Skip to content

Sync pKVM changes for the pending 1.55.3 release - #3002

Open
dimorinny wants to merge 2 commits into
google:version-1.55-devfrom
dimorinny:1.55-3-pkvm
Open

Sync pKVM changes for the pending 1.55.3 release#3002
dimorinny wants to merge 2 commits into
google:version-1.55-devfrom
dimorinny:1.55-3-pkvm

Conversation

@dimorinny

Copy link
Copy Markdown
Contributor
PR Main SHA Subject
#2953 8a0d633 Add an optional A/B pvmfw partition to the OS composite disk
#2987 70fbbc7 Add --enable_pkvm flag to provision the guest as a pKVM host

The image comes from the Android build when available. Targets that
don't build protected VM firmware are unaffected.

Bug: 536088107
Signed-off-by: Dmitrii Merkurev <dimorinny@google.com>
When set, pass --nested=on to crosvm so the guest boots at virtual
EL2, and append kvm-arm.mode=protected and
kvm-arm.protected_modules=pkvm_iommu_temp to the guest kernel
command line.

Also disable virtio-pmem for pkvm guests (host writeback of the
storage-backed pmem files invalidates the guest's nested stage-2,
making the guest extremely slow) and keep pkvm_iommu_temp.ko in
the first-stage ramdisk during module redistribution.

Requires a nested-virt capable host, a crosvm with --nested
support, and a guest image built for pKVM.

Bug: 536088107
Signed-off-by: Dmitrii Merkurev <dimorinny@google.com>
@dimorinny
dimorinny requested a review from rmuthiah August 12, 2026 00:24
@dimorinny dimorinny changed the title 1.55 3 pkvm Sync pKVM changes for the pending 1.55.3 release Aug 12, 2026
@dimorinny dimorinny added the kokoro:run Run e2e tests. label Aug 12, 2026
@GoogleCuttlefishTesterBot GoogleCuttlefishTesterBot removed the kokoro:run Run e2e tests. label Aug 12, 2026
@rmuthiah rmuthiah added kokoro:force-run Trigger a presubmit build unconditionally. kokoro:run Run e2e tests. labels Aug 12, 2026
@GoogleCuttlefishTesterBot GoogleCuttlefishTesterBot removed kokoro:run Run e2e tests. kokoro:force-run Trigger a presubmit build unconditionally. labels Aug 12, 2026
@dimorinny dimorinny added the kokoro:force-run Trigger a presubmit build unconditionally. label Aug 12, 2026
@GoogleCuttlefishTesterBot GoogleCuttlefishTesterBot removed the kokoro:force-run Trigger a presubmit build unconditionally. label Aug 12, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

3 participants