x86/virt/tdx: Get module global metadata for module initialization

The TDX module global metadata provides system-wide information about
the module.

TL;DR:

Use the TDH.SYS.RD SEAMCALL to tell if the module is good or not.

Long Version:

1) Only initialize TDX module with version 1.5 and later

TDX module 1.0 has some compatibility issues with the later versions of
module, as documented in the "Intel TDX module ABI incompatibilities
between TDX1.0 and TDX1.5" spec.  Don't bother with module versions that
do not have a stable ABI.

2) Get the essential global metadata for module initialization

TDX reports a list of "Convertible Memory Region" (CMR) to tell the
kernel which memory is TDX compatible.  The kernel needs to build a list
of memory regions (out of CMRs) as "TDX-usable" memory and pass them to
the TDX module.  The kernel does this by constructing a list of "TD
Memory Regions" (TDMRs) to cover all these memory regions and passing
them to the TDX module.

Each TDMR is a TDX architectural data structure containing the memory
region that the TDMR covers, plus the information to track (within this
TDMR):
  a) the "Physical Address Metadata Table" (PAMT) to track each TDX
     memory page's status (such as which TDX guest "owns" a given page,
     and
  b) the "reserved areas" to tell memory holes that cannot be used as
     TDX memory.

The kernel needs to get below metadata from the TDX module to build the
list of TDMRs:
  a) the maximum number of supported TDMRs
  b) the maximum number of supported reserved areas per TDMR and,
  c) the PAMT entry size for each TDX-supported page size.

== Implementation ==

The TDX module has two modes of fetching the metadata: a one field at
a time, or all in one blob.  Use the field at a time for now.  It is
slower, but there just are not enough fields now to justify the
complexity of extra unpacking.

The err_free_tdxmem=>out_put_tdxmem goto looks wonky by itself.  But
it is the first of a bunch of error handling that will get stuck at
its site.

[ dhansen: clean up changelog and add a struct to map between
	   the TDX module fields and 'struct tdx_tdmr_sysinfo' ]

Signed-off-by: Kai Huang <kai.huang@intel.com>
Signed-off-by: Dave Hansen <dave.hansen@linux.intel.com>
Link: https://lore.kernel.org/all/20231208170740.53979-8-dave.hansen%40intel.com

diff --git a/arch/x86/include/asm/shared/tdx.h b/arch/x86/include/asm/shared/tdx.h
index a4036149c48475ff54d4338af90a409358cc4616..fdfd41511b02118faa14bab179dbab9d2f588d18 100644 (file)
--- a/arch/x86/include/asm/shared/tdx.h
+++ b/arch/x86/include/asm/shared/tdx.h
@@ -59,6 +59,7 @@
 #define TDX_PS_4K      0
 #define TDX_PS_2M      1
 #define TDX_PS_1G      2
+#define TDX_PS_NR      (TDX_PS_1G + 1)
 
 #ifndef __ASSEMBLY__
 

diff --git a/arch/x86/virt/vmx/tdx/tdx.c b/arch/x86/virt/vmx/tdx/tdx.c
index 6a3585bc8aa480ae35f454832882c894e69dc92b..e76ad7c2e53b256978ec1bb98c3ebf296ff735fc 100644 (file)
--- a/arch/x86/virt/vmx/tdx/tdx.c
+++ b/arch/x86/virt/vmx/tdx/tdx.c
@@ -237,8 +237,85 @@ err:
        return ret;
 }
 
+static int read_sys_metadata_field(u64 field_id, u64 *data)
+{
+       struct tdx_module_args args = {};
+       int ret;
+
+       /*
+        * TDH.SYS.RD -- reads one global metadata field
+        *  - RDX (in): the field to read
+        *  - R8 (out): the field data
+        */
+       args.rdx = field_id;
+       ret = seamcall_prerr_ret(TDH_SYS_RD, &args);
+       if (ret)
+               return ret;
+
+       *data = args.r8;
+
+       return 0;
+}
+
+static int read_sys_metadata_field16(u64 field_id,
+                                    int offset,
+                                    struct tdx_tdmr_sysinfo *ts)
+{
+       u16 *ts_member = ((void *)ts) + offset;
+       u64 tmp;
+       int ret;
+
+       if (WARN_ON_ONCE(MD_FIELD_ID_ELE_SIZE_CODE(field_id) !=
+                       MD_FIELD_ID_ELE_SIZE_16BIT))
+               return -EINVAL;
+
+       ret = read_sys_metadata_field(field_id, &tmp);
+       if (ret)
+               return ret;
+
+       *ts_member = tmp;
+
+       return 0;
+}
+
+struct field_mapping {
+       u64 field_id;
+       int offset;
+};
+
+#define TD_SYSINFO_MAP(_field_id, _offset) \
+       { .field_id = MD_FIELD_ID_##_field_id,     \
+         .offset   = offsetof(struct tdx_tdmr_sysinfo, _offset) }
+
+/* Map TD_SYSINFO fields into 'struct tdx_tdmr_sysinfo': */
+static const struct field_mapping fields[] = {
+       TD_SYSINFO_MAP(MAX_TDMRS,             max_tdmrs),
+       TD_SYSINFO_MAP(MAX_RESERVED_PER_TDMR, max_reserved_per_tdmr),
+       TD_SYSINFO_MAP(PAMT_4K_ENTRY_SIZE,    pamt_entry_size[TDX_PS_4K]),
+       TD_SYSINFO_MAP(PAMT_2M_ENTRY_SIZE,    pamt_entry_size[TDX_PS_2M]),
+       TD_SYSINFO_MAP(PAMT_1G_ENTRY_SIZE,    pamt_entry_size[TDX_PS_1G]),
+};
+
+static int get_tdx_tdmr_sysinfo(struct tdx_tdmr_sysinfo *tdmr_sysinfo)
+{
+       int ret;
+       int i;
+
+       /* Populate 'tdmr_sysinfo' fields using the mapping structure above: */
+       for (i = 0; i < ARRAY_SIZE(fields); i++) {
+               ret = read_sys_metadata_field16(fields[i].field_id,
+                                               fields[i].offset,
+                                               tdmr_sysinfo);
+               if (ret)
+                       return ret;
+       }
+
+       return 0;
+}
+
 static int init_tdx_module(void)
 {
+       struct tdx_tdmr_sysinfo tdmr_sysinfo;
        int ret;
 
        /*
@@ -257,10 +334,13 @@ static int init_tdx_module(void)
        if (ret)
                goto out_put_tdxmem;
 
+       ret = get_tdx_tdmr_sysinfo(&tdmr_sysinfo);
+       if (ret)
+               goto err_free_tdxmem;
+
        /*
         * TODO:
         *
-        *  - Get TDX module "TD Memory Region" (TDMR) global metadata.
         *  - Construct a list of TDMRs to cover all TDX-usable memory
         *    regions.
         *  - Configure the TDMRs and the global KeyID to the TDX module.
@@ -270,6 +350,8 @@ static int init_tdx_module(void)
         *  Return error before all steps are done.
         */
        ret = -EINVAL;
+       if (ret)
+               goto err_free_tdxmem;
 out_put_tdxmem:
        /*
         * @tdx_memlist is written here and read at memory hotplug time.
@@ -277,6 +359,10 @@ out_put_tdxmem:
         */
        put_online_mems();
        return ret;
+
+err_free_tdxmem:
+       free_tdx_memlist(&tdx_memlist);
+       goto out_put_tdxmem;
 }
 
 static int __tdx_enable(void)

diff --git a/arch/x86/virt/vmx/tdx/tdx.h b/arch/x86/virt/vmx/tdx/tdx.h
index c11e0a7ca664b89f5c4ec45b08ac9de92631c22f..29cdf5ea5544ac47370dba4301f458a00c709c3f 100644 (file)
--- a/arch/x86/virt/vmx/tdx/tdx.h
+++ b/arch/x86/virt/vmx/tdx/tdx.h
@@ -2,6 +2,8 @@
 #ifndef _X86_VIRT_TDX_H
 #define _X86_VIRT_TDX_H
 
+#include <linux/bits.h>
+
 /*
  * This file contains both macros and data structures defined by the TDX
  * architecture and Linux defined software data structures and functions.
@@ -13,8 +15,38 @@
  * TDX module SEAMCALL leaf functions
  */
 #define TDH_SYS_INIT           33
+#define TDH_SYS_RD             34
 #define TDH_SYS_LP_INIT                35
 
+/*
+ * Global scope metadata field ID.
+ *
+ * See Table "Global Scope Metadata", TDX module 1.5 ABI spec.
+ */
+#define MD_FIELD_ID_MAX_TDMRS                  0x9100000100000008ULL
+#define MD_FIELD_ID_MAX_RESERVED_PER_TDMR      0x9100000100000009ULL
+#define MD_FIELD_ID_PAMT_4K_ENTRY_SIZE         0x9100000100000010ULL
+#define MD_FIELD_ID_PAMT_2M_ENTRY_SIZE         0x9100000100000011ULL
+#define MD_FIELD_ID_PAMT_1G_ENTRY_SIZE         0x9100000100000012ULL
+
+/*
+ * Sub-field definition of metadata field ID.
+ *
+ * See Table "MD_FIELD_ID (Metadata Field Identifier / Sequence Header)
+ * Definition", TDX module 1.5 ABI spec.
+ *
+ *  - Bit 33:32: ELEMENT_SIZE_CODE -- size of a single element of metadata
+ *
+ *     0: 8 bits
+ *     1: 16 bits
+ *     2: 32 bits
+ *     3: 64 bits
+ */
+#define MD_FIELD_ID_ELE_SIZE_CODE(_field_id)   \
+               (((_field_id) & GENMASK_ULL(33, 32)) >> 32)
+
+#define MD_FIELD_ID_ELE_SIZE_16BIT     1
+
 /*
  * Do not put any hardware-defined TDX structure representations below
  * this comment!
@@ -33,4 +65,11 @@ struct tdx_memblock {
        unsigned long end_pfn;
 };
 
+/* "TDMR info" part of "Global Scope Metadata" for constructing TDMRs */
+struct tdx_tdmr_sysinfo {
+       u16 max_tdmrs;
+       u16 max_reserved_per_tdmr;
+       u16 pamt_entry_size[TDX_PS_NR];
+};
+
 #endif