linux-kernel - Re: [Part2 PATCH v6 01/38] Documentation/virtual/kvm: Add AMD Secure Encrypted Virtualization (SEV)

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [<thread-prev] [thread-next>] [day] [month] [year] [list]

Message-ID: <d74eead2-e74a-197c-5a92-605b15cddbbe@amd.com>
Date:   Mon, 23 Oct 2017 17:40:47 -0500
From:   Brijesh Singh <brijesh.singh@....com>
To:     Jonathan Corbet <corbet@....net>
Cc:     brijesh.singh@....com, kvm@...r.kernel.org, bp@...en8.de,
        Thomas Gleixner <tglx@...utronix.de>,
        Ingo Molnar <mingo@...hat.com>,
        "H. Peter Anvin" <hpa@...or.com>,
        Paolo Bonzini <pbonzini@...hat.com>,
        Radim Krčmář <rkrcmar@...hat.com>,
        Borislav Petkov <bp@...e.de>,
        Tom Lendacky <thomas.lendacky@....com>, x86@...nel.org,
        linux-kernel@...r.kernel.org
Subject: Re: [Part2 PATCH v6 01/38] Documentation/virtual/kvm: Add AMD Secure
 Encrypted Virtualization (SEV)



On 10/20/2017 08:18 AM, Jonathan Corbet wrote:
> On Thu, 19 Oct 2017 21:33:36 -0500
> Brijesh Singh <brijesh.singh@....com> wrote:
> 
>> Create a Documentation entry to describe the AMD Secure Encrypted
>> Virtualization (SEV) feature.
> 
> A couple of quick notes...
> 
>   - This is describing an x86 subarchitecture feature, so it seems to me
>     that Documentation/x86 would be a more logical place for it.  Yes, KVM
>     can use this feature, but it's not a KVM feature and there might be
>     something else that takes advantage of it too.
> 

In part1 of SEV patches, we do expand the 
Documentation/x86/amd-memory-eencryption.txt to explain the SEV 
architecture feature. In this patch, we focus on documenting the SEV 
specific changes from the KVM point of view and how it integrate with KVM.


>   - Any chance of getting it formatted as RST?  It's almost there already.
> 

Sure, next rev I will convert it to RST format.


> Beyond that, the document obviously falls far short of what one would
> have to know to use SEV; probably filling all that in would make it long
> indeed.
> 

In later part of patches (Patch 24/38 [1]), I expand this doc to provide 
high level overview of various SEV commands to support common lifecycle 
events of SEV guests, such as launching, running, snapshotting, 
migrating etc.

[1] https://patchwork.kernel.org/patch/10018671/