mirror of https://lore.kernel.org/lkml/
 help / color / mirror / Atom feed
From: Dave Hansen <dave.hansen@linux.intel.com>
To: torvalds@linux-foundation.org
Cc: x86@kernel.org, linux-kernel@vger.kernel.org,
	Dave Hansen <dave.hansen@linux.intel.com>
Subject: [GIT PULL] x86/tdx for 7.4-rc1
Date: Mon, 19 Oct 2026 09:33:47 -0700	[thread overview]
Message-ID: <20261019163347.1916031-1-dave.hansen@linux.intel.com> (raw)

Hi Linus,

Please pull some x86/tdx changes for 7.4-rc1. There are two high-level
things going on here.

First, TDX host systems currently consume ~0.4% of physical memory for
their own memory metadata.  This is all-or-nothing; you either pay the
0.4% or can not use TDX. A new TDX module feature (Dynamic PAMT)
allows this metadata to be allocated for 2MB of host memory at a time.
This, of course, saves precious DRAM when TDX utilization is low on a
host.

Second, the TDX ABI has fixed-size "quotes" that are passed around
during attestation operations. These 128k buffers are far too small
for post-quantum cryptography where the quotes grow substantially.
The TDX module now has the ability to enumerate the sizes of the
quote buffers. Plumb the new size enumeration into the kernel.

--

The following changes since commit cee9395acd8043be0644b25c34bfa86623f2b935:

  Linux 7.3-rc1 (2026-08-30 13:34:40 -0700)

are available in the Git repository at:

  https://git.kernel.org/pub/scm/linux/kernel/git/tip/tip.git tags/x86_tdx_for_7.4-rc1

for you to fetch changes up to 5b8212d45d99b77c84e3ad305a295e9e65d5ef20:

  virt: tdx-guest: Make the Quote buffer size dynamic (2026-10-02 09:04:01 -0700)

----------------------------------------------------------------
 - Enable dynamic TDX memory metadata allocation (DPAMT)
 - Allow more flexible quote buffer sizes

----------------------------------------------------------------
Dave Hansen (1):
      virt: tdx-guest: Remove unused and confusing function argument

Kiryl Shutsemau (2):
      KVM/TDX: Allocate PAMT memory for TD and vCPU control structures
      KVM/TDX: Get/put PAMT pages when (un)mapping private memory

Nikolay Borisov (1):
      x86/tdx: Restrict attestation exports to the tdx-guest driver

Peter Fang (6):
      x86/tdx: Take the Quote buffer as a generic pointer
      virt: tdx-guest: Give the Quote buffer an explicit type
      virt: tdx-guest: Calculate the Quote buffer size safely
      virt: tdx-guest: Add a helper for the Quote buffer size
      x86/tdx: Add a helper to query maximum Quote size
      virt: tdx-guest: Make the Quote buffer size dynamic

Rick Edgecombe (8):
      x86/virt/tdx: Simplify PAMT layout calculation
      x86/virt/tdx: Allocate page bitmap for Dynamic PAMT
      x86/virt/tdx: Add __tdx_pamt_get/put() helpers
      x86/virt/tdx: Allocate refcounts for Dynamic PAMT memory
      x86/virt/tdx: Handle multiple callers in tdx_pamt_get/put()
      x86/virt/tdx: Add APIs to support Dynamic PAMT ops from KVM's fault path
      x86/virt/tdx: Enable Dynamic PAMT
      Documentation/x86: Add documentation for TDX's Dynamic PAMT

Xu Yilun (1):
      x86/virt/tdx: Formalize SEAMCALL leaf version encoding support

 Documentation/arch/x86/tdx.rst              |  21 ++
 arch/x86/coco/tdx/tdx.c                     |  25 +-
 arch/x86/include/asm/kvm-x86-ops.h          |   1 +
 arch/x86/include/asm/kvm_host.h             |   1 +
 arch/x86/include/asm/shared/tdx.h           |   6 +
 arch/x86/include/asm/tdx.h                  |  27 +-
 arch/x86/include/asm/tdx_global_metadata.h  |   9 +-
 arch/x86/kernel/asm-offsets.c               |   1 +
 arch/x86/kvm/mmu/mmu.c                      |   4 +
 arch/x86/kvm/vmx/tdx.c                      |  99 +++++--
 arch/x86/kvm/vmx/tdx.h                      |   2 +
 arch/x86/virt/vmx/tdx/seamcall_internal.h   |  19 ++
 arch/x86/virt/vmx/tdx/tdx.c                 | 437 ++++++++++++++++++++++++----
 arch/x86/virt/vmx/tdx/tdx.h                 |  10 +-
 arch/x86/virt/vmx/tdx/tdx_global_metadata.c |  23 +-
 arch/x86/virt/vmx/tdx/tdxcall.S             |  10 +-
 drivers/virt/coco/tdx-guest/tdx-guest.c     |  82 ++++--
 17 files changed, 635 insertions(+), 142 deletions(-)

                 reply	other threads:[~2026-10-19 16:33 UTC|newest]

Thread overview: [no followups] expand[flat|nested]  mbox.gz  Atom feed

Reply instructions:

You may reply publicly to this message via plain-text email
using any one of the following methods:

* Save the following mbox file, import it into your mail client,
  and reply-to-all from there: mbox

  Avoid top-posting and favor interleaved quoting:
  https://en.wikipedia.org/wiki/Posting_style#Interleaved_style

* Reply using the --to, --cc, and --in-reply-to
  switches of git-send-email(1):

  git send-email \
    --in-reply-to=20261019163347.1916031-1-dave.hansen@linux.intel.com \
    --to=dave.hansen@linux.intel.com \
    --cc=linux-kernel@vger.kernel.org \
    --cc=torvalds@linux-foundation.org \
    --cc=x86@kernel.org \
    /path/to/YOUR_REPLY

  https://kernel.org/pub/software/scm/git/docs/git-send-email.html

* If your mail client supports setting the In-Reply-To header
  via mailto: links, try the mailto: link
Be sure your reply has a Subject: header at the top and a blank line before the message body.
This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox

all inboxes | Powered by JetHome®