mirror of
https://gitlab.com/qemu-project/qemu
synced 2024-10-17 08:23:02 +00:00
c3347ed0d2
The unpack facility provides the means to setup a protected guest. A protected guest cannot be introspected by the hypervisor or any user/administrator of the machine it is running on. Protected guests are encrypted at rest and need a special boot mechanism via diag308 subcode 8 and 10. Code 8 sets the PV specific IPLB which is retained separately from those set via code 5. Code 10 is used to unpack the VM into protected memory, verify its integrity and start it. Signed-off-by: Janosch Frank <frankja@linux.ibm.com> Co-developed-by: Christian Borntraeger <borntraeger@de.ibm.com> [Changes to machine] Reviewed-by: David Hildenbrand <david@redhat.com> Reviewed-by: Claudio Imbrenda <imbrenda@linux.ibm.com> Reviewed-by: Cornelia Huck <cohuck@redhat.com> Message-Id: <20200323083606.24520-1-frankja@linux.ibm.com> [CH: fixed up KVM_PV_VM_ -> KVM_PV_] Signed-off-by: Cornelia Huck <cohuck@redhat.com> |
||
|---|---|---|
| .. | ||
| 3270-ccw.h | ||
| adapter.h | ||
| ap-bridge.h | ||
| ap-device.h | ||
| css-bridge.h | ||
| css.h | ||
| ebcdic.h | ||
| event-facility.h | ||
| ioinst.h | ||
| pv.h | ||
| s390-ccw.h | ||
| s390-virtio-ccw.h | ||
| s390_flic.h | ||
| sclp.h | ||
| storage-attributes.h | ||
| storage-keys.h | ||
| tod.h | ||
| vfio-ccw.h | ||