On 1/26/21 1:31 AM, Kai Huang wrote: > Modify sgx_init() to always try to initialize the virtual EPC driver, > even if the bare-metal SGX driver is disabled. The bare-metal driver > might be disabled if SGX Launch Control is in locked mode, or not > supported in the hardware at all. This allows (non-Linux) guests that > support non-LC configurations to use SGX. One thing worth calling out *somewhere* (which is entirely my fault): "bare-metal" in the context of this patch set refers to true bare-metal, but *ALSO* covers the plain SGX driver running inside a guest. So, perhaps "bare-metal" isn't the best term to use. Again, my bad. Better nomenclature suggestions are welcome.