lkml.org 
[lkml]   [2022]   [Feb]   [24]   [last100]   RSS Feed
Views: [wrap][no wrap]   [headers]  [forward] 
 
Messages in this thread
    /
    From
    Subject[PATCHv4 00/30] TDX Guest: TDX core support
    Date
    Hi All,

    Intel's Trust Domain Extensions (TDX) protects confidential guest VMs
    from the host and physical attacks by isolating the guest register
    state and by encrypting the guest memory. In TDX, a special TDX module
    sits between the host and the guest, and runs in a special mode and
    manages the guest/host separation.

    Please review and consider applying.

    More details of TDX guests can be found in Documentation/x86/tdx.rst.

    All dependencies of the patchset are in Linus' tree now.

    SEV/TDX comparison:
    -------------------

    TDX has a lot of similarities to SEV. It enhances confidentiality
    of guest memory and state (like registers) and includes a new exception
    (#VE) for the same basic reasons as SEV-ES. Like SEV-SNP (not merged
    yet), TDX limits the host's ability to make changes in the guest
    physical address space.

    TDX/VM comparison:
    ------------------

    Some of the key differences between TD and regular VM is,

    1. Multi CPU bring-up is done using the ACPI MADT wake-up table.
    2. A new #VE exception handler is added. The TDX module injects #VE exception
    to the guest TD in cases of instructions that need to be emulated, disallowed
    MSR accesses, etc.
    3. By default memory is marked as private, and TD will selectively share it with
    VMM based on need.

    You can find TDX related documents in the following link.

    https://software.intel.com/content/www/br/pt/develop/articles/intel-trust-domain-extensions.html

    Git tree:

    https://github.com/intel/tdx.git guest-upstream

    Previous version:

    https://lore.kernel.org/r/20211214150304.62613-1-kirill.shutemov@linux.intel.com

    Changes from v3:
    - Rebased on top of merged x86/coco patches
    - Sanity build-time check for TDX detection (Cyrill Gorcunov)
    - Correction in the documentation regarding #VE for CPUID
    Changes from v2:
    - Move TDX-Guest-specific code under arch/x86/coco/
    - Code shared between host and guest is under arch/x86/virt/
    - Fix handling CR4.MCE for !CONFIG_X86_MCE
    - A separate patch to clarify CR0.NE situation
    - Use u8/u16/u32 for port I/O handler
    - Rework TDCALL helpers:
    + consolidation between guest and host
    + clearer interface
    + A new tdx_module_call() panic() if TDCALL fails
    - Rework MMIO handling to imporove readability
    - New generic API to deal encryption masks
    - Move tdx_early_init() before copy_bootdata() (again)
    - Rework #VE handing to share more code with #GP handler
    - Rework __set_memory_enc_pgtable() to provide proper abstruction for both
    SME/SEV and TDX cases.
    - Fix warning on build with X86_MEM_ENCRYPT=y
    - ... and more
    Changes from v1:
    - Rebased to tip/master (94985da003a4).
    - Address feedback from Borislav and Josh.
    - Wire up KVM hypercalls. Needed to send IPI.

    Andi Kleen (1):
    x86/tdx: Handle early boot port I/O

    Isaku Yamahata (1):
    x86/tdx: ioapic: Add shared bit for IOAPIC base address

    Kirill A. Shutemov (18):
    x86/mm: Fix warning on build with X86_MEM_ENCRYPT=y
    x86/tdx: Provide common base for SEAMCALL and TDCALL C wrappers
    x86/tdx: Extend the confidential computing API to support TDX guests
    x86/tdx: Exclude shared bit from __PHYSICAL_MASK
    x86/traps: Add #VE support for TDX guest
    x86/tdx: Add HLT support for TDX guests
    x86/tdx: Add MSR support for TDX guests
    x86/tdx: Handle CPUID via #VE
    x86/tdx: Handle in-kernel MMIO
    x86: Adjust types used in port I/O helpers
    x86: Consolidate port I/O helpers
    x86/boot: Allow to hook up alternative port I/O helpers
    x86/boot/compressed: Support TDX guest port I/O at decompression time
    x86/boot: Set CR0.NE early and keep it set during the boot
    x86/tdx: Make pages shared in ioremap()
    x86/mm/cpa: Add support for TDX shared memory
    x86/kvm: Use bounce buffers for TD guest
    ACPICA: Avoid cache flush on TDX guest

    Kuppuswamy Sathyanarayanan (8):
    x86/tdx: Detect running as a TDX guest in early boot
    x86/tdx: Add __tdx_module_call() and __tdx_hypercall() helper
    functions
    x86/tdx: Detect TDX at early kernel decompression time
    x86/tdx: Add port I/O emulation
    x86/tdx: Wire up KVM hypercalls
    x86/acpi, x86/boot: Add multiprocessor wake-up support
    x86/topology: Disable CPU online/offline control for TDX guests
    Documentation/x86: Document TDX kernel architecture

    Sean Christopherson (2):
    x86/boot: Add a trampoline for booting APs via firmware handoff
    x86/boot: Avoid #VE during boot for TDX platforms

    Documentation/x86/index.rst | 1 +
    Documentation/x86/tdx.rst | 196 ++++++++
    arch/x86/Kconfig | 15 +
    arch/x86/boot/a20.c | 14 +-
    arch/x86/boot/boot.h | 35 +-
    arch/x86/boot/compressed/Makefile | 1 +
    arch/x86/boot/compressed/head_64.S | 27 +-
    arch/x86/boot/compressed/misc.c | 26 +-
    arch/x86/boot/compressed/misc.h | 4 +-
    arch/x86/boot/compressed/pgtable.h | 2 +-
    arch/x86/boot/compressed/tdcall.S | 3 +
    arch/x86/boot/compressed/tdx.c | 98 ++++
    arch/x86/boot/compressed/tdx.h | 15 +
    arch/x86/boot/cpuflags.c | 3 +-
    arch/x86/boot/cpuflags.h | 1 +
    arch/x86/boot/early_serial_console.c | 28 +-
    arch/x86/boot/io.h | 28 ++
    arch/x86/boot/main.c | 4 +
    arch/x86/boot/pm.c | 10 +-
    arch/x86/boot/tty.c | 4 +-
    arch/x86/boot/video-vga.c | 6 +-
    arch/x86/boot/video.h | 8 +-
    arch/x86/coco/Makefile | 2 +
    arch/x86/coco/core.c | 14 +-
    arch/x86/coco/tdcall.S | 197 ++++++++
    arch/x86/coco/tdx.c | 594 +++++++++++++++++++++++
    arch/x86/include/asm/acenv.h | 16 +-
    arch/x86/include/asm/apic.h | 7 +
    arch/x86/include/asm/cpufeatures.h | 1 +
    arch/x86/include/asm/disabled-features.h | 8 +-
    arch/x86/include/asm/idtentry.h | 4 +
    arch/x86/include/asm/io.h | 42 +-
    arch/x86/include/asm/kvm_para.h | 22 +
    arch/x86/include/asm/mem_encrypt.h | 6 +-
    arch/x86/include/asm/realmode.h | 1 +
    arch/x86/include/asm/shared/io.h | 34 ++
    arch/x86/include/asm/shared/tdx.h | 37 ++
    arch/x86/include/asm/tdx.h | 82 ++++
    arch/x86/kernel/acpi/boot.c | 118 +++++
    arch/x86/kernel/apic/apic.c | 10 +
    arch/x86/kernel/apic/io_apic.c | 15 +-
    arch/x86/kernel/asm-offsets.c | 19 +
    arch/x86/kernel/head64.c | 7 +
    arch/x86/kernel/head_64.S | 28 +-
    arch/x86/kernel/idt.c | 3 +
    arch/x86/kernel/process.c | 4 +
    arch/x86/kernel/smpboot.c | 12 +-
    arch/x86/kernel/traps.c | 138 +++++-
    arch/x86/mm/ioremap.c | 5 +
    arch/x86/mm/mem_encrypt.c | 9 +-
    arch/x86/realmode/rm/header.S | 1 +
    arch/x86/realmode/rm/trampoline_64.S | 57 ++-
    arch/x86/realmode/rm/trampoline_common.S | 12 +-
    arch/x86/realmode/rm/wakemain.c | 14 +-
    arch/x86/virt/tdxcall.S | 91 ++++
    include/linux/cc_platform.h | 10 +
    kernel/cpu.c | 7 +
    57 files changed, 1997 insertions(+), 159 deletions(-)
    create mode 100644 Documentation/x86/tdx.rst
    create mode 100644 arch/x86/boot/compressed/tdcall.S
    create mode 100644 arch/x86/boot/compressed/tdx.c
    create mode 100644 arch/x86/boot/compressed/tdx.h
    create mode 100644 arch/x86/boot/io.h
    create mode 100644 arch/x86/coco/tdcall.S
    create mode 100644 arch/x86/coco/tdx.c
    create mode 100644 arch/x86/include/asm/shared/io.h
    create mode 100644 arch/x86/include/asm/shared/tdx.h
    create mode 100644 arch/x86/include/asm/tdx.h
    create mode 100644 arch/x86/virt/tdxcall.S

    --
    2.34.1

    \
     
     \ /
      Last update: 2022-02-24 17:00    [W:2.664 / U:0.100 seconds]
    ©2003-2020 Jasper Spaans|hosted at Digital Ocean and TransIP|Read the blog|Advertise on this site