Re: [PATCH v10 03/16] s390x: protvirt: Support unpack facility

2020-03-19 Thread Janosch Frank
On 3/19/20 12:57 PM, Christian Borntraeger wrote: > > > On 19.03.20 12:55, Janosch Frank wrote: >> On 3/19/20 12:08 PM, Cornelia Huck wrote: >>> On Wed, 18 Mar 2020 10:30:34 -0400 >>> Janosch Frank wrote: >>> The unpack facility provides the means to setup a protected guest. A

Re: [PATCH v10 03/16] s390x: protvirt: Support unpack facility

2020-03-19 Thread Christian Borntraeger
On 19.03.20 12:55, Janosch Frank wrote: > On 3/19/20 12:08 PM, Cornelia Huck wrote: >> On Wed, 18 Mar 2020 10:30:34 -0400 >> Janosch Frank wrote: >> >>> The unpack facility provides the means to setup a protected guest. A >>> protected guest cannot be introspected by the hypervisor or any >>>

Re: [PATCH v10 03/16] s390x: protvirt: Support unpack facility

2020-03-19 Thread Janosch Frank
On 3/19/20 12:08 PM, Cornelia Huck wrote: > On Wed, 18 Mar 2020 10:30:34 -0400 > Janosch Frank wrote: > >> The unpack facility provides the means to setup a protected guest. A >> protected guest cannot be introspected by the hypervisor or any >> user/administrator of the machine it is running

Re: [PATCH v10 03/16] s390x: protvirt: Support unpack facility

2020-03-19 Thread Cornelia Huck
On Wed, 18 Mar 2020 10:30:34 -0400 Janosch Frank wrote: > The unpack facility provides the means to setup a protected guest. A > protected guest cannot be introspected by the hypervisor or any > user/administrator of the machine it is running on. > > Protected guests are encrypted at rest and

[PATCH v10 03/16] s390x: protvirt: Support unpack facility

2020-03-18 Thread Janosch Frank
The unpack facility provides the means to setup a protected guest. A protected guest cannot be introspected by the hypervisor or any user/administrator of the machine it is running on. Protected guests are encrypted at rest and need a special boot mechanism via diag308 subcode 8 and 10. Code 8