golden hour

/usr/include/linux

File/Folder	Size	Actions
a.out.h	6.73 KB
acct.h	3.82 KB
acrn.h	16.29 KB
adb.h	1.11 KB
adfs_fs.h	993 B
affs_hardblocks.h	1.54 KB
agpgart.h	3.85 KB
aio_abi.h	3.32 KB
am437x-vpfe.h	3.59 KB
android	-
apm_bios.h	3.6 KB
arcfb.h	213 B
arm_sdei.h	2.69 KB
aspeed-lpc-ctrl.h	1.74 KB
aspeed-p2a-ctrl.h	1.86 KB
atalk.h	1023 B
atm.h	7.7 KB
atm_eni.h	648 B
atm_he.h	406 B
atm_idt77105.h	955 B
atm_nicstar.h	1.25 KB
atm_tcp.h	1.58 KB
atm_zatm.h	1.5 KB
atmapi.h	952 B
atmarp.h	1.27 KB
atmbr2684.h	3.19 KB
atmclip.h	576 B
atmdev.h	7.5 KB
atmioc.h	1.61 KB
atmlec.h	2.33 KB
atmmpc.h	4.13 KB
atmppp.h	639 B
atmsap.h	4.85 KB
atmsvc.h	1.81 KB
audit.h	21.06 KB
auto_dev-ioctl.h	4.87 KB
auto_fs.h	6.28 KB
auto_fs4.h	451 B
auxvec.h	1.56 KB
ax25.h	2.76 KB
batadv_packet.h	19.87 KB
batman_adv.h	16.49 KB
baycom.h	883 B
bcm933xx_hcs.h	419 B
bfs_fs.h	1.86 KB
binfmts.h	776 B
bits.h	447 B
blkpg.h	904 B
blktrace_api.h	4.59 KB
blkzoned.h	6.34 KB
bpf.h	272.11 KB
bpf_common.h	1.33 KB
bpf_perf_event.h	529 B
bpfilter.h	465 B
bpqether.h	981 B
bsg.h	2.44 KB
bt-bmc.h	572 B
btf.h	5.46 KB
btrfs.h	29.85 KB
btrfs_tree.h	25.22 KB
byteorder	-
cachefiles.h	1.61 KB
caif	-
can	-
can.h	11.03 KB
capability.h	13.17 KB
capi.h	3.05 KB
cciss_defs.h	3.2 KB
cciss_ioctl.h	2.7 KB
ccs.h	767 B
cdrom.h	28.87 KB
cec-funcs.h	53.14 KB
cec.h	40.47 KB
cfm_bridge.h	1.42 KB
cgroupstats.h	2.17 KB
chio.h	5.16 KB
cifs	-
close_range.h	377 B
cm4000_cs.h	1.76 KB
cn_proc.h	4.05 KB
coda.h	17.79 KB
coff.h	12.25 KB
connector.h	2.2 KB
const.h	987 B
coresight-stm.h	747 B
cramfs_fs.h	3.47 KB
cryptouser.h	5.2 KB
cuda.h	905 B
cxl_mem.h	7.73 KB
cycx_cfm.h	2.92 KB
dcbnl.h	24.7 KB
dccp.h	6.29 KB
devlink.h	22.3 KB
dlm.h	2.49 KB
dlm_device.h	2.48 KB
dlm_netlink.h	1.13 KB
dlm_plock.h	894 B
dlmconstants.h	4.96 KB
dm-ioctl.h	11.48 KB
dm-log-userspace.h	14.83 KB
dma-buf.h	5.12 KB
dma-heap.h	1.36 KB
dn.h	4.53 KB
dns_resolver.h	3.86 KB
dpll.h	7.19 KB
dqblk_xfs.h	9.17 KB
dvb	-
edd.h	5.47 KB
efs_fs_sb.h	2.17 KB
elf-em.h	2.57 KB
elf-fdpic.h	1.1 KB
elf.h	14.69 KB
errno.h	23 B
errqueue.h	1.94 KB
erspan.h	1.03 KB
ethtool.h	100.09 KB
ethtool_netlink.h	29.87 KB
eventfd.h	264 B
eventpoll.h	2.84 KB
f2fs.h	3.22 KB
fadvise.h	842 B
falloc.h	3.5 KB
fanotify.h	6.64 KB
fb.h	16.09 KB
fcntl.h	4.22 KB
fd.h	11.83 KB
fdreg.h	5.24 KB
fib_rules.h	1.99 KB
fiemap.h	2.71 KB
filter.h	2.16 KB
firewire-cdev.h	43.2 KB
firewire-constants.h	3.16 KB
fou.h	819 B
fpga-dfl.h	8.52 KB
fs.h	12.88 KB
fscrypt.h	6.41 KB
fsi.h	2.2 KB
fsl_hypervisor.h	7.13 KB
fsl_mc.h	734 B
fsmap.h	4.29 KB
fsverity.h	3.11 KB
fuse.h	25.36 KB
futex.h	5.98 KB
gameport.h	897 B
gen_stats.h	1.49 KB
genetlink.h	2.19 KB
genwqe	-
gfs2_ondisk.h	14.43 KB
gpio.h	19.46 KB
gsmmux.h	4.4 KB
gtp.h	734 B
handshake.h	1.61 KB
hash_info.h	971 B
hdlc	-
hdlc.h	637 B
hdlcdrv.h	2.84 KB
hdreg.h	22.17 KB
hid.h	2.04 KB
hiddev.h	6.2 KB
hidraw.h	1.95 KB
hpet.h	743 B
hsi	-
hsr_netlink.h	1.08 KB
hw_breakpoint.h	742 B
hyperv.h	10.89 KB
i2c-dev.h	1.83 KB
i2c.h	6.73 KB
i2o-dev.h	11.28 KB
i8k.h	1.49 KB
icmp.h	4.67 KB
icmpv6.h	4.2 KB
idxd.h	9.11 KB
if.h	10.67 KB
if_addr.h	1.84 KB
if_addrlabel.h	721 B
if_alg.h	1.53 KB
if_arcnet.h	3.63 KB
if_arp.h	6.41 KB
if_bonding.h	5.02 KB
if_bridge.h	20.18 KB
if_cablemodem.h	986 B
if_eql.h	1.32 KB
if_ether.h	8.21 KB
if_fc.h	1.7 KB
if_fddi.h	4.27 KB
if_hippi.h	4.14 KB
if_infiniband.h	1.22 KB
if_link.h	52.83 KB
if_ltalk.h	210 B
if_macsec.h	6.35 KB
if_packet.h	7.99 KB
if_phonet.h	424 B
if_plip.h	660 B
if_ppp.h	29 B
if_pppol2tp.h	3.23 KB
if_pppox.h	4.76 KB
if_slip.h	872 B
if_team.h	2.54 KB
if_tun.h	4 KB
if_tunnel.h	5.36 KB
if_vlan.h	1.79 KB
if_x25.h	881 B
if_xdp.h	4.89 KB
ife.h	351 B
igmp.h	2.99 KB
iio	-
ila.h	1.22 KB
in.h	10.15 KB
in6.h	7.36 KB
in_route.h	936 B
inet_diag.h	4.9 KB
inotify.h	3.21 KB
input-event-codes.h	29.5 KB
input.h	15.84 KB
io_uring.h	20.4 KB
ioctl.h	163 B
iommufd.h	28.39 KB
ioprio.h	4.08 KB
ip.h	4.7 KB
ip6_tunnel.h	1.91 KB
ip_vs.h	13.8 KB
ipc.h	2.05 KB
ipmi.h	15.08 KB
ipmi_bmc.h	488 B
ipmi_msgdefs.h	3.35 KB
ipmi_ssif_bmc.h	441 B
ipsec.h	947 B
ipv6.h	4.07 KB
ipv6_route.h	1.86 KB
ipx.h	2.29 KB
irqnr.h	104 B
isdn	-
iso_fs.h	6.33 KB
isst_if.h	14.92 KB
ivtv.h	2.95 KB
ivtvfb.h	1.18 KB
jffs2.h	6.66 KB
joystick.h	3.35 KB
kcm.h	822 B
kcmp.h	522 B
kcov.h	1.92 KB
kd.h	6.3 KB
kdev_t.h	383 B
kernel-page-flags.h	900 B
kernel.h	194 B
kernelcapi.h	1019 B
kexec.h	2.05 KB
keyboard.h	13.14 KB
keyctl.h	5.86 KB
kfd_ioctl.h	56.75 KB
kfd_sysfs.h	5.1 KB
kvm.h	46.76 KB
kvm_para.h	1001 B
l2tp.h	5.61 KB
landlock.h	10.14 KB
libc-compat.h	8.09 KB
limits.h	937 B
lirc.h	7.95 KB
llc.h	3.09 KB
loadpin.h	834 B
loop.h	3.32 KB
lp.h	4.09 KB
lsm.h	1.51 KB
lwtunnel.h	2.31 KB
magic.h	3.73 KB
major.h	4.55 KB
map_to_7segment.h	6.45 KB
matroxfb.h	1.43 KB
max2175.h	1.01 KB
mdio.h	23.78 KB
media-bus-format.h	6.75 KB
media.h	12.46 KB
mei.h	3.4 KB
mei_uuid.h	738 B
membarrier.h	9.14 KB
memfd.h	1.43 KB
mempolicy.h	2.51 KB
meye.h	2.47 KB
mii.h	9.27 KB
minix_fs.h	2.07 KB
misc	-
mman.h	1.75 KB
mmc	-
mmtimer.h	2.07 KB
module.h	293 B
mount.h	4.9 KB
mpls.h	2.25 KB
mpls_iptunnel.h	761 B
mptcp.h	3.67 KB
mptcp_pm.h	4.3 KB
mqueue.h	2.15 KB
mroute.h	5.78 KB
mroute6.h	4.81 KB
mrp_bridge.h	1.67 KB
msdos_fs.h	6.57 KB
msg.h	3.31 KB
mtio.h	7.98 KB
nbd-netlink.h	2.35 KB
nbd.h	3.77 KB
ncsi.h	4.71 KB
ndctl.h	6.67 KB
neighbour.h	5.91 KB
net.h	2.04 KB
net_dropmon.h	2.85 KB
net_namespace.h	715 B
net_tstamp.h	5.97 KB
netconf.h	614 B
netdev.h	5.39 KB
netdevice.h	2.2 KB
netfilter	-
netfilter.h	1.69 KB
netfilter_arp	-
netfilter_arp.h	445 B
netfilter_bridge	-
netfilter_bridge.h	1.14 KB
netfilter_decnet.h	1.72 KB
netfilter_ipv4	-
netfilter_ipv4.h	1.45 KB
netfilter_ipv6	-
netfilter_ipv6.h	1.35 KB
netlink.h	12.09 KB
netlink_diag.h	1.49 KB
netrom.h	807 B
nexthop.h	3.97 KB
nfc.h	10.95 KB
nfs.h	4.36 KB
nfs2.h	1.43 KB
nfs3.h	2.4 KB
nfs4.h	6.54 KB
nfs4_mount.h	1.89 KB
nfs_fs.h	1.62 KB
nfs_idmap.h	2.19 KB
nfs_mount.h	2.09 KB
nfsacl.h	718 B
nfsd	-
nfsd_netlink.h	1.95 KB
nilfs2_api.h	7.41 KB
nilfs2_ondisk.h	17.66 KB
nitro_enclaves.h	12.85 KB
nl80211.h	338.95 KB
nsfs.h	639 B
nubus.h	8 KB
nvme_ioctl.h	2.43 KB
nvram.h	532 B
omap3isp.h	20.36 KB
omapfb.h	5.78 KB
oom.h	511 B
openat2.h	1.42 KB
openvswitch.h	40.41 KB
packet_diag.h	1.63 KB
param.h	141 B
parport.h	3.56 KB
patchkey.h	892 B
pci.h	1.35 KB
pci_regs.h	60.58 KB
pcitest.h	920 B
perf_event.h	42.43 KB
personality.h	2.05 KB
pfkeyv2.h	10.32 KB
pfrut.h	7.8 KB
pg.h	2.34 KB
phantom.h	1.62 KB
phonet.h	4.57 KB
pidfd.h	256 B
pkt_cls.h	18.65 KB
pkt_sched.h	28.66 KB
pktcdvd.h	2.63 KB
pmu.h	5.32 KB
poll.h	22 B
posix_acl.h	1.22 KB
posix_acl_xattr.h	1.09 KB
posix_types.h	1.07 KB
ppdev.h	3.21 KB
ppp-comp.h	2.47 KB
ppp-ioctl.h	5.59 KB
ppp_defs.h	5.43 KB
pps.h	4.62 KB
pr.h	1.59 KB
prctl.h	10.81 KB
psample.h	2.57 KB
psci.h	5.02 KB
psp-dbc.h	5.16 KB
psp-sev.h	6.26 KB
ptp_clock.h	7.35 KB
ptrace.h	4.29 KB
qemu_fw_cfg.h	2.41 KB
qnx4_fs.h	2.27 KB
qnxtypes.h	624 B
qrtr.h	893 B
quota.h	6.16 KB
radeonfb.h	360 B
raid	-
random.h	1.38 KB
rds.h	10.91 KB
reboot.h	1.31 KB
reiserfs_fs.h	775 B
reiserfs_xattr.h	533 B
remoteproc_cdev.h	1.08 KB
resource.h	2.32 KB
rfkill.h	6.45 KB
rio_cm_cdev.h	3.17 KB
rio_mport_cdev.h	9.11 KB
rkisp1-config.h	30.63 KB
romfs_fs.h	1.21 KB
rose.h	2.18 KB
route.h	2.28 KB
rpl.h	814 B
rpl_iptunnel.h	424 B
rpmsg.h	1.03 KB
rpmsg_types.h	288 B
rseq.h	4.79 KB
rtc.h	5.19 KB
rtnetlink.h	20.8 KB
rxrpc.h	4.81 KB
scc.h	4.52 KB
sched	-
sched.h	6.12 KB
scif_ioctl.h	6.23 KB
screen_info.h	2.42 KB
sctp.h	35.18 KB
seccomp.h	5.6 KB
securebits.h	2.64 KB
sed-opal.h	5.29 KB
seg6.h	1.14 KB
seg6_genl.h	589 B
seg6_hmac.h	423 B
seg6_iptunnel.h	984 B
seg6_local.h	3.78 KB
selinux_netlink.h	1.17 KB
sem.h	2.98 KB
serial.h	4.9 KB
serial_core.h	4.93 KB
serial_reg.h	15.65 KB
serio.h	2.09 KB
sev-guest.h	2.47 KB
shm.h	3.71 KB
signal.h	388 B
signalfd.h	1.2 KB
smc.h	8.31 KB
smc_diag.h	2.77 KB
smiapp.h	1.03 KB
snmp.h	13.92 KB
sock_diag.h	1.27 KB
socket.h	919 B
sockios.h	6.69 KB
sonet.h	2.24 KB
sonypi.h	5.18 KB
sound.h	1.21 KB
soundcard.h	44.96 KB
spi	-
stat.h	7.23 KB
stddef.h	1.69 KB
stm.h	1.25 KB
string.h	238 B
sunrpc	-
surface_aggregator	-
suspend_ioctls.h	1.4 KB
swab.h	6.76 KB
switchtec_ioctl.h	5.14 KB
sync_file.h	3.49 KB
synclink.h	8.77 KB
sysctl.h	25.3 KB
sysinfo.h	1.02 KB
target_core_user.h	4.52 KB
taskstats.h	8.13 KB
tc_act	-
tc_ematch	-
tcp.h	11.65 KB
tcp_metrics.h	1.94 KB
tdx-guest.h	1.27 KB
tee.h	13.09 KB
termios.h	172 B
thermal.h	3.23 KB
time.h	1.71 KB
time_types.h	1.24 KB
timerfd.h	936 B
times.h	278 B
timex.h	7.63 KB
tiocl.h	1.69 KB
tipc.h	8.62 KB
tipc_config.h	14.52 KB
tipc_netlink.h	9.17 KB
tipc_sockets_diag.h	468 B
tls.h	7.06 KB
toshiba.h	1.88 KB
tps6594_pfsm.h	1.13 KB
tty.h	1.55 KB
tty_flags.h	4.4 KB
types.h	1.6 KB
udf_fs_i.h	697 B
udmabuf.h	643 B
udp.h	1.65 KB
uhid.h	4.54 KB
uinput.h	9.04 KB
uio.h	732 B
uleds.h	798 B
ultrasound.h	4.46 KB
um_timetravel.h	3.87 KB
un.h	384 B
unistd.h	220 B
unix_diag.h	1.3 KB
usb	-
usbdevice_fs.h	8.12 KB
usbip.h	1.47 KB
userfaultfd.h	10.68 KB
userio.h	1.48 KB
utime.h	223 B
utsname.h	669 B
uuid.h	28 B
uvcvideo.h	2.57 KB
v4l2-common.h	2.01 KB
v4l2-controls.h	94.59 KB
v4l2-dv-timings.h	30.39 KB
v4l2-mediabus.h	5.3 KB
v4l2-subdev.h	9.76 KB
vbox_err.h	7.09 KB
vbox_vmmdev_types.h	11.38 KB
vboxguest.h	9.15 KB
vdpa.h	1.74 KB
vduse.h	9.58 KB
version.h	374 B
veth.h	224 B
vfio.h	70.12 KB
vfio_ccw.h	1.29 KB
vfio_zdev.h	2.48 KB
vhost.h	8.24 KB
vhost_types.h	4.77 KB
videodev2.h	98.83 KB
virtio_9p.h	2 KB
virtio_balloon.h	5.16 KB
virtio_blk.h	9.75 KB
virtio_bt.h	910 B
virtio_config.h	4.36 KB
virtio_console.h	3.08 KB
virtio_crypto.h	13.56 KB
virtio_fs.h	573 B
virtio_gpio.h	1.7 KB
virtio_gpu.h	11.28 KB
virtio_i2c.h	1.16 KB
virtio_ids.h	3.7 KB
virtio_input.h	2.46 KB
virtio_iommu.h	3.84 KB
virtio_mem.h	6.99 KB
virtio_mmio.h	4.85 KB
virtio_net.h	14.72 KB
virtio_pci.h	7.3 KB
virtio_pcidev.h	2.33 KB
virtio_pmem.h	641 B
virtio_ring.h	8.52 KB
virtio_rng.h	265 B
virtio_scmi.h	637 B
virtio_scsi.h	5.94 KB
virtio_snd.h	12.86 KB
virtio_types.h	2.1 KB
virtio_vsock.h	3.27 KB
vm_sockets.h	7.18 KB
vm_sockets_diag.h	963 B
vmcore.h	455 B
vsockmon.h	1.84 KB
vt.h	2.99 KB
vtpm_proxy.h	1.68 KB
wait.h	682 B
watch_queue.h	3.41 KB
watchdog.h	2.28 KB
wireguard.h	7.57 KB
wireless.h	41.7 KB
wmi.h	1.72 KB
wwan.h	295 B
x25.h	3.48 KB
xattr.h	2.95 KB
xdp_diag.h	1.43 KB
xfrm.h	12.33 KB
xilinx-v4l2-controls.h	2.91 KB
zorro.h	3.22 KB
zorro_ids.h	29.26 KB

Edit: nitro_enclaves.h

/* SPDX-License-Identifier: GPL-2.0 WITH Linux-syscall-note */
/*
 * Copyright 2020-2021 Amazon.com, Inc. or its affiliates. All Rights Reserved.
 */

#ifndef _LINUX_NITRO_ENCLAVES_H_
#define _LINUX_NITRO_ENCLAVES_H_

#include <linux/types.h>

/**
 * DOC: Nitro Enclaves (NE) Kernel Driver Interface
 */

/**
 * NE_CREATE_VM - The command is used to create a slot that is associated with
 *		  an enclave VM.
 *		  The generated unique slot id is an output parameter.
 *		  The ioctl can be invoked on the /dev/nitro_enclaves fd, before
 *		  setting any resources, such as memory and vCPUs, for an
 *		  enclave. Memory and vCPUs are set for the slot mapped to an enclave.
 *		  A NE CPU pool has to be set before calling this function. The
 *		  pool can be set after the NE driver load, using
 *		  /sys/module/nitro_enclaves/parameters/ne_cpus.
 *		  Its format is the detailed in the cpu-lists section:
 *		  https://www.kernel.org/doc/html/latest/admin-guide/kernel-parameters.html
 *		  CPU 0 and its siblings have to remain available for the
 *		  primary / parent VM, so they cannot be set for enclaves. Full
 *		  CPU core(s), from the same NUMA node, need(s) to be included
 *		  in the CPU pool.
 *
 * Context: Process context.
 * Return:
 * * Enclave file descriptor		- Enclave file descriptor used with
 *					  ioctl calls to set vCPUs and memory
 *					  regions, then start the enclave.
 * *  -1				- There was a failure in the ioctl logic.
 * On failure, errno is set to:
 * * EFAULT				- copy_to_user() failure.
 * * ENOMEM				- Memory allocation failure for internal
 *					  bookkeeping variables.
 * * NE_ERR_NO_CPUS_AVAIL_IN_POOL	- No NE CPU pool set / no CPUs available
 *					  in the pool.
 * * Error codes from get_unused_fd_flags() and anon_inode_getfile().
 * * Error codes from the NE PCI device request.
 */
#define NE_CREATE_VM			_IOR(0xAE, 0x20, __u64)

/**
 * NE_ADD_VCPU - The command is used to set a vCPU for an enclave. The vCPU can
 *		 be auto-chosen from the NE CPU pool or it can be set by the
 *		 caller, with the note that it needs to be available in the NE
 *		 CPU pool. Full CPU core(s), from the same NUMA node, need(s) to
 *		 be associated with an enclave.
 *		 The vCPU id is an input / output parameter. If its value is 0,
 *		 then a CPU is chosen from the enclave CPU pool and returned via
 *		 this parameter.
 *		 The ioctl can be invoked on the enclave fd, before an enclave
 *		 is started.
 *
 * Context: Process context.
 * Return:
 * * 0					- Logic successfully completed.
 * *  -1				- There was a failure in the ioctl logic.
 * On failure, errno is set to:
 * * EFAULT				- copy_from_user() / copy_to_user() failure.
 * * ENOMEM				- Memory allocation failure for internal
 *					  bookkeeping variables.
 * * EIO				- Current task mm is not the same as the one
 *					  that created the enclave.
 * * NE_ERR_NO_CPUS_AVAIL_IN_POOL	- No CPUs available in the NE CPU pool.
 * * NE_ERR_VCPU_ALREADY_USED		- The provided vCPU is already used.
 * * NE_ERR_VCPU_NOT_IN_CPU_POOL	- The provided vCPU is not available in the
 *					  NE CPU pool.
 * * NE_ERR_VCPU_INVALID_CPU_CORE	- The core id of the provided vCPU is invalid
 *					  or out of range.
 * * NE_ERR_NOT_IN_INIT_STATE		- The enclave is not in init state
 *					  (init = before being started).
 * * NE_ERR_INVALID_VCPU		- The provided vCPU is not in the available
 *					  CPUs range.
 * * Error codes from the NE PCI device request.
 */
#define NE_ADD_VCPU			_IOWR(0xAE, 0x21, __u32)

/**
 * NE_GET_IMAGE_LOAD_INFO - The command is used to get information needed for
 *			    in-memory enclave image loading e.g. offset in
 *			    enclave memory to start placing the enclave image.
 *			    The image load info is an input / output parameter.
 *			    It includes info provided by the caller - flags -
 *			    and returns the offset in enclave memory where to
 *			    start placing the enclave image.
 *			    The ioctl can be invoked on the enclave fd, before
 *			    an enclave is started.
 *
 * Context: Process context.
 * Return:
 * * 0				- Logic successfully completed.
 * *  -1			- There was a failure in the ioctl logic.
 * On failure, errno is set to:
 * * EFAULT			- copy_from_user() / copy_to_user() failure.
 * * NE_ERR_NOT_IN_INIT_STATE	- The enclave is not in init state (init =
 *				  before being started).
 * * NE_ERR_INVALID_FLAG_VALUE	- The value of the provided flag is invalid.
 */
#define NE_GET_IMAGE_LOAD_INFO		_IOWR(0xAE, 0x22, struct ne_image_load_info)

/**
 * NE_SET_USER_MEMORY_REGION - The command is used to set a memory region for an
 *			       enclave, given the allocated memory from the
 *			       userspace. Enclave memory needs to be from the
 *			       same NUMA node as the enclave CPUs.
 *			       The user memory region is an input parameter. It
 *			       includes info provided by the caller - flags,
 *			       memory size and userspace address.
 *			       The ioctl can be invoked on the enclave fd,
 *			       before an enclave is started.
 *
 * Context: Process context.
 * Return:
 * * 0					- Logic successfully completed.
 * *  -1				- There was a failure in the ioctl logic.
 * On failure, errno is set to:
 * * EFAULT				- copy_from_user() failure.
 * * EINVAL				- Invalid physical memory region(s) e.g.
 *					  unaligned address.
 * * EIO				- Current task mm is not the same as
 *					  the one that created the enclave.
 * * ENOMEM				- Memory allocation failure for internal
 *					  bookkeeping variables.
 * * NE_ERR_NOT_IN_INIT_STATE		- The enclave is not in init state
 *					  (init = before being started).
 * * NE_ERR_INVALID_MEM_REGION_SIZE	- The memory size of the region is not
 *					  multiple of 2 MiB.
 * * NE_ERR_INVALID_MEM_REGION_ADDR	- Invalid user space address given.
 * * NE_ERR_UNALIGNED_MEM_REGION_ADDR	- Unaligned user space address given.
 * * NE_ERR_MEM_REGION_ALREADY_USED	- The memory region is already used.
 * * NE_ERR_MEM_NOT_HUGE_PAGE		- The memory region is not backed by
 *					  huge pages.
 * * NE_ERR_MEM_DIFFERENT_NUMA_NODE	- The memory region is not from the same
 *					  NUMA node as the CPUs.
 * * NE_ERR_MEM_MAX_REGIONS		- The number of memory regions set for
 *					  the enclave reached maximum.
 * * NE_ERR_INVALID_PAGE_SIZE		- The memory region is not backed by
 *					  pages multiple of 2 MiB.
 * * NE_ERR_INVALID_FLAG_VALUE		- The value of the provided flag is invalid.
 * * Error codes from get_user_pages().
 * * Error codes from the NE PCI device request.
 */
#define NE_SET_USER_MEMORY_REGION	_IOW(0xAE, 0x23, struct ne_user_memory_region)

/**
 * NE_START_ENCLAVE - The command is used to trigger enclave start after the
 *		      enclave resources, such as memory and CPU, have been set.
 *		      The enclave start info is an input / output parameter. It
 *		      includes info provided by the caller - enclave cid and
 *		      flags - and returns the cid (if input cid is 0).
 *		      The ioctl can be invoked on the enclave fd, after an
 *		      enclave slot is created and resources, such as memory and
 *		      vCPUs are set for an enclave.
 *
 * Context: Process context.
 * Return:
 * * 0					- Logic successfully completed.
 * *  -1				- There was a failure in the ioctl logic.
 * On failure, errno is set to:
 * * EFAULT				- copy_from_user() / copy_to_user() failure.
 * * NE_ERR_NOT_IN_INIT_STATE		- The enclave is not in init state
 *					  (init = before being started).
 * * NE_ERR_NO_MEM_REGIONS_ADDED	- No memory regions are set.
 * * NE_ERR_NO_VCPUS_ADDED		- No vCPUs are set.
 * *  NE_ERR_FULL_CORES_NOT_USED	- Full core(s) not set for the enclave.
 * * NE_ERR_ENCLAVE_MEM_MIN_SIZE	- Enclave memory is less than minimum
 *					  memory size (64 MiB).
 * * NE_ERR_INVALID_FLAG_VALUE		- The value of the provided flag is invalid.
 * *  NE_ERR_INVALID_ENCLAVE_CID	- The provided enclave CID is invalid.
 * * Error codes from the NE PCI device request.
 */
#define NE_START_ENCLAVE		_IOWR(0xAE, 0x24, struct ne_enclave_start_info)

/**
 * DOC: NE specific error codes
 */

/**
 * NE_ERR_VCPU_ALREADY_USED - The provided vCPU is already used.
 */
#define NE_ERR_VCPU_ALREADY_USED		(256)
/**
 * NE_ERR_VCPU_NOT_IN_CPU_POOL - The provided vCPU is not available in the
 *				 NE CPU pool.
 */
#define NE_ERR_VCPU_NOT_IN_CPU_POOL		(257)
/**
 * NE_ERR_VCPU_INVALID_CPU_CORE - The core id of the provided vCPU is invalid
 *				  or out of range of the NE CPU pool.
 */
#define NE_ERR_VCPU_INVALID_CPU_CORE		(258)
/**
 * NE_ERR_INVALID_MEM_REGION_SIZE - The user space memory region size is not
 *				    multiple of 2 MiB.
 */
#define NE_ERR_INVALID_MEM_REGION_SIZE		(259)
/**
 * NE_ERR_INVALID_MEM_REGION_ADDR - The user space memory region address range
 *				    is invalid.
 */
#define NE_ERR_INVALID_MEM_REGION_ADDR		(260)
/**
 * NE_ERR_UNALIGNED_MEM_REGION_ADDR - The user space memory region address is
 *				      not aligned.
 */
#define NE_ERR_UNALIGNED_MEM_REGION_ADDR	(261)
/**
 * NE_ERR_MEM_REGION_ALREADY_USED - The user space memory region is already used.
 */
#define NE_ERR_MEM_REGION_ALREADY_USED		(262)
/**
 * NE_ERR_MEM_NOT_HUGE_PAGE - The user space memory region is not backed by
 *			      contiguous physical huge page(s).
 */
#define NE_ERR_MEM_NOT_HUGE_PAGE		(263)
/**
 * NE_ERR_MEM_DIFFERENT_NUMA_NODE - The user space memory region is backed by
 *				    pages from different NUMA nodes than the CPUs.
 */
#define NE_ERR_MEM_DIFFERENT_NUMA_NODE		(264)
/**
 * NE_ERR_MEM_MAX_REGIONS - The supported max memory regions per enclaves has
 *			    been reached.
 */
#define NE_ERR_MEM_MAX_REGIONS			(265)
/**
 * NE_ERR_NO_MEM_REGIONS_ADDED - The command to start an enclave is triggered
 *				 and no memory regions are added.
 */
#define NE_ERR_NO_MEM_REGIONS_ADDED		(266)
/**
 * NE_ERR_NO_VCPUS_ADDED - The command to start an enclave is triggered and no
 *			   vCPUs are added.
 */
#define NE_ERR_NO_VCPUS_ADDED			(267)
/**
 * NE_ERR_ENCLAVE_MEM_MIN_SIZE - The enclave memory size is lower than the
 *				 minimum supported.
 */
#define NE_ERR_ENCLAVE_MEM_MIN_SIZE		(268)
/**
 * NE_ERR_FULL_CORES_NOT_USED - The command to start an enclave is triggered and
 *				full CPU cores are not set.
 */
#define NE_ERR_FULL_CORES_NOT_USED		(269)
/**
 * NE_ERR_NOT_IN_INIT_STATE - The enclave is not in init state when setting
 *			      resources or triggering start.
 */
#define NE_ERR_NOT_IN_INIT_STATE		(270)
/**
 * NE_ERR_INVALID_VCPU - The provided vCPU is out of range of the available CPUs.
 */
#define NE_ERR_INVALID_VCPU			(271)
/**
 * NE_ERR_NO_CPUS_AVAIL_IN_POOL - The command to create an enclave is triggered
 *				  and no CPUs are available in the pool.
 */
#define NE_ERR_NO_CPUS_AVAIL_IN_POOL		(272)
/**
 * NE_ERR_INVALID_PAGE_SIZE - The user space memory region is not backed by pages
 *			      multiple of 2 MiB.
 */
#define NE_ERR_INVALID_PAGE_SIZE		(273)
/**
 * NE_ERR_INVALID_FLAG_VALUE - The provided flag value is invalid.
 */
#define NE_ERR_INVALID_FLAG_VALUE		(274)
/**
 * NE_ERR_INVALID_ENCLAVE_CID - The provided enclave CID is invalid, either
 *				being a well-known value or the CID of the
 *				parent / primary VM.
 */
#define NE_ERR_INVALID_ENCLAVE_CID		(275)

/**
 * DOC: Image load info flags
 */

/**
 * NE_EIF_IMAGE - Enclave Image Format (EIF)
 */
#define NE_EIF_IMAGE			(0x01)

#define NE_IMAGE_LOAD_MAX_FLAG_VAL	(0x02)

/**
 * struct ne_image_load_info - Info necessary for in-memory enclave image
 *			       loading (in / out).
 * @flags:		Flags to determine the enclave image type
 *			(e.g. Enclave Image Format - EIF) (in).
 * @memory_offset:	Offset in enclave memory where to start placing the
 *			enclave image (out).
 */
struct ne_image_load_info {
	__u64	flags;
	__u64	memory_offset;
};

/**
 * DOC: User memory region flags
 */

/**
 * NE_DEFAULT_MEMORY_REGION - Memory region for enclave general usage.
 */
#define NE_DEFAULT_MEMORY_REGION	(0x00)

#define NE_MEMORY_REGION_MAX_FLAG_VAL	(0x01)

/**
 * struct ne_user_memory_region - Memory region to be set for an enclave (in).
 * @flags:		Flags to determine the usage for the memory region (in).
 * @memory_size:	The size, in bytes, of the memory region to be set for
 *			an enclave (in).
 * @userspace_addr:	The start address of the userspace allocated memory of
 *			the memory region to set for an enclave (in).
 */
struct ne_user_memory_region {
	__u64	flags;
	__u64	memory_size;
	__u64	userspace_addr;
};

/**
 * DOC: Enclave start info flags
 */

/**
 * NE_ENCLAVE_PRODUCTION_MODE - Start enclave in production mode.
 */
#define NE_ENCLAVE_PRODUCTION_MODE	(0x00)
/**
 * NE_ENCLAVE_DEBUG_MODE - Start enclave in debug mode.
 */
#define NE_ENCLAVE_DEBUG_MODE		(0x01)

#define NE_ENCLAVE_START_MAX_FLAG_VAL	(0x02)

/**
 * struct ne_enclave_start_info - Setup info necessary for enclave start (in / out).
 * @flags:		Flags for the enclave to start with (e.g. debug mode) (in).
 * @enclave_cid:	Context ID (CID) for the enclave vsock device. If 0 as
 *			input, the CID is autogenerated by the hypervisor and
 *			returned back as output by the driver (in / out).
 */
struct ne_enclave_start_info {
	__u64	flags;
	__u64	enclave_cid;
};

#endif /* _LINUX_NITRO_ENCLAVES_H_ */