[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

[PATCH v14 6/6] docs: arm: add SCI SCMI SMC multi-agent driver docs


  • To: "xen-devel@xxxxxxxxxxxxxxxxxxxx" <xen-devel@xxxxxxxxxxxxxxxxxxxx>
  • From: Oleksii Moisieiev <Oleksii_Moisieiev@xxxxxxxx>
  • Date: Tue, 20 Oct 2026 08:43:21 +0000
  • Accept-language: en-US
  • Arc-authentication-results: i=1; mx.microsoft.com 1; spf=pass smtp.mailfrom=epam.com; dmarc=pass action=none header.from=epam.com; dkim=pass header.d=epam.com; arc=none
  • Arc-message-signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com; s=arcselector10001; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-AntiSpam-MessageData-ChunkCount:X-MS-Exchange-AntiSpam-MessageData-0:X-MS-Exchange-AntiSpam-MessageData-1; bh=eGase0MvgQ11xf3D0p639mDVM/bgys3NZwE31QW+lKw=; b=EUTEVXBmTKW0N9UQjNaD5vL9CD2SkjyWNdT+ASx1LgHvgzV9Zv4x2Cg0K1z1Upd8TeEsrRzAhXo86qmad2/mD+27Kv3UHVRZq6uPUMMUIh43Z1IrJbhR4PNu/0wuD2Nz2ikAo4VfW45ptlqTRdhqnDywOBPda7HFo5AyPZ6CIQrhSsWw7dRRRCQWycSob+YIt6gstnDtFqTpvGfskUzDwxJo6IhCs1a9ZIMeW94hSQRaqYcuCbPxJiiudE8SOx8ezTvxmAMviJsx044rgZVxe3JsL6Ts/i0cR5epfUCdiKNYioDIYiwT9GD97sXRTKNaLYancjEOx522xPaOUHmCsQ==
  • Arc-seal: i=1; a=rsa-sha256; s=arcselector10001; d=microsoft.com; cv=none; b=GrvyeA4tAnfXLw3xrJPjeNwULwNkmT929UmCwva1Wl74xvv1Wn/uw29u/peNJ7GLf51gld86NcIyKYpq+wDP57vhMNkqLbmoiAV+hY2Cdf7hZ40NzygAkGuGhK5XhGmCrWhbqj7VPRxvyCqPLLVWOS0N+95Ou2kYNY05HwzP0ZH688MC3qymJNC4ZCtUUdTumyR+7icYP1JlI9Le8jWgRkz+j7OAn3VinXqHrZMKctYHyHdrFvG76JRoWRNZcYHQcsx3XdHYDanDf1hKEGle0YTNpRkB80ncySYiOp8ChqIKl2TCnw1kwD37tVfnfzeMb+iIN/NNFGpGkeCLXkMt2w==
  • Authentication-results: eu.smtp.expurgate.cloud; dkim=pass header.s=selector1 header.d=epam.com header.i="@epam.com" header.h="From:Date:Subject:Message-ID:Content-Type:MIME-Version:x-ms-exchange-senderadcheck"
  • Authentication-results: mx.microsoft.com 1; dkim=none (message not signed) header.d=none;dmarc=none action=none header.from=epam.com;
  • Cc: Andrew Cooper <andrew.cooper3@xxxxxxxxxx>, Anthony PERARD <anthony.perard@xxxxxxxxxx>, Bertrand Marquis <bertrand.marquis@xxxxxxx>, Jan Beulich <jbeulich@xxxxxxxx>, Juergen Gross <jgross@xxxxxxxx>, Julien Grall <julien@xxxxxxx>, Michal Orzel <michal.orzel@xxxxxxx>, Oleksii Moisieiev <Oleksii_Moisieiev@xxxxxxxx>, Roger Pau Monné <roger@xxxxxxxxxxxxxx>, Stefano Stabellini <sstabellini@xxxxxxxxxx>, Volodymyr Babchuk <Volodymyr_Babchuk@xxxxxxxx>, Grygorii Strashko <grygorii_strashko@xxxxxxxx>
  • Delivery-date: Tue, 20 Oct 2026 08:43:31 +0000
  • List-id: Xen developer discussion <xen-devel.lists.xenproject.org>
  • Thread-index: AQHdYG8Q7qVBhYr1q0OFBlaFyWoovg==
  • Thread-topic: [PATCH v14 6/6] docs: arm: add SCI SCMI SMC multi-agent driver docs

From: Grygorii Strashko <grygorii_strashko@xxxxxxxx>

Add SCI SCMI SMC multi-agent driver documentation.
It includes a detailed description of the SCMI multi-agent driver.
This document explains the driver's functionality, configuration,
and the compilation process. The Xen SCMI multi-agent driver is
designed to provide SCMI access to system resources from different
domains.

Signed-off-by: Grygorii Strashko <grygorii_strashko@xxxxxxxx>
Signed-off-by: Oleksii Moisieiev <oleksii_moisieiev@xxxxxxxx>
---

Changes in v14:
- describe secondary agents as xen,scmi-agent nodes under agents
- update host, discovery and dom0less examples for the child-node format
- clarify shared-memory placement and platform RAM reservations

Changes in v10:
- rephrase section about /firmware/scmi. Mentioned that this node is
taken from Host DT and copied unmodified.
- fix xen,reg address for secondary domains for Dom0less configuration

Changes in v8:
- update documentation to match the last DT format
- fixed RST: "... code-block:: dts" -> ".. code-block:: dts"
- update documentation with dom0less configuration example
- update documentation with new param xen,dom0-sci-agent-id
instead of the command line parameter

Changes in v7:
- update documentation in section of the xen_scmi configuration which
is matched by "xen,sci" compatible instead of the direct path.

Changes in v6:
- remove all HVC mentions from the multi-agent doc
- update sci-agent-id parameter description in the documentation
- add missing Sign-of
- minor fixes across the document

Changes in v5:
- rework multi-agent driver to leave Host Device-tree unmodified

 .../arm/firmware/arm-scmi.rst                 | 405 ++++++++++++++++++
 1 file changed, 405 insertions(+)

diff --git a/docs/hypervisor-guide/arm/firmware/arm-scmi.rst 
b/docs/hypervisor-guide/arm/firmware/arm-scmi.rst
index d9698f4e4b..25459d22dc 100644
--- a/docs/hypervisor-guide/arm/firmware/arm-scmi.rst
+++ b/docs/hypervisor-guide/arm/firmware/arm-scmi.rst
@@ -36,6 +36,8 @@ The below sections describe SCMI support options available 
for Xen.
 
 | [1] `Arm SCMI <https://developer.arm.com/documentation/den0056/latest/>`_
 | [2] `System Control and Management Interface (SCMI) bindings 
<https://web.git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/tree/Documentation/devicetree/bindings/firmware/arm,scmi.yaml>`_
+| [3] `Generic Domain Access Controllers bindings 
<https://web.git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/tree/Documentation/devicetree/bindings/access-controllers/access-controllers.yaml>`_
+
 
 Simple SCMI over SMC calls forwarding driver (EL3)
 ------------------------------------------------------
@@ -189,3 +191,406 @@ except explicitly enabling SCMI with "arm_sci" xl.cfg 
option.
     ->        xen,reg = <0x0 0x47ff0000 0x0 0x1000 0x0 0x22001000>;
     ->        xen,force-assign-without-iommu;
       };
+
+SCMI SMC multi-agent driver (EL3)
+-------------------------------------
+
+The SCMI SMC multi-agent driver enables support for ARM EL3 Trusted Firmware-A 
(TF-A) which
+provides SCMI interface with multi-agent support, as shown below.
+
+::
+
+      +-----------------------------------------+
+      |                                         |
+      | EL3 TF-A SCMI                           |
+      +-------+--+-------+--+-------+--+-------++
+      |shmem1 |  |shmem0 |  |shmem2 |  |shmemX |
+      +-----+-+  +---+---+  +--+----+  +---+---+
+    smc-id1 |        |         |           |
+    agent1  |        |         |           |
+      +-----v--------+---------+-----------+----+
+      |              |         |           |    |
+      |              |         |           |    |
+      +--------------+---------+-----------+----+
+             smc-id0 |  smc-id2|    smc-idX|
+             agent0  |  agent2 |    agentX |
+                     |         |           |
+                +----v---+  +--v-----+  +--v-----+
+                |        |  |        |  |        |
+                | Dom0   |  | Dom1   |  | DomX   |
+                |        |  |        |  |        |
+                |        |  |        |  |        |
+                +--------+  +--------+  +--------+
+
+The EL3 SCMI multi-agent firmware is expected to provide SCMI SMC 
shared-memory transport
+for every Agent in the system. The SCMI Agent transport channel defined by 
pair:
+
+- smc-id: SMC function id used for Doorbell
+- shmem: shared memory for messages transfer, **Xen page aligned**.
+  Shared memory is mapped with the following flags: MT_DEVICE_nGnRE and 
_PAGE_DEVICE, indicating that this
+  memory is mapped as device memory.
+
+The following SCMI Agents are expected to be defined by SCMI FW to enable SCMI 
multi-agent functionality
+under Xen:
+
+- Xen management agent: trusted agents that accesses to the Base Protocol 
commands to configure
+  agent specific permissions
+- OSPM VM agents: non-trusted agent, one for each Guest domain which is  
allowed direct HW access.
+  At least one OSPM VM agent has to be provided by FW if HW is handled only by 
Dom0 or Driver Domain.
+
+The EL3 SCMI FW is expected to implement following Base protocol messages:
+
+- BASE_DISCOVER_AGENT (required for Xen; required for secondary agents without 
``reg``)
+- BASE_RESET_AGENT_CONFIGURATION (optional)
+- BASE_SET_DEVICE_PERMISSIONS (optional)
+
+The number of supported SCMI agents and their transport specifications are 
SCMI FW implementation
+specific.
+
+Compiling with multi-agent support
+^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
+
+To build with the SCMI SMC multi-agent driver support, enable Kconfig option:
+
+::
+
+    CONFIG_SCMI_SMC_MA
+
+
+Driver functionality
+^^^^^^^^^^^^^^^^^^^^
+
+The SCI SCMI SMC multi-agent driver implements following functionality:
+
+- The driver is initialized from the Xen SCMI container ``xen_scmi_config``
+  under ``/chosen/xen`` (for example ``/chosen/xen/xen_scmi_config/scmi``).
+  Only one SCMI interface is supported. The SCMI configuration must live under
+  the Xen SCMI container ``xen,sci`` beneath ``/chosen``.
+  The Xen SCMI mediator will bind only to the "arm,scmi-smc" node that is a 
child of
+  this "xen,sci" container; any other "arm,scmi-smc" nodes (for example under
+  "/firmware") are ignored to avoid stealing the host's SCMI OSPM instance.
+
+.. code-block:: dts
+
+        scmi_shm_1: sram@47ff1000 {
+            compatible = "arm,scmi-shmem";
+            reg = <0x0 0x47ff1000 0x0 0x1000>;
+        };
+        scmi_xen: scmi {
+          compatible = "arm,scmi-smc";
+          arm,smc-id = <0x82000003>; /* Xen management agent */
+          #address-cells = < 1>;
+          #size-cells = < 0>;
+          #access-controller-cells = < 1>;
+          shmem = <&scmi_shm_1>; /* Xen management shared memory */
+        };
+
+.. note::
+   This layout keeps the Host DT unchanged for Dom0 and baremetal Linux by
+   using func_id 0x82000002 / shmem 0x47ff0000 for Dom0, while Xen uses a
+   separate privileged channel func_id 0x82000003 / shmem 0x47ff1000. EL3
+   firmware enforces permissions per agent_id, so there is no conflict between
+   Dom0 and Xen channels.
+
+- The driver reads secondary agents from an ``agents`` child of the
+  ``xen,sci`` container. This child has ``#address-cells = <1>`` and
+  ``#size-cells = <0>``. Each enabled ``xen,scmi-agent`` child specifies its
+  doorbell in ``arm,smc-id`` and a single shared-memory phandle in ``shmem``.
+  The optional single-cell ``reg`` property supplies the SCMI agent ID
+  (0..254). IDs must be unique and distinct from Xen's management agent.
+  At least one enabled secondary agent is required.
+
+  The shared-memory nodes remain under ``xen_scmi_config``; the host OSPM
+  shared-memory node and ``/firmware/scmi`` remain in the platform DT.
+  A shared-memory node describes a channel location and does not reserve RAM.
+  If buffers occupy system RAM, the platform must reserve the entire
+  firmware-owned range in ``/reserved-memory`` before Xen boots. A single
+  reservation may cover multiple channels, including unused ones. SRAM
+  outside system RAM does not require a RAM reservation. The channel nodes
+  do not have to be moved into ``/reserved-memory``.
+
+.. code-block:: dts
+
+    / {
+        #address-cells = <2>;
+        #size-cells = <2>;
+
+        scmi_shm_0: sram@47ff0000 {
+            compatible = "arm,scmi-shmem";
+            reg = <0x0 0x47ff0000 0x0 0x1000>;
+        };
+
+        firmware {
+            scmi: scmi {
+                compatible = "arm,scmi-smc";
+                arm,smc-id = <0x82000002>; /* Host OSPM agent smc-id */
+                #address-cells = <1>;
+                #size-cells = <0>;
+                shmem = <&scmi_shm_0>; /* Host OSPM agent shmem */
+            };
+        };
+
+        chosen {
+            #address-cells = <2>;
+            #size-cells = <2>;
+            ranges;
+
+            xen {
+                #address-cells = <2>;
+                #size-cells = <2>;
+                ranges;
+
+                xen_scmi_config {
+                    compatible = "xen,sci";
+                    #address-cells = <2>;
+                    #size-cells = <2>;
+                    ranges;
+                    xen,dom0-sci-agent-id = <0>;
+
+                    /* Xen management channel */
+                    scmi_shm_1: sram@47ff1000 {
+                        compatible = "arm,scmi-shmem";
+                        reg = <0x0 0x47ff1000 0x0 0x1000>;
+                    };
+
+                    scmi_shm_2: sram@47ff2000 {
+                        compatible = "arm,scmi-shmem";
+                        reg = <0x0 0x47ff2000 0x0 0x1000>;
+                    };
+
+                    scmi_shm_3: sram@47ff3000 {
+                        compatible = "arm,scmi-shmem";
+                        reg = <0x0 0x47ff3000 0x0 0x1000>;
+                    };
+
+                    scmi_xen: scmi {
+                        compatible = "arm,scmi-smc";
+                        arm,smc-id = <0x82000003>; /* Xen management smc-id */
+                        #address-cells = <1>;
+                        #size-cells = <0>;
+                        #access-controller-cells = <1>;
+                        shmem = <&scmi_shm_1>; /* Xen management agent shmem */
+                    };
+
+                    agents {
+                        #address-cells = <1>;
+                        #size-cells = <0>;
+
+                        agent@0 {
+                            compatible = "xen,scmi-agent";
+                            reg = <0>;
+                            arm,smc-id = <0x82000002>;
+                            shmem = <&scmi_shm_0>;
+                        };
+
+                        agent@2 {
+                            compatible = "xen,scmi-agent";
+                            reg = <2>;
+                            arm,smc-id = <0x82000004>;
+                            shmem = <&scmi_shm_2>;
+                        };
+
+                        agent@3 {
+                            compatible = "xen,scmi-agent";
+                            reg = <3>;
+                            arm,smc-id = <0x82000005>;
+                            shmem = <&scmi_shm_3>;
+                        };
+                    };
+                };
+            };
+        };
+    };
+
+The ``xen,sci`` subtree is omitted from Dom0's DT. The host OSPM channel is
+copied to Dom0 when SCMI is enabled for it. Xen uses its separate privileged
+management channel to configure the other agents.
+
+To discover a secondary agent ID through ``BASE_DISCOVER_AGENT``, omit
+``reg`` and use a node name without a unit address. For example, replace
+only ``agent@2`` above with:
+
+.. code-block:: dts
+
+    agent-domu {
+        compatible = "xen,scmi-agent";
+        arm,smc-id = <0x82000004>;
+        shmem = <&scmi_shm_2>;
+    };
+
+Providing ``reg`` skips mapping and probing that secondary channel during
+initialization. A malformed ``reg`` is rejected. Xen always discovers its
+own management agent ID. Thus ``BASE_DISCOVER_AGENT`` is mandatory for the
+management channel and for secondary channels whose ``reg`` is omitted.
+The former flat secondary-agent properties are replaced by these nodes.
+
+.. note::
+
+    Note that Xen is the only one entry in the system which need to know about 
SCMI multi-agent support.
+
+- The driver implements the SCI subsystem interface required for configuring 
and enabling SCMI
+  functionality for Dom0/hwdom and Guest domains. To enable SCMI functionality 
for guest domain
+  it has to be configured with unique supported SCMI Agent_id and use 
corresponding SCMI SMC
+  shared-memory transport ``[smc-id, shmem]`` defined for this SCMI Agent_id.
+
+- Once Xen domain is configured it can communicate with EL3 SCMI FW:
+
+  - zero-copy, the guest domain puts/gets SCMI message in/from shmem;
+  - the guest triggers SMC exception with agent "smc-id" (doorbell);
+  - the Xen driver catches exception, do checks and synchronously forwards it 
to EL3 FW.
+
+- the Xen driver sends BASE_RESET_AGENT_CONFIGURATION message to Xen 
management agent channel on
+  domain destroy event. This allows to reset resources used by domain and so 
implement use-case
+  like domain reboot.
+
+
+Configure SCMI for Dom0
+^^^^^^^^^^^^^^^^^^^^^^^
+Set the Dom0 SCMI agent ID in the device tree using the Xen SCMI container 
under ``/chosen``.
+Add ``xen,dom0-sci-agent-id`` to the ``xen,sci`` node. If the property is 
absent, SCMI stays
+disabled for Dom0 and the SCMI nodes are removed from Dom0 DT.
+
+.. code-block:: dts
+
+  chosen {
+    xen {
+      ranges;
+      xen_scmi_config {
+        compatible = "xen,sci";
+        xen,dom0-sci-agent-id = <0>;  /* Dom0 agent ID */
+        /* agents, shared memory and scmi_xen as shown above */
+      };
+    };
+  };
+
+The Host DT ``/firmware/scmi`` node is copied to the Dom0 DT unmodified. 
However, for Dom0 SCMI
+configuration, Xen relies on the ``agents`` child and the 
``xen,dom0-sci-agent-id``
+property from the ``xen,sci`` container under ``/chosen``. If the 
``/firmware/scmi`` node is
+missing or disabled, or if ``xen,dom0-sci-agent-id`` is not provided, the Dom0 
SCMI agent will not
+be configured.
+
+.. note::
+
+  The ``xen,dom0-sci-agent-id`` value must match the ``func_id`` and ``shmem`` 
pairing provided by
+  the EL3 firmware for Dom0 (for example in the ``/firmware/scmi`` node).
+
+Configure SCMI for for guest domain with toolstack
+^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
+
+* In domain's xl.cfg file add **"arm_sci"** option as below
+
+::
+
+    arm_sci = "type=scmi_smc_multiagent,agent_id=2"
+
+* In domain's xl.cfg file enable access to the "arm,scmi-shmem" which should 
correspond
+  assigned "agent_id" for the domain, for example:
+
+::
+
+    iomem = [
+        "47ff2,1@22001",
+    ]
+
+.. note:: It's up to the user to select guest IPA for mapping SCMI 
shared-memory.
+
+* Add SCMI nodes to the Driver domain partial device tree as in the below 
example.
+  The "arm,smc-id" should correspond assigned agent_id for the domain:
+
+.. code::
+
+    passthrough {
+       scmi_shm_0: sram@22001000 {
+           compatible = "arm,scmi-shmem";
+           reg = <0x0 0x22001000 0x0 0x1000>;
+       };
+
+       firmware {
+            compatible = "simple-bus";
+                scmi: scmi {
+                    compatible = "arm,scmi-smc";
+                    arm,smc-id = <0x82000004>;  <--- smc-id for agent_id=2
+                    shmem = <&scmi_shm_0>;
+                    ...
+                }
+        }
+    }
+
+**Device specific access control**
+
+The XEN SCMI SMC multi-agent driver performs "access-controller" provider 
function in case
+EL3 SCMI FW implements SCMI "4.2.1.1 Device specific access control" and 
provides the
+BASE_SET_DEVICE_PERMISSIONS command to configure the devices that an agents 
have access to.
+The Host DT SCMI node should have "#access-controller-cells=<1>" property and 
DT devices should
+be bound to the SCMI node using Access Controllers bindings [3].
+
+For example:
+
+.. code-block:: dts
+
+    &i2c1 {
+            access-controllers = <&scmi 0>;
+    };
+
+Use domain's xl.cfg file **"dtdev"** property to assign SCMI devices from 
toolstack to the guest:
+
+::
+
+    dtdev = [
+        "/soc/i2c@e6508000",
+    ]
+
+.. note::
+
+    xl.cfg:"dtdev" need contain all nodes which are under SCMI management (not 
only those which are
+    behind IOMMU) and passed-through to the guest domain.
+
+Configure SCMI for predefined domains (dom0less)
+^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
+
+* add "xen,sci_type" and "xen,sci-agent-id" properties for required DomU 
("xen,domain") node
+
+::
+
+    xen,sci_type="scmi_smc_multiagent"
+    xen,sci-agent-id=2
+
+* add scmi nodes to the Driver domain partial device tree the same way as 
above (toolstack case) and
+  enable access to the "arm,scmi-shmem" according to the dom0less 
documentation. For example:
+
+.. code-block:: dts
+
+      scmi_shm_0: sram@22001000 {
+            compatible = "arm,scmi-shmem";
+            reg = <0x00 0x22001000 0x00 0x1000>;
+    ->        xen,reg = <0x0 0x47ff2000 0x0 0x1000 0x0 0x22001000>;
+    ->        xen,force-assign-without-iommu;
+      };
+
+* For SCMI device access control configure pass-through devices in the guest 
partial DT according to
+  the dom0less documentation and ensure that devices SCMI management has 
"xen,path" property set:
+
+Use the complete Xen SCMI configuration above. Remove
+``xen,dom0-sci-agent-id`` if Dom0 does not use SCMI. The guest selects the
+secondary channel described by ``agent@2``:
+
+.. code-block:: dts
+
+    chosen {
+        xen,domain@1 {
+            compatible = "xen,domain";
+            xen,sci_type = "scmi_smc_multiagent";
+            xen,sci-agent-id = <2>;
+            /* other domain properties here */
+        };
+    };
+
+.. code-block:: dts
+
+               i2c@e6508000 {
+            ...
+                       reg = <0x00 0xe6508000 0x00 0x1000>;
+    ->        xen,path = "/soc/i2c@e6508000"
+    ->        xen,reg = <0x0 0xe6508000 0x0 0x1000 0x0 0xe6508000>;
+    ->        xen,force-assign-without-iommu;
+        };
-- 
2.43.0



 


Rackspace

Lists.xenproject.org is hosted with RackSpace, monitoring our
servers 24x7x365 and backed by RackSpace's Fanatical Support®.