[PATCH v1 2/3] x86/coco: Disable TDX module calls when TD partitioning is active

2023-11-22 Thread Jeremi Piotrowski
Introduce CC_ATTR_TDX_MODULE_CALLS to allow code to check whether TDX module calls are available. When TD partitioning is enabled, a L1 TD VMM handles most TDX facilities and the kernel running as an L2 TD VM does not have access to TDX module calls. The kernel still has access to TDVMCALL(0) which

Re: [PATCH v1 2/3] x86/coco: Disable TDX module calls when TD partitioning is active

2023-11-23 Thread Kirill A. Shutemov
On Wed, Nov 22, 2023 at 06:01:05PM +0100, Jeremi Piotrowski wrote: > Introduce CC_ATTR_TDX_MODULE_CALLS to allow code to check whether TDX module > calls are available. When TD partitioning is enabled, a L1 TD VMM handles most > TDX facilities and the kernel running as an L2 TD VM does not have acc

Re: [PATCH v1 2/3] x86/coco: Disable TDX module calls when TD partitioning is active

2023-11-24 Thread Jeremi Piotrowski
On 23/11/2023 15:13, Kirill A. Shutemov wrote: > On Wed, Nov 22, 2023 at 06:01:05PM +0100, Jeremi Piotrowski wrote: >> Introduce CC_ATTR_TDX_MODULE_CALLS to allow code to check whether TDX module >> calls are available. When TD partitioning is enabled, a L1 TD VMM handles >> most >> TDX facilities

Re: [PATCH v1 2/3] x86/coco: Disable TDX module calls when TD partitioning is active

2023-11-29 Thread Huang, Kai
On Fri, 2023-11-24 at 11:38 +0100, Jeremi Piotrowski wrote: > On 23/11/2023 15:13, Kirill A. Shutemov wrote: > > On Wed, Nov 22, 2023 at 06:01:05PM +0100, Jeremi Piotrowski wrote: > > > Introduce CC_ATTR_TDX_MODULE_CALLS to allow code to check whether TDX > > > module > > > calls are available. Wh

Re: [PATCH v1 2/3] x86/coco: Disable TDX module calls when TD partitioning is active

2023-12-01 Thread Jeremi Piotrowski
On 29/11/2023 11:37, Huang, Kai wrote: > On Fri, 2023-11-24 at 11:38 +0100, Jeremi Piotrowski wrote: >> On 23/11/2023 15:13, Kirill A. Shutemov wrote: >>> On Wed, Nov 22, 2023 at 06:01:05PM +0100, Jeremi Piotrowski wrote: Introduce CC_ATTR_TDX_MODULE_CALLS to allow code to check whether TDX >