Re: [PATCH v3 0/4] tdx-guest: Make Quote buffer size dynamic
Artem Bityutskiy <[email protected]>
| Newsgroups | org.kernel.vger.kvm,dev.linux.lists.linux-coco,org.kernel.vger.linux-kernel |
|---|---|
| Message-ID | <[email protected]> |
On Fri, 2026-08-14 at 15:55 +0000, Edgecombe, Rick P wrote: > On Fri, 2026-08-14 at 08:45 +0300, Artem Bityutskiy wrote: > > But why DICE-based attestation uses 2-flow design? Could TD run a > > TDCALL[TDG.GET.QUOTE2] or something directly. No concept of TD report > > would be needed. That would be my current vision of "cleanest". > > We discussed this approach internally and in PUCK. The problem is there is a > shared resource, and so something needs to handle locking and fairness between > the guests. Going to the host keeps all the scheduling type stuff in that > domain. Good point. I did not think about this aspect. I am curious if today this is an attestation-only problem or a pattern. I mean this "many TDs compete for a shared TDX capability, VMM needs to be involved to handle fairness". Thanks, Artem.