gaojiaqi7/td-partitioning-svsm

This is the source code repository to add Intel TDX (Trusted Domain eXtension) support to the COCONUT Secure VM Service Module (SVSM), a software which aims to provide secure services and device emulations to guest operating systems in confidential virtual machines (CVMs). The original COCONUT SVSM required AMD Secure Encrypted Virtualization with Secure Nested Paging (AMD SEV-SNP), especially the VM Privilege Level (VMPL) feature. This modification requires Intel TDX (Trusted Domain eXtension) technology, and it is early prototype code to collect feedback. It should only be used for architecture discussion, and NOT for any production related purpose.

The COCONUT-SVSM is distributed under the MIT license, which is included in the LICENSE-MIT file.

td-partitioning-svsm's Issues

Run keylime_agent will raise "out of memory" issue

Description:
Run keylime_agent will raise "out of memory" issue during keylime test.
Version: commit 590b9eb

Step:

1. Launch tdp-svsm with TPM
2. Execute keylime command

keylime_create_policy -b -m /sys/kernel/security/ima/ascii_runtime_measurements -o runtime_policy.json
keylime_verifier > keylime_verifier.log 2>&1 &
keylime_registrar > keylime_registrar.log 2>&1 &
keylime_agent > keylime_agent.log 2>&1 &

Expected:
keylime_agent can startup successfully

Actual:

WARNING:esys:src/tss2-esys/api/Esys_NV_ReadPublic.c:309:Esys_NV_ReadPublic_Finish() Received TPM Error 
ERROR:esys:src/tss2-esys/esys_tr.c:209:Esys_TR_FromTPMPublic_Finish() Error NV_ReadPublic ErrorCode (0x0000018b) 
ERROR:esys:src/tss2-esys/esys_tr.c:320:Esys_TR_FromTPMPublic() Error TR FromTPMPublic ErrorCode (0x0000018b) 
 ERROR tss_esapi::context::general_esys_tr > Error when getting ESYS handle from TPM handle: the handle is not correct for the use (associated with handle number 1)
WARNING:esys:src/tss2-esys/api/Esys_Create.c:398:Esys_Create_Finish() Received TPM Error 
ERROR:esys:src/tss2-esys/api/Esys_Create.c:134:Esys_Create() Esys Finish ErrorCode (0x00000902) 
 ERROR tss_esapi::context::tpm_commands::object_commands > Error in creating derived key: out of memory for object contexts
Error: Tpm(Tss2 { err: Tss2Error(FormatZero(FormatZeroResponseCode { .0: 2306, error_number: 2, format_selector: false, version: true, tcg_vendor_indicator: false, severity: true })), kind: Some(ObjectMemory), message: "out of memory for object contexts" })

svsm will panic with one tpm2_createek command

Description:
svsm will panic with tpm2_createek command "tpm2_createek --ek-context ecc_ek.ctx --key-algorithm ecc --public ecc_ek.pub"
version: commit 4700e32

Step:

1. Launch tdp-svsm with TPM
2. Execute command "tpm2_createek --ek-context ecc_ek.ctx --key-algorithm ecc --public ecc_ek.pub"

Expected:
EK can be successfully created.

Actual:

tpm2_createek \tpm2_createek \
                --ek-context ecc_ek.ctx \
                --key-algorithm ecc \
                --public ecc_ek.pub
[SVSM] WARN: CRB_LOC_CTRL locality to write = 0 val = 1
[SVSM] WARN: CRB_LOC_CTRL locality to write = 0 val = 2
[SVSM] WARN: CRB_LOC_CTRL locality to write = 0 val = 1
[SVSM] WARN: CRB_LOC_CTRL locality to write = 0 val = 2
[SVSM] WARN: CRB_LOC_CTRL locality to write = 0 val = 1
[SVSM] WARN: CRB_LOC_CTRL locality to write = 0 val = 2
[SVSM] WARN: CRB_LOC_CTRL locality to write = 0 val = 1
[SVSM] ERROR: Panic: CPU[1] panicked at kernel/src/cpu/idt/svsm.rs:154:9:
Unhandled Page-Fault at RIP 0xffffff800004720c CR2: 0xffffff8010000000 error code: 0x0000000000000000
[SVSM] ---BACKTRACE---:
[SVSM]   [0xffffff8000003a9e]
[SVSM]   [0xffffff8000046f52]
[SVSM]   [0xffffff8000046fce]
[SVSM]   [0xffffff8000008bf2]
[SVSM]   [0xffffff8000049760]
[SVSM]   [0xffffff80000a1e9b]
[SVSM]   [0xffffff8000052af7]
[SVSM]   [0xffffff800000e665]
[SVSM]   [0xffffff8000004924]
[SVSM]   [0xffffff80001c24ca]
[SVSM]   [0xffffff8000214511]
[SVSM]   [0xffffff80001c4e73]
[SVSM]   [0xffffff800023e4b7]
[SVSM]   [0xffffff80002418d8]
[SVSM]   [0xffffff8000234cbc]
[SVSM]   [0xffffff8000237223]
[SVSM]   [0xffffff8000200ac1]
[SVSM]   [0xffffff80001b2e61]
[SVSM]   [0xffffff80001b3307]
[SVSM]   [0xffffff80001b37e9]
[SVSM]   [0xffffff8000130bc1]
[SVSM]   [0xffffff800016bef1]
[SVSM]   [0xffffff800016bec1]
[SVSM]   Invalid frame
[SVSM] ---END---