From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: Received: from firstgate.proxmox.com (firstgate.proxmox.com [212.224.123.68]) by lore.proxmox.com (Postfix) with ESMTPS id 63E1D1FF16F for ; Tue, 16 Sep 2025 11:14:03 +0200 (CEST) Received: from firstgate.proxmox.com (localhost [127.0.0.1]) by firstgate.proxmox.com (Proxmox) with ESMTP id A90B0E5D4; Tue, 16 Sep 2025 11:13:15 +0200 (CEST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; t=1758009451; x=1758614251; d=canarybit.eu; s=rsa1; h=content-transfer-encoding:mime-version:references:in-reply-to:message-id:date: subject:cc:to:from:from; bh=okH7KKo6x0VW+XFz7QzTH8Ro0hlotxkz1r59/ukj41Q=; b=mxKKtEgD8sfvWkmLFof20u6RXsqZ4n+/hTp0ETiVzrx4/Sq8qIqtPD0Va6gTI0zqlIKKIrHTpOm5/ YuJ0GqRhIUSRijBcNQJKp2U/Xfp+ty3/UlDaLNr1xgNeV1Q0+2F/SsaVCPS4IpmmDjyF+jaIKpqJZB LB8SXeFc/SOtoxYPZ4xl0aH71QGjWEytVUbQHUJgLUbLr7pnFmyjKZ7Lj3jKeZWiunKYBsUtyNDjAh BdD5VCySHCGDKh26XtRqcbbIurDZC6xDCLcLkvj4ItbjsvhMvl4JMRwEmTVbuEGz7ZCeNwH3u+xdmQ vxC0ajGTni9nIstYLlALaT7rxIuL3uA== DKIM-Signature: v=1; a=ed25519-sha256; c=relaxed/relaxed; t=1758009451; x=1758614251; d=canarybit.eu; s=ed1; h=content-transfer-encoding:mime-version:references:in-reply-to:message-id:date: subject:cc:to:from:from; bh=okH7KKo6x0VW+XFz7QzTH8Ro0hlotxkz1r59/ukj41Q=; b=aEiDrI6ye2WJKTJTMOgLbCXj3H5UpYwTdPy+OhaelpJ64ZlxcZiz2ZxwWFMnCPLVlb568GlUSKlc7 lbRUTJkCg== X-HalOne-ID: cbeb6f40-92d2-11f0-842d-494313b7f784 From: Anton Iacobaeus To: pve-devel@lists.proxmox.com Date: Tue, 16 Sep 2025 09:52:49 +0200 Message-ID: <20250916075406.33084-7-anton.iacobaeus@canarybit.eu> X-Mailer: git-send-email 2.43.0 In-Reply-To: <20250916075406.33084-2-anton.iacobaeus@canarybit.eu> References: <20250916075406.33084-2-anton.iacobaeus@canarybit.eu> MIME-Version: 1.0 X-SPAM-LEVEL: Spam detection results: 0 BAYES_00 -1.9 Bayes spam probability is 0 to 1% DKIM_SIGNED 0.1 Message has a DKIM or DK signature, not necessarily valid DKIM_VALID -0.1 Message has at least one valid DKIM or DK signature DKIM_VALID_AU -0.1 Message has a valid DKIM or DK signature from author's domain DKIM_VALID_EF -0.1 Message has a valid DKIM or DK signature from envelope-from domain DMARC_MISSING 0.1 Missing DMARC policy RCVD_IN_DNSWL_NONE -0.0001 Sender listed at https://www.dnswl.org/, no trust SPF_HELO_PASS -0.001 SPF: HELO matches SPF record SPF_NONE 0.001 SPF: sender does not publish an SPF Record X-Mailman-Approved-At: Tue, 16 Sep 2025 11:13:12 +0200 Subject: [pve-devel] [PATCH edk2-firmware 4/4] Adapt APIC frequency for TD guest X-BeenThere: pve-devel@lists.proxmox.com X-Mailman-Version: 2.1.29 Precedence: list List-Id: Proxmox VE development discussion List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Reply-To: Proxmox VE development discussion Cc: Anton Iacobaeus , Philipp Giersfeld Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: 7bit Errors-To: pve-devel-bounces@lists.proxmox.com Sender: "pve-devel" From: Philipp Giersfeld The TDX module advertises the APIC frequency with 25Mhz for TD guest in contrast to the default frequency of 1Ghz. Hardcode frequency to 25Mhz for demonstration purposes. This should be changed to either check the frequency with CPUID 0x15 or by simply setting it to the two known values depending on whether VM is started as a TD. Signed-off-by: Philipp Giersfeld Signed-off-by: Anton Iacobaeus --- ...to-match-the-one-advertised-by-TDX-m.patch | 27 +++++++++++++++++++ debian/patches/series | 1 + 2 files changed, 28 insertions(+) create mode 100644 debian/patches/Adapt-Frequency-to-match-the-one-advertised-by-TDX-m.patch diff --git a/debian/patches/Adapt-Frequency-to-match-the-one-advertised-by-TDX-m.patch b/debian/patches/Adapt-Frequency-to-match-the-one-advertised-by-TDX-m.patch new file mode 100644 index 0000000..6de65c7 --- /dev/null +++ b/debian/patches/Adapt-Frequency-to-match-the-one-advertised-by-TDX-m.patch @@ -0,0 +1,27 @@ +From bdd27dcd304692f59091078baa01e308281dbb80 Mon Sep 17 00:00:00 2001 +From: Philipp Giersfeld +Date: Wed, 18 Jun 2025 16:21:53 +0200 +Subject: [PATCH] Adapt Frequency to match the one advertised by TDX module + (25Mhz) + +Signed-off-by: Philipp Giersfeld +--- + OvmfPkg/IntelTdx/IntelTdxX64.dsc | 2 +- + 1 file changed, 1 insertion(+), 1 deletion(-) + +diff --git a/OvmfPkg/IntelTdx/IntelTdxX64.dsc b/OvmfPkg/IntelTdx/IntelTdxX64.dsc +index f1d070ca8c..7fccc876d1 100644 +--- a/OvmfPkg/IntelTdx/IntelTdxX64.dsc ++++ b/OvmfPkg/IntelTdx/IntelTdxX64.dsc +@@ -531,7 +531,7 @@ + # Set ConfidentialComputing defaults + gEfiMdePkgTokenSpaceGuid.PcdConfidentialComputingGuestAttr|0 + +- gEfiMdePkgTokenSpaceGuid.PcdFSBClock|1000000000 ++ gEfiMdePkgTokenSpaceGuid.PcdFSBClock|25000000 + + ################################################################################ + # +-- +2.39.5 + diff --git a/debian/patches/series b/debian/patches/series index c0155a2..049c6b1 100644 --- a/debian/patches/series +++ b/debian/patches/series @@ -6,3 +6,4 @@ ArmVirtPkg-disable-the-EFI_MEMORY_ATTRIBUTE-protocol.patch Revert-UefiCpuPkg-Produce-EFI-memory-attributes-prot.patch UefiCpuPkg-MpInitLib-Fix-split-lock-violation-from-M.patch Enable_SCSI_IntelTdx_DXEFV.patch +Adapt-Frequency-to-match-the-one-advertised-by-TDX-m.patch -- 2.43.0 _______________________________________________ pve-devel mailing list pve-devel@lists.proxmox.com https://lists.proxmox.com/cgi-bin/mailman/listinfo/pve-devel