On Wed, Dec 18, 2019 at 9:03 AM Ard Biesheuvel <ardb@xxxxxxxxxx> wrote: > + status = efi_call_early(create_event, EVT_SIGNAL_EXIT_BOOT_SERVICES, > + TPL_CALLBACK, handle_exit_boot_services_event, > + NULL, &exit_boot_services_event); > + if (status != EFI_SUCCESS) { > + pr_efi_err("Failed to register for EBS() event\n"); > + goto free_handle; > + } OVMF's SEV implementation appears to tear down AMD's IOMMU mappings at EVT_SIGNAL_EXIT_BOOT_SERVICES. How are we ensuring that this happens first?