Re: [PATCH v5 34/34] KVM: SVM: Provide support to launch and run an SEV-ES guest

2020-12-16 Thread Tom Lendacky
On 12/10/20 11:10 AM, Tom Lendacky wrote: > From: Tom Lendacky > > An SEV-ES guest is started by invoking a new SEV initialization ioctl, > KVM_SEV_ES_INIT. This identifies the guest as an SEV-ES guest, which is > used to drive the appropriate ASID allocation, VMSA encryption, etc. > > Before

[PATCH v5 34/34] KVM: SVM: Provide support to launch and run an SEV-ES guest

2020-12-10 Thread Tom Lendacky
From: Tom Lendacky An SEV-ES guest is started by invoking a new SEV initialization ioctl, KVM_SEV_ES_INIT. This identifies the guest as an SEV-ES guest, which is used to drive the appropriate ASID allocation, VMSA encryption, etc. Before being able to run an SEV-ES vCPU, the vCPU VMSA must be