Branch: refs/heads/master
  Home:   https://github.com/tianocore/edk2
  Commit: bc3a1ec2a2838f596678ddd247d10332c6790dab
      
https://github.com/tianocore/edk2/commit/bc3a1ec2a2838f596678ddd247d10332c6790dab
  Author: Alexey Kardashevskiy <[email protected]>
  Date:   2024-07-04 (Thu, 04 Jul 2024)

  Changed paths:
    M MdePkg/Include/Register/Amd/SevSnpMsr.h

  Log Message:
  -----------
  MdePkg/Register/Amd: Define all bits from MSR_SEV_STATUS_REGISTER

For now we need DebugSwap but others are likely to be needed too.

Cc: Liming Gao <[email protected]>
Cc: Michael D Kinney <[email protected]>
Cc: Zhiguang Liu <[email protected]>
Reviewed-by: Tom Lendacky <[email protected]>
Signed-off-by: Alexey Kardashevskiy <[email protected]>
Changes:
v5:
* "rb" from Tom

v4:
* added more from April/2024 APM


  Commit: 3f28aa2fb07f57afa58d4030d6dc60f5d01d5888
      
https://github.com/tianocore/edk2/commit/3f28aa2fb07f57afa58d4030d6dc60f5d01d5888
  Author: Alexey Kardashevskiy <[email protected]>
  Date:   2024-07-04 (Thu, 04 Jul 2024)

  Changed paths:
    M MdePkg/Include/ConfidentialComputingGuestAttr.h

  Log Message:
  -----------
  MdePkg: Add AMD SEV features to PcdConfidentialComputingGuestAttr

PcdConfidentialComputingGuestAttr so far only contained an SEV mode bit
but there are more other features which do not translate to levels
such as DebugVirtualization or SecureTsc.

Add the feature mask and the DebugVirtualization feature bit to the PCD.

Cc: Liming Gao <[email protected]>
Cc: Michael D Kinney <[email protected]>
Cc: Zhiguang Liu <[email protected]>
Reviewed-by: Tom Lendacky <[email protected]>
Signed-off-by: Alexey Kardashevskiy <[email protected]>
---
Changes:
v4:
* s/CCAttrFeatureAmdSevDebugSwap/CCAttrFeatureAmdSevEsDebugVirtualization/

v2:
* expanded features mask
* added type mask


  Commit: 9f06feb5d2fa43e184690034e70e6d427cf6913d
      
https://github.com/tianocore/edk2/commit/9f06feb5d2fa43e184690034e70e6d427cf6913d
  Author: Alexey Kardashevskiy <[email protected]>
  Date:   2024-07-04 (Thu, 04 Jul 2024)

  Changed paths:
    M OvmfPkg/Include/Library/MemEncryptSevLib.h
    M OvmfPkg/Library/BaseMemEncryptSevLib/DxeMemEncryptSevLibInternal.c
    M OvmfPkg/Library/BaseMemEncryptSevLib/PeiMemEncryptSevLibInternal.c
    M OvmfPkg/Library/BaseMemEncryptSevLib/SecMemEncryptSevLibInternal.c
    M OvmfPkg/Library/CcExitLib/CcExitVcHandler.c

  Log Message:
  -----------
  OvmfPkg: Add AMD SEV-ES DebugVirtualization feature support

The SEV-ES DebugVirtualization feature enables type B swapping of
debug registers on #VMEXIT and makes #DB and DR7 intercepts
unnecessary and unwanted.

When DebugVirtualization is enabled, this stops booting if
interaction from the HV.

Add new API to PEI, SEC, DXE.

This does not change the existing behaviour yet.

Cc: Ard Biesheuvel <[email protected]>
Cc: Erdem Aktas <[email protected]>
Cc: Gerd Hoffmann <[email protected]>
Cc: Jiewen Yao <[email protected]>
Cc: Michael Roth <[email protected]>
Cc: Min Xu <[email protected]>
Reviewed-by: Tom Lendacky <[email protected]>
Signed-off-by: Alexey Kardashevskiy <[email protected]>
---
Changes:
v5:
* "rb" from Tom

v4:
* s/DebugSwap/DebugVirtualization/


  Commit: 63a7152471111306184e4ac20a1ca705e6b75b6b
      
https://github.com/tianocore/edk2/commit/63a7152471111306184e4ac20a1ca705e6b75b6b
  Author: Alexey Kardashevskiy <[email protected]>
  Date:   2024-07-04 (Thu, 04 Jul 2024)

  Changed paths:
    M UefiCpuPkg/Library/MpInitLib/MpLib.c

  Log Message:
  -----------
  UefiCpuPkg: Add AMD SEV-ES features support

CONFIDENTIAL_COMPUTING_GUEST_ATTR is not a simple SEV level anymore
and includes a feature mask since the previous commit.

Fix AmdMemEncryptionAttrCheck to check the level and feature
correctly and add DebugVirtualization support.

Since the actual feature flag is not set yet, this should cause
no behavioural change.

Cc: Gerd Hoffmann <[email protected]>
Cc: Jiaxin Wu <[email protected]>
Cc: Rahul Kumar <[email protected]>
Cc: Ray Ni <[email protected]>
Reviewed-by: Tom Lendacky <[email protected]>
Signed-off-by: Alexey Kardashevskiy <[email protected]>
---
Changes:
v5:
* "rb" from Tom


  Commit: 28099661893327296e18b8f98a1e7c3e757c7d49
      
https://github.com/tianocore/edk2/commit/28099661893327296e18b8f98a1e7c3e757c7d49
  Author: Alexey Kardashevskiy <[email protected]>
  Date:   2024-07-04 (Thu, 04 Jul 2024)

  Changed paths:
    M OvmfPkg/Library/BaseMemEncryptSevLib/PeiMemEncryptSevLibInternal.c
    M OvmfPkg/Library/BaseMemEncryptSevLib/SecMemEncryptSevLibInternal.c
    M OvmfPkg/PlatformPei/AmdSev.c

  Log Message:
  -----------
  OvmfPkg: Enable AMD SEV-ES DebugVirtualization

Write the feature bit into PcdConfidentialComputingGuestAttr
and enable DebugVirtualization in PEI, SEC, DXE.

Cc: Ard Biesheuvel <[email protected]>
Cc: Erdem Aktas <[email protected]>
Cc: Gerd Hoffmann <[email protected]>
Cc: Jiewen Yao <[email protected]>
Cc: Michael Roth <[email protected]>
Cc: Min Xu <[email protected]>
Reviewed-by: Tom Lendacky <[email protected]>
Signed-off-by: Alexey Kardashevskiy <[email protected]>
---
Changes:
v5:
* "rb" from Tom

v4:
* s/DebugSwap/DebugVirtualization/g


Compare: https://github.com/tianocore/edk2/compare/6852f6984bda...280996618933

To unsubscribe from these emails, change your notification settings at 
https://github.com/tianocore/edk2/settings/notifications


_______________________________________________
edk2-commits mailing list
[email protected]
https://lists.sourceforge.net/lists/listinfo/edk2-commits

Reply via email to