at 0x10000)? If yes, we fill in the
192          * kernel parameters here as well. Note: For old kernels (up to 3.2)
193          * we can not rely on the ELF entry point - it was 0x800 (the SALIPL
194          * loader) and it won't work. For this case we force it to 0x10000, too.
195          */
196         if (pentry == KERN_IMAGE_START || pentry == 0x800) {
197             char *parm_area = rom_ptr(KERN_PARM_AREA, strlen(ipl->cmdline) + 1);
198             ipl->start_addr = KERN_IMAGE_START;
199             /* Overwrite parameters in the kernel image, which are "rom" */
200             if (parm_area) {
201                 strcpy(parm_area, ipl->cmdline);
202             }
203         } else {
204             ipl->start_addr = pentry;
205         }
206 
207         if (ipl->initrd) {
208             ram_addr_t initrd_offset;
209             int initrd_size;
210             uint64_t *romptr;
211 
212             initrd_offset = INITRD_START;
213             while (kernel_size + 0x100000 > initrd_offset) {
214                 initrd_offset += 0x100000;
215             }
216             initrd_size = load_image_targphys(ipl->initrd, initrd_offset,
217                                               ram_size - initrd_offset);
218             if (initrd_size == -1) {
219                 error_setg(errp, "could not load initrd '%s'", ipl->initrd);
220                 return;
221             }
222 
223             /*
224              * we have to overwrite values in the kernel image,
225              * which are "rom"
226              */
227             romptr = rom_ptr(INITRD_PARM_START, 16);
228             if (romptr) {
229                 stq_p(romptr, initrd_offset);
230                 stq_p(romptr + 1, initrd_size);
231             }
232         }
233     }
234     /*
235      * Don't ever use the migrated values, they could come from a different
236      * BIOS and therefore don't work. But still migrate the values, so
237      * QEMUs relying on it don't break.
238      */
239     ipl->compat_start_addr = ipl->start_addr;
240     ipl->compat_bios_start_addr = ipl->bios_start_addr;
241     /*
242      * Because this Device is not on any bus in the qbus tree (it is
243      * not a sysbus device and it's not on some other bus like a PCI
244      * bus) it will not be automatically reset by the 'reset the
245      * sysbus' hook registered by vl.c like most devices. So we must
246      * manually register a reset hook for it.
247      * TODO: there should be a better way to do this.
248      */
249     qemu_register_reset(resettable_cold_reset_fn, dev);
250 }
251 
252 static Property s390_ipl_properties[] = {
253     DEFINE_PROP_STRING("kernel", S390IPLState, kernel),
254     DEFINE_PROP_STRING("initrd", S390IPLState, initrd),
255     DEFINE_PROP_STRING("cmdline", S390IPLState, cmdline),
256     DEFINE_PROP_STRING("firmware", S390IPLState, firmware),
257     DEFINE_PROP_STRING("netboot_fw", S390IPLState, netboot_fw),
258     DEFINE_PROP_BOOL("enforce_bios", S390IPLState, enforce_bios, false),
259     DEFINE_PROP_BOOL("iplbext_migration", S390IPLState, iplbext_migration,
260                      true),
261     DEFINE_PROP_END_OF_LIST(),
262 };
263 
264 static void s390_ipl_set_boot_menu(S390IPLState *ipl)
265 {
266     QemuOptsList *plist = qemu_find_opts("boot-opts");
267     QemuOpts *opts = QTAILQ_FIRST(&plist->head);
268     const char *tmp;
269     unsigned long splash_time = 0;
270 
271     if (!get_boot_device(0)) {
272         if (boot_menu) {
273             error_report("boot menu requires a bootindex to be specified for "
274                          "the IPL device");
275         }
276         return;
277     }
278 
279     switch (ipl->iplb.pbt) {
280     case S390_IPL_TYPE_CCW:
281         /* In the absence of -boot menu, use zipl parameters */
282         if (!qemu_opt_get(opts, "menu")) {
283             ipl->qipl.qipl_flags |= QIPL_FLAG_BM_OPTS_ZIPL;
284             return;
285         }
286         break;
287     case S390_IPL_TYPE_QEMU_SCSI:
288         break;
289     default:
290         if (boot_menu) {
291             error_report("boot menu is not supported for this device type");
292         }
293         return;
294     }
295 
296     if (!boot_menu) {
297         return;
298     }
299 
300     ipl->qipl.qipl_flags |= QIPL_FLAG_BM_OPTS_CMD;
301 
302     tmp = qemu_opt_get(opts, "splash-time");
303 
304     if (tmp && qemu_strtoul(tmp, NULL, 10, &splash_time)) {
305         error_report("splash-time is invalid, forcing it to 0");
306         ipl->qipl.boot_menu_timeout = 0;
307         return;
308     }
309 
310     if (splash_time > 0xffffffff) {
311         error_report("splash-time is too large, forcing it to max value");
312         ipl->qipl.boot_menu_timeout = 0xffffffff;
313         return;
314     }
315 
316     ipl->qipl.boot_menu_timeout = cpu_to_be32(splash_time);
317 }
318 
319 #define CCW_DEVTYPE_NONE        0x00
320 #define CCW_DEVTYPE_VIRTIO      0x01
321 #define CCW_DEVTYPE_VIRTIO_NET  0x02
322 #define CCW_DEVTYPE_SCSI        0x03
323 #define CCW_DEVTYPE_VFIO        0x04
324 
325 static CcwDevice *s390_get_ccw_device(DeviceState *dev_st, int *devtype)
326 {
327     CcwDevice *ccw_dev = NULL;
328     int tmp_dt = CCW_DEVTYPE_NONE;
329 
330     if (dev_st) {
331         VirtIONet *virtio_net_dev = (VirtIONet *)
332             object_dynamic_cast(OBJECT(dev_st), TYPE_VIRTIO_NET);
333         VirtioCcwDevice *virtio_ccw_dev = (VirtioCcwDevice *)
334             object_dynamic_cast(OBJECT(qdev_get_parent_bus(dev_st)->parent),
335                                 TYPE_VIRTIO_CCW_DEVICE);
336         VFIOCCWDevice *vfio_ccw_dev = (VFIOCCWDevice *)
337             object_dynamic_cast(OBJECT(dev_st), TYPE_VFIO_CCW);
338 
339         if (virtio_ccw_dev) {
340             ccw_dev = CCW_DEVICE(virtio_ccw_dev);
341             if (virtio_net_dev) {
342                 tmp_dt = CCW_DEVTYPE_VIRTIO_NET;
343             } else {
344                 tmp_dt = CCW_DEVTYPE_VIRTIO;
345             }
346         } else if (vfio_ccw_dev) {
347             ccw_dev = CCW_DEVICE(vfio_ccw_dev);
348             tmp_dt = CCW_DEVTYPE_VFIO;
349         } else {
350             SCSIDevice *sd = (SCSIDevice *)
351                 object_dynamic_cast(OBJECT(dev_st),
352                                     TYPE_SCSI_DEVICE);
353             if (sd) {
354                 SCSIBus *bus = scsi_bus_from_device(sd);
355                 VirtIOSCSI *vdev = container_of(bus, VirtIOSCSI, bus);
356                 VirtIOSCSICcw *scsi_ccw = container_of(vdev, VirtIOSCSICcw,
357                                                        vdev);
358 
359                 ccw_dev = (CcwDevice *)object_dynamic_cast(OBJECT(scsi_ccw),
360                                                            TYPE_CCW_DEVICE);
361                 tmp_dt = CCW_DEVTYPE_SCSI;
362             }
363         }
364     }
365     if (devtype) {
366         *devtype = tmp_dt;
367     }
368     return ccw_dev;
369 }
370 
371 static bool s390_gen_initial_iplb(S390IPLState *ipl)
372 {
373     DeviceState *dev_st;
374     CcwDevice *ccw_dev = NULL;
375     SCSIDevice *sd;
376     int devtype;
377 
378     dev_st = get_boot_device(0);
379     if (dev_st) {
380         ccw_dev = s390_get_ccw_device(dev_st, &devtype);
381     }
382 
383     /*
384      * Currently allow IPL only from CCW devices.
385      */
386     if (ccw_dev) {
387         switch (devtype) {
388         case CCW_DEVTYPE_SCSI:
389             sd = SCSI_DEVICE(dev_st);
390             ipl->iplb.len = cpu_to_be32(S390_IPLB_MIN_QEMU_SCSI_LEN);
391             ipl->iplb.blk0_len =
392                 cpu_to_be32(S390_IPLB_MIN_QEMU_SCSI_LEN - S390_IPLB_HEADER_LEN);
393             ipl->iplb.pbt = S390_IPL_TYPE_QEMU_SCSI;
394             ipl->iplb.scsi.lun = cpu_to_be32(sd->lun);
395             ipl->iplb.scsi.target = cpu_to_be16(sd->id);
396             ipl->iplb.scsi.channel = cpu_to_be16(sd->channel);
397             ipl->iplb.scsi.devno = cpu_to_be16(ccw_dev->sch->devno);
398             ipl->iplb.scsi.ssid = ccw_dev->sch->ssid & 3;
399             break;
400         case CCW_DEVTYPE_VFIO:
401             ipl->iplb.len = cpu_to_be32(S390_IPLB_MIN_CCW_LEN);
402             ipl->iplb.pbt = S390_IPL_TYPE_CCW;
403             ipl->iplb.ccw.devno = cpu_to_be16(ccw_dev->sch->devno);
404             ipl->iplb.ccw.ssid = ccw_dev->sch->ssid & 3;
405             break;
406         case CCW_DEVTYPE_VIRTIO_NET:
407             ipl->netboot = true;
408             /* Fall through to CCW_DEVTYPE_VIRTIO case */
409         case CCW_DEVTYPE_VIRTIO:
410             ipl->iplb.len = cpu_to_be32(S390_IPLB_MIN_CCW_LEN);
411             ipl->iplb.blk0_len =
412                 cpu_to_be32(S390_IPLB_MIN_CCW_LEN - S390_IPLB_HEADER_LEN);
413             ipl->iplb.pbt = S390_IPL_TYPE_CCW;
414             ipl->iplb.ccw.devno = cpu_to_be16(ccw_dev->sch->devno);
415             ipl->iplb.ccw.ssid = ccw_dev->sch->ssid & 3;
416             break;
417         }
418 
419         if (!s390_ipl_set_loadparm(ipl->iplb.loadparm)) {
420             ipl->iplb.flags |= DIAG308_FLAGS_LP_VALID;
421         }
422 
423         return true;
424     }
425 
426     return false;
427 }
428 
429 int s390_ipl_set_loadparm(uint8_t *loadparm)
430 {
431     MachineState *machine = MACHINE(qdev_get_machine());
432     char *lp = object_property_get_str(OBJECT(machine), "loadparm", NULL);
433 
434     if (lp) {
435         int i;
436 
437         /* lp is an uppercase string without leading/embedded spaces */
438         for (i = 0; i < 8 && lp[i]; i++) {
439             loadparm[i] = ascii2ebcdic[(uint8_t) lp[i]];
440         }
441 
442         if (i < 8) {
443             memset(loadparm + i, 0x40, 8 - i); /* fill with EBCDIC spaces */
444         }
445 
446         g_free(lp);
447         return 0;
448     }
449 
450     return -1;
451 }
452 
453 static int load_netboot_image(Error **errp)
454 {
455     S390IPLState *ipl = get_ipl_device();
456     char *netboot_filename;
457     MemoryRegion *sysmem =  get_system_memory();
458     MemoryRegion *mr = NULL;
459     void *ram_ptr = NULL;
460     int img_size = -1;
461 
462     mr = memory_region_find(sysmem, 0, 1).mr;
463     if (!mr) {
464         error_setg(errp, "Failed to find memory region at address 0");
465         return -1;
466     }
467 
468     ram_ptr = memory_region_get_ram_ptr(mr);
469     if (!ram_ptr) {
470         error_setg(errp, "No RAM found");
471         goto unref_mr;
472     }
473 
474     netboot_filename = qemu_find_file(QEMU_FILE_TYPE_BIOS, ipl->netboot_fw);
475     if (netboot_filename == NULL) {
476         error_setg(errp, "Could not find network bootloader '%s'",
477                    ipl->netboot_fw);
478         goto unref_mr;
479     }
480 
481     img_size = load_elf_ram(netboot_filename, NULL, NULL, NULL,
482                             &ipl->start_addr,
483                             NULL, NULL, NULL, 1, EM_S390, 0, 0, NULL,
484                             false);
485 
486     if (img_size < 0) {
487         img_size = load_image_size(netboot_filename, ram_ptr, ram_size);
488         ipl->start_addr = KERN_IMAGE_START;
489     }
490 
491     if (img_size < 0) {
492         error_setg(errp, "Failed to load network bootloader");
493     }
494 
495     g_free(netboot_filename);
496 
497 unref_mr:
498     memory_region_unref(mr);
499     return img_size;
500 }
501 
502 static bool is_virtio_ccw_device_of_type(IplParameterBlock *iplb,
503                                          int virtio_id)
504 {
505     uint8_t cssid;
506     uint8_t ssid;
507     uint16_t devno;
508     uint16_t schid;
509     SubchDev *sch = NULL;
510 
511     if (iplb->pbt != S390_IPL_TYPE_CCW) {
512         return false;
513     }
514 
515     devno = be16_to_cpu(iplb->ccw.devno);
516     ssid = iplb->ccw.ssid & 3;
517 
518     for (schid = 0; schid < MAX_SCHID; schid++) {
519         for (cssid = 0; cssid < MAX_CSSID; cssid++) {
520             sch = css_find_subch(1, cssid, ssid, schid);
521 
522             if (sch && sch->devno == devno) {
523                 return sch->id.cu_model == virtio_id;
524             }
525         }
526     }
527     return false;
528 }
529 
530 static bool is_virtio_net_device(IplParameterBlock *iplb)
531 {
532     return is_virtio_ccw_device_of_type(iplb, VIRTIO_ID_NET);
533 }
534 
535 static bool is_virtio_scsi_device(IplParameterBlock *iplb)
536 {
537     return is_virtio_ccw_device_of_type(iplb, VIRTIO_ID_SCSI);
538 }
539 
540 static void update_machine_ipl_properties(IplParameterBlock *iplb)
541 {
542     Object *machine = qdev_get_machine();
543     Error *err = NULL;
544 
545     /* Sync loadparm */
546     if (iplb->flags & DIAG308_FLAGS_LP_VALID) {
547         uint8_t *ebcdic_loadparm = iplb->loadparm;
548         char ascii_loadparm[9];
549         int i;
550 
551         for (i = 0; i < 8 && ebcdic_loadparm[i]; i++) {
552             ascii_loadparm[i] = ebcdic2ascii[(uint8_t) ebcdic_loadparm[i]];
553         }
554         ascii_loadparm[i] = 0;
555         object_property_set_str(machine, "loadparm", ascii_loadparm, &err);
556     } else {
557         object_property_set_str(machine, "loadparm", "", &err);
558     }
559     if (err) {
560         warn_report_err(err);
561     }
562 }
563 
564 void s390_ipl_update_diag308(IplParameterBlock *iplb)
565 {
566     S390IPLState *ipl = get_ipl_device();
567 
568     /*
569      * The IPLB set and retrieved by subcodes 8/9 is completely
570      * separate from the one managed via subcodes 5/6.
571      */
572     if (iplb->pbt == S390_IPL_TYPE_PV) {
573         ipl->iplb_pv = *iplb;
574         ipl->iplb_valid_pv = true;
575     } else {
576         ipl->iplb = *iplb;
577         ipl->iplb_valid = true;
578     }
579     ipl->netboot = is_virtio_net_device(iplb);
580     update_machine_ipl_properties(iplb);
581 }
582 
583 IplParameterBlock *s390_ipl_get_iplb_pv(void)
584 {
585     S390IPLState *ipl = get_ipl_device();
586 
587     if (!ipl->iplb_valid_pv) {
588         return NULL;
589     }
590     return &ipl->iplb_pv;
591 }
592 
593 IplParameterBlock *s390_ipl_get_iplb(void)
594 {
595     S390IPLState *ipl = get_ipl_device();
596 
597     if (!ipl->iplb_valid) {
598         return NULL;
599     }
600     return &ipl->iplb;
601 }
602 
603 void s390_ipl_reset_request(CPUState *cs, enum s390_reset reset_type)
604 {
605     S390IPLState *ipl = get_ipl_device();
606 
607     if (reset_type == S390_RESET_EXTERNAL || reset_type == S390_RESET_REIPL) {
608         /* use CPU 0 for full resets */
609         ipl->reset_cpu_index = 0;
610     } else {
611         ipl->reset_cpu_index = cs->cpu_index;
612     }
613     ipl->reset_type = reset_type;
614 
615     if (reset_type == S390_RESET_REIPL &&
616         ipl->iplb_valid &&
617         !ipl->netboot &&
618         ipl->iplb.pbt == S390_IPL_TYPE_CCW &&
619         is_virtio_scsi_device(&ipl->iplb)) {
620         CcwDevice *ccw_dev = s390_get_ccw_device(get_boot_device(0), NULL);
621 
622         if (ccw_dev &&
623             cpu_to_be16(ccw_dev->sch->devno) == ipl->iplb.ccw.devno &&
624             (ccw_dev->sch->ssid & 3) == ipl->iplb.ccw.ssid) {
625             /*
626              * this is the original boot device's SCSI
627              * so restore IPL parameter info from it
628              */
629             ipl->iplb_valid = s390_gen_initial_iplb(ipl);
630         }
631     }
632     if (reset_type == S390_RESET_MODIFIED_CLEAR ||
633         reset_type == S390_RESET_LOAD_NORMAL ||
634         reset_type == S390_RESET_PV) {
635         /* ignore -no-reboot, send no event  */
636         qemu_system_reset_request(SHUTDOWN_CAUSE_SUBSYSTEM_RESET);
637     } else {
638         qemu_system_reset_request(SHUTDOWN_CAUSE_GUEST_RESET);
639     }
640     /* as this is triggered by a CPU, make sure to exit the loop */
641     if (tcg_enabled()) {
642         cpu_loop_exit(cs);
643     }
644 }
645 
646 void s390_ipl_get_reset_request(CPUState **cs, enum s390_reset *reset_type)
647 {
648     S390IPLState *ipl = get_ipl_device();
649 
650     *cs = qemu_get_cpu(ipl->reset_cpu_index);
651     if (!*cs) {
652         /* use any CPU */
653         *cs = first_cpu;
654     }
655     *reset_type = ipl->reset_type;
656 }
657 
658 void s390_ipl_clear_reset_request(void)
659 {
660     S390IPLState *ipl = get_ipl_device();
661 
662     ipl->reset_type = S390_RESET_EXTERNAL;
663     /* use CPU 0 for full resets */
664     ipl->reset_cpu_index = 0;
665 }
666 
667 static void s390_ipl_prepare_qipl(S390CPU *cpu)
668 {
669     S390IPLState *ipl = get_ipl_device();
670     uint8_t *addr;
671     uint64_t len = 4096;
672 
673     addr = cpu_physical_memory_map(cpu->env.psa, &len, true);
674     if (!addr || len < QIPL_ADDRESS + sizeof(QemuIplParameters)) {
675         error_report("Cannot set QEMU IPL parameters");
676         return;
677     }
678     memcpy(addr + QIPL_ADDRESS, &ipl->qipl, sizeof(QemuIplParameters));
679     cpu_physical_memory_unmap(addr, len, 1, len);
680 }
681 
682 int s390_ipl_prepare_pv_header(void)
683 {
684     IplParameterBlock *ipib = s390_ipl_get_iplb_pv();
685     IPLBlockPV *ipib_pv = &ipib->pv;
686     void *hdr = g_malloc(ipib_pv->pv_header_len);
687     int rc;
688 
689     cpu_physical_memory_read(ipib_pv->pv_header_addr, hdr,
690                              ipib_pv->pv_header_len);
691     rc = s390_pv_set_sec_parms((uintptr_t)hdr,
692                                ipib_pv->pv_header_len);
693     g_free(hdr);
694     return rc;
695 }
696 
697 int s390_ipl_pv_unpack(void)
698 {
699     IplParameterBlock *ipib = s390_ipl_get_iplb_pv();
700     IPLBlockPV *ipib_pv = &ipib->pv;
701     int i, rc = 0;
702 
703     for (i = 0; i < ipib_pv->num_comp; i++) {
704         rc = s390_pv_unpack(ipib_pv->components[i].addr,
705                             TARGET_PAGE_ALIGN(ipib_pv->components[i].size),
706                             ipib_pv->components[i].tweak_pref);
707         if (rc) {
708             break;
709         }
710     }
711     return rc;
712 }
713 
714 void s390_ipl_prepare_cpu(S390CPU *cpu)
715 {
716     S390IPLState *ipl = get_ipl_device();
717     Error *err = NULL;
718 
719     cpu->env.psw.addr = ipl->start_addr;
720     cpu->env.psw.mask = IPL_PSW_MASK;
721 
722     if (!ipl->kernel || ipl->iplb_valid) {
723         cpu->env.psw.addr = ipl->bios_start_addr;
724         if (!ipl->iplb_valid) {
725             ipl->iplb_valid = s390_gen_initial_iplb(ipl);
726         }
727     }
728     if (ipl->netboot) {
729         if (load_netboot_image(&err) < 0) {
730             error_report_err(err);
731             exit(1);
732         }
733         ipl->qipl.netboot_start_addr = cpu_to_be64(ipl->start_addr);
734     }
735     s390_ipl_set_boot_menu(ipl);
736     s390_ipl_prepare_qipl(cpu);
737 }
738 
739 static void s390_ipl_reset(DeviceState *dev)
740 {
741     S390IPLState *ipl = S390_IPL(dev);
742 
743     if (ipl->reset_type != S390_RESET_REIPL) {
744         ipl->iplb_valid = false;
745         memset(&ipl->iplb, 0, sizeof(IplParameterBlock));
746     }
747 }
748 
749 static void s390_ipl_class_init(ObjectClass *klass, void *data)
750 {
751     DeviceClass *dc = DEVICE_CLASS(klass);
752 
753     dc->realize = s390_ipl_realize;
754     device_class_set_props(dc, s390_ipl_properties);
755     dc->reset = s390_ipl_reset;
756     dc->vmsd = &vmstate_ipl;
757     set_bit(DEVICE_CATEGORY_MISC, dc->categories);
758     /* Reason: Loads the ROMs and thus can only be used one time - internally */
759     dc->user_creatable = false;
760 }
761 
762 static const TypeInfo s390_ipl_info = {
763     .class_init = s390_ipl_class_init,
764     .parent = TYPE_DEVICE,
765     .name  = TYPE_S390_IPL,
766     .instance_size  = sizeof(S390IPLState),
767 };
768 
769 static void s390_ipl_register_types(void)
770 {
771     type_register_static(&s390_ipl_info);
772 }
773 
774 type_init(s390_ipl_register_types)
775