On Wed, Oct 06, 2021 at 09:23:22AM -0400, Alex Deucher wrote: > There could be some OEM systems that disable the IOMMU on the platform > and don't provide a switch in the bios to enable it. The GPU driver > will still work in that case, it will just not be able to enable KFD > support for ROCm compute. SME won't work for most devices in that > case however since most devices have a DMA mask too small to handle > the C bit for encryption. SME should be dependent on IOMMU being > enabled. Yeah, I'd let you hash this out with Tom. > I'm not an SME expert, but I thought that that was already the case. Yeah, I think Paul wants this: --- diff --git a/arch/x86/Kconfig b/arch/x86/Kconfig index b79e88ee6627..e94c2df7a043 100644 --- a/arch/x86/Kconfig +++ b/arch/x86/Kconfig @@ -1518,7 +1518,6 @@ config AMD_MEM_ENCRYPT config AMD_MEM_ENCRYPT_ACTIVE_BY_DEFAULT bool "Activate AMD Secure Memory Encryption (SME) by default" - default y depends on AMD_MEM_ENCRYPT help Say yes to have system memory encrypted by default if running on --- The reason we did this is so that you don't want to supply mem_encrypt=on on the cmdline but didn't anticipate any such fun with some devices. > We just added the error condition in the GPU driver to prevent the > driver from loading when the user forced SME on. IIRC, there were > users that cared more about SME than graphics support. Well, it's a distro kernel so we should at least try to make everyone happy. :) -- Regards/Gruss, Boris. https://people.kernel.org/tglx/notes-about-netiquette