RE: [RFC PATCH 00/11] Support microcode updates affecting SGX

["Zhang, Cathy" <cathy.zhang@intel.com>]

Hi Dave, Thomas,

Thanks for helping review!

I will remove the new ABI and let microcode update process call the interface directly to clean up EPC and do EUPDATESVN. Please let me know if you have other suggestion.

> -----Original Message-----
> From: Hansen, Dave <dave.hansen@intel.com>
> Sent: Thursday, March 10, 2022 4:33 AM
> To: Zhang, Cathy <cathy.zhang@intel.com>; linux-sgx@vger.kernel.org;
> x86@kernel.org; Raj, Ashok <ashok.raj@intel.com>
> Subject: Re: [RFC PATCH 00/11] Support microcode updates affecting SGX
> 
> On 3/9/22 02:40, Cathy Zhang wrote:
> > This series implements the infrastructure needed to track and tear
> > down bare-metal enclaves and then run EUPDATESVN. This is expected to
> > be triggered by administrators via sysfs at some convenient time after
> > a microcode update, probably by the microcode update tooling itself.
> 
> Cathy, if it isn't abundantly clear by now, everyone seems to hate this part of
> the implementation.
> 
> Let's just make this just do EUPDATESVN as a part of the microcode update
> process.  No new ABI.  No trying to preserve enclaves.  Kill them early, kill
> them all, and be done with it.
> 
> If we merge that and we have end users chasing us with torches and
> pitchforks because their precious enclaves were torn down, we'll think about
> doing something different.