| # SPDX-License-Identifier: GPL-2.0-only | |
| config ARCH_SUPPORTS_RMM | |
| bool | |
| config ARM_RMM_RMI | |
| bool "Realm Management Interface (RMI) Support" | |
| depends on ARCH_SUPPORTS_RMM | |
| help | |
| Support the Realm Management Monitor (RMM) on Arm systems that | |
| implement the Realm Management Extension (RME), as defined by the | |
| Arm Confidential Compute Architecture. | |
| The RMM runs at EL2 in the Realm world and provides the Realm | |
| Management Interface (RMI) used by a Normal World host to create, | |
| manage and run protected virtual machines called Realms. The RMM can | |
| also act as a TSM, as defined by the PCIe TDISP and can manage the | |
| PCI IDE setup for securing the PCIe links. | |
| This option builds the host-side RMI support used by KVM to detect a | |
| compatible RMM, configure it, manage delegated memory and enable | |
| Realm guests. | |
| Selecting this option does not by itself make Realm guests available: | |
| the system must also provide RME-capable hardware and firmware with a | |
| compatible RMM implementation. | |
| config ARM_RMM_RSI | |
| bool "Realm Service Interface (RSI) Support" | |
| depends on ARCH_SUPPORTS_RMM | |
| default y | |
| help | |
| Enable support for running Linux as a Realm guest under a Realm | |
| Management Monitor (RMM), as defined by the Arm Confidential | |
| Compute Architecture. | |
| The RMM exposes the Realm Service Interface (RSI) to Realm guests. | |
| Linux uses RSI to negotiate the interface version, obtain the Realm | |
| configuration, and manage the protected or shared state of guest | |
| memory. |