Azure: Fix TDX backport

Bug #2004087 reported by Tim Gardner
6
This bug affects 1 person
Affects Status Importance Assigned to Milestone
linux-azure (Ubuntu)
Fix Released
Undecided
Unassigned
Kinetic
Fix Released
High
Tim Gardner

Bug Description

SRU Justification

[Impact]

A backport caused by a stable updates rebase was not performed correctly. The symptom is a failure to boot on TDX enabled hypervisors.

[Fix]

Make sure the sources match those of 'https://github.com/dcui/tdx.git decui/upstream-kinetic-22.10/master-next/1209'.

[Test Plan]

Boot on a TDX enabled hypervisor. Tested by Gauthier Jolly.

[Where things could go wrong]

This is a new feature isolated to TDX, so there is little chance of regression.

Tim Gardner (timg-tpi)
affects: linux (Ubuntu) → linux-azure (Ubuntu)
Changed in linux-azure (Ubuntu):
assignee: nobody → Tim Gardner (timg-tpi)
importance: Undecided → High
status: New → In Progress
Changed in linux-azure (Ubuntu Kinetic):
assignee: nobody → Tim Gardner (timg-tpi)
importance: Undecided → High
status: New → In Progress
Changed in linux-azure (Ubuntu):
assignee: Tim Gardner (timg-tpi) → nobody
importance: High → Undecided
status: In Progress → Invalid
Tim Gardner (timg-tpi)
Changed in linux-azure (Ubuntu Kinetic):
status: In Progress → Fix Committed
Revision history for this message
Launchpad Janitor (janitor) wrote :
Download full text (138.8 KiB)

This bug was fixed in the package linux-azure - 5.19.0-1020.21

---------------
linux-azure (5.19.0-1020.21) kinetic; urgency=medium

  * kinetic/linux-azure: 5.19.0-1020.21 -proposed tracker (LP: #2004085)

  * Azure: Fix TDX backport (LP: #2004087)
    - SAUCE: TDX: Fixed botched backport

linux-azure (5.19.0-1019.20) kinetic; urgency=medium

  * kinetic/linux-azure: 5.19.0-1019.20 -proposed tracker (LP: #2003415)

  * Azure: TDX enabled hyper-visors cause segfault (LP: #2003714)
    - SAUCE: TDX: Work around the segfault issue in glibc 2.35 in Ubuntu 22.04.

  [ Ubuntu: 5.19.0-31.32 ]

  * kinetic/linux: 5.19.0-31.32 -proposed tracker (LP: #2003423)
  * amdgpu: framebuffer is destroyed and the screen freezes with unsupported IP
    blocks (LP: #2003524)
    - drm/amd: Delay removal of the firmware framebuffer
  * Revoke & rotate to new signing key (LP: #2002812)
    - [Packaging] Revoke and rotate to new signing key

linux-azure (5.19.0-1018.19) kinetic; urgency=medium

  * kinetic/linux-azure: 5.19.0-1018.19 -proposed tracker (LP: #2001745)

  * Kinetic update: upstream stable patchset 2022-11-14 (LP: #1996540)
    - [Config] azure: updateconfigs after rebase

  * Packaging resync (LP: #1786013)
    - debian/dkms-versions -- update from kernel-versions (main/2023.01.02)

  * Kinetic linux-azure - Enable TDX guest driver w/MSFT Hyper-v (LP: #2002658)
    - clocksource/drivers/hyperv: add data structure for reference TSC MSR
    - Revert "UBUNTU: SAUCE: x86/tdx: Add TDX Guest attestation interface driver"
    - Revert "UBUNTU: SAUCE: selftests: tdx: Test GetReport TDX attestation
      feature"
    - Revert "x86/hyper-v: Add hyperv Isolation VM check in the cc_platform_has()"
    - SAUCE: x86/tdx: Add a wrapper to get TDREPORT0 from the TDX Module
    - SAUCE: virt: Add TDX guest driver
    - SAUCE: selftests/tdx: Test TDX attestation GetReport support
    - SAUCE: tdx: enable DEBUG: tools/testing/selftests/tdx/tdx_guest_test.c
    - SAUCE: tdx: swiotlb: check set_memory_decrypted()'s return value
    - SAUCE: tdx: x86/sev: mem_encrypt_free_decrypted_mem(): encrypt the pages for
      AMD SME only
    - SAUCE: tdx: x86/hyperv: Do not run swiotlb_update_mem_attributes() in
      hyperv_init()
    - SAUCE: tdx: x86/tdx: Retry TDVMCALL_MAP_GPA() when needed
    - SAUCE: tdx: x86/tdx: Support vmalloc() for tdx_enc_status_changed()
    - SAUCE: tdx: x86/hyperv: Add hv_isolation_type_tdx() to detect TDX guests
    - SAUCE: tdx: x86/tdx: Expand __tdx_hypercall() to handle more arguments
    - SAUCE: tdx: x86/hyperv: Support hypercalls for TDX guests
    - SAUCE: tdx: Drivers: hv: vmbus: Support TDX guests
    - SAUCE: tdx: x86/hyperv: Fix serial console interrupts for TDX guests
    - [Config] azure: Enable TDX guest driver
    - SAUCE: tdx: Drivers: hv: vmbus:: Fix the ARM64 build caused by recent TDX
      patches

  [ Ubuntu: 5.19.0-30.31 ]

  * kinetic/linux: 5.19.0-30.31 -proposed tracker (LP: #2001756)
  * Packaging resync (LP: #1786013)
    - [Packaging] update helper scripts
    - debian/dkms-versions -- update from kernel-versions (main/2023.01.02)
  * Add some ACPI device IDs for Intel HID device (LP: #1995453)
    - platform/x86/intel/h...

Changed in linux-azure (Ubuntu Kinetic):
status: Fix Committed → Fix Released
Revision history for this message
Ubuntu Kernel Bot (ubuntu-kernel-bot) wrote :

This bug is awaiting verification that the linux-azure/5.19.0-1021.22 kernel in -proposed solves the problem. Please test the kernel and update this bug with the results. If the problem is solved, change the tag 'verification-needed-kinetic' to 'verification-done-kinetic'. If the problem still exists, change the tag 'verification-needed-kinetic' to 'verification-failed-kinetic'.

If verification is not done by 5 working days from today, this fix will be dropped from the source code, and this bug will be closed.

See https://wiki.ubuntu.com/Testing/EnableProposed for documentation how to enable and use -proposed. Thank you!

tags: added: kernel-spammed-kinetic-linux-azure verification-needed-kinetic
Tim Gardner (timg-tpi)
tags: added: verification-done-kinetic
removed: verification-needed-kinetic
Revision history for this message
Launchpad Janitor (janitor) wrote :

This bug was fixed in the package linux-azure - 6.2.0-1002.2

---------------
linux-azure (6.2.0-1002.2) lunar; urgency=medium

  * lunar/linux-azure: 6.2.0-1002.2 -proposed tracker (LP: #2011602)

  * Miscellaneous upstream changes
    - Revert "UBUNTU: SAUCE: azure: x86/hyperv: Make swiotlb bounce buffer
      allocation not just from low pages"

 -- Paolo Pisati <email address hidden> Tue, 14 Mar 2023 17:30:00 +0100

Changed in linux-azure (Ubuntu):
status: Invalid → Fix Released
Revision history for this message
Ubuntu Kernel Bot (ubuntu-kernel-bot) wrote :

This bug is awaiting verification that the linux-azure/6.2.0-1009.9 kernel in -proposed solves the problem. Please test the kernel and update this bug with the results. If the problem is solved, change the tag 'verification-needed-lunar' to 'verification-done-lunar'. If the problem still exists, change the tag 'verification-needed-lunar' to 'verification-failed-lunar'.

If verification is not done by 5 working days from today, this fix will be dropped from the source code, and this bug will be closed.

See https://wiki.ubuntu.com/Testing/EnableProposed for documentation how to enable and use -proposed. Thank you!

tags: added: kernel-spammed-lunar-linux-azure verification-needed-lunar
Tim Gardner (timg-tpi)
tags: added: verification-done-lunar
removed: verification-needed-lunar
To post a comment you must log in.
This report contains Public information  
Everyone can see this information.

Other bug subscribers

Remote bug watches

Bug watches keep track of this bug in other bug trackers.