Re: [PATCH v14 00/19] x86: Trenchboot secure dynamic launch Linux kernel support

Dave Hansen
2025-04-24T18:45:08Z

On 4/21/25 09:26, Ross Philipson wrote:
> This patchset provides detailed documentation of DRTM, the approach used for
> adding the capbility, and relevant API/ABI documentation. In addition to the
> documentation the patch set introduces Intel TXT support as the first platform
> for Linux Secure Launch.

So, I know some of the story here thanks to Andy Cooper. But the
elephant in the room is:

> INTEL(R) TRUSTED EXECUTION TECHNOLOGY (TXT)
> M: Ning Sun <ning.sun@intel.com>
> L: tboot-devel@lists.sourceforge.net
> S: Supported
> W: http://tboot.sourceforge.net
> T: hg http://tboot.hg.sourceforge.net:8000/hgroot/tboot/tboot
> F: Documentation/arch/x86/intel_txt.rst
> F: arch/x86/kernel/tboot.c
> F: include/linux/tboot.h

Linux already supports TXT. Why do we need TrenchBoot?

I think I know the answer, but it also needs to be a part of the
documentation, changelogs and cover letter.

Also, honestly, what do you think we should do with the Linux tboot
code? Is everyone going to be moving over to Trenchboot so that Linux
support for TXT/tboot can just go away?