search

canonical / tdx

Intel confidential computing - TDX
GNU General Public License v3.0
105 stars 41 forks source link

How to debug TD guest using GDB? #266

Closed Hsy-Intel closed 1 week ago

Hsy-Intel commented 2 weeks ago

Describe the support request

How to debug TD guest using GDB?

System report Please run the system-report.sh script (located in the root directory of this repo) on your host system and copy the output below.

syncronize-issues-to-jira[bot] commented 2 weeks ago

Thank you for reporting us your feedback!

The internal ticket has been created: https://warthogs.atlassian.net/browse/PEK-1449.

This message was autogenerated

hector-cao commented 2 weeks ago

@Hsy-Intel Do you mean debug the VMM on the host (qemu process ?)

Hsy-Intel commented 2 weeks ago

@Hsy-Intel Do you mean debug the VMM on the host (qemu process ?)

Yes.

fanchen2 commented 1 week ago

This function is unavailable. The reason of this is, the TDX is designed to provide a security VM to the end user, the memory content & vCPU state protection is base of such security, but debugging capability relies on access the VM’s memory content and vCPU state, so it doesn’t have such feature now.

BFuhry commented 1 week ago

Intel TDX offers various ways to debug from inside a Trust Domain or from outside a Trust Domain. Details can be found in the chapter "Debug and Profiling Architecture" of the "Intel® Trust Domain Extensions (Intel® TDX) Module Base Architecture Specification" (https://cdrdv2.intel.com/v1/dl/getContent/733575)