+static void print_basic_sysinfo(struct tdx_sysinfo *sysinfo)
+{
+ struct tdx_sysinfo_module_version *modver = &sysinfo->module_version;
+ struct tdx_sysinfo_module_info *modinfo = &sysinfo->module_info;
+ bool debug = modinfo->sys_attributes & TDX_SYS_ATTR_DEBUG_MODULE;
Why is this casually checking for debug modules, but doing nothing with
that indication? Shouldn't the kernel have policy around whether it
wants to interoperate with a debug module? I would expect that kernel
operation with a debug module would need explicit opt-in consideration.
For now the purpose is just to print whether module is debug or
production in the dmesg to let the user easily see, just like the module
version info.
Currently Linux depends on the BIOS to load the TDX module. For that we
need to put the module at /boot/efi/EFI/TDX/ and name it TDX-SEAM.so. So
given a machine, it's hard for the user to know whether a module is debug
one (the user may be able to get such info from the BIOS log, but it is
not always available for the user).
Yes I agree we should have a policy in the kernel to handle debug module,
but I don't see urgent need of it. So I would prefer to leave it as
future work when needed.
Then lets leave printing it as future work as well. It has no value
outside of folks that can get their hands on a platform and a
module-build that enables debug and to my knowledge that capability is
not openly available.
In the meantime I assume TDs will just need to be careful to check for
this detail in their attestation report. It serves no real purpose to
the VMM kernel.
Sure I'll remove.
It's basically for kernel developers and customers who are trying to
integrating TDX to their environment to easily find some basic module
info when something went wrong or they just want to check.
So if we don't print debug, then the 'sys_attributes' member is no
longer needed, that means if we want to keep 'struct
tdx_sysinfo_module_info' (or a better name in the next version) then it
will only have one member, which is 'tdx_features0'.
In the long term, we might need to query other 'tdx_featuresN' fields
since TDX module actually provides a metadata field 'NUM_TDX_FEATURES'
to report how many fields like 'TDX_FEATURES0' the module has. But I
don't see that coming in any near future.
So perhaps we don't need to restrictly follow 1:1 between 'linux
structure' <-> 'TDX class', and put the 'tdx_features0' together with
TDX module version members and rename that one to 'struct
tdx_sys_module_info'?
[..]
This name feels too generic, perhaps 'tdx_sys_info_features' makes it
clearer?
I wanted to name the structure following the "Class" name in the JSON
file. Both 'sys_attributes' and 'tdx_featueres0' are under class "Module
Info".
I am not sure how far we need to take fidelity to the naming choices
that the TDX module makes. It would likely be sufficient to
note the class name in a comment for the origin of the fields, i.e. the
script has some mapping like:
{ class name, field name } => { linux struct name, linux attribute name }
...where they are mostly 1:1, but Linux has the option of picking more
relevant names, especially since the class names are not directly
reusable as Linux data type names.
Yes this seems better.
I guess "attributes" are not necessarily features.
Sure, but given that attributes have no real value to the VMM kernel at
this point and features do, then name the data structure by its primary
use.
Sure.
+ u32 sys_attributes;
+ u64 tdx_features0;
+};
+
+#define TDX_SYS_ATTR_DEBUG_MODULE 0x1
+
+/* Class "TDX Module Version" */
+struct tdx_sysinfo_module_version {
+ u16 major;
+ u16 minor;
+ u16 update;
+ u16 internal;
+ u16 build_num;
+ u32 build_date;
+};
+
/* Class "TDMR Info" */
struct tdx_sysinfo_tdmr_info {
u16 max_tdmrs;
@@ -134,7 +163,9 @@ struct tdx_sysinfo_tdmr_info {
};
struct tdx_sysinfo {
- struct tdx_sysinfo_tdmr_info tdmr_info;
+ struct tdx_sysinfo_module_info module_info;
+ struct tdx_sysinfo_module_version module_version;
+ struct tdx_sysinfo_tdmr_info tdmr_info;
Compare that to:
struct tdx_sys_info {
struct tdx_sys_info_features features;
struct tdx_sys_info_version version;
struct tdx_sys_info_tdmr tdmr;
};
...and tell me which oine is easier to read.
I agree this is easier to read if we don't look at the JSON file. On the
other hand, following JSON file's "Class" names IMHO we can more easily
find which class to look at for a given member.
So I think they both have pros/cons, and I have no hard opinion on this.
Yeah, it is arbitrary. All I can offer is this quote from Ingo when I
did the initial ACPI NFIT enabling and spilled all of its awkward
terminology into the Linux implementation [1]:
"So why on earth is this whole concept and the naming itself
('drivers/block/nd/' stands for 'NFIT Defined', apparently) revolving
around a specific 'firmware' mindset and revolving around specific,
weirdly named, overly complicated looking firmware interfaces that come
with their own new weird glossary??"
The TDX "Class" names are not completely unreasonable, but if they only
get replicated as part of kdoc comments on the data structures I think
that's ok.
[1]: http://lore.kernel.org/20150420070624.GB13876@xxxxxxxxx
Thanks for the info!
I agree we don't need exactly follow TDX "class" to name linux
structures. We can add a comment to mention which structure/member
corresponds to which class/member in TDX spec when needed.
