* Michael S. Tsirkin (m...@redhat.com) wrote: > On Fri, Sep 08, 2017 at 10:48:10AM -0500, Brijesh Singh wrote: > > > > > 11. GO verifies the measurement and if measurement matches then > > > > it may > > > > > give a secret blob -- which must be injected into the guest > > > > before > > > > > libvirt starts the VM. If verification failed, GO will request > > > > cloud > > > > > provider to destroy the VM. > > I realised I'm missing something here: how does GO limit the > secret to the specific VM? For example, what prevents hypervisor > from launching two VMs with the same GO's DH, getting measurement > from 1st one but injecting the secret into the second one?
Isn't that the 'trusted channel nonce currently associated with the guest' in the guest context? Dave > Thanks, > > -- > MST > -- Dr. David Alan Gilbert / dgilb...@redhat.com / Manchester, UK -- libvir-list mailing list libvir-list@redhat.com https://www.redhat.com/mailman/listinfo/libvir-list
