tsme-test: init at unstable-2022-12-07

[lynatic1337]

Things done

Add https://github.com/AMDESE/mem-encryption-tests to nixpkgs. This adds a kernel module that allows to check whether TSME is enabled and working as intended on supported systems while booted.
Note: Testing this requires an supported AMD CPU and supported BIOS. For testing, please load the kernel module and check whether /sys/kernel/tsme exists.

• Built on platform(s)
  • x86_64-linux
  • aarch64-linux
  • x86_64-darwin
  • aarch64-darwin
• For non-Linux: Is sandboxing enabled in nix.conf? (See Nix manual)
  • sandbox = relaxed
  • sandbox = true
• Tested, as applicable:
  • NixOS test(s) (look inside nixos/tests)
  • and/or package tests
  • or, for functions and "core" functionality, tests in lib/tests or pkgs/test
  • made sure NixOS tests are linked to the relevant packages
• Tested compilation of all packages that depend on this change using nix-shell -p nixpkgs-review --run "nixpkgs-review rev HEAD". Note: all changes have to be committed, also see nixpkgs-review usage
• Tested basic functionality of all binary files (usually in ./result/bin/)
• 24.11 Release Notes (or backporting 23.11 and 24.05 Release notes)
  • (Package updates) Added a release notes entry if the change is major or breaking
  • (Module updates) Added a release notes entry if the change is significant
  • (Module addition) Added a release notes entry if adding a new NixOS module
• Fits CONTRIBUTING.md.

---

Add a 👍 reaction to pull requests you find important.

[FliegendeWurst]

Just some general suggestions. Unfortunately I can't test the module.

[lynatic1337]

Thanks for the suggestions and fixes @zi3m5f @FliegendeWurst, I've included them all in this new revision <3
Additionally I fixed the wrong attributes that somehow made it into this file by accident, the revision before would build the module for some kernel but not the kernel used in the system configuration.

edit: fixed the commit and PR titles as well

[zi3m5f]

• Checked githubId

I think the package name should contain tsme to be easier to find.

[lynatic1337]

@zi3m5f thanks for the other suggestions, implemented them as well. Package is now renamed to tsme-test, in case AMD decides to add separate modules/tools for other memory-encryption systems we have to change the name back but considering the fact they haven't added any other modules in years...

INSTALL_MOD_PATH was left over from an old version and does nothing, apologies for not noticing.

[zi3m5f]

Thanks, LGTM :)

Build with latest kernel and checked with modinfo:

filename: result/lib/modules/6.11.5/extra/tsme-test.ko
description: TSME test module
license: GPL
author: Advanced Micro Devices, Inc.
depends:
retpoline: Y
name: tsme_test
vermagic: 6.11.5 SMP preempt mod_unload
parm: debug: print extra debug information - any non-zero value (uint)