Skip to content

vmpl-dev/libvmpl

Repository files navigation

## Build:
```bash
./configure --prefix=/usr/local/musl/ --enable-sys-filter --enable-vmpl-cpuset --enable-vmpl-ghcb --enable-vmpl-hotcalls --enable-vmpl-signal --enable-vmpl-debug
```

## Install:
```bash
pushd libdict
CC=musl-gcc
INSTALL_PREFIX=/usr/local/musl
INSTALL_USER=$(id -u)
INSTALL_GROUP=$(id -g)
make install
popd
```

## Plan:
[√] APIC
[√] trap handler
[√] SEV-SNP related
    [√] MSR protocol
        [√] 0x000 - GHCB Guest Physical Address
        [√] 0x001 - SEV Information
        [√] 0x002 - SEV Information Request
        [x] CPUID Request
        [x] Preferred GHCB GPA Request
        [x] Register GHCB GPA Request
        [x] Page State Change Request
        [√] SNP Run VMPL Request
        [√] Hypervisor Feature Support Request
        [x] Termination Request
    [x] GHCB support
        [x] Page State Change             - 0x8000_0010
        [x] SNP Guest Request             - 0x8000_0011
        [x] SNP Extended Guest Request    - 0x8000_0012
        [x] SNP AP Creation               - 0x8000_0013
        [x] \#HV Doorbell Page             - 0x8000_0014
        [x] \#HV IPI                       - 0x8000_0015
        [x] \#HV Timer                     - 0x8000_0016
        [x] APIC ID List                  - 0x8000_0017
        [x] SNP Run VMPL                  - 0x8000_0018
[√] Debug related
[√] SMP related
    [√] PerCpu Variable
    [√] Thread-Local Storage
[x] Ring 3
    [√] Remap syscall page
    [√] Remap vsyscall page
    [x] Syscall passthrough
    [x] ELF Loader
[x] glibc
    [x] syscall
    [x] pthread
[√] musl-libc
    [√] syscall
    [x] posix
        [x] process management
            [x] fork
            [x] vfork
            [x] exec
            [x] exit
        [x] pthread management
            [x] pthread_create
            [x] pthread_exit
            [x] pthread_join
            [x] pthread_detach
            [x] pthread_self
        [√] signal handler
            [x] sigaction
            [x] sigemptyset
            [x] sigfillset
            [x] sigaddset
        [√] memory management
            [√] mmap
            [√] munmap
            [√] mremap
            [√] mprotect
            [√] brk
            [√] sbrk

About

Privileged Execution of Guest Process with VMPL Isolation

Resources

License

Stars

Watchers

Forks

Packages

No packages published