| lists.openwall.net | lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC | |
|
Open Source and information security mailing list archives
| ||
|
Message-Id: <20210914030422.377601-2-jarkko@kernel.org>
Date: Tue, 14 Sep 2021 06:04:22 +0300
From: Jarkko Sakkinen <jarkko@...nel.org>
To: Jarkko Sakkinen <jarkko@...nel.org>,
Dave Hansen <dave.hansen@...ux.intel.com>,
Thomas Gleixner <tglx@...utronix.de>,
Ingo Molnar <mingo@...hat.com>, Borislav Petkov <bp@...en8.de>,
x86@...nel.org, "H. Peter Anvin" <hpa@...or.com>,
Jonathan Corbet <corbet@....net>
Cc: linux-sgx@...r.kernel.org, linux-kernel@...r.kernel.org,
linux-doc@...r.kernel.org
Subject: [PATCH v5 2/2] x86/sgx: Add an attribute for the amount of SGX memory in a NUMA node
The amount of SGX memory on the system is determined by the BIOS and it
varies wildly between systems. It can be from dozens of MB's on desktops
or VM's, up to many GB's on servers. Just like for regular memory, it is
sometimes useful to know the amount of usable SGX memory in the system.
Add an attribute for the amount of SGX memory in bytes to each NUMA
node. The path is /sys/devices/system/node/node[0-9]*/sgx/memory_size.
Signed-off-by: Jarkko Sakkinen <jarkko@...nel.org>
---
v5: A new patch based on the discussion at
https://lore.kernel.org/linux-sgx/3a7cab4115b4f902f3509ad8652e616b91703e1d.camel@kernel.org/T/#t
---
Documentation/x86/sgx.rst | 14 ++++++
arch/x86/kernel/cpu/sgx/main.c | 90 ++++++++++++++++++++++++++++++++++
arch/x86/kernel/cpu/sgx/sgx.h | 2 +
3 files changed, 106 insertions(+)
diff --git a/Documentation/x86/sgx.rst b/Documentation/x86/sgx.rst
index dd0ac96ff9ef..f9d9cfa6dbf9 100644
--- a/Documentation/x86/sgx.rst
+++ b/Documentation/x86/sgx.rst
@@ -250,3 +250,17 @@ user wants to deploy SGX applications both on the host and in guests
on the same machine, the user should reserve enough EPC (by taking out
total virtual EPC size of all SGX VMs from the physical EPC size) for
host SGX applications so they can run with acceptable performance.
+
+Per NUMA node SGX attributes
+============================
+
+NUMA nodes devices expose SGX specific attributes in the following path:
+
+ /sys/devices/system/node/node[0-9]*/sgx/
+
+Attributes
+----------
+
+memory_size
+ Total available physical SGX memory, also known as Enclave
+ Page Cache (EPC), in bytes.
diff --git a/arch/x86/kernel/cpu/sgx/main.c b/arch/x86/kernel/cpu/sgx/main.c
index a6e313f1a82d..c43b5a0120c1 100644
--- a/arch/x86/kernel/cpu/sgx/main.c
+++ b/arch/x86/kernel/cpu/sgx/main.c
@@ -717,6 +717,7 @@ static bool __init sgx_page_cache_init(void)
}
sgx_epc_sections[i].node = &sgx_numa_nodes[nid];
+ sgx_numa_nodes[nid].size += size;
sgx_nr_epc_sections++;
}
@@ -790,6 +791,87 @@ int sgx_set_attribute(unsigned long *allowed_attributes,
}
EXPORT_SYMBOL_GPL(sgx_set_attribute);
+#ifdef CONFIG_NUMA
+static void sgx_numa_exit(void)
+{
+ int nid;
+
+ for (nid = 0; nid < num_possible_nodes(); nid++) {
+ if (!sgx_numa_nodes[nid].kobj)
+ continue;
+
+ kobject_put(sgx_numa_nodes[nid].kobj);
+ }
+}
+
+#define SGX_NODE_ATTR_RO(_name) \
+ static struct kobj_attribute _name##_attr = __ATTR_RO(_name)
+
+static ssize_t memory_size_show(struct kobject *kobj, struct kobj_attribute *attr, char *buf)
+{
+ unsigned long size = 0;
+ int nid;
+
+ for (nid = 0; nid < num_possible_nodes(); nid++) {
+ if (kobj == sgx_numa_nodes[nid].kobj) {
+ size = sgx_numa_nodes[nid].size;
+ break;
+ }
+ }
+
+ return sysfs_emit(buf, "%lu\n", size);
+}
+SGX_NODE_ATTR_RO(memory_size);
+
+static struct attribute *sgx_node_attrs[] = {
+ &memory_size_attr.attr,
+ NULL,
+};
+
+static const struct attribute_group sgx_node_attr_group = {
+ .attrs = sgx_node_attrs,
+};
+
+static bool sgx_numa_init(void)
+{
+ struct sgx_numa_node *node;
+ struct device *dev;
+ int nid;
+ int ret;
+
+ for (nid = 0; nid < num_possible_nodes(); nid++) {
+ if (!sgx_numa_nodes[nid].size)
+ continue;
+
+ node = &sgx_numa_nodes[nid];
+ dev = &node_devices[nid]->dev;
+
+ node->kobj = kobject_create_and_add("sgx", &dev->kobj);
+ if (!node->kobj) {
+ sgx_numa_exit();
+ return false;
+ }
+
+ ret = sysfs_create_group(node->kobj, &sgx_node_attr_group);
+ if (ret) {
+ sgx_numa_exit();
+ return false;
+ }
+ }
+
+ return true;
+}
+#else
+static inline void sgx_numa_exit(void)
+{
+}
+
+static inline bool sgx_numa_init(void)
+{
+ return true;
+}
+#endif /* CONFIG_NUMA */
+
static int __init sgx_init(void)
{
int ret;
@@ -806,6 +888,11 @@ static int __init sgx_init(void)
goto err_reclaimer;
}
+ if (!sgx_numa_init()) {
+ ret = -ENOMEM;
+ goto err_numa_nodes;
+ }
+
ret = misc_register(&sgx_dev_provision);
if (ret)
goto err_provision;
@@ -829,6 +916,9 @@ static int __init sgx_init(void)
misc_deregister(&sgx_dev_provision);
err_provision:
+ sgx_numa_exit();
+
+err_numa_nodes:
kthread_stop(ksgxd_tsk);
err_reclaimer:
diff --git a/arch/x86/kernel/cpu/sgx/sgx.h b/arch/x86/kernel/cpu/sgx/sgx.h
index 4628acec0009..c2c5e7c66d21 100644
--- a/arch/x86/kernel/cpu/sgx/sgx.h
+++ b/arch/x86/kernel/cpu/sgx/sgx.h
@@ -39,6 +39,8 @@ struct sgx_epc_page {
*/
struct sgx_numa_node {
struct list_head free_page_list;
+ struct kobject *kobj;
+ unsigned long size;
spinlock_t lock;
};
--
2.25.1
Powered by blists - more mailing lists