[23.10 FEAT] KVM: Enable Secure Execution Crypto Passthrough - kernel part

------- Comment From <email address hidden> 2023-08-23 12:28 EDT-------
Thanks everyone for your work on this item.

All required patches are now available in linux-next.

Please include the following set of patches in Mantic:

b1d8b21681db KVM: s390: pv: Allow AP-instructions for pv-guests
baf737b3381e KVM: s390: Add UV feature negotiation
d1c787f139e5 s390/uv: UV feature check utility
ed1bb17c0051 KVM: s390: pv: relax WARN_ONCE condition for destroy fast
9341fed081a9 Merge remote-tracking branch 'vfio-ap' into kvm-next
f88fb1335733 s390/vfio-ap: make sure nib is shared
fb5040ef7f70 KVM: s390: export kvm_s390_pv*_is_protected functions
cf3fa16a6fd4 s390/uv: export uv_pin_shared for direct usage
7847a19b5b62 s390/vfio-ap: check for TAPQ response codes 0x35 and 0x36
e1f17f8ea93d s390/vfio-ap: handle queue state change in progress on reset
9261f0438835 s390/vfio-ap: use work struct to verify queue reset
62aab082e999 s390/vfio-ap: store entire AP queue status word with the queue object
dd174833e44e s390/vfio-ap: remove upper limit on wait for queue reset to complete
c51f8c6bb5c8 s390/vfio-ap: allow deconfigured queue to be passed through to a guest
411b0109daa5 s390/vfio-ap: wait for response code 05 to clear on queue reset
7aa7b2a80cb7 s390/vfio-ap: clean up irq resources if possible
680b7ddd7e2a s390/vfio-ap: no need to check the 'E' and 'I' bits in APQSW after TAPQ
b275d8313217 KVM: s390: selftests: Add selftest for single-stepping
93f92e0fe942 KVM: s390: interrupt: Fix single-stepping keyless mode exits
000e395cb8c1 KVM: s390: interrupt: Fix single-stepping userspace-emulated instructions
2e05ab06b68b KVM: s390: interrupt: Fix single-stepping kernel-emulated instructions
e544f4055741 KVM: s390: interrupt: Fix single-stepping into program interrupt handlers
bbc6eb0de96e KVM: s390: interrupt: Fix single-stepping into interrupt handlers

Thanks.

Kernel test build(s) available in this PPA:
https://launchpad.net/~fheimes/+archive/ubuntu/lp2003674

Pull request submitted to kernel team's mailing list:
https://lists.ubuntu.com/archives/kernel-team/2023-September/thread.html#142529

Changing status to 'In Progress'.

Assigning to kernel team.

------- Comment From <email address hidden> 2023-09-12 10:27 EDT-------
FYI: the commits are available through 6.6-rc1 now.

Updated to 'Fix Committed' since code is in mantic-proposed.

This bug was fixed in the package linux - 6.5.0-7.7

---------------
linux (6.5.0-7.7) mantic; urgency=medium

  * mantic/linux: 6.5.0-7.7 -proposed tracker (LP: #2037611)

  * kexec enable to load/kdump zstd compressed zimg (LP: #2037398)
    - [Packaging] Revert arm64 image format to Image.gz

  * Mantic minimized/minimal cloud images do not receive IP address during
    provisioning (LP: #2036968)
    - [Config] Enable virtio-net as built-in to avoid race

  * Miscellaneous Ubuntu changes
    - SAUCE: Add mdev_set_iommu_device() kABI
    - [Config] update gcc version in annotations

 -- Andrea Righi <email address hidden> Thu, 28 Sep 2023 10:19:24 +0200

This bug is awaiting verification that the linux-azure-6.5/6.5.0-1007.7~22.04.1 kernel in -proposed solves the problem. Please test the kernel and update this bug with the results. If the problem is solved, change the tag 'verification-needed-jammy-linux-azure-6.5' to 'verification-done-jammy-linux-azure-6.5'. If the problem still exists, change the tag 'verification-needed-jammy-linux-azure-6.5' to 'verification-failed-jammy-linux-azure-6.5'.

If verification is not done by 5 working days from today, this fix will be dropped from the source code, and this bug will be closed.

See https://wiki.ubuntu.com/Testing/EnableProposed for documentation how to enable and use -proposed. Thank you!

This bug is awaiting verification that the linux-aws-6.5/6.5.0-1008.8~22.04.1 kernel in -proposed solves the problem. Please test the kernel and update this bug with the results. If the problem is solved, change the tag 'verification-needed-jammy-linux-aws-6.5' to 'verification-done-jammy-linux-aws-6.5'. If the problem still exists, change the tag 'verification-needed-jammy-linux-aws-6.5' to 'verification-failed-jammy-linux-aws-6.5'.

If verification is not done by 5 working days from today, this fix will be dropped from the source code, and this bug will be closed.

See https://wiki.ubuntu.com/Testing/EnableProposed for documentation how to enable and use -proposed. Thank you!

not relevant for aws, updating tag to unblock

does not affect aws, updating tags just to unblock