Received-SPF: pass (google.com: domain of linux-kernel-owner@vger.kernel.org designates 23.128.96.18 as permitted sender) client-ip=23.128.96.18;
Cc:     brijesh.singh@amd.com, x86@kernel.org,
        linux-kernel@vger.kernel.org, kvm@vger.kernel.org,
        linux-efi@vger.kernel.org, platform-driver-x86@vger.kernel.org,
        linux-coco@lists.linux.dev, linux-mm@kvack.org,
        Thomas Gleixner <tglx@linutronix.de>,
        Ingo Molnar <mingo@redhat.com>, Joerg Roedel <jroedel@suse.de>,
        Tom Lendacky <thomas.lendacky@amd.com>,
        "H. Peter Anvin" <hpa@zytor.com>, Ard Biesheuvel <ardb@kernel.org>,
        Paolo Bonzini <pbonzini@redhat.com>,
        Sean Christopherson <seanjc@google.com>,
        Vitaly Kuznetsov <vkuznets@redhat.com>,
        Jim Mattson <jmattson@google.com>,
        Andy Lutomirski <luto@kernel.org>,
        Dave Hansen <dave.hansen@linux.intel.com>,
        Sergio Lopez <slp@redhat.com>, Peter Gonda <pgonda@google.com>,
        Peter Zijlstra <peterz@infradead.org>,
        Srinivas Pandruvada <srinivas.pandruvada@linux.intel.com>,
        David Rientjes <rientjes@google.com>,
        Dov Murik <dovmurik@linux.ibm.com>,
        Tobin Feldman-Fitzthum <tobin@ibm.com>,
        Michael Roth <michael.roth@amd.com>,
        Vlastimil Babka <vbabka@suse.cz>,
        "Kirill A . Shutemov" <kirill@shutemov.name>,
        Andi Kleen <ak@linux.intel.com>,
        "Dr . David Alan Gilbert" <dgilbert@redhat.com>,
        tony.luck@intel.com, marcorr@google.com,
        sathyanarayanan.kuppuswamy@linux.intel.com
Subject: Re: [PATCH v6 14/42] x86/sev: Register GHCB memory when SEV-SNP is
 active
To:     Borislav Petkov <bp@alien8.de>
References: <20211008180453.462291-1-brijesh.singh@amd.com>
 <20211008180453.462291-15-brijesh.singh@amd.com> <YYFs+5UUMfyDgh/a@zn.tnic>
 <aea0e0c8-7f03-b9db-3084-f487a233c50b@amd.com> <YYGGv6EtWrw7cnLA@zn.tnic>
 <a975dfbf-f9bb-982e-9814-7259bc075b71@amd.com> <YYPnGeW+8tlNgW34@zn.tnic>
From:   Brijesh Singh <brijesh.singh@amd.com>
Message-ID: <47815dd4-f9ac-b141-2852-8f48c8299a5e@amd.com>
Date:   Thu, 4 Nov 2021 10:26:56 -0500
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:78.0) Gecko/20100101
 Thunderbird/78.13.0
In-Reply-To: <YYPnGeW+8tlNgW34@zn.tnic>
Content-Type: text/plain; charset=utf-8; format=flowed
Content-Language: en-US
Content-Transfer-Encoding: 7bit
MIME-Version: 1.0
X-MS-Exchange-AntiSpam-MessageData-ChunkCount: 1
X-MS-Exchange-AntiSpam-MessageData-0: =?utf-8?B?b0dRL3pvcURUanFxOWRIeVdKMXJhQ0hFa2hMVHpMMVZ3OCt5d1l0LzNySGVT?=
 =?utf-8?B?M0VjM2hEWi9mNmxPSkRBYXZOdVpqMVRyL2JTVEhXQWJVYmFQNS9ReHZxNmtX?=
 =?utf-8?B?eFBNanBqYzk3eVgzUFJydk1HU2xmdS8vWWh3dll2VkhNYW9vWnBPdDRXc2k2?=
 =?utf-8?B?UWdnbHk2L1R0UGVFRHQrWWhLMjVRQWZSbXhGb3M3b0dDOWhpUHFsQ2owenN2?=
 =?utf-8?B?Q3FFVW1ERTNKWEdlcnhCeVNtazk2ME1odjJ0ZXNaK2ZCVFpPR3RZODhoVXll?=
 =?utf-8?B?Y1B4ekZweTAwUm1OMHdIZmlTeTBZVVIrcW4wWkxlNVFSY2NzTW9ORlhpcmQ1?=
 =?utf-8?B?bHJyOHBaUW1wVWRLVXRHbEF1bVV4V01ZcUt3WkxpbGwybWc0T3Z0azVMVXRV?=
 =?utf-8?B?TUx6eWJMN0VJS1hWRWlvZ0hham1ESE03dmFiVGFqMG1iYTRTVElxMzRTUEcx?=
 =?utf-8?B?YnVzbzlMK290UENCY0I0dGxSTW9RUExYcEQ3RnFnaEJFRUhlbjVBSTNZQXRN?=
 =?utf-8?B?b1BFcVlrM2VQNllWRkJRck5RNVBsQTlvNEtlZnJaTlJhdzlwNHhCZ1lPK1pn?=
 =?utf-8?B?anNiY29wa2doNDFQbkh4RGRyZzhuQXZoV2tVSyszSzFtaTJvaDdtMTVickZM?=
 =?utf-8?B?c3JtZkM4YVdpaDhqb0d4WlFidVpVK3MzRVZRT3pBZWhXMDRQMGRPZmlWeDFy?=
 =?utf-8?B?VnA1eXJrYVJZUkxJbVZwNVdYZ1ZRdmIzbm9Ya3NXaDNHZjJzOW9WK2QzQzV3?=
 =?utf-8?B?eVNmYllVRHQxMGpnaWFXY20vVStYd3JpUEpqeHlYU01FSnJzV3luZ3ZpTm15?=
 =?utf-8?B?ZEluanZqMkdTR3ZkUFFQYlFWaUVGREkxdkRFM3lTdWJkOFA3SnAwTFNOcVd4?=
 =?utf-8?B?UmFzMVdPdVdjelNYOHJPTkNZeU1FUElXc05GUlRDelN5M0h6OElMRHJWNDhQ?=
 =?utf-8?B?azA5MFhsdm40UTZPOVk2R253ZjZRZitrNS9PSzk2Y2ROYm1wMVd3NFFnRG9Z?=
 =?utf-8?B?UUZrOG53L1JtK1dBSUpLb3dmRlM2SWVzMEVzK0JzSkFoUFNCZmVLcDg1Q1VN?=
 =?utf-8?B?c1pqSEI4NDlYcnduUUxtdlUyVXVzMFlLQS85ZkxBMmorL0tZZndNY2E4T3lJ?=
 =?utf-8?B?R3pJN0hXd2grejFGbk5qdEN0SWZVZzB4c2x5eEdkVUlSOUYvcDJ5TXhjNy85?=
 =?utf-8?B?Rms4eVlGMktuM1VaNU1nR0taZWJJU3RZU1Y0QytyU1Q4U3BpZFZOakNxR1Uw?=
 =?utf-8?B?b2hOcHB6TVV6NlVBcVBJMjRaWTBYWm4wYzF3ZENNTWZ3NlNBSVFZQ29PZ0dx?=
 =?utf-8?B?WFNPNndLZXlkeG5zaUdCTVRkUVRlU1ZlYWxXbjdiWlk1YjREUk9YZWtmR3Zj?=
 =?utf-8?B?OXZKcXdQcHpnNXRzdHVwNVU5WUdtMEhrR0xVRmx5aFMxWjBmb1orNzI0RzNX?=
 =?utf-8?B?bUE2RzlzZER0QUNDTVUxcHcxQm1TenUwOGNkVWJ2N1VQbDZUemtscCtGMzNh?=
 =?utf-8?B?RW55MTdhNzBjY2lwVTBXaGlBd21Pc2l0WTU0TDk2Q01kd21SMTIzRmtPSFlL?=
 =?utf-8?B?ZEo1YXl0dXcyQmJ6Y3lsQUdRMnRlTkNIY2NoaDN6SEViUXNOT3hkeXdnV3dL?=
 =?utf-8?B?STdmd01mamo2WDU3TktQaFlDelRRSm84RGlSQ1NIU005akRFQWswazFvZUlB?=
 =?utf-8?B?aVVxZjZtSjNkeHljb0xmYWFzOXpPd2EyRzVTaldzMVY2WHAzcXl1M0FMenlB?=
 =?utf-8?B?YUtTZllhY1VGUHhENTgySDBaUElhR0NOT1lJVVZidnFhK1E1aHN2VVN3bEJy?=
 =?utf-8?B?cXl1bjZDeE5FZmFsaVV6ZGNUUE10UTJMMTNJTnZvRG43bHBJd1pNekhEQVNX?=
 =?utf-8?B?ZlRTWWhkK1h0c2JBaWhaNWhHMDliejVZeDhFUStoSE9TQmlmVXUxSHQ4a3cy?=
 =?utf-8?B?ZUN4ZzlqQXZkYVFJMGNRa3NRUUUzUXNla2F2VGRkcW40YzlQeVIya1FoaUZO?=
 =?utf-8?B?Q29MOGsvcHF1aCtYYm9xMFAvR3FuTTFkbDlqTUtXOHEzdTZoK1VOSGVqNE5X?=
 =?utf-8?B?RWZNNWl6UlRwQzhxTHJnaWx1NEdSK0dVRXk2am50UVFyN0RrVENRSDJxdUVv?=
 =?utf-8?B?a1NuNjRCVHFVdG5aTGZoNXZ5Tkg1QnlucUFsU0FYQ0ozVHV0RTV0UHdoR3lt?=
 =?utf-8?Q?T1taD091p2kkWtY6753+6I8=3D?=
X-OriginatorOrg: amd.com
X-MS-Exchange-CrossTenant-Network-Message-Id: 09d7f62c-b76c-487a-dac6-08d99fa79125
X-MS-Exchange-CrossTenant-AuthSource: SN6PR12MB2718.namprd12.prod.outlook.com
X-MS-Exchange-CrossTenant-AuthAs: Internal
X-MS-Exchange-CrossTenant-OriginalArrivalTime: 04 Nov 2021 15:27:09.6425
 (UTC)
X-MS-Exchange-CrossTenant-FromEntityHeader: Hosted
X-MS-Exchange-CrossTenant-Id: 3dd8961f-e488-4e60-8e11-a82d994e183d
X-MS-Exchange-CrossTenant-MailboxType: HOSTED
X-MS-Exchange-CrossTenant-UserPrincipalName: iJzsrvtEWx/TB6O9zaghZX83If1WSLGhaCZp9wzFsFIGUZ4OnKCmwJrYJZqxw/9CFZMH4q/rhpsozMyAW2fRtQ==
X-MS-Exchange-Transport-CrossTenantHeadersStamped: SA0PR12MB4384
Precedence: bulk
List-ID: <linux-kernel.vger.kernel.org>
X-Mailing-List: linux-kernel@vger.kernel.org


On 11/4/21 8:58 AM, Borislav Petkov wrote:
> On Wed, Nov 03, 2021 at 03:10:16PM -0500, Brijesh Singh wrote:
>> Looking at the secondary CPU bring up path it seems that we will not be
>> getting #VC until the early_setup_idt() is called. I am thinking to add
>> function to register the GHCB from the early_setup_idt()
>>
>> early_setup_idt()
>> {
>>    ...
>>    if (IS_ENABLED(CONFIG_MEM_ENCRYPT))
>>      sev_snp_register_ghcb()
>>    ...
>> }
>>
>> The above will cover the APs
> 
> That will cover the APs during early boot as that is being called from
> asm.
> 
>> and for BSP case I can call the same function just after the final IDT
>> is loaded
> 
> Why after and not before?
> 

I just looked at load_current_idt() and we should not get #VC before 
loading the new idt, so, its safe to do is before.


>> cpu_init_exception_handling()
>> {
>>     ...
>>     ...
>>     /* Finally load the IDT */
>>     load_current_idt();
>>
>>     if (IS_ENABLED(CONFIG_MEM_ENCRYPT))
>>       sev_snp_register_ghcb()
>>
>> }
> 
> That is also called on the APs - not only the BSP. trap_init() calls it
> from start_kernel() which is the BSP and cpu_init_secondary() calls it
> too, which is ofc the APs.
> 
> I guess that should be ok since you're calling the same function from
> both but WTH do I know...
> 

For AP case, we will be registering the same GHCB GPA twice, that should 
not be an issue. The GHCB spec does not restrict us on registering the 
GPA twice.

Of course, the current patch does not suffer with it. Let me know your 
preference.

thanks