Re: [RFC PATCH 12/15] KVM: TDX: Add in-kernel Quote generation

From: Nikolay Borisov

Date: Thu Jul 02 2026 - 11:42:22 EST




On 5/22/26 06:41, Xu Yilun wrote:
From: Peter Fang <peter.fang@xxxxxxxxx>

Provide an in-kernel path for TDX Quote generation when handling
TDG.VP.VMCALL<GetQuote>, without requiring an exit to userspace.

Use the core TDX API when the TDX Quoting extension is available. For
simplicity, each KVM guest checks for availability only once during
initialization. KVM does not handle Quoting service disruptions.

I think calling this in-kernel quote generation vs user-spcae quote generation is misleading. Rather the distinction is : quote via the vmm or a quote generated by the tdx module/tdx extension. I think this should be the level at which the distinction is made.


i.e tdx_get_quote_vmm vs tdx_get_quote_ext or some along those lines.


<snip>