Common ABI for attestation in the Linux kernel

[thomas-fossati]

"configfs TSM" is a recently published set of patches to the Linux kernel (targeting v6.7, IIUC) that provide a common interface for confidential guest VMs to retrieve attestation reports from the host TVM.

"configfs TSM" aims at creating a common framework that supersedes the current per-vendor ioctl-based solutions.

It’d be nice if someone from the linux-coco community could come to one of the SIG meetings and present:

• use cases
• the framework
• the ABI (interface, semantics), and
• discuss Implementation choices (e.g., why configfs was preferred over sysfs)

[thomas-fossati]

@sameo would you, or someone else from linux-coco community, be willing to take this?

[wenhuizhang]

Hopefully, this API could consider both Intel RTMR backend and AMD vTPM backend

[sameo]

@sameo would you, or someone else from linux-coco community, be willing to take this?

I can take that one, yes.

[thomas-fossati]

As discussed with @sameo: to be scheduled post LPC'23, i.e., after the 15th of November.

[thomas-fossati]

Scheduled for the 19th December call.

[jdbeaney]

@sameo: Sam, will you be able to discuss for 16th January, 2024?

[sameo]

@jdbeaney I should be able to give an overview, yes.

[gkostal]

@sameo - thank you for presenting this topic on 1/16/24.

@thomas-fossati - Sam presented on 1/16/24 and the slides are uploaded. Can we close this issue?