crypto: ccp: Add the SNP_COMMIT command
authorTom Lendacky <thomas.lendacky@amd.com>
Fri, 26 Jan 2024 04:11:24 +0000 (22:11 -0600)
committerBorislav Petkov (AMD) <bp@alien8.de>
Mon, 29 Jan 2024 19:34:19 +0000 (20:34 +0100)
commitfad133c79afa02344d05001324a0474e20f3e055
tree82f47bcb71f1569a256cb412f956cfbf0bf6b521
parentf5db8841ebe59dbdf07fda797c88ccb51e0c893d
crypto: ccp: Add the SNP_COMMIT command

The SNP_COMMIT command is used to commit the currently installed version
of the SEV firmware. Once committed, the firmware cannot be replaced
with a previous firmware version (cannot be rolled back). This command
will also update the reported TCB to match that of the currently
installed firmware.

  [ mdr: Note the reported TCB update in the documentation/commit. ]

Signed-off-by: Tom Lendacky <thomas.lendacky@amd.com>
Signed-off-by: Michael Roth <michael.roth@amd.com>
Signed-off-by: Borislav Petkov (AMD) <bp@alien8.de>
Link: https://lore.kernel.org/r/20240126041126.1927228-25-michael.roth@amd.com
Documentation/virt/coco/sev-guest.rst
drivers/crypto/ccp/sev-dev.c
include/linux/psp-sev.h
include/uapi/linux/psp-sev.h