From mboxrd@z Thu Jan 1 00:00:00 1970 Received: from blyat.fensystems.co.uk (blyat.fensystems.co.uk [54.246.183.96]) by mx.groups.io with SMTP id smtpd.web08.22213.1622978984984260389 for ; Sun, 06 Jun 2021 04:29:46 -0700 Authentication-Results: mx.groups.io; dkim=missing; spf=pass (domain: ipxe.org, ip: 54.246.183.96, mailfrom: mcb30@ipxe.org) Received: from dolphin.home (unknown [IPv6:2a00:23c6:5495:5e00:72b3:d5ff:feb1:e101]) by blyat.fensystems.co.uk (Postfix) with ESMTPSA id DB7A743917; Sun, 6 Jun 2021 11:29:40 +0000 (UTC) Subject: Re: [edk2-rfc] [edk2-devel] RFC: design review for TDVF in OVMF To: devel@edk2.groups.io, min.m.xu@intel.com, "lersek@redhat.com" , "Yao, Jiewen" , "rfc@edk2.groups.io" Cc: "jejb@linux.ibm.com" , Brijesh Singh , Tom Lendacky , "erdemaktas@google.com" , "cho@microsoft.com" , "bret.barkelew@microsoft.com" , Jon Lange , Karen Noel , Paolo Bonzini , Nathaniel McCallum , "Dr. David Alan Gilbert" , "Ademar de Souza Reis Jr." References: From: "Michael Brown" Message-ID: Date: Sun, 6 Jun 2021 12:29:40 +0100 User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:78.0) Gecko/20100101 Thunderbird/78.7.0 MIME-Version: 1.0 In-Reply-To: X-Spam-Status: No, score=-2.9 required=5.0 tests=ALL_TRUSTED,BAYES_00 autolearn=ham autolearn_force=no version=3.4.2 X-Spam-Checker-Version: SpamAssassin 3.4.2 (2018-09-13) on blyat.fensystems.co.uk Content-Type: text/plain; charset=utf-8; format=flowed Content-Language: en-US Content-Transfer-Encoding: 7bit On 06/06/2021 03:03, Min Xu wrote: >> (11) "Page table should support both 4-level and 5-level page >> table" >> >> As a general development strategy, I would suggest building TDX >> support in small, well-isolated layers. 5-level paging is not >> enabled (has never been tested, to my knowledge) with OVMF on >> QEMU/KVM, regardless of confidential computing, for starters. If >> 5-level paging is a strict requirement for TDX, then it arguably >> needs to be implemented independently of TDX, at first. So that the >> common edk2 architecture be at least testable on QEMU/KVM with >> 5-level paging enabled. >> > Yes, 5-level paging is a strict requirement for TDX. I would wait for > the conclusion of the *one binary*. The "one binary" decision isn't relevant here, is it? It would make more sense to implement 5-level paging within the base EDK2 architecture. This would allow that feature to be tested in isolation from TDX (and consequently tested more widely), and would reduce the distance between standard builds and TDX builds. Michael