/*      $NetBSD: acpi_vmgenid.c,v 1.3 2024/08/27 00:56:46 riastradh Exp $       */

/*-
* Copyright (c) 2024 The NetBSD Foundation, Inc.
* All rights reserved.
*
* Redistribution and use in source and binary forms, with or without
* modification, are permitted provided that the following conditions
* are met:
* 1. Redistributions of source code must retain the above copyright
*    notice, this list of conditions and the following disclaimer.
* 2. Redistributions in binary form must reproduce the above copyright
*    notice, this list of conditions and the following disclaimer in the
*    documentation and/or other materials provided with the distribution.
*
* THIS SOFTWARE IS PROVIDED BY THE NETBSD FOUNDATION, INC. AND CONTRIBUTORS
* ``AS IS'' AND ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED
* TO, THE IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR
* PURPOSE ARE DISCLAIMED.  IN NO EVENT SHALL THE FOUNDATION OR CONTRIBUTORS
* BE LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR
* CONSEQUENTIAL DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF
* SUBSTITUTE GOODS OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS
* INTERRUPTION) HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN
* CONTRACT, STRICT LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE)
* ARISING IN ANY WAY OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE
* POSSIBILITY OF SUCH DAMAGE.
*/

/*
* Virtual Machine Generation ID
*
*      The VMGENID is an 8-byte cookie shared between a VM host and VM
*      guest.  Whenever the host clones a VM, it changes the VMGENID
*      and sends an ACPI notification to the guest.
*
* References:
*
*      `Virtual Machine Generation ID', Microsoft, 2012-08-01.
*      http://go.microsoft.com/fwlink/?LinkId=260709
*
*      `Virtual Machine Generation ID Device', The QEMU Project
*      Developers.
*      https://www.qemu.org/docs/master/specs/vmgenid.html
*/

#include <sys/cdefs.h>
__KERNEL_RCSID(0, "$NetBSD: acpi_vmgenid.c,v 1.3 2024/08/27 00:56:46 riastradh Exp $");

#include <sys/device.h>
#include <sys/entropy.h>
#include <sys/module.h>
#include <sys/rndsource.h>
#include <sys/sysctl.h>

#include <dev/acpi/acpireg.h>
#include <dev/acpi/acpivar.h>

#define _COMPONENT      ACPI_RESOURCE_COMPONENT
ACPI_MODULE_NAME        ("acpi_vmgenid")

struct acpivmgenid {
       uint8_t         id[16];
} __aligned(8);

struct acpivmgenid_softc {
       device_t                        sc_dev;
       struct acpi_devnode             *sc_node;
       uint64_t                        sc_paddr;
       struct acpivmgenid              *sc_vaddr;
       struct krndsource               sc_rndsource;
       struct sysctllog                *sc_sysctllog;
       const struct sysctlnode         *sc_sysctlroot;
};

static int acpivmgenid_match(device_t, cfdata_t, void *);
static void acpivmgenid_attach(device_t, device_t, void *);
static int acpivmgenid_detach(device_t, int);
static void acpivmgenid_set(struct acpivmgenid_softc *, const char *);
static void acpivmgenid_notify(ACPI_HANDLE, uint32_t, void *);
static void acpivmgenid_reset(void *);
static int acpivmgenid_sysctl(SYSCTLFN_ARGS);

static const struct device_compatible_entry compat_data[] = {
       { .compat = "VM_Gen_Counter" },         /* from the Microsoft spec */
       { .compat = "VM_GEN_COUNTER" },         /* used by qemu */
       { .compat = "VMGENCTR" },               /* recognized by Linux */
       DEVICE_COMPAT_EOL
};

CFATTACH_DECL_NEW(acpivmgenid, sizeof(struct acpivmgenid_softc),
   acpivmgenid_match, acpivmgenid_attach, acpivmgenid_detach, NULL);

static int
acpivmgenid_match(device_t parent, cfdata_t match, void *aux)
{
       const struct acpi_attach_args *const aa = aux;

       return acpi_compatible_match(aa, compat_data);
}

static void
acpivmgenid_attach(device_t parent, device_t self, void *aux)
{
       struct acpivmgenid_softc *const sc = device_private(self);
       const struct acpi_attach_args *const aa = aux;
       ACPI_BUFFER addrbuf = {
               .Pointer = NULL,
               .Length = ACPI_ALLOCATE_BUFFER,
       };
       ACPI_OBJECT *addrobj, *addrarr;
       ACPI_STATUS rv;
       int error;

       aprint_naive(": ACPI VM Generation ID\n");
       aprint_normal(": ACPI VM Generation ID\n");

       sc->sc_dev = self;
       sc->sc_node = aa->aa_node;

       /*
        * Get the address from the ADDR object, which is a package of
        * two 32-bit integers representing the low and high halves of
        * a 64-bit physical address.
        */
       rv = AcpiEvaluateObjectTyped(sc->sc_node->ad_handle, "ADDR", NULL,
           &addrbuf, ACPI_TYPE_PACKAGE);
       if (ACPI_FAILURE(rv)) {
               aprint_error_dev(self, "failed to get ADDR: %s\n",
                   AcpiFormatException(rv));
               goto out;
       }
       addrobj = addrbuf.Pointer;
       if (addrobj->Type != ACPI_TYPE_PACKAGE ||
           addrobj->Package.Count != 2) {
               aprint_error_dev(self, "invalid ADDR\n");
               goto out;
       }
       addrarr = addrobj->Package.Elements;
       if (addrarr[0].Type != ACPI_TYPE_INTEGER ||
           addrarr[1].Type != ACPI_TYPE_INTEGER ||
           addrarr[0].Integer.Value > UINT32_MAX ||
           addrarr[1].Integer.Value > UINT32_MAX) {
               aprint_error_dev(self, "invalid ADDR\n");
               goto out;
       }
       sc->sc_paddr = (ACPI_PHYSICAL_ADDRESS)addrarr[0].Integer.Value;
       sc->sc_paddr |= (ACPI_PHYSICAL_ADDRESS)addrarr[1].Integer.Value << 32;
       aprint_normal_dev(self, "paddr=0x%"PRIx64"\n", (uint64_t)sc->sc_paddr);

       /*
        * Map the physical address into virtual address space.
        */
       sc->sc_vaddr = AcpiOsMapMemory(sc->sc_paddr, sizeof(*sc->sc_vaddr));
       if (sc->sc_vaddr == NULL) {
               aprint_error_dev(self, "failed to map address\n");
               goto out;
       }

       /*
        * Register a random source so we can attribute samples.
        */
       rnd_attach_source(&sc->sc_rndsource, device_xname(self),
           RND_TYPE_UNKNOWN, RND_FLAG_COLLECT_TIME|RND_FLAG_COLLECT_VALUE);

       /*
        * Register an ACPI notifier so that we can detect changes.
        */
       (void)acpi_register_notify(sc->sc_node, acpivmgenid_notify);

       /*
        * Now that we have registered a random source and a notifier,
        * read out the first value.
        */
       acpivmgenid_set(sc, "initial");

       /*
        * Attach a sysctl tree, rooted at hw.acpivmgenidN.
        */
       error = sysctl_createv(&sc->sc_sysctllog, 0, NULL, &sc->sc_sysctlroot,
           CTLFLAG_PERMANENT, CTLTYPE_NODE, device_xname(self),
           SYSCTL_DESCR("Virtual Machine Generation ID device"),
           NULL, 0, NULL, 0,
           CTL_HW, CTL_CREATE, CTL_EOL);
       if (error) {
               aprint_error_dev(self, "failed to create sysctl hw.%s: %d\n",
                   device_xname(self), error);
               goto out;
       }

       /*
        * hw.acpivmgenidN.id (`struct', 16-byte array)
        */
       error = sysctl_createv(&sc->sc_sysctllog, 0, &sc->sc_sysctlroot, NULL,
           CTLFLAG_PERMANENT|CTLFLAG_READONLY|CTLFLAG_PRIVATE, CTLTYPE_STRUCT,
           "id", SYSCTL_DESCR("Virtual Machine Generation ID"),
           &acpivmgenid_sysctl, 0, sc, sizeof(struct acpivmgenid),
           CTL_CREATE, CTL_EOL);
       if (error) {
               aprint_error_dev(self,
                   "failed to create sysctl hw.%s.id: %d\n",
                   device_xname(self), error);
               goto out;
       }

       /*
        * hw.acpivmgenidN.paddr (64-bit integer)
        */
       __CTASSERT(sizeof(ACPI_PHYSICAL_ADDRESS) == sizeof(quad_t));
       error = sysctl_createv(&sc->sc_sysctllog, 0, &sc->sc_sysctlroot, NULL,
           CTLFLAG_PERMANENT|CTLFLAG_READONLY|CTLFLAG_PRIVATE, CTLTYPE_QUAD,
           "paddr", SYSCTL_DESCR("Physical address of VM Generation ID"),
           NULL, 0, &sc->sc_paddr, sizeof(sc->sc_paddr),
           CTL_CREATE, CTL_EOL);
       if (error) {
               aprint_error_dev(self,
                   "failed to create sysctl hw.%s.paddr: %d\n",
                   device_xname(self), error);
               goto out;
       }

out:    ACPI_FREE(addrbuf.Pointer);
}

static int
acpivmgenid_detach(device_t self, int flags)
{
       struct acpivmgenid_softc *const sc = device_private(self);
       int error;

       error = config_detach_children(self, flags);
       if (error)
               return error;

       sysctl_teardown(&sc->sc_sysctllog);
       acpi_deregister_notify(sc->sc_node);
       rnd_detach_source(&sc->sc_rndsource);
       if (sc->sc_vaddr) {
               AcpiOsUnmapMemory(sc->sc_vaddr, sizeof(*sc->sc_vaddr));
               sc->sc_vaddr = NULL;    /* paranoia */
       }
       sc->sc_paddr = 0;       /* paranoia */

       return 0;
}

static void
acpivmgenid_set(struct acpivmgenid_softc *sc, const char *prefix)
{
       struct acpivmgenid vmgenid;
       char vmgenidstr[2*__arraycount(vmgenid.id) + 1];
       unsigned i;

       /*
        * Grab the current VM generation ID.  No obvious way to make
        * this atomic, so let's hope if it changes in the middle we'll
        * get another notification.
        */
       memcpy(&vmgenid, sc->sc_vaddr, sizeof(vmgenid));

       /*
        * Print the VM generation ID to the console for posterity.
        */
       for (i = 0; i < __arraycount(vmgenid.id); i++) {
               vmgenidstr[2*i] = "0123456789abcdef"[vmgenid.id[i] >> 4];
               vmgenidstr[2*i + 1] = "0123456789abcdef"[vmgenid.id[i] & 0xf];
       }
       vmgenidstr[2*sizeof(vmgenid)] = '\0';
       aprint_verbose_dev(sc->sc_dev, "%s: %s\n", prefix, vmgenidstr);

       /*
        * Enter the new VM generation ID into the entropy pool.
        */
       rnd_add_data(&sc->sc_rndsource, &vmgenid, sizeof(vmgenid), 0);
}

static void
acpivmgenid_notify(ACPI_HANDLE hdl, uint32_t notify, void *opaque)
{
       const device_t self = opaque;
       struct acpivmgenid_softc *const sc = device_private(self);

       if (notify != 0x80) {
               aprint_debug_dev(self, "unknown notify 0x%02x\n", notify);
               return;
       }

       (void)AcpiOsExecute(OSL_NOTIFY_HANDLER, &acpivmgenid_reset, sc);
}

static void
acpivmgenid_reset(void *cookie)
{
       struct acpivmgenid_softc *const sc = cookie;

       /*
        * Reset the system entropy pool's measure of entropy (not the
        * data, just the system's assessment of whether it has
        * entropy), and gather more entropy from any synchronous
        * sources we have available like CPU RNG instructions.  We
        * can't be interrupted by a signal so ignore return value.
        */
       entropy_reset();
       (void)entropy_gather();

       /*
        * Grab the current VM generation ID to put it into the entropy
        * pool; then force consolidation so it affects all subsequent
        * draws from the entropy pool and the entropy epoch advances.
        * Again we can't be interrupted by a signal so ignore return
        * value.
        */
       acpivmgenid_set(sc, "cloned");
       (void)entropy_consolidate();
}

static int
acpivmgenid_sysctl(SYSCTLFN_ARGS)
{
       struct sysctlnode node = *rnode;
       struct acpivmgenid_softc *const sc = node.sysctl_data;

       node.sysctl_data = sc->sc_vaddr;
       return sysctl_lookup(SYSCTLFN_CALL(&node));
}

MODULE(MODULE_CLASS_DRIVER, acpivmgenid, NULL);

#ifdef _MODULE
#include "ioconf.c"
#endif

static int
acpivmgenid_modcmd(modcmd_t cmd, void *opaque)
{
       int error = 0;

       switch (cmd) {
       case MODULE_CMD_INIT:
#ifdef _MODULE
               error = config_init_component(cfdriver_ioconf_acpivmgenid,
                   cfattach_ioconf_acpivmgenid, cfdata_ioconf_acpivmgenid);
#endif
               return error;
       case MODULE_CMD_FINI:
#ifdef _MODULE
               error = config_fini_component(cfdriver_ioconf_acpivmgenid,
                   cfattach_ioconf_acpivmgenid, cfdata_ioconf_acpivmgenid);
#endif
               return error;
       default:
               return ENOTTY;
       }
}