1# SPDX-License-Identifier: GPL-2.0
2#
3# KVM configuration
4#
5
6source "virt/kvm/Kconfig"
7
8menuconfig VIRTUALIZATION
9	bool "Virtualization"
10	depends on HAVE_KVM || X86
11	default y
12	help
13	  Say Y here to get to see options for using your Linux host to run other
14	  operating systems inside virtual machines (guests).
15	  This option alone does not add any kernel code.
16
17	  If you say N, all options in this submenu will be skipped and disabled.
18
19if VIRTUALIZATION
20
21config KVM
22	tristate "Kernel-based Virtual Machine (KVM) support"
23	depends on HAVE_KVM
24	depends on HIGH_RES_TIMERS
25	depends on X86_LOCAL_APIC
26	select PREEMPT_NOTIFIERS
27	select MMU_NOTIFIER
28	select HAVE_KVM_IRQCHIP
29	select HAVE_KVM_PFNCACHE
30	select HAVE_KVM_IRQFD
31	select HAVE_KVM_DIRTY_RING_TSO
32	select HAVE_KVM_DIRTY_RING_ACQ_REL
33	select IRQ_BYPASS_MANAGER
34	select HAVE_KVM_IRQ_BYPASS
35	select HAVE_KVM_IRQ_ROUTING
36	select HAVE_KVM_EVENTFD
37	select KVM_ASYNC_PF
38	select USER_RETURN_NOTIFIER
39	select KVM_MMIO
40	select SCHED_INFO
41	select PERF_EVENTS
42	select GUEST_PERF_EVENTS
43	select HAVE_KVM_MSI
44	select HAVE_KVM_CPU_RELAX_INTERCEPT
45	select HAVE_KVM_NO_POLL
46	select KVM_XFER_TO_GUEST_WORK
47	select KVM_GENERIC_DIRTYLOG_READ_PROTECT
48	select KVM_VFIO
49	select INTERVAL_TREE
50	select HAVE_KVM_PM_NOTIFIER if PM
51	select KVM_GENERIC_HARDWARE_ENABLING
52	help
53	  Support hosting fully virtualized guest machines using hardware
54	  virtualization extensions.  You will need a fairly recent
55	  processor equipped with virtualization extensions. You will also
56	  need to select one or more of the processor modules below.
57
58	  This module provides access to the hardware capabilities through
59	  a character device node named /dev/kvm.
60
61	  To compile this as a module, choose M here: the module
62	  will be called kvm.
63
64	  If unsure, say N.
65
66config KVM_WERROR
67	bool "Compile KVM with -Werror"
68	# KASAN may cause the build to fail due to larger frames
69	default y if X86_64 && !KASAN
70	# We use the dependency on !COMPILE_TEST to not be enabled
71	# blindly in allmodconfig or allyesconfig configurations
72	depends on KVM
73	depends on (X86_64 && !KASAN) || !COMPILE_TEST
74	depends on EXPERT
75	help
76	  Add -Werror to the build flags for KVM.
77
78	  If in doubt, say "N".
79
80config KVM_INTEL
81	tristate "KVM for Intel (and compatible) processors support"
82	depends on KVM && IA32_FEAT_CTL
83	help
84	  Provides support for KVM on processors equipped with Intel's VT
85	  extensions, a.k.a. Virtual Machine Extensions (VMX).
86
87	  To compile this as a module, choose M here: the module
88	  will be called kvm-intel.
89
90config X86_SGX_KVM
91	bool "Software Guard eXtensions (SGX) Virtualization"
92	depends on X86_SGX && KVM_INTEL
93	help
94
95	  Enables KVM guests to create SGX enclaves.
96
97	  This includes support to expose "raw" unreclaimable enclave memory to
98	  guests via a device node, e.g. /dev/sgx_vepc.
99
100	  If unsure, say N.
101
102config KVM_AMD
103	tristate "KVM for AMD processors support"
104	depends on KVM && (CPU_SUP_AMD || CPU_SUP_HYGON)
105	help
106	  Provides support for KVM on AMD processors equipped with the AMD-V
107	  (SVM) extensions.
108
109	  To compile this as a module, choose M here: the module
110	  will be called kvm-amd.
111
112config KVM_AMD_SEV
113	def_bool y
114	bool "AMD Secure Encrypted Virtualization (SEV) support"
115	depends on KVM_AMD && X86_64
116	depends on CRYPTO_DEV_SP_PSP && !(KVM_AMD=y && CRYPTO_DEV_CCP_DD=m)
117	help
118	  Provides support for launching Encrypted VMs (SEV) and Encrypted VMs
119	  with Encrypted State (SEV-ES) on AMD processors.
120
121config KVM_SMM
122	bool "System Management Mode emulation"
123	default y
124	depends on KVM
125	help
126	  Provides support for KVM to emulate System Management Mode (SMM)
127	  in virtual machines.  This can be used by the virtual machine
128	  firmware to implement UEFI secure boot.
129
130	  If unsure, say Y.
131
132config KVM_XEN
133	bool "Support for Xen hypercall interface"
134	depends on KVM
135	help
136	  Provides KVM support for the hosting Xen HVM guests and
137	  passing Xen hypercalls to userspace.
138
139	  If in doubt, say "N".
140
141config KVM_PROVE_MMU
142	bool "Prove KVM MMU correctness"
143	depends on DEBUG_KERNEL
144	depends on KVM
145	depends on EXPERT
146	help
147	  Enables runtime assertions in KVM's MMU that are too costly to enable
148	  in anything remotely resembling a production environment, e.g. this
149	  gates code that verifies a to-be-freed page table doesn't have any
150	  present SPTEs.
151
152	  If in doubt, say "N".
153
154config KVM_EXTERNAL_WRITE_TRACKING
155	bool
156
157endif # VIRTUALIZATION
158