x86/mm: Encrypt the initrd earlier for BSP microcode update

Browse source

Currently the BSP microcode update code examines the initrd very early
in the boot process.  If SME is active, the initrd is treated as being
encrypted but it has not been encrypted (in place) yet.  Update the
early boot code that encrypts the kernel to also encrypt the initrd so
that early BSP microcode updates work.

Tested-by: Gabriel Craciunescu <nix.or.die@gmail.com>
Signed-off-by: Tom Lendacky <thomas.lendacky@amd.com>
Reviewed-by: Borislav Petkov <bp@suse.de>
Cc: Borislav Petkov <bp@alien8.de>
Cc: Brijesh Singh <brijesh.singh@amd.com>
Cc: Linus Torvalds <torvalds@linux-foundation.org>
Cc: Peter Zijlstra <peterz@infradead.org>
Cc: Thomas Gleixner <tglx@linutronix.de>
Link: http://lkml.kernel.org/r/20180110192634.6026.10452.stgit@tlendack-t1.amdoffice.net
Signed-off-by: Ingo Molnar <mingo@kernel.org>

...

This commit is contained in:

Tom Lendacky 2018-01-10 13:26:34 -06:00 • committed by Ingo Molnar

parent cc5f01e28d

commit 107cd25321

5 changed files with 85 additions and 45 deletions

Show all changes Ignore whitespace when comparing lines Ignore changes in amount of whitespace Ignore changes in whitespace at EOL

Download patch file Download diff file Expand all files Collapse all files

4

arch/x86/include/asm/mem_encrypt.h

View file

4

arch/x86/kernel/head64.c

View file

10

arch/x86/kernel/setup.c

View file

66

arch/x86/mm/mem_encrypt.c

View file

46

arch/x86/mm/mem_encrypt_boot.S

View file