[libvirt] New Feature: Intel MKTME Support

Daniel P. Berrangé berrange at redhat.com
Mon Mar 4 10:33:04 UTC 2019


On Thu, Feb 28, 2019 at 11:16:30PM +0000, Carvalho, Larkins L wrote:
> Hello Team,
> 
> Greetings.
> We want to add Intel MKTME support to the Libvirt.
> Intel MKTME is a capability to encrypt entirety of physical memory of a
> system similar to AMD SEV.
> 
> Please let us know what are the expectations from us to initiate the
> design and development of the feature.

Libvirt is likely dependant on QEMU / KVM to implement the low level
parts of this feature. So what is the status of QEMU / KVM work in
this area ?  If it already exists, can you outline how it is used.

I get the feeling the impl is quite different from AMD SEV, but if
there's any scope to use similar/overlapping libvirt design in libvirt
that is highly desirable.

Regards,
Daniel
-- 
|: https://berrange.com      -o-    https://www.flickr.com/photos/dberrange :|
|: https://libvirt.org         -o-            https://fstop138.berrange.com :|
|: https://entangle-photo.org    -o-    https://www.instagram.com/dberrange :|




More information about the libvir-list mailing list