Refactor manager to start AMD SEV encrypted VM

Signed-off-by: Darko Draskovic <darko.draskovic@gmail.com>

cmd/manager/script/launch-qemu.sh

@@ -0,0 +1,189 @@
+#!/bin/bash
+
+#
+# user changeable parameters
+#
+HDA_FILE="${HOME}/ubuntu-18.04-desktop.qcow2"
+GUEST_SIZE_IN_MB="4096"
+SEV_GUEST="1"
+SMP_NCPUS="4"
+CONSOLE="qxl"
+QEMU_INSTALL_DIR=/usr/local/bin/
+UEFI_BIOS_CODE="/usr/local/share/qemu/OVMF_CODE.fd"
+UEFI_BIOS_VARS="OVMF_VARS.fd"
+#VNC_PORT=""
+USE_VIRTIO="1"
+
+CBITPOS=51
+
+usage() {
+	echo "$0 [options]"
+	echo "Available <commands>:"
+	echo " -hda          hard disk ($HDA_FILE)"
+	echo " -nosev        disable sev support"
+	echo " -mem          guest memory"
+	echo " -smp          number of cpus"
+	echo " -console      display console to use (serial or gxl)"
+	echo " -vnc          VNC port to use"
+	echo " -bios         bios to use (default $UEFI_BIOS_CODE)"
+	echo " -kernel       kernel to use"
+	echo " -initrd       initrd to use"
+	echo " -cdrom        CDROM image"
+	echo " -virtio       use virtio devices"
+	echo " -gdb          start gdbserver"
+	exit 1
+}
+
+add_opts() {
+	echo -n "$* " >> ${QEMU_CMDLINE}
+}
+
+run_cmd() {
+  if ! "$@"; then
+    echo "Command '$*' failed"
+    exit 1
+  fi
+}
+
+if [ "$(id -u)" -ne 0 ]; then
+  echo "This script must be run as root!"
+  exit 1
+fi
+
+while [[ $1 != "" ]]; do
+	case "$1" in
+		-hda) 		HDA_FILE="${2}"
+				shift
+				;;
+		-nosev) 	SEV_GUEST="0"
+				;;
+		-mem)  		GUEST_SIZE_IN_MB=${2}
+				shift
+				;;
+		-console)	CONSOLE=${2}
+				shift
+				;;
+		-smp)		SMP_NCPUS=$2
+				shift
+				;;
+		-vnc)		VNC_PORT=$2
+				shift
+				if [ "${VNC_PORT}" = "" ]; then
+					usage
+				fi
+				;;
+		-bios)		UEFI_BIOS_CODE="`readlink -f $2`"
+				shift
+				;;
+		-netconsole)	NETCONSOLE_PORT=$2
+				shift
+				;;
+		-initrd)	INITRD_FILE=$2
+				shift
+				;;
+		-kernel)	KERNEL_FILE=$2
+				shift
+				;;
+		-cdrom)		CDROM_FILE=$2
+				shift
+				;;
+		-virtio)        USE_VIRTIO="1"
+				;;
+		-gdb)      	USE_GDB="1"
+				;;
+		*) 		usage;;
+	esac
+	shift
+done
+
+# we add all the qemu command line options into a file
+QEMU_CMDLINE=/tmp/cmdline.$$
+rm -rf ${QEMU_CMDLINE}
+
+add_opts "${QEMU_INSTALL_DIR}qemu-system-x86_64"
+
+# Basic virtual machine property
+add_opts "-enable-kvm -cpu EPYC -machine q35"
+
+# add number of VCPUs
+[ ! -z ${SMP_NCPUS} ] && add_opts "-smp ${SMP_NCPUS},maxcpus=64"
+
+# define guest memory
+add_opts "-m ${GUEST_SIZE_IN_MB}M,slots=5,maxmem=30G"
+
+# The OVMF binary, including the non-volatile variable store, appears as a
+# "normal" qemu drive on the host side, and it is exposed to the guest as a
+# persistent flash device.
+add_opts "-drive if=pflash,format=raw,unit=0,file=${UEFI_BIOS_CODE},readonly"
+add_opts "-drive if=pflash,format=raw,unit=1,file=${UEFI_BIOS_VARS}"
+
+# add CDROM if specified
+[ ! -z ${CDROM_FILE} ] && add_opts "-drive file=${CDROM_FILE},media=cdrom -boot d"
+
+add_opts "-netdev user,id=vmnic,hostfwd=tcp::2222-:22,hostfwd=tcp::9301-:9031,hostfwd=tcp::7020-:7002"
+add_opts "-device virtio-net-pci,disable-legacy=on,iommu_platform=true,netdev=vmnic,romfile="
+
+# If harddisk file is specified then add the HDD drive
+if [ ! -z ${HDA_FILE} ]; then
+	if [ "$USE_VIRTIO" = "1" ]; then
+		if [[ ${HDA_FILE} = *"qcow2" ]]; then
+			add_opts "-drive file=${HDA_FILE},if=none,id=disk0,format=qcow2"
+		else
+			add_opts "-drive file=${HDA_FILE},if=none,id=disk0,format=raw"
+		fi
+		add_opts "-device virtio-scsi-pci,id=scsi,disable-legacy=on,iommu_platform=true"
+		add_opts "-device scsi-hd,drive=disk0"
+	else
+		if [[ ${HDA_FILE} = *"qcow2" ]]; then
+			add_opts "-drive file=${HDA_FILE},format=qcow2"
+		else
+			add_opts "-drive file=${HDA_FILE},format=raw"
+		fi
+	fi
+fi
+
+# If this is SEV guest then add the encryption device objects to enable support
+if [ ${SEV_GUEST} = "1" ]; then
+	add_opts "-object sev-guest,id=sev0,cbitpos=${CBITPOS},reduced-phys-bits=1"
+	add_opts "-machine memory-encryption=sev0"
+fi
+
+# if console is serial then disable graphical interface
+if [ "${CONSOLE}" = "serial" ]; then
+	add_opts "-nographic"
+else
+	add_opts "-vga ${CONSOLE}"
+fi
+
+# if -kernel arg is specified then use the kernel provided in command line for boot
+if [ "${KERNEL_FILE}" != "" ]; then
+	add_opts "-kernel $KERNEL_FILE"
+	add_opts "-append \"console=ttyS0 earlyprintk=serial root=/dev/sda2\""
+	[ ! -z ${INITRD_FILE} ] && add_opts "-initrd ${INITRD_FILE}"
+fi
+
+# start vnc server
+[ ! -z ${VNC_PORT} ] && add_opts "-vnc :${VNC_PORT}" && echo "Starting VNC on port ${VNC_PORT}"
+
+# start monitor on pty
+add_opts "-monitor pty"
+
+# log the console  output in stdout.log
+QEMU_CONSOLE_LOG=`pwd`/stdout.log
+
+# save the command line args into log file
+cat $QEMU_CMDLINE | tee ${QEMU_CONSOLE_LOG}
+echo | tee -a ${QEMU_CONSOLE_LOG}
+
+
+# map CTRL-C to CTRL ]
+echo "Mapping CTRL-C to CTRL-]"
+stty intr ^]
+
+echo "Launching VM ..."
+bash ${QEMU_CMDLINE} 2>&1 | tee -a ${QEMU_CONSOLE_LOG}
+
+# restore the mapping
+stty intr ^c
+
+rm -rf ${QEMU_CMDLINE}