Linux Kernel Changes Proposed So Intel TDX KVM Guests Avoid Crashing The Host

[phoronix]

Phoronix: Linux Kernel Changes Proposed So Intel TDX KVM Guests Avoid Crashing The Host

Shortly after Intel's TDX whitepaper was made public last year for better protecting virtual machines, Intel open-source engineers began posting support patches for bringing up Trust Domain Extensions under Linux. That work remains ongoing and now further Linux kernel infrastructure work is pending to better deal with the notion of guest private memory afforded by TDX...

https://www.phoronix.com/scan.php?page=news_item&px=Linux-RFC-Guest-Private-Mem-TDX

[uid313]

Maybe I can run my normal Linux system that I use everyday on this?
Because this way I don't have to trust the BIOS/SMM, other platform firmware or discrete and integrated devices.

I don't trust Systems Management Mode (SMM), vPro, Intel Active Management Technology (AMT), the pre-boot UEFI environment, binary blobs or any of that shady stuff.