gvisor - Container Runtime Sandbox

Age	Commit message (Collapse)	Author
2021-07-12	Go 1.17 support for the KVM platform	Michael Pratt
	Go 1.17 adds a new register-based calling convention. While transparent for most applications, the KVM platform needs special work in a few cases. First of all, we need the actual address of some assembly functions, rather than the address of a wrapper. See http://gvisor.dev/pr/5832 for complete discussion of this. More relevant to this CL is that ABI0-to-ABIInternal wrappers (i.e., calls from assembly to Go) access the G via FS_BASE. The KVM quite fast-and-loose about the Go environment, often calling into (nosplit) Go functions with uninitialized FS_BASE. That will no longer work in Go 1.17, so this CL changes the platform to consistently restore FS_BASE before calling into Go code. This CL does not affect arm64 code. Go 1.17 does not support the register-based calling convention for arm64 (it will come in 1.18), but arm64 also does not use a non-standard register like FS_BASE for TLS, so it may not require any changes. PiperOrigin-RevId: 384234305
2021-06-11	Rework the workaround of the XCR0 issue	Andrei Vagin
	XCR0 has to be synchronized with the host. We can call xsave from the host context and then call xrstor from the guest context and vise versa. This means we need to support the same set of FPU features in both contexts. PiperOrigin-RevId: 378988281
2021-04-30	kvm: prefault a root table page before switching into a user address space	Andrei Vagin
	The root table physical page has to be mapped to not fault in iret or sysret after switching into a user address space. sysret and iret are in the upper half that is global and so page tables of lower levels are already mapped. Fixes #5742 PiperOrigin-RevId: 371458644
2021-04-21	Merge pull request #5749 from zhlhahaha:2126	gVisor bot
	PiperOrigin-RevId: 369686298
2021-04-09	Merge pull request #5767 from avagin:mxcsr	gVisor bot
	PiperOrigin-RevId: 367730917
2021-04-08	Merge pull request #5736 from lubinszARM:pr_bblu_tlb_asid	gVisor bot
	PiperOrigin-RevId: 367523491
2021-04-01	platform/kvm/x86: restore mxcsr when switching from guest to sentry	Andrei Vagin
	Goruntime sets mxcsr once and never changes it. Reported-by: syzbot+ec55cea6e57ec083b7a6@syzkaller.appspotmail.com Fixes: #5754
2021-03-30	apply hostarch on pagetables_arm64_test.go	Howard Zhang
	Signed-off-by: Howard Zhang <howard.zhang@arm.com>
2021-03-29	[syserror] Split usermem package	Zach Koopmans
	Split usermem package to help remove syserror dependency in go_marshal. New hostarch package contains code not dependent on syserror. PiperOrigin-RevId: 365651233
2021-03-26	arm64 ring0: don't use inner-sharable to invalidate tlb	Robin Luk
	It is enough to invalidate the tlb of local vcpu in switch(). TLBI with inner-sharable will invalidate the tlb in other vcpu. Arm64 hardware supports at least 256 pcid, so I think it's ok to set the length of pcid pool to 128. Signed-off-by: Robin Luk <lubin.lu@antgroup.com>
2021-03-25	Fix nogo test error	Howard Zhang
	Signed-off-by: Howard Zhang <howard.zhang@arm.com>
2021-03-23	Move the code that manages floating-point state to a separate package	Andrei Vagin
	This change is inspired by Adin's cl/355256448. PiperOrigin-RevId: 364695931
2021-02-03	arm64 kvm:implement basic lazy save and restore for FPSIMD registers	Robin Luk
	Implement basic lazy save and restore for FPSIMD registers, which only restore FPSIMD state on el0_fpsimd_acc and save FPSIMD state in switch(). Signed-off-by: Robin Luk <lubin.lu@antgroup.com>
2021-02-03	arm64: clean code	Robin Luk
	In order to improve the performance and stability, I reorg 2 modules slightly. arch: no red zone on Arm64. ring0: use stp instead of movd, and set RSV_REG_APP=R19. Signed-off-by: Robin Luk <lubin.lu@antgroup.com>
2021-02-02	Move ring0 package.	Adin Scannell
	This allows the package to serve as a general purpose ring0 support package, as opposed to being bound to specific sentry platforms. Updates #5039 PiperOrigin-RevId: 355220044