On Wed, Mar 09, 2022 at 12:32:40PM -0800, Dave Hansen wrote: > On 3/9/22 02:40, Cathy Zhang wrote: > > This series implements the infrastructure needed to track and tear > > down bare-metal enclaves and then run EUPDATESVN. This is expected > > to be triggered by administrators via sysfs at some convenient time > > after a microcode update, probably by the microcode update tooling > > itself. > > Cathy, if it isn't abundantly clear by now, everyone seems to hate this > part of the implementation. Certainly if there is good information that this ucode brings in SGX fixes it absolutely makes sense to do that. Right now this information is only communicated via release notes and some other agent like the orchestrator decides the kill SGX part. If we had a programmatic way to determine EUPDATESVN is required this automatic kill is the way to go. > > Let's just make this just do EUPDATESVN as a part of the microcode > update process. No new ABI. No trying to preserve enclaves. Kill them > early, kill them all, and be done with it. Maybe use some meta-data that can communicate this directly. > > If we merge that and we have end users chasing us with torches and > pitchforks because their precious enclaves were torn down, we'll think > about doing something different.
