1# SPDX-License-Identifier: GPL-2.0-only 2# The IOVA library may also be used by non-IOMMU_API users 3config IOMMU_IOVA 4 tristate 5 6# IOMMU_API always gets selected by whoever wants it. 7config IOMMU_API 8 bool 9 10config IOMMUFD_DRIVER 11 bool 12 default n 13 14menuconfig IOMMU_SUPPORT 15 bool "IOMMU Hardware Support" 16 depends on MMU 17 default y 18 help 19 Say Y here if you want to compile device drivers for IO Memory 20 Management Units into the kernel. These devices usually allow to 21 remap DMA requests and/or remap interrupts from other devices on the 22 system. 23 24if IOMMU_SUPPORT 25 26menu "Generic IOMMU Pagetable Support" 27 28# Selected by the actual pagetable implementations 29config IOMMU_IO_PGTABLE 30 bool 31 32config IOMMU_IO_PGTABLE_LPAE 33 bool "ARMv7/v8 Long Descriptor Format" 34 select IOMMU_IO_PGTABLE 35 depends on ARM || ARM64 || COMPILE_TEST 36 depends on !GENERIC_ATOMIC64 # for cmpxchg64() 37 help 38 Enable support for the ARM long descriptor pagetable format. 39 This allocator supports 4K/2M/1G, 16K/32M and 64K/512M page 40 sizes at both stage-1 and stage-2, as well as address spaces 41 up to 48-bits in size. 42 43config IOMMU_IO_PGTABLE_LPAE_SELFTEST 44 bool "LPAE selftests" 45 depends on IOMMU_IO_PGTABLE_LPAE 46 help 47 Enable self-tests for LPAE page table allocator. This performs 48 a series of page-table consistency checks during boot. 49 50 If unsure, say N here. 51 52config IOMMU_IO_PGTABLE_ARMV7S 53 bool "ARMv7/v8 Short Descriptor Format" 54 select IOMMU_IO_PGTABLE 55 depends on ARM || ARM64 || COMPILE_TEST 56 help 57 Enable support for the ARM Short-descriptor pagetable format. 58 This supports 32-bit virtual and physical addresses mapped using 59 2-level tables with 4KB pages/1MB sections, and contiguous entries 60 for 64KB pages/16MB supersections if indicated by the IOMMU driver. 61 62config IOMMU_IO_PGTABLE_ARMV7S_SELFTEST 63 bool "ARMv7s selftests" 64 depends on IOMMU_IO_PGTABLE_ARMV7S 65 help 66 Enable self-tests for ARMv7s page table allocator. This performs 67 a series of page-table consistency checks during boot. 68 69 If unsure, say N here. 70 71config IOMMU_IO_PGTABLE_DART 72 bool "Apple DART Formats" 73 select IOMMU_IO_PGTABLE 74 depends on ARM64 || COMPILE_TEST 75 depends on !GENERIC_ATOMIC64 # for cmpxchg64() 76 help 77 Enable support for the Apple DART pagetable formats. These include 78 the t8020 and t6000/t8110 DART formats used in Apple M1/M2 family 79 SoCs. 80 81 If unsure, say N here. 82 83endmenu 84 85config IOMMU_DEBUGFS 86 bool "Export IOMMU internals in DebugFS" 87 depends on DEBUG_FS 88 help 89 Allows exposure of IOMMU device internals. This option enables 90 the use of debugfs by IOMMU drivers as required. Devices can, 91 at initialization time, cause the IOMMU code to create a top-level 92 debug/iommu directory, and then populate a subdirectory with 93 entries as required. 94 95choice 96 prompt "IOMMU default domain type" 97 depends on IOMMU_API 98 default IOMMU_DEFAULT_DMA_LAZY if X86 || S390 99 default IOMMU_DEFAULT_DMA_STRICT 100 help 101 Choose the type of IOMMU domain used to manage DMA API usage by 102 device drivers. The options here typically represent different 103 levels of tradeoff between robustness/security and performance, 104 depending on the IOMMU driver. Not all IOMMUs support all options. 105 This choice can be overridden at boot via the command line, and for 106 some devices also at runtime via sysfs. 107 108 If unsure, keep the default. 109 110config IOMMU_DEFAULT_DMA_STRICT 111 bool "Translated - Strict" 112 help 113 Trusted devices use translation to restrict their access to only 114 DMA-mapped pages, with strict TLB invalidation on unmap. Equivalent 115 to passing "iommu.passthrough=0 iommu.strict=1" on the command line. 116 117 Untrusted devices always use this mode, with an additional layer of 118 bounce-buffering such that they cannot gain access to any unrelated 119 data within a mapped page. 120 121config IOMMU_DEFAULT_DMA_LAZY 122 bool "Translated - Lazy" 123 help 124 Trusted devices use translation to restrict their access to only 125 DMA-mapped pages, but with "lazy" batched TLB invalidation. This 126 mode allows higher performance with some IOMMUs due to reduced TLB 127 flushing, but at the cost of reduced isolation since devices may be 128 able to access memory for some time after it has been unmapped. 129 Equivalent to passing "iommu.passthrough=0 iommu.strict=0" on the 130 command line. 131 132 If this mode is not supported by the IOMMU driver, the effective 133 runtime default will fall back to IOMMU_DEFAULT_DMA_STRICT. 134 135config IOMMU_DEFAULT_PASSTHROUGH 136 bool "Passthrough" 137 help 138 Trusted devices are identity-mapped, giving them unrestricted access 139 to memory with minimal performance overhead. Equivalent to passing 140 "iommu.passthrough=1" (historically "iommu=pt") on the command line. 141 142 If this mode is not supported by the IOMMU driver, the effective 143 runtime default will fall back to IOMMU_DEFAULT_DMA_STRICT. 144 145endchoice 146 147config OF_IOMMU 148 def_bool y 149 depends on OF && IOMMU_API 150 151# IOMMU-agnostic DMA-mapping layer 152config IOMMU_DMA 153 def_bool ARM64 || X86 || S390 154 select DMA_OPS_HELPERS 155 select IOMMU_API 156 select IOMMU_IOVA 157 select NEED_SG_DMA_LENGTH 158 select NEED_SG_DMA_FLAGS if SWIOTLB 159 160# Shared Virtual Addressing 161config IOMMU_SVA 162 select IOMMU_MM_DATA 163 bool 164 165config IOMMU_IOPF 166 bool 167 168config FSL_PAMU 169 bool "Freescale IOMMU support" 170 depends on PCI 171 depends on PHYS_64BIT 172 depends on PPC_E500MC || (COMPILE_TEST && PPC) 173 select IOMMU_API 174 select GENERIC_ALLOCATOR 175 help 176 Freescale PAMU support. PAMU is the IOMMU present on Freescale QorIQ platforms. 177 PAMU can authorize memory access, remap the memory address, and remap I/O 178 transaction types. 179 180# MSM IOMMU support 181config MSM_IOMMU 182 bool "MSM IOMMU Support" 183 depends on ARM 184 depends on ARCH_QCOM || COMPILE_TEST 185 select IOMMU_API 186 select IOMMU_IO_PGTABLE_ARMV7S 187 help 188 Support for the IOMMUs found on certain Qualcomm SOCs. 189 These IOMMUs allow virtualization of the address space used by most 190 cores within the multimedia subsystem. 191 192 If unsure, say N here. 193 194source "drivers/iommu/amd/Kconfig" 195source "drivers/iommu/intel/Kconfig" 196source "drivers/iommu/iommufd/Kconfig" 197source "drivers/iommu/riscv/Kconfig" 198 199config IRQ_REMAP 200 bool "Support for Interrupt Remapping" 201 depends on X86_64 && X86_IO_APIC && PCI_MSI && ACPI 202 select DMAR_TABLE if INTEL_IOMMU 203 help 204 Supports Interrupt remapping for IO-APIC and MSI devices. 205 To use x2apic mode in the CPU's which support x2APIC enhancements or 206 to support platforms with CPU's having > 8 bit APIC ID, say Y. 207 208# OMAP IOMMU support 209config OMAP_IOMMU 210 bool "OMAP IOMMU Support" 211 depends on ARCH_OMAP2PLUS || COMPILE_TEST 212 select IOMMU_API 213 help 214 The OMAP3 media platform drivers depend on iommu support, 215 if you need them say Y here. 216 217config OMAP_IOMMU_DEBUG 218 bool "Export OMAP IOMMU internals in DebugFS" 219 depends on OMAP_IOMMU && DEBUG_FS 220 help 221 Select this to see extensive information about 222 the internal state of OMAP IOMMU in debugfs. 223 224 Say N unless you know you need this. 225 226config ROCKCHIP_IOMMU 227 bool "Rockchip IOMMU Support" 228 depends on ARCH_ROCKCHIP || COMPILE_TEST 229 select IOMMU_API 230 select ARM_DMA_USE_IOMMU 231 help 232 Support for IOMMUs found on Rockchip rk32xx SOCs. 233 These IOMMUs allow virtualization of the address space used by most 234 cores within the multimedia subsystem. 235 Say Y here if you are using a Rockchip SoC that includes an IOMMU 236 device. 237 238config SUN50I_IOMMU 239 bool "Allwinner H6 IOMMU Support" 240 depends on HAS_DMA 241 depends on ARCH_SUNXI || COMPILE_TEST 242 select ARM_DMA_USE_IOMMU 243 select IOMMU_API 244 help 245 Support for the IOMMU introduced in the Allwinner H6 SoCs. 246 247config TEGRA_IOMMU_SMMU 248 bool "NVIDIA Tegra SMMU Support" 249 depends on ARCH_TEGRA 250 depends on TEGRA_AHB 251 depends on TEGRA_MC 252 select IOMMU_API 253 help 254 This driver supports the IOMMU hardware (SMMU) found on NVIDIA Tegra 255 SoCs (Tegra30 up to Tegra210). 256 257config EXYNOS_IOMMU 258 bool "Exynos IOMMU Support" 259 depends on ARCH_EXYNOS || COMPILE_TEST 260 depends on !CPU_BIG_ENDIAN # revisit driver if we can enable big-endian ptes 261 select IOMMU_API 262 select ARM_DMA_USE_IOMMU 263 help 264 Support for the IOMMU (System MMU) of Samsung Exynos application 265 processor family. This enables H/W multimedia accelerators to see 266 non-linear physical memory chunks as linear memory in their 267 address space. 268 269 If unsure, say N here. 270 271config EXYNOS_IOMMU_DEBUG 272 bool "Debugging log for Exynos IOMMU" 273 depends on EXYNOS_IOMMU 274 help 275 Select this to see the detailed log message that shows what 276 happens in the IOMMU driver. 277 278 Say N unless you need kernel log message for IOMMU debugging. 279 280config IPMMU_VMSA 281 bool "Renesas VMSA-compatible IPMMU" 282 depends on ARCH_RENESAS || COMPILE_TEST 283 depends on ARM || ARM64 || COMPILE_TEST 284 depends on !GENERIC_ATOMIC64 # for IOMMU_IO_PGTABLE_LPAE 285 select IOMMU_API 286 select IOMMU_IO_PGTABLE_LPAE 287 select ARM_DMA_USE_IOMMU 288 help 289 Support for the Renesas VMSA-compatible IPMMU found in the R-Mobile 290 APE6, R-Car Gen{2,3} and RZ/G{1,2} SoCs. 291 292 If unsure, say N. 293 294config SPAPR_TCE_IOMMU 295 bool "sPAPR TCE IOMMU Support" 296 depends on PPC_POWERNV || PPC_PSERIES 297 select IOMMU_API 298 help 299 Enables bits of IOMMU API required by VFIO. The iommu_ops 300 is not implemented as it is not necessary for VFIO. 301 302config APPLE_DART 303 tristate "Apple DART IOMMU Support" 304 depends on ARCH_APPLE || COMPILE_TEST 305 depends on !GENERIC_ATOMIC64 # for IOMMU_IO_PGTABLE_DART 306 select IOMMU_API 307 select IOMMU_IO_PGTABLE_DART 308 default ARCH_APPLE 309 help 310 Support for Apple DART (Device Address Resolution Table) IOMMUs 311 found in Apple ARM SoCs like the M1. 312 This IOMMU is required for most peripherals using DMA to access 313 the main memory. 314 315 Say Y here if you are using an Apple SoC. 316 317# ARM IOMMU support 318config ARM_SMMU 319 tristate "ARM Ltd. System MMU (SMMU) Support" 320 depends on ARM64 || ARM || COMPILE_TEST 321 depends on !GENERIC_ATOMIC64 # for IOMMU_IO_PGTABLE_LPAE 322 select IOMMU_API 323 select IOMMU_IO_PGTABLE_LPAE 324 select ARM_DMA_USE_IOMMU if ARM 325 help 326 Support for implementations of the ARM System MMU architecture 327 versions 1 and 2. 328 329 Say Y here if your SoC includes an IOMMU device implementing 330 the ARM SMMU architecture. 331 332config ARM_SMMU_LEGACY_DT_BINDINGS 333 bool "Support the legacy \"mmu-masters\" devicetree bindings" 334 depends on ARM_SMMU=y && OF 335 help 336 Support for the badly designed and deprecated "mmu-masters" 337 devicetree bindings. This allows some DMA masters to attach 338 to the SMMU but does not provide any support via the DMA API. 339 If you're lucky, you might be able to get VFIO up and running. 340 341 If you say Y here then you'll make me very sad. Instead, say N 342 and move your firmware to the utopian future that was 2016. 343 344config ARM_SMMU_DISABLE_BYPASS_BY_DEFAULT 345 bool "Default to disabling bypass on ARM SMMU v1 and v2" 346 depends on ARM_SMMU 347 default y 348 help 349 Say Y here to (by default) disable bypass streams such that 350 incoming transactions from devices that are not attached to 351 an iommu domain will report an abort back to the device and 352 will not be allowed to pass through the SMMU. 353 354 Any old kernels that existed before this KConfig was 355 introduced would default to _allowing_ bypass (AKA the 356 equivalent of NO for this config). However the default for 357 this option is YES because the old behavior is insecure. 358 359 There are few reasons to allow unmatched stream bypass, and 360 even fewer good ones. If saying YES here breaks your board 361 you should work on fixing your board. This KConfig option 362 is expected to be removed in the future and we'll simply 363 hardcode the bypass disable in the code. 364 365 NOTE: the kernel command line parameter 366 'arm-smmu.disable_bypass' will continue to override this 367 config. 368 369config ARM_SMMU_MMU_500_CPRE_ERRATA 370 bool "Enable errata workaround for CPRE in SMMU reset path" 371 depends on ARM_SMMU 372 default y 373 help 374 Say Y here (by default) to apply workaround to disable 375 MMU-500's next-page prefetcher for sake of 4 known errata. 376 377 Say N here only when it is sure that any errata related to 378 prefetch enablement are not applicable on the platform. 379 Refer silicon-errata.rst for info on errata IDs. 380 381config ARM_SMMU_QCOM 382 def_tristate y 383 depends on ARM_SMMU && ARCH_QCOM 384 select QCOM_SCM 385 help 386 When running on a Qualcomm platform that has the custom variant 387 of the ARM SMMU, this needs to be built into the SMMU driver. 388 389config ARM_SMMU_QCOM_DEBUG 390 bool "ARM SMMU QCOM implementation defined debug support" 391 depends on ARM_SMMU_QCOM=y 392 help 393 Support for implementation specific debug features in ARM SMMU 394 hardware found in QTI platforms. This include support for 395 the Translation Buffer Units (TBU) that can be used to obtain 396 additional information when debugging memory management issues 397 like context faults. 398 399 Say Y here to enable debug for issues such as context faults 400 or TLB sync timeouts which requires implementation defined 401 register dumps. 402 403config ARM_SMMU_V3 404 tristate "ARM Ltd. System MMU Version 3 (SMMUv3) Support" 405 depends on ARM64 406 select IOMMU_API 407 select IOMMU_IO_PGTABLE_LPAE 408 select GENERIC_MSI_IRQ 409 select IOMMUFD_DRIVER if IOMMUFD 410 help 411 Support for implementations of the ARM System MMU architecture 412 version 3 providing translation support to a PCIe root complex. 413 414 Say Y here if your system includes an IOMMU device implementing 415 the ARM SMMUv3 architecture. 416 417if ARM_SMMU_V3 418config ARM_SMMU_V3_SVA 419 bool "Shared Virtual Addressing support for the ARM SMMUv3" 420 select IOMMU_SVA 421 select IOMMU_IOPF 422 select MMU_NOTIFIER 423 help 424 Support for sharing process address spaces with devices using the 425 SMMUv3. 426 427 Say Y here if your system supports SVA extensions such as PCIe PASID 428 and PRI. 429 430config ARM_SMMU_V3_IOMMUFD 431 bool "Enable IOMMUFD features for ARM SMMUv3 (EXPERIMENTAL)" 432 depends on IOMMUFD 433 help 434 Support for IOMMUFD features intended to support virtual machines 435 with accelerated virtual IOMMUs. 436 437 Say Y here if you are doing development and testing on this feature. 438 439config ARM_SMMU_V3_KUNIT_TEST 440 tristate "KUnit tests for arm-smmu-v3 driver" if !KUNIT_ALL_TESTS 441 depends on KUNIT 442 depends on ARM_SMMU_V3_SVA 443 default KUNIT_ALL_TESTS 444 help 445 Enable this option to unit-test arm-smmu-v3 driver functions. 446 447 If unsure, say N. 448 449config TEGRA241_CMDQV 450 bool "NVIDIA Tegra241 CMDQ-V extension support for ARM SMMUv3" 451 depends on ACPI 452 help 453 Support for NVIDIA CMDQ-Virtualization extension for ARM SMMUv3. The 454 CMDQ-V extension is similar to v3.3 ECMDQ for multi command queues 455 support, except with virtualization capabilities. 456 457 Say Y here if your system is NVIDIA Tegra241 (Grace) or it has the same 458 CMDQ-V extension. 459endif 460 461config S390_IOMMU 462 def_bool y if S390 && PCI 463 depends on S390 && PCI 464 select IOMMU_API 465 help 466 Support for the IOMMU API for s390 PCI devices. 467 468config MTK_IOMMU 469 tristate "MediaTek IOMMU Support" 470 depends on ARCH_MEDIATEK || COMPILE_TEST 471 select ARM_DMA_USE_IOMMU 472 select IOMMU_API 473 select IOMMU_IO_PGTABLE_ARMV7S 474 select MEMORY 475 select MTK_SMI 476 help 477 Support for the M4U on certain Mediatek SOCs. M4U is MultiMedia 478 Memory Management Unit. This option enables remapping of DMA memory 479 accesses for the multimedia subsystem. 480 481 If unsure, say N here. 482 483config MTK_IOMMU_V1 484 tristate "MediaTek IOMMU Version 1 (M4U gen1) Support" 485 depends on (ARCH_MEDIATEK && ARM) || COMPILE_TEST 486 select ARM_DMA_USE_IOMMU 487 select IOMMU_API 488 select MEMORY 489 select MTK_SMI 490 help 491 Support for the M4U on certain Mediatek SoCs. M4U generation 1 HW is 492 Multimedia Memory Managememt Unit. This option enables remapping of 493 DMA memory accesses for the multimedia subsystem. 494 495 if unsure, say N here. 496 497config QCOM_IOMMU 498 # Note: iommu drivers cannot (yet?) be built as modules 499 bool "Qualcomm IOMMU Support" 500 depends on ARCH_QCOM || COMPILE_TEST 501 depends on !GENERIC_ATOMIC64 # for IOMMU_IO_PGTABLE_LPAE 502 select QCOM_SCM 503 select IOMMU_API 504 select IOMMU_IO_PGTABLE_LPAE 505 select ARM_DMA_USE_IOMMU 506 help 507 Support for IOMMU on certain Qualcomm SoCs. 508 509config HYPERV_IOMMU 510 bool "Hyper-V IRQ Handling" 511 depends on HYPERV && X86 512 select IOMMU_API 513 default HYPERV 514 help 515 Stub IOMMU driver to handle IRQs to support Hyper-V Linux 516 guest and root partitions. 517 518config VIRTIO_IOMMU 519 tristate "Virtio IOMMU driver" 520 depends on VIRTIO 521 depends on (ARM64 || X86) 522 select IOMMU_API 523 select INTERVAL_TREE 524 select ACPI_VIOT if ACPI 525 help 526 Para-virtualised IOMMU driver with virtio. 527 528 Say Y here if you intend to run this kernel as a guest. 529 530config SPRD_IOMMU 531 tristate "Unisoc IOMMU Support" 532 depends on ARCH_SPRD || COMPILE_TEST 533 select IOMMU_API 534 help 535 Support for IOMMU on Unisoc's SoCs, this IOMMU can be used by 536 Unisoc's multimedia devices, such as display, Image codec(jpeg) 537 and a few signal processors, including VSP(video), GSP(graphic), 538 ISP(image), and CPP(camera pixel processor), etc. 539 540 Say Y here if you want to use the multimedia devices listed above. 541 542endif # IOMMU_SUPPORT 543