Re: [PATCH v10 10/11] Documentation/x86: Add documentation for TDX's Dynamic PAMT

[Dave Hansen]

On 9/3/26 12:31, Edgecombe, Rick P wrote:
> So we have:
> 1. If you are inclined to think support bits should actually report whether
> something is supported, then this kinda is a TDX module bug that we are working
> around by making DPAMT an opt-in.
> 2. The bug will only be hit if anyone has configured a low number of hkids.
> 
> We could optimistically think the TDX module with the fix will be distributed
> before anyone with this configuration hits it? And if that is wrong, add the
> keyid checking or opt-in as a fix. Then maybe we save some code long term.

How about we just make the kernel tolerate DPAMT enabling failures. If a
user makes this weird hkid config, then they'll get temporarily higher
memory consumption until they fix their config or get a new TDX module.

That seems way better than trying to work around this with opt-ins or
permanent documentation for a temporary problem.