Re: [PATCH 00/40] nitro_enclaves: Add support for Nitro Sandboxes

["Graf (AWS), Alexander" <graf@amazon.de>]

Hi Randy,

On 12.11.26 02:49, Randy Dunlap wrote:
>
> On 11/11/26 2:41 PM, Alexander Graf wrote:
>> Alexander Graf (40):
>>    nitro_enclaves: Allow the CPU pool to span NUMA nodes
>>    nitro_enclaves: Add NE_ADD_ANY_VCPU
>>    nitro_enclaves: Expose CPU pool state under sysfs
>>    nitro_enclaves: Document multi-NUMA CPU pools
>>    dma-contiguous: add dma_get_numa_cma_area() accessor
>>    nitro_enclaves: Allocate physically contiguous enclave memory
>>    nitro_enclaves: Add NE_MEMORY_SHARED
>>    nitro_enclaves: Add NE_ADD_MEMORY_REGION
>>    nitro_enclaves: Document the memory pool
>>    nitro_enclaves: Add NE_CREATE_VM2 with a launch flag word
>>    nitro_enclaves: Add NE_ENCLAVE_PCIE_MODE launch flag
>>    nitro_enclaves: Name the device's error codes in the UAPI header
>>    nitro_enclaves: Log a reached device limit at info level
>>    nitro_enclaves: Add NE_SET_INFO_PAGE
>>    nitro_enclaves: Document the info page in the memory pool
>>    nitro_enclaves: Turn the command reply into a per-command union
>>    nitro_enclaves: Add the slot pool donation commands
>>    nitro_enclaves: Donate memory for the slot pool
>>    nitro_enclaves: Add the slot pool growth commands
>>    nitro_enclaves: Add a helper to grow the slot pool
>>    nitro_enclaves: Document the slot pool
>>    nitro_enclaves: Expose slot pool state under sysfs
>>    nitro_enclaves: Add the device add command
>>    nitro_enclaves: Add NE_ADD_DEVICE
>>    nitro_enclaves: Read the interrupt multiplexer geometry at probe
>>    nitro_enclaves: Donate a bitmap page per multiplexed vector
>>    nitro_enclaves: Dispatch multiplexed interrupts to per-queue bindings
>>    nitro_enclaves: Add NE_SET_NOTIFY_EVENTFD
>>    nitro_enclaves: Report the device's info notification
>>    nitro_enclaves: Count multiplexed interrupts under debugfs
>>    nitro_enclaves: Map the doorbell window at probe
>>    nitro_enclaves: Add NE_SET_VRING_CALL
>>    nitro_enclaves: Assert the layout of the ioctl argument structs
>>    nitro_enclaves: Pass on the Nitro Sandbox launch flags
>>    nitro_enclaves: Add NE_ENCLAVE_DIRECT_MODE
>>    nitro_enclaves: Add NE_ENCLAVE_PCIE_HOTPLUG_MODE
>>    nitro_enclaves: Add NE_ENCLAVE_CPU_OVERCOMMIT_MODE
>>    nitro_enclaves: Add NE_GET_CAPS
>>    nitro_enclaves: Add NE_UPDATE_DEVICE_CONFIG
>>    nitro_enclaves: Document the driver side of Nitro Sandboxes
>>
>>   .../sysfs-devices-virtual-misc-nitro_enclaves |  232 +
>>   Documentation/virt/ne_overview.rst            |  256 +-
>>   MAINTAINERS                                   |    1 +
>>   drivers/virt/nitro_enclaves/Kconfig           |   19 +
>>   drivers/virt/nitro_enclaves/ne_misc_dev.c     | 4832 +++++++++++++++--
>>   drivers/virt/nitro_enclaves/ne_misc_dev.h     |  206 +-
>>   drivers/virt/nitro_enclaves/ne_pci_dev.c      | 1568 +++++-
>>   drivers/virt/nitro_enclaves/ne_pci_dev.h      |  599 +-
>>   include/linux/dma-map-ops.h                   |    7 +
>>   include/uapi/linux/nitro_enclaves.h           | 1182 +++-
>>   kernel/dma/contiguous.c                       |   36 +
>>   samples/nitro_enclaves/ne_ioctl_sample.c      |   10 +-
>>   12 files changed, 8282 insertions(+), 666 deletions(-)
>>   create mode 100644 Documentation/ABI/testing/sysfs-devices-virtual-misc-nitro_enclaves
>>
>>
>> base-commit: 6628e7d4c6b25c8d18f1345e3a20d21829aae7e4
> That's 7.4-rc1, but I can't get this series to apply cleanly to
> 7.4-rc1 or linux-next...
>
> IMO it would be better if the series applied to something
> newer than 7.4-rc1.


Ugh, I forgot to mention that this series is built on top of a driver 
fixup series that I sent earlier today: 
https://lore.kernel.org/all/cover.1794300000.git.graf@amazon.com/T/#t. I 
would be more than surprised if 7.4-rc1 vs latest master actually made a 
difference.


Alex