arch/x86/kvm/Kconfig

   1 # SPDX-License-Identifier: GPL-2.0
   2 #
   3 # KVM configuration
   4 #
   5
   6 source "virt/kvm/Kconfig"
   7
   8 menuconfig VIRTUALIZATION
   9         bool "Virtualization"
  10         depends on HAVE_KVM || X86
  11         default y
  12         help
  13           Say Y here to get to see options for using your Linux host to run other
  14           operating systems inside virtual machines (guests).
  15           This option alone does not add any kernel code.
  16
  17           If you say N, all options in this submenu will be skipped and disabled.
  18
  19 if VIRTUALIZATION
  20
  21 config KVM
  22         tristate "Kernel-based Virtual Machine (KVM) support"
  23         depends on HAVE_KVM
  24         depends on HIGH_RES_TIMERS
  25         depends on X86_LOCAL_APIC
  26         select PREEMPT_NOTIFIERS
  27         select MMU_NOTIFIER
  28         select HAVE_KVM_IRQCHIP
  29         select HAVE_KVM_PFNCACHE
  30         select HAVE_KVM_IRQFD
  31         select HAVE_KVM_DIRTY_RING_TSO
  32         select HAVE_KVM_DIRTY_RING_ACQ_REL
  33         select IRQ_BYPASS_MANAGER
  34         select HAVE_KVM_IRQ_BYPASS
  35         select HAVE_KVM_IRQ_ROUTING
  36         select HAVE_KVM_EVENTFD
  37         select KVM_ASYNC_PF
  38         select USER_RETURN_NOTIFIER
  39         select KVM_MMIO
  40         select SCHED_INFO
  41         select PERF_EVENTS
  42         select GUEST_PERF_EVENTS
  43         select HAVE_KVM_MSI
  44         select HAVE_KVM_CPU_RELAX_INTERCEPT
  45         select HAVE_KVM_NO_POLL
  46         select KVM_XFER_TO_GUEST_WORK
  47         select KVM_GENERIC_DIRTYLOG_READ_PROTECT
  48         select KVM_VFIO
  49         select INTERVAL_TREE
  50         select HAVE_KVM_PM_NOTIFIER if PM
  51         select KVM_GENERIC_HARDWARE_ENABLING
  52         help
  53           Support hosting fully virtualized guest machines using hardware
  54           virtualization extensions.  You will need a fairly recent
  55           processor equipped with virtualization extensions. You will also
  56           need to select one or more of the processor modules below.
  57
  58           This module provides access to the hardware capabilities through
  59           a character device node named /dev/kvm.
  60
  61           To compile this as a module, choose M here: the module
  62           will be called kvm.
  63
  64           If unsure, say N.
  65
  66 config KVM_WERROR
  67         bool "Compile KVM with -Werror"
  68         # KASAN may cause the build to fail due to larger frames
  69         default y if X86_64 && !KASAN
  70         # We use the dependency on !COMPILE_TEST to not be enabled
  71         # blindly in allmodconfig or allyesconfig configurations
  72         depends on KVM
  73         depends on (X86_64 && !KASAN) || !COMPILE_TEST
  74         depends on EXPERT
  75         help
  76           Add -Werror to the build flags for KVM.
  77
  78           If in doubt, say "N".
  79
  80 config KVM_INTEL
  81         tristate "KVM for Intel (and compatible) processors support"
  82         depends on KVM && IA32_FEAT_CTL
  83         help
  84           Provides support for KVM on processors equipped with Intel's VT
  85           extensions, a.k.a. Virtual Machine Extensions (VMX).
  86
  87           To compile this as a module, choose M here: the module
  88           will be called kvm-intel.
  89
  90 config X86_SGX_KVM
  91         bool "Software Guard eXtensions (SGX) Virtualization"
  92         depends on X86_SGX && KVM_INTEL
  93         help
  94
  95           Enables KVM guests to create SGX enclaves.
  96
  97           This includes support to expose "raw" unreclaimable enclave memory to
  98           guests via a device node, e.g. /dev/sgx_vepc.
  99
 100           If unsure, say N.
 101
 102 config KVM_AMD
 103         tristate "KVM for AMD processors support"
 104         depends on KVM && (CPU_SUP_AMD || CPU_SUP_HYGON)
 105         help
 106           Provides support for KVM on AMD processors equipped with the AMD-V
 107           (SVM) extensions.
 108
 109           To compile this as a module, choose M here: the module
 110           will be called kvm-amd.
 111
 112 config KVM_AMD_SEV
 113         def_bool y
 114         bool "AMD Secure Encrypted Virtualization (SEV) support"
 115         depends on KVM_AMD && X86_64
 116         depends on CRYPTO_DEV_SP_PSP && !(KVM_AMD=y && CRYPTO_DEV_CCP_DD=m)
 117         help
 118           Provides support for launching Encrypted VMs (SEV) and Encrypted VMs
 119           with Encrypted State (SEV-ES) on AMD processors.
 120
 121 config KVM_SMM
 122         bool "System Management Mode emulation"
 123         default y
 124         depends on KVM
 125         help
 126           Provides support for KVM to emulate System Management Mode (SMM)
 127           in virtual machines.  This can be used by the virtual machine
 128           firmware to implement UEFI secure boot.
 129
 130           If unsure, say Y.
 131
 132 config KVM_XEN
 133         bool "Support for Xen hypercall interface"
 134         depends on KVM
 135         help
 136           Provides KVM support for the hosting Xen HVM guests and
 137           passing Xen hypercalls to userspace.
 138
 139           If in doubt, say "N".
 140
 141 config KVM_PROVE_MMU
 142         bool "Prove KVM MMU correctness"
 143         depends on DEBUG_KERNEL
 144         depends on KVM
 145         depends on EXPERT
 146         help
 147           Enables runtime assertions in KVM's MMU that are too costly to enable
 148           in anything remotely resembling a production environment, e.g. this
 149           gates code that verifies a to-be-freed page table doesn't have any
 150           present SPTEs.
 151
 152           If in doubt, say "N".
 153
 154 config KVM_EXTERNAL_WRITE_TRACKING
 155         bool
 156
 157 config KVM_MAX_NR_VCPUS
 158         int "Maximum number of vCPUs per KVM guest"
 159         depends on KVM
 160         range 1024 4096
 161         default 4096 if MAXSMP
 162         default 1024
 163         help
 164           Set the maximum number of vCPUs per KVM guest. Larger values will increase
 165           the memory footprint of each KVM guest, regardless of how many vCPUs are
 166           created for a given VM.
 167
 168 endif # VIRTUALIZATION