Re: [PATCH v13 3/3] Documentation/x86: Document TDX attestation process

From: Sathyanarayanan Kuppuswamy
Date: Mon Sep 12 2022 - 10:15:55 EST




On 9/12/22 12:04 AM, Huang, Kai wrote:
>> +
>> +TDX Guest driver
>> +================
>> +
>> +The TDX guest driver exposes IOCTL interfaces via /dev/tdx-guest misc
>> +device to allow user space to get certain TDX guest specific details
>> +(like attestation report, attestation quote or storage keys, etc).
> Only TDX_CMD_GET_REPORT is supported now. Whether GetQuote TDVMCALL should be
> supported, or how should it be supported is unknown now. Not to mention "get
> the storage keys".

The reason for adding them is to give an idea that this driver in future could
be used for use cases other than GetReport. Query about possible use cases came up
in a previous review about /dev/tdx-guest device name usage. So I thought it is
better to give a clear idea on how this device may be used in the future.

Maybe I can add a note that currently only attestation report is supported.

>
> I don't think you should put anything here now except "allow userspace to get
> TDREPORT".
>

--
Sathyanarayanan Kuppuswamy
Linux Kernel Developer