Patch Detail
get:
Show a patch.
patch:
Update a patch.
put:
Update a patch.
GET /api/1.2/patches/2233180/?format=api
{ "id": 2233180, "url": "http://patchwork.ozlabs.org/api/1.2/patches/2233180/?format=api", "web_url": "http://patchwork.ozlabs.org/project/qemu-devel/patch/20260505201905.997996-17-zycai@linux.ibm.com/", "project": { "id": 14, "url": "http://patchwork.ozlabs.org/api/1.2/projects/14/?format=api", "name": "QEMU Development", "link_name": "qemu-devel", "list_id": "qemu-devel.nongnu.org", "list_email": "qemu-devel@nongnu.org", "web_url": "", "scm_url": "", "webscm_url": "", "list_archive_url": "", "list_archive_url_format": "", "commit_url_format": "" }, "msgid": "<20260505201905.997996-17-zycai@linux.ibm.com>", "list_archive_url": null, "date": "2026-05-05T20:18:48", "name": "[v11,16/32] hw/s390x/ipl: Add IPIB flags to IPL Parameter Block", "commit_ref": null, "pull_url": null, "state": "new", "archived": false, "hash": "8d53dcbf1b10ca23390913f27dc60708c8280519", "submitter": { "id": 90643, "url": "http://patchwork.ozlabs.org/api/1.2/people/90643/?format=api", "name": "Zhuoying Cai", "email": "zycai@linux.ibm.com" }, "delegate": null, "mbox": "http://patchwork.ozlabs.org/project/qemu-devel/patch/20260505201905.997996-17-zycai@linux.ibm.com/mbox/", "series": [ { "id": 502896, "url": "http://patchwork.ozlabs.org/api/1.2/series/502896/?format=api", "web_url": "http://patchwork.ozlabs.org/project/qemu-devel/list/?series=502896", "date": "2026-05-05T20:18:37", "name": "Secure IPL Support for SCSI Scheme of virtio-blk/virtio-scsi Devices", "version": 11, "mbox": "http://patchwork.ozlabs.org/series/502896/mbox/" } ], "comments": "http://patchwork.ozlabs.org/api/patches/2233180/comments/", "check": "pending", "checks": "http://patchwork.ozlabs.org/api/patches/2233180/checks/", "tags": {}, "related": [], "headers": { "Return-Path": "<qemu-devel-bounces+incoming=patchwork.ozlabs.org@nongnu.org>", "X-Original-To": "incoming@patchwork.ozlabs.org", "Delivered-To": "patchwork-incoming@legolas.ozlabs.org", "Authentication-Results": [ "legolas.ozlabs.org;\n\tdkim=pass (2048-bit key;\n unprotected) header.d=ibm.com header.i=@ibm.com header.a=rsa-sha256\n header.s=pp1 header.b=hFyQ9J0f;\n\tdkim-atps=neutral", "legolas.ozlabs.org;\n spf=pass (sender SPF authorized) smtp.mailfrom=nongnu.org\n (client-ip=209.51.188.17; helo=lists1p.gnu.org;\n envelope-from=qemu-devel-bounces+incoming=patchwork.ozlabs.org@nongnu.org;\n receiver=patchwork.ozlabs.org)" ], "Received": [ "from lists1p.gnu.org (lists1p.gnu.org [209.51.188.17])\n\t(using TLSv1.2 with cipher ECDHE-ECDSA-AES256-GCM-SHA384 (256/256 bits))\n\t(No client certificate requested)\n\tby legolas.ozlabs.org (Postfix) with ESMTPS id 4g98z14mgLz1yK2\n\tfor <incoming@patchwork.ozlabs.org>; Wed, 06 May 2026 06:20:45 +1000 (AEST)", "from localhost ([::1] helo=lists1p.gnu.org)\n\tby lists1p.gnu.org with esmtp (Exim 4.90_1)\n\t(envelope-from <qemu-devel-bounces@nongnu.org>)\n\tid 1wKMFS-00087d-EG; Tue, 05 May 2026 16:20:09 -0400", "from eggs.gnu.org ([2001:470:142:3::10])\n by lists1p.gnu.org with esmtps (TLS1.2:ECDHE_RSA_AES_256_GCM_SHA384:256)\n (Exim 4.90_1) (envelope-from <zycai@linux.ibm.com>)\n id 1wKMF7-0007ou-PW; Tue, 05 May 2026 16:19:45 -0400", "from mx0a-001b2d01.pphosted.com ([148.163.156.1])\n by eggs.gnu.org with esmtps (TLS1.2:ECDHE_RSA_AES_256_GCM_SHA384:256)\n (Exim 4.90_1) (envelope-from <zycai@linux.ibm.com>)\n id 1wKMF5-0000Gk-U9; Tue, 05 May 2026 16:19:45 -0400", "from pps.filterd (m0356517.ppops.net [127.0.0.1])\n by mx0a-001b2d01.pphosted.com (8.18.1.11/8.18.1.11) with ESMTP id\n 645I4k3W2437018; Tue, 5 May 2026 20:19:40 GMT", "from ppma21.wdc07v.mail.ibm.com\n (5b.69.3da9.ip4.static.sl-reverse.com [169.61.105.91])\n by mx0a-001b2d01.pphosted.com (PPS) with ESMTPS id 4dw9y1dm7b-1\n (version=TLSv1.2 cipher=ECDHE-RSA-AES256-GCM-SHA384 bits=256 verify=NOT);\n Tue, 05 May 2026 20:19:39 +0000 (GMT)", "from pps.filterd (ppma21.wdc07v.mail.ibm.com [127.0.0.1])\n by ppma21.wdc07v.mail.ibm.com (8.18.1.7/8.18.1.7) with ESMTP id\n 645K9RNm002871;\n Tue, 5 May 2026 20:19:38 GMT", "from smtprelay06.wdc07v.mail.ibm.com ([172.16.1.73])\n by ppma21.wdc07v.mail.ibm.com (PPS) with ESMTPS id 4dwvkju9we-1\n (version=TLSv1.2 cipher=ECDHE-RSA-AES256-GCM-SHA384 bits=256 verify=NOT);\n Tue, 05 May 2026 20:19:38 +0000 (GMT)", "from smtpav02.wdc07v.mail.ibm.com (smtpav02.wdc07v.mail.ibm.com\n [10.39.53.229])\n by smtprelay06.wdc07v.mail.ibm.com (8.14.9/8.14.9/NCO v10.0) with ESMTP id\n 645KJbjE27918856\n (version=TLSv1/SSLv3 cipher=DHE-RSA-AES256-GCM-SHA384 bits=256 verify=OK);\n Tue, 5 May 2026 20:19:37 GMT", "from smtpav02.wdc07v.mail.ibm.com (unknown [127.0.0.1])\n by IMSVA (Postfix) with ESMTP id 0B5705805B;\n Tue, 5 May 2026 20:19:37 +0000 (GMT)", "from smtpav02.wdc07v.mail.ibm.com (unknown [127.0.0.1])\n by IMSVA (Postfix) with ESMTP id 65CF05805C;\n Tue, 5 May 2026 20:19:35 +0000 (GMT)", "from fedora-workstation.pok.ibm.com (unknown [9.12.79.241])\n by smtpav02.wdc07v.mail.ibm.com (Postfix) with ESMTP;\n Tue, 5 May 2026 20:19:35 +0000 (GMT)" ], "DKIM-Signature": "v=1; a=rsa-sha256; c=relaxed/relaxed; d=ibm.com; h=cc\n :content-transfer-encoding:date:from:in-reply-to:message-id\n :mime-version:references:subject:to; s=pp1; bh=8MsBCYamusRb6aySh\n R97acnW2ypJ1xMoaXcX0D/i+9E=; b=hFyQ9J0fk9TLLB3OGXlQLpW+36zUTdCdM\n 3whkkLELyNlUZ30ewTQYtI9jnUd2C/VKMC1xBvyE1w44yF/5y2Nly385a3bxK88D\n /5WE8HQwDsts/8Mw2XYHaL3J5rQj3+Db7Ozvv6LrWYROf5ozohuOrhopNI3xnijd\n 7YzyyaUzM9vd530yrQOrOMaLorpdwml8eYt4yQW9/d8ihaSo9RhBHMSqQkpbcZkt\n zJxAMMmprbppUQfgNlH9Tw/4kEdrXcznIY+o2qi4ozHmrNtJRrtrhK4NkJAcYDas\n iJ9Rv1dRY0NVUUOYwyFpzZxc4SRnG5VrVp4ZWeUj7iX0OAss12xSw==", "From": "Zhuoying Cai <zycai@linux.ibm.com>", "To": "qemu-s390x@nongnu.org, qemu-devel@nongnu.org", "Cc": "jrossi@linux.ibm.com, cohuck@redhat.com, berrange@redhat.com,\n richard.henderson@linaro.org, david@kernel.org, walling@linux.ibm.com,\n jjherne@linux.ibm.com, pasic@linux.ibm.com, borntraeger@linux.ibm.com,\n farman@linux.ibm.com, mjrosato@linux.ibm.com, iii@linux.ibm.com,\n eblake@redhat.com, armbru@redhat.com, zycai@linux.ibm.com,\n alifm@linux.ibm.com, brueckner@linux.ibm.com,\n pierrick.bouvier@oss.qualcomm.com, jdaley@linux.ibm.com", "Subject": "[PATCH v11 16/32] hw/s390x/ipl: Add IPIB flags to IPL Parameter Block", "Date": "Tue, 5 May 2026 16:18:48 -0400", "Message-ID": "<20260505201905.997996-17-zycai@linux.ibm.com>", "X-Mailer": "git-send-email 2.54.0", "In-Reply-To": "<20260505201905.997996-1-zycai@linux.ibm.com>", "References": "<20260505201905.997996-1-zycai@linux.ibm.com>", "MIME-Version": "1.0", "Content-Transfer-Encoding": "8bit", "X-TM-AS-GCONF": "00", "X-Proofpoint-ORIG-GUID": "vR03YgvmqD71TeovCAOKOsCmfrHZYrXg", "X-Proofpoint-GUID": "vR03YgvmqD71TeovCAOKOsCmfrHZYrXg", "X-Proofpoint-Spam-Details-Enc": "AW1haW4tMjYwNTA1MDE5NSBTYWx0ZWRfX6lC1f+lBAPIM\n xKHFkBe4M6a5GO/fcB/KSqqiYo6/QIcg1/Y0H38xo7WxUgimBr+K9bYs9XmPyZzI5cF3iLb6RXj\n lBy+uUZOCiQ82dYeqhnC1zbXT15J2i8ZqbHTW5Z/r1Ag6KKSPlpSLve5vV4GrNUbJdvytW8M2sh\n qC0mwpYPQ0VjEYXghuyeKbfB0DdlWvXZD1gi9CGtF5DCBZjKOt6olDJyExtIxOdoTmQm7ct4QC8\n QJufNTr+YYc9b+JgJ1hXOhaAFF5KEehB6fMs+Yr430VfmcZ4Wj1wXGPX0hK/i6yx/i375tXS59x\n Sbvck2gmO3cFFcrbROh7oVLWL6nOgD4zOx+XI7GFj53ja4X1ctjm/9CZMm5SHdbYKA/ir10QcCM\n t7zT2t7Esvvu6SHRAhzOrrlUVqxz7iXvSqcIFOXZcMMCXa1x1zPKaFiTS0aqa9dmfNAlfvVvvWU\n ZDiZlDXDhyJo9tDWcyQ==", "X-Authority-Analysis": "v=2.4 cv=UbFhjqSN c=1 sm=1 tr=0 ts=69fa50db cx=c_pps\n a=GFwsV6G8L6GxiO2Y/PsHdQ==:117 a=GFwsV6G8L6GxiO2Y/PsHdQ==:17\n a=NGcC8JguVDcA:10 a=VkNPw1HP01LnGYTKEx00:22 a=RnoormkPH1_aCDwRdu11:22\n a=U7nrCbtTmkRpXpFmAIza:22 a=VnNF1IyMAAAA:8 a=20KFwNOVAAAA:8\n a=ZDXLRS20C3ackK2NFGcA:9", "X-Proofpoint-Virus-Version": "vendor=baseguard\n engine=ICAP:2.0.293,Aquarius:18.0.1143,Hydra:6.1.51,FMLib:17.12.100.49\n definitions=2026-05-05_02,2026-04-30_02,2025-10-01_01", "X-Proofpoint-Spam-Details": "rule=outbound_notspam policy=outbound score=0\n clxscore=1015 spamscore=0 lowpriorityscore=0 malwarescore=0 suspectscore=0\n adultscore=0 priorityscore=1501 bulkscore=0 phishscore=0 impostorscore=0\n classifier=typeunknown authscore=0 authtc= authcc= route=outbound adjust=0\n reason=mlx scancount=1 engine=8.22.0-2604200000 definitions=main-2605050195", "Received-SPF": "pass client-ip=148.163.156.1; envelope-from=zycai@linux.ibm.com;\n helo=mx0a-001b2d01.pphosted.com", "X-Spam_score_int": "-26", "X-Spam_score": "-2.7", "X-Spam_bar": "--", "X-Spam_report": "(-2.7 / 5.0 requ) BAYES_00=-1.9, DKIM_SIGNED=0.1,\n DKIM_VALID=-0.1, DKIM_VALID_EF=-0.1, RCVD_IN_DNSWL_LOW=-0.7,\n RCVD_IN_MSPIKE_H4=0.001, RCVD_IN_MSPIKE_WL=0.001, SPF_HELO_NONE=0.001,\n SPF_PASS=-0.001 autolearn=ham autolearn_force=no", "X-Spam_action": "no action", "X-BeenThere": "qemu-devel@nongnu.org", "X-Mailman-Version": "2.1.29", "Precedence": "list", "List-Id": "qemu development <qemu-devel.nongnu.org>", "List-Unsubscribe": "<https://lists.nongnu.org/mailman/options/qemu-devel>,\n <mailto:qemu-devel-request@nongnu.org?subject=unsubscribe>", "List-Archive": "<https://lists.nongnu.org/archive/html/qemu-devel>", "List-Post": "<mailto:qemu-devel@nongnu.org>", "List-Help": "<mailto:qemu-devel-request@nongnu.org?subject=help>", "List-Subscribe": "<https://lists.nongnu.org/mailman/listinfo/qemu-devel>,\n <mailto:qemu-devel-request@nongnu.org?subject=subscribe>", "Errors-To": "qemu-devel-bounces+incoming=patchwork.ozlabs.org@nongnu.org", "Sender": "qemu-devel-bounces+incoming=patchwork.ozlabs.org@nongnu.org" }, "content": "Add IPIB flags to IPL Parameter Block to determine if IPL needs to\nperform securely and if IPL Information Report Block (IIRB) exists.\n\nMove DIAG308 flags to a separated header file and add flags for secure IPL.\nMove IPLB length related definitions to include/hw/s390x/ipl/qipl.h and\nadd a maximum length constant to support secure IPL.\n\nSecure boot in audit mode will perform if certificate(s) exist in the\nkey store. IIRB will exist and results of verification will be stored in\nIIRB.\n\nTo ensure proper alignment of the IIRB and prevent overlap, set\niplb->len to the maximum length of the IPLB, allowing alignment\nconstraints to be determined based on its size.\n\nSigned-off-by: Zhuoying Cai <zycai@linux.ibm.com>\nReviewed-by: Thomas Huth <thuth@redhat.com>\n---\n hw/s390x/ipl.c | 21 +++++++++++++++++++++\n hw/s390x/ipl.h | 24 ------------------------\n include/hw/s390x/ipl/diag308.h | 34 ++++++++++++++++++++++++++++++++++\n include/hw/s390x/ipl/qipl.h | 13 ++++++++++++-\n 4 files changed, 67 insertions(+), 25 deletions(-)\n create mode 100644 include/hw/s390x/ipl/diag308.h", "diff": "diff --git a/hw/s390x/ipl.c b/hw/s390x/ipl.c\nindex fbef46aee5..f4311f6d62 100644\n--- a/hw/s390x/ipl.c\n+++ b/hw/s390x/ipl.c\n@@ -461,6 +461,13 @@ S390IPLCertificateStore *s390_ipl_get_certificate_store(void)\n return &ipl->cert_store;\n }\n \n+static bool s390_has_certificate(void)\n+{\n+ S390IPLState *ipl = get_ipl_device();\n+\n+ return ipl->cert_store.count > 0;\n+}\n+\n static bool s390_build_iplb(DeviceState *dev_st, IplParameterBlock *iplb)\n {\n CcwDevice *ccw_dev = NULL;\n@@ -517,6 +524,20 @@ static bool s390_build_iplb(DeviceState *dev_st, IplParameterBlock *iplb)\n s390_ipl_convert_loadparm((char *)lp, iplb->loadparm);\n iplb->flags |= DIAG308_FLAGS_LP_VALID;\n \n+ /*\n+ * Secure boot in audit mode will perform\n+ * if certificate(s) exist in the key store.\n+ *\n+ * IPL Information Report Block (IIRB) will exist\n+ * for secure boot in audit mode.\n+ *\n+ * Results of secure boot will be stored in IIRB.\n+ */\n+ if (s390_has_certificate()) {\n+ iplb->hdr_flags |= DIAG308_IPIB_FLAGS_IPLIR;\n+ iplb->len = cpu_to_be32(S390_IPLB_MAX_LEN);\n+ }\n+\n return true;\n }\n \ndiff --git a/hw/s390x/ipl.h b/hw/s390x/ipl.h\nindex f5a49a4431..9807ef18f2 100644\n--- a/hw/s390x/ipl.h\n+++ b/hw/s390x/ipl.h\n@@ -23,7 +23,6 @@\n #include \"qom/object.h\"\n #include \"target/s390x/kvm/pv.h\"\n \n-#define DIAG308_FLAGS_LP_VALID 0x80\n #define MAX_BOOT_DEVS 8 /* Max number of devices that may have a bootindex */\n \n void s390_ipl_convert_loadparm(char *ascii_lp, uint8_t *ebcdic_lp);\n@@ -90,29 +89,6 @@ struct S390IPLState {\n };\n QEMU_BUILD_BUG_MSG(offsetof(S390IPLState, iplb) & 3, \"alignment of iplb wrong\");\n \n-#define DIAG_308_RC_OK 0x0001\n-#define DIAG_308_RC_NO_CONF 0x0102\n-#define DIAG_308_RC_INVALID 0x0402\n-#define DIAG_308_RC_NO_PV_CONF 0x0902\n-#define DIAG_308_RC_INVAL_FOR_PV 0x0a02\n-\n-#define DIAG308_RESET_MOD_CLR 0\n-#define DIAG308_RESET_LOAD_NORM 1\n-#define DIAG308_LOAD_CLEAR 3\n-#define DIAG308_LOAD_NORMAL_DUMP 4\n-#define DIAG308_SET 5\n-#define DIAG308_STORE 6\n-#define DIAG308_PV_SET 8\n-#define DIAG308_PV_STORE 9\n-#define DIAG308_PV_START 10\n-\n-#define S390_IPLB_HEADER_LEN 8\n-#define S390_IPLB_MIN_PV_LEN 148\n-#define S390_IPLB_MIN_CCW_LEN 200\n-#define S390_IPLB_MIN_FCP_LEN 384\n-#define S390_IPLB_MIN_PCI_LEN 376\n-#define S390_IPLB_MIN_QEMU_SCSI_LEN 200\n-\n static inline bool iplb_valid_len(IplParameterBlock *iplb)\n {\n return be32_to_cpu(iplb->len) <= sizeof(IplParameterBlock);\ndiff --git a/include/hw/s390x/ipl/diag308.h b/include/hw/s390x/ipl/diag308.h\nnew file mode 100644\nindex 0000000000..6e62f29215\n--- /dev/null\n+++ b/include/hw/s390x/ipl/diag308.h\n@@ -0,0 +1,34 @@\n+/*\n+ * S/390 DIAGNOSE 308 definitions and structures\n+ *\n+ * Copyright 2025 IBM Corp.\n+ * Author(s): Zhuoying Cai <zycai@linux.ibm.com>\n+ *\n+ * SPDX-License-Identifier: GPL-2.0-or-later\n+ */\n+\n+#ifndef S390X_DIAG308_H\n+#define S390X_DIAG308_H\n+\n+#define DIAG_308_RC_OK 0x0001\n+#define DIAG_308_RC_NO_CONF 0x0102\n+#define DIAG_308_RC_INVALID 0x0402\n+#define DIAG_308_RC_NO_PV_CONF 0x0902\n+#define DIAG_308_RC_INVAL_FOR_PV 0x0a02\n+\n+#define DIAG308_RESET_MOD_CLR 0\n+#define DIAG308_RESET_LOAD_NORM 1\n+#define DIAG308_LOAD_CLEAR 3\n+#define DIAG308_LOAD_NORMAL_DUMP 4\n+#define DIAG308_SET 5\n+#define DIAG308_STORE 6\n+#define DIAG308_PV_SET 8\n+#define DIAG308_PV_STORE 9\n+#define DIAG308_PV_START 10\n+\n+#define DIAG308_FLAGS_LP_VALID 0x80\n+\n+#define DIAG308_IPIB_FLAGS_SIPL 0x40\n+#define DIAG308_IPIB_FLAGS_IPLIR 0x20\n+\n+#endif\ndiff --git a/include/hw/s390x/ipl/qipl.h b/include/hw/s390x/ipl/qipl.h\nindex 9940f1457c..a2180719b1 100644\n--- a/include/hw/s390x/ipl/qipl.h\n+++ b/include/hw/s390x/ipl/qipl.h\n@@ -12,6 +12,8 @@\n #ifndef S390X_QIPL_H\n #define S390X_QIPL_H\n \n+#include \"diag308.h\"\n+\n /* Boot Menu flags */\n #define QIPL_FLAG_BM_OPTS_CMD 0x80\n #define QIPL_FLAG_BM_OPTS_ZIPL 0x40\n@@ -31,6 +33,14 @@ typedef enum S390IplType S390IplType;\n \n #define QEMU_DEFAULT_IPL S390_IPL_TYPE_CCW\n \n+#define S390_IPLB_HEADER_LEN 8\n+#define S390_IPLB_MIN_PV_LEN 148\n+#define S390_IPLB_MIN_CCW_LEN 200\n+#define S390_IPLB_MIN_FCP_LEN 384\n+#define S390_IPLB_MIN_PCI_LEN 376\n+#define S390_IPLB_MIN_QEMU_SCSI_LEN 200\n+#define S390_IPLB_MAX_LEN 4096\n+\n #define MAX_CERTIFICATES 64\n /* largest supported block size - same as VIRTIO_DASD_DEFAULT_BLOCK_SIZE */\n #define VIRTIO_MAX_BLOCK_SIZE 4096\n@@ -125,7 +135,8 @@ typedef struct IplBlockPci IplBlockPci;\n union IplParameterBlock {\n struct {\n uint32_t len;\n- uint8_t reserved0[3];\n+ uint8_t hdr_flags;\n+ uint8_t reserved0[2];\n uint8_t version;\n uint32_t blk0_len;\n uint8_t pbt;\n", "prefixes": [ "v11", "16/32" ] }