From mboxrd@z Thu Jan 1 00:00:00 1970 Authentication-Results: smtp.subspace.kernel.org; arc=pass header.oldest-pass=0 smtp.remote-ip=40.93.194.53 ARC-Seal: i=2; d=subspace.kernel.org; s=arc20261015; a=rsa-sha256; cv=pass; t=1792515398; b=E6ynRarwU/qFym8PRTIP7TV9K3NNDKYr8c5QvCrlhG6T084Qj6oi0WLi51yNADmtyRUa QjrTrO3JLVMFStKJ/yhOdrDbeeOXuoXofgVb1QdvIioiTyZJ+FyhPUppKQO07s7RCDiAP iL2FVWKJ7p1+kQWBASFUnC+kXR5X2g7ZIvs9nYb3fdIevuTdejuEOahrxfgT6X8D11UVG IiMWmaiZlgY/0HoXcpTChXXFLkdQd1MCymPfWbDgJcSgJUSv2Kcj9JnbkJJ4cvJfnUKNf tPvrTvvWwtEjCO1IcowTHQZhBYkYHke13qIqKCcTg9AvuFeNYOKQqu+babRFim4FlaA== ARC-Message-Signature: i=2; d=subspace.kernel.org; s=arc20261015; a=rsa-sha256; c=relaxed/relaxed; t=1792515398; h=DMARC-Filter:DKIM-Signature:Received:Received:Date:From:To:Cc: Subject:Message-ID:References:Content-Type:Content-Disposition: In-Reply-To:X-ClientProxiedBy:MIME-Version:X-MS-PublicTrafficType: X-MS-TrafficTypeDiagnostic:X-MS-Office365-Filtering-Correlation-Id: X-MS-Exchange-SenderADCheck:X-MS-Exchange-AntiSpam-Relay: X-Microsoft-Antispam:X-Microsoft-Antispam-Message-Info: X-Forefront-Antispam-Report: X-MS-Exchange-AntiSpam-MessageData-ChunkCount: X-MS-Exchange-AntiSpam-MessageData-0:X-OriginatorOrg: X-MS-Exchange-CrossTenant-Network-Message-Id: X-MS-Exchange-CrossTenant-AuthSource:X-MS-Exchange-CrossTenant-AuthAs: X-MS-Exchange-CrossTenant-OriginalArrivalTime: X-MS-Exchange-CrossTenant-FromEntityHeader: X-MS-Exchange-CrossTenant-Id:X-MS-Exchange-CrossTenant-MailboxType: X-MS-Exchange-CrossTenant-UserPrincipalName: X-MS-Exchange-Transport-CrossTenantHeadersStamped; bh=hqqQE1/CsCVoz40XPIKaEuJ8xskcO1J59GVnhJovNHo=; b=hj1j2zV7LR1zQVMAzV9S7mPnbVvACYG51GcVJcWHfGrZW8HF0rLuqnuGpRbWmkvL+yOO hccVtxc61dbnBKYxm2icuA+uHhrLejf2N27Q66H6kC8m9SjrjcDhOxAQP/3jCBl2Qzja2 RI8cOZerxl61JIEDo3Br9eYTzlRm1JOaAHi5/ucb5RK+2RRp4+NrK4jARWpO0hf00pqa4 HM4oeRLVwzMcffF0AfrEI6eDVNHteoIB0aznBwPlTCKP/fZP8VvoqPIfFCOtRl0Tl5I8r Rc0tUUNQ/qrd5itFS3VO8ncEE+ti93tbUsVhMJVSDUxQUmHuLEGhWlHHeo88y/ah5+g== ARC-Authentication-Results: i=2; smtp.subspace.kernel.org; dmarc=pass header.from=nvidia.com; spf=fail smtp.mailfrom=nvidia.com; dkim=pass header.d=Nvidia.com header.i=@Nvidia.com header.a=rsa-sha256 header.s=selector2 header.b=Ey+Dg2H2; arc=pass header.oldest-pass=0 smtp.remote-ip=40.93.194.53 Received: from SN4PR0501CU005.outbound.protection.outlook.com (mail-southcentralusazon11011053.outbound.protection.outlook.com [40.93.194.53]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange ECDHE (secp384r1) server-signature ECDSA (prime256v1) server-digest SHA256) (No client certificate requested) by smtp.subspace.kernel.org (Postfix) with ESMTPS id 4DAF0606A325 for ; Tue, 20 Oct 2026 16:56:36 +0000 (UTC) DMARC-Filter: OpenDMARC Filter v1.4.2 smtp.subspace.kernel.org 4DAF0606A325 Authentication-Results: smtp.subspace.kernel.org; dmarc=pass (p=reject dis=none) header.from=nvidia.com Authentication-Results: smtp.subspace.kernel.org; spf=fail smtp.mailfrom=nvidia.com Authentication-Results: smtp.subspace.kernel.org; dkim=pass (2048-bit key, unprotected) header.d=Nvidia.com header.i=@Nvidia.com header.a=rsa-sha256 header.s=selector2 header.b=Ey+Dg2H2 ARC-Seal: i=1; a=rsa-sha256; s=arcselector10001; d=microsoft.com; cv=none; b=rEs6NOFFqgFGfar3o9KcX0Yp3bMzBFdX1YZAl6rLTXEOY8cxcHtIC7GsyPQodOTEGX/sndXudxwfIgu+oB9Pd3a+dggMofD2dijahdDqD14LRl/peHeubTfrrwcNJFVlXxNvo+gs4O8amjFUk+qOs3Q3hdkDihoEPSkSRrA3rUD8XbIl8B4eb/g7O1rPn944AJ/PVe3MwRt09ara/ZBqOr0Y8HNO2r/m/1+cs8jY6v9OaHtZGkJNQyJRrXHrGX9X5ADyvCppu8SITMi0IXGWsF2ZyIjvjycz9+R0WyYXDHwuV3vAUpubC2kapOPP5F902ArJvjDzg6zHVI7MQkFGhQ== ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com; s=arcselector10001; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-AntiSpam-MessageData-ChunkCount:X-MS-Exchange-AntiSpam-MessageData-0:X-MS-Exchange-AntiSpam-MessageData-1; bh=hqqQE1/CsCVoz40XPIKaEuJ8xskcO1J59GVnhJovNHo=; b=x9rEAkVz9Vm0XsfqQ8PNjpIbBJ/y/k8cRo/aMlj6KtBoz+fwRn96f/Lo4n2NbTwSW3DMdb1Gw+2aPnMfcKsGKYxr8ll7Fk8rZrsrjKX0Fpr/4ADd40LVmEoqAdK2nPRTrQHCazOYWbC/YYNYQcaB/Mv4BI38I4wmZkTG433muU37fxHz737CEiFCmMcuUiKV4WSTmAQ8ELgiNI/eKiON0IsuTTHIFdN9PXGahUMAouU5v3wTdthmKQ/KfXassZ+iTss0PedvKFXD+voIegnrhSurzH4aK4v8HWh/530juHDPnQ+wGjngXBccCcIhXlqIlcU+qKgae3Ki4AmgNDbdCg== ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=pass smtp.mailfrom=nvidia.com; dmarc=pass action=none header.from=nvidia.com; dkim=pass header.d=nvidia.com; arc=none DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=Nvidia.com; s=selector2; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=hqqQE1/CsCVoz40XPIKaEuJ8xskcO1J59GVnhJovNHo=; b=Ey+Dg2H2ltwY90Taj6FkTBfFEn0uErusEsLHn7NLd+BdAzMG1mBT8KSsI+V99nfibjA1VxQY6njpnAURC/q/7f+Cy3Our1f/8yJVT+9rnMkLrXai7hAhA1bPw7/pcYJiJ0DwjuY4aL1IcJ4be84K5P0iHgC6Y9bsvY1yi2r5aMGbYMcQWlkXdpFGiD0TNnpiPlAbzZlWfjDCTK6x8A0ICXVlCAOYYIn3rgkLVfOtww/bcGxFwaRi2vRuCi5taUqWd3jfFO+DO8gH829RL+ph1NkZmzn/dmkBH/9ywdpF9w61uneWsz1C+EQ8uY8CFGHLJ4oTzc6MepY+AWx7ZnUpAw== Authentication-Results: mx.microsoft.com 1; dkim=none (message not signed) header.d=none;dmarc=none action=none header.from=nvidia.com; Received: from CHBPR12MB731189.namprd12.prod.outlook.com (2603:10b6:610:33d::12) by IA0PR12MB7530.namprd12.prod.outlook.com (2603:10b6:208:440::5) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.21.546.15; Tue, 20 Oct 2026 16:52:53 +0000 Received: from CHBPR12MB731189.namprd12.prod.outlook.com ([fe80::b0e5:123d:fe06:e10d]) by CHBPR12MB731189.namprd12.prod.outlook.com ([fe80::b0e5:123d:fe06:e10d%6]) with mapi id 15.21.0546.012; Tue, 20 Oct 2026 16:52:53 +0000 Date: Tue, 20 Oct 2026 13:52:51 -0300 From: Jason Gunthorpe To: Yeoreum Yun Cc: Mimi Zohar , Dionna Glaze , Jiri Pirko , Jarkko Sakkinen , linux-coco@lists.linux.dev, linux-kernel@vger.kernel.org, linux-api@vger.kernel.org, x86@kernel.org, kvm@vger.kernel.org, linux-doc@vger.kernel.org, david.quigley@intel.com, lukas@wunner.de, ksinyuk@kernel.org, rodrigo.vivi@intel.com, cedric.xing@intel.com, sameo@meta.com, James.Bottomley@hansenpartnership.com, aik@amd.com, jpiotrowski@nvidia.com, qinkun@google.com, pgonda@google.com, jic23@kernel.org, alistair.francis@wdc.com, ankita@nvidia.com, suzuki.poulose@arm.com, kas@kernel.org, rick.p.edgecombe@intel.com, elena.reshetova@intel.com, dave.hansen@linux.intel.com, sathyanarayanan.kuppuswamy@linux.intel.com, peter.fang@intel.com, roberto.sassu@huawei.com Subject: Re: [PATCH RFC 00/20] attestation: Add a common subsystem and TDX support Message-ID: <20261020165251.GG3008132@nvidia.com> References: <20261017203407.GM13920@nvidia.com> <20261017231007.GP13920@nvidia.com> <20261020140655.GV13920@nvidia.com> Content-Type: text/plain; charset=us-ascii Content-Disposition: inline In-Reply-To: X-ClientProxiedBy: PH8P220CA0063.NAMP220.PROD.OUTLOOK.COM (2603:10b6:510:2d9::27) To CHBPR12MB731189.namprd12.prod.outlook.com (2603:10b6:610:33d::12) X-Mailing-List: linux-coco@lists.linux.dev List-Id: List-Post: List-Help: List-Subscribe: List-Unsubscribe: List-Owner: Precedence: list MIME-Version: 1.0 X-MS-PublicTrafficType: Email X-MS-TrafficTypeDiagnostic: CHBPR12MB731189:EE_|IA0PR12MB7530:EE_ X-MS-Office365-Filtering-Correlation-Id: 894aa23c-4951-4282-fcba-08df2eca9570 X-MS-Exchange-SenderADCheck: 1 X-MS-Exchange-AntiSpam-Relay: 0 X-Microsoft-Antispam: BCL:0;ARA:13230040|23010399003|1800799024|376014|7416014|366016|10067099003|22082099003|18002099003|4143699003|11063799006|56012099006; X-Microsoft-Antispam-Message-Info: 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 X-Forefront-Antispam-Report: CIP:255.255.255.255;CTRY:;LANG:en;SCL:1;SRV:;IPV:NLI;SFV:NSPM;H:CHBPR12MB731189.namprd12.prod.outlook.com;PTR:;CAT:NONE;SFS:(13230040)(23010399003)(1800799024)(376014)(7416014)(366016)(10067099003)(22082099003)(18002099003)(4143699003)(11063799006)(56012099006);DIR:OUT;SFP:1101; X-MS-Exchange-AntiSpam-MessageData-ChunkCount: 1 X-MS-Exchange-AntiSpam-MessageData-0: =?us-ascii?Q?b+nqCQrKIEafq7FwqGFdI8fcZWUh+/nguuSeMUVB3+hW6JlVSwi5E9b2Am4Z?= =?us-ascii?Q?3syEfUmmYDiUgaHrnXHKQJxhXPZPDbylaHYY3yaEhB7G5oIy/Un7Q/zFqcVX?= =?us-ascii?Q?kI+rizRoTd5Awm+yHTKZZ+oTS/EaxoTqyqEpZG8YhnvJ/QSgB541f4r/k6i4?= =?us-ascii?Q?UladINnvxflYIVxVsINwFTcNv7XVQQD8Ajc1PenA58fYhArdFpipVlgZpKtE?= =?us-ascii?Q?3MbpQVXfsj06QQkLkczJjEN5Pz6sB19xjjc2mQoeQ/fieQu+mMo7FiM2KChm?= =?us-ascii?Q?Jo7HtwCMxYgydjP1G6zUsIWeZvDijbCa9LS7/coumBCqWgF6o37Umgp+z8na?= =?us-ascii?Q?U8usNoBYUltgpikxFAijnQy+rSpLUT8upoUJePcfanL/tUn3fye5rtQWPJ5m?= =?us-ascii?Q?QR3XnFyp3MghCtX3q1yGge9shNa1hreMeV/HbogsM7xgAU9nmsRxi1Go4Z6k?= =?us-ascii?Q?cZMWf/Y53u2W6xDry5FhSz9dLm1jAxPeSjThPdVNbj5OSIH3AdAxJd/IhKR3?= =?us-ascii?Q?50XoSCkFFeTRmUlaCXSVEgKZqYfHAcqoHqKFtCkLEfvfgjhwN3gXuJVuWSQP?= =?us-ascii?Q?kQc1qTfJoxIpMW6T8F/VS/0vfut6dF0/neDpIf70pEVLWu0oPoWrgMpoNgND?= =?us-ascii?Q?sek+wez48U3fvk24bl9wkTxgHMjcOqXP68TvFjuD2Rh3AIlGGzuaRGCUDI7q?= =?us-ascii?Q?H0aEgHExEHRbYsIM2qH3/5mUYJdcYrojtzEDhHNxkGLMJPUA+GitPA6tMk44?= =?us-ascii?Q?7W3gwfv42/8+6dLyeN3FIfyJ7ErfrC0ErIRPhN38NanUiLcCZmrw94BdxwVN?= =?us-ascii?Q?zhl20WY/IAbSVzFTPuIJ6DsCUtizRNmEpJvFqqX/z5AhYmOp4c9K/Jai6G5/?= =?us-ascii?Q?YeVt39ybLR1O/PjC3nymiquQOtxoRP8mZyIxVnPClzwM6XOPT5FJdUYdlm9P?= =?us-ascii?Q?ccafhpeysQ5NK0Kl5PGbY+ULD8mrnwNASkT/LGNj5HKaB3D6noqll8bDJt8E?= =?us-ascii?Q?jfqFTjNQ8OLyJebuc7u39CIh07dZRB4KFYOkAOv2CzGimP2rxb5ps4rtLluz?= =?us-ascii?Q?2ofVNEVREtJv8RLApocsGIRrI9OeFlyqc4tKqh9Wo1qhan/wGIQ68qDxjvmA?= =?us-ascii?Q?qbUuqZCnGWlcJ+rLWikn6Tww1sM8cQ8+GjRijYGmQv6S0SaMouFwWrMl4sg2?= =?us-ascii?Q?S+u/k/Wj7InAuD4qneoT4xy1E3MAcIFJjCRgxSqZsBwOKqctF1Lg/UVpKzMM?= =?us-ascii?Q?fO6fvEUriSC4sJPQvD4t+/wcbfDd/6jEXDM2rzglGLCJ0ZA9++gkjNJqDFiZ?= =?us-ascii?Q?M8Zop3g4tdQW6lnaH1DP8QKqwWCLIuOxjVfCx9Tx2wvk8l/dXBUa5jMI5CWD?= =?us-ascii?Q?tCJfXmpRtENU+TEIsrtBrxtP4hyn7fD9fge9SWlSpqlnYtZbIRWqck+fGsv4?= =?us-ascii?Q?qf/HmGDkKuJEgWzqs7nA6tpRX4xxapkRJF18a2nz9ekeaXfFxGcebQ7aO/hx?= =?us-ascii?Q?of/NxtoIyXhY1lT5Uuh3ngnqoAkDtTUEMRBo9ShrnfTu0MZbaFOljbGRZhBp?= =?us-ascii?Q?qMNUEb76F9r4LtvAxkCyEH4zqEgE/iqSggS2kycdQVtocjS6tjMtSIkk07HP?= =?us-ascii?Q?xDiGqla68XfkHtoLGy4hrhqL0UsGoCPRmm8LYS1hCpg4SxVR8JDfYs15FopZ?= =?us-ascii?Q?d41zaMWR9LApVQIh8iasJZJcNXtqNd2jw+fZwm5aPKhGWKyx?= X-OriginatorOrg: Nvidia.com X-MS-Exchange-CrossTenant-Network-Message-Id: 894aa23c-4951-4282-fcba-08df2eca9570 X-MS-Exchange-CrossTenant-AuthSource: CHBPR12MB731189.namprd12.prod.outlook.com X-MS-Exchange-CrossTenant-AuthAs: Internal X-MS-Exchange-CrossTenant-OriginalArrivalTime: 20 Oct 2026 16:52:53.6336 (UTC) X-MS-Exchange-CrossTenant-FromEntityHeader: Hosted X-MS-Exchange-CrossTenant-Id: 43083d15-7273-40c1-b7db-39efd9ccc17a X-MS-Exchange-CrossTenant-MailboxType: HOSTED X-MS-Exchange-CrossTenant-UserPrincipalName: SeAIaoZaESG5xSa2pvTdxF47Ljc/NCkMJ1R8fhCj2eGaEj4fwk9HvabNtbNm6lSr X-MS-Exchange-Transport-CrossTenantHeadersStamped: IA0PR12MB7530 On Tue, Oct 20, 2026 at 05:11:03PM +0100, Yeoreum Yun wrote: > But, I have a related concern about deferred probing of RoT devices. > > For example, if TPM probing is deferred until after the attestation > subsystem has been initialized, how would the subsystem handle the > TPM becoming available later (This is reason for > IMA_INIT_LATE_SYNC). I don't think it would be any different, the mechanism for TPM would become generalized and apply to any attestation driver. This series doesn't attempt to do that flow yet, moving ima over and dealing with this is another series :) Jason