요약·해설과 원문, 전문 번역을 서로 분리했습니다. API 이름, symbol, source path는 원문 표기를 사용합니다.
1. 요약·해설
원문의 핵심 논리와 kernel programming 관점의 보충 설명입니다. 아래의 전문 번역과는 별도로 작성했습니다.
GUID and provisioning registers
sysfs-driver-intel_sdsi:30-50GUID가 registers binary layout을 식별하고 applications는 registers를 decode해 CPU provisioning과 status monitoring 정보를 얻습니다.
AKC, CAP and certificates
sysfs-driver-intel_sdsi:51-90AKC가 CAP을 authenticate하고 성공한 CAP은 CPU configuration을 갱신하며 meter/state certificates는 utilization과 current licenses를 readback합니다.
2. 영어 원문 전체
번역 기준이 된 Linux v6.18.37 원문입니다. 줄 번호는 이 버전의 파일 좌표입니다.
원문 전체 펼치기
1
What: /sys/bus/auxiliary/devices/intel_vsec.sdsi.X
2
Date: Feb 2022
3
KernelVersion: 5.18
4
Contact: "David E. Box" <[email protected]>
5
Description:
6
This directory contains interface files for accessing Intel
7
On Demand (formerly Software Defined Silicon or SDSi) features
8
on a CPU. X represents the socket instance (though not the
9
socket ID). The socket ID is determined by reading the
10
registers file and decoding it per the specification.
12
Some files communicate with On Demand hardware through a
13
mailbox. Should the operation fail, one of the following error
14
codes may be returned:
16
========== =====
17
Error Code Cause
18
========== =====
19
EIO General mailbox failure. Log may indicate cause.
20
EBUSY Mailbox is owned by another agent.
21
EPERM On Demand capability is not enabled in hardware.
22
EPROTO Failure in mailbox protocol detected by driver.
23
See log for details.
24
EOVERFLOW For provision commands, the size of the data
25
exceeds what may be written.
26
ESPIPE Seeking is not allowed.
27
ETIMEDOUT Failure to complete mailbox transaction in time.
28
========== =====
30
What: /sys/bus/auxiliary/devices/intel_vsec.sdsi.X/guid
31
Date: Feb 2022
32
KernelVersion: 5.18
33
Contact: "David E. Box" <[email protected]>
34
Description:
35
(RO) The GUID for the registers file. The GUID identifies
36
the layout of the registers file in this directory.
37
Information about the register layouts for a particular GUID
38
is available at http://github.com/intel/intel-sdsi
40
What: /sys/bus/auxiliary/devices/intel_vsec.sdsi.X/registers
41
Date: Feb 2022
42
KernelVersion: 5.18
43
Contact: "David E. Box" <[email protected]>
44
Description:
45
(RO) Contains information needed by applications to provision
46
a CPU and monitor status information. The layout of this file
47
is determined by the GUID in this directory. Information about
48
the layout for a particular GUID is available at
49
http://github.com/intel/intel-sdsi
51
What: /sys/bus/auxiliary/devices/intel_vsec.sdsi.X/provision_akc
52
Date: Feb 2022
53
KernelVersion: 5.18
54
Contact: "David E. Box" <[email protected]>
55
Description:
56
(WO) Used to write an Authentication Key Certificate (AKC) to
57
the On Demand NVRAM for the CPU. The AKC is used to authenticate
58
a Capability Activation Payload. Mailbox command.
60
What: /sys/bus/auxiliary/devices/intel_vsec.sdsi.X/provision_cap
61
Date: Feb 2022
62
KernelVersion: 5.18
63
Contact: "David E. Box" <[email protected]>
64
Description:
65
(WO) Used to write a Capability Activation Payload (CAP) to the
66
On Demand NVRAM for the CPU. CAPs are used to activate a given
67
CPU feature. A CAP is validated by On Demand hardware using a
68
previously provisioned AKC file. Upon successful authentication,
69
the CPU configuration is updated. A cold reboot is required to
70
fully activate the feature. Mailbox command.
72
What: /sys/bus/auxiliary/devices/intel_vsec.sdsi.X/meter_certificate
73
Date: Nov 2022
74
KernelVersion: 6.2
75
Contact: "David E. Box" <[email protected]>
76
Description:
77
(RO) Used to read back the current meter certificate for the CPU
78
from Intel On Demand hardware. The meter certificate contains
79
utilization metrics of On Demand enabled features. Mailbox
80
command.
82
What: /sys/bus/auxiliary/devices/intel_vsec.sdsi.X/state_certificate
83
Date: Feb 2022
84
KernelVersion: 5.18
85
Contact: "David E. Box" <[email protected]>
86
Description:
87
(RO) Used to read back the current state certificate for the CPU
88
from On Demand hardware. The state certificate contains
89
information about the current licenses on the CPU. Mailbox
90
command.
3. 한국어 전문 번역
영어 원문의 문단 순서와 의미를 유지한 전체 번역입니다. 코드, 함수명, symbol과 URL은 원문 표기를 유지합니다.
Intel On Demand socket instance
1-29| 항목 | 한국어 전문 번역 |
|---|---|
| What | /sys/bus/auxiliary/devices/intel_vsec.sdsi.X |
| Date | 2022년 2월 |
| KernelVersion | 5.18 |
| Contact | "David E. Box" <[email protected]> |
| Description | CPU의 Intel On Demand(formerly Software Defined Silicon, SDSi) features에 access하는 interface files directory입니다. X는 socket instance를 나타내지만 socket ID는 아니며 socket ID는 registers file을 specification에 따라 decode해 결정합니다. 일부 files는 mailbox로 On Demand hardware와 통신하고 operation failure 시 명시된 error codes를 반환할 수 있습니다. |
ErrorCause
EIOGeneral mailbox failure; log may show cause
EBUSYMailbox owned by another agent
EPERMOn Demand capability not enabled in hardware
EPROTODriver detected mailbox protocol failure
EOVERFLOWProvision data exceeds writable size
ESPIPESeeking is not allowed
ETIMEDOUTMailbox transaction did not finish in time
원문의 error-code table을 일곱 행으로 구조화했습니다.
InterfaceAccessRole
guidRead-onlyIdentify registers layout
registersRead-onlyProvisioning and status data
provision_akcWrite-onlyInstall authentication key
provision_capWrite-onlyActivate CPU capability
meter_certificateRead-onlyUtilization metrics
state_certificateRead-onlyCurrent licenses
Layout discovery, provisioning과 certificate readback roles입니다.
Registers-layout GUID
30-39| 항목 | 한국어 전문 번역 |
|---|---|
| What | /sys/bus/auxiliary/devices/intel_vsec.sdsi.X/guid |
| Date | 2022년 2월 |
| KernelVersion | 5.18 |
| Contact | "David E. Box" <[email protected]> |
| Description | Registers file의 GUID를 읽습니다. GUID는 이 directory의 registers layout을 식별하며 특정 GUID의 layout 정보는 http://github.com/intel/intel-sdsi에서 제공합니다. |
| Access | Read-only |
On Demand provisioning registers
40-50| 항목 | 한국어 전문 번역 |
|---|---|
| What | /sys/bus/auxiliary/devices/intel_vsec.sdsi.X/registers |
| Date | 2022년 2월 |
| KernelVersion | 5.18 |
| Contact | "David E. Box" <[email protected]> |
| Description | Applications가 CPU를 provision하고 status를 monitor하는 데 필요한 정보를 담습니다. File layout은 directory의 GUID가 결정하며 특정 GUID layout은 http://github.com/intel/intel-sdsi에서 제공합니다. |
| Access | Read-only |
Authentication Key Certificate provisioning
51-59| 항목 | 한국어 전문 번역 |
|---|---|
| What | /sys/bus/auxiliary/devices/intel_vsec.sdsi.X/provision_akc |
| Date | 2022년 2월 |
| KernelVersion | 5.18 |
| Contact | "David E. Box" <[email protected]> |
| Description | CPU의 On Demand NVRAM에 Authentication Key Certificate(AKC)를 write합니다. AKC는 Capability Activation Payload를 authenticate하는 데 사용되며 mailbox command입니다. |
| Access | Write-only |
Write AKC to On Demand NVRAM→Write Capability Activation Payload→Hardware validates CAP with provisioned AKC→Update CPU configuration→Cold reboot to fully activate feature
Authentication key provisioning부터 full activation까지의 순서입니다.
Capability Activation Payload provisioning
60-71| 항목 | 한국어 전문 번역 |
|---|---|
| What | /sys/bus/auxiliary/devices/intel_vsec.sdsi.X/provision_cap |
| Date | 2022년 2월 |
| KernelVersion | 5.18 |
| Contact | "David E. Box" <[email protected]> |
| Description | CPU의 On Demand NVRAM에 Capability Activation Payload(CAP)를 write합니다. CAP은 특정 CPU feature를 activate하며 On Demand hardware가 previously provisioned AKC file로 validate합니다. Authentication이 성공하면 CPU configuration이 update되고 feature를 완전히 activate하려면 cold reboot가 필요합니다. Mailbox command입니다. |
| Access | Write-only |
On Demand meter certificate
72-81| 항목 | 한국어 전문 번역 |
|---|---|
| What | /sys/bus/auxiliary/devices/intel_vsec.sdsi.X/meter_certificate |
| Date | 2022년 11월 |
| KernelVersion | 6.2 |
| Contact | "David E. Box" <[email protected]> |
| Description | Intel On Demand hardware에서 CPU의 current meter certificate를 readback합니다. Certificate는 On Demand enabled features의 utilization metrics를 담으며 mailbox command입니다. |
| Access | Read-only |
On Demand state certificate
82-90| 항목 | 한국어 전문 번역 |
|---|---|
| What | /sys/bus/auxiliary/devices/intel_vsec.sdsi.X/state_certificate |
| Date | 2022년 2월 |
| KernelVersion | 5.18 |
| Contact | "David E. Box" <[email protected]> |
| Description | On Demand hardware에서 CPU의 current state certificate를 readback합니다. Certificate는 CPU의 current licenses 정보를 담으며 mailbox command입니다. |
| Access | Read-only |
Socket instance and mailbox errors
sysfs-driver-intel_sdsi:1-29Directory suffix X는 socket instance이지 socket ID가 아니며 mailbox operations는 EIO부터 ETIMEDOUT까지 명시된 오류를 반환합니다.