From mboxrd@z Thu Jan 1 00:00:00 1970 From: Jarkko Sakkinen Subject: Re: [RFC PATCH 0/4] Multi-instance vTPM driver Date: Wed, 20 Jan 2016 00:59:42 +0200 Message-ID: <20160119225941.GA5426@intel.com> References: <1452787318-29610-1-git-send-email-stefanb@us.ibm.com> <20160119174400.GA7616@obsidianresearch.com> Mime-Version: 1.0 Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: 7bit Return-path: Content-Disposition: inline In-Reply-To: <20160119174400.GA7616-ePGOBjL8dl3ta4EC/59zMFaTQe2KTcn/@public.gmane.org> List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: tpmdd-devel-bounces-5NWGOfrQmneRv+LV9MX5uipxlwaOVQ5f@public.gmane.org To: Jason Gunthorpe Cc: dhowells-H+wXaHxf7aLQT0dZR+AlfA@public.gmane.org, Stefan Berger , tpmdd-devel-5NWGOfrQmneRv+LV9MX5uipxlwaOVQ5f@public.gmane.org, dwmw2-wEGCiKHe2LqWVfeAwA7xHQ@public.gmane.org List-Id: tpmdd-devel@lists.sourceforge.net On Tue, Jan 19, 2016 at 10:44:00AM -0700, Jason Gunthorpe wrote: > On Thu, Jan 14, 2016 at 11:01:54AM -0500, Stefan Berger wrote: > > > The primary goal of this series of patches is enabling vTPM for containers > > and hooking them up to a (future) namespaced IMA. However, the driver can > > also be used for simulating a hardware TPM on the host. > > If we go down the road of doing the kernel-side tpm resource > management this series seems like a kludgy way to enable tpm > namespaces? A future resource manager could be name space aware and > keep everything sane. I'm not sure what you are talking about but I'll give couple of use cases where I see the value. This feature is something we are already using in daily basis for running TPM tests inside VMs with David's patch, which provides equivalent functionality. Another example would be a software TPM running in ring-3 for example implemented with a technology such as Intel SGX that you could connect by using a feature like this. > Jason /Jarkko ------------------------------------------------------------------------------ Site24x7 APM Insight: Get Deep Visibility into Application Performance APM + Mobile APM + RUM: Monitor 3 App instances at just $35/Month Monitor end-to-end web transactions and take corrective actions now Troubleshoot faster and improve end-user experience. Signup Now! http://pubads.g.doubleclick.net/gampad/clk?id=267308311&iu=/4140