Comment 23 for bug 1787405

Revision history for this message
bugproxy (bugproxy) wrote : Comment bridged from LTC Bugzilla

------- Comment From <email address hidden> 2018-11-02 10:52 EDT-------
We also need these commits: (before the remaining ones)

20c922f04b17 KVM: s390: reset crypto attributes for all vcpus
to make the KVM commits apply cleanly. (the first one has a simple merge conflict)

The AP patches also have some minor conflicts due to the missing
efda7adec7a5 s390/zcrypt: Make ap init functions static.
d485235b0054 s390: assume diag308 set always works

but it is probably simpler to fixup the patches.

------- Comment From <email address hidden> 2018-11-02 11:03 EDT-------
We also need a define that is added with

af4a72276d49 s390/zcrypt: Support up to 256 crypto adapters.
(to fit on 4.15 you would then need
71cbbff8c4fd s390/zcrypt: Remove deprecated zcrypt proc interface.
2a80786d477a s390/zcrypt: Remove deprecated ioctls.
)

The alternative is to define MAX_ZDEV_ENTRIES_EXT but just cherry-picking these 3 commits is probably less risky.

We then need the following kernel config options.

CONFIG_VFIO_AP
CONFIG_VFIO_MDEV
CONFIG_VFIO_MDEV_DEVICE
CONFIG_S390_AP_IOMMU=y

in the kernel config.

With that I can use crypto cards with the bionic kernel