Linux Confidential Computing Development
 help / color / mirror / Atom feed
From: Xu Yilun <yilun.xu@linux.intel.com>
To: "Edgecombe, Rick P" <rick.p.edgecombe@intel.com>
Cc: "linux-coco@lists.linux.dev" <linux-coco@lists.linux.dev>,
	"linux-kernel@vger.kernel.org" <linux-kernel@vger.kernel.org>,
	"x86@kernel.org" <x86@kernel.org>,
	"Gao, Chao" <chao.gao@intel.com>,
	"Xu, Yilun" <yilun.xu@intel.com>,
	"Duan, Zhenzhong" <zhenzhong.duan@intel.com>,
	"kas@kernel.org" <kas@kernel.org>,
	"baolu.lu@linux.intel.com" <baolu.lu@linux.intel.com>,
	"Li, Xiaoyao" <xiaoyao.li@intel.com>,
	"Maloor, Kishen" <kishen.maloor@intel.com>,
	"Hunter, Adrian" <adrian.hunter@intel.com>,
	"tony.lindgren@linux.intel.com" <tony.lindgren@linux.intel.com>,
	"Mehta, Sohil" <sohil.mehta@intel.com>,
	"Fang, Peter" <peter.fang@intel.com>,
	"nik.borisov@suse.com" <nik.borisov@suse.com>,
	"kvm@vger.kernel.org" <kvm@vger.kernel.org>,
	"artem.bityutskiy@linux.intel.com"
	<artem.bityutskiy@linux.intel.com>
Subject: Re: [PATCH v2 3/5] x86/virt/tdx: Detect if the extensions initialization is required
Date: Tue, 29 Sep 2026 17:28:40 +0800	[thread overview]
Message-ID: <aruEyEetjbruotXB@yilunxu-OptiPlex-7050> (raw)
In-Reply-To: <13ff769fb55f37a9e7a68bdd40815775ddc4ddb1.camel@intel.com>

On Mon, Sep 28, 2026 at 09:06:15PM +0000, Edgecombe, Rick P wrote:
> On Tue, 2026-09-15 at 14:14 -0700, Rick Edgecombe wrote:
> > now that we don't need to do this on update
> 
> Per an off-list discussion, we agreed to not have TDH.SYS.UPDATE do the
> TDH.EXT.INIT work internally so  that another VMM can have more flexibility. So
> we now need to go back to something like we had in v1 where it is called after
> update. But given the change in error codes for TDH.EXT.INIT, I think we still
> don't need to save the ext_required metadata field? We can just call it
> unconditionally, right?

right.

> So it should still be a bit simpler than v1.

Another thing is about the addon_features0 argument for TDH.SYS.UPDATE.
In v1 -> v2, in order to meet the goal of "just restore everything that
was configured during boot", this bitmap argument is removed. I think
this argument removal is orthogonal to the TDH.EXT.INIT discussion and
still has merit.

  TDH.SYS.UPDATE(v0): TDX module reconfigures same features as specified by
		      TDH.SYS.CONFIG, Linux would use this SEAMCALL version.

  TDH.SYS.UPDATE(v1, addon_featues0): VMM can configure new features specified
				      by addon_features0 argument. For other VMM.

Then we can just add one patch based on v2 series:

----8<----

    x86/virt/tdx: Re-initialize the extensions on runtime TDX module update

    xxxxx

diff --git a/arch/x86/virt/vmx/tdx/tdx.c b/arch/x86/virt/vmx/tdx/tdx.c
index c28e65f56532..8d737b86a1d6 100644
--- a/arch/x86/virt/vmx/tdx/tdx.c
+++ b/arch/x86/virt/vmx/tdx/tdx.c
@@ -1309,7 +1309,7 @@ static __init int tdx_ext_mem_setup(void)
        return ret;
 }

-static __init int tdx_ext_init(void)
+static int tdx_ext_init(void)
 {
        struct tdx_module_args args = {};
        u64 ret;
@@ -1340,6 +1340,19 @@ static __init int init_tdx_module_extensions(void)
        return tdx_ext_init();
 }

+/*
+ * Don't update the memory requirement or try memory allocation in
+ * stop_machine(). If an incompatible update requires more memory, let the
+ * extensions re-initialization fail.
+ */
+static int reinit_tdx_module_extensions(void)
+{
+       if (!(tdx_sysinfo.features.tdx_features0 & TDX_FEATURES0_EXT))
+               return 0;
+
+       return tdx_ext_init();
+}
+
 static __init int init_tdx_module(void)
 {
        int ret;
@@ -1517,6 +1530,10 @@ int tdx_module_run_update(void)
        if (ret)
                return ret;

+       ret = reinit_tdx_module_extensions();
+       if (ret)
+               return ret;
+
        ret = get_tdx_sys_info_version(&tdx_sysinfo.version);
        /*
         * Only fails if there is something unexpected



  reply	other threads:[~2026-09-29  9:30 UTC|newest]

Thread overview: 35+ messages / expand[flat|nested]  mbox.gz  Atom feed  top
2026-09-15 10:26 [PATCH v2 0/5] Enable TDX module extensions Xu Yilun
2026-09-15 10:26 ` [PATCH v2 1/5] x86/virt/tdx: Move TDH.SYS.CONFIG operations into a wrapper Xu Yilun
2026-09-15 20:45   ` Edgecombe, Rick P
2026-09-18  9:54     ` Xu Yilun
2026-09-22  7:09   ` Tony Lindgren
2026-09-15 10:26 ` [PATCH v2 2/5] x86/virt/tdx: Configure add-on features on TDX module init Xu Yilun
2026-09-15 20:54   ` Edgecombe, Rick P
2026-09-21 11:42     ` Xu Yilun
2026-09-22 14:48       ` Edgecombe, Rick P
2026-09-24  1:51         ` Xu Yilun
2026-09-16  3:23   ` Chao Gao
2026-09-18  9:56     ` Xu Yilun
2026-09-22  7:13   ` Tony Lindgren
2026-09-23  7:30     ` Xu Yilun
2026-09-23  7:59       ` Tony Lindgren
2026-09-24  1:33         ` Xu Yilun
2026-09-24  6:22           ` Tony Lindgren
2026-09-25 14:12   ` Nikolay Borisov
2026-09-15 10:26 ` [PATCH v2 3/5] x86/virt/tdx: Detect if the extensions initialization is required Xu Yilun
2026-09-15 21:14   ` Edgecombe, Rick P
2026-09-18  9:58     ` Xu Yilun
2026-09-28 21:06     ` Edgecombe, Rick P
2026-09-29  9:28       ` Xu Yilun [this message]
2026-09-29 16:33         ` Edgecombe, Rick P
2026-09-29 17:26   ` Nikolay Borisov
2026-09-30  3:02     ` Xu Yilun
2026-09-15 10:26 ` [PATCH v2 4/5] x86/virt/tdx: Add extra memory to TDX module for the extensions Xu Yilun
2026-09-15 21:19   ` Edgecombe, Rick P
2026-10-01 12:14     ` Kiryl Shutsemau
2026-10-01 14:55       ` Edgecombe, Rick P
2026-09-16  7:40   ` Chao Gao
2026-09-18 10:06     ` Xu Yilun
2026-09-22  7:25   ` Tony Lindgren
2026-09-15 10:26 ` [PATCH v2 5/5] x86/virt/tdx: Make TDX module initialize " Xu Yilun
2026-09-15 22:09 ` [PATCH v2 0/5] Enable TDX module extensions Edgecombe, Rick P

Reply instructions:

You may reply publicly to this message via plain-text email
using any one of the following methods:

* Save the following mbox file, import it into your mail client,
  and reply-to-all from there: mbox

  Avoid top-posting and favor interleaved quoting:
  https://en.wikipedia.org/wiki/Posting_style#Interleaved_style

* Reply using the --to, --cc, and --in-reply-to
  switches of git-send-email(1):

  git send-email \
    --in-reply-to=aruEyEetjbruotXB@yilunxu-OptiPlex-7050 \
    --to=yilun.xu@linux.intel.com \
    --cc=adrian.hunter@intel.com \
    --cc=artem.bityutskiy@linux.intel.com \
    --cc=baolu.lu@linux.intel.com \
    --cc=chao.gao@intel.com \
    --cc=kas@kernel.org \
    --cc=kishen.maloor@intel.com \
    --cc=kvm@vger.kernel.org \
    --cc=linux-coco@lists.linux.dev \
    --cc=linux-kernel@vger.kernel.org \
    --cc=nik.borisov@suse.com \
    --cc=peter.fang@intel.com \
    --cc=rick.p.edgecombe@intel.com \
    --cc=sohil.mehta@intel.com \
    --cc=tony.lindgren@linux.intel.com \
    --cc=x86@kernel.org \
    --cc=xiaoyao.li@intel.com \
    --cc=yilun.xu@intel.com \
    --cc=zhenzhong.duan@intel.com \
    /path/to/YOUR_REPLY

  https://kernel.org/pub/software/scm/git/docs/git-send-email.html

* If your mail client supports setting the In-Reply-To header
  via mailto: links, try the mailto: link
Be sure your reply has a Subject: header at the top and a blank line before the message body.
This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox