Matt DeVillier has posted comments on this change. ( https://review.coreboot.org/c/coreboot/+/29682 )
Change subject: soc/intel/skylake: Use real common code for VMX init ......................................................................
Patch Set 3:
while there is no issue with using the common VMX implementation (tested on Librem 13v2), selecting the VMX lock function (which is selected by default) will prevent the use of SGX on supported platforms due to both being controlled by the IA32_FEATURE_CONTROL msr.
The locking of IA32_FEATURE_CONTROL should really be broken out into a separate function and performed after both VMX and SGX configuration if enabled, preferably as an antecedent to this commit.