Re: [PATCH v6 05/13] confidential guest support: Rework the "memory-encryption" property

2021-01-13 Thread Dr. David Alan Gilbert
* David Gibson (da...@gibson.dropbear.id.au) wrote: > On Tue, Jan 12, 2021 at 11:59:59AM +0100, Greg Kurz wrote: > > On Tue, 12 Jan 2021 15:45:00 +1100 > > David Gibson wrote: > > > > > Currently the "memory-encryption" property is only looked at once we > > > get to kvm_init(). Although

Re: [PATCH v6 05/13] confidential guest support: Rework the "memory-encryption" property

2021-01-12 Thread David Gibson
On Tue, Jan 12, 2021 at 11:59:59AM +0100, Greg Kurz wrote: > On Tue, 12 Jan 2021 15:45:00 +1100 > David Gibson wrote: > > > Currently the "memory-encryption" property is only looked at once we > > get to kvm_init(). Although protection of guest memory from the > > hypervisor isn't something

Re: [PATCH v6 05/13] confidential guest support: Rework the "memory-encryption" property

2021-01-12 Thread Greg Kurz
On Tue, 12 Jan 2021 15:45:00 +1100 David Gibson wrote: > Currently the "memory-encryption" property is only looked at once we > get to kvm_init(). Although protection of guest memory from the > hypervisor isn't something that could really ever work with TCG, it's > not conceptually tied to the

[PATCH v6 05/13] confidential guest support: Rework the "memory-encryption" property

2021-01-11 Thread David Gibson
Currently the "memory-encryption" property is only looked at once we get to kvm_init(). Although protection of guest memory from the hypervisor isn't something that could really ever work with TCG, it's not conceptually tied to the KVM accelerator. In addition, the way the string property is