1# SPDX-License-Identifier: GPL-2.0
2#
3# KVM configuration
4#
5
6source "virt/kvm/Kconfig"
7
8menuconfig VIRTUALIZATION
9	bool "Virtualization"
10	depends on HAVE_KVM || X86
11	default y
12	---help---
13	  Say Y here to get to see options for using your Linux host to run other
14	  operating systems inside virtual machines (guests).
15	  This option alone does not add any kernel code.
16
17	  If you say N, all options in this submenu will be skipped and disabled.
18
19if VIRTUALIZATION
20
21config KVM
22	tristate "Kernel-based Virtual Machine (KVM) support"
23	depends on HAVE_KVM
24	depends on HIGH_RES_TIMERS
25	# for TASKSTATS/TASK_DELAY_ACCT:
26	depends on NET && MULTIUSER
27	depends on X86_LOCAL_APIC
28	select PREEMPT_NOTIFIERS
29	select MMU_NOTIFIER
30	select ANON_INODES
31	select HAVE_KVM_IRQCHIP
32	select HAVE_KVM_IRQFD
33	select IRQ_BYPASS_MANAGER
34	select HAVE_KVM_IRQ_BYPASS
35	select HAVE_KVM_IRQ_ROUTING
36	select HAVE_KVM_EVENTFD
37	select KVM_ASYNC_PF
38	select USER_RETURN_NOTIFIER
39	select KVM_MMIO
40	select TASKSTATS
41	select TASK_DELAY_ACCT
42	select PERF_EVENTS
43	select HAVE_KVM_MSI
44	select HAVE_KVM_CPU_RELAX_INTERCEPT
45	select KVM_GENERIC_DIRTYLOG_READ_PROTECT
46	select KVM_VFIO
47	select SRCU
48	---help---
49	  Support hosting fully virtualized guest machines using hardware
50	  virtualization extensions.  You will need a fairly recent
51	  processor equipped with virtualization extensions. You will also
52	  need to select one or more of the processor modules below.
53
54	  This module provides access to the hardware capabilities through
55	  a character device node named /dev/kvm.
56
57	  To compile this as a module, choose M here: the module
58	  will be called kvm.
59
60	  If unsure, say N.
61
62config KVM_INTEL
63	tristate "KVM for Intel processors support"
64	depends on KVM
65	# for perf_guest_get_msrs():
66	depends on CPU_SUP_INTEL
67	---help---
68	  Provides support for KVM on Intel processors equipped with the VT
69	  extensions.
70
71	  To compile this as a module, choose M here: the module
72	  will be called kvm-intel.
73
74config KVM_AMD
75	tristate "KVM for AMD processors support"
76	depends on KVM
77	---help---
78	  Provides support for KVM on AMD processors equipped with the AMD-V
79	  (SVM) extensions.
80
81	  To compile this as a module, choose M here: the module
82	  will be called kvm-amd.
83
84config KVM_AMD_SEV
85	def_bool y
86	bool "AMD Secure Encrypted Virtualization (SEV) support"
87	depends on KVM_AMD && X86_64
88	depends on CRYPTO_DEV_SP_PSP && !(KVM_AMD=y && CRYPTO_DEV_CCP_DD=m)
89	---help---
90	Provides support for launching Encrypted VMs on AMD processors.
91
92config KVM_MMU_AUDIT
93	bool "Audit KVM MMU"
94	depends on KVM && TRACEPOINTS
95	---help---
96	 This option adds a R/W kVM module parameter 'mmu_audit', which allows
97	 auditing of KVM MMU events at runtime.
98
99# OK, it's a little counter-intuitive to do this, but it puts it neatly under
100# the virtualization menu.
101source drivers/vhost/Kconfig
102
103endif # VIRTUALIZATION
104