Messages in this thread Patch in this message | | | From | Kuppuswamy Sathyanarayanan <> | Subject | [PATCH v8 02/11] x86/tdx: Introduce INTEL_TDX_GUEST config option | Date | Mon, 4 Oct 2021 19:51:56 -0700 |
| |
Add INTEL_TDX_GUEST config option to selectively compile TDX guest support.
Signed-off-by: Kuppuswamy Sathyanarayanan <sathyanarayanan.kuppuswamy@linux.intel.com> Reviewed-by: Andi Kleen <ak@linux.intel.com> Reviewed-by: Tony Luck <tony.luck@intel.com> ---
Changes since v7: * None
Changes since v6: * None
Changes since v5: * None
Changes since v4: * None
Changes since v3: * Removed PARAVIRT_XL from dependency list. * Fixed typo in help content.
arch/x86/Kconfig | 14 ++++++++++++++ 1 file changed, 14 insertions(+)
diff --git a/arch/x86/Kconfig b/arch/x86/Kconfig index 2b2a9639d8ae..c42dd8a2d1f4 100644 --- a/arch/x86/Kconfig +++ b/arch/x86/Kconfig @@ -865,6 +865,20 @@ config ACRN_GUEST IOT with small footprint and real-time features. More details can be found in https://projectacrn.org/. +config INTEL_TDX_GUEST + bool "Intel Trusted Domain eXtensions Guest Support" + depends on X86_64 && CPU_SUP_INTEL && PARAVIRT + depends on SECURITY + select X86_X2APIC + select SECURITY_LOCKDOWN_LSM + help + Provide support for running in a trusted domain on Intel processors + equipped with Trusted Domain eXtensions. TDX is a Intel technology + that extends VMX and Memory Encryption with a new kind of virtual + machine guest called Trust Domain (TD). A TD is designed to run in + a CPU mode that protects the confidentiality of TD memory contents + and the TD’s CPU state from other software, including VMM. + endif #HYPERVISOR_GUEST source "arch/x86/Kconfig.cpu" -- 2.25.1
| |