[V5,0/5] Add SEV_INIT_EX support

Message

Peter Gonda Dec. 3, 2021, 2:46 p.m. UTC

SEV_INIT requires users to unlock their SPI bus for the PSP's non
volatile (NV) storage. Users may wish to lock their SPI bus for numerous
reasons, to support this the PSP firmware supports SEV_INIT_EX. INIT_EX
allows the firmware to use a region of memory for its NV storage leaving
the kernel responsible for actually storing the data in a persistent
way. This series adds a new module parameter to ccp allowing users to
specify a path to a file for use as the PSP's NV storage. The ccp driver
then reads the file into memory for the PSP to use and is responsible
for writing the file whenever the PSP modifies the memory region.

V4
* Fix make C=1 W=1 warnings.

V3
* Add another module parameter 'psp_init_on_probe' to allow for skipping
  PSP init on module init.
* Fixes review comments from Sean.
* Fixes missing error checking with file reading.
* Removed setting 'error' to a set value in patch 1.

Signed-off-by: Peter Gonda <[e-mail]>
Reviewed-by: Marc Orr <[e-mail]>
Acked-by: David Rientjes <[e-mail]>
Cc: Tom Lendacky <[e-mail]>
Cc: Brijesh Singh <[e-mail]>
Cc: Marc Orr <[e-mail]>
Cc: Joerg Roedel <[e-mail]>
Cc: Herbert Xu <[e-mail]>
Cc: David Rientjes <[e-mail]>
Cc: John Allen <[e-mail]>
Cc: "David S. Miller" <[e-mail]>
Cc: Paolo Bonzini <[e-mail]>
Cc: [e-mail]
Cc: [e-mail]

David Rientjes (1):
  crypto: ccp - Add SEV_INIT_EX support

Peter Gonda (4):
  crypto: ccp - Add SEV_INIT rc error logging on init
  crypto: ccp - Move SEV_INIT retry for corrupted data
  crypto: ccp - Refactor out sev_fw_alloc()
  crypto: ccp - Add psp_init_on_probe module parameter

 .../virt/kvm/amd-memory-encryption.rst        |   6 +
 drivers/crypto/ccp/sev-dev.c                  | 258 +++++++++++++++---
 include/linux/psp-sev.h                       |  21 ++
 3 files changed, 245 insertions(+), 40 deletions(-)

Comments

Brijesh Singh Dec. 4, 2021, 11:36 p.m. UTC | #1

On 12/3/21 8:46 AM, Peter Gonda wrote:
> SEV_INIT requires users to unlock their SPI bus for the PSP's non
> volatile (NV) storage. Users may wish to lock their SPI bus for numerous
> reasons, to support this the PSP firmware supports SEV_INIT_EX. INIT_EX
> allows the firmware to use a region of memory for its NV storage leaving
> the kernel responsible for actually storing the data in a persistent
> way. This series adds a new module parameter to ccp allowing users to
> specify a path to a file for use as the PSP's NV storage. The ccp driver
> then reads the file into memory for the PSP to use and is responsible
> for writing the file whenever the PSP modifies the memory region.
>
> V4
> * Fix make C=1 W=1 warnings.
>
> V3
> * Add another module parameter 'psp_init_on_probe' to allow for skipping
>   PSP init on module init.
> * Fixes review comments from Sean.
> * Fixes missing error checking with file reading.
> * Removed setting 'error' to a set value in patch 1.
>
> Signed-off-by: Peter Gonda <[e-mail]>
> Reviewed-by: Marc Orr <[e-mail]>
> Acked-by: David Rientjes <[e-mail]>
> Cc: Tom Lendacky <[e-mail]>
> Cc: Brijesh Singh <[e-mail]>
> Cc: Marc Orr <[e-mail]>
> Cc: Joerg Roedel <[e-mail]>
> Cc: Herbert Xu <[e-mail]>
> Cc: David Rientjes <[e-mail]>
> Cc: John Allen <[e-mail]>
> Cc: "David S. Miller" <[e-mail]>
> Cc: Paolo Bonzini <[e-mail]>
> Cc: [e-mail]
> Cc: [e-mail]


Series

Acked-by: Brijesh Singh <[e-mail]>

thanks Peter.