# changelog

author: Qiao Ma <mqaio@linux.alibaba.com> [6.1.27-1_rc2.an23]
changelog:
  * Mon May 22 2023 Qiao Ma <mqaio@linux.alibaba.com> [6.1.27-1.an23]
  - configs: refresh the ANCK default configs (Qiao Ma)
  - bump kernel to 6.1.27 (Qiao Ma)
  - anolis: x86/mtrr: Calculate correct physical address bit width when TME is enabled (Zelin Deng)
  - anolis: tdx: add a condiction branch before tdx-test init. (Kun(llfl))
  - anolis: driver core: A fix for wrong reference to the "authorized" attribute of core (Artie Ding)
  - config/tdx: Enable TDX guest related configs (Zelin Deng)
  - tools/tdx: Adjust ioctl data structure for sample attestation user app (zhiminghufighting)
  - platform/x86: intel_tdx_attest: adjust tdx get quote structure (zhiminghufighting)
  - tdx: fix hang issue caused by kernel rebased to 5.19 (zhiminghufighting)
  - tools/tdx: Add a sample attestation user app (zhiminghufighting)
  - platform/x86: Add RTMR update interface (Andi Kleen)
  - x86/tdx: Add CONFIG option for KVM SDV workarounds (Andi Kleen)
  - x86/tdx: Use VMCALL in place of actual TDCALL opcode (Sean Christopherson)
  - x86/tdx: Add config options for platform fixes (Kuppuswamy Sathyanarayanan)
  - virtio: Force IOMMU flag for SDV qemu (Andi Kleen)
  - x86/tdx: Add command line option to force TDX mode (Kuppuswamy Sathyanarayanan)
  - x86/apic: Do apic driver probe for "nosmp" use case (Kuppuswamy Sathyanarayanan)
  - x86/tdx-tests: Add a port of a kvm unit test (Alexander Shishkin)
  - x86/tdx: Fix single-stepping through emulated instructions (Alexander Shishkin)
  - x86/tdx: Allow SVKL ACPI table (Kuppuswamy Sathyanarayanan)
  - ACPI: Add SVKL table support (Kuppuswamy Sathyanarayanan)
  - x86/tdx: Add a command line option to add new ACPI tables to the filter (Andi Kleen)
  - x86/tdx: Limit the list of ACPI tables allowed (Kuppuswamy Sathyanarayanan)
  - ACPICA: Add ACPI table filter support (Kuppuswamy Sathyanarayanan)
  - x86/tdx: Injection interface for fuzzer (Andi Kleen)
  - tdx: Document tdx failure_inject sysfs parameters (Andi Kleen)
  - x86/tdx: Add trace point for tdx fuzzer (Andi Kleen)
  - x86/tdx: Add error injection for TDCALLs (Andi Kleen)
  - x86/tdx: Basic TDCALL fuzzing support (Andi Kleen)
  - random: Add prandom_u32_max_state (Andi Kleen)
  - mm/vmstat: Add counter for memory accepting (Kirill A. Shutemov)
  - x86/tdx: Disable hyperv paravirtualization until properly enabled (Andi Kleen)
  - x86/tdx: Enable direct iomap MMIO optimizations (Andi Kleen)
  - iomap: Add support for indirect MMIO (Andi Kleen)
  - x86/tdx: Use direct paravirt call for wrmsrl (Andi Kleen)
  - x86/tdx/paravirt: Move wrmsrl outside PARAVIRT_XXL (Andi Kleen)
  - x86/tdx: Make RDRAND/RDSEED loop forever (Andi Kleen)
  - x86/tdx/kvm: Only support trusted KVM CPUIDs (Andi Kleen)
  - x86/tdx: Add arch_has_restricted_memory_access for TDX (Andi Kleen)
  - virtio: Force only split mode with confidential guest (Andi Kleen)
  - random: Force trusting CPU RNG in TDX (Andi Kleen)
  - x86/tdx: Disable CQM in guest (Andi Kleen)
  - x86/tdx: Use CPUID 0x15 to get early TSC frequency (Andi Kleen)
  - virtio 9p: Fix an overflow (Andi Kleen)
  - virtio console: Harden port adding (Andi Kleen)
  - tdx: Disable ASPM with device filter (Andi Kleen)
  - tdx: Disable PCIE features with device filter (Andi Kleen)
  - tdx: Disable SRIOV with device filter (Andi Kleen)
  - x86/tdx: Enable panic_on_oops by default in TDX (Andi Kleen)
  - x86/tdx: Disable X86_FEATURE_TME,X86_FEATURE_APERFMPERF Capability (Andi Kleen)
  - x86/tdx: Disable X86_FEATURE_MTRR Capability (Andi Kleen)
  - x86/tdx: Disable X86_FEATURE_MCE Capability (Kuppuswamy Sathyanarayanan)
  - x86/tdx: Block Xen initialization in TDX (Andi Kleen)
  - x86/tdx: Mark the TSC in TDs reliable (Andi Kleen)
  - clocksource/acpi_pm: Disable in TDX (Andi Kleen)
  - x86/tdx: Disable kvmclock in TDX (Andi Kleen)
  - x86/tdx: Disable enhanced PCI parsing for TDX (Andi Kleen)
  - pci: Don't run PCI quirks in TDX guest (Andi Kleen)
  - x86/tdx: Disable MMCONF for TDX guest (Kuppuswamy Sathyanarayanan)
  - x86/tdx: Disable early PCI in TDX (Andi Kleen)
  - x86/tdx: Avoid early broadcom workaround when early PCI is disabled (Andi Kleen)
  - x86/tdx: Disable AMD northbridges (Andi Kleen)
  - x86/tdx: Disable split lock enabling for Sapphire Rapids (Andi Kleen)
  - virtio console: Harden multiport against invalid host input (Andi Kleen)
  - iomap: Mark ioremap shared when the device is authorized (Andi Kleen)
  - PCI: Mark MSI data shared if device was authorized (Andi Kleen)
  - x86/tdx: Implement ioremap_driver_hardened for x86 (Andi Kleen)
  - asm/io.h: Add ioremap_driver_hardening (Andi Kleen)
  - x86/tdx: Implement port I/O filtering (Kirill A. Shutemov)
  - x86/tdx: Add tdx_debug_enabled() interface (Kuppuswamy Sathyanarayanan)
  - x86/tdx: Add command line option to disable TDX guest filter support (Kuppuswamy Sathyanarayanan)
  - x86/tdx: Add command line option to override device allow list (Kuppuswamy Sathyanarayanan)
  - PCI: Initialize authorized attribute for confidential guest (Kuppuswamy Sathyanarayanan)
  - virtio: Initialize authorized attribute for confidential guest (Kuppuswamy Sathyanarayanan)
  - x86/tdx: Add device filter support for x86 TDX guest platform (Kuppuswamy Sathyanarayanan)
  - driver core: Allow arch to initialize the authorized attribute (Kuppuswamy Sathyanarayanan)
  - driver core: Add common support to skip probe for un-authorized devices (Kuppuswamy Sathyanarayanan)
  - driver core: Move the "authorized" attribute from USB/Thunderbolt to core (Kuppuswamy Sathyanarayanan)
  - platform/x86: intel_tdx_attest: Add TDX Guest attestation interface driver (Kuppuswamy Sathyanarayanan)
  - x86/tdx: Add TDX Guest event notify interrupt vector support (Kuppuswamy Sathyanarayanan)
  - x86/tdx: Add SetupEventNotifyInterrupt TDX hypercall support (Kuppuswamy Sathyanarayanan)
  - x86/tdx: Add GetQuote TDX hypercall support (Kuppuswamy Sathyanarayanan)
  - x86/tdx: Add TDREPORT TDX Module call support (Kuppuswamy Sathyanarayanan)
  - x86/tdx: Add option to override prot values (Andi Kleen)
  - Add taint flag for TDX overrides (Andi Kleen)
  - x86/tdx: Expose TDX Guest #VE count in /proc/interrupts (Kuppuswamy Sathyanarayanan)
  - x86/tdx: Add #VE tracepoint (Sean Christopherson)
  - ACPI/table: Print MADT Wake table information (Kuppuswamy Sathyanarayanan)
  - x86/split_lock: Fix the split lock #AC handling when running as guest (Xiaoyao Li)
  - x86/tdx: Forcefully disable legacy PIC for TDX guests (Sean Christopherson)
  - x86/tdx: Handle MWAIT and MONITOR (Kuppuswamy Sathyanarayanan)
  - x86/tdx: Panic on #VE due to access to unaccepted memory (Kirill A. Shutemov)
  - x86/tdx: Unaccepted memory support (Kirill A. Shutemov)
  - x86/mm: Provide helpers for unaccepted memory (Kirill A. Shutemov)
  - x86/mm: Reserve unaccepted memory bitmap (Kirill A. Shutemov)
  - x86/boot/compressed: Handle unaccepted memory (Kirill A. Shutemov)
  - efi/x86: Implement support for unaccepted memory (Kirill A. Shutemov)
  - efi/x86: Get full memory map in allocate_e820() (Kirill A. Shutemov)
  - mm: Add support for unaccepted memory (Kirill A. Shutemov)
  - [REVERTME] x86/tdx: go directly to 64bit mode on APs (Andi Kleen)
  - [REVERTME] x86: tdx: skip the trampoline for TDX guest (Xiaoyao Li)
  - [REVERTME] x86/tdx: Add config options for platform fixes (Kuppuswamy Sathyanarayanan)
  - x86/tdx: Warn about unexpected WBINVD (Kirill A. Shutemov)
  - anolis: configs: enable SQUASHFS_ZSTD for debug kernel (Yuanhe Shu)
  - anolis: configs: enable SQUASHFS_ZSTD (Yuanhe Shu)
  - config/tdx: Enable TDX guest config (Qiao Ma)
  - Anolis: add default configs for Anolis OS (Qiao Ma)


author: Jing Zhang <renyu.zj@linux.alibaba.com> [6.6.7-1_rc2.an23]
changelog:
  - anolis: config: change nr cpus to 1024 (Xingrui Yi)
  - anolis: spec: avoid override system 4.18.2 definition (Qiao Ma)


