diff mbox series

[v7,2/2] hw/arm: Add arm SBSA reference machine, devices part

Message ID 1555560291-3415-3-git-send-email-hongbo.zhang@linaro.org
State New
Headers show
Series Add Arm SBSA Reference Machine | expand

Commit Message

Hongbo Zhang April 18, 2019, 4:04 a.m. UTC
Following the previous patch, this patch adds peripheral devices to the
newly introduced SBSA-ref machine.

Signed-off-by: Hongbo Zhang <hongbo.zhang@linaro.org>

---
 hw/arm/sbsa-ref.c | 451 ++++++++++++++++++++++++++++++++++++++++++++++++++++++
 1 file changed, 451 insertions(+)

-- 
2.7.4

Comments

Peter Maydell April 30, 2019, 2:16 p.m. UTC | #1
On Thu, 18 Apr 2019 at 05:05, Hongbo Zhang <hongbo.zhang@linaro.org> wrote:
>

> Following the previous patch, this patch adds peripheral devices to the

> newly introduced SBSA-ref machine.

>

> Signed-off-by: Hongbo Zhang <hongbo.zhang@linaro.org>

> ---

>  hw/arm/sbsa-ref.c | 451 ++++++++++++++++++++++++++++++++++++++++++++++++++++++

>  1 file changed, 451 insertions(+)


Some fairly minor comments on this one.

> +static void create_flash(const SBSAMachineState *vms,

> +                         MemoryRegion *sysmem,

> +                         MemoryRegion *secure_sysmem)

> +{

> +    /*

> +     * Create one secure and nonsecure flash devices to fill SBSA_FLASH

> +     * space in the memmap, file passed via -bios goes in the first one.

> +     */

> +    hwaddr flashsize = vms->memmap[SBSA_FLASH].size / 2;

> +    hwaddr flashbase = vms->memmap[SBSA_FLASH].base;

> +

> +    create_one_flash("sbsa-ref.flash0", flashbase, flashsize,

> +                     bios_name, secure_sysmem);

> +    create_one_flash("sbsa-ref.flash1", flashbase + flashsize, flashsize,

> +                     NULL, sysmem);

> +}


I think Markus might have an opinion on the best way to create
flash devices on a new board model. Is "just create two flash
devices the way the virt board does" the right thing?

> +static void create_ahci(const SBSAMachineState *vms, qemu_irq *pic)

> +{

> +    hwaddr base = vms->memmap[SBSA_AHCI].base;

> +    int irq = vms->irqmap[SBSA_AHCI];

> +    DeviceState *dev;

> +    DriveInfo *hd[NUM_SATA_PORTS];

> +    SysbusAHCIState *sysahci;

> +    AHCIState *ahci;

> +    int i;

> +

> +    dev = qdev_create(NULL, "sysbus-ahci");

> +    qdev_prop_set_uint32(dev, "num-ports", NUM_SATA_PORTS);

> +    qdev_init_nofail(dev);

> +    sysbus_mmio_map(SYS_BUS_DEVICE(dev), 0, base);

> +    sysbus_connect_irq(SYS_BUS_DEVICE(dev), 0, pic[irq]);

> +

> +    sysahci = SYSBUS_AHCI(dev);

> +    ahci = &sysahci->ahci;

> +    ide_drive_get(hd, ARRAY_SIZE(hd));

> +    for (i = 0; i < ahci->ports; i++) {

> +        if (hd[i] == NULL) {

> +            continue;

> +        }

> +        ide_create_drive(&ahci->dev[i].port, 0, hd[i]);

> +    }

> +}

> +

> +static void create_ehci(const SBSAMachineState *vms, qemu_irq *pic)

> +{

> +    hwaddr base = vms->memmap[SBSA_EHCI].base;

> +    int irq = vms->irqmap[SBSA_EHCI];

> +    USBBus *usb_bus;

> +

> +    sysbus_create_simple("platform-ehci-usb", base, pic[irq]);

> +

> +    usb_bus = usb_bus_find(-1);

> +    usb_create_simple(usb_bus, "usb-kbd");

> +    usb_create_simple(usb_bus, "usb-mouse");


I don't think we should automatically create the usb keyboard
and mouse devices. The user can do it on the command line if they
want them.

>  static void sbsa_ref_init(MachineState *machine)

>  {

>      SBSAMachineState *vms = SBSA_MACHINE(machine);

> @@ -125,6 +552,7 @@ static void sbsa_ref_init(MachineState *machine)

>      bool firmware_loaded = bios_name || drive_get(IF_PFLASH, 0, 0);

>      const CPUArchIdList *possible_cpus;

>      int n, sbsa_max_cpus;

> +    qemu_irq pic[NUM_IRQS];

>

>      if (strcmp(machine->cpu_type, ARM_CPU_TYPE_NAME("cortex-a57"))) {

>          error_report("sbsa-ref: CPU type other than the built-in "

> @@ -209,11 +637,34 @@ static void sbsa_ref_init(MachineState *machine)

>                                           machine->ram_size);

>      memory_region_add_subregion(sysmem, vms->memmap[SBSA_MEM].base, ram);

>

> +    create_fdt(vms);

> +

> +    create_flash(vms, sysmem, secure_sysmem ? secure_sysmem : sysmem);

> +

> +    create_secure_ram(vms, secure_sysmem);

> +

> +    create_gic(vms, pic);

> +

> +    create_uart(vms, pic, SBSA_UART, sysmem, serial_hd(0));

> +    create_uart(vms, pic, SBSA_SECURE_UART, secure_sysmem, serial_hd(1));

> +    create_uart(vms, pic, SBSA_SECURE_UART_MM, secure_sysmem, serial_hd(2));


What's the third UART for (ie what is the name intended to mean)?
Should we have more than one non-secure UART?

thanks
-- PMM
Hongbo Zhang May 8, 2019, 11:30 a.m. UTC | #2
On Tue, 30 Apr 2019 at 22:17, Peter Maydell <peter.maydell@linaro.org> wrote:
>

> On Thu, 18 Apr 2019 at 05:05, Hongbo Zhang <hongbo.zhang@linaro.org> wrote:

> >

> > Following the previous patch, this patch adds peripheral devices to the

> > newly introduced SBSA-ref machine.

> >

> > Signed-off-by: Hongbo Zhang <hongbo.zhang@linaro.org>

> > ---

> >  hw/arm/sbsa-ref.c | 451 ++++++++++++++++++++++++++++++++++++++++++++++++++++++

> >  1 file changed, 451 insertions(+)

>

> Some fairly minor comments on this one.

>

> > +static void create_flash(const SBSAMachineState *vms,

> > +                         MemoryRegion *sysmem,

> > +                         MemoryRegion *secure_sysmem)

> > +{

> > +    /*

> > +     * Create one secure and nonsecure flash devices to fill SBSA_FLASH

> > +     * space in the memmap, file passed via -bios goes in the first one.

> > +     */

> > +    hwaddr flashsize = vms->memmap[SBSA_FLASH].size / 2;

> > +    hwaddr flashbase = vms->memmap[SBSA_FLASH].base;

> > +

> > +    create_one_flash("sbsa-ref.flash0", flashbase, flashsize,

> > +                     bios_name, secure_sysmem);

> > +    create_one_flash("sbsa-ref.flash1", flashbase + flashsize, flashsize,

> > +                     NULL, sysmem);

> > +}

>

> I think Markus might have an opinion on the best way to create

> flash devices on a new board model. Is "just create two flash

> devices the way the virt board does" the right thing?

>

For the firmware part, we are using two flashes, one secure and
another non-secure.

> > +static void create_ahci(const SBSAMachineState *vms, qemu_irq *pic)

> > +{

> > +    hwaddr base = vms->memmap[SBSA_AHCI].base;

> > +    int irq = vms->irqmap[SBSA_AHCI];

> > +    DeviceState *dev;

> > +    DriveInfo *hd[NUM_SATA_PORTS];

> > +    SysbusAHCIState *sysahci;

> > +    AHCIState *ahci;

> > +    int i;

> > +

> > +    dev = qdev_create(NULL, "sysbus-ahci");

> > +    qdev_prop_set_uint32(dev, "num-ports", NUM_SATA_PORTS);

> > +    qdev_init_nofail(dev);

> > +    sysbus_mmio_map(SYS_BUS_DEVICE(dev), 0, base);

> > +    sysbus_connect_irq(SYS_BUS_DEVICE(dev), 0, pic[irq]);

> > +

> > +    sysahci = SYSBUS_AHCI(dev);

> > +    ahci = &sysahci->ahci;

> > +    ide_drive_get(hd, ARRAY_SIZE(hd));

> > +    for (i = 0; i < ahci->ports; i++) {

> > +        if (hd[i] == NULL) {

> > +            continue;

> > +        }

> > +        ide_create_drive(&ahci->dev[i].port, 0, hd[i]);

> > +    }

> > +}

> > +

> > +static void create_ehci(const SBSAMachineState *vms, qemu_irq *pic)

> > +{

> > +    hwaddr base = vms->memmap[SBSA_EHCI].base;

> > +    int irq = vms->irqmap[SBSA_EHCI];

> > +    USBBus *usb_bus;

> > +

> > +    sysbus_create_simple("platform-ehci-usb", base, pic[irq]);

> > +

> > +    usb_bus = usb_bus_find(-1);

> > +    usb_create_simple(usb_bus, "usb-kbd");

> > +    usb_create_simple(usb_bus, "usb-mouse");

>

> I don't think we should automatically create the usb keyboard

> and mouse devices. The user can do it on the command line if they

> want them.

>

OK.

> >  static void sbsa_ref_init(MachineState *machine)

> >  {

> >      SBSAMachineState *vms = SBSA_MACHINE(machine);

> > @@ -125,6 +552,7 @@ static void sbsa_ref_init(MachineState *machine)

> >      bool firmware_loaded = bios_name || drive_get(IF_PFLASH, 0, 0);

> >      const CPUArchIdList *possible_cpus;

> >      int n, sbsa_max_cpus;

> > +    qemu_irq pic[NUM_IRQS];

> >

> >      if (strcmp(machine->cpu_type, ARM_CPU_TYPE_NAME("cortex-a57"))) {

> >          error_report("sbsa-ref: CPU type other than the built-in "

> > @@ -209,11 +637,34 @@ static void sbsa_ref_init(MachineState *machine)

> >                                           machine->ram_size);

> >      memory_region_add_subregion(sysmem, vms->memmap[SBSA_MEM].base, ram);

> >

> > +    create_fdt(vms);

> > +

> > +    create_flash(vms, sysmem, secure_sysmem ? secure_sysmem : sysmem);

> > +

> > +    create_secure_ram(vms, secure_sysmem);

> > +

> > +    create_gic(vms, pic);

> > +

> > +    create_uart(vms, pic, SBSA_UART, sysmem, serial_hd(0));

> > +    create_uart(vms, pic, SBSA_SECURE_UART, secure_sysmem, serial_hd(1));

> > +    create_uart(vms, pic, SBSA_SECURE_UART_MM, secure_sysmem, serial_hd(2));

>

> What's the third UART for (ie what is the name intended to mean)?

> Should we have more than one non-secure UART?

>

Yes, this is called " Standalone Management Mode", I will add comment
for it, this is needed by server RAS feature.

> thanks

> -- PMM
Markus Armbruster May 8, 2019, 1:59 p.m. UTC | #3
Peter Maydell <peter.maydell@linaro.org> writes:

> On Thu, 18 Apr 2019 at 05:05, Hongbo Zhang <hongbo.zhang@linaro.org> wrote:

>>

>> Following the previous patch, this patch adds peripheral devices to the

>> newly introduced SBSA-ref machine.

>>

>> Signed-off-by: Hongbo Zhang <hongbo.zhang@linaro.org>

>> ---

>>  hw/arm/sbsa-ref.c | 451 ++++++++++++++++++++++++++++++++++++++++++++++++++++++

>>  1 file changed, 451 insertions(+)

>

> Some fairly minor comments on this one.

>

>> +static void create_flash(const SBSAMachineState *vms,

>> +                         MemoryRegion *sysmem,

>> +                         MemoryRegion *secure_sysmem)

>> +{

>> +    /*

>> +     * Create one secure and nonsecure flash devices to fill SBSA_FLASH

>> +     * space in the memmap, file passed via -bios goes in the first one.

>> +     */

>> +    hwaddr flashsize = vms->memmap[SBSA_FLASH].size / 2;

>> +    hwaddr flashbase = vms->memmap[SBSA_FLASH].base;

>> +

>> +    create_one_flash("sbsa-ref.flash0", flashbase, flashsize,

>> +                     bios_name, secure_sysmem);

>> +    create_one_flash("sbsa-ref.flash1", flashbase + flashsize, flashsize,

>> +                     NULL, sysmem);

>> +}

>

> I think Markus might have an opinion on the best way to create

> flash devices on a new board model. Is "just create two flash

> devices the way the virt board does" the right thing?


Short answer: create flash devices the way the ARM virt board does now,
after commit e0561e60f17, merged into master today.  Possibly less
backward compatibility stuff you don't need.  As is, your patch creates
them the way the ARM virt board did before commit e0561e60f17.  Please
consider updating.

Longer answer:

The old way to configure block backends is -drive.

The newer -blockdev is more flexible.  Libvirt is in the process of
transitioning from -drive to -blockdev entirely.  Other users with
similar needs for flexibility may do the same.  We hope to deprecate
-drive eventually.

The traditional way to configure onboard flash is -drive if=pflash.
Works, but we need a way to configure with -blockdev for full
flexibility, and to support libvirt ditching -drive entirely.

I recently improved the i386 PC machine types (commit ebc29e1beab) and
the ARM virt machine types (commit e0561e60f17) to support flash
configuration with -blockdev.

I recommend new boards support flash configuration with -blockdev from
the start.

Questions?
Radoslaw Biernacki May 8, 2019, 5:48 p.m. UTC | #4
On Wed, 8 May 2019 at 13:30, Hongbo Zhang <hongbo.zhang@linaro.org> wrote:

> On Tue, 30 Apr 2019 at 22:17, Peter Maydell <peter.maydell@linaro.org>

> wrote:

> >

> > On Thu, 18 Apr 2019 at 05:05, Hongbo Zhang <hongbo.zhang@linaro.org>

> wrote:

> > >

> > > Following the previous patch, this patch adds peripheral devices to the

> > > newly introduced SBSA-ref machine.

> > >

> > > Signed-off-by: Hongbo Zhang <hongbo.zhang@linaro.org>

> > > ---

> > >  hw/arm/sbsa-ref.c | 451

> ++++++++++++++++++++++++++++++++++++++++++++++++++++++

> > >  1 file changed, 451 insertions(+)

> >

> > Some fairly minor comments on this one.

> >

> > > +static void create_flash(const SBSAMachineState *vms,

> > > +                         MemoryRegion *sysmem,

> > > +                         MemoryRegion *secure_sysmem)

> > > +{

> > > +    /*

> > > +     * Create one secure and nonsecure flash devices to fill

> SBSA_FLASH

> > > +     * space in the memmap, file passed via -bios goes in the first

> one.

> > > +     */

> > > +    hwaddr flashsize = vms->memmap[SBSA_FLASH].size / 2;

> > > +    hwaddr flashbase = vms->memmap[SBSA_FLASH].base;

> > > +

> > > +    create_one_flash("sbsa-ref.flash0", flashbase, flashsize,

> > > +                     bios_name, secure_sysmem);

> > > +    create_one_flash("sbsa-ref.flash1", flashbase + flashsize,

> flashsize,

> > > +                     NULL, sysmem);

> > > +}

> >

> > I think Markus might have an opinion on the best way to create

> > flash devices on a new board model. Is "just create two flash

> > devices the way the virt board does" the right thing?

> >

> For the firmware part, we are using two flashes, one secure and

> another non-secure.

>

> > > +static void create_ahci(const SBSAMachineState *vms, qemu_irq *pic)

> > > +{

> > > +    hwaddr base = vms->memmap[SBSA_AHCI].base;

> > > +    int irq = vms->irqmap[SBSA_AHCI];

> > > +    DeviceState *dev;

> > > +    DriveInfo *hd[NUM_SATA_PORTS];

> > > +    SysbusAHCIState *sysahci;

> > > +    AHCIState *ahci;

> > > +    int i;

> > > +

> > > +    dev = qdev_create(NULL, "sysbus-ahci");

> > > +    qdev_prop_set_uint32(dev, "num-ports", NUM_SATA_PORTS);

> > > +    qdev_init_nofail(dev);

> > > +    sysbus_mmio_map(SYS_BUS_DEVICE(dev), 0, base);

> > > +    sysbus_connect_irq(SYS_BUS_DEVICE(dev), 0, pic[irq]);

> > > +

> > > +    sysahci = SYSBUS_AHCI(dev);

> > > +    ahci = &sysahci->ahci;

> > > +    ide_drive_get(hd, ARRAY_SIZE(hd));

> > > +    for (i = 0; i < ahci->ports; i++) {

> > > +        if (hd[i] == NULL) {

> > > +            continue;

> > > +        }

> > > +        ide_create_drive(&ahci->dev[i].port, 0, hd[i]);

> > > +    }

> > > +}

> > > +

> > > +static void create_ehci(const SBSAMachineState *vms, qemu_irq *pic)

> > > +{

> > > +    hwaddr base = vms->memmap[SBSA_EHCI].base;

> > > +    int irq = vms->irqmap[SBSA_EHCI];

> > > +    USBBus *usb_bus;

> > > +

> > > +    sysbus_create_simple("platform-ehci-usb", base, pic[irq]);

> > > +

> > > +    usb_bus = usb_bus_find(-1);

> > > +    usb_create_simple(usb_bus, "usb-kbd");

> > > +    usb_create_simple(usb_bus, "usb-mouse");

> >

> > I don't think we should automatically create the usb keyboard

> > and mouse devices. The user can do it on the command line if they

> > want them.

> >

> OK.

>


Actually I need to rise an objection to this one.
As we trying to make SBSA machine as close as possible to real machine, we
should have keyboard and mouse.
Those have the same requirement as for VGA. It's just an expected piece of
HW when you for e.g. installing a server.
We also do a lot of FW work so it is expected to have keyboard (and even
mouse) in UEFI.


>

> > >  static void sbsa_ref_init(MachineState *machine)

> > >  {

> > >      SBSAMachineState *vms = SBSA_MACHINE(machine);

> > > @@ -125,6 +552,7 @@ static void sbsa_ref_init(MachineState *machine)

> > >      bool firmware_loaded = bios_name || drive_get(IF_PFLASH, 0, 0);

> > >      const CPUArchIdList *possible_cpus;

> > >      int n, sbsa_max_cpus;

> > > +    qemu_irq pic[NUM_IRQS];

> > >

> > >      if (strcmp(machine->cpu_type, ARM_CPU_TYPE_NAME("cortex-a57"))) {

> > >          error_report("sbsa-ref: CPU type other than the built-in "

> > > @@ -209,11 +637,34 @@ static void sbsa_ref_init(MachineState *machine)

> > >                                           machine->ram_size);

> > >      memory_region_add_subregion(sysmem, vms->memmap[SBSA_MEM].base,

> ram);

> > >

> > > +    create_fdt(vms);

> > > +

> > > +    create_flash(vms, sysmem, secure_sysmem ? secure_sysmem : sysmem);

> > > +

> > > +    create_secure_ram(vms, secure_sysmem);

> > > +

> > > +    create_gic(vms, pic);

> > > +

> > > +    create_uart(vms, pic, SBSA_UART, sysmem, serial_hd(0));

> > > +    create_uart(vms, pic, SBSA_SECURE_UART, secure_sysmem,

> serial_hd(1));

> > > +    create_uart(vms, pic, SBSA_SECURE_UART_MM, secure_sysmem,

> serial_hd(2));

> >

> > What's the third UART for (ie what is the name intended to mean)?

> > Should we have more than one non-secure UART?

> >

> Yes, this is called " Standalone Management Mode", I will add comment

> for it, this is needed by server RAS feature.

>

> > thanks

> > -- PMM

>
Peter Maydell May 9, 2019, 8:46 a.m. UTC | #5
On Wed, 8 May 2019 at 18:48, Radoslaw Biernacki
<radoslaw.biernacki@linaro.org> wrote:
>

>

>

> On Wed, 8 May 2019 at 13:30, Hongbo Zhang <hongbo.zhang@linaro.org> wrote:

>>

>> On Tue, 30 Apr 2019 at 22:17, Peter Maydell <peter.maydell@linaro.org> wrote:

>> > I don't think we should automatically create the usb keyboard

>> > and mouse devices. The user can do it on the command line if they

>> > want them.

>> >

>> OK.

>

>

> Actually I need to rise an objection to this one.

> As we trying to make SBSA machine as close as possible to real machine, we should have keyboard and mouse.

> Those have the same requirement as for VGA. It's just an expected piece of HW when you for e.g. installing a server.

> We also do a lot of FW work so it is expected to have keyboard (and even mouse) in UEFI.


Real hardware doesn't have the keyboard and mouse built in --
when you unpack the machine from the box you have to plug in
the keyboard and mouse yourself (and often you have to
buy the keyboard and mouse and monitor and maybe the
PCI video card separately).

But more seriously, the philosophy of the QEMU command line
is not "do what the user probably wants automatically". It
is "provide the user with full manual control of everything,
using a complicated but orthogonal set of options". We expect
that if users want a more "friendly" interface to setting
up VMs then they will use a "management layer" on top of
QEMU (such as libvirt).

thanks
-- PMM
Hongbo Zhang June 2, 2019, 3:16 a.m. UTC | #6
On Wed, 8 May 2019 at 21:59, Markus Armbruster <armbru@redhat.com> wrote:
>

> Peter Maydell <peter.maydell@linaro.org> writes:

>

> > On Thu, 18 Apr 2019 at 05:05, Hongbo Zhang <hongbo.zhang@linaro.org> wrote:

> >>

> >> Following the previous patch, this patch adds peripheral devices to the

> >> newly introduced SBSA-ref machine.

> >>

> >> Signed-off-by: Hongbo Zhang <hongbo.zhang@linaro.org>

> >> ---

> >>  hw/arm/sbsa-ref.c | 451 ++++++++++++++++++++++++++++++++++++++++++++++++++++++

> >>  1 file changed, 451 insertions(+)

> >

> > Some fairly minor comments on this one.

> >

> >> +static void create_flash(const SBSAMachineState *vms,

> >> +                         MemoryRegion *sysmem,

> >> +                         MemoryRegion *secure_sysmem)

> >> +{

> >> +    /*

> >> +     * Create one secure and nonsecure flash devices to fill SBSA_FLASH

> >> +     * space in the memmap, file passed via -bios goes in the first one.

> >> +     */

> >> +    hwaddr flashsize = vms->memmap[SBSA_FLASH].size / 2;

> >> +    hwaddr flashbase = vms->memmap[SBSA_FLASH].base;

> >> +

> >> +    create_one_flash("sbsa-ref.flash0", flashbase, flashsize,

> >> +                     bios_name, secure_sysmem);

> >> +    create_one_flash("sbsa-ref.flash1", flashbase + flashsize, flashsize,

> >> +                     NULL, sysmem);

> >> +}

> >

> > I think Markus might have an opinion on the best way to create

> > flash devices on a new board model. Is "just create two flash

> > devices the way the virt board does" the right thing?

>

> Short answer: create flash devices the way the ARM virt board does now,

> after commit e0561e60f17, merged into master today.  Possibly less

> backward compatibility stuff you don't need.  As is, your patch creates

> them the way the ARM virt board did before commit e0561e60f17.  Please

> consider updating.

>

> Longer answer:

>

> The old way to configure block backends is -drive.

>

> The newer -blockdev is more flexible.  Libvirt is in the process of

> transitioning from -drive to -blockdev entirely.  Other users with

> similar needs for flexibility may do the same.  We hope to deprecate

> -drive eventually.

>

> The traditional way to configure onboard flash is -drive if=pflash.

> Works, but we need a way to configure with -blockdev for full

> flexibility, and to support libvirt ditching -drive entirely.

>

> I recently improved the i386 PC machine types (commit ebc29e1beab) and

> the ARM virt machine types (commit e0561e60f17) to support flash

> configuration with -blockdev.

>

> I recommend new boards support flash configuration with -blockdev from

> the start.

>

> Questions?


Sorry for the late response.
Thank you for the detailed explanation, and I'll follow the new
pattern in my next version of patch which will be sent out in a few
days.
Philippe Mathieu-Daudé June 3, 2019, 10:54 a.m. UTC | #7
Hi Hongbo, Ard.

On 4/18/19 6:04 AM, Hongbo Zhang wrote:
> Following the previous patch, this patch adds peripheral devices to the

> newly introduced SBSA-ref machine.

> 

> Signed-off-by: Hongbo Zhang <hongbo.zhang@linaro.org>

> ---

>  hw/arm/sbsa-ref.c | 451 ++++++++++++++++++++++++++++++++++++++++++++++++++++++

>  1 file changed, 451 insertions(+)

> 

> diff --git a/hw/arm/sbsa-ref.c b/hw/arm/sbsa-ref.c

> index 652ec13..3fb0027 100644

> --- a/hw/arm/sbsa-ref.c

> +++ b/hw/arm/sbsa-ref.c

> @@ -21,6 +21,7 @@

>  #include "qapi/error.h"

>  #include "qemu/error-report.h"

>  #include "qemu/units.h"

> +#include "sysemu/device_tree.h"

>  #include "sysemu/numa.h"

>  #include "sysemu/sysemu.h"

>  #include "exec/address-spaces.h"

> @@ -28,11 +29,28 @@

>  #include "kvm_arm.h"

>  #include "hw/arm/arm.h"

>  #include "hw/boards.h"

> +#include "hw/ide/internal.h"

> +#include "hw/ide/ahci_internal.h"

>  #include "hw/intc/arm_gicv3_common.h"

> +#include "hw/loader.h"

> +#include "hw/pci-host/gpex.h"

> +#include "hw/usb.h"

> +#include "net/net.h"

>  

>  #define RAMLIMIT_GB 8192

>  #define RAMLIMIT_BYTES (RAMLIMIT_GB * GiB)

>  

> +#define NUM_IRQS        256

> +#define NUM_SMMU_IRQS   4

> +#define NUM_SATA_PORTS  6

> +

> +#define VIRTUAL_PMU_IRQ        7

> +#define ARCH_GIC_MAINT_IRQ     9

> +#define ARCH_TIMER_VIRT_IRQ    11

> +#define ARCH_TIMER_S_EL1_IRQ   13

> +#define ARCH_TIMER_NS_EL1_IRQ  14

> +#define ARCH_TIMER_NS_EL2_IRQ  10

> +

>  enum {

>      SBSA_FLASH,

>      SBSA_MEM,

> @@ -115,6 +133,415 @@ static const int sbsa_ref_irqmap[] = {

>      [SBSA_EHCI] = 11,

>  };

>  

> +/*

> + * Firmware on this machine only uses ACPI table to load OS, these limited

> + * device tree nodes are just to let firmware know the info which varies from

> + * command line parameters, so it is not necessary to be fully compatible

> + * with the kernel CPU and NUMA binding rules.

> + */

> +static void create_fdt(SBSAMachineState *vms)

> +{

> +    void *fdt = create_device_tree(&vms->fdt_size);

> +    const MachineState *ms = MACHINE(vms);

> +    int cpu;

> +

> +    if (!fdt) {

> +        error_report("create_device_tree() failed");

> +        exit(1);

> +    }

> +

> +    vms->fdt = fdt;

> +

> +    qemu_fdt_setprop_string(fdt, "/", "compatible", "linux,sbsa-ref");

> +    qemu_fdt_setprop_cell(fdt, "/", "#address-cells", 0x2);

> +    qemu_fdt_setprop_cell(fdt, "/", "#size-cells", 0x2);

> +

> +    if (have_numa_distance) {

> +        int size = nb_numa_nodes * nb_numa_nodes * 3 * sizeof(uint32_t);

> +        uint32_t *matrix = g_malloc0(size);

> +        int idx, i, j;

> +

> +        for (i = 0; i < nb_numa_nodes; i++) {

> +            for (j = 0; j < nb_numa_nodes; j++) {

> +                idx = (i * nb_numa_nodes + j) * 3;

> +                matrix[idx + 0] = cpu_to_be32(i);

> +                matrix[idx + 1] = cpu_to_be32(j);

> +                matrix[idx + 2] = cpu_to_be32(numa_info[i].distance[j]);

> +            }

> +        }

> +

> +        qemu_fdt_add_subnode(fdt, "/distance-map");

> +        qemu_fdt_setprop(fdt, "/distance-map", "distance-matrix",

> +                         matrix, size);

> +        g_free(matrix);

> +    }

> +

> +    qemu_fdt_add_subnode(vms->fdt, "/cpus");

> +

> +    for (cpu = vms->smp_cpus - 1; cpu >= 0; cpu--) {

> +        char *nodename = g_strdup_printf("/cpus/cpu@%d", cpu);

> +        ARMCPU *armcpu = ARM_CPU(qemu_get_cpu(cpu));

> +        CPUState *cs = CPU(armcpu);

> +

> +        qemu_fdt_add_subnode(vms->fdt, nodename);

> +

> +        if (ms->possible_cpus->cpus[cs->cpu_index].props.has_node_id) {

> +            qemu_fdt_setprop_cell(vms->fdt, nodename, "numa-node-id",

> +                ms->possible_cpus->cpus[cs->cpu_index].props.node_id);

> +        }

> +

> +        g_free(nodename);

> +    }

> +}

> +

> +static void create_one_flash(const char *name, hwaddr flashbase,

> +                             hwaddr flashsize, const char *file,

> +                             MemoryRegion *sysmem)

> +{

> +    /*

> +     * Create and map a single flash device. We use the same

> +     * parameters as the flash devices on the Versatile Express board.

> +     */

> +    DriveInfo *dinfo = drive_get_next(IF_PFLASH);

> +    DeviceState *dev = qdev_create(NULL, "cfi.pflash01");


Please use TYPE_PFLASH_CFI01 instead of "cfi.pflash01".

I wanted to ask "does it has to be CFI01?" because this device model is
in bad shape, but I guess I answered myself looking at the EDK2 platform
code:

- P30_CFI_ADDR_VENDOR_ID is not used
- NorFlashDxe::NorFlashReadCfiData() is not implemented
- All commands in NorFlashDxe uses:
    SEND_NOR_COMMAND(..., P30_CMD_...)
  which are specific to the Intel P30 Nor flash family (CFI01).

> +    SysBusDevice *sbd = SYS_BUS_DEVICE(dev);

> +    const uint64_t sectorlength = 256 * 1024;

> +

> +    if (dinfo) {

> +        qdev_prop_set_drive(dev, "drive", blk_by_legacy_dinfo(dinfo),

> +                            &error_abort);

> +    }

> +

> +    qdev_prop_set_uint32(dev, "num-blocks", flashsize / sectorlength);

> +    qdev_prop_set_uint64(dev, "sector-length", sectorlength);

> +    qdev_prop_set_uint8(dev, "width", 4);

> +    qdev_prop_set_uint8(dev, "device-width", 2);

> +    qdev_prop_set_bit(dev, "big-endian", false);

> +    qdev_prop_set_uint16(dev, "id0", 0x89);

> +    qdev_prop_set_uint16(dev, "id1", 0x18);

> +    qdev_prop_set_uint16(dev, "id2", 0x00);

> +    qdev_prop_set_uint16(dev, "id3", 0x00);

> +    qdev_prop_set_string(dev, "name", name);

> +    qdev_init_nofail(dev);

> +

> +    memory_region_add_subregion(sysmem, flashbase,

> +                                sysbus_mmio_get_region(SYS_BUS_DEVICE(dev), 0));

> +

> +    if (file) {

> +        char *fn;

> +        int image_size;

> +

> +        if (drive_get(IF_PFLASH, 0, 0)) {

> +            error_report("The contents of the first flash device may be "

> +                         "specified with -bios or with -drive if=pflash... "

> +                         "but you cannot use both options at once");

> +            exit(1);

> +        }

> +        fn = qemu_find_file(QEMU_FILE_TYPE_BIOS, file);

> +        if (!fn) {

> +            error_report("Could not find ROM image '%s'", file);

> +            exit(1);

> +        }

> +        image_size = load_image_mr(fn, sysbus_mmio_get_region(sbd, 0));

> +        g_free(fn);

> +        if (image_size < 0) {

> +            error_report("Could not load ROM image '%s'", file);

> +            exit(1);

> +        }

> +    }

> +}

> +

> +static void create_flash(const SBSAMachineState *vms,

> +                         MemoryRegion *sysmem,

> +                         MemoryRegion *secure_sysmem)

> +{

> +    /*

> +     * Create one secure and nonsecure flash devices to fill SBSA_FLASH

> +     * space in the memmap, file passed via -bios goes in the first one.

> +     */

> +    hwaddr flashsize = vms->memmap[SBSA_FLASH].size / 2;

> +    hwaddr flashbase = vms->memmap[SBSA_FLASH].base;

> +

> +    create_one_flash("sbsa-ref.flash0", flashbase, flashsize,

> +                     bios_name, secure_sysmem);

> +    create_one_flash("sbsa-ref.flash1", flashbase + flashsize, flashsize,

> +                     NULL, sysmem);


static const MemMapEntry base_memmap[] = {
    /* Space up to 0x8000000 is reserved for a boot ROM */
    [VIRT_FLASH] =              {          0, 0x08000000 },

So you are creating 2 identical flashes of 128MiB/2 = 64 MiB each which
are the biggest flash you can have:

"The P30 family provides density upgrades from 64-Mbit through
512-Mbit." On Intel, the 512-Mib case is particular in that it is built
of 2x 256-Mib on the same die, with a virtual chip enable. It is simpler
to use a Micron or Numonyx model.

I plan to use a whitelist of supported (and tested...) models, the one
you use seems the Micron JS28F512P30EF ('E' for 'Symetrically Blocked',
since the current model doesn't support bottom/top blocks layout), or in
short: 28F512P30E.
Ard, is that OK?

Checking EDK2 git history, the driver is part of ArmPlatformPkg,
imported in commit 1d5d0ae92d9541, based on 'Versatile Express'.

On the Versatile Express and the RealView Emulation Baseboard user
guides, I only find reference of "64MB of NOR flash" with no specific model.

Peter, do you have physical access to tell me what flashes are used on
real hardware? I googled for Linux console boot log but the kernel
doesn't seem to care about detecting/mapping the flash.

QEMU added the flash to the Versatile board in commit 964c695a54ceda3a,
with the following description:

    - add support for the 64MB NOR CFI01 flash available at
    0x34000000 on the versatilepb board

http://infocenter.arm.com/help/index.jsp?topic=/com.arm.doc.dui0225d/BBAJIHEC.html

However on this link I only see "SSMC Chip Select 1, normally NOR flash
(During boot remapping, this can be NOR flash, Disk-on-Chip, or static
expansion memory)". Again, nothing specific (which makes sense, why
restrict the users to a particuliar family, as long as the pinout matches).

The Manufacturer/Device ID used in QEMU (0x0089, 0x0018) correspond to
the Micron 28F128J3D (128-Mbit, 128 symmetrical blocks of 128-KiB).
Neither the flash size (64 vs 16) nor the block size (256 vs 128) match.

The safer fix here is to find a CFI01 flash of 256 sectors of 256-KiB
and update the Manufacturer/Device IDs in QEMU. Luckily this matches the
28F512P30E cited previously :)

Regards,

Phil.

> +}

> +

> +static void create_secure_ram(SBSAMachineState *vms,

> +                              MemoryRegion *secure_sysmem)

> +{

> +    MemoryRegion *secram = g_new(MemoryRegion, 1);

> +    hwaddr base = vms->memmap[SBSA_SECURE_MEM].base;

> +    hwaddr size = vms->memmap[SBSA_SECURE_MEM].size;

> +

> +    memory_region_init_ram(secram, NULL, "sbsa-ref.secure-ram", size,

> +                           &error_fatal);

> +    memory_region_add_subregion(secure_sysmem, base, secram);

> +}

> +

> +static void create_gic(SBSAMachineState *vms, qemu_irq *pic)

> +{

> +    DeviceState *gicdev;

> +    SysBusDevice *gicbusdev;

> +    const char *gictype;

> +    uint32_t redist0_capacity, redist0_count;

> +    int i;

> +

> +    gictype = gicv3_class_name();

> +

> +    gicdev = qdev_create(NULL, gictype);

> +    qdev_prop_set_uint32(gicdev, "revision", 3);

> +    qdev_prop_set_uint32(gicdev, "num-cpu", smp_cpus);

> +    /*

> +     * Note that the num-irq property counts both internal and external

> +     * interrupts; there are always 32 of the former (mandated by GIC spec).

> +     */

> +    qdev_prop_set_uint32(gicdev, "num-irq", NUM_IRQS + 32);

> +    qdev_prop_set_bit(gicdev, "has-security-extensions", true);

> +

> +    redist0_capacity =

> +                vms->memmap[SBSA_GIC_REDIST].size / GICV3_REDIST_SIZE;

> +    redist0_count = MIN(smp_cpus, redist0_capacity);

> +

> +    qdev_prop_set_uint32(gicdev, "len-redist-region-count", 1);

> +    qdev_prop_set_uint32(gicdev, "redist-region-count[0]", redist0_count);

> +

> +    qdev_init_nofail(gicdev);

> +    gicbusdev = SYS_BUS_DEVICE(gicdev);

> +    sysbus_mmio_map(gicbusdev, 0, vms->memmap[SBSA_GIC_DIST].base);

> +    sysbus_mmio_map(gicbusdev, 1, vms->memmap[SBSA_GIC_REDIST].base);

> +

> +    /*

> +     * Wire the outputs from each CPU's generic timer and the GICv3

> +     * maintenance interrupt signal to the appropriate GIC PPI inputs,

> +     * and the GIC's IRQ/FIQ/VIRQ/VFIQ interrupt outputs to the CPU's inputs.

> +     */

> +    for (i = 0; i < smp_cpus; i++) {

> +        DeviceState *cpudev = DEVICE(qemu_get_cpu(i));

> +        int ppibase = NUM_IRQS + i * GIC_INTERNAL + GIC_NR_SGIS;

> +        int irq;

> +        /*

> +         * Mapping from the output timer irq lines from the CPU to the

> +         * GIC PPI inputs used for this board.

> +         */

> +        const int timer_irq[] = {

> +            [GTIMER_PHYS] = ARCH_TIMER_NS_EL1_IRQ,

> +            [GTIMER_VIRT] = ARCH_TIMER_VIRT_IRQ,

> +            [GTIMER_HYP]  = ARCH_TIMER_NS_EL2_IRQ,

> +            [GTIMER_SEC]  = ARCH_TIMER_S_EL1_IRQ,

> +        };

> +

> +        for (irq = 0; irq < ARRAY_SIZE(timer_irq); irq++) {

> +            qdev_connect_gpio_out(cpudev, irq,

> +                                  qdev_get_gpio_in(gicdev,

> +                                                   ppibase + timer_irq[irq]));

> +        }

> +

> +        qdev_connect_gpio_out_named(cpudev, "gicv3-maintenance-interrupt", 0,

> +                                    qdev_get_gpio_in(gicdev, ppibase

> +                                                     + ARCH_GIC_MAINT_IRQ));

> +        qdev_connect_gpio_out_named(cpudev, "pmu-interrupt", 0,

> +                                    qdev_get_gpio_in(gicdev, ppibase

> +                                                     + VIRTUAL_PMU_IRQ));

> +

> +        sysbus_connect_irq(gicbusdev, i, qdev_get_gpio_in(cpudev, ARM_CPU_IRQ));

> +        sysbus_connect_irq(gicbusdev, i + smp_cpus,

> +                           qdev_get_gpio_in(cpudev, ARM_CPU_FIQ));

> +        sysbus_connect_irq(gicbusdev, i + 2 * smp_cpus,

> +                           qdev_get_gpio_in(cpudev, ARM_CPU_VIRQ));

> +        sysbus_connect_irq(gicbusdev, i + 3 * smp_cpus,

> +                           qdev_get_gpio_in(cpudev, ARM_CPU_VFIQ));

> +    }

> +

> +    for (i = 0; i < NUM_IRQS; i++) {

> +        pic[i] = qdev_get_gpio_in(gicdev, i);

> +    }

> +}

> +

> +static void create_uart(const SBSAMachineState *vms, qemu_irq *pic, int uart,

> +                        MemoryRegion *mem, Chardev *chr)

> +{

> +    hwaddr base = vms->memmap[uart].base;

> +    int irq = vms->irqmap[uart];

> +    DeviceState *dev = qdev_create(NULL, "pl011");

> +    SysBusDevice *s = SYS_BUS_DEVICE(dev);

> +

> +    qdev_prop_set_chr(dev, "chardev", chr);

> +    qdev_init_nofail(dev);

> +    memory_region_add_subregion(mem, base,

> +                                sysbus_mmio_get_region(s, 0));

> +    sysbus_connect_irq(s, 0, pic[irq]);

> +}

> +

> +static void create_rtc(const SBSAMachineState *vms, qemu_irq *pic)

> +{

> +    hwaddr base = vms->memmap[SBSA_RTC].base;

> +    int irq = vms->irqmap[SBSA_RTC];

> +

> +    sysbus_create_simple("pl031", base, pic[irq]);

> +}

> +

> +static DeviceState *gpio_key_dev;

> +static void sbsa_ref_powerdown_req(Notifier *n, void *opaque)

> +{

> +    /* use gpio Pin 3 for power button event */

> +    qemu_set_irq(qdev_get_gpio_in(gpio_key_dev, 0), 1);

> +}

> +

> +static Notifier sbsa_ref_powerdown_notifier = {

> +    .notify = sbsa_ref_powerdown_req

> +};

> +

> +static void create_gpio(const SBSAMachineState *vms, qemu_irq *pic)

> +{

> +    DeviceState *pl061_dev;

> +    hwaddr base = vms->memmap[SBSA_GPIO].base;

> +    int irq = vms->irqmap[SBSA_GPIO];

> +

> +    pl061_dev = sysbus_create_simple("pl061", base, pic[irq]);

> +

> +    gpio_key_dev = sysbus_create_simple("gpio-key", -1,

> +                                        qdev_get_gpio_in(pl061_dev, 3));

> +

> +    /* connect powerdown request */

> +    qemu_register_powerdown_notifier(&sbsa_ref_powerdown_notifier);

> +}

> +

> +static void create_ahci(const SBSAMachineState *vms, qemu_irq *pic)

> +{

> +    hwaddr base = vms->memmap[SBSA_AHCI].base;

> +    int irq = vms->irqmap[SBSA_AHCI];

> +    DeviceState *dev;

> +    DriveInfo *hd[NUM_SATA_PORTS];

> +    SysbusAHCIState *sysahci;

> +    AHCIState *ahci;

> +    int i;

> +

> +    dev = qdev_create(NULL, "sysbus-ahci");

> +    qdev_prop_set_uint32(dev, "num-ports", NUM_SATA_PORTS);

> +    qdev_init_nofail(dev);

> +    sysbus_mmio_map(SYS_BUS_DEVICE(dev), 0, base);

> +    sysbus_connect_irq(SYS_BUS_DEVICE(dev), 0, pic[irq]);

> +

> +    sysahci = SYSBUS_AHCI(dev);

> +    ahci = &sysahci->ahci;

> +    ide_drive_get(hd, ARRAY_SIZE(hd));

> +    for (i = 0; i < ahci->ports; i++) {

> +        if (hd[i] == NULL) {

> +            continue;

> +        }

> +        ide_create_drive(&ahci->dev[i].port, 0, hd[i]);

> +    }

> +}

> +

> +static void create_ehci(const SBSAMachineState *vms, qemu_irq *pic)

> +{

> +    hwaddr base = vms->memmap[SBSA_EHCI].base;

> +    int irq = vms->irqmap[SBSA_EHCI];

> +    USBBus *usb_bus;

> +

> +    sysbus_create_simple("platform-ehci-usb", base, pic[irq]);

> +

> +    usb_bus = usb_bus_find(-1);

> +    usb_create_simple(usb_bus, "usb-kbd");

> +    usb_create_simple(usb_bus, "usb-mouse");

> +}

> +

> +static void create_smmu(const SBSAMachineState *vms, qemu_irq *pic,

> +                        PCIBus *bus)

> +{

> +    hwaddr base = vms->memmap[SBSA_SMMU].base;

> +    int irq =  vms->irqmap[SBSA_SMMU];

> +    DeviceState *dev;

> +    int i;

> +

> +    dev = qdev_create(NULL, "arm-smmuv3");

> +

> +    object_property_set_link(OBJECT(dev), OBJECT(bus), "primary-bus",

> +                             &error_abort);

> +    qdev_init_nofail(dev);

> +    sysbus_mmio_map(SYS_BUS_DEVICE(dev), 0, base);

> +    for (i = 0; i < NUM_SMMU_IRQS; i++) {

> +        sysbus_connect_irq(SYS_BUS_DEVICE(dev), i, pic[irq + i]);

> +    }

> +}

> +

> +static void create_pcie(SBSAMachineState *vms, qemu_irq *pic)

> +{

> +    hwaddr base_ecam = vms->memmap[SBSA_PCIE_ECAM].base;

> +    hwaddr size_ecam = vms->memmap[SBSA_PCIE_ECAM].size;

> +    hwaddr base_mmio = vms->memmap[SBSA_PCIE_MMIO].base;

> +    hwaddr size_mmio = vms->memmap[SBSA_PCIE_MMIO].size;

> +    hwaddr base_mmio_high = vms->memmap[SBSA_PCIE_MMIO_HIGH].base;

> +    hwaddr size_mmio_high = vms->memmap[SBSA_PCIE_MMIO_HIGH].size;

> +    hwaddr base_pio = vms->memmap[SBSA_PCIE_PIO].base;

> +    int irq = vms->irqmap[SBSA_PCIE];

> +    MemoryRegion *mmio_alias, *mmio_alias_high, *mmio_reg;

> +    MemoryRegion *ecam_alias, *ecam_reg;

> +    DeviceState *dev;

> +    PCIHostState *pci;

> +    int i;

> +

> +    dev = qdev_create(NULL, TYPE_GPEX_HOST);

> +    qdev_init_nofail(dev);

> +

> +    /* Map ECAM space */

> +    ecam_alias = g_new0(MemoryRegion, 1);

> +    ecam_reg = sysbus_mmio_get_region(SYS_BUS_DEVICE(dev), 0);

> +    memory_region_init_alias(ecam_alias, OBJECT(dev), "pcie-ecam",

> +                             ecam_reg, 0, size_ecam);

> +    memory_region_add_subregion(get_system_memory(), base_ecam, ecam_alias);

> +

> +    /* Map the MMIO space */

> +    mmio_alias = g_new0(MemoryRegion, 1);

> +    mmio_reg = sysbus_mmio_get_region(SYS_BUS_DEVICE(dev), 1);

> +    memory_region_init_alias(mmio_alias, OBJECT(dev), "pcie-mmio",

> +                             mmio_reg, base_mmio, size_mmio);

> +    memory_region_add_subregion(get_system_memory(), base_mmio, mmio_alias);

> +

> +    /* Map the MMIO_HIGH space */

> +    mmio_alias_high = g_new0(MemoryRegion, 1);

> +    memory_region_init_alias(mmio_alias_high, OBJECT(dev), "pcie-mmio-high",

> +                             mmio_reg, base_mmio_high, size_mmio_high);

> +    memory_region_add_subregion(get_system_memory(), base_mmio_high,

> +                                mmio_alias_high);

> +

> +    /* Map IO port space */

> +    sysbus_mmio_map(SYS_BUS_DEVICE(dev), 2, base_pio);

> +

> +    for (i = 0; i < GPEX_NUM_IRQS; i++) {

> +        sysbus_connect_irq(SYS_BUS_DEVICE(dev), i, pic[irq + i]);

> +        gpex_set_irq_num(GPEX_HOST(dev), i, irq + i);

> +    }

> +

> +    pci = PCI_HOST_BRIDGE(dev);

> +    if (pci->bus) {

> +        for (i = 0; i < nb_nics; i++) {

> +            NICInfo *nd = &nd_table[i];

> +

> +            if (!nd->model) {

> +                nd->model = g_strdup("e1000e");

> +            }

> +

> +            pci_nic_init_nofail(nd, pci->bus, nd->model, NULL);

> +        }

> +    }

> +

> +    pci_create_simple(pci->bus, -1, "VGA");

> +

> +    create_smmu(vms, pic, pci->bus);

> +}

> +

> +static void *sbsa_ref_dtb(const struct arm_boot_info *binfo, int *fdt_size)

> +{

> +    const SBSAMachineState *board = container_of(binfo, SBSAMachineState,

> +                                                 bootinfo);

> +

> +    *fdt_size = board->fdt_size;

> +    return board->fdt;

> +}

> +

>  static void sbsa_ref_init(MachineState *machine)

>  {

>      SBSAMachineState *vms = SBSA_MACHINE(machine);

> @@ -125,6 +552,7 @@ static void sbsa_ref_init(MachineState *machine)

>      bool firmware_loaded = bios_name || drive_get(IF_PFLASH, 0, 0);

>      const CPUArchIdList *possible_cpus;

>      int n, sbsa_max_cpus;

> +    qemu_irq pic[NUM_IRQS];

>  

>      if (strcmp(machine->cpu_type, ARM_CPU_TYPE_NAME("cortex-a57"))) {

>          error_report("sbsa-ref: CPU type other than the built-in "

> @@ -209,11 +637,34 @@ static void sbsa_ref_init(MachineState *machine)

>                                           machine->ram_size);

>      memory_region_add_subregion(sysmem, vms->memmap[SBSA_MEM].base, ram);

>  

> +    create_fdt(vms);

> +

> +    create_flash(vms, sysmem, secure_sysmem ? secure_sysmem : sysmem);

> +

> +    create_secure_ram(vms, secure_sysmem);

> +

> +    create_gic(vms, pic);

> +

> +    create_uart(vms, pic, SBSA_UART, sysmem, serial_hd(0));

> +    create_uart(vms, pic, SBSA_SECURE_UART, secure_sysmem, serial_hd(1));

> +    create_uart(vms, pic, SBSA_SECURE_UART_MM, secure_sysmem, serial_hd(2));

> +

> +    create_rtc(vms, pic);

> +

> +    create_gpio(vms, pic);

> +

> +    create_ahci(vms, pic);

> +

> +    create_ehci(vms, pic);

> +

> +    create_pcie(vms, pic);

> +

>      vms->bootinfo.ram_size = machine->ram_size;

>      vms->bootinfo.kernel_filename = machine->kernel_filename;

>      vms->bootinfo.nb_cpus = smp_cpus;

>      vms->bootinfo.board_id = -1;

>      vms->bootinfo.loader_start = vms->memmap[SBSA_MEM].base;

> +    vms->bootinfo.get_dtb = sbsa_ref_dtb;

>      vms->bootinfo.firmware_loaded = firmware_loaded;

>      arm_load_kernel(ARM_CPU(first_cpu), &vms->bootinfo);

>  }

>
Hongbo Zhang June 16, 2019, 11:41 a.m. UTC | #8
On Mon, 3 Jun 2019 at 18:54, Philippe Mathieu-Daudé <philmd@redhat.com> wrote:
>

> Hi Hongbo, Ard.

>

> On 4/18/19 6:04 AM, Hongbo Zhang wrote:

> > Following the previous patch, this patch adds peripheral devices to the

> > newly introduced SBSA-ref machine.

> >

> > Signed-off-by: Hongbo Zhang <hongbo.zhang@linaro.org>

> > ---

> >  hw/arm/sbsa-ref.c | 451 ++++++++++++++++++++++++++++++++++++++++++++++++++++++

> >  1 file changed, 451 insertions(+)

> >

> > diff --git a/hw/arm/sbsa-ref.c b/hw/arm/sbsa-ref.c

> > index 652ec13..3fb0027 100644

> > --- a/hw/arm/sbsa-ref.c

> > +++ b/hw/arm/sbsa-ref.c

> > @@ -21,6 +21,7 @@

> >  #include "qapi/error.h"

> >  #include "qemu/error-report.h"

> >  #include "qemu/units.h"

> > +#include "sysemu/device_tree.h"

> >  #include "sysemu/numa.h"

> >  #include "sysemu/sysemu.h"

> >  #include "exec/address-spaces.h"

> > @@ -28,11 +29,28 @@

> >  #include "kvm_arm.h"

> >  #include "hw/arm/arm.h"

> >  #include "hw/boards.h"

> > +#include "hw/ide/internal.h"

> > +#include "hw/ide/ahci_internal.h"

> >  #include "hw/intc/arm_gicv3_common.h"

> > +#include "hw/loader.h"

> > +#include "hw/pci-host/gpex.h"

> > +#include "hw/usb.h"

> > +#include "net/net.h"

> >

> >  #define RAMLIMIT_GB 8192

> >  #define RAMLIMIT_BYTES (RAMLIMIT_GB * GiB)

> >

> > +#define NUM_IRQS        256

> > +#define NUM_SMMU_IRQS   4

> > +#define NUM_SATA_PORTS  6

> > +

> > +#define VIRTUAL_PMU_IRQ        7

> > +#define ARCH_GIC_MAINT_IRQ     9

> > +#define ARCH_TIMER_VIRT_IRQ    11

> > +#define ARCH_TIMER_S_EL1_IRQ   13

> > +#define ARCH_TIMER_NS_EL1_IRQ  14

> > +#define ARCH_TIMER_NS_EL2_IRQ  10

> > +

> >  enum {

> >      SBSA_FLASH,

> >      SBSA_MEM,

> > @@ -115,6 +133,415 @@ static const int sbsa_ref_irqmap[] = {

> >      [SBSA_EHCI] = 11,

> >  };

> >

> > +/*

> > + * Firmware on this machine only uses ACPI table to load OS, these limited

> > + * device tree nodes are just to let firmware know the info which varies from

> > + * command line parameters, so it is not necessary to be fully compatible

> > + * with the kernel CPU and NUMA binding rules.

> > + */

> > +static void create_fdt(SBSAMachineState *vms)

> > +{

> > +    void *fdt = create_device_tree(&vms->fdt_size);

> > +    const MachineState *ms = MACHINE(vms);

> > +    int cpu;

> > +

> > +    if (!fdt) {

> > +        error_report("create_device_tree() failed");

> > +        exit(1);

> > +    }

> > +

> > +    vms->fdt = fdt;

> > +

> > +    qemu_fdt_setprop_string(fdt, "/", "compatible", "linux,sbsa-ref");

> > +    qemu_fdt_setprop_cell(fdt, "/", "#address-cells", 0x2);

> > +    qemu_fdt_setprop_cell(fdt, "/", "#size-cells", 0x2);

> > +

> > +    if (have_numa_distance) {

> > +        int size = nb_numa_nodes * nb_numa_nodes * 3 * sizeof(uint32_t);

> > +        uint32_t *matrix = g_malloc0(size);

> > +        int idx, i, j;

> > +

> > +        for (i = 0; i < nb_numa_nodes; i++) {

> > +            for (j = 0; j < nb_numa_nodes; j++) {

> > +                idx = (i * nb_numa_nodes + j) * 3;

> > +                matrix[idx + 0] = cpu_to_be32(i);

> > +                matrix[idx + 1] = cpu_to_be32(j);

> > +                matrix[idx + 2] = cpu_to_be32(numa_info[i].distance[j]);

> > +            }

> > +        }

> > +

> > +        qemu_fdt_add_subnode(fdt, "/distance-map");

> > +        qemu_fdt_setprop(fdt, "/distance-map", "distance-matrix",

> > +                         matrix, size);

> > +        g_free(matrix);

> > +    }

> > +

> > +    qemu_fdt_add_subnode(vms->fdt, "/cpus");

> > +

> > +    for (cpu = vms->smp_cpus - 1; cpu >= 0; cpu--) {

> > +        char *nodename = g_strdup_printf("/cpus/cpu@%d", cpu);

> > +        ARMCPU *armcpu = ARM_CPU(qemu_get_cpu(cpu));

> > +        CPUState *cs = CPU(armcpu);

> > +

> > +        qemu_fdt_add_subnode(vms->fdt, nodename);

> > +

> > +        if (ms->possible_cpus->cpus[cs->cpu_index].props.has_node_id) {

> > +            qemu_fdt_setprop_cell(vms->fdt, nodename, "numa-node-id",

> > +                ms->possible_cpus->cpus[cs->cpu_index].props.node_id);

> > +        }

> > +

> > +        g_free(nodename);

> > +    }

> > +}

> > +

> > +static void create_one_flash(const char *name, hwaddr flashbase,

> > +                             hwaddr flashsize, const char *file,

> > +                             MemoryRegion *sysmem)

> > +{

> > +    /*

> > +     * Create and map a single flash device. We use the same

> > +     * parameters as the flash devices on the Versatile Express board.

> > +     */

> > +    DriveInfo *dinfo = drive_get_next(IF_PFLASH);

> > +    DeviceState *dev = qdev_create(NULL, "cfi.pflash01");

>

> Please use TYPE_PFLASH_CFI01 instead of "cfi.pflash01".

>

> I wanted to ask "does it has to be CFI01?" because this device model is

> in bad shape, but I guess I answered myself looking at the EDK2 platform

> code:

>

> - P30_CFI_ADDR_VENDOR_ID is not used

> - NorFlashDxe::NorFlashReadCfiData() is not implemented

> - All commands in NorFlashDxe uses:

>     SEND_NOR_COMMAND(..., P30_CMD_...)

>   which are specific to the Intel P30 Nor flash family (CFI01).

>

> > +    SysBusDevice *sbd = SYS_BUS_DEVICE(dev);

> > +    const uint64_t sectorlength = 256 * 1024;

> > +

> > +    if (dinfo) {

> > +        qdev_prop_set_drive(dev, "drive", blk_by_legacy_dinfo(dinfo),

> > +                            &error_abort);

> > +    }

> > +

> > +    qdev_prop_set_uint32(dev, "num-blocks", flashsize / sectorlength);

> > +    qdev_prop_set_uint64(dev, "sector-length", sectorlength);

> > +    qdev_prop_set_uint8(dev, "width", 4);

> > +    qdev_prop_set_uint8(dev, "device-width", 2);

> > +    qdev_prop_set_bit(dev, "big-endian", false);

> > +    qdev_prop_set_uint16(dev, "id0", 0x89);

> > +    qdev_prop_set_uint16(dev, "id1", 0x18);

> > +    qdev_prop_set_uint16(dev, "id2", 0x00);

> > +    qdev_prop_set_uint16(dev, "id3", 0x00);

> > +    qdev_prop_set_string(dev, "name", name);

> > +    qdev_init_nofail(dev);

> > +

> > +    memory_region_add_subregion(sysmem, flashbase,

> > +                                sysbus_mmio_get_region(SYS_BUS_DEVICE(dev), 0));

> > +

> > +    if (file) {

> > +        char *fn;

> > +        int image_size;

> > +

> > +        if (drive_get(IF_PFLASH, 0, 0)) {

> > +            error_report("The contents of the first flash device may be "

> > +                         "specified with -bios or with -drive if=pflash... "

> > +                         "but you cannot use both options at once");

> > +            exit(1);

> > +        }

> > +        fn = qemu_find_file(QEMU_FILE_TYPE_BIOS, file);

> > +        if (!fn) {

> > +            error_report("Could not find ROM image '%s'", file);

> > +            exit(1);

> > +        }

> > +        image_size = load_image_mr(fn, sysbus_mmio_get_region(sbd, 0));

> > +        g_free(fn);

> > +        if (image_size < 0) {

> > +            error_report("Could not load ROM image '%s'", file);

> > +            exit(1);

> > +        }

> > +    }

> > +}

> > +

> > +static void create_flash(const SBSAMachineState *vms,

> > +                         MemoryRegion *sysmem,

> > +                         MemoryRegion *secure_sysmem)

> > +{

> > +    /*

> > +     * Create one secure and nonsecure flash devices to fill SBSA_FLASH

> > +     * space in the memmap, file passed via -bios goes in the first one.

> > +     */

> > +    hwaddr flashsize = vms->memmap[SBSA_FLASH].size / 2;

> > +    hwaddr flashbase = vms->memmap[SBSA_FLASH].base;

> > +

> > +    create_one_flash("sbsa-ref.flash0", flashbase, flashsize,

> > +                     bios_name, secure_sysmem);

> > +    create_one_flash("sbsa-ref.flash1", flashbase + flashsize, flashsize,

> > +                     NULL, sysmem);

>

> static const MemMapEntry base_memmap[] = {

>     /* Space up to 0x8000000 is reserved for a boot ROM */

>     [VIRT_FLASH] =              {          0, 0x08000000 },

>

Hi Philippe,
Thank you for the long comments.
Some parts of this machine are based on the 'virt' machine, but I use
this flash memory map:
[SBSA_FLASH] =              {          0, 0x20000000 },
that are 256M *2 flashes.
Franky I didn't consider the product part number etc, just use the
original design in 'virt' and change the size large enough as I think.

Peter, Ard, do we need more considerations here?

> So you are creating 2 identical flashes of 128MiB/2 = 64 MiB each which

> are the biggest flash you can have:

>

> "The P30 family provides density upgrades from 64-Mbit through

> 512-Mbit." On Intel, the 512-Mib case is particular in that it is built

> of 2x 256-Mib on the same die, with a virtual chip enable. It is simpler

> to use a Micron or Numonyx model.

>

> I plan to use a whitelist of supported (and tested...) models, the one

> you use seems the Micron JS28F512P30EF ('E' for 'Symetrically Blocked',

> since the current model doesn't support bottom/top blocks layout), or in

> short: 28F512P30E.

> Ard, is that OK?

>

> Checking EDK2 git history, the driver is part of ArmPlatformPkg,

> imported in commit 1d5d0ae92d9541, based on 'Versatile Express'.

>

> On the Versatile Express and the RealView Emulation Baseboard user

> guides, I only find reference of "64MB of NOR flash" with no specific model.

>

> Peter, do you have physical access to tell me what flashes are used on

> real hardware? I googled for Linux console boot log but the kernel

> doesn't seem to care about detecting/mapping the flash.

>

> QEMU added the flash to the Versatile board in commit 964c695a54ceda3a,

> with the following description:

>

>     - add support for the 64MB NOR CFI01 flash available at

>     0x34000000 on the versatilepb board

>

> http://infocenter.arm.com/help/index.jsp?topic=/com.arm.doc.dui0225d/BBAJIHEC.html

>

> However on this link I only see "SSMC Chip Select 1, normally NOR flash

> (During boot remapping, this can be NOR flash, Disk-on-Chip, or static

> expansion memory)". Again, nothing specific (which makes sense, why

> restrict the users to a particuliar family, as long as the pinout matches).

>

> The Manufacturer/Device ID used in QEMU (0x0089, 0x0018) correspond to

> the Micron 28F128J3D (128-Mbit, 128 symmetrical blocks of 128-KiB).

> Neither the flash size (64 vs 16) nor the block size (256 vs 128) match.

>

> The safer fix here is to find a CFI01 flash of 256 sectors of 256-KiB

> and update the Manufacturer/Device IDs in QEMU. Luckily this matches the

> 28F512P30E cited previously :)

>

> Regards,

>

> Phil.

>

> > +}

> > +

> > +static void create_secure_ram(SBSAMachineState *vms,

> > +                              MemoryRegion *secure_sysmem)

> > +{

> > +    MemoryRegion *secram = g_new(MemoryRegion, 1);

> > +    hwaddr base = vms->memmap[SBSA_SECURE_MEM].base;

> > +    hwaddr size = vms->memmap[SBSA_SECURE_MEM].size;

> > +

> > +    memory_region_init_ram(secram, NULL, "sbsa-ref.secure-ram", size,

> > +                           &error_fatal);

> > +    memory_region_add_subregion(secure_sysmem, base, secram);

> > +}

> > +

> > +static void create_gic(SBSAMachineState *vms, qemu_irq *pic)

> > +{

> > +    DeviceState *gicdev;

> > +    SysBusDevice *gicbusdev;

> > +    const char *gictype;

> > +    uint32_t redist0_capacity, redist0_count;

> > +    int i;

> > +

> > +    gictype = gicv3_class_name();

> > +

> > +    gicdev = qdev_create(NULL, gictype);

> > +    qdev_prop_set_uint32(gicdev, "revision", 3);

> > +    qdev_prop_set_uint32(gicdev, "num-cpu", smp_cpus);

> > +    /*

> > +     * Note that the num-irq property counts both internal and external

> > +     * interrupts; there are always 32 of the former (mandated by GIC spec).

> > +     */

> > +    qdev_prop_set_uint32(gicdev, "num-irq", NUM_IRQS + 32);

> > +    qdev_prop_set_bit(gicdev, "has-security-extensions", true);

> > +

> > +    redist0_capacity =

> > +                vms->memmap[SBSA_GIC_REDIST].size / GICV3_REDIST_SIZE;

> > +    redist0_count = MIN(smp_cpus, redist0_capacity);

> > +

> > +    qdev_prop_set_uint32(gicdev, "len-redist-region-count", 1);

> > +    qdev_prop_set_uint32(gicdev, "redist-region-count[0]", redist0_count);

> > +

> > +    qdev_init_nofail(gicdev);

> > +    gicbusdev = SYS_BUS_DEVICE(gicdev);

> > +    sysbus_mmio_map(gicbusdev, 0, vms->memmap[SBSA_GIC_DIST].base);

> > +    sysbus_mmio_map(gicbusdev, 1, vms->memmap[SBSA_GIC_REDIST].base);

> > +

> > +    /*

> > +     * Wire the outputs from each CPU's generic timer and the GICv3

> > +     * maintenance interrupt signal to the appropriate GIC PPI inputs,

> > +     * and the GIC's IRQ/FIQ/VIRQ/VFIQ interrupt outputs to the CPU's inputs.

> > +     */

> > +    for (i = 0; i < smp_cpus; i++) {

> > +        DeviceState *cpudev = DEVICE(qemu_get_cpu(i));

> > +        int ppibase = NUM_IRQS + i * GIC_INTERNAL + GIC_NR_SGIS;

> > +        int irq;

> > +        /*

> > +         * Mapping from the output timer irq lines from the CPU to the

> > +         * GIC PPI inputs used for this board.

> > +         */

> > +        const int timer_irq[] = {

> > +            [GTIMER_PHYS] = ARCH_TIMER_NS_EL1_IRQ,

> > +            [GTIMER_VIRT] = ARCH_TIMER_VIRT_IRQ,

> > +            [GTIMER_HYP]  = ARCH_TIMER_NS_EL2_IRQ,

> > +            [GTIMER_SEC]  = ARCH_TIMER_S_EL1_IRQ,

> > +        };

> > +

> > +        for (irq = 0; irq < ARRAY_SIZE(timer_irq); irq++) {

> > +            qdev_connect_gpio_out(cpudev, irq,

> > +                                  qdev_get_gpio_in(gicdev,

> > +                                                   ppibase + timer_irq[irq]));

> > +        }

> > +

> > +        qdev_connect_gpio_out_named(cpudev, "gicv3-maintenance-interrupt", 0,

> > +                                    qdev_get_gpio_in(gicdev, ppibase

> > +                                                     + ARCH_GIC_MAINT_IRQ));

> > +        qdev_connect_gpio_out_named(cpudev, "pmu-interrupt", 0,

> > +                                    qdev_get_gpio_in(gicdev, ppibase

> > +                                                     + VIRTUAL_PMU_IRQ));

> > +

> > +        sysbus_connect_irq(gicbusdev, i, qdev_get_gpio_in(cpudev, ARM_CPU_IRQ));

> > +        sysbus_connect_irq(gicbusdev, i + smp_cpus,

> > +                           qdev_get_gpio_in(cpudev, ARM_CPU_FIQ));

> > +        sysbus_connect_irq(gicbusdev, i + 2 * smp_cpus,

> > +                           qdev_get_gpio_in(cpudev, ARM_CPU_VIRQ));

> > +        sysbus_connect_irq(gicbusdev, i + 3 * smp_cpus,

> > +                           qdev_get_gpio_in(cpudev, ARM_CPU_VFIQ));

> > +    }

> > +

> > +    for (i = 0; i < NUM_IRQS; i++) {

> > +        pic[i] = qdev_get_gpio_in(gicdev, i);

> > +    }

> > +}

> > +

> > +static void create_uart(const SBSAMachineState *vms, qemu_irq *pic, int uart,

> > +                        MemoryRegion *mem, Chardev *chr)

> > +{

> > +    hwaddr base = vms->memmap[uart].base;

> > +    int irq = vms->irqmap[uart];

> > +    DeviceState *dev = qdev_create(NULL, "pl011");

> > +    SysBusDevice *s = SYS_BUS_DEVICE(dev);

> > +

> > +    qdev_prop_set_chr(dev, "chardev", chr);

> > +    qdev_init_nofail(dev);

> > +    memory_region_add_subregion(mem, base,

> > +                                sysbus_mmio_get_region(s, 0));

> > +    sysbus_connect_irq(s, 0, pic[irq]);

> > +}

> > +

> > +static void create_rtc(const SBSAMachineState *vms, qemu_irq *pic)

> > +{

> > +    hwaddr base = vms->memmap[SBSA_RTC].base;

> > +    int irq = vms->irqmap[SBSA_RTC];

> > +

> > +    sysbus_create_simple("pl031", base, pic[irq]);

> > +}

> > +

> > +static DeviceState *gpio_key_dev;

> > +static void sbsa_ref_powerdown_req(Notifier *n, void *opaque)

> > +{

> > +    /* use gpio Pin 3 for power button event */

> > +    qemu_set_irq(qdev_get_gpio_in(gpio_key_dev, 0), 1);

> > +}

> > +

> > +static Notifier sbsa_ref_powerdown_notifier = {

> > +    .notify = sbsa_ref_powerdown_req

> > +};

> > +

> > +static void create_gpio(const SBSAMachineState *vms, qemu_irq *pic)

> > +{

> > +    DeviceState *pl061_dev;

> > +    hwaddr base = vms->memmap[SBSA_GPIO].base;

> > +    int irq = vms->irqmap[SBSA_GPIO];

> > +

> > +    pl061_dev = sysbus_create_simple("pl061", base, pic[irq]);

> > +

> > +    gpio_key_dev = sysbus_create_simple("gpio-key", -1,

> > +                                        qdev_get_gpio_in(pl061_dev, 3));

> > +

> > +    /* connect powerdown request */

> > +    qemu_register_powerdown_notifier(&sbsa_ref_powerdown_notifier);

> > +}

> > +

> > +static void create_ahci(const SBSAMachineState *vms, qemu_irq *pic)

> > +{

> > +    hwaddr base = vms->memmap[SBSA_AHCI].base;

> > +    int irq = vms->irqmap[SBSA_AHCI];

> > +    DeviceState *dev;

> > +    DriveInfo *hd[NUM_SATA_PORTS];

> > +    SysbusAHCIState *sysahci;

> > +    AHCIState *ahci;

> > +    int i;

> > +

> > +    dev = qdev_create(NULL, "sysbus-ahci");

> > +    qdev_prop_set_uint32(dev, "num-ports", NUM_SATA_PORTS);

> > +    qdev_init_nofail(dev);

> > +    sysbus_mmio_map(SYS_BUS_DEVICE(dev), 0, base);

> > +    sysbus_connect_irq(SYS_BUS_DEVICE(dev), 0, pic[irq]);

> > +

> > +    sysahci = SYSBUS_AHCI(dev);

> > +    ahci = &sysahci->ahci;

> > +    ide_drive_get(hd, ARRAY_SIZE(hd));

> > +    for (i = 0; i < ahci->ports; i++) {

> > +        if (hd[i] == NULL) {

> > +            continue;

> > +        }

> > +        ide_create_drive(&ahci->dev[i].port, 0, hd[i]);

> > +    }

> > +}

> > +

> > +static void create_ehci(const SBSAMachineState *vms, qemu_irq *pic)

> > +{

> > +    hwaddr base = vms->memmap[SBSA_EHCI].base;

> > +    int irq = vms->irqmap[SBSA_EHCI];

> > +    USBBus *usb_bus;

> > +

> > +    sysbus_create_simple("platform-ehci-usb", base, pic[irq]);

> > +

> > +    usb_bus = usb_bus_find(-1);

> > +    usb_create_simple(usb_bus, "usb-kbd");

> > +    usb_create_simple(usb_bus, "usb-mouse");

> > +}

> > +

> > +static void create_smmu(const SBSAMachineState *vms, qemu_irq *pic,

> > +                        PCIBus *bus)

> > +{

> > +    hwaddr base = vms->memmap[SBSA_SMMU].base;

> > +    int irq =  vms->irqmap[SBSA_SMMU];

> > +    DeviceState *dev;

> > +    int i;

> > +

> > +    dev = qdev_create(NULL, "arm-smmuv3");

> > +

> > +    object_property_set_link(OBJECT(dev), OBJECT(bus), "primary-bus",

> > +                             &error_abort);

> > +    qdev_init_nofail(dev);

> > +    sysbus_mmio_map(SYS_BUS_DEVICE(dev), 0, base);

> > +    for (i = 0; i < NUM_SMMU_IRQS; i++) {

> > +        sysbus_connect_irq(SYS_BUS_DEVICE(dev), i, pic[irq + i]);

> > +    }

> > +}

> > +

> > +static void create_pcie(SBSAMachineState *vms, qemu_irq *pic)

> > +{

> > +    hwaddr base_ecam = vms->memmap[SBSA_PCIE_ECAM].base;

> > +    hwaddr size_ecam = vms->memmap[SBSA_PCIE_ECAM].size;

> > +    hwaddr base_mmio = vms->memmap[SBSA_PCIE_MMIO].base;

> > +    hwaddr size_mmio = vms->memmap[SBSA_PCIE_MMIO].size;

> > +    hwaddr base_mmio_high = vms->memmap[SBSA_PCIE_MMIO_HIGH].base;

> > +    hwaddr size_mmio_high = vms->memmap[SBSA_PCIE_MMIO_HIGH].size;

> > +    hwaddr base_pio = vms->memmap[SBSA_PCIE_PIO].base;

> > +    int irq = vms->irqmap[SBSA_PCIE];

> > +    MemoryRegion *mmio_alias, *mmio_alias_high, *mmio_reg;

> > +    MemoryRegion *ecam_alias, *ecam_reg;

> > +    DeviceState *dev;

> > +    PCIHostState *pci;

> > +    int i;

> > +

> > +    dev = qdev_create(NULL, TYPE_GPEX_HOST);

> > +    qdev_init_nofail(dev);

> > +

> > +    /* Map ECAM space */

> > +    ecam_alias = g_new0(MemoryRegion, 1);

> > +    ecam_reg = sysbus_mmio_get_region(SYS_BUS_DEVICE(dev), 0);

> > +    memory_region_init_alias(ecam_alias, OBJECT(dev), "pcie-ecam",

> > +                             ecam_reg, 0, size_ecam);

> > +    memory_region_add_subregion(get_system_memory(), base_ecam, ecam_alias);

> > +

> > +    /* Map the MMIO space */

> > +    mmio_alias = g_new0(MemoryRegion, 1);

> > +    mmio_reg = sysbus_mmio_get_region(SYS_BUS_DEVICE(dev), 1);

> > +    memory_region_init_alias(mmio_alias, OBJECT(dev), "pcie-mmio",

> > +                             mmio_reg, base_mmio, size_mmio);

> > +    memory_region_add_subregion(get_system_memory(), base_mmio, mmio_alias);

> > +

> > +    /* Map the MMIO_HIGH space */

> > +    mmio_alias_high = g_new0(MemoryRegion, 1);

> > +    memory_region_init_alias(mmio_alias_high, OBJECT(dev), "pcie-mmio-high",

> > +                             mmio_reg, base_mmio_high, size_mmio_high);

> > +    memory_region_add_subregion(get_system_memory(), base_mmio_high,

> > +                                mmio_alias_high);

> > +

> > +    /* Map IO port space */

> > +    sysbus_mmio_map(SYS_BUS_DEVICE(dev), 2, base_pio);

> > +

> > +    for (i = 0; i < GPEX_NUM_IRQS; i++) {

> > +        sysbus_connect_irq(SYS_BUS_DEVICE(dev), i, pic[irq + i]);

> > +        gpex_set_irq_num(GPEX_HOST(dev), i, irq + i);

> > +    }

> > +

> > +    pci = PCI_HOST_BRIDGE(dev);

> > +    if (pci->bus) {

> > +        for (i = 0; i < nb_nics; i++) {

> > +            NICInfo *nd = &nd_table[i];

> > +

> > +            if (!nd->model) {

> > +                nd->model = g_strdup("e1000e");

> > +            }

> > +

> > +            pci_nic_init_nofail(nd, pci->bus, nd->model, NULL);

> > +        }

> > +    }

> > +

> > +    pci_create_simple(pci->bus, -1, "VGA");

> > +

> > +    create_smmu(vms, pic, pci->bus);

> > +}

> > +

> > +static void *sbsa_ref_dtb(const struct arm_boot_info *binfo, int *fdt_size)

> > +{

> > +    const SBSAMachineState *board = container_of(binfo, SBSAMachineState,

> > +                                                 bootinfo);

> > +

> > +    *fdt_size = board->fdt_size;

> > +    return board->fdt;

> > +}

> > +

> >  static void sbsa_ref_init(MachineState *machine)

> >  {

> >      SBSAMachineState *vms = SBSA_MACHINE(machine);

> > @@ -125,6 +552,7 @@ static void sbsa_ref_init(MachineState *machine)

> >      bool firmware_loaded = bios_name || drive_get(IF_PFLASH, 0, 0);

> >      const CPUArchIdList *possible_cpus;

> >      int n, sbsa_max_cpus;

> > +    qemu_irq pic[NUM_IRQS];

> >

> >      if (strcmp(machine->cpu_type, ARM_CPU_TYPE_NAME("cortex-a57"))) {

> >          error_report("sbsa-ref: CPU type other than the built-in "

> > @@ -209,11 +637,34 @@ static void sbsa_ref_init(MachineState *machine)

> >                                           machine->ram_size);

> >      memory_region_add_subregion(sysmem, vms->memmap[SBSA_MEM].base, ram);

> >

> > +    create_fdt(vms);

> > +

> > +    create_flash(vms, sysmem, secure_sysmem ? secure_sysmem : sysmem);

> > +

> > +    create_secure_ram(vms, secure_sysmem);

> > +

> > +    create_gic(vms, pic);

> > +

> > +    create_uart(vms, pic, SBSA_UART, sysmem, serial_hd(0));

> > +    create_uart(vms, pic, SBSA_SECURE_UART, secure_sysmem, serial_hd(1));

> > +    create_uart(vms, pic, SBSA_SECURE_UART_MM, secure_sysmem, serial_hd(2));

> > +

> > +    create_rtc(vms, pic);

> > +

> > +    create_gpio(vms, pic);

> > +

> > +    create_ahci(vms, pic);

> > +

> > +    create_ehci(vms, pic);

> > +

> > +    create_pcie(vms, pic);

> > +

> >      vms->bootinfo.ram_size = machine->ram_size;

> >      vms->bootinfo.kernel_filename = machine->kernel_filename;

> >      vms->bootinfo.nb_cpus = smp_cpus;

> >      vms->bootinfo.board_id = -1;

> >      vms->bootinfo.loader_start = vms->memmap[SBSA_MEM].base;

> > +    vms->bootinfo.get_dtb = sbsa_ref_dtb;

> >      vms->bootinfo.firmware_loaded = firmware_loaded;

> >      arm_load_kernel(ARM_CPU(first_cpu), &vms->bootinfo);

> >  }

> >
Hongbo Zhang June 17, 2019, 2:44 a.m. UTC | #9
On Mon, 3 Jun 2019 at 18:54, Philippe Mathieu-Daudé <philmd@redhat.com> wrote:
>

> Hi Hongbo, Ard.

>

> On 4/18/19 6:04 AM, Hongbo Zhang wrote:

> > Following the previous patch, this patch adds peripheral devices to the

> > newly introduced SBSA-ref machine.

> >

> > Signed-off-by: Hongbo Zhang <hongbo.zhang@linaro.org>

> > ---

> >  hw/arm/sbsa-ref.c | 451 ++++++++++++++++++++++++++++++++++++++++++++++++++++++

> >  1 file changed, 451 insertions(+)

> >

> > diff --git a/hw/arm/sbsa-ref.c b/hw/arm/sbsa-ref.c

> > index 652ec13..3fb0027 100644

> > --- a/hw/arm/sbsa-ref.c

> > +++ b/hw/arm/sbsa-ref.c

> > @@ -21,6 +21,7 @@

> >  #include "qapi/error.h"

> >  #include "qemu/error-report.h"

> >  #include "qemu/units.h"

> > +#include "sysemu/device_tree.h"

> >  #include "sysemu/numa.h"

> >  #include "sysemu/sysemu.h"

> >  #include "exec/address-spaces.h"

> > @@ -28,11 +29,28 @@

> >  #include "kvm_arm.h"

> >  #include "hw/arm/arm.h"

> >  #include "hw/boards.h"

> > +#include "hw/ide/internal.h"

> > +#include "hw/ide/ahci_internal.h"

> >  #include "hw/intc/arm_gicv3_common.h"

> > +#include "hw/loader.h"

> > +#include "hw/pci-host/gpex.h"

> > +#include "hw/usb.h"

> > +#include "net/net.h"

> >

> >  #define RAMLIMIT_GB 8192

> >  #define RAMLIMIT_BYTES (RAMLIMIT_GB * GiB)

> >

> > +#define NUM_IRQS        256

> > +#define NUM_SMMU_IRQS   4

> > +#define NUM_SATA_PORTS  6

> > +

> > +#define VIRTUAL_PMU_IRQ        7

> > +#define ARCH_GIC_MAINT_IRQ     9

> > +#define ARCH_TIMER_VIRT_IRQ    11

> > +#define ARCH_TIMER_S_EL1_IRQ   13

> > +#define ARCH_TIMER_NS_EL1_IRQ  14

> > +#define ARCH_TIMER_NS_EL2_IRQ  10

> > +

> >  enum {

> >      SBSA_FLASH,

> >      SBSA_MEM,

> > @@ -115,6 +133,415 @@ static const int sbsa_ref_irqmap[] = {

> >      [SBSA_EHCI] = 11,

> >  };

> >

> > +/*

> > + * Firmware on this machine only uses ACPI table to load OS, these limited

> > + * device tree nodes are just to let firmware know the info which varies from

> > + * command line parameters, so it is not necessary to be fully compatible

> > + * with the kernel CPU and NUMA binding rules.

> > + */

> > +static void create_fdt(SBSAMachineState *vms)

> > +{

> > +    void *fdt = create_device_tree(&vms->fdt_size);

> > +    const MachineState *ms = MACHINE(vms);

> > +    int cpu;

> > +

> > +    if (!fdt) {

> > +        error_report("create_device_tree() failed");

> > +        exit(1);

> > +    }

> > +

> > +    vms->fdt = fdt;

> > +

> > +    qemu_fdt_setprop_string(fdt, "/", "compatible", "linux,sbsa-ref");

> > +    qemu_fdt_setprop_cell(fdt, "/", "#address-cells", 0x2);

> > +    qemu_fdt_setprop_cell(fdt, "/", "#size-cells", 0x2);

> > +

> > +    if (have_numa_distance) {

> > +        int size = nb_numa_nodes * nb_numa_nodes * 3 * sizeof(uint32_t);

> > +        uint32_t *matrix = g_malloc0(size);

> > +        int idx, i, j;

> > +

> > +        for (i = 0; i < nb_numa_nodes; i++) {

> > +            for (j = 0; j < nb_numa_nodes; j++) {

> > +                idx = (i * nb_numa_nodes + j) * 3;

> > +                matrix[idx + 0] = cpu_to_be32(i);

> > +                matrix[idx + 1] = cpu_to_be32(j);

> > +                matrix[idx + 2] = cpu_to_be32(numa_info[i].distance[j]);

> > +            }

> > +        }

> > +

> > +        qemu_fdt_add_subnode(fdt, "/distance-map");

> > +        qemu_fdt_setprop(fdt, "/distance-map", "distance-matrix",

> > +                         matrix, size);

> > +        g_free(matrix);

> > +    }

> > +

> > +    qemu_fdt_add_subnode(vms->fdt, "/cpus");

> > +

> > +    for (cpu = vms->smp_cpus - 1; cpu >= 0; cpu--) {

> > +        char *nodename = g_strdup_printf("/cpus/cpu@%d", cpu);

> > +        ARMCPU *armcpu = ARM_CPU(qemu_get_cpu(cpu));

> > +        CPUState *cs = CPU(armcpu);

> > +

> > +        qemu_fdt_add_subnode(vms->fdt, nodename);

> > +

> > +        if (ms->possible_cpus->cpus[cs->cpu_index].props.has_node_id) {

> > +            qemu_fdt_setprop_cell(vms->fdt, nodename, "numa-node-id",

> > +                ms->possible_cpus->cpus[cs->cpu_index].props.node_id);

> > +        }

> > +

> > +        g_free(nodename);

> > +    }

> > +}

> > +

> > +static void create_one_flash(const char *name, hwaddr flashbase,

> > +                             hwaddr flashsize, const char *file,

> > +                             MemoryRegion *sysmem)

> > +{

> > +    /*

> > +     * Create and map a single flash device. We use the same

> > +     * parameters as the flash devices on the Versatile Express board.

> > +     */

> > +    DriveInfo *dinfo = drive_get_next(IF_PFLASH);

> > +    DeviceState *dev = qdev_create(NULL, "cfi.pflash01");

>

> Please use TYPE_PFLASH_CFI01 instead of "cfi.pflash01".

>

And as reviewed by Markus, I will update to the new method of create
flash, as commit e0561e60f17, TYPE_PFLASH_CFI01 is used there.

> I wanted to ask "does it has to be CFI01?" because this device model is

> in bad shape, but I guess I answered myself looking at the EDK2 platform

> code:

>

> - P30_CFI_ADDR_VENDOR_ID is not used

> - NorFlashDxe::NorFlashReadCfiData() is not implemented

> - All commands in NorFlashDxe uses:

>     SEND_NOR_COMMAND(..., P30_CMD_...)

>   which are specific to the Intel P30 Nor flash family (CFI01).

>

> > +    SysBusDevice *sbd = SYS_BUS_DEVICE(dev);

> > +    const uint64_t sectorlength = 256 * 1024;

> > +

> > +    if (dinfo) {

> > +        qdev_prop_set_drive(dev, "drive", blk_by_legacy_dinfo(dinfo),

> > +                            &error_abort);

> > +    }

> > +

> > +    qdev_prop_set_uint32(dev, "num-blocks", flashsize / sectorlength);

> > +    qdev_prop_set_uint64(dev, "sector-length", sectorlength);

> > +    qdev_prop_set_uint8(dev, "width", 4);

> > +    qdev_prop_set_uint8(dev, "device-width", 2);

> > +    qdev_prop_set_bit(dev, "big-endian", false);

> > +    qdev_prop_set_uint16(dev, "id0", 0x89);

> > +    qdev_prop_set_uint16(dev, "id1", 0x18);

> > +    qdev_prop_set_uint16(dev, "id2", 0x00);

> > +    qdev_prop_set_uint16(dev, "id3", 0x00);

> > +    qdev_prop_set_string(dev, "name", name);

> > +    qdev_init_nofail(dev);

> > +

> > +    memory_region_add_subregion(sysmem, flashbase,

> > +                                sysbus_mmio_get_region(SYS_BUS_DEVICE(dev), 0));

> > +

> > +    if (file) {

> > +        char *fn;

> > +        int image_size;

> > +

> > +        if (drive_get(IF_PFLASH, 0, 0)) {

> > +            error_report("The contents of the first flash device may be "

> > +                         "specified with -bios or with -drive if=pflash... "

> > +                         "but you cannot use both options at once");

> > +            exit(1);

> > +        }

> > +        fn = qemu_find_file(QEMU_FILE_TYPE_BIOS, file);

> > +        if (!fn) {

> > +            error_report("Could not find ROM image '%s'", file);

> > +            exit(1);

> > +        }

> > +        image_size = load_image_mr(fn, sysbus_mmio_get_region(sbd, 0));

> > +        g_free(fn);

> > +        if (image_size < 0) {

> > +            error_report("Could not load ROM image '%s'", file);

> > +            exit(1);

> > +        }

> > +    }

> > +}

> > +

> > +static void create_flash(const SBSAMachineState *vms,

> > +                         MemoryRegion *sysmem,

> > +                         MemoryRegion *secure_sysmem)

> > +{

> > +    /*

> > +     * Create one secure and nonsecure flash devices to fill SBSA_FLASH

> > +     * space in the memmap, file passed via -bios goes in the first one.

> > +     */

> > +    hwaddr flashsize = vms->memmap[SBSA_FLASH].size / 2;

> > +    hwaddr flashbase = vms->memmap[SBSA_FLASH].base;

> > +

> > +    create_one_flash("sbsa-ref.flash0", flashbase, flashsize,

> > +                     bios_name, secure_sysmem);

> > +    create_one_flash("sbsa-ref.flash1", flashbase + flashsize, flashsize,

> > +                     NULL, sysmem);

>

> static const MemMapEntry base_memmap[] = {

>     /* Space up to 0x8000000 is reserved for a boot ROM */

>     [VIRT_FLASH] =              {          0, 0x08000000 },

>

> So you are creating 2 identical flashes of 128MiB/2 = 64 MiB each which

> are the biggest flash you can have:

>

> "The P30 family provides density upgrades from 64-Mbit through

> 512-Mbit." On Intel, the 512-Mib case is particular in that it is built

> of 2x 256-Mib on the same die, with a virtual chip enable. It is simpler

> to use a Micron or Numonyx model.

>

> I plan to use a whitelist of supported (and tested...) models, the one

> you use seems the Micron JS28F512P30EF ('E' for 'Symetrically Blocked',

> since the current model doesn't support bottom/top blocks layout), or in

> short: 28F512P30E.

> Ard, is that OK?

>

> Checking EDK2 git history, the driver is part of ArmPlatformPkg,

> imported in commit 1d5d0ae92d9541, based on 'Versatile Express'.

>

> On the Versatile Express and the RealView Emulation Baseboard user

> guides, I only find reference of "64MB of NOR flash" with no specific model.

>

> Peter, do you have physical access to tell me what flashes are used on

> real hardware? I googled for Linux console boot log but the kernel

> doesn't seem to care about detecting/mapping the flash.

>

> QEMU added the flash to the Versatile board in commit 964c695a54ceda3a,

> with the following description:

>

>     - add support for the 64MB NOR CFI01 flash available at

>     0x34000000 on the versatilepb board

>

> http://infocenter.arm.com/help/index.jsp?topic=/com.arm.doc.dui0225d/BBAJIHEC.html

>

> However on this link I only see "SSMC Chip Select 1, normally NOR flash

> (During boot remapping, this can be NOR flash, Disk-on-Chip, or static

> expansion memory)". Again, nothing specific (which makes sense, why

> restrict the users to a particuliar family, as long as the pinout matches).

>

> The Manufacturer/Device ID used in QEMU (0x0089, 0x0018) correspond to

> the Micron 28F128J3D (128-Mbit, 128 symmetrical blocks of 128-KiB).

> Neither the flash size (64 vs 16) nor the block size (256 vs 128) match.

>

> The safer fix here is to find a CFI01 flash of 256 sectors of 256-KiB

> and update the Manufacturer/Device IDs in QEMU. Luckily this matches the

> 28F512P30E cited previously :)

>

> Regards,

>

> Phil.

>

> > +}

> > +

> > +static void create_secure_ram(SBSAMachineState *vms,

> > +                              MemoryRegion *secure_sysmem)

> > +{

> > +    MemoryRegion *secram = g_new(MemoryRegion, 1);

> > +    hwaddr base = vms->memmap[SBSA_SECURE_MEM].base;

> > +    hwaddr size = vms->memmap[SBSA_SECURE_MEM].size;

> > +

> > +    memory_region_init_ram(secram, NULL, "sbsa-ref.secure-ram", size,

> > +                           &error_fatal);

> > +    memory_region_add_subregion(secure_sysmem, base, secram);

> > +}

> > +

> > +static void create_gic(SBSAMachineState *vms, qemu_irq *pic)

> > +{

> > +    DeviceState *gicdev;

> > +    SysBusDevice *gicbusdev;

> > +    const char *gictype;

> > +    uint32_t redist0_capacity, redist0_count;

> > +    int i;

> > +

> > +    gictype = gicv3_class_name();

> > +

> > +    gicdev = qdev_create(NULL, gictype);

> > +    qdev_prop_set_uint32(gicdev, "revision", 3);

> > +    qdev_prop_set_uint32(gicdev, "num-cpu", smp_cpus);

> > +    /*

> > +     * Note that the num-irq property counts both internal and external

> > +     * interrupts; there are always 32 of the former (mandated by GIC spec).

> > +     */

> > +    qdev_prop_set_uint32(gicdev, "num-irq", NUM_IRQS + 32);

> > +    qdev_prop_set_bit(gicdev, "has-security-extensions", true);

> > +

> > +    redist0_capacity =

> > +                vms->memmap[SBSA_GIC_REDIST].size / GICV3_REDIST_SIZE;

> > +    redist0_count = MIN(smp_cpus, redist0_capacity);

> > +

> > +    qdev_prop_set_uint32(gicdev, "len-redist-region-count", 1);

> > +    qdev_prop_set_uint32(gicdev, "redist-region-count[0]", redist0_count);

> > +

> > +    qdev_init_nofail(gicdev);

> > +    gicbusdev = SYS_BUS_DEVICE(gicdev);

> > +    sysbus_mmio_map(gicbusdev, 0, vms->memmap[SBSA_GIC_DIST].base);

> > +    sysbus_mmio_map(gicbusdev, 1, vms->memmap[SBSA_GIC_REDIST].base);

> > +

> > +    /*

> > +     * Wire the outputs from each CPU's generic timer and the GICv3

> > +     * maintenance interrupt signal to the appropriate GIC PPI inputs,

> > +     * and the GIC's IRQ/FIQ/VIRQ/VFIQ interrupt outputs to the CPU's inputs.

> > +     */

> > +    for (i = 0; i < smp_cpus; i++) {

> > +        DeviceState *cpudev = DEVICE(qemu_get_cpu(i));

> > +        int ppibase = NUM_IRQS + i * GIC_INTERNAL + GIC_NR_SGIS;

> > +        int irq;

> > +        /*

> > +         * Mapping from the output timer irq lines from the CPU to the

> > +         * GIC PPI inputs used for this board.

> > +         */

> > +        const int timer_irq[] = {

> > +            [GTIMER_PHYS] = ARCH_TIMER_NS_EL1_IRQ,

> > +            [GTIMER_VIRT] = ARCH_TIMER_VIRT_IRQ,

> > +            [GTIMER_HYP]  = ARCH_TIMER_NS_EL2_IRQ,

> > +            [GTIMER_SEC]  = ARCH_TIMER_S_EL1_IRQ,

> > +        };

> > +

> > +        for (irq = 0; irq < ARRAY_SIZE(timer_irq); irq++) {

> > +            qdev_connect_gpio_out(cpudev, irq,

> > +                                  qdev_get_gpio_in(gicdev,

> > +                                                   ppibase + timer_irq[irq]));

> > +        }

> > +

> > +        qdev_connect_gpio_out_named(cpudev, "gicv3-maintenance-interrupt", 0,

> > +                                    qdev_get_gpio_in(gicdev, ppibase

> > +                                                     + ARCH_GIC_MAINT_IRQ));

> > +        qdev_connect_gpio_out_named(cpudev, "pmu-interrupt", 0,

> > +                                    qdev_get_gpio_in(gicdev, ppibase

> > +                                                     + VIRTUAL_PMU_IRQ));

> > +

> > +        sysbus_connect_irq(gicbusdev, i, qdev_get_gpio_in(cpudev, ARM_CPU_IRQ));

> > +        sysbus_connect_irq(gicbusdev, i + smp_cpus,

> > +                           qdev_get_gpio_in(cpudev, ARM_CPU_FIQ));

> > +        sysbus_connect_irq(gicbusdev, i + 2 * smp_cpus,

> > +                           qdev_get_gpio_in(cpudev, ARM_CPU_VIRQ));

> > +        sysbus_connect_irq(gicbusdev, i + 3 * smp_cpus,

> > +                           qdev_get_gpio_in(cpudev, ARM_CPU_VFIQ));

> > +    }

> > +

> > +    for (i = 0; i < NUM_IRQS; i++) {

> > +        pic[i] = qdev_get_gpio_in(gicdev, i);

> > +    }

> > +}

> > +

> > +static void create_uart(const SBSAMachineState *vms, qemu_irq *pic, int uart,

> > +                        MemoryRegion *mem, Chardev *chr)

> > +{

> > +    hwaddr base = vms->memmap[uart].base;

> > +    int irq = vms->irqmap[uart];

> > +    DeviceState *dev = qdev_create(NULL, "pl011");

> > +    SysBusDevice *s = SYS_BUS_DEVICE(dev);

> > +

> > +    qdev_prop_set_chr(dev, "chardev", chr);

> > +    qdev_init_nofail(dev);

> > +    memory_region_add_subregion(mem, base,

> > +                                sysbus_mmio_get_region(s, 0));

> > +    sysbus_connect_irq(s, 0, pic[irq]);

> > +}

> > +

> > +static void create_rtc(const SBSAMachineState *vms, qemu_irq *pic)

> > +{

> > +    hwaddr base = vms->memmap[SBSA_RTC].base;

> > +    int irq = vms->irqmap[SBSA_RTC];

> > +

> > +    sysbus_create_simple("pl031", base, pic[irq]);

> > +}

> > +

> > +static DeviceState *gpio_key_dev;

> > +static void sbsa_ref_powerdown_req(Notifier *n, void *opaque)

> > +{

> > +    /* use gpio Pin 3 for power button event */

> > +    qemu_set_irq(qdev_get_gpio_in(gpio_key_dev, 0), 1);

> > +}

> > +

> > +static Notifier sbsa_ref_powerdown_notifier = {

> > +    .notify = sbsa_ref_powerdown_req

> > +};

> > +

> > +static void create_gpio(const SBSAMachineState *vms, qemu_irq *pic)

> > +{

> > +    DeviceState *pl061_dev;

> > +    hwaddr base = vms->memmap[SBSA_GPIO].base;

> > +    int irq = vms->irqmap[SBSA_GPIO];

> > +

> > +    pl061_dev = sysbus_create_simple("pl061", base, pic[irq]);

> > +

> > +    gpio_key_dev = sysbus_create_simple("gpio-key", -1,

> > +                                        qdev_get_gpio_in(pl061_dev, 3));

> > +

> > +    /* connect powerdown request */

> > +    qemu_register_powerdown_notifier(&sbsa_ref_powerdown_notifier);

> > +}

> > +

> > +static void create_ahci(const SBSAMachineState *vms, qemu_irq *pic)

> > +{

> > +    hwaddr base = vms->memmap[SBSA_AHCI].base;

> > +    int irq = vms->irqmap[SBSA_AHCI];

> > +    DeviceState *dev;

> > +    DriveInfo *hd[NUM_SATA_PORTS];

> > +    SysbusAHCIState *sysahci;

> > +    AHCIState *ahci;

> > +    int i;

> > +

> > +    dev = qdev_create(NULL, "sysbus-ahci");

> > +    qdev_prop_set_uint32(dev, "num-ports", NUM_SATA_PORTS);

> > +    qdev_init_nofail(dev);

> > +    sysbus_mmio_map(SYS_BUS_DEVICE(dev), 0, base);

> > +    sysbus_connect_irq(SYS_BUS_DEVICE(dev), 0, pic[irq]);

> > +

> > +    sysahci = SYSBUS_AHCI(dev);

> > +    ahci = &sysahci->ahci;

> > +    ide_drive_get(hd, ARRAY_SIZE(hd));

> > +    for (i = 0; i < ahci->ports; i++) {

> > +        if (hd[i] == NULL) {

> > +            continue;

> > +        }

> > +        ide_create_drive(&ahci->dev[i].port, 0, hd[i]);

> > +    }

> > +}

> > +

> > +static void create_ehci(const SBSAMachineState *vms, qemu_irq *pic)

> > +{

> > +    hwaddr base = vms->memmap[SBSA_EHCI].base;

> > +    int irq = vms->irqmap[SBSA_EHCI];

> > +    USBBus *usb_bus;

> > +

> > +    sysbus_create_simple("platform-ehci-usb", base, pic[irq]);

> > +

> > +    usb_bus = usb_bus_find(-1);

> > +    usb_create_simple(usb_bus, "usb-kbd");

> > +    usb_create_simple(usb_bus, "usb-mouse");

> > +}

> > +

> > +static void create_smmu(const SBSAMachineState *vms, qemu_irq *pic,

> > +                        PCIBus *bus)

> > +{

> > +    hwaddr base = vms->memmap[SBSA_SMMU].base;

> > +    int irq =  vms->irqmap[SBSA_SMMU];

> > +    DeviceState *dev;

> > +    int i;

> > +

> > +    dev = qdev_create(NULL, "arm-smmuv3");

> > +

> > +    object_property_set_link(OBJECT(dev), OBJECT(bus), "primary-bus",

> > +                             &error_abort);

> > +    qdev_init_nofail(dev);

> > +    sysbus_mmio_map(SYS_BUS_DEVICE(dev), 0, base);

> > +    for (i = 0; i < NUM_SMMU_IRQS; i++) {

> > +        sysbus_connect_irq(SYS_BUS_DEVICE(dev), i, pic[irq + i]);

> > +    }

> > +}

> > +

> > +static void create_pcie(SBSAMachineState *vms, qemu_irq *pic)

> > +{

> > +    hwaddr base_ecam = vms->memmap[SBSA_PCIE_ECAM].base;

> > +    hwaddr size_ecam = vms->memmap[SBSA_PCIE_ECAM].size;

> > +    hwaddr base_mmio = vms->memmap[SBSA_PCIE_MMIO].base;

> > +    hwaddr size_mmio = vms->memmap[SBSA_PCIE_MMIO].size;

> > +    hwaddr base_mmio_high = vms->memmap[SBSA_PCIE_MMIO_HIGH].base;

> > +    hwaddr size_mmio_high = vms->memmap[SBSA_PCIE_MMIO_HIGH].size;

> > +    hwaddr base_pio = vms->memmap[SBSA_PCIE_PIO].base;

> > +    int irq = vms->irqmap[SBSA_PCIE];

> > +    MemoryRegion *mmio_alias, *mmio_alias_high, *mmio_reg;

> > +    MemoryRegion *ecam_alias, *ecam_reg;

> > +    DeviceState *dev;

> > +    PCIHostState *pci;

> > +    int i;

> > +

> > +    dev = qdev_create(NULL, TYPE_GPEX_HOST);

> > +    qdev_init_nofail(dev);

> > +

> > +    /* Map ECAM space */

> > +    ecam_alias = g_new0(MemoryRegion, 1);

> > +    ecam_reg = sysbus_mmio_get_region(SYS_BUS_DEVICE(dev), 0);

> > +    memory_region_init_alias(ecam_alias, OBJECT(dev), "pcie-ecam",

> > +                             ecam_reg, 0, size_ecam);

> > +    memory_region_add_subregion(get_system_memory(), base_ecam, ecam_alias);

> > +

> > +    /* Map the MMIO space */

> > +    mmio_alias = g_new0(MemoryRegion, 1);

> > +    mmio_reg = sysbus_mmio_get_region(SYS_BUS_DEVICE(dev), 1);

> > +    memory_region_init_alias(mmio_alias, OBJECT(dev), "pcie-mmio",

> > +                             mmio_reg, base_mmio, size_mmio);

> > +    memory_region_add_subregion(get_system_memory(), base_mmio, mmio_alias);

> > +

> > +    /* Map the MMIO_HIGH space */

> > +    mmio_alias_high = g_new0(MemoryRegion, 1);

> > +    memory_region_init_alias(mmio_alias_high, OBJECT(dev), "pcie-mmio-high",

> > +                             mmio_reg, base_mmio_high, size_mmio_high);

> > +    memory_region_add_subregion(get_system_memory(), base_mmio_high,

> > +                                mmio_alias_high);

> > +

> > +    /* Map IO port space */

> > +    sysbus_mmio_map(SYS_BUS_DEVICE(dev), 2, base_pio);

> > +

> > +    for (i = 0; i < GPEX_NUM_IRQS; i++) {

> > +        sysbus_connect_irq(SYS_BUS_DEVICE(dev), i, pic[irq + i]);

> > +        gpex_set_irq_num(GPEX_HOST(dev), i, irq + i);

> > +    }

> > +

> > +    pci = PCI_HOST_BRIDGE(dev);

> > +    if (pci->bus) {

> > +        for (i = 0; i < nb_nics; i++) {

> > +            NICInfo *nd = &nd_table[i];

> > +

> > +            if (!nd->model) {

> > +                nd->model = g_strdup("e1000e");

> > +            }

> > +

> > +            pci_nic_init_nofail(nd, pci->bus, nd->model, NULL);

> > +        }

> > +    }

> > +

> > +    pci_create_simple(pci->bus, -1, "VGA");

> > +

> > +    create_smmu(vms, pic, pci->bus);

> > +}

> > +

> > +static void *sbsa_ref_dtb(const struct arm_boot_info *binfo, int *fdt_size)

> > +{

> > +    const SBSAMachineState *board = container_of(binfo, SBSAMachineState,

> > +                                                 bootinfo);

> > +

> > +    *fdt_size = board->fdt_size;

> > +    return board->fdt;

> > +}

> > +

> >  static void sbsa_ref_init(MachineState *machine)

> >  {

> >      SBSAMachineState *vms = SBSA_MACHINE(machine);

> > @@ -125,6 +552,7 @@ static void sbsa_ref_init(MachineState *machine)

> >      bool firmware_loaded = bios_name || drive_get(IF_PFLASH, 0, 0);

> >      const CPUArchIdList *possible_cpus;

> >      int n, sbsa_max_cpus;

> > +    qemu_irq pic[NUM_IRQS];

> >

> >      if (strcmp(machine->cpu_type, ARM_CPU_TYPE_NAME("cortex-a57"))) {

> >          error_report("sbsa-ref: CPU type other than the built-in "

> > @@ -209,11 +637,34 @@ static void sbsa_ref_init(MachineState *machine)

> >                                           machine->ram_size);

> >      memory_region_add_subregion(sysmem, vms->memmap[SBSA_MEM].base, ram);

> >

> > +    create_fdt(vms);

> > +

> > +    create_flash(vms, sysmem, secure_sysmem ? secure_sysmem : sysmem);

> > +

> > +    create_secure_ram(vms, secure_sysmem);

> > +

> > +    create_gic(vms, pic);

> > +

> > +    create_uart(vms, pic, SBSA_UART, sysmem, serial_hd(0));

> > +    create_uart(vms, pic, SBSA_SECURE_UART, secure_sysmem, serial_hd(1));

> > +    create_uart(vms, pic, SBSA_SECURE_UART_MM, secure_sysmem, serial_hd(2));

> > +

> > +    create_rtc(vms, pic);

> > +

> > +    create_gpio(vms, pic);

> > +

> > +    create_ahci(vms, pic);

> > +

> > +    create_ehci(vms, pic);

> > +

> > +    create_pcie(vms, pic);

> > +

> >      vms->bootinfo.ram_size = machine->ram_size;

> >      vms->bootinfo.kernel_filename = machine->kernel_filename;

> >      vms->bootinfo.nb_cpus = smp_cpus;

> >      vms->bootinfo.board_id = -1;

> >      vms->bootinfo.loader_start = vms->memmap[SBSA_MEM].base;

> > +    vms->bootinfo.get_dtb = sbsa_ref_dtb;

> >      vms->bootinfo.firmware_loaded = firmware_loaded;

> >      arm_load_kernel(ARM_CPU(first_cpu), &vms->bootinfo);

> >  }

> >
Philippe Mathieu-Daudé June 17, 2019, 11:08 a.m. UTC | #10
On 6/16/19 1:41 PM, Hongbo Zhang wrote:
> On Mon, 3 Jun 2019 at 18:54, Philippe Mathieu-Daudé <philmd@redhat.com> wrote:

>>

>> Hi Hongbo, Ard.

>>

>> On 4/18/19 6:04 AM, Hongbo Zhang wrote:

>>> Following the previous patch, this patch adds peripheral devices to the

>>> newly introduced SBSA-ref machine.

>>>

>>> Signed-off-by: Hongbo Zhang <hongbo.zhang@linaro.org>

>>> ---

>>>  hw/arm/sbsa-ref.c | 451 ++++++++++++++++++++++++++++++++++++++++++++++++++++++

>>>  1 file changed, 451 insertions(+)

>>>

>>> diff --git a/hw/arm/sbsa-ref.c b/hw/arm/sbsa-ref.c

[...]
>>> +static void create_one_flash(const char *name, hwaddr flashbase,

>>> +                             hwaddr flashsize, const char *file,

>>> +                             MemoryRegion *sysmem)

>>> +{

>>> +    /*

>>> +     * Create and map a single flash device. We use the same

>>> +     * parameters as the flash devices on the Versatile Express board.

>>> +     */

>>> +    DriveInfo *dinfo = drive_get_next(IF_PFLASH);

>>> +    DeviceState *dev = qdev_create(NULL, "cfi.pflash01");

>>

>> Please use TYPE_PFLASH_CFI01 instead of "cfi.pflash01".

>>

>> I wanted to ask "does it has to be CFI01?" because this device model is

>> in bad shape, but I guess I answered myself looking at the EDK2 platform

>> code:

>>

>> - P30_CFI_ADDR_VENDOR_ID is not used

>> - NorFlashDxe::NorFlashReadCfiData() is not implemented

>> - All commands in NorFlashDxe uses:

>>     SEND_NOR_COMMAND(..., P30_CMD_...)

>>   which are specific to the Intel P30 Nor flash family (CFI01).

>>

>>> +    SysBusDevice *sbd = SYS_BUS_DEVICE(dev);

>>> +    const uint64_t sectorlength = 256 * 1024;

>>> +

>>> +    if (dinfo) {

>>> +        qdev_prop_set_drive(dev, "drive", blk_by_legacy_dinfo(dinfo),

>>> +                            &error_abort);

>>> +    }

>>> +

>>> +    qdev_prop_set_uint32(dev, "num-blocks", flashsize / sectorlength);

>>> +    qdev_prop_set_uint64(dev, "sector-length", sectorlength);

>>> +    qdev_prop_set_uint8(dev, "width", 4);

>>> +    qdev_prop_set_uint8(dev, "device-width", 2);

>>> +    qdev_prop_set_bit(dev, "big-endian", false);

>>> +    qdev_prop_set_uint16(dev, "id0", 0x89);

>>> +    qdev_prop_set_uint16(dev, "id1", 0x18);

>>> +    qdev_prop_set_uint16(dev, "id2", 0x00);

>>> +    qdev_prop_set_uint16(dev, "id3", 0x00);

>>> +    qdev_prop_set_string(dev, "name", name);

>>> +    qdev_init_nofail(dev);

>>> +

>>> +    memory_region_add_subregion(sysmem, flashbase,

>>> +                                sysbus_mmio_get_region(SYS_BUS_DEVICE(dev), 0));

>>> +

>>> +    if (file) {

>>> +        char *fn;

>>> +        int image_size;

>>> +

>>> +        if (drive_get(IF_PFLASH, 0, 0)) {

>>> +            error_report("The contents of the first flash device may be "

>>> +                         "specified with -bios or with -drive if=pflash... "

>>> +                         "but you cannot use both options at once");

>>> +            exit(1);

>>> +        }

>>> +        fn = qemu_find_file(QEMU_FILE_TYPE_BIOS, file);

>>> +        if (!fn) {

>>> +            error_report("Could not find ROM image '%s'", file);

>>> +            exit(1);

>>> +        }

>>> +        image_size = load_image_mr(fn, sysbus_mmio_get_region(sbd, 0));

>>> +        g_free(fn);

>>> +        if (image_size < 0) {

>>> +            error_report("Could not load ROM image '%s'", file);

>>> +            exit(1);

>>> +        }

>>> +    }

>>> +}

>>> +

>>> +static void create_flash(const SBSAMachineState *vms,

>>> +                         MemoryRegion *sysmem,

>>> +                         MemoryRegion *secure_sysmem)

>>> +{

>>> +    /*

>>> +     * Create one secure and nonsecure flash devices to fill SBSA_FLASH

>>> +     * space in the memmap, file passed via -bios goes in the first one.

>>> +     */

>>> +    hwaddr flashsize = vms->memmap[SBSA_FLASH].size / 2;

>>> +    hwaddr flashbase = vms->memmap[SBSA_FLASH].base;

>>> +

>>> +    create_one_flash("sbsa-ref.flash0", flashbase, flashsize,

>>> +                     bios_name, secure_sysmem);

>>> +    create_one_flash("sbsa-ref.flash1", flashbase + flashsize, flashsize,

>>> +                     NULL, sysmem);

>>

>> static const MemMapEntry base_memmap[] = {

>>     /* Space up to 0x8000000 is reserved for a boot ROM */

>>     [VIRT_FLASH] =              {          0, 0x08000000 },

>>

> Hi Philippe,

> Thank you for the long comments.

> Some parts of this machine are based on the 'virt' machine, but I use

> this flash memory map:

> [SBSA_FLASH] =              {          0, 0x20000000 },

> that are 256M *2 flashes.

> Franky I didn't consider the product part number etc, just use the

> original design in 'virt' and change the size large enough as I think.


I guess we are very lucky... The Micron PC28F00BP33EF is a 2Gib
symmetrical blocks NOR flash, and the only CFI01 one I could find a
datasheet :)

"The 2Gb device employs a virtual chip enable feature, which combines
two 1Gb die with a common chip enable".

> Peter, Ard, do we need more considerations here?

> 

>> So you are creating 2 identical flashes of 128MiB/2 = 64 MiB each which

>> are the biggest flash you can have:

>>

>> "The P30 family provides density upgrades from 64-Mbit through

>> 512-Mbit." On Intel, the 512-Mib case is particular in that it is built

>> of 2x 256-Mib on the same die, with a virtual chip enable. It is simpler

>> to use a Micron or Numonyx model.

>>

>> I plan to use a whitelist of supported (and tested...) models, the one

>> you use seems the Micron JS28F512P30EF ('E' for 'Symetrically Blocked',

>> since the current model doesn't support bottom/top blocks layout), or in

>> short: 28F512P30E.

>> Ard, is that OK?

>>

>> Checking EDK2 git history, the driver is part of ArmPlatformPkg,

>> imported in commit 1d5d0ae92d9541, based on 'Versatile Express'.

>>

>> On the Versatile Express and the RealView Emulation Baseboard user

>> guides, I only find reference of "64MB of NOR flash" with no specific model.

>>

>> Peter, do you have physical access to tell me what flashes are used on

>> real hardware? I googled for Linux console boot log but the kernel

>> doesn't seem to care about detecting/mapping the flash.

>>

>> QEMU added the flash to the Versatile board in commit 964c695a54ceda3a,

>> with the following description:

>>

>>     - add support for the 64MB NOR CFI01 flash available at

>>     0x34000000 on the versatilepb board

>>

>> http://infocenter.arm.com/help/index.jsp?topic=/com.arm.doc.dui0225d/BBAJIHEC.html

>>

>> However on this link I only see "SSMC Chip Select 1, normally NOR flash

>> (During boot remapping, this can be NOR flash, Disk-on-Chip, or static

>> expansion memory)". Again, nothing specific (which makes sense, why

>> restrict the users to a particuliar family, as long as the pinout matches).

>>

>> The Manufacturer/Device ID used in QEMU (0x0089, 0x0018) correspond to

>> the Micron 28F128J3D (128-Mbit, 128 symmetrical blocks of 128-KiB).

>> Neither the flash size (64 vs 16) nor the block size (256 vs 128) match.

>>

>> The safer fix here is to find a CFI01 flash of 256 sectors of 256-KiB

>> and update the Manufacturer/Device IDs in QEMU. Luckily this matches the

>> 28F512P30E cited previously :)

>>

>> Regards,

>>

>> Phil.

[...]
diff mbox series

Patch

diff --git a/hw/arm/sbsa-ref.c b/hw/arm/sbsa-ref.c
index 652ec13..3fb0027 100644
--- a/hw/arm/sbsa-ref.c
+++ b/hw/arm/sbsa-ref.c
@@ -21,6 +21,7 @@ 
 #include "qapi/error.h"
 #include "qemu/error-report.h"
 #include "qemu/units.h"
+#include "sysemu/device_tree.h"
 #include "sysemu/numa.h"
 #include "sysemu/sysemu.h"
 #include "exec/address-spaces.h"
@@ -28,11 +29,28 @@ 
 #include "kvm_arm.h"
 #include "hw/arm/arm.h"
 #include "hw/boards.h"
+#include "hw/ide/internal.h"
+#include "hw/ide/ahci_internal.h"
 #include "hw/intc/arm_gicv3_common.h"
+#include "hw/loader.h"
+#include "hw/pci-host/gpex.h"
+#include "hw/usb.h"
+#include "net/net.h"
 
 #define RAMLIMIT_GB 8192
 #define RAMLIMIT_BYTES (RAMLIMIT_GB * GiB)
 
+#define NUM_IRQS        256
+#define NUM_SMMU_IRQS   4
+#define NUM_SATA_PORTS  6
+
+#define VIRTUAL_PMU_IRQ        7
+#define ARCH_GIC_MAINT_IRQ     9
+#define ARCH_TIMER_VIRT_IRQ    11
+#define ARCH_TIMER_S_EL1_IRQ   13
+#define ARCH_TIMER_NS_EL1_IRQ  14
+#define ARCH_TIMER_NS_EL2_IRQ  10
+
 enum {
     SBSA_FLASH,
     SBSA_MEM,
@@ -115,6 +133,415 @@  static const int sbsa_ref_irqmap[] = {
     [SBSA_EHCI] = 11,
 };
 
+/*
+ * Firmware on this machine only uses ACPI table to load OS, these limited
+ * device tree nodes are just to let firmware know the info which varies from
+ * command line parameters, so it is not necessary to be fully compatible
+ * with the kernel CPU and NUMA binding rules.
+ */
+static void create_fdt(SBSAMachineState *vms)
+{
+    void *fdt = create_device_tree(&vms->fdt_size);
+    const MachineState *ms = MACHINE(vms);
+    int cpu;
+
+    if (!fdt) {
+        error_report("create_device_tree() failed");
+        exit(1);
+    }
+
+    vms->fdt = fdt;
+
+    qemu_fdt_setprop_string(fdt, "/", "compatible", "linux,sbsa-ref");
+    qemu_fdt_setprop_cell(fdt, "/", "#address-cells", 0x2);
+    qemu_fdt_setprop_cell(fdt, "/", "#size-cells", 0x2);
+
+    if (have_numa_distance) {
+        int size = nb_numa_nodes * nb_numa_nodes * 3 * sizeof(uint32_t);
+        uint32_t *matrix = g_malloc0(size);
+        int idx, i, j;
+
+        for (i = 0; i < nb_numa_nodes; i++) {
+            for (j = 0; j < nb_numa_nodes; j++) {
+                idx = (i * nb_numa_nodes + j) * 3;
+                matrix[idx + 0] = cpu_to_be32(i);
+                matrix[idx + 1] = cpu_to_be32(j);
+                matrix[idx + 2] = cpu_to_be32(numa_info[i].distance[j]);
+            }
+        }
+
+        qemu_fdt_add_subnode(fdt, "/distance-map");
+        qemu_fdt_setprop(fdt, "/distance-map", "distance-matrix",
+                         matrix, size);
+        g_free(matrix);
+    }
+
+    qemu_fdt_add_subnode(vms->fdt, "/cpus");
+
+    for (cpu = vms->smp_cpus - 1; cpu >= 0; cpu--) {
+        char *nodename = g_strdup_printf("/cpus/cpu@%d", cpu);
+        ARMCPU *armcpu = ARM_CPU(qemu_get_cpu(cpu));
+        CPUState *cs = CPU(armcpu);
+
+        qemu_fdt_add_subnode(vms->fdt, nodename);
+
+        if (ms->possible_cpus->cpus[cs->cpu_index].props.has_node_id) {
+            qemu_fdt_setprop_cell(vms->fdt, nodename, "numa-node-id",
+                ms->possible_cpus->cpus[cs->cpu_index].props.node_id);
+        }
+
+        g_free(nodename);
+    }
+}
+
+static void create_one_flash(const char *name, hwaddr flashbase,
+                             hwaddr flashsize, const char *file,
+                             MemoryRegion *sysmem)
+{
+    /*
+     * Create and map a single flash device. We use the same
+     * parameters as the flash devices on the Versatile Express board.
+     */
+    DriveInfo *dinfo = drive_get_next(IF_PFLASH);
+    DeviceState *dev = qdev_create(NULL, "cfi.pflash01");
+    SysBusDevice *sbd = SYS_BUS_DEVICE(dev);
+    const uint64_t sectorlength = 256 * 1024;
+
+    if (dinfo) {
+        qdev_prop_set_drive(dev, "drive", blk_by_legacy_dinfo(dinfo),
+                            &error_abort);
+    }
+
+    qdev_prop_set_uint32(dev, "num-blocks", flashsize / sectorlength);
+    qdev_prop_set_uint64(dev, "sector-length", sectorlength);
+    qdev_prop_set_uint8(dev, "width", 4);
+    qdev_prop_set_uint8(dev, "device-width", 2);
+    qdev_prop_set_bit(dev, "big-endian", false);
+    qdev_prop_set_uint16(dev, "id0", 0x89);
+    qdev_prop_set_uint16(dev, "id1", 0x18);
+    qdev_prop_set_uint16(dev, "id2", 0x00);
+    qdev_prop_set_uint16(dev, "id3", 0x00);
+    qdev_prop_set_string(dev, "name", name);
+    qdev_init_nofail(dev);
+
+    memory_region_add_subregion(sysmem, flashbase,
+                                sysbus_mmio_get_region(SYS_BUS_DEVICE(dev), 0));
+
+    if (file) {
+        char *fn;
+        int image_size;
+
+        if (drive_get(IF_PFLASH, 0, 0)) {
+            error_report("The contents of the first flash device may be "
+                         "specified with -bios or with -drive if=pflash... "
+                         "but you cannot use both options at once");
+            exit(1);
+        }
+        fn = qemu_find_file(QEMU_FILE_TYPE_BIOS, file);
+        if (!fn) {
+            error_report("Could not find ROM image '%s'", file);
+            exit(1);
+        }
+        image_size = load_image_mr(fn, sysbus_mmio_get_region(sbd, 0));
+        g_free(fn);
+        if (image_size < 0) {
+            error_report("Could not load ROM image '%s'", file);
+            exit(1);
+        }
+    }
+}
+
+static void create_flash(const SBSAMachineState *vms,
+                         MemoryRegion *sysmem,
+                         MemoryRegion *secure_sysmem)
+{
+    /*
+     * Create one secure and nonsecure flash devices to fill SBSA_FLASH
+     * space in the memmap, file passed via -bios goes in the first one.
+     */
+    hwaddr flashsize = vms->memmap[SBSA_FLASH].size / 2;
+    hwaddr flashbase = vms->memmap[SBSA_FLASH].base;
+
+    create_one_flash("sbsa-ref.flash0", flashbase, flashsize,
+                     bios_name, secure_sysmem);
+    create_one_flash("sbsa-ref.flash1", flashbase + flashsize, flashsize,
+                     NULL, sysmem);
+}
+
+static void create_secure_ram(SBSAMachineState *vms,
+                              MemoryRegion *secure_sysmem)
+{
+    MemoryRegion *secram = g_new(MemoryRegion, 1);
+    hwaddr base = vms->memmap[SBSA_SECURE_MEM].base;
+    hwaddr size = vms->memmap[SBSA_SECURE_MEM].size;
+
+    memory_region_init_ram(secram, NULL, "sbsa-ref.secure-ram", size,
+                           &error_fatal);
+    memory_region_add_subregion(secure_sysmem, base, secram);
+}
+
+static void create_gic(SBSAMachineState *vms, qemu_irq *pic)
+{
+    DeviceState *gicdev;
+    SysBusDevice *gicbusdev;
+    const char *gictype;
+    uint32_t redist0_capacity, redist0_count;
+    int i;
+
+    gictype = gicv3_class_name();
+
+    gicdev = qdev_create(NULL, gictype);
+    qdev_prop_set_uint32(gicdev, "revision", 3);
+    qdev_prop_set_uint32(gicdev, "num-cpu", smp_cpus);
+    /*
+     * Note that the num-irq property counts both internal and external
+     * interrupts; there are always 32 of the former (mandated by GIC spec).
+     */
+    qdev_prop_set_uint32(gicdev, "num-irq", NUM_IRQS + 32);
+    qdev_prop_set_bit(gicdev, "has-security-extensions", true);
+
+    redist0_capacity =
+                vms->memmap[SBSA_GIC_REDIST].size / GICV3_REDIST_SIZE;
+    redist0_count = MIN(smp_cpus, redist0_capacity);
+
+    qdev_prop_set_uint32(gicdev, "len-redist-region-count", 1);
+    qdev_prop_set_uint32(gicdev, "redist-region-count[0]", redist0_count);
+
+    qdev_init_nofail(gicdev);
+    gicbusdev = SYS_BUS_DEVICE(gicdev);
+    sysbus_mmio_map(gicbusdev, 0, vms->memmap[SBSA_GIC_DIST].base);
+    sysbus_mmio_map(gicbusdev, 1, vms->memmap[SBSA_GIC_REDIST].base);
+
+    /*
+     * Wire the outputs from each CPU's generic timer and the GICv3
+     * maintenance interrupt signal to the appropriate GIC PPI inputs,
+     * and the GIC's IRQ/FIQ/VIRQ/VFIQ interrupt outputs to the CPU's inputs.
+     */
+    for (i = 0; i < smp_cpus; i++) {
+        DeviceState *cpudev = DEVICE(qemu_get_cpu(i));
+        int ppibase = NUM_IRQS + i * GIC_INTERNAL + GIC_NR_SGIS;
+        int irq;
+        /*
+         * Mapping from the output timer irq lines from the CPU to the
+         * GIC PPI inputs used for this board.
+         */
+        const int timer_irq[] = {
+            [GTIMER_PHYS] = ARCH_TIMER_NS_EL1_IRQ,
+            [GTIMER_VIRT] = ARCH_TIMER_VIRT_IRQ,
+            [GTIMER_HYP]  = ARCH_TIMER_NS_EL2_IRQ,
+            [GTIMER_SEC]  = ARCH_TIMER_S_EL1_IRQ,
+        };
+
+        for (irq = 0; irq < ARRAY_SIZE(timer_irq); irq++) {
+            qdev_connect_gpio_out(cpudev, irq,
+                                  qdev_get_gpio_in(gicdev,
+                                                   ppibase + timer_irq[irq]));
+        }
+
+        qdev_connect_gpio_out_named(cpudev, "gicv3-maintenance-interrupt", 0,
+                                    qdev_get_gpio_in(gicdev, ppibase
+                                                     + ARCH_GIC_MAINT_IRQ));
+        qdev_connect_gpio_out_named(cpudev, "pmu-interrupt", 0,
+                                    qdev_get_gpio_in(gicdev, ppibase
+                                                     + VIRTUAL_PMU_IRQ));
+
+        sysbus_connect_irq(gicbusdev, i, qdev_get_gpio_in(cpudev, ARM_CPU_IRQ));
+        sysbus_connect_irq(gicbusdev, i + smp_cpus,
+                           qdev_get_gpio_in(cpudev, ARM_CPU_FIQ));
+        sysbus_connect_irq(gicbusdev, i + 2 * smp_cpus,
+                           qdev_get_gpio_in(cpudev, ARM_CPU_VIRQ));
+        sysbus_connect_irq(gicbusdev, i + 3 * smp_cpus,
+                           qdev_get_gpio_in(cpudev, ARM_CPU_VFIQ));
+    }
+
+    for (i = 0; i < NUM_IRQS; i++) {
+        pic[i] = qdev_get_gpio_in(gicdev, i);
+    }
+}
+
+static void create_uart(const SBSAMachineState *vms, qemu_irq *pic, int uart,
+                        MemoryRegion *mem, Chardev *chr)
+{
+    hwaddr base = vms->memmap[uart].base;
+    int irq = vms->irqmap[uart];
+    DeviceState *dev = qdev_create(NULL, "pl011");
+    SysBusDevice *s = SYS_BUS_DEVICE(dev);
+
+    qdev_prop_set_chr(dev, "chardev", chr);
+    qdev_init_nofail(dev);
+    memory_region_add_subregion(mem, base,
+                                sysbus_mmio_get_region(s, 0));
+    sysbus_connect_irq(s, 0, pic[irq]);
+}
+
+static void create_rtc(const SBSAMachineState *vms, qemu_irq *pic)
+{
+    hwaddr base = vms->memmap[SBSA_RTC].base;
+    int irq = vms->irqmap[SBSA_RTC];
+
+    sysbus_create_simple("pl031", base, pic[irq]);
+}
+
+static DeviceState *gpio_key_dev;
+static void sbsa_ref_powerdown_req(Notifier *n, void *opaque)
+{
+    /* use gpio Pin 3 for power button event */
+    qemu_set_irq(qdev_get_gpio_in(gpio_key_dev, 0), 1);
+}
+
+static Notifier sbsa_ref_powerdown_notifier = {
+    .notify = sbsa_ref_powerdown_req
+};
+
+static void create_gpio(const SBSAMachineState *vms, qemu_irq *pic)
+{
+    DeviceState *pl061_dev;
+    hwaddr base = vms->memmap[SBSA_GPIO].base;
+    int irq = vms->irqmap[SBSA_GPIO];
+
+    pl061_dev = sysbus_create_simple("pl061", base, pic[irq]);
+
+    gpio_key_dev = sysbus_create_simple("gpio-key", -1,
+                                        qdev_get_gpio_in(pl061_dev, 3));
+
+    /* connect powerdown request */
+    qemu_register_powerdown_notifier(&sbsa_ref_powerdown_notifier);
+}
+
+static void create_ahci(const SBSAMachineState *vms, qemu_irq *pic)
+{
+    hwaddr base = vms->memmap[SBSA_AHCI].base;
+    int irq = vms->irqmap[SBSA_AHCI];
+    DeviceState *dev;
+    DriveInfo *hd[NUM_SATA_PORTS];
+    SysbusAHCIState *sysahci;
+    AHCIState *ahci;
+    int i;
+
+    dev = qdev_create(NULL, "sysbus-ahci");
+    qdev_prop_set_uint32(dev, "num-ports", NUM_SATA_PORTS);
+    qdev_init_nofail(dev);
+    sysbus_mmio_map(SYS_BUS_DEVICE(dev), 0, base);
+    sysbus_connect_irq(SYS_BUS_DEVICE(dev), 0, pic[irq]);
+
+    sysahci = SYSBUS_AHCI(dev);
+    ahci = &sysahci->ahci;
+    ide_drive_get(hd, ARRAY_SIZE(hd));
+    for (i = 0; i < ahci->ports; i++) {
+        if (hd[i] == NULL) {
+            continue;
+        }
+        ide_create_drive(&ahci->dev[i].port, 0, hd[i]);
+    }
+}
+
+static void create_ehci(const SBSAMachineState *vms, qemu_irq *pic)
+{
+    hwaddr base = vms->memmap[SBSA_EHCI].base;
+    int irq = vms->irqmap[SBSA_EHCI];
+    USBBus *usb_bus;
+
+    sysbus_create_simple("platform-ehci-usb", base, pic[irq]);
+
+    usb_bus = usb_bus_find(-1);
+    usb_create_simple(usb_bus, "usb-kbd");
+    usb_create_simple(usb_bus, "usb-mouse");
+}
+
+static void create_smmu(const SBSAMachineState *vms, qemu_irq *pic,
+                        PCIBus *bus)
+{
+    hwaddr base = vms->memmap[SBSA_SMMU].base;
+    int irq =  vms->irqmap[SBSA_SMMU];
+    DeviceState *dev;
+    int i;
+
+    dev = qdev_create(NULL, "arm-smmuv3");
+
+    object_property_set_link(OBJECT(dev), OBJECT(bus), "primary-bus",
+                             &error_abort);
+    qdev_init_nofail(dev);
+    sysbus_mmio_map(SYS_BUS_DEVICE(dev), 0, base);
+    for (i = 0; i < NUM_SMMU_IRQS; i++) {
+        sysbus_connect_irq(SYS_BUS_DEVICE(dev), i, pic[irq + i]);
+    }
+}
+
+static void create_pcie(SBSAMachineState *vms, qemu_irq *pic)
+{
+    hwaddr base_ecam = vms->memmap[SBSA_PCIE_ECAM].base;
+    hwaddr size_ecam = vms->memmap[SBSA_PCIE_ECAM].size;
+    hwaddr base_mmio = vms->memmap[SBSA_PCIE_MMIO].base;
+    hwaddr size_mmio = vms->memmap[SBSA_PCIE_MMIO].size;
+    hwaddr base_mmio_high = vms->memmap[SBSA_PCIE_MMIO_HIGH].base;
+    hwaddr size_mmio_high = vms->memmap[SBSA_PCIE_MMIO_HIGH].size;
+    hwaddr base_pio = vms->memmap[SBSA_PCIE_PIO].base;
+    int irq = vms->irqmap[SBSA_PCIE];
+    MemoryRegion *mmio_alias, *mmio_alias_high, *mmio_reg;
+    MemoryRegion *ecam_alias, *ecam_reg;
+    DeviceState *dev;
+    PCIHostState *pci;
+    int i;
+
+    dev = qdev_create(NULL, TYPE_GPEX_HOST);
+    qdev_init_nofail(dev);
+
+    /* Map ECAM space */
+    ecam_alias = g_new0(MemoryRegion, 1);
+    ecam_reg = sysbus_mmio_get_region(SYS_BUS_DEVICE(dev), 0);
+    memory_region_init_alias(ecam_alias, OBJECT(dev), "pcie-ecam",
+                             ecam_reg, 0, size_ecam);
+    memory_region_add_subregion(get_system_memory(), base_ecam, ecam_alias);
+
+    /* Map the MMIO space */
+    mmio_alias = g_new0(MemoryRegion, 1);
+    mmio_reg = sysbus_mmio_get_region(SYS_BUS_DEVICE(dev), 1);
+    memory_region_init_alias(mmio_alias, OBJECT(dev), "pcie-mmio",
+                             mmio_reg, base_mmio, size_mmio);
+    memory_region_add_subregion(get_system_memory(), base_mmio, mmio_alias);
+
+    /* Map the MMIO_HIGH space */
+    mmio_alias_high = g_new0(MemoryRegion, 1);
+    memory_region_init_alias(mmio_alias_high, OBJECT(dev), "pcie-mmio-high",
+                             mmio_reg, base_mmio_high, size_mmio_high);
+    memory_region_add_subregion(get_system_memory(), base_mmio_high,
+                                mmio_alias_high);
+
+    /* Map IO port space */
+    sysbus_mmio_map(SYS_BUS_DEVICE(dev), 2, base_pio);
+
+    for (i = 0; i < GPEX_NUM_IRQS; i++) {
+        sysbus_connect_irq(SYS_BUS_DEVICE(dev), i, pic[irq + i]);
+        gpex_set_irq_num(GPEX_HOST(dev), i, irq + i);
+    }
+
+    pci = PCI_HOST_BRIDGE(dev);
+    if (pci->bus) {
+        for (i = 0; i < nb_nics; i++) {
+            NICInfo *nd = &nd_table[i];
+
+            if (!nd->model) {
+                nd->model = g_strdup("e1000e");
+            }
+
+            pci_nic_init_nofail(nd, pci->bus, nd->model, NULL);
+        }
+    }
+
+    pci_create_simple(pci->bus, -1, "VGA");
+
+    create_smmu(vms, pic, pci->bus);
+}
+
+static void *sbsa_ref_dtb(const struct arm_boot_info *binfo, int *fdt_size)
+{
+    const SBSAMachineState *board = container_of(binfo, SBSAMachineState,
+                                                 bootinfo);
+
+    *fdt_size = board->fdt_size;
+    return board->fdt;
+}
+
 static void sbsa_ref_init(MachineState *machine)
 {
     SBSAMachineState *vms = SBSA_MACHINE(machine);
@@ -125,6 +552,7 @@  static void sbsa_ref_init(MachineState *machine)
     bool firmware_loaded = bios_name || drive_get(IF_PFLASH, 0, 0);
     const CPUArchIdList *possible_cpus;
     int n, sbsa_max_cpus;
+    qemu_irq pic[NUM_IRQS];
 
     if (strcmp(machine->cpu_type, ARM_CPU_TYPE_NAME("cortex-a57"))) {
         error_report("sbsa-ref: CPU type other than the built-in "
@@ -209,11 +637,34 @@  static void sbsa_ref_init(MachineState *machine)
                                          machine->ram_size);
     memory_region_add_subregion(sysmem, vms->memmap[SBSA_MEM].base, ram);
 
+    create_fdt(vms);
+
+    create_flash(vms, sysmem, secure_sysmem ? secure_sysmem : sysmem);
+
+    create_secure_ram(vms, secure_sysmem);
+
+    create_gic(vms, pic);
+
+    create_uart(vms, pic, SBSA_UART, sysmem, serial_hd(0));
+    create_uart(vms, pic, SBSA_SECURE_UART, secure_sysmem, serial_hd(1));
+    create_uart(vms, pic, SBSA_SECURE_UART_MM, secure_sysmem, serial_hd(2));
+
+    create_rtc(vms, pic);
+
+    create_gpio(vms, pic);
+
+    create_ahci(vms, pic);
+
+    create_ehci(vms, pic);
+
+    create_pcie(vms, pic);
+
     vms->bootinfo.ram_size = machine->ram_size;
     vms->bootinfo.kernel_filename = machine->kernel_filename;
     vms->bootinfo.nb_cpus = smp_cpus;
     vms->bootinfo.board_id = -1;
     vms->bootinfo.loader_start = vms->memmap[SBSA_MEM].base;
+    vms->bootinfo.get_dtb = sbsa_ref_dtb;
     vms->bootinfo.firmware_loaded = firmware_loaded;
     arm_load_kernel(ARM_CPU(first_cpu), &vms->bootinfo);
 }