vmxcap 9.4 KB

123456789101112131415161718192021222324252627282930313233343536373839404142434445464748495051525354555657585960616263646566676869707172737475767778798081828384858687888990919293949596979899100101102103104105106107108109110111112113114115116117118119120121122123124125126127128129130131132133134135136137138139140141142143144145146147148149150151152153154155156157158159160161162163164165166167168169170171172173174175176177178179180181182183184185186187188189190191192193194195196197198199200201202203204205206207208209210211212213214215216217218219220221222223224225226227228229230231232233234235236237238239240241242243244245246247248249250251252253254255256257258259260261262263264265266267268269270271272273274275276277278279280281282283284285286287288289290291292293294295296297298
  1. #!/usr/bin/env python3
  2. #
  3. # tool for querying VMX capabilities
  4. #
  5. # Copyright 2009-2010 Red Hat, Inc.
  6. #
  7. # Authors:
  8. # Avi Kivity <avi@redhat.com>
  9. #
  10. # This work is licensed under the terms of the GNU GPL, version 2. See
  11. # the COPYING file in the top-level directory.
  12. MSR_IA32_VMX_BASIC = 0x480
  13. MSR_IA32_VMX_PINBASED_CTLS = 0x481
  14. MSR_IA32_VMX_PROCBASED_CTLS = 0x482
  15. MSR_IA32_VMX_EXIT_CTLS = 0x483
  16. MSR_IA32_VMX_ENTRY_CTLS = 0x484
  17. MSR_IA32_VMX_MISC_CTLS = 0x485
  18. MSR_IA32_VMX_PROCBASED_CTLS2 = 0x48B
  19. MSR_IA32_VMX_EPT_VPID_CAP = 0x48C
  20. MSR_IA32_VMX_TRUE_PINBASED_CTLS = 0x48D
  21. MSR_IA32_VMX_TRUE_PROCBASED_CTLS = 0x48E
  22. MSR_IA32_VMX_TRUE_EXIT_CTLS = 0x48F
  23. MSR_IA32_VMX_TRUE_ENTRY_CTLS = 0x490
  24. MSR_IA32_VMX_VMFUNC = 0x491
  25. MSR_IA32_VMX_PROCBASED_CTLS3 = 0x492
  26. class msr(object):
  27. def __init__(self):
  28. try:
  29. self.f = open('/dev/cpu/0/msr', 'rb', 0)
  30. except:
  31. self.f = open('/dev/msr0', 'rb', 0)
  32. def read(self, index, default = None):
  33. import struct
  34. self.f.seek(index)
  35. try:
  36. return struct.unpack('Q', self.f.read(8))[0]
  37. except:
  38. return default
  39. class Control(object):
  40. def __init__(self, name, bits, cap_msr, true_cap_msr = None):
  41. self.name = name
  42. self.bits = bits
  43. self.cap_msr = cap_msr
  44. self.true_cap_msr = true_cap_msr
  45. def read2(self, nr):
  46. m = msr()
  47. val = m.read(nr, 0)
  48. return (val & 0xffffffff, val >> 32)
  49. def show(self):
  50. print(self.name)
  51. mb1, cb1 = self.read2(self.cap_msr)
  52. tmb1, tcb1 = 0, 0
  53. if self.true_cap_msr:
  54. tmb1, tcb1 = self.read2(self.true_cap_msr)
  55. for bit in sorted(self.bits.keys()):
  56. zero = not (mb1 & (1 << bit))
  57. one = cb1 & (1 << bit)
  58. true_zero = not (tmb1 & (1 << bit))
  59. true_one = tcb1 & (1 << bit)
  60. s= '?'
  61. if (self.true_cap_msr and true_zero and true_one
  62. and one and not zero):
  63. s = 'default'
  64. elif zero and not one:
  65. s = 'no'
  66. elif one and not zero:
  67. s = 'forced'
  68. elif one and zero:
  69. s = 'yes'
  70. print(' %-40s %s' % (self.bits[bit], s))
  71. # All 64 bits in the tertiary controls MSR are allowed-1
  72. class Allowed1Control(Control):
  73. def read2(self, nr):
  74. m = msr()
  75. val = m.read(nr, 0)
  76. return (0, val)
  77. class Misc(object):
  78. def __init__(self, name, bits, msr):
  79. self.name = name
  80. self.bits = bits
  81. self.msr = msr
  82. def show(self):
  83. print(self.name)
  84. value = msr().read(self.msr, 0)
  85. print(' Hex: 0x%x' % (value))
  86. def first_bit(key):
  87. if type(key) is tuple:
  88. return key[0]
  89. else:
  90. return key
  91. for bits in sorted(self.bits.keys(), key = first_bit):
  92. if type(bits) is tuple:
  93. lo, hi = bits
  94. fmt = int
  95. else:
  96. lo = hi = bits
  97. def fmt(x):
  98. return { True: 'yes', False: 'no' }[x]
  99. v = (value >> lo) & ((1 << (hi - lo + 1)) - 1)
  100. print(' %-40s %s' % (self.bits[bits], fmt(v)))
  101. controls = [
  102. Misc(
  103. name = 'Basic VMX Information',
  104. bits = {
  105. (0, 30): 'Revision',
  106. (32,44): 'VMCS size',
  107. 48: 'VMCS restricted to 32 bit addresses',
  108. 49: 'Dual-monitor support',
  109. (50, 53): 'VMCS memory type',
  110. 54: 'INS/OUTS instruction information',
  111. 55: 'IA32_VMX_TRUE_*_CTLS support',
  112. },
  113. msr = MSR_IA32_VMX_BASIC,
  114. ),
  115. Control(
  116. name = 'pin-based controls',
  117. bits = {
  118. 0: 'External interrupt exiting',
  119. 3: 'NMI exiting',
  120. 5: 'Virtual NMIs',
  121. 6: 'Activate VMX-preemption timer',
  122. 7: 'Process posted interrupts',
  123. },
  124. cap_msr = MSR_IA32_VMX_PINBASED_CTLS,
  125. true_cap_msr = MSR_IA32_VMX_TRUE_PINBASED_CTLS,
  126. ),
  127. Control(
  128. name = 'primary processor-based controls',
  129. bits = {
  130. 2: 'Interrupt window exiting',
  131. 3: 'Use TSC offsetting',
  132. 7: 'HLT exiting',
  133. 9: 'INVLPG exiting',
  134. 10: 'MWAIT exiting',
  135. 11: 'RDPMC exiting',
  136. 12: 'RDTSC exiting',
  137. 15: 'CR3-load exiting',
  138. 16: 'CR3-store exiting',
  139. 17: 'Activate tertiary controls',
  140. 19: 'CR8-load exiting',
  141. 20: 'CR8-store exiting',
  142. 21: 'Use TPR shadow',
  143. 22: 'NMI-window exiting',
  144. 23: 'MOV-DR exiting',
  145. 24: 'Unconditional I/O exiting',
  146. 25: 'Use I/O bitmaps',
  147. 27: 'Monitor trap flag',
  148. 28: 'Use MSR bitmaps',
  149. 29: 'MONITOR exiting',
  150. 30: 'PAUSE exiting',
  151. 31: 'Activate secondary control',
  152. },
  153. cap_msr = MSR_IA32_VMX_PROCBASED_CTLS,
  154. true_cap_msr = MSR_IA32_VMX_TRUE_PROCBASED_CTLS,
  155. ),
  156. Control(
  157. name = 'secondary processor-based controls',
  158. bits = {
  159. 0: 'Virtualize APIC accesses',
  160. 1: 'Enable EPT',
  161. 2: 'Descriptor-table exiting',
  162. 3: 'Enable RDTSCP',
  163. 4: 'Virtualize x2APIC mode',
  164. 5: 'Enable VPID',
  165. 6: 'WBINVD exiting',
  166. 7: 'Unrestricted guest',
  167. 8: 'APIC register emulation',
  168. 9: 'Virtual interrupt delivery',
  169. 10: 'PAUSE-loop exiting',
  170. 11: 'RDRAND exiting',
  171. 12: 'Enable INVPCID',
  172. 13: 'Enable VM functions',
  173. 14: 'VMCS shadowing',
  174. 15: 'Enable ENCLS exiting',
  175. 16: 'RDSEED exiting',
  176. 17: 'Enable PML',
  177. 18: 'EPT-violation #VE',
  178. 19: 'Conceal non-root operation from PT',
  179. 20: 'Enable XSAVES/XRSTORS',
  180. 22: 'Mode-based execute control (XS/XU)',
  181. 23: 'Sub-page write permissions',
  182. 24: 'GPA translation for PT',
  183. 25: 'TSC scaling',
  184. 26: 'User wait and pause',
  185. 28: 'ENCLV exiting',
  186. },
  187. cap_msr = MSR_IA32_VMX_PROCBASED_CTLS2,
  188. ),
  189. Allowed1Control(
  190. name = 'tertiary processor-based controls',
  191. bits = {
  192. 4: 'Enable IPI virtualization'
  193. },
  194. cap_msr = MSR_IA32_VMX_PROCBASED_CTLS3,
  195. ),
  196. Control(
  197. name = 'VM-Exit controls',
  198. bits = {
  199. 2: 'Save debug controls',
  200. 9: 'Host address-space size',
  201. 12: 'Load IA32_PERF_GLOBAL_CTRL',
  202. 15: 'Acknowledge interrupt on exit',
  203. 18: 'Save IA32_PAT',
  204. 19: 'Load IA32_PAT',
  205. 20: 'Save IA32_EFER',
  206. 21: 'Load IA32_EFER',
  207. 22: 'Save VMX-preemption timer value',
  208. 23: 'Clear IA32_BNDCFGS',
  209. 24: 'Conceal VM exits from PT',
  210. 25: 'Clear IA32_RTIT_CTL',
  211. },
  212. cap_msr = MSR_IA32_VMX_EXIT_CTLS,
  213. true_cap_msr = MSR_IA32_VMX_TRUE_EXIT_CTLS,
  214. ),
  215. Control(
  216. name = 'VM-Entry controls',
  217. bits = {
  218. 2: 'Load debug controls',
  219. 9: 'IA-32e mode guest',
  220. 10: 'Entry to SMM',
  221. 11: 'Deactivate dual-monitor treatment',
  222. 13: 'Load IA32_PERF_GLOBAL_CTRL',
  223. 14: 'Load IA32_PAT',
  224. 15: 'Load IA32_EFER',
  225. 16: 'Load IA32_BNDCFGS',
  226. 17: 'Conceal VM entries from PT',
  227. 18: 'Load IA32_RTIT_CTL',
  228. },
  229. cap_msr = MSR_IA32_VMX_ENTRY_CTLS,
  230. true_cap_msr = MSR_IA32_VMX_TRUE_ENTRY_CTLS,
  231. ),
  232. Misc(
  233. name = 'Miscellaneous data',
  234. bits = {
  235. (0,4): 'VMX-preemption timer scale (log2)',
  236. 5: 'Store EFER.LMA into IA-32e mode guest control',
  237. 6: 'HLT activity state',
  238. 7: 'Shutdown activity state',
  239. 8: 'Wait-for-SIPI activity state',
  240. 14: 'PT in VMX operation',
  241. 15: 'IA32_SMBASE support',
  242. (16,24): 'Number of CR3-target values',
  243. (25,27): 'MSR-load/store count recommendation',
  244. 28: 'IA32_SMM_MONITOR_CTL[2] can be set to 1',
  245. 29: 'VMWRITE to VM-exit information fields',
  246. 30: 'Inject event with insn length=0',
  247. (32,63): 'MSEG revision identifier',
  248. },
  249. msr = MSR_IA32_VMX_MISC_CTLS,
  250. ),
  251. Misc(
  252. name = 'VPID and EPT capabilities',
  253. bits = {
  254. 0: 'Execute-only EPT translations',
  255. 6: 'Page-walk length 4',
  256. 7: 'Page-walk length 5',
  257. 8: 'Paging-structure memory type UC',
  258. 14: 'Paging-structure memory type WB',
  259. 16: '2MB EPT pages',
  260. 17: '1GB EPT pages',
  261. 20: 'INVEPT supported',
  262. 21: 'EPT accessed and dirty flags',
  263. 22: 'Advanced VM-exit information for EPT violations',
  264. 25: 'Single-context INVEPT',
  265. 26: 'All-context INVEPT',
  266. 32: 'INVVPID supported',
  267. 40: 'Individual-address INVVPID',
  268. 41: 'Single-context INVVPID',
  269. 42: 'All-context INVVPID',
  270. 43: 'Single-context-retaining-globals INVVPID',
  271. },
  272. msr = MSR_IA32_VMX_EPT_VPID_CAP,
  273. ),
  274. Misc(
  275. name = 'VM Functions',
  276. bits = {
  277. 0: 'EPTP Switching',
  278. },
  279. msr = MSR_IA32_VMX_VMFUNC,
  280. ),
  281. ]
  282. if __name__ == '__main__':
  283. for c in controls:
  284. c.show()