15f6caa4fSJan Kiszka#!/usr/bin/python 25f6caa4fSJan Kiszka# 35f6caa4fSJan Kiszka# tool for querying VMX capabilities 45f6caa4fSJan Kiszka# 55f6caa4fSJan Kiszka# Copyright 2009-2010 Red Hat, Inc. 65f6caa4fSJan Kiszka# 75f6caa4fSJan Kiszka# Authors: 85f6caa4fSJan Kiszka# Avi Kivity <avi@redhat.com> 95f6caa4fSJan Kiszka# 105f6caa4fSJan Kiszka# This work is licensed under the terms of the GNU GPL, version 2. See 115f6caa4fSJan Kiszka# the COPYING file in the top-level directory. 125f6caa4fSJan Kiszka 13f03868bdSEduardo Habkostfrom __future__ import print_function 145f6caa4fSJan KiszkaMSR_IA32_VMX_BASIC = 0x480 155f6caa4fSJan KiszkaMSR_IA32_VMX_PINBASED_CTLS = 0x481 165f6caa4fSJan KiszkaMSR_IA32_VMX_PROCBASED_CTLS = 0x482 175f6caa4fSJan KiszkaMSR_IA32_VMX_EXIT_CTLS = 0x483 185f6caa4fSJan KiszkaMSR_IA32_VMX_ENTRY_CTLS = 0x484 195f6caa4fSJan KiszkaMSR_IA32_VMX_MISC_CTLS = 0x485 205f6caa4fSJan KiszkaMSR_IA32_VMX_PROCBASED_CTLS2 = 0x48B 215f6caa4fSJan KiszkaMSR_IA32_VMX_EPT_VPID_CAP = 0x48C 225f6caa4fSJan KiszkaMSR_IA32_VMX_TRUE_PINBASED_CTLS = 0x48D 235f6caa4fSJan KiszkaMSR_IA32_VMX_TRUE_PROCBASED_CTLS = 0x48E 245f6caa4fSJan KiszkaMSR_IA32_VMX_TRUE_EXIT_CTLS = 0x48F 255f6caa4fSJan KiszkaMSR_IA32_VMX_TRUE_ENTRY_CTLS = 0x490 26287d55c6SAvi KivityMSR_IA32_VMX_VMFUNC = 0x491 275f6caa4fSJan Kiszka 285f6caa4fSJan Kiszkaclass msr(object): 295f6caa4fSJan Kiszka def __init__(self): 305f6caa4fSJan Kiszka try: 31c3e31eaaSPaolo Bonzini self.f = open('/dev/cpu/0/msr', 'rb', 0) 325f6caa4fSJan Kiszka except: 33c3e31eaaSPaolo Bonzini self.f = open('/dev/msr0', 'rb', 0) 345f6caa4fSJan Kiszka def read(self, index, default = None): 355f6caa4fSJan Kiszka import struct 365f6caa4fSJan Kiszka self.f.seek(index) 375f6caa4fSJan Kiszka try: 385f6caa4fSJan Kiszka return struct.unpack('Q', self.f.read(8))[0] 395f6caa4fSJan Kiszka except: 405f6caa4fSJan Kiszka return default 415f6caa4fSJan Kiszka 425f6caa4fSJan Kiszkaclass Control(object): 435f6caa4fSJan Kiszka def __init__(self, name, bits, cap_msr, true_cap_msr = None): 445f6caa4fSJan Kiszka self.name = name 455f6caa4fSJan Kiszka self.bits = bits 465f6caa4fSJan Kiszka self.cap_msr = cap_msr 475f6caa4fSJan Kiszka self.true_cap_msr = true_cap_msr 485f6caa4fSJan Kiszka def read2(self, nr): 495f6caa4fSJan Kiszka m = msr() 505f6caa4fSJan Kiszka val = m.read(nr, 0) 515f6caa4fSJan Kiszka return (val & 0xffffffff, val >> 32) 525f6caa4fSJan Kiszka def show(self): 53c3e31eaaSPaolo Bonzini print(self.name) 54*49d51b89SPaolo Bonzini mb1, cb1 = self.read2(self.cap_msr) 55*49d51b89SPaolo Bonzini tmb1, tcb1 = 0, 0 565f6caa4fSJan Kiszka if self.true_cap_msr: 57*49d51b89SPaolo Bonzini tmb1, tcb1 = self.read2(self.true_cap_msr) 585f6caa4fSJan Kiszka for bit in sorted(self.bits.keys()): 59*49d51b89SPaolo Bonzini zero = not (mb1 & (1 << bit)) 60*49d51b89SPaolo Bonzini one = cb1 & (1 << bit) 61*49d51b89SPaolo Bonzini true_zero = not (tmb1 & (1 << bit)) 62*49d51b89SPaolo Bonzini true_one = tcb1 & (1 << bit) 635f6caa4fSJan Kiszka s= '?' 645f6caa4fSJan Kiszka if (self.true_cap_msr and true_zero and true_one 655f6caa4fSJan Kiszka and one and not zero): 665f6caa4fSJan Kiszka s = 'default' 675f6caa4fSJan Kiszka elif zero and not one: 685f6caa4fSJan Kiszka s = 'no' 695f6caa4fSJan Kiszka elif one and not zero: 705f6caa4fSJan Kiszka s = 'forced' 715f6caa4fSJan Kiszka elif one and zero: 725f6caa4fSJan Kiszka s = 'yes' 73c3e31eaaSPaolo Bonzini print(' %-40s %s' % (self.bits[bit], s)) 745f6caa4fSJan Kiszka 755f6caa4fSJan Kiszkaclass Misc(object): 765f6caa4fSJan Kiszka def __init__(self, name, bits, msr): 775f6caa4fSJan Kiszka self.name = name 785f6caa4fSJan Kiszka self.bits = bits 795f6caa4fSJan Kiszka self.msr = msr 805f6caa4fSJan Kiszka def show(self): 81c3e31eaaSPaolo Bonzini print(self.name) 825f6caa4fSJan Kiszka value = msr().read(self.msr, 0) 83c3e31eaaSPaolo Bonzini print(' Hex: 0x%x' % (value)) 845f6caa4fSJan Kiszka def first_bit(key): 855f6caa4fSJan Kiszka if type(key) is tuple: 865f6caa4fSJan Kiszka return key[0] 875f6caa4fSJan Kiszka else: 885f6caa4fSJan Kiszka return key 895f6caa4fSJan Kiszka for bits in sorted(self.bits.keys(), key = first_bit): 905f6caa4fSJan Kiszka if type(bits) is tuple: 915f6caa4fSJan Kiszka lo, hi = bits 925f6caa4fSJan Kiszka fmt = int 935f6caa4fSJan Kiszka else: 945f6caa4fSJan Kiszka lo = hi = bits 955f6caa4fSJan Kiszka def fmt(x): 965f6caa4fSJan Kiszka return { True: 'yes', False: 'no' }[x] 975f6caa4fSJan Kiszka v = (value >> lo) & ((1 << (hi - lo + 1)) - 1) 98c3e31eaaSPaolo Bonzini print(' %-40s %s' % (self.bits[bits], fmt(v))) 995f6caa4fSJan Kiszka 1005f6caa4fSJan Kiszkacontrols = [ 101ea4ee283SJan Kiszka Misc( 102ea4ee283SJan Kiszka name = 'Basic VMX Information', 103ea4ee283SJan Kiszka bits = { 104c5d1e2ccSAdrian-Ken Rueegsegger (0, 30): 'Revision', 105ea4ee283SJan Kiszka (32,44): 'VMCS size', 106ea4ee283SJan Kiszka 48: 'VMCS restricted to 32 bit addresses', 107ea4ee283SJan Kiszka 49: 'Dual-monitor support', 108ea4ee283SJan Kiszka (50, 53): 'VMCS memory type', 109ea4ee283SJan Kiszka 54: 'INS/OUTS instruction information', 110ea4ee283SJan Kiszka 55: 'IA32_VMX_TRUE_*_CTLS support', 111ea4ee283SJan Kiszka }, 112ea4ee283SJan Kiszka msr = MSR_IA32_VMX_BASIC, 113ea4ee283SJan Kiszka ), 1145f6caa4fSJan Kiszka Control( 1155f6caa4fSJan Kiszka name = 'pin-based controls', 1165f6caa4fSJan Kiszka bits = { 1175f6caa4fSJan Kiszka 0: 'External interrupt exiting', 1185f6caa4fSJan Kiszka 3: 'NMI exiting', 1195f6caa4fSJan Kiszka 5: 'Virtual NMIs', 1205f6caa4fSJan Kiszka 6: 'Activate VMX-preemption timer', 121ea4ee283SJan Kiszka 7: 'Process posted interrupts', 1225f6caa4fSJan Kiszka }, 1235f6caa4fSJan Kiszka cap_msr = MSR_IA32_VMX_PINBASED_CTLS, 1245f6caa4fSJan Kiszka true_cap_msr = MSR_IA32_VMX_TRUE_PINBASED_CTLS, 1255f6caa4fSJan Kiszka ), 1265f6caa4fSJan Kiszka 1275f6caa4fSJan Kiszka Control( 1285f6caa4fSJan Kiszka name = 'primary processor-based controls', 1295f6caa4fSJan Kiszka bits = { 1305f6caa4fSJan Kiszka 2: 'Interrupt window exiting', 1315f6caa4fSJan Kiszka 3: 'Use TSC offsetting', 1325f6caa4fSJan Kiszka 7: 'HLT exiting', 1335f6caa4fSJan Kiszka 9: 'INVLPG exiting', 1345f6caa4fSJan Kiszka 10: 'MWAIT exiting', 1355f6caa4fSJan Kiszka 11: 'RDPMC exiting', 1365f6caa4fSJan Kiszka 12: 'RDTSC exiting', 1375f6caa4fSJan Kiszka 15: 'CR3-load exiting', 1385f6caa4fSJan Kiszka 16: 'CR3-store exiting', 1395f6caa4fSJan Kiszka 19: 'CR8-load exiting', 1405f6caa4fSJan Kiszka 20: 'CR8-store exiting', 1415f6caa4fSJan Kiszka 21: 'Use TPR shadow', 1425f6caa4fSJan Kiszka 22: 'NMI-window exiting', 1435f6caa4fSJan Kiszka 23: 'MOV-DR exiting', 1445f6caa4fSJan Kiszka 24: 'Unconditional I/O exiting', 1455f6caa4fSJan Kiszka 25: 'Use I/O bitmaps', 1465f6caa4fSJan Kiszka 27: 'Monitor trap flag', 1475f6caa4fSJan Kiszka 28: 'Use MSR bitmaps', 1485f6caa4fSJan Kiszka 29: 'MONITOR exiting', 1495f6caa4fSJan Kiszka 30: 'PAUSE exiting', 1505f6caa4fSJan Kiszka 31: 'Activate secondary control', 1515f6caa4fSJan Kiszka }, 1525f6caa4fSJan Kiszka cap_msr = MSR_IA32_VMX_PROCBASED_CTLS, 1535f6caa4fSJan Kiszka true_cap_msr = MSR_IA32_VMX_TRUE_PROCBASED_CTLS, 1545f6caa4fSJan Kiszka ), 1555f6caa4fSJan Kiszka 1565f6caa4fSJan Kiszka Control( 1575f6caa4fSJan Kiszka name = 'secondary processor-based controls', 1585f6caa4fSJan Kiszka bits = { 1595f6caa4fSJan Kiszka 0: 'Virtualize APIC accesses', 1605f6caa4fSJan Kiszka 1: 'Enable EPT', 1615f6caa4fSJan Kiszka 2: 'Descriptor-table exiting', 162614413f7SJan Kiszka 3: 'Enable RDTSCP', 1635f6caa4fSJan Kiszka 4: 'Virtualize x2APIC mode', 1645f6caa4fSJan Kiszka 5: 'Enable VPID', 1655f6caa4fSJan Kiszka 6: 'WBINVD exiting', 1665f6caa4fSJan Kiszka 7: 'Unrestricted guest', 167614413f7SJan Kiszka 8: 'APIC register emulation', 168f9e90c79SMarcelo Tosatti 9: 'Virtual interrupt delivery', 1695f6caa4fSJan Kiszka 10: 'PAUSE-loop exiting', 170287d55c6SAvi Kivity 11: 'RDRAND exiting', 171287d55c6SAvi Kivity 12: 'Enable INVPCID', 172287d55c6SAvi Kivity 13: 'Enable VM functions', 173007e986fSJan Kiszka 14: 'VMCS shadowing', 174025533f6SPaolo Bonzini 15: 'Enable ENCLS exiting', 175c5d1e2ccSAdrian-Ken Rueegsegger 16: 'RDSEED exiting', 176025533f6SPaolo Bonzini 17: 'Enable PML', 177c5d1e2ccSAdrian-Ken Rueegsegger 18: 'EPT-violation #VE', 178025533f6SPaolo Bonzini 19: 'Conceal non-root operation from PT', 179c5d1e2ccSAdrian-Ken Rueegsegger 20: 'Enable XSAVES/XRSTORS', 180025533f6SPaolo Bonzini 22: 'Mode-based execute control (XS/XU)', 181fc7d2b45SJan Kiszka 23: 'Sub-page write permissions', 182fc7d2b45SJan Kiszka 24: 'GPA translation for PT', 183349cb2fbSEduardo Habkost 25: 'TSC scaling', 184fc7d2b45SJan Kiszka 26: 'User wait and pause', 185fc7d2b45SJan Kiszka 28: 'ENCLV exiting', 1865f6caa4fSJan Kiszka }, 1875f6caa4fSJan Kiszka cap_msr = MSR_IA32_VMX_PROCBASED_CTLS2, 1885f6caa4fSJan Kiszka ), 1895f6caa4fSJan Kiszka 1905f6caa4fSJan Kiszka Control( 1915f6caa4fSJan Kiszka name = 'VM-Exit controls', 1925f6caa4fSJan Kiszka bits = { 1935f6caa4fSJan Kiszka 2: 'Save debug controls', 1945f6caa4fSJan Kiszka 9: 'Host address-space size', 1955f6caa4fSJan Kiszka 12: 'Load IA32_PERF_GLOBAL_CTRL', 1965f6caa4fSJan Kiszka 15: 'Acknowledge interrupt on exit', 1975f6caa4fSJan Kiszka 18: 'Save IA32_PAT', 1985f6caa4fSJan Kiszka 19: 'Load IA32_PAT', 1995f6caa4fSJan Kiszka 20: 'Save IA32_EFER', 2005f6caa4fSJan Kiszka 21: 'Load IA32_EFER', 2015f6caa4fSJan Kiszka 22: 'Save VMX-preemption timer value', 202025533f6SPaolo Bonzini 23: 'Clear IA32_BNDCFGS', 203025533f6SPaolo Bonzini 24: 'Conceal VM exits from PT', 204fc7d2b45SJan Kiszka 25: 'Clear IA32_RTIT_CTL', 2055f6caa4fSJan Kiszka }, 2065f6caa4fSJan Kiszka cap_msr = MSR_IA32_VMX_EXIT_CTLS, 2075f6caa4fSJan Kiszka true_cap_msr = MSR_IA32_VMX_TRUE_EXIT_CTLS, 2085f6caa4fSJan Kiszka ), 2095f6caa4fSJan Kiszka 2105f6caa4fSJan Kiszka Control( 2115f6caa4fSJan Kiszka name = 'VM-Entry controls', 2125f6caa4fSJan Kiszka bits = { 2135f6caa4fSJan Kiszka 2: 'Load debug controls', 214c5d1e2ccSAdrian-Ken Rueegsegger 9: 'IA-32e mode guest', 2155f6caa4fSJan Kiszka 10: 'Entry to SMM', 2165f6caa4fSJan Kiszka 11: 'Deactivate dual-monitor treatment', 2175f6caa4fSJan Kiszka 13: 'Load IA32_PERF_GLOBAL_CTRL', 2185f6caa4fSJan Kiszka 14: 'Load IA32_PAT', 2195f6caa4fSJan Kiszka 15: 'Load IA32_EFER', 220025533f6SPaolo Bonzini 16: 'Load IA32_BNDCFGS', 221025533f6SPaolo Bonzini 17: 'Conceal VM entries from PT', 222fc7d2b45SJan Kiszka 18: 'Load IA32_RTIT_CTL', 2235f6caa4fSJan Kiszka }, 2245f6caa4fSJan Kiszka cap_msr = MSR_IA32_VMX_ENTRY_CTLS, 2255f6caa4fSJan Kiszka true_cap_msr = MSR_IA32_VMX_TRUE_ENTRY_CTLS, 2265f6caa4fSJan Kiszka ), 2275f6caa4fSJan Kiszka 2285f6caa4fSJan Kiszka Misc( 2295f6caa4fSJan Kiszka name = 'Miscellaneous data', 2305f6caa4fSJan Kiszka bits = { 2315f6caa4fSJan Kiszka (0,4): 'VMX-preemption timer scale (log2)', 2325f6caa4fSJan Kiszka 5: 'Store EFER.LMA into IA-32e mode guest control', 2335f6caa4fSJan Kiszka 6: 'HLT activity state', 2345f6caa4fSJan Kiszka 7: 'Shutdown activity state', 2355f6caa4fSJan Kiszka 8: 'Wait-for-SIPI activity state', 236fc7d2b45SJan Kiszka 14: 'PT in VMX operation', 237007e986fSJan Kiszka 15: 'IA32_SMBASE support', 2385f6caa4fSJan Kiszka (16,24): 'Number of CR3-target values', 239c5d1e2ccSAdrian-Ken Rueegsegger (25,27): 'MSR-load/store count recommendation', 240287d55c6SAvi Kivity 28: 'IA32_SMM_MONITOR_CTL[2] can be set to 1', 241007e986fSJan Kiszka 29: 'VMWRITE to VM-exit information fields', 242025533f6SPaolo Bonzini 30: 'Inject event with insn length=0', 243007e986fSJan Kiszka (32,63): 'MSEG revision identifier', 2445f6caa4fSJan Kiszka }, 2455f6caa4fSJan Kiszka msr = MSR_IA32_VMX_MISC_CTLS, 2465f6caa4fSJan Kiszka ), 2475f6caa4fSJan Kiszka 2485f6caa4fSJan Kiszka Misc( 2495f6caa4fSJan Kiszka name = 'VPID and EPT capabilities', 2505f6caa4fSJan Kiszka bits = { 2515f6caa4fSJan Kiszka 0: 'Execute-only EPT translations', 2525f6caa4fSJan Kiszka 6: 'Page-walk length 4', 2535f6caa4fSJan Kiszka 8: 'Paging-structure memory type UC', 2545f6caa4fSJan Kiszka 14: 'Paging-structure memory type WB', 2555f6caa4fSJan Kiszka 16: '2MB EPT pages', 2565f6caa4fSJan Kiszka 17: '1GB EPT pages', 2575f6caa4fSJan Kiszka 20: 'INVEPT supported', 258287d55c6SAvi Kivity 21: 'EPT accessed and dirty flags', 259fc7d2b45SJan Kiszka 22: 'Advanced VM-exit information for EPT violations', 2605f6caa4fSJan Kiszka 25: 'Single-context INVEPT', 2615f6caa4fSJan Kiszka 26: 'All-context INVEPT', 2625f6caa4fSJan Kiszka 32: 'INVVPID supported', 2635f6caa4fSJan Kiszka 40: 'Individual-address INVVPID', 2645f6caa4fSJan Kiszka 41: 'Single-context INVVPID', 2655f6caa4fSJan Kiszka 42: 'All-context INVVPID', 2665f6caa4fSJan Kiszka 43: 'Single-context-retaining-globals INVVPID', 2675f6caa4fSJan Kiszka }, 2685f6caa4fSJan Kiszka msr = MSR_IA32_VMX_EPT_VPID_CAP, 2695f6caa4fSJan Kiszka ), 270287d55c6SAvi Kivity Misc( 271287d55c6SAvi Kivity name = 'VM Functions', 272287d55c6SAvi Kivity bits = { 273287d55c6SAvi Kivity 0: 'EPTP Switching', 274287d55c6SAvi Kivity }, 275287d55c6SAvi Kivity msr = MSR_IA32_VMX_VMFUNC, 276287d55c6SAvi Kivity ), 2775f6caa4fSJan Kiszka ] 2785f6caa4fSJan Kiszka 2795f6caa4fSJan Kiszkafor c in controls: 2805f6caa4fSJan Kiszka c.show() 281