From mboxrd@z Thu Jan 1 00:00:00 1970 Authentication-Results: smtp.subspace.kernel.org; arc=none smtp.remote-ip=192.198.163.11 ARC-Seal: i=1; d=subspace.kernel.org; s=arc20261015; a=rsa-sha256; cv=none; t=1794372618; b=HMnIUDeK4gJ9vPyRbXlbTs/f1/xnxuEkrjj9l3G2cn0r2/6seLGYeIQsoYgmzyHFfLuM dziFF0UbrrIeDQL8sRF/+sni6yDdkD20VMJLRW2rTSrCUqIMa4asiTxnZxIDWL4FdRMn8 7kyg4dxdEYlaSiGVi4h3Ywl+lwXb/ndXr5FduoZhgbwbnZHpuglvdszRimmqHK3Ggh5Jp qSnZxSB/vUhbWzQyrJhSLaAtHcO02cuVLF3n4wC5uPlQapatuMyGT6vEI0ud/m+yF28KX NaU03LQj/tYnpG8oM5yjDHmJtU5DPPkOCoo5nXxmT2ocq9wbveEjvKGlmofOwgoLxsw== ARC-Message-Signature: i=1; d=subspace.kernel.org; s=arc20261015; a=rsa-sha256; c=relaxed/relaxed; t=1794372618; h=DMARC-Filter:DKIM-Signature:X-CSE-ConnectionGUID:X-CSE-MsgGUID: X-IronPort-AV:X-IronPort-AV:Received:X-CSE-ConnectionGUID: X-CSE-MsgGUID:X-ExtLoop1:X-IronPort-AV:Received:Message-ID:Date: MIME-Version:User-Agent:Subject:To:Cc:References:Content-Language: From:In-Reply-To:Content-Type:Content-Transfer-Encoding; bh=GucDm2oz81wKTevTqbqEwI8JkuvXZ6eoYgO/mA1WjyU=; b=AdAaMmiWe5ejZUKY7t62MZ3lELKFWG1sJLq0kTmMOOHorLONzbsHc6jkm7SNht0LovBh JvofMi0BZTtmY2zdmdsRIDglf9vdUKU+GctpFlHsE9ho9g7L8kJjN28rsJ1l6XK1i098l 7QS6RevEaR0P7z7TwqIrbm00hL8s9OPGvIbdOMvq59LZtrd89Ax4QzplUkFVgrsD0CfP5 VH6ZYRy8X83A+9w6mImxvBhb9Z+dfngDpFNFMat0mRKV/H+P9lM1C0qazG8ZOpCUO3ARH nfZeGgof9nEfTN5aWfdkpH7vFSAU0sSQyHGpDliaBYstwPKk5GqnyKF1Uk8eRoETDmA== ARC-Authentication-Results: i=1; smtp.subspace.kernel.org; dmarc=pass header.from=intel.com; spf=pass smtp.mailfrom=intel.com; dkim=pass header.d=intel.com header.i=@intel.com header.a=rsa-sha256 header.s=Intel header.b=N5XPqJhI; arc=none smtp.remote-ip=192.198.163.11 Received: from mgamail.intel.com (mgamail.intel.com [192.198.163.11]) (using TLSv1.2 with cipher ECDHE-ECDSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by smtp.subspace.kernel.org (Postfix) with ESMTPS id CDB44606A320; Wed, 11 Nov 2026 04:50:17 +0000 (UTC) DMARC-Filter: OpenDMARC Filter v1.4.2 smtp.subspace.kernel.org CDB44606A320 Authentication-Results: smtp.subspace.kernel.org; dmarc=pass (p=none dis=none) header.from=intel.com Authentication-Results: smtp.subspace.kernel.org; spf=pass smtp.mailfrom=intel.com Authentication-Results: smtp.subspace.kernel.org; dkim=pass (2048-bit key) header.d=intel.com header.i=@intel.com header.a=rsa-sha256 header.s=Intel header.b=N5XPqJhI DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=intel.com; i=@intel.com; q=dns/txt; s=Intel; t=1794372618; x=1825908618; h=message-id:date:mime-version:subject:to:cc:references: from:in-reply-to:content-transfer-encoding; bh=ljcrNKbpAZvY29Hoai/6dYOKOIn1MHeJbxONLN+KZis=; b=N5XPqJhI2xZUqyK4fakr82V+DoQDJQEe4BN2kuukyKY4IKW8DVgZhRyE qYpTr/vFZ1KuvrHjSkD/HzozyMwL6PH13OeLAV8qPA8xwOW0rQ/TIdl5I g1qvdxTxgCkWRZnikO6Qvnia27wed7x7N82G6HmvwqYWvxwbFEvS+CdmY s6YhDpMOCU7zpET+089C6caF50MP99NFh5502Ma8dvX369kwJM0Hu6x4m 1T6fgGxD10kUoGciwjHTHTU76YNoqZG30APKKUG2G7LPsLEWXu3P1uDCq 8S9iyB7gPfkSPFIDvZfGdwQLoY8h1/peYHct3RgclPQzECr40U6D4WCjS w==; X-CSE-ConnectionGUID: onmzTCaBQQOT9e1ZCFH8NA== X-CSE-MsgGUID: Be++AGXfTp2pK62sqTXZBg== X-IronPort-AV: E=McAfee;i="6800,10657,11962"; a="3056841" X-IronPort-AV: E=Sophos;i="6.27,207,1787036400"; d="scan'208";a="3056841" Received: from fmviesa007.fm.intel.com ([10.60.135.147]) by fmvoesa105.fm.intel.com with ESMTP/TLS/ECDHE-RSA-AES256-GCM-SHA384; 10 Nov 2026 20:50:17 -0800 X-CSE-ConnectionGUID: RNtq6VTrRyq6Mn+kkbUsKw== X-CSE-MsgGUID: /Ga9LHOsTL+GMDFg52Zw+g== X-ExtLoop1: 1 X-IronPort-AV: E=Sophos;i="6.27,207,1787036400"; d="scan'208";a="8754365" Received: from xiaoyaol-hp-g830.ccr.corp.intel.com (HELO [10.124.240.71]) ([10.124.240.71]) by smtpauth.intel.com with ESMTP/TLS/ECDHE-RSA-AES256-GCM-SHA384; 10 Nov 2026 20:50:12 -0800 Message-ID: <63efac33-22e7-4e4a-8fc4-20497af51927@intel.com> Date: Wed, 11 Nov 2026 12:50:08 +0800 X-Mailing-List: linux-kernel@vger.kernel.org List-Id: List-Post: List-Help: List-Subscribe: List-Unsubscribe: List-Owner: Precedence: list MIME-Version: 1.0 User-Agent: Mozilla Thunderbird Subject: Re: [PATCH v16 03/20] KVM: selftests: Initialize the TDX VM To: Lisa Wang , Andrew Jones , Ackerley Tng , Binbin Wu , Chao Gao , Dave Hansen , Erdem Aktas , Kiryl Shutsemau , linux-kselftest@vger.kernel.org, Paolo Bonzini , "Pratik R. Sampat" , Reinette Chatre , Rick Edgecombe , Roger Wang , Ryan Afranji , Sagi Shahar , Sean Christopherson , Shuah Khan , Oliver Upton Cc: Jeremiah McReynolds , kvm@vger.kernel.org, linux-coco@lists.linux.dev, linux-kernel@vger.kernel.org, x86@kernel.org References: <20261105-tdx-selftests-v16-0-2024e8fa517a@google.com> <20261105-tdx-selftests-v16-3-2024e8fa517a@google.com> Content-Language: en-US From: Xiaoyao Li In-Reply-To: <20261105-tdx-selftests-v16-3-2024e8fa517a@google.com> Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 7bit On 11/6/2026 7:46 AM, Lisa Wang wrote: > From: Sagi Shahar > > Add tdx_init_vm() to handle the mandatory VM-level initialization > sequence required for Intel TDX. > > For TDX, the VM's CPUID configuration must be "sealed" during > KVM_TDX_INIT_VM before any vCPUs are created. This is necessary because > the TDX module does not allow the host to create and initialize any > vCPUs before the VM's CPUID configuration is accepted and sealed into > the TDCS. > > Additionally, to satisfy the strict requirements of the TDH.MNG.INIT > SEAMCALL, the helper masks the KVM-supported CPUID > (kvm_get_supported_cpuid()) against the "directly configurable" bits > reported by KVM_TDX_CAPABILITIES. > > Co-developed-by: Isaku Yamahata > Signed-off-by: Isaku Yamahata > Co-developed-by: Rick Edgecombe > Signed-off-by: Rick Edgecombe > Signed-off-by: Sagi Shahar > Signed-off-by: Lisa Wang > Reviewed-by: Ira Weiny Reviewed-by: Xiaoyao Li