On 25.08.23 г. 15:14 ч., Kai Huang wrote:
Intel Trusted Domain Extensions (TDX) protects guest VMs from malicious host and certain physical attacks. TDX specs are available in [1]. This series is the initial support to enable TDX with minimal code to allow KVM to create and run TDX guests. KVM support for TDX is being developed separately[2]. A new KVM "guest_memfd()" to support private memory is also being developed[3]. KVM will only support the new "guest_memfd()" infrastructure for TDX. Also, a few first generations of TDX hardware have an erratum[4], and require additional handing. This series doesn't aim to support all functionalities, and doesn't aim to resolve all things perfectly. All other optimizations will be posted as follow-up once this initial TDX support is upstreamed. Hi Dave/Kirill/Peter/Tony/David and all, Thanks for your review on the previous versions. Appreciate your review on this version and any tag if patches look good to you. Thanks! This version was based on "Unify TDCALL/SEAMCALL and TDVMCALL assembly" series, which was based on latest tip/x86/tdx, requested by Peter: https://lore.kernel.org/lkml/cover.1692096753.git.kai.huang@xxxxxxxxx/ Please also help to review that series. Thanks!
Are there any major outstanding issues preventing this to be merged? The review has been somewhat quiet and most of the outstanding issues seems to be nitpicks?
