[PATCH v2 0/4] efi: Don't initalize SEV-SNP from the EFI stub

Ard Biesheuvel posted 4 patches 9 months, 4 weeks ago
There is a newer version of this series
arch/x86/boot/compressed/sev.c          | 33 +-------------------
arch/x86/boot/startup/sme.c             |  2 ++
arch/x86/coco/sev/core.c                | 11 -------
arch/x86/coco/sev/shared.c              | 33 +++++++++++++++-----
arch/x86/include/asm/sev-internal.h     |  3 +-
arch/x86/include/asm/sev.h              |  4 +--
drivers/firmware/efi/libstub/x86-stub.c | 27 +++++++++-------
7 files changed, 48 insertions(+), 65 deletions(-)
[PATCH v2 0/4] efi: Don't initalize SEV-SNP from the EFI stub
Posted by Ard Biesheuvel 9 months, 4 weeks ago
From: Ard Biesheuvel <ardb@kernel.org>

Changes since v1: [0]
- address shortcomings pointed out by Tom, related to missing checks and
  to discovery of the CC blob table from the EFI stub

[0] https://lore.kernel.org/all/20250414130417.1486395-2-ardb+git@google.com/T/#u

Cc: Tom Lendacky <thomas.lendacky@amd.com>
Cc: Borislav Petkov <bp@alien8.de>
Cc: Dionna Amalie Glaze <dionnaglaze@google.com>
Cc: Kevin Loughlin <kevinloughlin@google.com>

Ard Biesheuvel (4):
  x86/efistub: Obtain SEV CC blob address from the stub
  x86/boot: Drop redundant RMPADJUST in SEV SVSM presence check
  x86/sev: Unify SEV-SNP hypervisor feature check
  x86/efistub: Don't bother enabling SEV in the EFI stub

 arch/x86/boot/compressed/sev.c          | 33 +-------------------
 arch/x86/boot/startup/sme.c             |  2 ++
 arch/x86/coco/sev/core.c                | 11 -------
 arch/x86/coco/sev/shared.c              | 33 +++++++++++++++-----
 arch/x86/include/asm/sev-internal.h     |  3 +-
 arch/x86/include/asm/sev.h              |  4 +--
 drivers/firmware/efi/libstub/x86-stub.c | 27 +++++++++-------
 7 files changed, 48 insertions(+), 65 deletions(-)


base-commit: 221df25fdf827b1fe5b904c6a396af06461a32f6
-- 
2.49.0.805.g082f7c87e0-goog