Kinetic linux-azure - Enable TDX guest driver w/MSFT Hyper-v

Bug #2002658 reported by Tim Gardner
6
This bug affects 1 person
Affects Status Importance Assigned to Milestone
linux-azure (Ubuntu)
Fix Released
Undecided
Unassigned
Kinetic
Fix Released
Medium
Tim Gardner

Bug Description

SRU Justification

[Impact]

Support for Intel TDX guest driver is just now appearing upstream. This patch set is a backport of the patches essential to enabling TDX guest support on the Microsoft hypervisor.

Most of these patches are not yet upstream, but are considered benign with respect to MSFT hypervisors that do not yet have support for TDX. I have boot tested on an existing Hyper-v hypervisor to ensure backwards compatibility.

This patch set will eventually be replaced by upstream patches.

[Test Plan]

Boot on a TDX enabled Hyper-v instance.

[Where things could go wrong]

Existing Azure instances could have boot issues.

Tim Gardner (timg-tpi)
affects: linux (Ubuntu) → linux-azure (Ubuntu)
Changed in linux-azure (Ubuntu):
status: New → Invalid
Changed in linux-azure (Ubuntu Kinetic):
assignee: nobody → Tim Gardner (timg-tpi)
importance: Undecided → Medium
status: New → In Progress
Tim Gardner (timg-tpi)
Changed in linux-azure (Ubuntu Kinetic):
status: In Progress → Fix Committed
Revision history for this message
Ubuntu Kernel Bot (ubuntu-kernel-bot) wrote :

This bug is awaiting verification that the linux-azure/5.19.0-1017.18 kernel in -proposed solves the problem. Please test the kernel and update this bug with the results. If the problem is solved, change the tag 'verification-needed-kinetic' to 'verification-done-kinetic'. If the problem still exists, change the tag 'verification-needed-kinetic' to 'verification-failed-kinetic'.

If verification is not done by 5 working days from today, this fix will be dropped from the source code, and this bug will be closed.

See https://wiki.ubuntu.com/Testing/EnableProposed for documentation how to enable and use -proposed. Thank you!

tags: added: kernel-spammed-kinetic-linux-azure verification-needed-kinetic
Tim Gardner (timg-tpi)
tags: added: verification-done-kinetic
removed: verification-needed-kinetic
Revision history for this message
Launchpad Janitor (janitor) wrote :
Download full text (138.8 KiB)

This bug was fixed in the package linux-azure - 5.19.0-1020.21

---------------
linux-azure (5.19.0-1020.21) kinetic; urgency=medium

  * kinetic/linux-azure: 5.19.0-1020.21 -proposed tracker (LP: #2004085)

  * Azure: Fix TDX backport (LP: #2004087)
    - SAUCE: TDX: Fixed botched backport

linux-azure (5.19.0-1019.20) kinetic; urgency=medium

  * kinetic/linux-azure: 5.19.0-1019.20 -proposed tracker (LP: #2003415)

  * Azure: TDX enabled hyper-visors cause segfault (LP: #2003714)
    - SAUCE: TDX: Work around the segfault issue in glibc 2.35 in Ubuntu 22.04.

  [ Ubuntu: 5.19.0-31.32 ]

  * kinetic/linux: 5.19.0-31.32 -proposed tracker (LP: #2003423)
  * amdgpu: framebuffer is destroyed and the screen freezes with unsupported IP
    blocks (LP: #2003524)
    - drm/amd: Delay removal of the firmware framebuffer
  * Revoke & rotate to new signing key (LP: #2002812)
    - [Packaging] Revoke and rotate to new signing key

linux-azure (5.19.0-1018.19) kinetic; urgency=medium

  * kinetic/linux-azure: 5.19.0-1018.19 -proposed tracker (LP: #2001745)

  * Kinetic update: upstream stable patchset 2022-11-14 (LP: #1996540)
    - [Config] azure: updateconfigs after rebase

  * Packaging resync (LP: #1786013)
    - debian/dkms-versions -- update from kernel-versions (main/2023.01.02)

  * Kinetic linux-azure - Enable TDX guest driver w/MSFT Hyper-v (LP: #2002658)
    - clocksource/drivers/hyperv: add data structure for reference TSC MSR
    - Revert "UBUNTU: SAUCE: x86/tdx: Add TDX Guest attestation interface driver"
    - Revert "UBUNTU: SAUCE: selftests: tdx: Test GetReport TDX attestation
      feature"
    - Revert "x86/hyper-v: Add hyperv Isolation VM check in the cc_platform_has()"
    - SAUCE: x86/tdx: Add a wrapper to get TDREPORT0 from the TDX Module
    - SAUCE: virt: Add TDX guest driver
    - SAUCE: selftests/tdx: Test TDX attestation GetReport support
    - SAUCE: tdx: enable DEBUG: tools/testing/selftests/tdx/tdx_guest_test.c
    - SAUCE: tdx: swiotlb: check set_memory_decrypted()'s return value
    - SAUCE: tdx: x86/sev: mem_encrypt_free_decrypted_mem(): encrypt the pages for
      AMD SME only
    - SAUCE: tdx: x86/hyperv: Do not run swiotlb_update_mem_attributes() in
      hyperv_init()
    - SAUCE: tdx: x86/tdx: Retry TDVMCALL_MAP_GPA() when needed
    - SAUCE: tdx: x86/tdx: Support vmalloc() for tdx_enc_status_changed()
    - SAUCE: tdx: x86/hyperv: Add hv_isolation_type_tdx() to detect TDX guests
    - SAUCE: tdx: x86/tdx: Expand __tdx_hypercall() to handle more arguments
    - SAUCE: tdx: x86/hyperv: Support hypercalls for TDX guests
    - SAUCE: tdx: Drivers: hv: vmbus: Support TDX guests
    - SAUCE: tdx: x86/hyperv: Fix serial console interrupts for TDX guests
    - [Config] azure: Enable TDX guest driver
    - SAUCE: tdx: Drivers: hv: vmbus:: Fix the ARM64 build caused by recent TDX
      patches

  [ Ubuntu: 5.19.0-30.31 ]

  * kinetic/linux: 5.19.0-30.31 -proposed tracker (LP: #2001756)
  * Packaging resync (LP: #1786013)
    - [Packaging] update helper scripts
    - debian/dkms-versions -- update from kernel-versions (main/2023.01.02)
  * Add some ACPI device IDs for Intel HID device (LP: #1995453)
    - platform/x86/intel/h...

Changed in linux-azure (Ubuntu Kinetic):
status: Fix Committed → Fix Released
Revision history for this message
Launchpad Janitor (janitor) wrote :

This bug was fixed in the package linux-azure - 6.2.0-1002.2

---------------
linux-azure (6.2.0-1002.2) lunar; urgency=medium

  * lunar/linux-azure: 6.2.0-1002.2 -proposed tracker (LP: #2011602)

  * Miscellaneous upstream changes
    - Revert "UBUNTU: SAUCE: azure: x86/hyperv: Make swiotlb bounce buffer
      allocation not just from low pages"

 -- Paolo Pisati <email address hidden> Tue, 14 Mar 2023 17:30:00 +0100

Changed in linux-azure (Ubuntu):
status: Invalid → Fix Released
Revision history for this message
Ubuntu Kernel Bot (ubuntu-kernel-bot) wrote :

This bug is awaiting verification that the linux-azure/6.2.0-1009.9 kernel in -proposed solves the problem. Please test the kernel and update this bug with the results. If the problem is solved, change the tag 'verification-needed-lunar' to 'verification-done-lunar'. If the problem still exists, change the tag 'verification-needed-lunar' to 'verification-failed-lunar'.

If verification is not done by 5 working days from today, this fix will be dropped from the source code, and this bug will be closed.

See https://wiki.ubuntu.com/Testing/EnableProposed for documentation how to enable and use -proposed. Thank you!

tags: added: kernel-spammed-lunar-linux-azure verification-needed-lunar
Tim Gardner (timg-tpi)
tags: added: verification-done-lunar
removed: verification-needed-lunar
To post a comment you must log in.
This report contains Public information  
Everyone can see this information.

Other bug subscribers

Remote bug watches

Bug watches keep track of this bug in other bug trackers.