From 1bc090fb1715f61faaab039779f04f2929f4ac82 Mon Sep 17 00:00:00 2001 From: Andrea Righi Date: Sat, 9 Dec 2023 19:41:40 +0100 Subject: [PATCH] UBUNTU: [Config] enable CONFIG_INTEL_TDX_HOST BugLink: https://bugs.launchpad.net/bugs/2046040 Intel Trust Domain Extensions (TDX) protects guest VMs from malicious host and certain physical attacks. CONFIG_INTEL_TDX_HOST adds the TDX support for the host to run confidential VMs (TDX guests). Signed-off-by: Andrea Righi Acked-by: Andrei Gherzan Signed-off-by: Andrea Righi --- debian.master/config/annotations | 4 +++- 1 file changed, 3 insertions(+), 1 deletion(-) diff --git a/debian.master/config/annotations b/debian.master/config/annotations index 3b4c1658e593..105d3f1b92ca 100644 --- a/debian.master/config/annotations +++ b/debian.master/config/annotations @@ -294,6 +294,9 @@ CONFIG_INTEL_ATOMISP2_PM note<'LP: #2017444'> CONFIG_INTEL_IOMMU_DEFAULT_ON policy<{'amd64': 'n'}> CONFIG_INTEL_IOMMU_DEFAULT_ON note<'the IOMMU can trigger boot failures'> +CONFIG_INTEL_TDX_HOST policy<{'amd64': 'y'}> +CONFIG_INTEL_TDX_HOST note<'LP: #2046040'> + CONFIG_IOMMU_DEBUGFS policy<{'amd64': 'n', 'arm64': 'n', 'armhf': 'n', 'ppc64el': 'n', 'riscv64': 'n', 's390x': 'n'}> CONFIG_IOMMU_DEBUGFS note<'LP: #1861057'> @@ -6541,7 +6544,6 @@ CONFIG_INTEL_STRATIX10_SERVICE policy<{'arm64': 'm'}> CONFIG_INTEL_TCC policy<{'amd64': 'y'}> CONFIG_INTEL_TCC_COOLING policy<{'amd64': 'm'}> CONFIG_INTEL_TDX_GUEST policy<{'amd64': 'y'}> -CONFIG_INTEL_TDX_HOST policy<{'amd64': 'n'}> CONFIG_INTEL_TELEMETRY policy<{'amd64': 'm'}> CONFIG_INTEL_TH policy<{'amd64': 'm', 'arm64': 'm', 'armhf': 'm', 'ppc64el': 'm', 'riscv64': 'm', 's390x': 'm'}> CONFIG_INTEL_TH_ACPI policy<{'amd64': 'm', 'arm64': 'm', 'riscv64': 'm'}>