From: Ard Biesheuvel <ardb@kernel.org>
To: linux-efi@vger.kernel.org
Cc: linux-kernel@vger.kernel.org, x86@kernel.org,
Ard Biesheuvel <ardb@kernel.org>,
"Kiryl Shutsemau (Meta)" <kas@kernel.org>,
Borislav Petkov <bp@alien8.de>,
"Edgecombe, Rick P" <rick.p.edgecombe@intel.com>
Subject: [PATCH v2 0/3] Move memory acceptance x86 arch code into EFI stub
Date: Fri, 25 Sep 2026 09:51:38 +0200 [thread overview]
Message-ID: <20260925075137.44298-5-ardb@kernel.org> (raw)
This is a follow-up to [0].
Move arch_accept_memory(), which is only called by the EFI stub and
never by the decompressor on a non-EFI boot, into the EFI stub, and
avoid relying directly on decompressor APIs such as error().
Instead, call tdx_panic() on a failure to accept memory in a TDX guest.
This makes the decompressor's implementation of panic() obsolete, and
allows it to be removed. This is a prerequisite for dropping the
implementation of snprintf() from the EFI stub entirely, which is what
the series containing [0] implements.
Changes since v1 [1]:
- Add missing stub for early_is_sevsnp_guest() when SEV support is
compiled out but TDX support is built in.
- Use native_cpuid() in EFI stub code so it does not get paravirtualized
- Set __NO_FORTIFY when including tdx-shared.c so the decompressor/stub
version does not get instrumented. Needed for the memcpy() in
tdx_panic().
[0] http://lore.kernel.org/r/20260909115530.1924665-13-ardb+git@google.com
[1] https://lore.kernel.org/all/20260914183745.37538-5-ardb@kernel.org/
Cc: Kiryl Shutsemau (Meta) <kas@kernel.org>
Cc: Borislav Petkov <bp@alien8.de>
Cc: Edgecombe, Rick P <rick.p.edgecombe@intel.com>
Ard Biesheuvel (3):
x86/tdx: Share tdx_panic() with the EFI stub
x86/boot: Move unaccepted memory handling out of the decompressor
x86/boot: Drop unused implementation of panic()
arch/x86/boot/compressed/error.c | 19 ---------
arch/x86/boot/compressed/error.h | 1 -
arch/x86/boot/compressed/mem.c | 42 --------------------
arch/x86/boot/compressed/sev.h | 2 -
arch/x86/boot/compressed/tdx-shared.c | 2 +
arch/x86/coco/tdx/tdx-shared.c | 31 +++++++++++++++
arch/x86/coco/tdx/tdx.c | 35 ----------------
arch/x86/include/asm/sev.h | 2 +
arch/x86/include/asm/shared/tdx.h | 1 +
drivers/firmware/efi/libstub/x86-stub.c | 39 ++++++++++++++++++
10 files changed, 75 insertions(+), 99 deletions(-)
--
2.53.0
next reply other threads:[~2026-09-25 7:51 UTC|newest]
Thread overview: 7+ messages / expand[flat|nested] mbox.gz Atom feed top
2026-09-25 7:51 Ard Biesheuvel [this message]
2026-09-25 7:51 ` [PATCH v2 1/3] x86/tdx: Share tdx_panic() with the EFI stub Ard Biesheuvel
2026-09-25 11:44 ` Kiryl Shutsemau
2026-09-25 7:51 ` [PATCH v2 2/3] x86/boot: Move unaccepted memory handling out of the decompressor Ard Biesheuvel
2026-09-25 11:59 ` Kiryl Shutsemau
2026-09-25 7:51 ` [PATCH v2 3/3] x86/boot: Drop unused implementation of panic() Ard Biesheuvel
2026-09-29 3:01 ` [PATCH v2 0/3] Move memory acceptance x86 arch code into EFI stub Borislav Petkov
Reply instructions:
You may reply publicly to this message via plain-text email
using any one of the following methods:
* Save the following mbox file, import it into your mail client,
and reply-to-all from there: mbox
Avoid top-posting and favor interleaved quoting:
https://en.wikipedia.org/wiki/Posting_style#Interleaved_style
* Reply using the --to, --cc, and --in-reply-to
switches of git-send-email(1):
git send-email \
--in-reply-to=20260925075137.44298-5-ardb@kernel.org \
--to=ardb@kernel.org \
--cc=bp@alien8.de \
--cc=kas@kernel.org \
--cc=linux-efi@vger.kernel.org \
--cc=linux-kernel@vger.kernel.org \
--cc=rick.p.edgecombe@intel.com \
--cc=x86@kernel.org \
/path/to/YOUR_REPLY
https://kernel.org/pub/software/scm/git/docs/git-send-email.html
* If your mail client supports setting the In-Reply-To header
via mailto: links, try the mailto: link
Be sure your reply has a Subject: header at the top and a blank line
before the message body.
This is an external index of several public inboxes,
see mirroring instructions on how to clone and mirror
all data and code used by this external index.