xref: /linux/drivers/iommu/Kconfig (revision ff40b5769a50fab654a70575ff0f49853b799b0e)
1# SPDX-License-Identifier: GPL-2.0-only
2# The IOVA library may also be used by non-IOMMU_API users
3config IOMMU_IOVA
4	tristate
5
6# IOMMU_API always gets selected by whoever wants it.
7config IOMMU_API
8	bool
9
10menuconfig IOMMU_SUPPORT
11	bool "IOMMU Hardware Support"
12	depends on MMU
13	default y
14	help
15	  Say Y here if you want to compile device drivers for IO Memory
16	  Management Units into the kernel. These devices usually allow to
17	  remap DMA requests and/or remap interrupts from other devices on the
18	  system.
19
20if IOMMU_SUPPORT
21
22menu "Generic IOMMU Pagetable Support"
23
24# Selected by the actual pagetable implementations
25config IOMMU_IO_PGTABLE
26	bool
27
28config IOMMU_IO_PGTABLE_LPAE
29	bool "ARMv7/v8 Long Descriptor Format"
30	select IOMMU_IO_PGTABLE
31	depends on ARM || ARM64 || COMPILE_TEST
32	depends on !GENERIC_ATOMIC64	# for cmpxchg64()
33	help
34	  Enable support for the ARM long descriptor pagetable format.
35	  This allocator supports 4K/2M/1G, 16K/32M and 64K/512M page
36	  sizes at both stage-1 and stage-2, as well as address spaces
37	  up to 48-bits in size.
38
39config IOMMU_IO_PGTABLE_LPAE_SELFTEST
40	bool "LPAE selftests"
41	depends on IOMMU_IO_PGTABLE_LPAE
42	help
43	  Enable self-tests for LPAE page table allocator. This performs
44	  a series of page-table consistency checks during boot.
45
46	  If unsure, say N here.
47
48config IOMMU_IO_PGTABLE_ARMV7S
49	bool "ARMv7/v8 Short Descriptor Format"
50	select IOMMU_IO_PGTABLE
51	depends on ARM || ARM64 || COMPILE_TEST
52	help
53	  Enable support for the ARM Short-descriptor pagetable format.
54	  This supports 32-bit virtual and physical addresses mapped using
55	  2-level tables with 4KB pages/1MB sections, and contiguous entries
56	  for 64KB pages/16MB supersections if indicated by the IOMMU driver.
57
58config IOMMU_IO_PGTABLE_ARMV7S_SELFTEST
59	bool "ARMv7s selftests"
60	depends on IOMMU_IO_PGTABLE_ARMV7S
61	help
62	  Enable self-tests for ARMv7s page table allocator. This performs
63	  a series of page-table consistency checks during boot.
64
65	  If unsure, say N here.
66
67config IOMMU_IO_PGTABLE_DART
68	bool "Apple DART Formats"
69	select IOMMU_IO_PGTABLE
70	depends on ARM64 || COMPILE_TEST
71	depends on !GENERIC_ATOMIC64	# for cmpxchg64()
72	help
73	  Enable support for the Apple DART pagetable formats. These include
74	  the t8020 and t6000/t8110 DART formats used in Apple M1/M2 family
75	  SoCs.
76
77	  If unsure, say N here.
78
79endmenu
80
81config IOMMU_DEBUGFS
82	bool "Export IOMMU internals in DebugFS"
83	depends on DEBUG_FS
84	help
85	  Allows exposure of IOMMU device internals. This option enables
86	  the use of debugfs by IOMMU drivers as required. Devices can,
87	  at initialization time, cause the IOMMU code to create a top-level
88	  debug/iommu directory, and then populate a subdirectory with
89	  entries as required.
90
91choice
92	prompt "IOMMU default domain type"
93	depends on IOMMU_API
94	default IOMMU_DEFAULT_DMA_LAZY if X86 || IA64
95	default IOMMU_DEFAULT_DMA_STRICT
96	help
97	  Choose the type of IOMMU domain used to manage DMA API usage by
98	  device drivers. The options here typically represent different
99	  levels of tradeoff between robustness/security and performance,
100	  depending on the IOMMU driver. Not all IOMMUs support all options.
101	  This choice can be overridden at boot via the command line, and for
102	  some devices also at runtime via sysfs.
103
104	  If unsure, keep the default.
105
106config IOMMU_DEFAULT_DMA_STRICT
107	bool "Translated - Strict"
108	help
109	  Trusted devices use translation to restrict their access to only
110	  DMA-mapped pages, with strict TLB invalidation on unmap. Equivalent
111	  to passing "iommu.passthrough=0 iommu.strict=1" on the command line.
112
113	  Untrusted devices always use this mode, with an additional layer of
114	  bounce-buffering such that they cannot gain access to any unrelated
115	  data within a mapped page.
116
117config IOMMU_DEFAULT_DMA_LAZY
118	bool "Translated - Lazy"
119	help
120	  Trusted devices use translation to restrict their access to only
121	  DMA-mapped pages, but with "lazy" batched TLB invalidation. This
122	  mode allows higher performance with some IOMMUs due to reduced TLB
123	  flushing, but at the cost of reduced isolation since devices may be
124	  able to access memory for some time after it has been unmapped.
125	  Equivalent to passing "iommu.passthrough=0 iommu.strict=0" on the
126	  command line.
127
128	  If this mode is not supported by the IOMMU driver, the effective
129	  runtime default will fall back to IOMMU_DEFAULT_DMA_STRICT.
130
131config IOMMU_DEFAULT_PASSTHROUGH
132	bool "Passthrough"
133	help
134	  Trusted devices are identity-mapped, giving them unrestricted access
135	  to memory with minimal performance overhead. Equivalent to passing
136	  "iommu.passthrough=1" (historically "iommu=pt") on the command line.
137
138	  If this mode is not supported by the IOMMU driver, the effective
139	  runtime default will fall back to IOMMU_DEFAULT_DMA_STRICT.
140
141endchoice
142
143config OF_IOMMU
144	def_bool y
145	depends on OF && IOMMU_API
146
147# IOMMU-agnostic DMA-mapping layer
148config IOMMU_DMA
149	def_bool ARM64 || IA64 || X86
150	select DMA_OPS
151	select IOMMU_API
152	select IOMMU_IOVA
153	select IRQ_MSI_IOMMU
154	select NEED_SG_DMA_LENGTH
155
156# Shared Virtual Addressing
157config IOMMU_SVA
158	bool
159
160config FSL_PAMU
161	bool "Freescale IOMMU support"
162	depends on PCI
163	depends on PHYS_64BIT
164	depends on PPC_E500MC || (COMPILE_TEST && PPC)
165	select IOMMU_API
166	select GENERIC_ALLOCATOR
167	help
168	  Freescale PAMU support. PAMU is the IOMMU present on Freescale QorIQ platforms.
169	  PAMU can authorize memory access, remap the memory address, and remap I/O
170	  transaction types.
171
172# MSM IOMMU support
173config MSM_IOMMU
174	bool "MSM IOMMU Support"
175	depends on ARM
176	depends on ARCH_MSM8X60 || ARCH_MSM8960 || COMPILE_TEST
177	select IOMMU_API
178	select IOMMU_IO_PGTABLE_ARMV7S
179	help
180	  Support for the IOMMUs found on certain Qualcomm SOCs.
181	  These IOMMUs allow virtualization of the address space used by most
182	  cores within the multimedia subsystem.
183
184	  If unsure, say N here.
185
186source "drivers/iommu/amd/Kconfig"
187source "drivers/iommu/intel/Kconfig"
188source "drivers/iommu/iommufd/Kconfig"
189
190config IRQ_REMAP
191	bool "Support for Interrupt Remapping"
192	depends on X86_64 && X86_IO_APIC && PCI_MSI && ACPI
193	select DMAR_TABLE
194	help
195	  Supports Interrupt remapping for IO-APIC and MSI devices.
196	  To use x2apic mode in the CPU's which support x2APIC enhancements or
197	  to support platforms with CPU's having > 8 bit APIC ID, say Y.
198
199# OMAP IOMMU support
200config OMAP_IOMMU
201	bool "OMAP IOMMU Support"
202	depends on ARCH_OMAP2PLUS || COMPILE_TEST
203	select IOMMU_API
204	help
205	  The OMAP3 media platform drivers depend on iommu support,
206	  if you need them say Y here.
207
208config OMAP_IOMMU_DEBUG
209	bool "Export OMAP IOMMU internals in DebugFS"
210	depends on OMAP_IOMMU && DEBUG_FS
211	help
212	  Select this to see extensive information about
213	  the internal state of OMAP IOMMU in debugfs.
214
215	  Say N unless you know you need this.
216
217config ROCKCHIP_IOMMU
218	bool "Rockchip IOMMU Support"
219	depends on ARCH_ROCKCHIP || COMPILE_TEST
220	select IOMMU_API
221	select ARM_DMA_USE_IOMMU
222	help
223	  Support for IOMMUs found on Rockchip rk32xx SOCs.
224	  These IOMMUs allow virtualization of the address space used by most
225	  cores within the multimedia subsystem.
226	  Say Y here if you are using a Rockchip SoC that includes an IOMMU
227	  device.
228
229config SUN50I_IOMMU
230	bool "Allwinner H6 IOMMU Support"
231	depends on HAS_DMA
232	depends on ARCH_SUNXI || COMPILE_TEST
233	select ARM_DMA_USE_IOMMU
234	select IOMMU_API
235	help
236	  Support for the IOMMU introduced in the Allwinner H6 SoCs.
237
238config TEGRA_IOMMU_GART
239	bool "Tegra GART IOMMU Support"
240	depends on ARCH_TEGRA_2x_SOC
241	depends on TEGRA_MC
242	select IOMMU_API
243	help
244	  Enables support for remapping discontiguous physical memory
245	  shared with the operating system into contiguous I/O virtual
246	  space through the GART (Graphics Address Relocation Table)
247	  hardware included on Tegra SoCs.
248
249config TEGRA_IOMMU_SMMU
250	bool "NVIDIA Tegra SMMU Support"
251	depends on ARCH_TEGRA
252	depends on TEGRA_AHB
253	depends on TEGRA_MC
254	select IOMMU_API
255	help
256	  This driver supports the IOMMU hardware (SMMU) found on NVIDIA Tegra
257	  SoCs (Tegra30 up to Tegra210).
258
259config EXYNOS_IOMMU
260	bool "Exynos IOMMU Support"
261	depends on ARCH_EXYNOS || COMPILE_TEST
262	depends on !CPU_BIG_ENDIAN # revisit driver if we can enable big-endian ptes
263	select IOMMU_API
264	select ARM_DMA_USE_IOMMU
265	help
266	  Support for the IOMMU (System MMU) of Samsung Exynos application
267	  processor family. This enables H/W multimedia accelerators to see
268	  non-linear physical memory chunks as linear memory in their
269	  address space.
270
271	  If unsure, say N here.
272
273config EXYNOS_IOMMU_DEBUG
274	bool "Debugging log for Exynos IOMMU"
275	depends on EXYNOS_IOMMU
276	help
277	  Select this to see the detailed log message that shows what
278	  happens in the IOMMU driver.
279
280	  Say N unless you need kernel log message for IOMMU debugging.
281
282config IPMMU_VMSA
283	bool "Renesas VMSA-compatible IPMMU"
284	depends on ARCH_RENESAS || COMPILE_TEST
285	depends on ARM || ARM64 || COMPILE_TEST
286	depends on !GENERIC_ATOMIC64	# for IOMMU_IO_PGTABLE_LPAE
287	select IOMMU_API
288	select IOMMU_IO_PGTABLE_LPAE
289	select ARM_DMA_USE_IOMMU
290	help
291	  Support for the Renesas VMSA-compatible IPMMU found in the R-Mobile
292	  APE6, R-Car Gen{2,3} and RZ/G{1,2} SoCs.
293
294	  If unsure, say N.
295
296config SPAPR_TCE_IOMMU
297	bool "sPAPR TCE IOMMU Support"
298	depends on PPC_POWERNV || PPC_PSERIES
299	select IOMMU_API
300	help
301	  Enables bits of IOMMU API required by VFIO. The iommu_ops
302	  is not implemented as it is not necessary for VFIO.
303
304config APPLE_DART
305	tristate "Apple DART IOMMU Support"
306	depends on ARCH_APPLE || COMPILE_TEST
307	depends on !GENERIC_ATOMIC64	# for IOMMU_IO_PGTABLE_DART
308	select IOMMU_API
309	select IOMMU_IO_PGTABLE_DART
310	default ARCH_APPLE
311	help
312	  Support for Apple DART (Device Address Resolution Table) IOMMUs
313	  found in Apple ARM SoCs like the M1.
314	  This IOMMU is required for most peripherals using DMA to access
315	  the main memory.
316
317	  Say Y here if you are using an Apple SoC.
318
319# ARM IOMMU support
320config ARM_SMMU
321	tristate "ARM Ltd. System MMU (SMMU) Support"
322	depends on ARM64 || ARM || COMPILE_TEST
323	depends on !GENERIC_ATOMIC64	# for IOMMU_IO_PGTABLE_LPAE
324	select IOMMU_API
325	select IOMMU_IO_PGTABLE_LPAE
326	select ARM_DMA_USE_IOMMU if ARM
327	help
328	  Support for implementations of the ARM System MMU architecture
329	  versions 1 and 2.
330
331	  Say Y here if your SoC includes an IOMMU device implementing
332	  the ARM SMMU architecture.
333
334config ARM_SMMU_LEGACY_DT_BINDINGS
335	bool "Support the legacy \"mmu-masters\" devicetree bindings"
336	depends on ARM_SMMU=y && OF
337	help
338	  Support for the badly designed and deprecated "mmu-masters"
339	  devicetree bindings. This allows some DMA masters to attach
340	  to the SMMU but does not provide any support via the DMA API.
341	  If you're lucky, you might be able to get VFIO up and running.
342
343	  If you say Y here then you'll make me very sad. Instead, say N
344	  and move your firmware to the utopian future that was 2016.
345
346config ARM_SMMU_DISABLE_BYPASS_BY_DEFAULT
347	bool "Default to disabling bypass on ARM SMMU v1 and v2"
348	depends on ARM_SMMU
349	default y
350	help
351	  Say Y here to (by default) disable bypass streams such that
352	  incoming transactions from devices that are not attached to
353	  an iommu domain will report an abort back to the device and
354	  will not be allowed to pass through the SMMU.
355
356	  Any old kernels that existed before this KConfig was
357	  introduced would default to _allowing_ bypass (AKA the
358	  equivalent of NO for this config).  However the default for
359	  this option is YES because the old behavior is insecure.
360
361	  There are few reasons to allow unmatched stream bypass, and
362	  even fewer good ones.  If saying YES here breaks your board
363	  you should work on fixing your board.  This KConfig option
364	  is expected to be removed in the future and we'll simply
365	  hardcode the bypass disable in the code.
366
367	  NOTE: the kernel command line parameter
368	  'arm-smmu.disable_bypass' will continue to override this
369	  config.
370
371config ARM_SMMU_QCOM
372	def_tristate y
373	depends on ARM_SMMU && ARCH_QCOM
374	select QCOM_SCM
375	help
376	  When running on a Qualcomm platform that has the custom variant
377	  of the ARM SMMU, this needs to be built into the SMMU driver.
378
379config ARM_SMMU_QCOM_DEBUG
380	bool "ARM SMMU QCOM implementation defined debug support"
381	depends on ARM_SMMU_QCOM
382	help
383	  Support for implementation specific debug features in ARM SMMU
384	  hardware found in QTI platforms.
385
386	  Say Y here to enable debug for issues such as TLB sync timeouts
387	  which requires implementation defined register dumps.
388
389config ARM_SMMU_V3
390	tristate "ARM Ltd. System MMU Version 3 (SMMUv3) Support"
391	depends on ARM64
392	select IOMMU_API
393	select IOMMU_IO_PGTABLE_LPAE
394	select GENERIC_MSI_IRQ
395	help
396	  Support for implementations of the ARM System MMU architecture
397	  version 3 providing translation support to a PCIe root complex.
398
399	  Say Y here if your system includes an IOMMU device implementing
400	  the ARM SMMUv3 architecture.
401
402config ARM_SMMU_V3_SVA
403	bool "Shared Virtual Addressing support for the ARM SMMUv3"
404	depends on ARM_SMMU_V3
405	select IOMMU_SVA
406	select MMU_NOTIFIER
407	help
408	  Support for sharing process address spaces with devices using the
409	  SMMUv3.
410
411	  Say Y here if your system supports SVA extensions such as PCIe PASID
412	  and PRI.
413
414config S390_IOMMU
415	def_bool y if S390 && PCI
416	depends on S390 && PCI
417	select IOMMU_API
418	help
419	  Support for the IOMMU API for s390 PCI devices.
420
421config MTK_IOMMU
422	tristate "MediaTek IOMMU Support"
423	depends on ARCH_MEDIATEK || COMPILE_TEST
424	select ARM_DMA_USE_IOMMU
425	select IOMMU_API
426	select IOMMU_IO_PGTABLE_ARMV7S
427	select MEMORY
428	select MTK_SMI
429	help
430	  Support for the M4U on certain Mediatek SOCs. M4U is MultiMedia
431	  Memory Management Unit. This option enables remapping of DMA memory
432	  accesses for the multimedia subsystem.
433
434	  If unsure, say N here.
435
436config MTK_IOMMU_V1
437	tristate "MediaTek IOMMU Version 1 (M4U gen1) Support"
438	depends on ARM
439	depends on ARCH_MEDIATEK || COMPILE_TEST
440	select ARM_DMA_USE_IOMMU
441	select IOMMU_API
442	select MEMORY
443	select MTK_SMI
444	help
445	  Support for the M4U on certain Mediatek SoCs. M4U generation 1 HW is
446	  Multimedia Memory Managememt Unit. This option enables remapping of
447	  DMA memory accesses for the multimedia subsystem.
448
449	  if unsure, say N here.
450
451config QCOM_IOMMU
452	# Note: iommu drivers cannot (yet?) be built as modules
453	bool "Qualcomm IOMMU Support"
454	depends on ARCH_QCOM || COMPILE_TEST
455	depends on !GENERIC_ATOMIC64	# for IOMMU_IO_PGTABLE_LPAE
456	select QCOM_SCM
457	select IOMMU_API
458	select IOMMU_IO_PGTABLE_LPAE
459	select ARM_DMA_USE_IOMMU
460	help
461	  Support for IOMMU on certain Qualcomm SoCs.
462
463config HYPERV_IOMMU
464	bool "Hyper-V IRQ Handling"
465	depends on HYPERV && X86
466	select IOMMU_API
467	default HYPERV
468	help
469	  Stub IOMMU driver to handle IRQs to support Hyper-V Linux
470	  guest and root partitions.
471
472config VIRTIO_IOMMU
473	tristate "Virtio IOMMU driver"
474	depends on VIRTIO
475	depends on (ARM64 || X86)
476	select IOMMU_API
477	select INTERVAL_TREE
478	select ACPI_VIOT if ACPI
479	help
480	  Para-virtualised IOMMU driver with virtio.
481
482	  Say Y here if you intend to run this kernel as a guest.
483
484config SPRD_IOMMU
485	tristate "Unisoc IOMMU Support"
486	depends on ARCH_SPRD || COMPILE_TEST
487	select IOMMU_API
488	help
489	  Support for IOMMU on Unisoc's SoCs, this IOMMU can be used by
490	  Unisoc's multimedia devices, such as display, Image codec(jpeg)
491	  and a few signal processors, including VSP(video), GSP(graphic),
492	  ISP(image), and CPP(camera pixel processor), etc.
493
494	  Say Y here if you want to use the multimedia devices listed above.
495
496endif # IOMMU_SUPPORT
497