Add support for running an arbitrary chipset device in another process, and do so with the TPM

[smalis-msft]

Package the required resources into MeshPayloads, send them into a new process, and build the device there. Then proxy across any IOs and memory accesses.

[Copilot]

Pull request overview

This WIP PR introduces infrastructure to run chipset devices in isolated processes, with the TPM device as the initial use case. The implementation follows a worker/proxy pattern where a ChipsetDeviceProxy in the main process communicates with a RemoteChipsetDeviceWorker in a separate process via mesh channels. This provides process-level isolation for devices, enhancing security and fault tolerance.

Key changes:

• New chipset_device_worker crate with proxy/worker/resolver pattern for remote device execution
• Integration of TPM device to run in a separate process across OpenVMM, OpenHCL, and Petri test framework
• Mesh-based communication infrastructure for device operations (MMIO, PIO, PCI config space)

Reviewed changes

Copilot reviewed 20 out of 21 changed files in this pull request and generated 19 comments.

Show a summary per file

File	Description
workers/chipset_device_worker/src/lib.rs	Core types for remote device communication (requests, responses, initialization)
workers/chipset_device_worker/src/worker.rs	Worker implementation that runs devices in separate process
workers/chipset_device_worker/src/proxy.rs	Client-side proxy forwarding device operations over channels
workers/chipset_device_worker/src/resolver.rs	Resource resolver for launching remote device workers
workers/chipset_device_worker/src/worker/configure.rs	Stub implementations for device configuration (all todo!())
workers/chipset_device_worker/Cargo.toml	Dependencies for the new worker crate
petri/src/vm/openvmm/construct.rs	Integrate remote TPM device in Petri tests
petri/src/vm/openvmm/mod.rs	Add mesh host to Petri VM configuration
petri/src/vm/openvmm/start.rs	Thread mesh initialization through start sequence
petri/Cargo.toml	Add chipset_device_worker dependency
openvmm/openvmm_entry/src/lib.rs	Wrap TPM device with remote worker in OpenVMM
openvmm/openvmm_entry/Cargo.toml	Add chipset_device_worker dependency
openvmm/openvmm_resources/src/lib.rs	Register remote chipset device resolver and worker
openvmm/openvmm_resources/Cargo.toml	Add chipset_device_worker dependency
openhcl/underhill_core/src/worker.rs	Wrap TPM device with remote worker in OpenHCL
openhcl/underhill_core/src/dispatch/mod.rs	Add device_mesh to LoadedVm state
openhcl/underhill_core/Cargo.toml	Add chipset_device_worker dependency
openhcl/openvmm_hcl_resources/src/lib.rs	Register remote chipset device resolver and worker
openhcl/openvmm_hcl_resources/Cargo.toml	Add chipset_device_worker dependency
Cargo.toml	Add chipset_device_worker to workspace
Cargo.lock	Lock file updates for new dependencies

[github-actions]

At least one Petri test failed.

[github-actions]

⚠️ Unsafe Code Detected

This PR modifies files containing unsafe Rust code. Extra scrutiny is required during review.

For more on why we check whole files, instead of just diffs, check out the Rustonomicon

[github-actions]

At least one Petri test failed.

[github-actions]

At least one Petri test failed.

[github-actions]

At least one Petri test failed.

[github-actions]

At least one Petri test failed.

[github-actions]

At least one Petri test failed.

[github-actions]

At least one Petri test failed.

[github-actions]

At least one Petri test failed.

[github-actions]

At least one Petri test failed.