Re: [PATCH v3 00/37] KVM: s390: Add support for protected VMs

David Hildenbrand
2020-02-21T11:29:02Z

> In fact you can do that. The hardware checks the integrity on guest physical
> address. So it is perfectly possible to remap a kvm slot as long as the
> eńcrypted content matches what counter, guest content hash and guest address
> tell. (It is like swapping, you move the encrypted content from one host
> page to another).
> For new pages (not unpacked and never touched by the guest) the ultravisor
> will bring a zeroed out page on first import.
>
> What does not work is when the user space address changes for a guest
> virtio indicator. But this was already broken before (we never did an
> adapter unmap/remap).
>

Thanks for the info!

>>
>> Can we get a new version once the other reviewers are done, so at least
>> I can have a final look?
>
> Just the updated patches as reply (e.g. a 3.2 for patch 9) or the full monty?

Whatever you others prefer. I can see that Conny has some feedback.
maybe wait for that and then (selectively) resend.

--
Thanks,

David / dhildenb