Changes in Makefile

564ea84c - x86/tdx: Dump attributes and TD_CTLS on boot

Mon, 02 Dec 2024 07:24:58 +0000

x86/tdx: Dump attributes and TD_CTLS on bootDump TD configuration on boot. Attributes and TD_CTLS define TDbehavior. This information is useful for tracking down bugs.The output ends up looking like this in practice:[ 0.000000] tdx: Guest detected[ 0.000000] tdx: Attributes: SEPT_VE_DISABLE[ 0.000000] tdx: TD_CTLS: PENDING_VE_DISABLE ENUM_TOPOLOGY VIRT_CPUID2 REDUCE_VESigned-off-by: Kirill A. Shutemov Signed-off-by: Dave Hansen Reviewed-by: Nikolay Borisov Link: https://lore.kernel.org/all/20241202072458.447455-1-kirill.shutemov%40linux.intel.com List of files: /linux-6.15/arch/x86/coco/tdx/Makefile

75d090fd - x86/tdx: Add unaccepted memory support

Tue, 06 Jun 2023 14:26:37 +0000

x86/tdx: Add unaccepted memory supportHookup TDX-specific code to accept memory.Accepting the memory is done with ACCEPT_PAGE module call on every pagein the range. MAP_GPA hypercall is not required as the unaccepted memoryis considered private already.Extract the part of tdx_enc_status_changed() that does memory acceptancein a new helper. Move the helper tdx-shared.c. It is going to be used byboth main kernel and decompressor. [ bp: Fix the INTEL_TDX_GUEST=y, KVM_GUEST=n build. ]Signed-off-by: Kirill A. Shutemov Signed-off-by: Borislav Petkov (AMD) Link: https://lore.kernel.org/r/20230606142637.5171-10-kirill.shutemov@linux.intel.com List of files: /linux-6.15/arch/x86/coco/tdx/Makefile

eb94f1b6 - x86/tdx: Add __tdx_module_call() and __tdx_hypercall() helper functions

Tue, 05 Apr 2022 23:29:12 +0000

x86/tdx: Add __tdx_module_call() and __tdx_hypercall() helper functionsGuests communicate with VMMs with hypercalls. Historically, theseare implemented using instructions that are known to cause VMEXITslike VMCALL, VMLAUNCH, etc. However, with TDX, VMEXITs no longerexpose the guest state to the host. This prevents the old hypercallmechanisms from working. So, to communicate with VMM, TDXspecification defines a new instruction called TDCALL.In a TDX based VM, since the VMM is an untrusted entity, an intermediarylayer -- TDX module -- facilitates secure communication between the hostand the guest. TDX module is loaded like a firmware into a special CPUmode called SEAM. TDX guests communicate with the TDX module using theTDCALL instruction.A guest uses TDCALL to communicate with both the TDX module and VMM.The value of the RAX register when executing the TDCALL instruction isused to determine the TDCALL type. A leaf of TDCALL used to communicatewith the VMM is called TDVMCALL.Add generic interfaces to communicate with the TDX module and VMM(using the TDCALL instruction).__tdx_module_call() - Used to communicate with the TDX module (via TDCALL instruction).__tdx_hypercall() - Used by the guest to request services from the VMM (via TDVMCALL leaf of TDCALL).Also define an additional wrapper _tdx_hypercall(), which adds errorhandling support for the TDCALL failure.The __tdx_module_call() and __tdx_hypercall() helper functions areimplemented in assembly in a .S file. The TDCALL ABI requiresshuffling arguments in and out of registers, which proved to beawkward with inline assembly.Just like syscalls, not all TDVMCALL use cases need to use the samenumber of argument registers. The implementation here picks the currentworst-case scenario for TDCALL (4 registers). For TDCALLs with fewerthan 4 arguments, there will end up being a few superfluous (cheap)instructions. But, this approach maximizes code reuse.For registers used by the TDCALL instruction, please check TDX GHCIspecification, the section titled "TDCALL instruction" and "TDG.VP.VMCALLInterface".Based on previous patch by Sean Christopherson.Signed-off-by: Kuppuswamy Sathyanarayanan Signed-off-by: Kirill A. Shutemov Signed-off-by: Dave Hansen Reviewed-by: Tony Luck Reviewed-by: Dave Hansen Reviewed-by: Thomas Gleixner Reviewed-by: Borislav Petkov Link: https://lkml.kernel.org/r/20220405232939.73860-4-kirill.shutemov@linux.intel.com List of files: /linux-6.15/arch/x86/coco/tdx/Makefile

59bd54a8 - x86/tdx: Detect running as a TDX guest in early boot

Tue, 05 Apr 2022 23:29:10 +0000

x86/tdx: Detect running as a TDX guest in early bootIn preparation of extending cc_platform_has() API to support TDX guest,use CPUID instruction to detect support for TDX guests in the earlyboot code (via tdx_early_init()). Since copy_bootdata() is the firstuser of cc_platform_has() API, detect the TDX guest status before it.Define a synthetic feature flag (X86_FEATURE_TDX_GUEST) and set thisbit in a valid TDX guest platform.Signed-off-by: Kuppuswamy Sathyanarayanan Signed-off-by: Kirill A. Shutemov Signed-off-by: Dave Hansen Reviewed-by: Andi Kleen Reviewed-by: Tony Luck Reviewed-by: Dave Hansen Reviewed-by: Borislav Petkov Reviewed-by: Thomas Gleixner Link: https://lkml.kernel.org/r/20220405232939.73860-2-kirill.shutemov@linux.intel.com List of files: /linux-6.15/arch/x86/coco/tdx/Makefile