tools: config-create: Exclude DMAR units from memory regions

The cells must not be able to access the physical units. We will emulate
what is required for interrupt remapping.

At this chance, clarify in a comment that the IOAPIC is also excluded.

Signed-off-by: Jan Kiszka <jan.kiszka@siemens.com>

diff --git a/tools/jailhouse-config-create b/tools/jailhouse-config-create
index c54a05c3229ff443fd88823bf7912d1d8dbe88c7..0b46575ad85376ab669710a106f0d56aefa69ec3 100755 (executable)
--- a/tools/jailhouse-config-create
+++ b/tools/jailhouse-config-create
@@ -266,7 +266,8 @@ class IOMemRegionTree:
             # blacklisted on all levels
             if (
                 (s.find('PCI MMCONFIG') >= 0) or
-                (s.find('APIC') >= 0)
+                (s.find('APIC') >= 0) or  # covers both APIC and IOAPIC
+                (s.find('dmar') >= 0)
             ):
                 continue