Re: [RFC PATCH 0/4] Multi-instance vTPM driver

[Jarkko Sakkinen <jarkko.sakkinen-VuQAYsv1563Yd54FQh9/CA@public.gmane.org>]

On Tue, Jan 19, 2016 at 10:44:00AM -0700, Jason Gunthorpe wrote:
> On Thu, Jan 14, 2016 at 11:01:54AM -0500, Stefan Berger wrote:
> 
> > The primary goal of this series of patches is enabling vTPM for containers
> > and hooking them up to a (future) namespaced IMA. However, the driver can
> > also be used for simulating a hardware TPM on the host.
> 
> If we go down the road of doing the kernel-side tpm resource
> management this series seems like a kludgy way to enable tpm
> namespaces? A future resource manager could be name space aware and
> keep everything sane.

I'm not sure what you are talking about but I'll give couple of use
cases where I see the value.

This feature is something we are already using in daily basis for
running TPM tests inside VMs with David's patch, which provides
equivalent functionality.

Another example would be a software TPM running in ring-3 for example
implemented with a technology such as Intel SGX that you could connect
by using a feature like this.

> Jason

/Jarkko

------------------------------------------------------------------------------
Site24x7 APM Insight: Get Deep Visibility into Application Performance
APM + Mobile APM + RUM: Monitor 3 App instances at just $35/Month
Monitor end-to-end web transactions and take corrective actions now
Troubleshoot faster and improve end-user experience. Signup Now!
http://pubads.g.doubleclick.net/gampad/clk?id=267308311&iu=/4140