-
Notifications
You must be signed in to change notification settings - Fork 0
Privileged Execution of Guest Process with VMPL Isolation
License
vmpl-dev/libvmpl
Folders and files
| Name | Name | Last commit message | Last commit date | |
|---|---|---|---|---|
Repository files navigation
## Build:
```bash
./configure --prefix=/usr/local/musl/ --enable-sys-filter --enable-vmpl-cpuset --enable-vmpl-ghcb --enable-vmpl-hotcalls --enable-vmpl-signal --enable-vmpl-debug
```
## Install:
```bash
pushd libdict
CC=musl-gcc
INSTALL_PREFIX=/usr/local/musl
INSTALL_USER=$(id -u)
INSTALL_GROUP=$(id -g)
make install
popd
```
## Plan:
[√] APIC
[√] trap handler
[√] SEV-SNP related
[√] MSR protocol
[√] 0x000 - GHCB Guest Physical Address
[√] 0x001 - SEV Information
[√] 0x002 - SEV Information Request
[x] CPUID Request
[x] Preferred GHCB GPA Request
[x] Register GHCB GPA Request
[x] Page State Change Request
[√] SNP Run VMPL Request
[√] Hypervisor Feature Support Request
[x] Termination Request
[x] GHCB support
[x] Page State Change - 0x8000_0010
[x] SNP Guest Request - 0x8000_0011
[x] SNP Extended Guest Request - 0x8000_0012
[x] SNP AP Creation - 0x8000_0013
[x] \#HV Doorbell Page - 0x8000_0014
[x] \#HV IPI - 0x8000_0015
[x] \#HV Timer - 0x8000_0016
[x] APIC ID List - 0x8000_0017
[x] SNP Run VMPL - 0x8000_0018
[√] Debug related
[√] SMP related
[√] PerCpu Variable
[√] Thread-Local Storage
[x] Ring 3
[√] Remap syscall page
[√] Remap vsyscall page
[x] Syscall passthrough
[x] ELF Loader
[x] glibc
[x] syscall
[x] pthread
[√] musl-libc
[√] syscall
[x] posix
[x] process management
[x] fork
[x] vfork
[x] exec
[x] exit
[x] pthread management
[x] pthread_create
[x] pthread_exit
[x] pthread_join
[x] pthread_detach
[x] pthread_self
[√] signal handler
[x] sigaction
[x] sigemptyset
[x] sigfillset
[x] sigaddset
[√] memory management
[√] mmap
[√] munmap
[√] mremap
[√] mprotect
[√] brk
[√] sbrkAbout
Privileged Execution of Guest Process with VMPL Isolation
Resources
License
Stars
Watchers
Forks
Packages 0
No packages published