From 01297bf9b2b74176cf6dd34bc74db91c06169636 Mon Sep 17 00:00:00 2001 From: Jasper Berton Date: Mon, 4 Nov 2024 15:25:32 +0000 Subject: [PATCH] core: Introduce new Intel, AMD and IBM CPU's Intel: - Sapphire Rapids Server - Secure Sapphire Rapids Server - added all security feautures mentioned in v2 on qemu AMD: - EPYC-Milan - Secure EPYC-Milan - added all security feautures mentioned in v2 on qemu - EPYC-Rome - EPYC-Rome v2 - added all feautures mentioned in v2 on qemu - EPYC-Genoa IBM: - POWER10 Signed-off-by: Jasper Berton --- .../upgrade/pre_upgrade/0000_config.sql | 16 ++++++++++++++++ 1 file changed, 16 insertions(+) diff --git a/packaging/dbscripts/upgrade/pre_upgrade/0000_config.sql b/packaging/dbscripts/upgrade/pre_upgrade/0000_config.sql index 390c00a4c75..865ddf956fc 100644 --- a/packaging/dbscripts/upgrade/pre_upgrade/0000_config.sql +++ b/packaging/dbscripts/upgrade/pre_upgrade/0000_config.sql @@ -601,12 +601,20 @@ select fn_db_add_config_value('ServerCPUList', || '18:Secure Intel Cascadelake Server Family:vmx,model_Cascadelake-Server-noTSX:Cascadelake-Server-noTSX,-mpx:x86_64; ' || '19:Intel Icelake Server Family:vmx,model_Icelake-Server-noTSX:Icelake-Server-noTSX,-mpx:x86_64; ' || '20:Secure Intel Icelake Server Family:vmx,arch-capabilities,rdctl-no,ibrs-all,skip-l1dfl-vmentry,mds-no,pschange-mc-no,model_Icelake-Server-noTSX:Icelake-Server-noTSX,+arch-capabilities,+rdctl-no,+ibrs-all,+skip-l1dfl-vmentry,+mds-no,+pschange-mc-no,-mpx:x86_64; ' + || '21:Intel Sapphire Rapids Server Family:vmx,model_SapphireRapids:SapphireRapids,-hle,-rtm:x86_64; ' + || '22:Secure Intel Sapphire Rapids Server Family:vmx,sbdr-ssdp-no,fbsdp-no,psdp-no,model_SapphireRapids:SapphireRapids,+sbdr-ssdp-no,+fbsdp-no,+psdp-no,-hle,-rtm:x86_64;' || '1:AMD Opteron G4:svm,nx,model_Opteron_G4:Opteron_G4:x86_64; ' || '2:AMD Opteron G5:svm,nx,model_Opteron_G5:Opteron_G5:x86_64; ' || '3:AMD EPYC:svm,nx,model_EPYC:EPYC:x86_64; ' || '4:Secure AMD EPYC:svm,nx,ibpb,ssbd,model_EPYC:EPYC,+ibpb,+virt-ssbd:x86_64; ' + || '5:AMD EPYC-Rome:svm,model_EPYC-Rome:EPYC-Rome:x86_64; ' + || '6:Secure AMD EPYC-Rome:svm,ibrs,amd-ssbd,model_EPYC-Rome:EPYC-Rome,+ibrs,+amd-ssbd:x86_64; ' + || '7:AMD EPYC-Milan:svm,model_EPYC-Milan:EPYC-Milan:x86_64; ' + || '8:AMD EPYC-Milan-v2:svm,vaes,vpclmutqdq,stipb-always-on,amd-psfd,no-nested-data-bp,lfence-always-serializing,null-sel-crl-base,model_EPYC-Milan:EPYC-Milan,+vaes,+pclmulqdq,+stibp-always-on,+amd-psfd,+no-nested-data-bp,+lfence-always-serializing,+null-sel-crl-base:x86_64; ' + || '9:AMD EPYC-Genoa:svm,model_EPYC-Genoa:EPYC-Genoa:x86_64; ' || '1:IBM POWER8:powernv,model_POWER8:POWER8:ppc64; ' || '2:IBM POWER9:powernv,model_POWER9:POWER9:ppc64; ' + || '3:IBM POWER10:powernv,model_POWER10:POWER10:pppc64; ' || '1:IBM z114, z196:sie,model_z196-base:z196-base:s390x; ' || '2:IBM zBC12, zEC12:sie,model_zEC12-base:zEC12-base:s390x; ' || '3:IBM z13s, z13:sie,model_z13-base:z13-base:s390x; ' @@ -1411,12 +1419,20 @@ select fn_db_update_config_value('ServerCPUList', || '18:Secure Intel Cascadelake Server Family:vmx,model_Cascadelake-Server-noTSX:Cascadelake-Server-noTSX,-mpx:x86_64; ' || '19:Intel Icelake Server Family:vmx,model_Icelake-Server-noTSX:Icelake-Server-noTSX,-mpx:x86_64; ' || '20:Secure Intel Icelake Server Family:vmx,arch-capabilities,rdctl-no,ibrs-all,skip-l1dfl-vmentry,mds-no,pschange-mc-no,model_Icelake-Server-noTSX:Icelake-Server-noTSX,+arch-capabilities,+rdctl-no,+ibrs-all,+skip-l1dfl-vmentry,+mds-no,+pschange-mc-no,-mpx:x86_64; ' + || '21:Intel Sapphire Rapids Server Family:vmx,model_SapphireRapids:SapphireRapids,-hle,-rtm:x86_64; ' + || '22:Secure Intel Sapphire Rapids Server Family:vmx,sbdr-ssdp-no,fbsdp-no,psdp-no,model_SapphireRapids:SapphireRapids,+sbdr-ssdp-no,+fbsdp-no,+psdp-no,-hle,-rtm:x86_64;' || '1:AMD Opteron G4:svm,nx,model_Opteron_G4:Opteron_G4:x86_64; ' || '2:AMD Opteron G5:svm,nx,model_Opteron_G5:Opteron_G5:x86_64; ' || '3:AMD EPYC:svm,nx,model_EPYC:EPYC:x86_64; ' || '4:Secure AMD EPYC:svm,nx,ibpb,ssbd,model_EPYC:EPYC,+ibpb,+virt-ssbd:x86_64; ' + || '5:AMD EPYC-Rome:svm,model_EPYC-Rome:EPYC-Rome:x86_64; ' + || '6:Secure AMD EPYC-Rome:svm,ibrs,amd-ssbd,model_EPYC-Rome:EPYC-Rome,+ibrs,+amd-ssbd:x86_64; ' + || '7:AMD EPYC-Milan:svm,model_EPYC-Milan:EPYC-Milan:x86_64; ' + || '8:AMD EPYC-Milan-v2:svm,vaes,vpclmutqdq,stipb-always-on,amd-psfd,no-nested-data-bp,lfence-always-serializing,null-sel-crl-base,model_EPYC-Milan:EPYC-Milan,+vaes,+pclmulqdq,+stibp-always-on,+amd-psfd,+no-nested-data-bp,+lfence-always-serializing,+null-sel-crl-base:x86_64; ' + || '9:AMD EPYC-Genoa:svm,model_EPYC-Genoa:EPYC-Genoa:x86_64; ' || '1:IBM POWER8:powernv,model_POWER8:POWER8:ppc64; ' || '2:IBM POWER9:powernv,model_POWER9:POWER9:ppc64; ' + || '3:IBM POWER10:powernv,model_POWER10:POWER10:pppc64; ' || '1:IBM z114, z196:sie,model_z196-base:z196-base:s390x; ' || '2:IBM zBC12, zEC12:sie,model_zEC12-base:zEC12-base:s390x; ' || '3:IBM z13s, z13:sie,model_z13-base:z13-base:s390x; '