Re: [PATCH v4 1/2] x86/sev: Clear RMPOPT when segmented RMP is disabled by firmware

From: Borislav Petkov

Date: Mon Nov 02 2026 - 19:23:34 EST


On Mon, Nov 02, 2026 at 02:21:28PM -0600, Kalra, Ashish wrote:
> As i mentioned above, the cpuid-dep only fires when the SEV_SNP CPUID
> bit is cleared though, and the IOMMU "can't enable SNP" path clears only
> CC_ATTR_HOST_SEV_SNP, not the CPUID bit.

I believe the IOMMU path is too late in the boot for the CPUID bit anyway.

> So we still need the rmpopt_init() (in patch 2 of this series) move into
> snp_rmptable_init() to avoid announcing RMPOPT / allocating the workqueue on
> a host where the IOMMU turned SNP off — this dep doesn't cover that case.

Sure.

Lemme put everything into a proper patch now.

Thx.

--
Regards/Gruss,
Boris.

https://people.kernel.org/tglx/notes-about-netiquette