From mboxrd@z Thu Jan 1 00:00:00 1970 Authentication-Results: smtp.subspace.kernel.org; arc=pass header.oldest-pass=0 smtp.remote-ip=40.93.195.24 ARC-Seal: i=2; d=subspace.kernel.org; s=arc20261015; a=rsa-sha256; cv=pass; t=1792450629; b=LzMIagbQ05tdTX5U3qLjLlBmD/RIvR3Nyx3EO2vyPserH78uWL2HoQO2kpDa3bfDV38B 8BQDjJdqAhMrIXp1+FpMuB7TLj2bT/9vz0Ho/BXER6sncbs03wK+N7H8PAy4Y8IejR2jv xiwL5Lq2yKbJcpSLlgwAWRhBEn9b74tDCpykEwGClDaS2rHzgTLn2V+q37HM4zRaQ4S6Z fhrv1bns80/1HZHHTnaxzTTMteaB9pmqAFJhPAzkJL5Rr3BN39SbEhx9tTQmBhhAW0Ysa bx1CTrio6R2jhrxCTSUjwPAv1Xw/SMzturMR9LNiJPPGijyZh8KxA5OiFftcbVnojyA== ARC-Message-Signature: i=2; d=subspace.kernel.org; s=arc20261015; a=rsa-sha256; c=relaxed/relaxed; t=1792450629; h=DMARC-Filter:DKIM-Signature:Received:Received:Date:From:To:Cc: Subject:Message-ID:References:Content-Type:Content-Disposition: Content-Transfer-Encoding:In-Reply-To:X-ClientProxiedBy:MIME-Version: X-MS-PublicTrafficType:X-MS-TrafficTypeDiagnostic: X-MS-Office365-Filtering-Correlation-Id:X-MS-Exchange-SenderADCheck: X-MS-Exchange-AntiSpam-Relay:X-Microsoft-Antispam: X-Microsoft-Antispam-Message-Info:X-Forefront-Antispam-Report: X-MS-Exchange-AntiSpam-MessageData-ChunkCount: X-MS-Exchange-AntiSpam-MessageData-0:X-OriginatorOrg: X-MS-Exchange-CrossTenant-Network-Message-Id: X-MS-Exchange-CrossTenant-AuthSource:X-MS-Exchange-CrossTenant-AuthAs: X-MS-Exchange-CrossTenant-OriginalArrivalTime: X-MS-Exchange-CrossTenant-FromEntityHeader: X-MS-Exchange-CrossTenant-Id:X-MS-Exchange-CrossTenant-MailboxType: X-MS-Exchange-CrossTenant-UserPrincipalName: X-MS-Exchange-Transport-CrossTenantHeadersStamped; bh=HB9YdqYDzF2JFgvrnqNwMAmbEjVBHUn0Bou8pSLV8ak=; b=dsUYz66jnFNgEBlnoC+aO0LLzTm+RlEKYpnnqK86NrEQDpYInWkh673E+AEGyrftyN+o ZIq5bJKYXr9HzNAH21Tjj1pVyRnyXys+N48lgUA0eMnspiLB1DDNnMayyPkAjKWypk7f2 fO63NnaGQyVzvlSxbmBBq4/jww0ApBIIr9BbBfLHfu5dm1xt5aC4LKu1u9rxvGfO8o7R4 UhUbSOJ1yv7d6SN3wwZuGTnmlOj6Ueow45Pu7boGv19ysw2dOadI2+cteQknR2Pa8YaRD kRobS/5yxVVggTJGAtHa5trL0xD7GDoAqlNoqPlrzZugjJvwlr2H24V7wn83UwiXRUg== ARC-Authentication-Results: i=2; smtp.subspace.kernel.org; dmarc=pass header.from=nvidia.com; spf=fail smtp.mailfrom=nvidia.com; dkim=pass header.d=Nvidia.com header.i=@Nvidia.com header.a=rsa-sha256 header.s=selector2 header.b=iPJKdc5j; arc=pass header.oldest-pass=0 smtp.remote-ip=40.93.195.24 Received: from SN4PR2101CU001.outbound.protection.outlook.com (mail-southcentralusazon11012024.outbound.protection.outlook.com [40.93.195.24]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange ECDHE (secp384r1) server-signature ECDSA (prime256v1) server-digest SHA256) (No client certificate requested) by smtp.subspace.kernel.org (Postfix) with ESMTPS id 1A412606A319 for ; Mon, 19 Oct 2026 22:57:08 +0000 (UTC) DMARC-Filter: OpenDMARC Filter v1.4.2 smtp.subspace.kernel.org 1A412606A319 Authentication-Results: smtp.subspace.kernel.org; dmarc=pass (p=reject dis=none) header.from=nvidia.com Authentication-Results: smtp.subspace.kernel.org; spf=fail smtp.mailfrom=nvidia.com Authentication-Results: smtp.subspace.kernel.org; dkim=pass (2048-bit key, unprotected) header.d=Nvidia.com header.i=@Nvidia.com header.a=rsa-sha256 header.s=selector2 header.b=iPJKdc5j ARC-Seal: i=1; a=rsa-sha256; s=arcselector10001; d=microsoft.com; cv=none; b=PgcZFCdSFogb+AxVUVMd5Q9fchwnpmweIJ3cX2Zn12n4lVOY3k1vzXqwE16hRjNf3KjfLEe7LEXu7748qKaRX+vTq4FCvASHyU8kQiA8nsyrGKVk5+4tmVXoTs6sccgGOYGK+ZzZ0vV7iuyCdpMycRYJBhoQQyrKlZT82vxC6asNFjkXthnAGFTmkJ+IdhQJnY3iJ7VXKkjc8giVDNquhJ6SZ9wlICEckwyTr366FCeYs/k42hKPrdx3N5Hi0O50J+TdN2+hFqrPjNsfIEtjVj1Ob26OxASbiWjYsY5PELoby7M4bjCBabnwZF5nD4GImLHjTV5wp0GW95F+s+OwRw== ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com; s=arcselector10001; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-AntiSpam-MessageData-ChunkCount:X-MS-Exchange-AntiSpam-MessageData-0:X-MS-Exchange-AntiSpam-MessageData-1; bh=HB9YdqYDzF2JFgvrnqNwMAmbEjVBHUn0Bou8pSLV8ak=; b=pHzzB+YlbzkftvJz/+FpCL93HANPXB3sp9tO98Y7+oqVKX1EAD5sr4OQCg0cfNSilX0s0hxk8WS8t0NK2kweMu1HGZ43sEbi4Jm3Wd6DVSEymHwe+4lMtHT18WDOQitjj2Le0wfrfj9NkXSjipNTPxC8VuKCW/WLTGLYtKoNXcO2hbsQf8yGz7P+1wt/qrhF54fdt1V5vrm6XmPcvPXstowJtEaSEFVrpJQ84aVgBviH3/khiu0Qf6M68nCFUqsoLED3tnFL7tKikxz9EyeKP0oejTmoI/GEdM3ppINcNWLCiDWJ37KpHuiEdol2NTUzWTb2H59jZgt/AQrCPvz6UA== ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=pass smtp.mailfrom=nvidia.com; dmarc=pass action=none header.from=nvidia.com; dkim=pass header.d=nvidia.com; arc=none DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=Nvidia.com; s=selector2; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=HB9YdqYDzF2JFgvrnqNwMAmbEjVBHUn0Bou8pSLV8ak=; b=iPJKdc5j0fJB8TAj9nem13tCkBXmnDfNv+P7LBMog8FKADiR5oa+03Fab79cd2DuclF74tkPn2U0kGvlCZjA/ZfhKtpRYUIA3t9O5/LxgDP7ExAtJwAtRMB/Kk2PhozFYWtMFRzVBal9kKz7yCIBGnUdwmkASUlFYWpQ9MouW6vWqawXXhA404wMVqaBwFXPsofPay+5q9KOysdSwtG36wOICEpGF13A7GZhJl/RnpLS7MPZfyDHPcpt6iGa/x2oc2lAwzBOizzw8wZSY9fQ7pyKgNalZZMQ0zK+zvKw8AxntK+FgXg8CtkzPSrJkKfdfPHoONmNiwJ9XwVuKHOmUA== Authentication-Results: mx.microsoft.com 1; dkim=none (message not signed) header.d=none;dmarc=none action=none header.from=nvidia.com; Received: from CHBPR12MB731189.namprd12.prod.outlook.com (2603:10b6:610:33d::12) by DS5PPFFF21E27DC.namprd12.prod.outlook.com (2603:10b6:f:fc00::66b) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.21.522.19; Mon, 19 Oct 2026 22:57:00 +0000 Received: from CHBPR12MB731189.namprd12.prod.outlook.com ([fe80::b0e5:123d:fe06:e10d]) by CHBPR12MB731189.namprd12.prod.outlook.com ([fe80::b0e5:123d:fe06:e10d%6]) with mapi id 15.21.0522.017; Mon, 19 Oct 2026 22:57:00 +0000 Date: Mon, 19 Oct 2026 19:56:58 -0300 From: Jason Gunthorpe To: Dionna Glaze Cc: Jiri Pirko , Jarkko Sakkinen , linux-coco@lists.linux.dev, linux-kernel@vger.kernel.org, linux-api@vger.kernel.org, x86@kernel.org, kvm@vger.kernel.org, linux-doc@vger.kernel.org, david.quigley@intel.com, lukas@wunner.de, ksinyuk@kernel.org, rodrigo.vivi@intel.com, cedric.xing@intel.com, sameo@meta.com, James.Bottomley@hansenpartnership.com, aik@amd.com, jpiotrowski@nvidia.com, qinkun@google.com, pgonda@google.com, jic23@kernel.org, alistair.francis@wdc.com, ankita@nvidia.com, suzuki.poulose@arm.com, kas@kernel.org, rick.p.edgecombe@intel.com, elena.reshetova@intel.com, dave.hansen@linux.intel.com, sathyanarayanan.kuppuswamy@linux.intel.com, peter.fang@intel.com, roberto.sassu@huawei.com, zohar@linux.ibm.com Subject: Re: [PATCH RFC 00/20] attestation: Add a common subsystem and TDX support Message-ID: <20261019225658.GS13920@nvidia.com> References: <20261015145053.3664509-1-jiri@resnulli.us> <20261016234354.GA664420@nvidia.com> <20261017203407.GM13920@nvidia.com> <20261017231007.GP13920@nvidia.com> Content-Type: text/plain; charset=utf-8 Content-Disposition: inline Content-Transfer-Encoding: 8bit In-Reply-To: X-ClientProxiedBy: BN9PR03CA0934.namprd03.prod.outlook.com (2603:10b6:408:108::9) To CHBPR12MB731189.namprd12.prod.outlook.com (2603:10b6:610:33d::12) X-Mailing-List: linux-coco@lists.linux.dev List-Id: List-Post: List-Help: List-Subscribe: List-Unsubscribe: List-Owner: Precedence: list MIME-Version: 1.0 X-MS-PublicTrafficType: Email X-MS-TrafficTypeDiagnostic: CHBPR12MB731189:EE_|DS5PPFFF21E27DC:EE_ X-MS-Office365-Filtering-Correlation-Id: a80fe9c5-036b-4427-de91-08df2e344883 X-MS-Exchange-SenderADCheck: 1 X-MS-Exchange-AntiSpam-Relay: 0 X-Microsoft-Antispam: BCL:0;ARA:13230040|366016|376014|7416014|23010399003|1800799024|18002099003|22082099003|10067099003|4143699003|11063799006|56012099006; X-Microsoft-Antispam-Message-Info: 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 X-Forefront-Antispam-Report: CIP:255.255.255.255;CTRY:;LANG:en;SCL:1;SRV:;IPV:NLI;SFV:NSPM;H:CHBPR12MB731189.namprd12.prod.outlook.com;PTR:;CAT:NONE;SFS:(13230040)(366016)(376014)(7416014)(23010399003)(1800799024)(18002099003)(22082099003)(10067099003)(4143699003)(11063799006)(56012099006);DIR:OUT;SFP:1101; X-MS-Exchange-AntiSpam-MessageData-ChunkCount: 1 X-MS-Exchange-AntiSpam-MessageData-0: =?utf-8?B?cGpjNWJKeGhEeVlpT1Q2WXN6aXExRE9EUmVpeUVheDlCUzdxNlNmWldZOW5z?= =?utf-8?B?R3lpQjRJbDBUclRuOVR0Qk92dkhPYXN3a0tQdnJUM0RobzBrSDJEZXc3alhY?= =?utf-8?B?elFJT2xSMGYrVFQ4bnBXKzU0eldSN1NNZGhZQkExWktYWHc4TVZWMEcxMDNZ?= =?utf-8?B?d0IyUU9TamI4ZUc2c2dzNW9WWUpPeVRIZngzcU5qeFdKSjFubmx1cW1PVS9x?= =?utf-8?B?R1c1anA0SGhYWjJERldFUURZTWZ1RVhDVjQvVmxUVHRDZ0VVYW1EU3BNcWZM?= =?utf-8?B?VWEwWDR3T3Ara0NkbHVTcnpMRkpmTE1tajNhQ3dwOE5VZjg1a3FNSm5tOE1L?= =?utf-8?B?UWdwQWdRSTduelJsSHZadVhTYXZhL0tMOHBFeld3YWdsZTdZZzkyVlFrbVhp?= =?utf-8?B?UEQxWXR3N0JtdHN0RllPRlFjRkJobFZIZU15bnpHMmlONldtOFVvZ1ZBOFdK?= =?utf-8?B?eERjWnNkL01qWkE0WUFscUFBUC9rbUlJQnZZQnYwYUY3ZFcwRU5wSWxOT1B3?= =?utf-8?B?MUNkVGZod2loUjU5UFBrRHBCM3ZOeWs3V0RSLzIzQ3Nrbm1Cc2E2NWg3UjRy?= =?utf-8?B?OGFnU0x4MnVPY2I4VmZUc3NZQjkvNXJQY21IY1EyWk9xK0M5S095Z1RTK2Na?= =?utf-8?B?RkVtNWRrSnN1T09Pc09HbDU5UG8rd25YTXZVSzBWREVsbEFpL2N0dzd2eFA3?= =?utf-8?B?M2ZnMWpDUk54Q0RTZUdGSjJvZ1E5bXNwNnFtZ2FnSHkyUVR1ZWZyTnhtTHhi?= =?utf-8?B?NDZSckwrekdrV3YraDU0TW95MUtTSmcxSGtWTk81QUVGRjR0RFBBQmpYSTJH?= =?utf-8?B?dHZyL0lFTWk0eXdYYXNkeGVxM0dBUHo1VG9kTWdXRmdhOTdiYUlKQk9ldHRK?= =?utf-8?B?RU9ndGo4emZEQnJsMDRtR0tLalhTVWk2VEcrcEorQUVneXF3TlRrUFVyVkxX?= =?utf-8?B?cmtxQzNiZ2kyTGxEbWtWdHUxeTJwQllMdnl3U0E2YVBxVTJSeWJuZUtsUnJN?= =?utf-8?B?ZTNlU1RQbWJ2ejhxcytsbVlrLzkrV04wSXpjWmIzcElNRHBxSDIzcXhHT3ha?= =?utf-8?B?R1lScjgvaUEvNUlpTlloVFZIWU1jZmtLRk84OUk3VXlISDB3czRTc1pZblA2?= =?utf-8?B?UHpmQUhrYnlnbmV2OEdVaXUzUmFUTjc1Mk5kUHRmUDcvRDg3MTkwd1c1SmJM?= =?utf-8?B?Uit0UjZCRkdWOHExMkVFWXhaeGp1ZGZUN0EvdTkxUlNWYTVtMXR6VkpJaTl3?= =?utf-8?B?clNFemVVZXM0TThVY2NMMXpCK3pITjhoenB5cGNSR0FLaWFFNnhTdzNmeVh5?= =?utf-8?B?dnE1d1lRMEV5TndUL21QTWgxaW5CY3FIZ0UwUWlSVmYxdFRDT2YzbkZCNmcr?= =?utf-8?B?Uzdxb3pucGZXaE1yWTJUaEJKMVlWS1FSM09yYzJuSjhDVmY4ZkhYei85YjRr?= =?utf-8?B?d1dRQkhRWXJlRDgraXJIbTRma1pyK3BSN3EwajRBNVF6Qk9UMUVLOE9nMm5h?= =?utf-8?B?MExCOUVwKzlDVlBTM3d4TWdUNk5sYzVHai9WZVBjbmRhRE9wL29vZGpsR1Zl?= =?utf-8?B?UExKVlNSbmsvcnZzZ3dzNHBsQkxkUkdMeW5SYm9XMmpXRFhYV2l3TTdHeE9V?= =?utf-8?B?VzNFUWZYdTd1eFV4MXN6dUo3cTdOQUZTb1N0eU84M2NKQmNVL1JPVTJmeUsz?= =?utf-8?B?VUI5ditqb0Zrd0E2cEFjeUFNb2R0M0U4OUd4K2svUjVBSHp4a3ZZMEFVL2R5?= =?utf-8?B?Tll3UEIrU1Zwd1NuVEVrbUJsZ0tybFY0dWZyeTRsVU9ZRllhK0RhcVJ0NXhi?= =?utf-8?B?SFFYcDJLbHJTc004cW5nVE5OZTdBcXJQbjN4enpMSWdrdUFjb0pWYzU4bUQ5?= =?utf-8?B?UGRaNEZSM2ptdHhmTEhiY05DYzJ5U1Z1TWRESXprT3BNVTgrT2pDdjEvQVE0?= =?utf-8?B?VURCVGd6aFRmRkFMVWJBNWlacm0rVzdhaitPT1JBL2cxZjY2a3NRaHJ0OEwv?= =?utf-8?B?U1hoZUJXMkp4SGozeVVRK3d4R1JWdWRhVHlTTUg0WHJtMXRaZEF1WkorbGJq?= =?utf-8?B?LytOV3JiNTJxZkQ5WkhoMXlxRzRmcXBXc1JHd0taUlZ6Smw2SUI0aHB3T0NU?= =?utf-8?B?SHBpUjNjSy83TnhVSVlCWTZ3Zmc2WjJBbHltaDkwVm1IWjRZYk9ycTRaZ09G?= =?utf-8?B?MWt2SkpPNE8zVWcxQ01qYzlwcmFaN0xQemR3WC9GRXNMWkVVT1A5TUtQKzk4?= =?utf-8?B?OHgvMmF5YU1IMW9McmRnY1RKMEwwU3dpQWVqMjNMUitvc0tzZFBISnR0c1NO?= =?utf-8?Q?tV6mo+VU2UAyNKsu9o?= X-OriginatorOrg: Nvidia.com X-MS-Exchange-CrossTenant-Network-Message-Id: a80fe9c5-036b-4427-de91-08df2e344883 X-MS-Exchange-CrossTenant-AuthSource: CHBPR12MB731189.namprd12.prod.outlook.com X-MS-Exchange-CrossTenant-AuthAs: Internal X-MS-Exchange-CrossTenant-OriginalArrivalTime: 19 Oct 2026 22:57:00.0793 (UTC) X-MS-Exchange-CrossTenant-FromEntityHeader: Hosted X-MS-Exchange-CrossTenant-Id: 43083d15-7273-40c1-b7db-39efd9ccc17a X-MS-Exchange-CrossTenant-MailboxType: HOSTED X-MS-Exchange-CrossTenant-UserPrincipalName: 5btIAh3KnB/4kgtatPI5DmJx8v2Al8g9N0KD4S1txnxhK9oqELzXgbXONPr2uPWX X-MS-Exchange-Transport-CrossTenantHeadersStamped: DS5PPFFF21E27DC On Mon, Oct 19, 2026 at 09:10:31AM -0700, Dionna Glaze wrote: > On Mon, Oct 19, 2026 at 5:08 AM Jiri Pirko wrote: > > > > Yeah, I was thinking about this and went back and forth. In the end, the > > only reason for leaving it unbounded is to allow multiple independent > > users of the same register. For example, IMA and systemd could share a > > TDX RTMR. The systemd side would read the journal through the > > attestation device and the IMA side through securityfs, but both are > > views of the same journal. If one side truncated it, the other could no > > longer replay the RTMR. Isn't this the valid usecase? Do you see how to > > resolve this? > > > > Bright minds have spent a significant amount of time working on this. > > +Roberto Sassu, +Mimi Zohar > IMA logs and systemd logs are both system level concerns that are > relevant to the OS construction, not individual users, > so I would just say to reroute IMA to use ctlv using a kernel config > setting, then make systemd the new system manager of the holistic log. > The securityfs log contents can simply say, "log managed by ctlv" in > this setting, in the form of the template identifier. > For policy violations, only the 0... extend needs to go to ctlv. > IMA can still keep its violation log as a ring buffer when it's not a > 1-to-1 violation to extension > https://www.youtube.com/watch?v=gyYUYbdiN_4 I think for now we should not include a new dynamic log here, the uAPI around this Jiri drafted can remain a future step. I don't want to open complicated discussions about new functionality at this stage. The whole CTLV idea in general is a big enough thing to bite off for this series. What is important at this point is for the static CCGL log for TDX to come out through this interface and be affiliated with the TDX driver. With only 4 measurement registers in CCA and TDX we probably have to do *something* but it should be well consulted and not buried in this big thing.. Jason