xref: /qemu/hw/ppc/pnv.c (revision 6402cbbb)
1 /*
2  * QEMU PowerPC PowerNV machine model
3  *
4  * Copyright (c) 2016, IBM Corporation.
5  *
6  * This library is free software; you can redistribute it and/or
7  * modify it under the terms of the GNU Lesser General Public
8  * License as published by the Free Software Foundation; either
9  * version 2 of the License, or (at your option) any later version.
10  *
11  * This library is distributed in the hope that it will be useful,
12  * but WITHOUT ANY WARRANTY; without even the implied warranty of
13  * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the GNU
14  * Lesser General Public License for more details.
15  *
16  * You should have received a copy of the GNU Lesser General Public
17  * License along with this library; if not, see <http://www.gnu.org/licenses/>.
18  */
19 
20 #include "qemu/osdep.h"
21 #include "qapi/error.h"
22 #include "sysemu/sysemu.h"
23 #include "sysemu/numa.h"
24 #include "sysemu/cpus.h"
25 #include "hw/hw.h"
26 #include "target/ppc/cpu.h"
27 #include "qemu/log.h"
28 #include "hw/ppc/fdt.h"
29 #include "hw/ppc/ppc.h"
30 #include "hw/ppc/pnv.h"
31 #include "hw/ppc/pnv_core.h"
32 #include "hw/loader.h"
33 #include "exec/address-spaces.h"
34 #include "qemu/cutils.h"
35 #include "qapi/visitor.h"
36 #include "monitor/monitor.h"
37 #include "hw/intc/intc.h"
38 #include "hw/ipmi/ipmi.h"
39 
40 #include "hw/ppc/xics.h"
41 #include "hw/ppc/pnv_xscom.h"
42 
43 #include "hw/isa/isa.h"
44 #include "hw/char/serial.h"
45 #include "hw/timer/mc146818rtc.h"
46 
47 #include <libfdt.h>
48 
49 #define FDT_MAX_SIZE            0x00100000
50 
51 #define FW_FILE_NAME            "skiboot.lid"
52 #define FW_LOAD_ADDR            0x0
53 #define FW_MAX_SIZE             0x00400000
54 
55 #define KERNEL_LOAD_ADDR        0x20000000
56 #define INITRD_LOAD_ADDR        0x40000000
57 
58 /*
59  * On Power Systems E880 (POWER8), the max cpus (threads) should be :
60  *     4 * 4 sockets * 12 cores * 8 threads = 1536
61  * Let's make it 2^11
62  */
63 #define MAX_CPUS                2048
64 
65 /*
66  * Memory nodes are created by hostboot, one for each range of memory
67  * that has a different "affinity". In practice, it means one range
68  * per chip.
69  */
70 static void powernv_populate_memory_node(void *fdt, int chip_id, hwaddr start,
71                                          hwaddr size)
72 {
73     char *mem_name;
74     uint64_t mem_reg_property[2];
75     int off;
76 
77     mem_reg_property[0] = cpu_to_be64(start);
78     mem_reg_property[1] = cpu_to_be64(size);
79 
80     mem_name = g_strdup_printf("memory@%"HWADDR_PRIx, start);
81     off = fdt_add_subnode(fdt, 0, mem_name);
82     g_free(mem_name);
83 
84     _FDT((fdt_setprop_string(fdt, off, "device_type", "memory")));
85     _FDT((fdt_setprop(fdt, off, "reg", mem_reg_property,
86                        sizeof(mem_reg_property))));
87     _FDT((fdt_setprop_cell(fdt, off, "ibm,chip-id", chip_id)));
88 }
89 
90 static int get_cpus_node(void *fdt)
91 {
92     int cpus_offset = fdt_path_offset(fdt, "/cpus");
93 
94     if (cpus_offset < 0) {
95         cpus_offset = fdt_add_subnode(fdt, fdt_path_offset(fdt, "/"),
96                                       "cpus");
97         if (cpus_offset) {
98             _FDT((fdt_setprop_cell(fdt, cpus_offset, "#address-cells", 0x1)));
99             _FDT((fdt_setprop_cell(fdt, cpus_offset, "#size-cells", 0x0)));
100         }
101     }
102     _FDT(cpus_offset);
103     return cpus_offset;
104 }
105 
106 /*
107  * The PowerNV cores (and threads) need to use real HW ids and not an
108  * incremental index like it has been done on other platforms. This HW
109  * id is stored in the CPU PIR, it is used to create cpu nodes in the
110  * device tree, used in XSCOM to address cores and in interrupt
111  * servers.
112  */
113 static void powernv_create_core_node(PnvChip *chip, PnvCore *pc, void *fdt)
114 {
115     CPUState *cs = CPU(DEVICE(pc->threads));
116     DeviceClass *dc = DEVICE_GET_CLASS(cs);
117     PowerPCCPU *cpu = POWERPC_CPU(cs);
118     int smt_threads = CPU_CORE(pc)->nr_threads;
119     CPUPPCState *env = &cpu->env;
120     PowerPCCPUClass *pcc = POWERPC_CPU_GET_CLASS(cs);
121     uint32_t servers_prop[smt_threads];
122     int i;
123     uint32_t segs[] = {cpu_to_be32(28), cpu_to_be32(40),
124                        0xffffffff, 0xffffffff};
125     uint32_t tbfreq = PNV_TIMEBASE_FREQ;
126     uint32_t cpufreq = 1000000000;
127     uint32_t page_sizes_prop[64];
128     size_t page_sizes_prop_size;
129     const uint8_t pa_features[] = { 24, 0,
130                                     0xf6, 0x3f, 0xc7, 0xc0, 0x80, 0xf0,
131                                     0x80, 0x00, 0x00, 0x00, 0x00, 0x00,
132                                     0x00, 0x00, 0x00, 0x00, 0x80, 0x00,
133                                     0x80, 0x00, 0x80, 0x00, 0x80, 0x00 };
134     int offset;
135     char *nodename;
136     int cpus_offset = get_cpus_node(fdt);
137 
138     nodename = g_strdup_printf("%s@%x", dc->fw_name, pc->pir);
139     offset = fdt_add_subnode(fdt, cpus_offset, nodename);
140     _FDT(offset);
141     g_free(nodename);
142 
143     _FDT((fdt_setprop_cell(fdt, offset, "ibm,chip-id", chip->chip_id)));
144 
145     _FDT((fdt_setprop_cell(fdt, offset, "reg", pc->pir)));
146     _FDT((fdt_setprop_cell(fdt, offset, "ibm,pir", pc->pir)));
147     _FDT((fdt_setprop_string(fdt, offset, "device_type", "cpu")));
148 
149     _FDT((fdt_setprop_cell(fdt, offset, "cpu-version", env->spr[SPR_PVR])));
150     _FDT((fdt_setprop_cell(fdt, offset, "d-cache-block-size",
151                             env->dcache_line_size)));
152     _FDT((fdt_setprop_cell(fdt, offset, "d-cache-line-size",
153                             env->dcache_line_size)));
154     _FDT((fdt_setprop_cell(fdt, offset, "i-cache-block-size",
155                             env->icache_line_size)));
156     _FDT((fdt_setprop_cell(fdt, offset, "i-cache-line-size",
157                             env->icache_line_size)));
158 
159     if (pcc->l1_dcache_size) {
160         _FDT((fdt_setprop_cell(fdt, offset, "d-cache-size",
161                                pcc->l1_dcache_size)));
162     } else {
163         warn_report("Unknown L1 dcache size for cpu");
164     }
165     if (pcc->l1_icache_size) {
166         _FDT((fdt_setprop_cell(fdt, offset, "i-cache-size",
167                                pcc->l1_icache_size)));
168     } else {
169         warn_report("Unknown L1 icache size for cpu");
170     }
171 
172     _FDT((fdt_setprop_cell(fdt, offset, "timebase-frequency", tbfreq)));
173     _FDT((fdt_setprop_cell(fdt, offset, "clock-frequency", cpufreq)));
174     _FDT((fdt_setprop_cell(fdt, offset, "ibm,slb-size", env->slb_nr)));
175     _FDT((fdt_setprop_string(fdt, offset, "status", "okay")));
176     _FDT((fdt_setprop(fdt, offset, "64-bit", NULL, 0)));
177 
178     if (env->spr_cb[SPR_PURR].oea_read) {
179         _FDT((fdt_setprop(fdt, offset, "ibm,purr", NULL, 0)));
180     }
181 
182     if (env->mmu_model & POWERPC_MMU_1TSEG) {
183         _FDT((fdt_setprop(fdt, offset, "ibm,processor-segment-sizes",
184                            segs, sizeof(segs))));
185     }
186 
187     /* Advertise VMX/VSX (vector extensions) if available
188      *   0 / no property == no vector extensions
189      *   1               == VMX / Altivec available
190      *   2               == VSX available */
191     if (env->insns_flags & PPC_ALTIVEC) {
192         uint32_t vmx = (env->insns_flags2 & PPC2_VSX) ? 2 : 1;
193 
194         _FDT((fdt_setprop_cell(fdt, offset, "ibm,vmx", vmx)));
195     }
196 
197     /* Advertise DFP (Decimal Floating Point) if available
198      *   0 / no property == no DFP
199      *   1               == DFP available */
200     if (env->insns_flags2 & PPC2_DFP) {
201         _FDT((fdt_setprop_cell(fdt, offset, "ibm,dfp", 1)));
202     }
203 
204     page_sizes_prop_size = ppc_create_page_sizes_prop(env, page_sizes_prop,
205                                                   sizeof(page_sizes_prop));
206     if (page_sizes_prop_size) {
207         _FDT((fdt_setprop(fdt, offset, "ibm,segment-page-sizes",
208                            page_sizes_prop, page_sizes_prop_size)));
209     }
210 
211     _FDT((fdt_setprop(fdt, offset, "ibm,pa-features",
212                        pa_features, sizeof(pa_features))));
213 
214     /* Build interrupt servers properties */
215     for (i = 0; i < smt_threads; i++) {
216         servers_prop[i] = cpu_to_be32(pc->pir + i);
217     }
218     _FDT((fdt_setprop(fdt, offset, "ibm,ppc-interrupt-server#s",
219                        servers_prop, sizeof(servers_prop))));
220 }
221 
222 static void powernv_populate_icp(PnvChip *chip, void *fdt, uint32_t pir,
223                                  uint32_t nr_threads)
224 {
225     uint64_t addr = PNV_ICP_BASE(chip) | (pir << 12);
226     char *name;
227     const char compat[] = "IBM,power8-icp\0IBM,ppc-xicp";
228     uint32_t irange[2], i, rsize;
229     uint64_t *reg;
230     int offset;
231 
232     irange[0] = cpu_to_be32(pir);
233     irange[1] = cpu_to_be32(nr_threads);
234 
235     rsize = sizeof(uint64_t) * 2 * nr_threads;
236     reg = g_malloc(rsize);
237     for (i = 0; i < nr_threads; i++) {
238         reg[i * 2] = cpu_to_be64(addr | ((pir + i) * 0x1000));
239         reg[i * 2 + 1] = cpu_to_be64(0x1000);
240     }
241 
242     name = g_strdup_printf("interrupt-controller@%"PRIX64, addr);
243     offset = fdt_add_subnode(fdt, 0, name);
244     _FDT(offset);
245     g_free(name);
246 
247     _FDT((fdt_setprop(fdt, offset, "compatible", compat, sizeof(compat))));
248     _FDT((fdt_setprop(fdt, offset, "reg", reg, rsize)));
249     _FDT((fdt_setprop_string(fdt, offset, "device_type",
250                               "PowerPC-External-Interrupt-Presentation")));
251     _FDT((fdt_setprop(fdt, offset, "interrupt-controller", NULL, 0)));
252     _FDT((fdt_setprop(fdt, offset, "ibm,interrupt-server-ranges",
253                        irange, sizeof(irange))));
254     _FDT((fdt_setprop_cell(fdt, offset, "#interrupt-cells", 1)));
255     _FDT((fdt_setprop_cell(fdt, offset, "#address-cells", 0)));
256     g_free(reg);
257 }
258 
259 static int pnv_chip_lpc_offset(PnvChip *chip, void *fdt)
260 {
261     char *name;
262     int offset;
263 
264     name = g_strdup_printf("/xscom@%" PRIx64 "/isa@%x",
265                            (uint64_t) PNV_XSCOM_BASE(chip), PNV_XSCOM_LPC_BASE);
266     offset = fdt_path_offset(fdt, name);
267     g_free(name);
268     return offset;
269 }
270 
271 static void powernv_populate_chip(PnvChip *chip, void *fdt)
272 {
273     PnvChipClass *pcc = PNV_CHIP_GET_CLASS(chip);
274     char *typename = pnv_core_typename(pcc->cpu_model);
275     size_t typesize = object_type_get_instance_size(typename);
276     int i;
277 
278     pnv_xscom_populate(chip, fdt, 0);
279 
280     /* The default LPC bus of a multichip system is on chip 0. It's
281      * recognized by the firmware (skiboot) using a "primary"
282      * property.
283      */
284     if (chip->chip_id == 0x0) {
285         int lpc_offset = pnv_chip_lpc_offset(chip, fdt);
286 
287         _FDT((fdt_setprop(fdt, lpc_offset, "primary", NULL, 0)));
288     }
289 
290     for (i = 0; i < chip->nr_cores; i++) {
291         PnvCore *pnv_core = PNV_CORE(chip->cores + i * typesize);
292 
293         powernv_create_core_node(chip, pnv_core, fdt);
294 
295         /* Interrupt Control Presenters (ICP). One per core. */
296         powernv_populate_icp(chip, fdt, pnv_core->pir,
297                              CPU_CORE(pnv_core)->nr_threads);
298     }
299 
300     if (chip->ram_size) {
301         powernv_populate_memory_node(fdt, chip->chip_id, chip->ram_start,
302                                      chip->ram_size);
303     }
304     g_free(typename);
305 }
306 
307 static void powernv_populate_rtc(ISADevice *d, void *fdt, int lpc_off)
308 {
309     uint32_t io_base = d->ioport_id;
310     uint32_t io_regs[] = {
311         cpu_to_be32(1),
312         cpu_to_be32(io_base),
313         cpu_to_be32(2)
314     };
315     char *name;
316     int node;
317 
318     name = g_strdup_printf("%s@i%x", qdev_fw_name(DEVICE(d)), io_base);
319     node = fdt_add_subnode(fdt, lpc_off, name);
320     _FDT(node);
321     g_free(name);
322 
323     _FDT((fdt_setprop(fdt, node, "reg", io_regs, sizeof(io_regs))));
324     _FDT((fdt_setprop_string(fdt, node, "compatible", "pnpPNP,b00")));
325 }
326 
327 static void powernv_populate_serial(ISADevice *d, void *fdt, int lpc_off)
328 {
329     const char compatible[] = "ns16550\0pnpPNP,501";
330     uint32_t io_base = d->ioport_id;
331     uint32_t io_regs[] = {
332         cpu_to_be32(1),
333         cpu_to_be32(io_base),
334         cpu_to_be32(8)
335     };
336     char *name;
337     int node;
338 
339     name = g_strdup_printf("%s@i%x", qdev_fw_name(DEVICE(d)), io_base);
340     node = fdt_add_subnode(fdt, lpc_off, name);
341     _FDT(node);
342     g_free(name);
343 
344     _FDT((fdt_setprop(fdt, node, "reg", io_regs, sizeof(io_regs))));
345     _FDT((fdt_setprop(fdt, node, "compatible", compatible,
346                       sizeof(compatible))));
347 
348     _FDT((fdt_setprop_cell(fdt, node, "clock-frequency", 1843200)));
349     _FDT((fdt_setprop_cell(fdt, node, "current-speed", 115200)));
350     _FDT((fdt_setprop_cell(fdt, node, "interrupts", d->isairq[0])));
351     _FDT((fdt_setprop_cell(fdt, node, "interrupt-parent",
352                            fdt_get_phandle(fdt, lpc_off))));
353 
354     /* This is needed by Linux */
355     _FDT((fdt_setprop_string(fdt, node, "device_type", "serial")));
356 }
357 
358 static void powernv_populate_ipmi_bt(ISADevice *d, void *fdt, int lpc_off)
359 {
360     const char compatible[] = "bt\0ipmi-bt";
361     uint32_t io_base;
362     uint32_t io_regs[] = {
363         cpu_to_be32(1),
364         0, /* 'io_base' retrieved from the 'ioport' property of 'isa-ipmi-bt' */
365         cpu_to_be32(3)
366     };
367     uint32_t irq;
368     char *name;
369     int node;
370 
371     io_base = object_property_get_int(OBJECT(d), "ioport", &error_fatal);
372     io_regs[1] = cpu_to_be32(io_base);
373 
374     irq = object_property_get_int(OBJECT(d), "irq", &error_fatal);
375 
376     name = g_strdup_printf("%s@i%x", qdev_fw_name(DEVICE(d)), io_base);
377     node = fdt_add_subnode(fdt, lpc_off, name);
378     _FDT(node);
379     g_free(name);
380 
381     _FDT((fdt_setprop(fdt, node, "reg", io_regs, sizeof(io_regs))));
382     _FDT((fdt_setprop(fdt, node, "compatible", compatible,
383                       sizeof(compatible))));
384 
385     /* Mark it as reserved to avoid Linux trying to claim it */
386     _FDT((fdt_setprop_string(fdt, node, "status", "reserved")));
387     _FDT((fdt_setprop_cell(fdt, node, "interrupts", irq)));
388     _FDT((fdt_setprop_cell(fdt, node, "interrupt-parent",
389                            fdt_get_phandle(fdt, lpc_off))));
390 }
391 
392 typedef struct ForeachPopulateArgs {
393     void *fdt;
394     int offset;
395 } ForeachPopulateArgs;
396 
397 static int powernv_populate_isa_device(DeviceState *dev, void *opaque)
398 {
399     ForeachPopulateArgs *args = opaque;
400     ISADevice *d = ISA_DEVICE(dev);
401 
402     if (object_dynamic_cast(OBJECT(dev), TYPE_MC146818_RTC)) {
403         powernv_populate_rtc(d, args->fdt, args->offset);
404     } else if (object_dynamic_cast(OBJECT(dev), TYPE_ISA_SERIAL)) {
405         powernv_populate_serial(d, args->fdt, args->offset);
406     } else if (object_dynamic_cast(OBJECT(dev), "isa-ipmi-bt")) {
407         powernv_populate_ipmi_bt(d, args->fdt, args->offset);
408     } else {
409         error_report("unknown isa device %s@i%x", qdev_fw_name(dev),
410                      d->ioport_id);
411     }
412 
413     return 0;
414 }
415 
416 static void powernv_populate_isa(ISABus *bus, void *fdt, int lpc_offset)
417 {
418     ForeachPopulateArgs args = {
419         .fdt = fdt,
420         .offset = lpc_offset,
421     };
422 
423     /* ISA devices are not necessarily parented to the ISA bus so we
424      * can not use object_child_foreach() */
425     qbus_walk_children(BUS(bus), powernv_populate_isa_device,
426                        NULL, NULL, NULL, &args);
427 }
428 
429 static void *powernv_create_fdt(MachineState *machine)
430 {
431     const char plat_compat[] = "qemu,powernv\0ibm,powernv";
432     PnvMachineState *pnv = POWERNV_MACHINE(machine);
433     void *fdt;
434     char *buf;
435     int off;
436     int i;
437     int lpc_offset;
438 
439     fdt = g_malloc0(FDT_MAX_SIZE);
440     _FDT((fdt_create_empty_tree(fdt, FDT_MAX_SIZE)));
441 
442     /* Root node */
443     _FDT((fdt_setprop_cell(fdt, 0, "#address-cells", 0x2)));
444     _FDT((fdt_setprop_cell(fdt, 0, "#size-cells", 0x2)));
445     _FDT((fdt_setprop_string(fdt, 0, "model",
446                              "IBM PowerNV (emulated by qemu)")));
447     _FDT((fdt_setprop(fdt, 0, "compatible", plat_compat,
448                       sizeof(plat_compat))));
449 
450     buf =  qemu_uuid_unparse_strdup(&qemu_uuid);
451     _FDT((fdt_setprop_string(fdt, 0, "vm,uuid", buf)));
452     if (qemu_uuid_set) {
453         _FDT((fdt_property_string(fdt, "system-id", buf)));
454     }
455     g_free(buf);
456 
457     off = fdt_add_subnode(fdt, 0, "chosen");
458     if (machine->kernel_cmdline) {
459         _FDT((fdt_setprop_string(fdt, off, "bootargs",
460                                  machine->kernel_cmdline)));
461     }
462 
463     if (pnv->initrd_size) {
464         uint32_t start_prop = cpu_to_be32(pnv->initrd_base);
465         uint32_t end_prop = cpu_to_be32(pnv->initrd_base + pnv->initrd_size);
466 
467         _FDT((fdt_setprop(fdt, off, "linux,initrd-start",
468                                &start_prop, sizeof(start_prop))));
469         _FDT((fdt_setprop(fdt, off, "linux,initrd-end",
470                                &end_prop, sizeof(end_prop))));
471     }
472 
473     /* Populate device tree for each chip */
474     for (i = 0; i < pnv->num_chips; i++) {
475         powernv_populate_chip(pnv->chips[i], fdt);
476     }
477 
478     /* Populate ISA devices on chip 0 */
479     lpc_offset = pnv_chip_lpc_offset(pnv->chips[0], fdt);
480     powernv_populate_isa(pnv->isa_bus, fdt, lpc_offset);
481 
482     if (pnv->bmc) {
483         pnv_bmc_populate_sensors(pnv->bmc, fdt);
484     }
485 
486     return fdt;
487 }
488 
489 static void pnv_powerdown_notify(Notifier *n, void *opaque)
490 {
491     PnvMachineState *pnv = POWERNV_MACHINE(qdev_get_machine());
492 
493     if (pnv->bmc) {
494         pnv_bmc_powerdown(pnv->bmc);
495     }
496 }
497 
498 static void ppc_powernv_reset(void)
499 {
500     MachineState *machine = MACHINE(qdev_get_machine());
501     PnvMachineState *pnv = POWERNV_MACHINE(machine);
502     void *fdt;
503     Object *obj;
504 
505     qemu_devices_reset();
506 
507     /* OpenPOWER systems have a BMC, which can be defined on the
508      * command line with:
509      *
510      *   -device ipmi-bmc-sim,id=bmc0
511      *
512      * This is the internal simulator but it could also be an external
513      * BMC.
514      */
515     obj = object_resolve_path_type("", "ipmi-bmc-sim", NULL);
516     if (obj) {
517         pnv->bmc = IPMI_BMC(obj);
518     }
519 
520     fdt = powernv_create_fdt(machine);
521 
522     /* Pack resulting tree */
523     _FDT((fdt_pack(fdt)));
524 
525     cpu_physical_memory_write(PNV_FDT_ADDR, fdt, fdt_totalsize(fdt));
526 }
527 
528 static ISABus *pnv_isa_create(PnvChip *chip)
529 {
530     PnvLpcController *lpc = &chip->lpc;
531     ISABus *isa_bus;
532     qemu_irq *irqs;
533     PnvChipClass *pcc = PNV_CHIP_GET_CLASS(chip);
534 
535     /* let isa_bus_new() create its own bridge on SysBus otherwise
536      * devices speficied on the command line won't find the bus and
537      * will fail to create.
538      */
539     isa_bus = isa_bus_new(NULL, &lpc->isa_mem, &lpc->isa_io,
540                           &error_fatal);
541 
542     irqs = pnv_lpc_isa_irq_create(lpc, pcc->chip_type, ISA_NUM_IRQS);
543 
544     isa_bus_irqs(isa_bus, irqs);
545     return isa_bus;
546 }
547 
548 static void ppc_powernv_init(MachineState *machine)
549 {
550     PnvMachineState *pnv = POWERNV_MACHINE(machine);
551     MemoryRegion *ram;
552     char *fw_filename;
553     long fw_size;
554     int i;
555     char *chip_typename;
556 
557     /* allocate RAM */
558     if (machine->ram_size < (1 * G_BYTE)) {
559         warn_report("skiboot may not work with < 1GB of RAM");
560     }
561 
562     ram = g_new(MemoryRegion, 1);
563     memory_region_allocate_system_memory(ram, NULL, "ppc_powernv.ram",
564                                          machine->ram_size);
565     memory_region_add_subregion(get_system_memory(), 0, ram);
566 
567     /* load skiboot firmware  */
568     if (bios_name == NULL) {
569         bios_name = FW_FILE_NAME;
570     }
571 
572     fw_filename = qemu_find_file(QEMU_FILE_TYPE_BIOS, bios_name);
573 
574     fw_size = load_image_targphys(fw_filename, FW_LOAD_ADDR, FW_MAX_SIZE);
575     if (fw_size < 0) {
576         error_report("Could not load OPAL '%s'", fw_filename);
577         exit(1);
578     }
579     g_free(fw_filename);
580 
581     /* load kernel */
582     if (machine->kernel_filename) {
583         long kernel_size;
584 
585         kernel_size = load_image_targphys(machine->kernel_filename,
586                                           KERNEL_LOAD_ADDR, 0x2000000);
587         if (kernel_size < 0) {
588             error_report("Could not load kernel '%s'",
589                          machine->kernel_filename);
590             exit(1);
591         }
592     }
593 
594     /* load initrd */
595     if (machine->initrd_filename) {
596         pnv->initrd_base = INITRD_LOAD_ADDR;
597         pnv->initrd_size = load_image_targphys(machine->initrd_filename,
598                                   pnv->initrd_base, 0x10000000); /* 128MB max */
599         if (pnv->initrd_size < 0) {
600             error_report("Could not load initial ram disk '%s'",
601                          machine->initrd_filename);
602             exit(1);
603         }
604     }
605 
606     /* We need some cpu model to instantiate the PnvChip class */
607     if (machine->cpu_model == NULL) {
608         machine->cpu_model = "POWER8";
609     }
610 
611     /* Create the processor chips */
612     chip_typename = g_strdup_printf(TYPE_PNV_CHIP "-%s", machine->cpu_model);
613     if (!object_class_by_name(chip_typename)) {
614         error_report("invalid CPU model '%s' for %s machine",
615                      machine->cpu_model, MACHINE_GET_CLASS(machine)->name);
616         exit(1);
617     }
618 
619     pnv->chips = g_new0(PnvChip *, pnv->num_chips);
620     for (i = 0; i < pnv->num_chips; i++) {
621         char chip_name[32];
622         Object *chip = object_new(chip_typename);
623 
624         pnv->chips[i] = PNV_CHIP(chip);
625 
626         /* TODO: put all the memory in one node on chip 0 until we find a
627          * way to specify different ranges for each chip
628          */
629         if (i == 0) {
630             object_property_set_int(chip, machine->ram_size, "ram-size",
631                                     &error_fatal);
632         }
633 
634         snprintf(chip_name, sizeof(chip_name), "chip[%d]", PNV_CHIP_HWID(i));
635         object_property_add_child(OBJECT(pnv), chip_name, chip, &error_fatal);
636         object_property_set_int(chip, PNV_CHIP_HWID(i), "chip-id",
637                                 &error_fatal);
638         object_property_set_int(chip, smp_cores, "nr-cores", &error_fatal);
639         object_property_set_bool(chip, true, "realized", &error_fatal);
640     }
641     g_free(chip_typename);
642 
643     /* Instantiate ISA bus on chip 0 */
644     pnv->isa_bus = pnv_isa_create(pnv->chips[0]);
645 
646     /* Create serial port */
647     serial_hds_isa_init(pnv->isa_bus, 0, MAX_SERIAL_PORTS);
648 
649     /* Create an RTC ISA device too */
650     rtc_init(pnv->isa_bus, 2000, NULL);
651 
652     /* OpenPOWER systems use a IPMI SEL Event message to notify the
653      * host to powerdown */
654     pnv->powerdown_notifier.notify = pnv_powerdown_notify;
655     qemu_register_powerdown_notifier(&pnv->powerdown_notifier);
656 }
657 
658 /*
659  *    0:21  Reserved - Read as zeros
660  *   22:24  Chip ID
661  *   25:28  Core number
662  *   29:31  Thread ID
663  */
664 static uint32_t pnv_chip_core_pir_p8(PnvChip *chip, uint32_t core_id)
665 {
666     return (chip->chip_id << 7) | (core_id << 3);
667 }
668 
669 /*
670  *    0:48  Reserved - Read as zeroes
671  *   49:52  Node ID
672  *   53:55  Chip ID
673  *   56     Reserved - Read as zero
674  *   57:61  Core number
675  *   62:63  Thread ID
676  *
677  * We only care about the lower bits. uint32_t is fine for the moment.
678  */
679 static uint32_t pnv_chip_core_pir_p9(PnvChip *chip, uint32_t core_id)
680 {
681     return (chip->chip_id << 8) | (core_id << 2);
682 }
683 
684 /* Allowed core identifiers on a POWER8 Processor Chip :
685  *
686  * <EX0 reserved>
687  *  EX1  - Venice only
688  *  EX2  - Venice only
689  *  EX3  - Venice only
690  *  EX4
691  *  EX5
692  *  EX6
693  * <EX7,8 reserved> <reserved>
694  *  EX9  - Venice only
695  *  EX10 - Venice only
696  *  EX11 - Venice only
697  *  EX12
698  *  EX13
699  *  EX14
700  * <EX15 reserved>
701  */
702 #define POWER8E_CORE_MASK  (0x7070ull)
703 #define POWER8_CORE_MASK   (0x7e7eull)
704 
705 /*
706  * POWER9 has 24 cores, ids starting at 0x20
707  */
708 #define POWER9_CORE_MASK   (0xffffff00000000ull)
709 
710 static void pnv_chip_power8e_class_init(ObjectClass *klass, void *data)
711 {
712     DeviceClass *dc = DEVICE_CLASS(klass);
713     PnvChipClass *k = PNV_CHIP_CLASS(klass);
714 
715     k->cpu_model = "POWER8E";
716     k->chip_type = PNV_CHIP_POWER8E;
717     k->chip_cfam_id = 0x221ef04980000000ull;  /* P8 Murano DD2.1 */
718     k->cores_mask = POWER8E_CORE_MASK;
719     k->core_pir = pnv_chip_core_pir_p8;
720     k->xscom_base = 0x003fc0000000000ull;
721     k->xscom_core_base = 0x10000000ull;
722     dc->desc = "PowerNV Chip POWER8E";
723 }
724 
725 static const TypeInfo pnv_chip_power8e_info = {
726     .name          = TYPE_PNV_CHIP_POWER8E,
727     .parent        = TYPE_PNV_CHIP,
728     .instance_size = sizeof(PnvChip),
729     .class_init    = pnv_chip_power8e_class_init,
730 };
731 
732 static void pnv_chip_power8_class_init(ObjectClass *klass, void *data)
733 {
734     DeviceClass *dc = DEVICE_CLASS(klass);
735     PnvChipClass *k = PNV_CHIP_CLASS(klass);
736 
737     k->cpu_model = "POWER8";
738     k->chip_type = PNV_CHIP_POWER8;
739     k->chip_cfam_id = 0x220ea04980000000ull; /* P8 Venice DD2.0 */
740     k->cores_mask = POWER8_CORE_MASK;
741     k->core_pir = pnv_chip_core_pir_p8;
742     k->xscom_base = 0x003fc0000000000ull;
743     k->xscom_core_base = 0x10000000ull;
744     dc->desc = "PowerNV Chip POWER8";
745 }
746 
747 static const TypeInfo pnv_chip_power8_info = {
748     .name          = TYPE_PNV_CHIP_POWER8,
749     .parent        = TYPE_PNV_CHIP,
750     .instance_size = sizeof(PnvChip),
751     .class_init    = pnv_chip_power8_class_init,
752 };
753 
754 static void pnv_chip_power8nvl_class_init(ObjectClass *klass, void *data)
755 {
756     DeviceClass *dc = DEVICE_CLASS(klass);
757     PnvChipClass *k = PNV_CHIP_CLASS(klass);
758 
759     k->cpu_model = "POWER8NVL";
760     k->chip_type = PNV_CHIP_POWER8NVL;
761     k->chip_cfam_id = 0x120d304980000000ull;  /* P8 Naples DD1.0 */
762     k->cores_mask = POWER8_CORE_MASK;
763     k->core_pir = pnv_chip_core_pir_p8;
764     k->xscom_base = 0x003fc0000000000ull;
765     k->xscom_core_base = 0x10000000ull;
766     dc->desc = "PowerNV Chip POWER8NVL";
767 }
768 
769 static const TypeInfo pnv_chip_power8nvl_info = {
770     .name          = TYPE_PNV_CHIP_POWER8NVL,
771     .parent        = TYPE_PNV_CHIP,
772     .instance_size = sizeof(PnvChip),
773     .class_init    = pnv_chip_power8nvl_class_init,
774 };
775 
776 static void pnv_chip_power9_class_init(ObjectClass *klass, void *data)
777 {
778     DeviceClass *dc = DEVICE_CLASS(klass);
779     PnvChipClass *k = PNV_CHIP_CLASS(klass);
780 
781     k->cpu_model = "POWER9";
782     k->chip_type = PNV_CHIP_POWER9;
783     k->chip_cfam_id = 0x100d104980000000ull; /* P9 Nimbus DD1.0 */
784     k->cores_mask = POWER9_CORE_MASK;
785     k->core_pir = pnv_chip_core_pir_p9;
786     k->xscom_base = 0x00603fc00000000ull;
787     k->xscom_core_base = 0x0ull;
788     dc->desc = "PowerNV Chip POWER9";
789 }
790 
791 static const TypeInfo pnv_chip_power9_info = {
792     .name          = TYPE_PNV_CHIP_POWER9,
793     .parent        = TYPE_PNV_CHIP,
794     .instance_size = sizeof(PnvChip),
795     .class_init    = pnv_chip_power9_class_init,
796 };
797 
798 static void pnv_chip_core_sanitize(PnvChip *chip, Error **errp)
799 {
800     PnvChipClass *pcc = PNV_CHIP_GET_CLASS(chip);
801     int cores_max;
802 
803     /*
804      * No custom mask for this chip, let's use the default one from *
805      * the chip class
806      */
807     if (!chip->cores_mask) {
808         chip->cores_mask = pcc->cores_mask;
809     }
810 
811     /* filter alien core ids ! some are reserved */
812     if ((chip->cores_mask & pcc->cores_mask) != chip->cores_mask) {
813         error_setg(errp, "warning: invalid core mask for chip Ox%"PRIx64" !",
814                    chip->cores_mask);
815         return;
816     }
817     chip->cores_mask &= pcc->cores_mask;
818 
819     /* now that we have a sane layout, let check the number of cores */
820     cores_max = ctpop64(chip->cores_mask);
821     if (chip->nr_cores > cores_max) {
822         error_setg(errp, "warning: too many cores for chip ! Limit is %d",
823                    cores_max);
824         return;
825     }
826 }
827 
828 static void pnv_chip_init(Object *obj)
829 {
830     PnvChip *chip = PNV_CHIP(obj);
831     PnvChipClass *pcc = PNV_CHIP_GET_CLASS(chip);
832 
833     chip->xscom_base = pcc->xscom_base;
834 
835     object_initialize(&chip->lpc, sizeof(chip->lpc), TYPE_PNV_LPC);
836     object_property_add_child(obj, "lpc", OBJECT(&chip->lpc), NULL);
837 
838     object_initialize(&chip->psi, sizeof(chip->psi), TYPE_PNV_PSI);
839     object_property_add_child(obj, "psi", OBJECT(&chip->psi), NULL);
840     object_property_add_const_link(OBJECT(&chip->psi), "xics",
841                                    OBJECT(qdev_get_machine()), &error_abort);
842 
843     object_initialize(&chip->occ, sizeof(chip->occ), TYPE_PNV_OCC);
844     object_property_add_child(obj, "occ", OBJECT(&chip->occ), NULL);
845     object_property_add_const_link(OBJECT(&chip->occ), "psi",
846                                    OBJECT(&chip->psi), &error_abort);
847 
848     /* The LPC controller needs PSI to generate interrupts */
849     object_property_add_const_link(OBJECT(&chip->lpc), "psi",
850                                    OBJECT(&chip->psi), &error_abort);
851 }
852 
853 static void pnv_chip_icp_realize(PnvChip *chip, Error **errp)
854 {
855     PnvChipClass *pcc = PNV_CHIP_GET_CLASS(chip);
856     char *typename = pnv_core_typename(pcc->cpu_model);
857     size_t typesize = object_type_get_instance_size(typename);
858     int i, j;
859     char *name;
860     XICSFabric *xi = XICS_FABRIC(qdev_get_machine());
861 
862     name = g_strdup_printf("icp-%x", chip->chip_id);
863     memory_region_init(&chip->icp_mmio, OBJECT(chip), name, PNV_ICP_SIZE);
864     sysbus_init_mmio(SYS_BUS_DEVICE(chip), &chip->icp_mmio);
865     g_free(name);
866 
867     sysbus_mmio_map(SYS_BUS_DEVICE(chip), 1, PNV_ICP_BASE(chip));
868 
869     /* Map the ICP registers for each thread */
870     for (i = 0; i < chip->nr_cores; i++) {
871         PnvCore *pnv_core = PNV_CORE(chip->cores + i * typesize);
872         int core_hwid = CPU_CORE(pnv_core)->core_id;
873 
874         for (j = 0; j < CPU_CORE(pnv_core)->nr_threads; j++) {
875             uint32_t pir = pcc->core_pir(chip, core_hwid) + j;
876             PnvICPState *icp = PNV_ICP(xics_icp_get(xi, pir));
877 
878             memory_region_add_subregion(&chip->icp_mmio, pir << 12, &icp->mmio);
879         }
880     }
881 
882     g_free(typename);
883 }
884 
885 static void pnv_chip_realize(DeviceState *dev, Error **errp)
886 {
887     PnvChip *chip = PNV_CHIP(dev);
888     Error *error = NULL;
889     PnvChipClass *pcc = PNV_CHIP_GET_CLASS(chip);
890     char *typename = pnv_core_typename(pcc->cpu_model);
891     size_t typesize = object_type_get_instance_size(typename);
892     int i, core_hwid;
893 
894     if (!object_class_by_name(typename)) {
895         error_setg(errp, "Unable to find PowerNV CPU Core '%s'", typename);
896         return;
897     }
898 
899     /* XSCOM bridge */
900     pnv_xscom_realize(chip, &error);
901     if (error) {
902         error_propagate(errp, error);
903         return;
904     }
905     sysbus_mmio_map(SYS_BUS_DEVICE(chip), 0, PNV_XSCOM_BASE(chip));
906 
907     /* Cores */
908     pnv_chip_core_sanitize(chip, &error);
909     if (error) {
910         error_propagate(errp, error);
911         return;
912     }
913 
914     chip->cores = g_malloc0(typesize * chip->nr_cores);
915 
916     for (i = 0, core_hwid = 0; (core_hwid < sizeof(chip->cores_mask) * 8)
917              && (i < chip->nr_cores); core_hwid++) {
918         char core_name[32];
919         void *pnv_core = chip->cores + i * typesize;
920 
921         if (!(chip->cores_mask & (1ull << core_hwid))) {
922             continue;
923         }
924 
925         object_initialize(pnv_core, typesize, typename);
926         snprintf(core_name, sizeof(core_name), "core[%d]", core_hwid);
927         object_property_add_child(OBJECT(chip), core_name, OBJECT(pnv_core),
928                                   &error_fatal);
929         object_property_set_int(OBJECT(pnv_core), smp_threads, "nr-threads",
930                                 &error_fatal);
931         object_property_set_int(OBJECT(pnv_core), core_hwid,
932                                 CPU_CORE_PROP_CORE_ID, &error_fatal);
933         object_property_set_int(OBJECT(pnv_core),
934                                 pcc->core_pir(chip, core_hwid),
935                                 "pir", &error_fatal);
936         object_property_add_const_link(OBJECT(pnv_core), "xics",
937                                        qdev_get_machine(), &error_fatal);
938         object_property_set_bool(OBJECT(pnv_core), true, "realized",
939                                  &error_fatal);
940         object_unref(OBJECT(pnv_core));
941 
942         /* Each core has an XSCOM MMIO region */
943         pnv_xscom_add_subregion(chip,
944                                 PNV_XSCOM_EX_CORE_BASE(pcc->xscom_core_base,
945                                                        core_hwid),
946                                 &PNV_CORE(pnv_core)->xscom_regs);
947         i++;
948     }
949     g_free(typename);
950 
951     /* Create LPC controller */
952     object_property_set_bool(OBJECT(&chip->lpc), true, "realized",
953                              &error_fatal);
954     pnv_xscom_add_subregion(chip, PNV_XSCOM_LPC_BASE, &chip->lpc.xscom_regs);
955 
956     /* Interrupt Management Area. This is the memory region holding
957      * all the Interrupt Control Presenter (ICP) registers */
958     pnv_chip_icp_realize(chip, &error);
959     if (error) {
960         error_propagate(errp, error);
961         return;
962     }
963 
964     /* Processor Service Interface (PSI) Host Bridge */
965     object_property_set_int(OBJECT(&chip->psi), PNV_PSIHB_BASE(chip),
966                             "bar", &error_fatal);
967     object_property_set_bool(OBJECT(&chip->psi), true, "realized", &error);
968     if (error) {
969         error_propagate(errp, error);
970         return;
971     }
972     pnv_xscom_add_subregion(chip, PNV_XSCOM_PSIHB_BASE, &chip->psi.xscom_regs);
973 
974     /* Create the simplified OCC model */
975     object_property_set_bool(OBJECT(&chip->occ), true, "realized", &error);
976     if (error) {
977         error_propagate(errp, error);
978         return;
979     }
980     pnv_xscom_add_subregion(chip, PNV_XSCOM_OCC_BASE, &chip->occ.xscom_regs);
981 }
982 
983 static Property pnv_chip_properties[] = {
984     DEFINE_PROP_UINT32("chip-id", PnvChip, chip_id, 0),
985     DEFINE_PROP_UINT64("ram-start", PnvChip, ram_start, 0),
986     DEFINE_PROP_UINT64("ram-size", PnvChip, ram_size, 0),
987     DEFINE_PROP_UINT32("nr-cores", PnvChip, nr_cores, 1),
988     DEFINE_PROP_UINT64("cores-mask", PnvChip, cores_mask, 0x0),
989     DEFINE_PROP_END_OF_LIST(),
990 };
991 
992 static void pnv_chip_class_init(ObjectClass *klass, void *data)
993 {
994     DeviceClass *dc = DEVICE_CLASS(klass);
995 
996     set_bit(DEVICE_CATEGORY_CPU, dc->categories);
997     dc->realize = pnv_chip_realize;
998     dc->props = pnv_chip_properties;
999     dc->desc = "PowerNV Chip";
1000 }
1001 
1002 static const TypeInfo pnv_chip_info = {
1003     .name          = TYPE_PNV_CHIP,
1004     .parent        = TYPE_SYS_BUS_DEVICE,
1005     .class_init    = pnv_chip_class_init,
1006     .instance_init = pnv_chip_init,
1007     .class_size    = sizeof(PnvChipClass),
1008     .abstract      = true,
1009 };
1010 
1011 static ICSState *pnv_ics_get(XICSFabric *xi, int irq)
1012 {
1013     PnvMachineState *pnv = POWERNV_MACHINE(xi);
1014     int i;
1015 
1016     for (i = 0; i < pnv->num_chips; i++) {
1017         if (ics_valid_irq(&pnv->chips[i]->psi.ics, irq)) {
1018             return &pnv->chips[i]->psi.ics;
1019         }
1020     }
1021     return NULL;
1022 }
1023 
1024 static void pnv_ics_resend(XICSFabric *xi)
1025 {
1026     PnvMachineState *pnv = POWERNV_MACHINE(xi);
1027     int i;
1028 
1029     for (i = 0; i < pnv->num_chips; i++) {
1030         ics_resend(&pnv->chips[i]->psi.ics);
1031     }
1032 }
1033 
1034 static PowerPCCPU *ppc_get_vcpu_by_pir(int pir)
1035 {
1036     CPUState *cs;
1037 
1038     CPU_FOREACH(cs) {
1039         PowerPCCPU *cpu = POWERPC_CPU(cs);
1040         CPUPPCState *env = &cpu->env;
1041 
1042         if (env->spr_cb[SPR_PIR].default_value == pir) {
1043             return cpu;
1044         }
1045     }
1046 
1047     return NULL;
1048 }
1049 
1050 static ICPState *pnv_icp_get(XICSFabric *xi, int pir)
1051 {
1052     PowerPCCPU *cpu = ppc_get_vcpu_by_pir(pir);
1053 
1054     return cpu ? ICP(cpu->intc) : NULL;
1055 }
1056 
1057 static void pnv_pic_print_info(InterruptStatsProvider *obj,
1058                                Monitor *mon)
1059 {
1060     PnvMachineState *pnv = POWERNV_MACHINE(obj);
1061     int i;
1062     CPUState *cs;
1063 
1064     CPU_FOREACH(cs) {
1065         PowerPCCPU *cpu = POWERPC_CPU(cs);
1066 
1067         icp_pic_print_info(ICP(cpu->intc), mon);
1068     }
1069 
1070     for (i = 0; i < pnv->num_chips; i++) {
1071         ics_pic_print_info(&pnv->chips[i]->psi.ics, mon);
1072     }
1073 }
1074 
1075 static void pnv_get_num_chips(Object *obj, Visitor *v, const char *name,
1076                               void *opaque, Error **errp)
1077 {
1078     visit_type_uint32(v, name, &POWERNV_MACHINE(obj)->num_chips, errp);
1079 }
1080 
1081 static void pnv_set_num_chips(Object *obj, Visitor *v, const char *name,
1082                               void *opaque, Error **errp)
1083 {
1084     PnvMachineState *pnv = POWERNV_MACHINE(obj);
1085     uint32_t num_chips;
1086     Error *local_err = NULL;
1087 
1088     visit_type_uint32(v, name, &num_chips, &local_err);
1089     if (local_err) {
1090         error_propagate(errp, local_err);
1091         return;
1092     }
1093 
1094     /*
1095      * TODO: should we decide on how many chips we can create based
1096      * on #cores and Venice vs. Murano vs. Naples chip type etc...,
1097      */
1098     if (!is_power_of_2(num_chips) || num_chips > 4) {
1099         error_setg(errp, "invalid number of chips: '%d'", num_chips);
1100         return;
1101     }
1102 
1103     pnv->num_chips = num_chips;
1104 }
1105 
1106 static void powernv_machine_initfn(Object *obj)
1107 {
1108     PnvMachineState *pnv = POWERNV_MACHINE(obj);
1109     pnv->num_chips = 1;
1110 }
1111 
1112 static void powernv_machine_class_props_init(ObjectClass *oc)
1113 {
1114     object_class_property_add(oc, "num-chips", "uint32",
1115                               pnv_get_num_chips, pnv_set_num_chips,
1116                               NULL, NULL, NULL);
1117     object_class_property_set_description(oc, "num-chips",
1118                               "Specifies the number of processor chips",
1119                               NULL);
1120 }
1121 
1122 static void powernv_machine_class_init(ObjectClass *oc, void *data)
1123 {
1124     MachineClass *mc = MACHINE_CLASS(oc);
1125     XICSFabricClass *xic = XICS_FABRIC_CLASS(oc);
1126     InterruptStatsProviderClass *ispc = INTERRUPT_STATS_PROVIDER_CLASS(oc);
1127 
1128     mc->desc = "IBM PowerNV (Non-Virtualized)";
1129     mc->init = ppc_powernv_init;
1130     mc->reset = ppc_powernv_reset;
1131     mc->max_cpus = MAX_CPUS;
1132     mc->block_default_type = IF_IDE; /* Pnv provides a AHCI device for
1133                                       * storage */
1134     mc->no_parallel = 1;
1135     mc->default_boot_order = NULL;
1136     mc->default_ram_size = 1 * G_BYTE;
1137     xic->icp_get = pnv_icp_get;
1138     xic->ics_get = pnv_ics_get;
1139     xic->ics_resend = pnv_ics_resend;
1140     ispc->print_info = pnv_pic_print_info;
1141 
1142     powernv_machine_class_props_init(oc);
1143 }
1144 
1145 static const TypeInfo powernv_machine_info = {
1146     .name          = TYPE_POWERNV_MACHINE,
1147     .parent        = TYPE_MACHINE,
1148     .instance_size = sizeof(PnvMachineState),
1149     .instance_init = powernv_machine_initfn,
1150     .class_init    = powernv_machine_class_init,
1151     .interfaces = (InterfaceInfo[]) {
1152         { TYPE_XICS_FABRIC },
1153         { TYPE_INTERRUPT_STATS_PROVIDER },
1154         { },
1155     },
1156 };
1157 
1158 static void powernv_machine_register_types(void)
1159 {
1160     type_register_static(&powernv_machine_info);
1161     type_register_static(&pnv_chip_info);
1162     type_register_static(&pnv_chip_power8e_info);
1163     type_register_static(&pnv_chip_power8_info);
1164     type_register_static(&pnv_chip_power8nvl_info);
1165     type_register_static(&pnv_chip_power9_info);
1166 }
1167 
1168 type_init(powernv_machine_register_types)
1169