Re: [PATCH v6 10/13] spapr: Add PEF based confidential guest support

2021-01-12 Thread David Gibson
On Tue, Jan 12, 2021 at 09:56:12AM +, Daniel P. Berrangé wrote: > On Tue, Jan 12, 2021 at 03:45:05PM +1100, David Gibson wrote: > > Some upcoming POWER machines have a system called PEF (Protected > > Execution Facility) which uses a small ultravisor to allow guests to > > run in a way that

Re: [PATCH v6 10/13] spapr: Add PEF based confidential guest support

2021-01-12 Thread David Gibson
On Tue, Jan 12, 2021 at 12:27:50PM +0100, Greg Kurz wrote: > On Tue, 12 Jan 2021 15:45:05 +1100 > David Gibson wrote: > > > Some upcoming POWER machines have a system called PEF (Protected > > Execution Facility) which uses a small ultravisor to allow guests to > > run in a way that they can't

Re: [PATCH v6 10/13] spapr: Add PEF based confidential guest support

2021-01-12 Thread Greg Kurz
On Tue, 12 Jan 2021 15:45:05 +1100 David Gibson wrote: > Some upcoming POWER machines have a system called PEF (Protected > Execution Facility) which uses a small ultravisor to allow guests to > run in a way that they can't be eavesdropped by the hypervisor. The > effect is roughly similar to

Re: [PATCH v6 10/13] spapr: Add PEF based confidential guest support

2021-01-12 Thread Daniel P . Berrangé
On Tue, Jan 12, 2021 at 03:45:05PM +1100, David Gibson wrote: > Some upcoming POWER machines have a system called PEF (Protected > Execution Facility) which uses a small ultravisor to allow guests to > run in a way that they can't be eavesdropped by the hypervisor. The > effect is roughly similar

Re: [PATCH v6 10/13] spapr: Add PEF based confidential guest support

2021-01-12 Thread Daniel P . Berrangé
On Tue, Jan 12, 2021 at 03:45:05PM +1100, David Gibson wrote: > Some upcoming POWER machines have a system called PEF (Protected > Execution Facility) which uses a small ultravisor to allow guests to > run in a way that they can't be eavesdropped by the hypervisor. The > effect is roughly similar

Re: [PATCH v6 10/13] spapr: Add PEF based confidential guest support

2021-01-12 Thread David Gibson
On Tue, Jan 12, 2021 at 08:56:53AM +0100, Christian Borntraeger wrote: > > > On 12.01.21 05:45, David Gibson wrote: > [...] > > diff --git a/include/hw/ppc/pef.h b/include/hw/ppc/pef.h > > new file mode 100644 > > index 00..7c92391177 > > --- /dev/null > > +++ b/include/hw/ppc/pef.h > >

Re: [PATCH v6 10/13] spapr: Add PEF based confidential guest support

2021-01-11 Thread Christian Borntraeger
On 12.01.21 05:45, David Gibson wrote: [...] > diff --git a/include/hw/ppc/pef.h b/include/hw/ppc/pef.h > new file mode 100644 > index 00..7c92391177 > --- /dev/null > +++ b/include/hw/ppc/pef.h > @@ -0,0 +1,26 @@ > +/* > + * PEF (Protected Execution Facility) for POWER support > + * >

[PATCH v6 10/13] spapr: Add PEF based confidential guest support

2021-01-11 Thread David Gibson
Some upcoming POWER machines have a system called PEF (Protected Execution Facility) which uses a small ultravisor to allow guests to run in a way that they can't be eavesdropped by the hypervisor. The effect is roughly similar to AMD SEV, although the mechanisms are quite different. Most of the