MitchDrage commented on issue #11842: URL: https://github.com/apache/cloudstack/issues/11842#issuecomment-6813112003
I'd like to take this on. We run KVM with Ceph RBD primary storage and hit this in production when a Windows VM went into a BitLocker recovery loop after a cold start. The sidecar file approach mentioned above looks like it only works on file-based pools, so I'm thinking of storing the TPM state as a small volume on primary storage, similar to how Proxmox handles its tpmstate disk. Rough plan: - Create a small TPM state volume when a VM with vTPM is deployed, and remove it when the VM is expunged. - Point the libvirt <tpm> backend at that volume using <source> and persistent_state='yes' so the state survives a stop. - Carry the volume through migration, VM snapshots and backups alongside the VM's other volumes. Our hosts run libvirt 11.10 and swtpm 0.8 on AlmaLinux 9. I'll start with KVM and open a draft PR once I have a working prototype. Happy to hear if anyone has a different approach in mind. -- This is an automated message from the Apache Git Service. To respond to the message, please log on to GitHub and use the URL above to go to the specific comment. To unsubscribe, e-mail: [email protected] For queries about this service, please contact Infrastructure at: [email protected]
