David Brazdil | 66fc120 | 2022-07-04 21:48:45 +0100 | [diff] [blame] | 1 | // Copyright 2022, The Android Open Source Project |
| 2 | // |
| 3 | // Licensed under the Apache License, Version 2.0 (the "License"); |
| 4 | // you may not use this file except in compliance with the License. |
| 5 | // You may obtain a copy of the License at |
| 6 | // |
| 7 | // http://www.apache.org/licenses/LICENSE-2.0 |
| 8 | // |
| 9 | // Unless required by applicable law or agreed to in writing, software |
| 10 | // distributed under the License is distributed on an "AS IS" BASIS, |
| 11 | // WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. |
| 12 | // See the License for the specific language governing permissions and |
| 13 | // limitations under the License. |
| 14 | |
| 15 | //! Project Rialto main source file. |
| 16 | |
| 17 | #![no_main] |
| 18 | #![no_std] |
David Brazdil | 66fc120 | 2022-07-04 21:48:45 +0100 | [diff] [blame] | 19 | |
Alice Wang | 4e082c3 | 2023-07-11 07:41:50 +0000 | [diff] [blame] | 20 | mod communication; |
Alice Wang | 9a8b39f | 2023-04-12 15:31:48 +0000 | [diff] [blame] | 21 | mod error; |
David Brazdil | 66fc120 | 2022-07-04 21:48:45 +0100 | [diff] [blame] | 22 | mod exceptions; |
Alice Wang | 474c0ee | 2023-09-14 12:52:33 +0000 | [diff] [blame] | 23 | mod fdt; |
David Brazdil | 66fc120 | 2022-07-04 21:48:45 +0100 | [diff] [blame] | 24 | |
| 25 | extern crate alloc; |
David Brazdil | 66fc120 | 2022-07-04 21:48:45 +0100 | [diff] [blame] | 26 | |
Alice Wang | 748b032 | 2023-07-24 12:51:18 +0000 | [diff] [blame] | 27 | use crate::communication::VsockStream; |
Alice Wang | 9a8b39f | 2023-04-12 15:31:48 +0000 | [diff] [blame] | 28 | use crate::error::{Error, Result}; |
Alice Wang | a2228b9 | 2024-07-26 08:38:47 +0000 | [diff] [blame] | 29 | use crate::fdt::{read_dice_range_from, read_is_strict_boot, read_vendor_hashtree_root_digest}; |
Alice Wang | 77639bf | 2023-09-21 06:57:12 +0000 | [diff] [blame] | 30 | use alloc::boxed::Box; |
Alice Wang | 953a657 | 2023-08-24 13:40:10 +0000 | [diff] [blame] | 31 | use ciborium_io::Write; |
Alice Wang | 74f7f4b | 2023-06-13 08:24:50 +0000 | [diff] [blame] | 32 | use core::num::NonZeroUsize; |
Pierre-Clément Tosi | 3d4c5c3 | 2023-05-31 16:57:06 +0000 | [diff] [blame] | 33 | use core::slice; |
Alice Wang | 77639bf | 2023-09-21 06:57:12 +0000 | [diff] [blame] | 34 | use diced_open_dice::{bcc_handover_parse, DiceArtifacts}; |
Per Larsen | 7ec45d3 | 2024-11-02 00:56:46 +0000 | [diff] [blame] | 35 | use hypervisor_backends::get_mem_sharer; |
Alice Wang | b6d2c64 | 2023-06-13 13:07:06 +0000 | [diff] [blame] | 36 | use libfdt::FdtError; |
Alice Wang | 9a8b39f | 2023-04-12 15:31:48 +0000 | [diff] [blame] | 37 | use log::{debug, error, info}; |
Alice Wang | b5d9a46 | 2024-02-09 10:10:47 +0000 | [diff] [blame] | 38 | use service_vm_comm::{ServiceVmRequest, VmType}; |
Alice Wang | 4ac9c8b | 2023-12-05 16:23:14 +0000 | [diff] [blame] | 39 | use service_vm_fake_chain::service_vm; |
Alice Wang | 9eebbab | 2024-04-10 14:57:27 +0000 | [diff] [blame] | 40 | use service_vm_requests::{process_request, RequestContext}; |
Alice Wang | 6218335 | 2023-07-04 08:33:27 +0000 | [diff] [blame] | 41 | use virtio_drivers::{ |
Alice Wang | d158e39 | 2023-08-30 12:51:12 +0000 | [diff] [blame] | 42 | device::socket::{VsockAddr, VMADDR_CID_HOST}, |
Alice Wang | 6218335 | 2023-07-04 08:33:27 +0000 | [diff] [blame] | 43 | transport::{pci::bus::PciRoot, DeviceType, Transport}, |
| 44 | Hal, |
| 45 | }; |
Alice Wang | 4b3cc11 | 2023-06-06 12:22:53 +0000 | [diff] [blame] | 46 | use vmbase::{ |
Pierre-Clément Tosi | 6a4808c | 2023-06-29 09:19:38 +0000 | [diff] [blame] | 47 | configure_heap, |
Pierre-Clément Tosi | f2c19d4 | 2024-10-01 17:42:04 +0100 | [diff] [blame] | 48 | fdt::pci::PciInfo, |
Alice Wang | b6d2c64 | 2023-06-13 13:07:06 +0000 | [diff] [blame] | 49 | fdt::SwiotlbInfo, |
Frederick Mayle | 7584240 | 2024-08-05 19:32:08 -0700 | [diff] [blame] | 50 | generate_image_header, |
Pierre-Clément Tosi | 38b6c78 | 2024-11-02 13:47:42 +0000 | [diff] [blame] | 51 | layout::{self, crosvm}, |
Alice Wang | 89d2959 | 2023-06-12 09:41:29 +0000 | [diff] [blame] | 52 | main, |
Alice Wang | 6218335 | 2023-07-04 08:33:27 +0000 | [diff] [blame] | 53 | memory::{MemoryTracker, PageTable, MEMORY, PAGE_SIZE, SIZE_128KB}, |
Alice Wang | 4b3cc11 | 2023-06-06 12:22:53 +0000 | [diff] [blame] | 54 | power::reboot, |
Alice Wang | 6218335 | 2023-07-04 08:33:27 +0000 | [diff] [blame] | 55 | virtio::{ |
| 56 | pci::{self, PciTransportIterator, VirtIOSocket}, |
| 57 | HalImpl, |
| 58 | }, |
Alice Wang | 4b3cc11 | 2023-06-06 12:22:53 +0000 | [diff] [blame] | 59 | }; |
David Brazdil | 66fc120 | 2022-07-04 21:48:45 +0100 | [diff] [blame] | 60 | |
Alice Wang | a2228b9 | 2024-07-26 08:38:47 +0000 | [diff] [blame] | 61 | fn host_addr(fdt: &libfdt::Fdt) -> Result<VsockAddr> { |
| 62 | Ok(VsockAddr { cid: VMADDR_CID_HOST, port: vm_type(fdt)?.port() }) |
Alice Wang | 4e082c3 | 2023-07-11 07:41:50 +0000 | [diff] [blame] | 63 | } |
| 64 | |
Alice Wang | a2228b9 | 2024-07-26 08:38:47 +0000 | [diff] [blame] | 65 | fn vm_type(fdt: &libfdt::Fdt) -> Result<VmType> { |
| 66 | if read_is_strict_boot(fdt)? { |
| 67 | Ok(VmType::ProtectedVm) |
Alice Wang | 1d9a587 | 2023-09-06 14:32:36 +0000 | [diff] [blame] | 68 | } else { |
Alice Wang | a2228b9 | 2024-07-26 08:38:47 +0000 | [diff] [blame] | 69 | Ok(VmType::NonProtectedVm) |
Alice Wang | 1d9a587 | 2023-09-06 14:32:36 +0000 | [diff] [blame] | 70 | } |
Alice Wang | 4e082c3 | 2023-07-11 07:41:50 +0000 | [diff] [blame] | 71 | } |
| 72 | |
Alice Wang | b70bdb5 | 2023-06-12 08:17:58 +0000 | [diff] [blame] | 73 | fn new_page_table() -> Result<PageTable> { |
Alice Wang | ee5b180 | 2023-06-07 07:41:54 +0000 | [diff] [blame] | 74 | let mut page_table = PageTable::default(); |
Pierre-Clément Tosi | 3d4c5c3 | 2023-05-31 16:57:06 +0000 | [diff] [blame] | 75 | |
Alice Wang | a3931aa | 2023-07-05 12:52:09 +0000 | [diff] [blame] | 76 | page_table.map_data(&layout::scratch_range().into())?; |
| 77 | page_table.map_data(&layout::stack_range(40 * PAGE_SIZE).into())?; |
| 78 | page_table.map_code(&layout::text_range().into())?; |
| 79 | page_table.map_rodata(&layout::rodata_range().into())?; |
Pierre-Clément Tosi | 38a3621 | 2024-06-06 11:30:39 +0100 | [diff] [blame] | 80 | page_table.map_device(&layout::console_uart_page().into())?; |
David Brazdil | 66fc120 | 2022-07-04 21:48:45 +0100 | [diff] [blame] | 81 | |
Alice Wang | b70bdb5 | 2023-06-12 08:17:58 +0000 | [diff] [blame] | 82 | Ok(page_table) |
David Brazdil | 66fc120 | 2022-07-04 21:48:45 +0100 | [diff] [blame] | 83 | } |
| 84 | |
Alice Wang | dda3ba9 | 2023-05-25 15:15:30 +0000 | [diff] [blame] | 85 | /// # Safety |
| 86 | /// |
| 87 | /// Behavior is undefined if any of the following conditions are violated: |
| 88 | /// * The `fdt_addr` must be a valid pointer and points to a valid `Fdt`. |
| 89 | unsafe fn try_main(fdt_addr: usize) -> Result<()> { |
David Brazdil | 66fc120 | 2022-07-04 21:48:45 +0100 | [diff] [blame] | 90 | info!("Welcome to Rialto!"); |
Alice Wang | b70bdb5 | 2023-06-12 08:17:58 +0000 | [diff] [blame] | 91 | let page_table = new_page_table()?; |
| 92 | |
| 93 | MEMORY.lock().replace(MemoryTracker::new( |
| 94 | page_table, |
| 95 | crosvm::MEM_START..layout::MAX_VIRT_ADDR, |
| 96 | crosvm::MMIO_RANGE, |
| 97 | None, // Rialto doesn't have any payload for now. |
| 98 | )); |
Alice Wang | 74f7f4b | 2023-06-13 08:24:50 +0000 | [diff] [blame] | 99 | |
| 100 | let fdt_range = MEMORY |
| 101 | .lock() |
| 102 | .as_mut() |
| 103 | .unwrap() |
| 104 | .alloc(fdt_addr, NonZeroUsize::new(crosvm::FDT_MAX_SIZE).unwrap())?; |
| 105 | // SAFETY: The tracker validated the range to be in main memory, mapped, and not overlap. |
| 106 | let fdt = unsafe { slice::from_raw_parts(fdt_range.start as *mut u8, fdt_range.len()) }; |
Alice Wang | 674257a | 2023-06-13 09:44:53 +0000 | [diff] [blame] | 107 | // We do not need to validate the DT since it is already validated in pvmfw. |
Alice Wang | 74f7f4b | 2023-06-13 08:24:50 +0000 | [diff] [blame] | 108 | let fdt = libfdt::Fdt::from_slice(fdt)?; |
Alice Wang | 74f7f4b | 2023-06-13 08:24:50 +0000 | [diff] [blame] | 109 | |
Alice Wang | 674257a | 2023-06-13 09:44:53 +0000 | [diff] [blame] | 110 | let memory_range = fdt.first_memory_range()?; |
Chris Wailes | 0f12175 | 2024-09-06 10:45:06 -0700 | [diff] [blame] | 111 | MEMORY.lock().as_mut().unwrap().shrink(&memory_range).inspect_err(|_| { |
Alice Wang | 674257a | 2023-06-13 09:44:53 +0000 | [diff] [blame] | 112 | error!("Failed to use memory range value from DT: {memory_range:#x?}"); |
Alice Wang | 674257a | 2023-06-13 09:44:53 +0000 | [diff] [blame] | 113 | })?; |
Alice Wang | b6d2c64 | 2023-06-13 13:07:06 +0000 | [diff] [blame] | 114 | |
Pierre-Clément Tosi | 910a72d | 2023-06-29 14:29:29 +0000 | [diff] [blame] | 115 | if let Some(mem_sharer) = get_mem_sharer() { |
| 116 | let granule = mem_sharer.granule()?; |
Chris Wailes | 0f12175 | 2024-09-06 10:45:06 -0700 | [diff] [blame] | 117 | MEMORY.lock().as_mut().unwrap().init_dynamic_shared_pool(granule).inspect_err(|_| { |
Alice Wang | b6d2c64 | 2023-06-13 13:07:06 +0000 | [diff] [blame] | 118 | error!("Failed to initialize dynamically shared pool."); |
Alice Wang | b6d2c64 | 2023-06-13 13:07:06 +0000 | [diff] [blame] | 119 | })?; |
Pierre-Clément Tosi | 3c5e7a7 | 2024-11-27 20:12:37 +0000 | [diff] [blame] | 120 | } else if let Ok(Some(swiotlb_info)) = SwiotlbInfo::new_from_fdt(fdt) { |
Pierre-Clément Tosi | 8937cb8 | 2023-07-06 15:07:38 +0000 | [diff] [blame] | 121 | let range = swiotlb_info.fixed_range().ok_or_else(|| { |
Alice Wang | b6d2c64 | 2023-06-13 13:07:06 +0000 | [diff] [blame] | 122 | error!("Pre-shared pool range not specified in swiotlb node"); |
| 123 | Error::from(FdtError::BadValue) |
| 124 | })?; |
Chris Wailes | 0f12175 | 2024-09-06 10:45:06 -0700 | [diff] [blame] | 125 | MEMORY.lock().as_mut().unwrap().init_static_shared_pool(range).inspect_err(|_| { |
Alice Wang | b6d2c64 | 2023-06-13 13:07:06 +0000 | [diff] [blame] | 126 | error!("Failed to initialize pre-shared pool."); |
Alice Wang | b6d2c64 | 2023-06-13 13:07:06 +0000 | [diff] [blame] | 127 | })?; |
Pierre-Clément Tosi | 8937cb8 | 2023-07-06 15:07:38 +0000 | [diff] [blame] | 128 | } else { |
| 129 | info!("No MEM_SHARE capability detected or swiotlb found: allocating buffers from heap."); |
Chris Wailes | 0f12175 | 2024-09-06 10:45:06 -0700 | [diff] [blame] | 130 | MEMORY.lock().as_mut().unwrap().init_heap_shared_pool().inspect_err(|_| { |
Pierre-Clément Tosi | 8937cb8 | 2023-07-06 15:07:38 +0000 | [diff] [blame] | 131 | error!("Failed to initialize heap-based pseudo-shared pool."); |
Pierre-Clément Tosi | 8937cb8 | 2023-07-06 15:07:38 +0000 | [diff] [blame] | 132 | })?; |
Alice Wang | b6d2c64 | 2023-06-13 13:07:06 +0000 | [diff] [blame] | 133 | } |
Alice Wang | 7b2ab94 | 2023-09-12 13:04:42 +0000 | [diff] [blame] | 134 | |
Alice Wang | a2228b9 | 2024-07-26 08:38:47 +0000 | [diff] [blame] | 135 | let bcc_handover: Box<dyn DiceArtifacts> = match vm_type(fdt)? { |
Alice Wang | 474c0ee | 2023-09-14 12:52:33 +0000 | [diff] [blame] | 136 | VmType::ProtectedVm => { |
| 137 | let dice_range = read_dice_range_from(fdt)?; |
| 138 | info!("DICE range: {dice_range:#x?}"); |
Alice Wang | 9f3ca83 | 2023-09-20 09:33:14 +0000 | [diff] [blame] | 139 | // SAFETY: This region was written by pvmfw in its writable_data region. The region |
| 140 | // has no overlap with the main memory region and is safe to be mapped as read-only |
| 141 | // data. |
| 142 | let res = unsafe { |
| 143 | MEMORY.lock().as_mut().unwrap().alloc_range_outside_main_memory(&dice_range) |
| 144 | }; |
Chris Wailes | 0f12175 | 2024-09-06 10:45:06 -0700 | [diff] [blame] | 145 | res.inspect_err(|_| { |
Alice Wang | 9f3ca83 | 2023-09-20 09:33:14 +0000 | [diff] [blame] | 146 | error!("Failed to use DICE range from DT: {dice_range:#x?}"); |
Alice Wang | 9f3ca83 | 2023-09-20 09:33:14 +0000 | [diff] [blame] | 147 | })?; |
| 148 | let dice_start = dice_range.start as *const u8; |
| 149 | // SAFETY: There's no memory overlap and the region is mapped as read-only data. |
| 150 | let bcc_handover = unsafe { slice::from_raw_parts(dice_start, dice_range.len()) }; |
Alice Wang | 77639bf | 2023-09-21 06:57:12 +0000 | [diff] [blame] | 151 | Box::new(bcc_handover_parse(bcc_handover)?) |
Alice Wang | 474c0ee | 2023-09-14 12:52:33 +0000 | [diff] [blame] | 152 | } |
Alice Wang | 77639bf | 2023-09-21 06:57:12 +0000 | [diff] [blame] | 153 | // Currently, a sample DICE data is used for non-protected VMs, as these VMs only run |
| 154 | // in tests at the moment. |
Alice Wang | 4ac9c8b | 2023-12-05 16:23:14 +0000 | [diff] [blame] | 155 | VmType::NonProtectedVm => Box::new(service_vm::fake_service_vm_dice_artifacts()?), |
Alice Wang | 474c0ee | 2023-09-14 12:52:33 +0000 | [diff] [blame] | 156 | }; |
Alice Wang | d36c711 | 2023-07-04 09:50:45 +0000 | [diff] [blame] | 157 | |
| 158 | let pci_info = PciInfo::from_fdt(fdt)?; |
| 159 | debug!("PCI: {pci_info:#x?}"); |
Alice Wang | 6218335 | 2023-07-04 08:33:27 +0000 | [diff] [blame] | 160 | let mut pci_root = pci::initialize(pci_info, MEMORY.lock().as_mut().unwrap()) |
Alice Wang | d36c711 | 2023-07-04 09:50:45 +0000 | [diff] [blame] | 161 | .map_err(Error::PciInitializationFailed)?; |
| 162 | debug!("PCI root: {pci_root:#x?}"); |
Alice Wang | 6218335 | 2023-07-04 08:33:27 +0000 | [diff] [blame] | 163 | let socket_device = find_socket_device::<HalImpl>(&mut pci_root)?; |
| 164 | debug!("Found socket device: guest cid = {:?}", socket_device.guest_cid()); |
Alice Wang | 9eebbab | 2024-04-10 14:57:27 +0000 | [diff] [blame] | 165 | let vendor_hashtree_root_digest = read_vendor_hashtree_root_digest(fdt)?; |
| 166 | let request_context = |
| 167 | RequestContext { dice_artifacts: bcc_handover.as_ref(), vendor_hashtree_root_digest }; |
Alice Wang | 4e082c3 | 2023-07-11 07:41:50 +0000 | [diff] [blame] | 168 | |
Alice Wang | a2228b9 | 2024-07-26 08:38:47 +0000 | [diff] [blame] | 169 | let mut vsock_stream = VsockStream::new(socket_device, host_addr(fdt)?)?; |
Alice Wang | fbdc85b | 2023-09-07 12:56:46 +0000 | [diff] [blame] | 170 | while let ServiceVmRequest::Process(req) = vsock_stream.read_request()? { |
Alice Wang | 2e6cdc1 | 2024-02-19 11:36:36 +0000 | [diff] [blame] | 171 | info!("Received request: {}", req.name()); |
Alice Wang | 9eebbab | 2024-04-10 14:57:27 +0000 | [diff] [blame] | 172 | let response = process_request(req, &request_context); |
Alice Wang | 2e6cdc1 | 2024-02-19 11:36:36 +0000 | [diff] [blame] | 173 | info!("Sending response: {}", response.name()); |
Alice Wang | fbdc85b | 2023-09-07 12:56:46 +0000 | [diff] [blame] | 174 | vsock_stream.write_response(&response)?; |
| 175 | vsock_stream.flush()?; |
| 176 | } |
Alice Wang | 748b032 | 2023-07-24 12:51:18 +0000 | [diff] [blame] | 177 | vsock_stream.shutdown()?; |
Alice Wang | 4e082c3 | 2023-07-11 07:41:50 +0000 | [diff] [blame] | 178 | |
Alice Wang | 9a8b39f | 2023-04-12 15:31:48 +0000 | [diff] [blame] | 179 | Ok(()) |
| 180 | } |
| 181 | |
Alice Wang | 6218335 | 2023-07-04 08:33:27 +0000 | [diff] [blame] | 182 | fn find_socket_device<T: Hal>(pci_root: &mut PciRoot) -> Result<VirtIOSocket<T>> { |
| 183 | PciTransportIterator::<T>::new(pci_root) |
| 184 | .find(|t| DeviceType::Socket == t.device_type()) |
| 185 | .map(VirtIOSocket::<T>::new) |
| 186 | .transpose() |
| 187 | .map_err(Error::VirtIOSocketCreationFailed)? |
| 188 | .ok_or(Error::MissingVirtIOSocketDevice) |
| 189 | } |
| 190 | |
Alice Wang | 9a8b39f | 2023-04-12 15:31:48 +0000 | [diff] [blame] | 191 | /// Entry point for Rialto. |
Alice Wang | dda3ba9 | 2023-05-25 15:15:30 +0000 | [diff] [blame] | 192 | pub fn main(fdt_addr: u64, _a1: u64, _a2: u64, _a3: u64) { |
Pierre-Clément Tosi | d330548 | 2023-06-29 15:03:48 +0000 | [diff] [blame] | 193 | log::set_max_level(log::LevelFilter::Debug); |
Alice Wang | dda3ba9 | 2023-05-25 15:15:30 +0000 | [diff] [blame] | 194 | // SAFETY: `fdt_addr` is supposed to be a valid pointer and points to |
| 195 | // a valid `Fdt`. |
Pierre-Clément Tosi | 38b6c78 | 2024-11-02 13:47:42 +0000 | [diff] [blame] | 196 | if let Err(e) = unsafe { try_main(fdt_addr as usize) } { |
| 197 | error!("Rialto failed with {e}"); |
| 198 | reboot() |
Alice Wang | 9a8b39f | 2023-04-12 15:31:48 +0000 | [diff] [blame] | 199 | } |
David Brazdil | 66fc120 | 2022-07-04 21:48:45 +0100 | [diff] [blame] | 200 | } |
| 201 | |
Frederick Mayle | 7584240 | 2024-08-05 19:32:08 -0700 | [diff] [blame] | 202 | generate_image_header!(); |
David Brazdil | 66fc120 | 2022-07-04 21:48:45 +0100 | [diff] [blame] | 203 | main!(main); |
Alice Wang | 65ea4cb | 2024-04-30 10:07:51 +0000 | [diff] [blame] | 204 | configure_heap!(SIZE_128KB * 2); |