Re: [PATCH v3 0/4] tdx-guest: Make Quote buffer size dynamic

From: Artem Bityutskiy

Date: Sat Aug 15 2026 - 07:40:20 EST


On Fri, 2026-08-14 at 15:55 +0000, Edgecombe, Rick P wrote:
> On Fri, 2026-08-14 at 08:45 +0300, Artem Bityutskiy wrote:
> > But why DICE-based attestation uses 2-flow design? Could TD run a
> > TDCALL[TDG.GET.QUOTE2] or something directly. No concept of TD report
> > would be needed. That would be my current vision of "cleanest".
>
> We discussed this approach internally and in PUCK. The problem is there is a
> shared resource, and so something needs to handle locking and fairness between
> the guests. Going to the host keeps all the scheduling type stuff in that
> domain.

Good point. I did not think about this aspect.

I am curious if today this is an attestation-only problem or a pattern.
I mean this "many TDs compete for a shared TDX capability, VMM needs to
be involved to handle fairness".

Thanks, Artem.