Re: [PATCH v5 4/6] sev/i386: Don't allow a system reset under an SEV-ES guest

2021-01-25 Thread Dr. David Alan Gilbert
* Tom Lendacky (thomas.lenda...@amd.com) wrote: > From: Tom Lendacky > > An SEV-ES guest does not allow register state to be altered once it has > been measured. When an SEV-ES guest issues a reboot command, Qemu will > reset the vCPU state and resume the guest. This will cause failures under >

[PATCH v5 4/6] sev/i386: Don't allow a system reset under an SEV-ES guest

2021-01-14 Thread Tom Lendacky
From: Tom Lendacky An SEV-ES guest does not allow register state to be altered once it has been measured. When an SEV-ES guest issues a reboot command, Qemu will reset the vCPU state and resume the guest. This will cause failures under SEV-ES. Prevent that from occuring by introducing an