[OLK-5.10] intel ice-lake相关SGX等特性合入

icx_missing_config_and_sgx_driver

https://www.kernel.org/doc/html/latest/x86/sgx.html

Software Guard eXtensions (SGX) hardware enables for user space applications to set aside private memory regions of code and data:

Privileged (ring-0) ENCLS functions orchestrate the construction of the regions.

Unprivileged (ring-3) ENCLU functions allow an application to enter and execute inside the regions.

These memory regions are called enclaves. An enclave can be only entered at a fixed set of entry points. Each entry point can hold a single hardware thread at a time. While the enclave is loaded from a regular binary file by using ENCLS functions, only the threads inside the enclave can access its memory. The region is denied from outside access by the CPU, and encrypted before it leaves from LLC.

The support can be determined by

grep sgx /proc/cpuinfo

SGX must both be supported in the processor and enabled by the BIOS. If SGX appears to be unsupported on a system which has hardware support, ensure support is enabled in the BIOS. If a BIOS presents a choice between “Enabled” and “Software Enabled” modes for SGX, choose “Enabled”.

GVP openEuler/kernel

Content Risk Flag

Comments (3)

GVPopenEuler/kernel

Content Risk Flag