[K][PULL] KVM: Secure Execution guest dump encryption with customer keys
frank.heimes at canonical.com
frank.heimes at canonical.com
Tue Sep 13 07:04:47 UTC 2022
BugLink: https://bugs.launchpad.net/bugs/1959940
Hypervisor-initiated dumps for Secure Execution guests are not helpful because
memory and CPU state is encrypted by a transient key only available to the
Ultravisor. Workload owners can still configure kdump in order to obtain kernel
crash infomation, but there are situation where kdump doesn't work.
In such situations problem determination is severely impeded.
This feature will implement dumps created in a way that can only be decrypted
by the owner of the guest image and be used for problem determination.
---
The following changes since commit f1c0a2b9be484f4ccfc6117966a5a0571d0c440e:
UBUNTU: [Packaging] Enable building zfs during cross-compile (2022-09-07 12:24:45 +0100)
are available in the Git repository at:
https://git.launchpad.net/~fheimes/+git/lp1959940/ e143431ea9066b3de030746b55c9cda71c694109
for you to fetch changes up to e143431ea9066b3de030746b55c9cda71c694109:
Documentation/virt/kvm/api.rst: Explain rc/rrc delivery (2022-09-12 12:38:26 +0200)
----------------------------------------------------------------
Janosch Frank (11):
s390/uv: Add SE hdr query information
s390/uv: Add dump fields to query
KVM: s390: pv: Add query interface
KVM: s390: pv: Add dump support definitions
KVM: s390: pv: Add query dump information
KVM: s390: Add configuration dump functionality
KVM: s390: Add CPU dump functionality
KVM: s390: Add KVM_CAP_S390_PROTECTED_DUMP
Documentation: virt: Protected virtual machine dumps
Documentation/virt/kvm/api.rst: Add protvirt dump/info api descriptions
Documentation/virt/kvm/api.rst: Explain rc/rrc delivery
Documentation/virt/kvm/api.rst | 162 +++++++++++++++-
Documentation/virt/kvm/s390/index.rst | 1 +
Documentation/virt/kvm/s390/s390-pv-dump.rst | 64 +++++++
arch/s390/boot/uv.c | 4 +
arch/s390/include/asm/kvm_host.h | 1 +
arch/s390/include/asm/uv.h | 45 ++++-
arch/s390/kernel/uv.c | 53 ++++++
arch/s390/kvm/kvm-s390.c | 269 +++++++++++++++++++++++++++
arch/s390/kvm/kvm-s390.h | 5 +
arch/s390/kvm/pv.c | 198 ++++++++++++++++++++
include/uapi/linux/kvm.h | 55 ++++++
11 files changed, 854 insertions(+), 3 deletions(-)
create mode 100644 Documentation/virt/kvm/s390/s390-pv-dump.rst
More information about the kernel-team
mailing list