Changes in Makefile

a23e1966932464e1c5226cb9ac4ce1d5fc10ba22 - Merge branch 'next' into for-linus

Mon, 15 Jul 2024 23:03:44 +0200

Merge branch 'next' into for-linusPrepare input updates for 6.11 merge window. List of files: /linux/arch/x86/virt/vmx/tdx/Makefile

6f47c7ae8c7afaf9ad291d39f0d3974f191a7946 - Merge tag 'v6.9' into next

Tue, 28 May 2024 06:37:18 +0200

Merge tag 'v6.9' into nextSync up with the mainline to bring in the new cleanup API. List of files: /linux/arch/x86/virt/vmx/tdx/Makefile

60a2f25de7b8b785baee2932db932ae9a5b8c86d - Merge drm/drm-next into drm-intel-gt-next

Thu, 16 May 2024 09:33:01 +0200

Merge drm/drm-next into drm-intel-gt-nextSome display refactoring patches are needed in order to allow conflict-less merging.Signed-off-by: Tvrtko Ursulin List of files: /linux/arch/x86/virt/vmx/tdx/Makefile

06d07429858317ded2db7986113a9e0129cd599b - Merge drm/drm-next into drm-intel-next

Thu, 29 Feb 2024 10:57:56 +0100

Merge drm/drm-next into drm-intel-nextSync to get the drm_printer changes to drm-intel-next.Signed-off-by: Jani Nikula List of files: /linux/arch/x86/virt/vmx/tdx/Makefile

2e21dee6a46a66e4c2ced778485e1044101edee4 - Merge branch 'for-6.9/amd-sfh' into for-linus

Wed, 13 Mar 2024 21:17:33 +0100

Merge branch 'for-6.9/amd-sfh' into for-linus- assorted fixes and optimizations for amd-sfh (Basavaraj Natikar)Signed-off-by: Jiri Kosina List of files: /linux/arch/x86/virt/vmx/tdx/Makefile

41c177cf354126a22443b5c80cec9fdd313e67e1 - Merge tag 'drm-misc-next-2024-02-08' into msm-next

Sun, 11 Feb 2024 21:34:07 +0100

Merge tag 'drm-misc-next-2024-02-08' into msm-nextMerge the drm-misc tree to uprev MSM CI.Signed-off-by: Rob Clark List of files: /linux/arch/x86/virt/vmx/tdx/Makefile

4db102dcb0396a4ccf89b1eac0f4eb3fd167a080 - Merge drm/drm-next into drm-misc-next

Mon, 29 Jan 2024 14:20:23 +0100

Merge drm/drm-next into drm-misc-nextKickstart 6.9 development cycle.Signed-off-by: Maxime Ripard List of files: /linux/arch/x86/virt/vmx/tdx/Makefile

be3382ecdf317f005e7d47356d0a9256cc36dd88 - Merge drm/drm-next into drm-xe-next

Tue, 23 Jan 2024 00:10:10 +0100

Merge drm/drm-next into drm-xe-nextSync to v6.8-rc1.Signed-off-by: Lucas De Marchi List of files: /linux/arch/x86/virt/vmx/tdx/Makefile

0ea5c948cb64bab5bc7a5516774eb8536f05aa0d - Merge drm/drm-next into drm-intel-next

Mon, 15 Jan 2024 08:38:05 +0100

Merge drm/drm-next into drm-intel-nextBackmerge to bring Xe driver to drm-intel-next.Signed-off-by: Jani Nikula List of files: /linux/arch/x86/virt/vmx/tdx/Makefile

03c11eb3b16dc0058589751dfd91f254be2be613 - Merge tag 'v6.8-rc4' into x86/percpu, to resolve conflicts and refresh the branch

Wed, 14 Feb 2024 10:45:07 +0100

Merge tag 'v6.8-rc4' into x86/percpu, to resolve conflicts and refresh the branchConflicts: arch/x86/include/asm/percpu.h arch/x86/include/asm/text-patching.hSigned-off-by: Ingo Molnar List of files: /linux/arch/x86/virt/vmx/tdx/Makefile

42ac0be18bfa09c03f52244f7c3e15c89b38532f - Merge branch 'linus' into x86/mm, to refresh the branch and pick up fixes

Fri, 26 Jan 2024 10:26:50 +0100

Merge branch 'linus' into x86/mm, to refresh the branch and pick up fixesSigned-off-by: Ingo Molnar List of files: /linux/arch/x86/virt/vmx/tdx/Makefile

f0b7a0d1d46625db5b0e631c05ae96d78eda6c70 - Merge branch 'master' into mm-hotfixes-stable

Tue, 23 Jan 2024 04:23:56 +0100

Merge branch 'master' into mm-hotfixes-stable List of files: /linux/arch/x86/virt/vmx/tdx/Makefile

cf79f291f985662150363b4a93d16f88f12643bc - Merge v6.8-rc1 into drm-misc-fixes

Mon, 22 Jan 2024 09:44:15 +0100

Merge v6.8-rc1 into drm-misc-fixesLet's kickstart the 6.8 fix cycle.Signed-off-by: Maxime Ripard List of files: /linux/arch/x86/virt/vmx/tdx/Makefile

ab1c247094e323177a578b38f0325bf79f0317ac - Merge remote-tracking branch 'torvalds/master' into perf-tools-next

Tue, 19 Dec 2023 01:37:07 +0100

Merge remote-tracking branch 'torvalds/master' into perf-tools-nextTo pick up fixes that went thru perf-tools for v6.7 and to get in syncwith upstream to check for drift in the copies of headers, etc.Signed-off-by: Arnaldo Carvalho de Melo List of files: /linux/arch/x86/virt/vmx/tdx/Makefile

b4442cadca2f97239c8b80f64af7937897b867b1 - Merge tag 'x86_tdx_for_6.8' of git://git.kernel.org/pub/scm/linux/kernel/git/tip/tip

Thu, 18 Jan 2024 22:41:48 +0100

Merge tag 'x86_tdx_for_6.8' of git://git.kernel.org/pub/scm/linux/kernel/git/tip/tipPull x86 TDX updates from Dave Hansen: "This contains the initial support for host-side TDX support so that KVM can run TDX-protected guests. This does not include the actual KVM-side support which will come from the KVM folks. The TDX host interactions with kexec also needs to be ironed out before this is ready for prime time, so this code is currently Kconfig'd off when kexec is on. The majority of the code here is the kernel telling the TDX module which memory to protect and handing some additional memory over to it to use to store TDX module metadata. That sounds pretty simple, but the TDX architecture is rather flexible and it takes quite a bit of back-and-forth to say, "just protect all memory, please." There is also some code tacked on near the end of the series to handle a hardware erratum. The erratum can make software bugs such as a kernel write to TDX-protected memory cause a machine check and masquerade as a real hardware failure. The erratum handling watches out for these and tries to provide nicer user errors"* tag 'x86_tdx_for_6.8' of git://git.kernel.org/pub/scm/linux/kernel/git/tip/tip: (21 commits) x86/virt/tdx: Make TDX host depend on X86_MCE x86/virt/tdx: Disable TDX host support when kexec is enabled Documentation/x86: Add documentation for TDX host support x86/mce: Differentiate real hardware #MCs from TDX erratum ones x86/cpu: Detect TDX partial write machine check erratum x86/virt/tdx: Handle TDX interaction with sleep and hibernation x86/virt/tdx: Initialize all TDMRs x86/virt/tdx: Configure global KeyID on all packages x86/virt/tdx: Configure TDX module with the TDMRs and global KeyID x86/virt/tdx: Designate reserved areas for all TDMRs x86/virt/tdx: Allocate and set up PAMTs for TDMRs x86/virt/tdx: Fill out TDMRs to cover all TDX memory regions x86/virt/tdx: Add placeholder to construct TDMRs to cover all TDX memory regions x86/virt/tdx: Get module global metadata for module initialization x86/virt/tdx: Use all system memory when initializing TDX module as TDX memory x86/virt/tdx: Add skeleton to enable TDX on demand x86/virt/tdx: Add SEAMCALL error printing for module initialization x86/virt/tdx: Handle SEAMCALL no entropy error in common code x86/virt/tdx: Make INTEL_TDX_HOST depend on X86_X2APIC x86/virt/tdx: Define TDX supported page sizes as macros ... List of files: /linux/arch/x86/virt/vmx/tdx/Makefile

765a0542fdc7aad7cbc1da3bd19bed6297b54e2c - x86/virt/tdx: Detect TDX during kernel boot

Fri, 08 Dec 2023 18:07:21 +0100

x86/virt/tdx: Detect TDX during kernel bootIntel Trust Domain Extensions (TDX) protects guest VMs from malicioushost and certain physical attacks. A CPU-attested software modulecalled 'the TDX module' runs inside a new isolated memory range as atrusted hypervisor to manage and run protected VMs.Pre-TDX Intel hardware has support for a memory encryption architecturecalled MKTME. The memory encryption hardware underpinning MKTME is alsoused for Intel TDX. TDX ends up "stealing" some of the physical addressspace from the MKTME architecture for crypto-protection to VMs. TheBIOS is responsible for partitioning the "KeyID" space between legacyMKTME and TDX. The KeyIDs reserved for TDX are called 'TDX privateKeyIDs' or 'TDX KeyIDs' for short.During machine boot, TDX microcode verifies that the BIOS programmed TDXprivate KeyIDs consistently and correctly programmed across all CPUpackages. The MSRs are locked in this state after verification. Thisis why MSR_IA32_MKTME_KEYID_PARTITIONING gets used for TDX enumeration:it indicates not just that the hardware supports TDX, but that all theboot-time security checks passed.The TDX module is expected to be loaded by the BIOS when it enables TDX,but the kernel needs to properly initialize it before it can be used tocreate and run any TDX guests. The TDX module will be initialized bythe KVM subsystem when KVM wants to use TDX.Detect platform TDX support by detecting TDX private KeyIDs.The TDX module itself requires one TDX KeyID as the 'TDX global KeyID'to protect its metadata. Each TDX guest also needs a TDX KeyID for itsown protection. Just use the first TDX KeyID as the global KeyID andleave the rest for TDX guests. If no TDX KeyID is left for TDX guests,disable TDX as initializing the TDX module alone is useless.[ dhansen: add X86_FEATURE, replace helper function ]Signed-off-by: Kai Huang Signed-off-by: Dave Hansen Reviewed-by: Kirill A. Shutemov Reviewed-by: Isaku Yamahata Reviewed-by: David Hildenbrand Reviewed-by: Dave Hansen Reviewed-by: Kuppuswamy Sathyanarayanan Link: https://lore.kernel.org/all/20231208170740.53979-1-dave.hansen%40intel.com List of files: /linux/arch/x86/virt/vmx/tdx/Makefile

3bf3e21c15d4386a5f15118ec39bbc1b67ea5759 - Merge drm/drm-next into drm-misc-next

Wed, 15 Nov 2023 10:45:19 +0100

Merge drm/drm-next into drm-misc-nextLet's kickstart the v6.8 release cycle.Signed-off-by: Maxime Ripard List of files: /linux/arch/x86/virt/vmx/tdx/Makefile

5d2d4a9f603a47403395408f64b1261ca61f6d50 - Merge branch 'tip/perf/urgent'

Wed, 15 Nov 2023 10:15:40 +0100

Merge branch 'tip/perf/urgent'Avoid conflicts, base on fixes.Signed-off-by: Peter Zijlstra List of files: /linux/arch/x86/virt/vmx/tdx/Makefile

8999ad99f4cb19638d9ecb8017831f9a0ab8dc3d - Merge tag 'x86_tdx_for_6.7' of git://git.kernel.org/pub/scm/linux/kernel/git/tip/tip

Wed, 01 Nov 2023 21:28:32 +0100

Merge tag 'x86_tdx_for_6.7' of git://git.kernel.org/pub/scm/linux/kernel/git/tip/tipPull x86 TDX updates from Dave Hansen: "The majority of this is a rework of the assembly and C wrappers that are used to talk to the TDX module and VMM. This is a nice cleanup in general but is also clearing the way for using this code when Linux is the TDX VMM. There are also some tidbits to make TDX guests play nicer with Hyper-V and to take advantage the hardware TSC. Summary: - Refactor and clean up TDX hypercall/module call infrastructure - Handle retrying/resuming page conversion hypercalls - Make sure to use the (shockingly) reliable TSC in TDX guests"[ TLA reminder: TDX is "Trust Domain Extensions", Intel's guest VM confidentiality technology ]* tag 'x86_tdx_for_6.7' of git://git.kernel.org/pub/scm/linux/kernel/git/tip/tip: x86/tdx: Mark TSC reliable x86/tdx: Fix __noreturn build warning around __tdx_hypercall_failed() x86/virt/tdx: Make TDX_MODULE_CALL handle SEAMCALL #UD and #GP x86/virt/tdx: Wire up basic SEAMCALL functions x86/tdx: Remove 'struct tdx_hypercall_args' x86/tdx: Reimplement __tdx_hypercall() using TDX_MODULE_CALL asm x86/tdx: Make TDX_HYPERCALL asm similar to TDX_MODULE_CALL x86/tdx: Extend TDX_MODULE_CALL to support more TDCALL/SEAMCALL leafs x86/tdx: Pass TDCALL/SEAMCALL input/output registers via a structure x86/tdx: Rename __tdx_module_call() to __tdcall() x86/tdx: Make macros of TDCALLs consistent with the spec x86/tdx: Skip saving output regs when SEAMCALL fails with VMFailInvalid x86/tdx: Zero out the missing RSI in TDX_HYPERCALL macro x86/tdx: Retry partially-completed page conversion hypercalls List of files: /linux/arch/x86/virt/vmx/tdx/Makefile

c33621b4c5ad5b6b8b245754013cc506f9ded2b8 - x86/virt/tdx: Wire up basic SEAMCALL functions

Tue, 15 Aug 2023 13:02:04 +0200

x86/virt/tdx: Wire up basic SEAMCALL functionsIntel Trust Domain Extensions (TDX) protects guest VMs from malicioushost and certain physical attacks. A CPU-attested software modulecalled 'the TDX module' runs inside a new isolated memory range as atrusted hypervisor to manage and run protected VMs.TDX introduces a new CPU mode: Secure Arbitration Mode (SEAM). Thismode runs only the TDX module itself or other code to load the TDXmodule.The host kernel communicates with SEAM software via a new SEAMCALLinstruction. This is conceptually similar to a guest->host hypercall,except it is made from the host to SEAM software instead. The TDXmodule establishes a new SEAMCALL ABI which allows the host toinitialize the module and to manage VMs.The SEAMCALL ABI is very similar to the TDCALL ABI and leverages muchTDCALL infrastructure. Wire up basic functions to make SEAMCALLs forthe basic support of running TDX guests: __seamcall(), __seamcall_ret(),and __seamcall_saved_ret() for TDH.VP.ENTER. All SEAMCALLs involved inthe basic TDX support don't use "callee-saved" registers as input andoutput, except the TDH.VP.ENTER.To start to support TDX, create a new arch/x86/virt/vmx/tdx/tdx.c forTDX host kernel support. Add a new Kconfig option CONFIG_INTEL_TDX_HOSTto opt-in TDX host kernel support (to distinguish with TDX guest kernelsupport). So far only KVM uses TDX. Make the new config option dependon KVM_INTEL.Signed-off-by: Kai Huang Signed-off-by: Dave Hansen Reviewed-by: Kirill A. Shutemov Acked-by: Peter Zijlstra (Intel) Tested-by: Isaku Yamahata Link: https://lore.kernel.org/all/4db7c3fc085e6af12acc2932294254ddb3d320b3.1692096753.git.kai.huang%40intel.com List of files: /linux/arch/x86/virt/vmx/tdx/Makefile