diff mbox series

[SRU,O,1/1] UBUNTU: [Config] disable CONFIG_TCG_TPM2_HMAC by default

Message ID 20240911032740.2899777-2-aaron.ma@canonical.com
State New
Headers show
Series Disable CONFIG_TCG_TPM2_HMAC to avoid performance loss after v6.10 | expand

Commit Message

Aaron Ma Sept. 11, 2024, 3:27 a.m. UTC
BugLink: https://bugs.launchpad.net/bugs/2080322

v6.10-rc1 introduce encryption overhead to all kernel to TPM
transactions, but it has regressions about significant delays
at bootup and performance loss when extending a TPM PCR.

Disable it by default until there is a real fix.

Link: https://bugzilla.kernel.org/show_bug.cgi?id=219229
Link: https://lore.kernel.org/regressions/0b4a5a86-a9f6-42d1-a9ba-ec565b336d3a@leemhuis.info/
Signed-off-by: Aaron Ma <aaron.ma@canonical.com>
---
 debian.master/config/annotations | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

Comments

Timo Aaltonen Sept. 11, 2024, 3:03 p.m. UTC | #1
Aaron Ma kirjoitti 11.9.2024 klo 6.27:
> BugLink: https://bugs.launchpad.net/bugs/2080322
> 
> v6.10-rc1 introduce encryption overhead to all kernel to TPM
> transactions, but it has regressions about significant delays
> at bootup and performance loss when extending a TPM PCR.
> 
> Disable it by default until there is a real fix.
> 
> Link: https://bugzilla.kernel.org/show_bug.cgi?id=219229
> Link: https://lore.kernel.org/regressions/0b4a5a86-a9f6-42d1-a9ba-ec565b336d3a@leemhuis.info/
> Signed-off-by: Aaron Ma <aaron.ma@canonical.com>
> ---
>   debian.master/config/annotations | 2 +-
>   1 file changed, 1 insertion(+), 1 deletion(-)
> 
> diff --git a/debian.master/config/annotations b/debian.master/config/annotations
> index acb82f584f16..cb610de1bfef 100644
> --- a/debian.master/config/annotations
> +++ b/debian.master/config/annotations
> @@ -13921,7 +13921,7 @@ CONFIG_TCG_TIS_ST33ZP24                         policy<{'amd64': 'm', 'arm64': '
>   CONFIG_TCG_TIS_ST33ZP24_I2C                     policy<{'amd64': 'm', 'arm64': 'm', 'armhf': 'm', 'ppc64el': 'm', 'riscv64': 'm', 's390x': 'n'}>
>   CONFIG_TCG_TIS_ST33ZP24_SPI                     policy<{'amd64': 'm', 'arm64': 'm', 'armhf': 'm', 'ppc64el': 'm', 'riscv64': 'm', 's390x': '-'}>
>   CONFIG_TCG_TIS_SYNQUACER                        policy<{'arm64': 'm'}>
> -CONFIG_TCG_TPM2_HMAC                            policy<{'amd64': 'y', 'arm64': 'y', 'armhf': 'y', 'ppc64el': 'y', 'riscv64': 'y', 's390x': 'y'}>
> +CONFIG_TCG_TPM2_HMAC                            policy<{'amd64': 'n', 'arm64': 'n', 'armhf': 'n', 'ppc64el': 'n', 'riscv64': 'n', 's390x': 'n'}>
>   CONFIG_TCG_VTPM_PROXY                           policy<{'amd64': 'm', 'arm64': 'm', 'armhf': 'm', 'ppc64el': 'm', 'riscv64': 'm', 's390x': 'm'}>
>   CONFIG_TCG_XEN                                  policy<{'amd64': 'm', 'arm64': 'm', 'armhf': '-'}>
>   CONFIG_TCM_FC                                   policy<{'amd64': 'm', 'arm64': 'm', 'armhf': 'm', 'ppc64el': 'm', 'riscv64': 'm', 's390x': 'm'}>

thanks for tracking this down, applied
diff mbox series

Patch

diff --git a/debian.master/config/annotations b/debian.master/config/annotations
index acb82f584f16..cb610de1bfef 100644
--- a/debian.master/config/annotations
+++ b/debian.master/config/annotations
@@ -13921,7 +13921,7 @@  CONFIG_TCG_TIS_ST33ZP24                         policy<{'amd64': 'm', 'arm64': '
 CONFIG_TCG_TIS_ST33ZP24_I2C                     policy<{'amd64': 'm', 'arm64': 'm', 'armhf': 'm', 'ppc64el': 'm', 'riscv64': 'm', 's390x': 'n'}>
 CONFIG_TCG_TIS_ST33ZP24_SPI                     policy<{'amd64': 'm', 'arm64': 'm', 'armhf': 'm', 'ppc64el': 'm', 'riscv64': 'm', 's390x': '-'}>
 CONFIG_TCG_TIS_SYNQUACER                        policy<{'arm64': 'm'}>
-CONFIG_TCG_TPM2_HMAC                            policy<{'amd64': 'y', 'arm64': 'y', 'armhf': 'y', 'ppc64el': 'y', 'riscv64': 'y', 's390x': 'y'}>
+CONFIG_TCG_TPM2_HMAC                            policy<{'amd64': 'n', 'arm64': 'n', 'armhf': 'n', 'ppc64el': 'n', 'riscv64': 'n', 's390x': 'n'}>
 CONFIG_TCG_VTPM_PROXY                           policy<{'amd64': 'm', 'arm64': 'm', 'armhf': 'm', 'ppc64el': 'm', 'riscv64': 'm', 's390x': 'm'}>
 CONFIG_TCG_XEN                                  policy<{'amd64': 'm', 'arm64': 'm', 'armhf': '-'}>
 CONFIG_TCM_FC                                   policy<{'amd64': 'm', 'arm64': 'm', 'armhf': 'm', 'ppc64el': 'm', 'riscv64': 'm', 's390x': 'm'}>