[libvirt] [PATCH v8 06/18] qemu: Extend QEMU with external TPM support

Ján Tomko jtomko at redhat.com
Sat Jun 2 13:12:48 UTC 2018


On Thu, May 24, 2018 at 04:26:02PM -0400, Stefan Berger wrote:
>Implement functions for managing the storage of the external swtpm as well
>as starting and stopping it. Also implement functions to use swtpm_setup,
>which simulates the manufacturing of a TPM, which includes creation of
>certificates for the device.
>
>Further, the external TPM needs storage on the host that we need to set
>up before it can be run. We can clean up the host once the domain is
>undefined.
>
>This patch also implements a small layer for external device support that
>calls into the TPM device layer if a domain has an attached TPM. This is
>the layer we will wire up later on.
>
>Signed-off-by: Stefan Berger <stefanb at linux.vnet.ibm.com>
>Reviewed-by: John Ferlan <jferlan at redhat.com>
>---
> src/qemu/Makefile.inc.am  |   4 +
> src/qemu/qemu_domain.c    |   2 +
> src/qemu/qemu_extdevice.c | 154 ++++++++++
> src/qemu/qemu_extdevice.h |  53 ++++
> src/qemu/qemu_process.c   |  12 +
> src/qemu/qemu_tpm.c       | 746 ++++++++++++++++++++++++++++++++++++++++++++++
> src/qemu/qemu_tpm.h       |  50 ++++
> 7 files changed, 1021 insertions(+)
> create mode 100644 src/qemu/qemu_extdevice.c
> create mode 100644 src/qemu/qemu_extdevice.h
> create mode 100644 src/qemu/qemu_tpm.c
> create mode 100644 src/qemu/qemu_tpm.h
>

Reviewed-by: Ján Tomko <jtomko at redhat.com>

Jano
-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 833 bytes
Desc: Digital signature
URL: <http://listman.redhat.com/archives/libvir-list/attachments/20180602/cff6d556/attachment-0001.sig>


More information about the libvir-list mailing list