From: Dave Hansen <dave.hansen@linux.intel.com>
To: torvalds@linux-foundation.org
Cc: x86@kernel.org, linux-kernel@vger.kernel.org,
Dave Hansen <dave.hansen@linux.intel.com>
Subject: [GIT PULL] x86/tdx for 7.4-rc1
Date: Mon, 19 Oct 2026 09:33:47 -0700 [thread overview]
Message-ID: <20261019163347.1916031-1-dave.hansen@linux.intel.com> (raw)
Hi Linus,
Please pull some x86/tdx changes for 7.4-rc1. There are two high-level
things going on here.
First, TDX host systems currently consume ~0.4% of physical memory for
their own memory metadata. This is all-or-nothing; you either pay the
0.4% or can not use TDX. A new TDX module feature (Dynamic PAMT)
allows this metadata to be allocated for 2MB of host memory at a time.
This, of course, saves precious DRAM when TDX utilization is low on a
host.
Second, the TDX ABI has fixed-size "quotes" that are passed around
during attestation operations. These 128k buffers are far too small
for post-quantum cryptography where the quotes grow substantially.
The TDX module now has the ability to enumerate the sizes of the
quote buffers. Plumb the new size enumeration into the kernel.
--
The following changes since commit cee9395acd8043be0644b25c34bfa86623f2b935:
Linux 7.3-rc1 (2026-08-30 13:34:40 -0700)
are available in the Git repository at:
https://git.kernel.org/pub/scm/linux/kernel/git/tip/tip.git tags/x86_tdx_for_7.4-rc1
for you to fetch changes up to 5b8212d45d99b77c84e3ad305a295e9e65d5ef20:
virt: tdx-guest: Make the Quote buffer size dynamic (2026-10-02 09:04:01 -0700)
----------------------------------------------------------------
- Enable dynamic TDX memory metadata allocation (DPAMT)
- Allow more flexible quote buffer sizes
----------------------------------------------------------------
Dave Hansen (1):
virt: tdx-guest: Remove unused and confusing function argument
Kiryl Shutsemau (2):
KVM/TDX: Allocate PAMT memory for TD and vCPU control structures
KVM/TDX: Get/put PAMT pages when (un)mapping private memory
Nikolay Borisov (1):
x86/tdx: Restrict attestation exports to the tdx-guest driver
Peter Fang (6):
x86/tdx: Take the Quote buffer as a generic pointer
virt: tdx-guest: Give the Quote buffer an explicit type
virt: tdx-guest: Calculate the Quote buffer size safely
virt: tdx-guest: Add a helper for the Quote buffer size
x86/tdx: Add a helper to query maximum Quote size
virt: tdx-guest: Make the Quote buffer size dynamic
Rick Edgecombe (8):
x86/virt/tdx: Simplify PAMT layout calculation
x86/virt/tdx: Allocate page bitmap for Dynamic PAMT
x86/virt/tdx: Add __tdx_pamt_get/put() helpers
x86/virt/tdx: Allocate refcounts for Dynamic PAMT memory
x86/virt/tdx: Handle multiple callers in tdx_pamt_get/put()
x86/virt/tdx: Add APIs to support Dynamic PAMT ops from KVM's fault path
x86/virt/tdx: Enable Dynamic PAMT
Documentation/x86: Add documentation for TDX's Dynamic PAMT
Xu Yilun (1):
x86/virt/tdx: Formalize SEAMCALL leaf version encoding support
Documentation/arch/x86/tdx.rst | 21 ++
arch/x86/coco/tdx/tdx.c | 25 +-
arch/x86/include/asm/kvm-x86-ops.h | 1 +
arch/x86/include/asm/kvm_host.h | 1 +
arch/x86/include/asm/shared/tdx.h | 6 +
arch/x86/include/asm/tdx.h | 27 +-
arch/x86/include/asm/tdx_global_metadata.h | 9 +-
arch/x86/kernel/asm-offsets.c | 1 +
arch/x86/kvm/mmu/mmu.c | 4 +
arch/x86/kvm/vmx/tdx.c | 99 +++++--
arch/x86/kvm/vmx/tdx.h | 2 +
arch/x86/virt/vmx/tdx/seamcall_internal.h | 19 ++
arch/x86/virt/vmx/tdx/tdx.c | 437 ++++++++++++++++++++++++----
arch/x86/virt/vmx/tdx/tdx.h | 10 +-
arch/x86/virt/vmx/tdx/tdx_global_metadata.c | 23 +-
arch/x86/virt/vmx/tdx/tdxcall.S | 10 +-
drivers/virt/coco/tdx-guest/tdx-guest.c | 82 ++++--
17 files changed, 635 insertions(+), 142 deletions(-)
reply other threads:[~2026-10-19 16:33 UTC|newest]
Thread overview: [no followups] expand[flat|nested] mbox.gz Atom feed
Reply instructions:
You may reply publicly to this message via plain-text email
using any one of the following methods:
* Save the following mbox file, import it into your mail client,
and reply-to-all from there: mbox
Avoid top-posting and favor interleaved quoting:
https://en.wikipedia.org/wiki/Posting_style#Interleaved_style
* Reply using the --to, --cc, and --in-reply-to
switches of git-send-email(1):
git send-email \
--in-reply-to=20261019163347.1916031-1-dave.hansen@linux.intel.com \
--to=dave.hansen@linux.intel.com \
--cc=linux-kernel@vger.kernel.org \
--cc=torvalds@linux-foundation.org \
--cc=x86@kernel.org \
/path/to/YOUR_REPLY
https://kernel.org/pub/software/scm/git/docs/git-send-email.html
* If your mail client supports setting the In-Reply-To header
via mailto: links, try the mailto: link
Be sure your reply has a Subject: header at the top and a blank line
before the message body.
This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox
all inboxes | Powered by JetHome®