Re: [PATCH v8 2/2] s390x: protvirt: Support unpack facility

2020-03-10 Thread David Hildenbrand
>>> +case S390_RESET_PV: /* Subcode 10 */ >>> +subsystem_reset(); >>> +s390_crypto_reset(); >>> + >>> +CPU_FOREACH(t) { >>> +if (t == cs) { >>> +continue; >>> +} >>> +run_on_cpu(t, s390_do_cpu_full_reset,

Re: [PATCH v8 2/2] s390x: protvirt: Support unpack facility

2020-03-10 Thread Christian Borntraeger
On 10.03.20 10:00, David Hildenbrand wrote: > > Now that we talked about cached values, what about > > #if !defined(CONFIG_USER_ONLY) > static bool s390_is_pv(void) > { > static S390CcwMachineState *ccw; > Object *obj; > > if (ccw) { > return ccw->pv; > } > > /*

Re: [PATCH v8 2/2] s390x: protvirt: Support unpack facility

2020-03-10 Thread Janosch Frank
On 3/10/20 10:00 AM, David Hildenbrand wrote: > On 10.03.20 09:32, Janosch Frank wrote: >> The unpack facility provides the means to setup a protected guest. A >> protected guest can not be introspected by the hypervisor or any >> user/administrator of the machine it is running on. >> >> Protected

Re: [PATCH v8 2/2] s390x: protvirt: Support unpack facility

2020-03-10 Thread David Hildenbrand
On 10.03.20 09:32, Janosch Frank wrote: > The unpack facility provides the means to setup a protected guest. A > protected guest can not be introspected by the hypervisor or any > user/administrator of the machine it is running on. > > Protected guests are encrypted at rest and need a special

[PATCH v8 2/2] s390x: protvirt: Support unpack facility

2020-03-10 Thread Janosch Frank
The unpack facility provides the means to setup a protected guest. A protected guest can not be introspected by the hypervisor or any user/administrator of the machine it is running on. Protected guests are encrypted at rest and need a special boot mechanism via diag308 subcode 8 and 10. Code 8