On 9/24/26 9:19 AM, Christian Borntraeger wrote:
Am 23.09.26 um 10:33 schrieb Janosch Frank:
People doing VM management requested a way to query if a VM is in PV
or not. This of course does never replace attestation, it's merely
QEMU's view of the situation.
Maybe make it more obvious that this is really about the runtime property
(has the guest switched into secure and yet yet switched back via reboot).
Same for set_description, maybe something like "true while the guest runs
in protected virtualization mode (read-only)", plus one line in
docs/system/s390x/protvirt.rst. The docs line matters because read-only
properties don't appear in -M s390-ccw-virtio,help
In any case
Reviewed-by: Christian Borntraeger <[email protected]>
Something like this for the docs?
PV property
-----------
The s390x-ccw machine exposes the read-only runtime "pv"
property. This property is true if a guest successfully made the
transition into PV mode as reported by KVM and hasn't yet exited PV
mode via a reboot. This does not replace PV attestation which is the
only authoritative way to get a definitive answer if a guest is truly
protected.
