Hi Dave, Thomas, Thanks for helping review! I will remove the new ABI and let microcode update process call the interface directly to clean up EPC and do EUPDATESVN. Please let me know if you have other suggestion. > -----Original Message----- > From: Hansen, Dave <dave.hansen@xxxxxxxxx> > Sent: Thursday, March 10, 2022 4:33 AM > To: Zhang, Cathy <cathy.zhang@xxxxxxxxx>; linux-sgx@xxxxxxxxxxxxxxx; > x86@xxxxxxxxxx; Raj, Ashok <ashok.raj@xxxxxxxxx> > Subject: Re: [RFC PATCH 00/11] Support microcode updates affecting SGX > > On 3/9/22 02:40, Cathy Zhang wrote: > > This series implements the infrastructure needed to track and tear > > down bare-metal enclaves and then run EUPDATESVN. This is expected to > > be triggered by administrators via sysfs at some convenient time after > > a microcode update, probably by the microcode update tooling itself. > > Cathy, if it isn't abundantly clear by now, everyone seems to hate this part of > the implementation. > > Let's just make this just do EUPDATESVN as a part of the microcode update > process. No new ABI. No trying to preserve enclaves. Kill them early, kill > them all, and be done with it. > > If we merge that and we have end users chasing us with torches and > pitchforks because their precious enclaves were torn down, we'll think about > doing something different.