Re: [Qemu-devel] [PATCH V4 00/10] Qemu Trusted Platform Module (TPM) integration

2011-05-10 Thread Serge E. Hallyn
Quoting Stefan Berger (stef...@linux.vnet.ibm.com):
> >What is your plan regarding libtpms?  Will you be making actual
> >releases at sf.net at some point?
> I was going to wait for a review of all the patches here on the ml
> and see the code checked in -- until that hasn't happened anything
> could change. So for now I am keeping libtpms in Fedora Rawhide and
> then was going to produce a libtpms-0.5.2 and make it commonly
> available via Fedora, maybe putting a copy of the library on sf.net.
> I would hold off on packaging and distributing it.

Ok, thanks, so I certainly won't push it into the archives yet, but
will keep it in a ppa for easy testing.

thanks,
-serge



Re: [Qemu-devel] [PATCH V4 00/10] Qemu Trusted Platform Module (TPM) integration

2011-05-10 Thread Stefan Berger

On 05/10/2011 07:59 AM, Serge E. Hallyn wrote:

Quoting Stefan Berger (stef...@linux.vnet.ibm.com):

On 05/10/2011 12:07 AM, Serge E. Hallyn wrote:

To get this to compile on top of qemu-kvm, I needed the following
patch to force CONFIG_THREAD on so as to define things like
qemu_mutex_lock:

Index: qemu-kvm-tpm/configure
===
--- qemu-kvm-tpm.orig/configure 2011-05-09 21:19:10.920002303 -0500
+++ qemu-kvm-tpm/configure  2011-05-09 21:19:22.150002305 -0500
@@ -3420,6 +3420,7 @@
exit 1
fi
echo "CONFIG_TPM=y">>   $config_host_mak
+  echo "CONFIG_THREAD=y">>   $config_host_mak
fi
  fi


That seems to be qemu-kvm specific.

Hm, yeah, I guess it is.  Wonder what the odds are of that actually
working then.  Well, I've just about got this and libtpms packaged,
will hopefully finish up this afternoon and see.

I saw nothing problematic in the patches, but just didn't feel
qualified to send acks based on simple review, so figured I'd be
better off actually testing.

I am currently making modifications to the patches to support command 
lines like this one to be in line with other devices:


-tpm type=builtin,path=,id=xyz   -device tpm_tis,id=xyz

Typically with command lines like this Qemu also supports multiple 
devices of the same type. With the TPM this is a bit problematic since 
it would need to support multiple TPMs also in the firmware (aka BIOS). 
So I may support this command line but only allow one TPM.



What is your plan regarding libtpms?  Will you be making actual
releases at sf.net at some point?
I was going to wait for a review of all the patches here on the ml and 
see the code checked in -- until that hasn't happened anything could 
change. So for now I am keeping libtpms in Fedora Rawhide and then was 
going to produce a libtpms-0.5.2 and make it commonly available via 
Fedora, maybe putting a copy of the library on sf.net. I would hold off 
on packaging and distributing it.


   Stefan




Re: [Qemu-devel] [PATCH V4 00/10] Qemu Trusted Platform Module (TPM) integration

2011-05-10 Thread Serge E. Hallyn
Quoting Stefan Berger (stef...@linux.vnet.ibm.com):
> On 05/10/2011 12:07 AM, Serge E. Hallyn wrote:
> >To get this to compile on top of qemu-kvm, I needed the following
> >patch to force CONFIG_THREAD on so as to define things like
> >qemu_mutex_lock:
> >
> >Index: qemu-kvm-tpm/configure
> >===
> >--- qemu-kvm-tpm.orig/configure  2011-05-09 21:19:10.920002303 -0500
> >+++ qemu-kvm-tpm/configure   2011-05-09 21:19:22.150002305 -0500
> >@@ -3420,6 +3420,7 @@
> >exit 1
> >fi
> >echo "CONFIG_TPM=y">>  $config_host_mak
> >+  echo "CONFIG_THREAD=y">>  $config_host_mak
> >fi
> >  fi
> >
> That seems to be qemu-kvm specific.

Hm, yeah, I guess it is.  Wonder what the odds are of that actually
working then.  Well, I've just about got this and libtpms packaged,
will hopefully finish up this afternoon and see.

I saw nothing problematic in the patches, but just didn't feel
qualified to send acks based on simple review, so figured I'd be
better off actually testing.

What is your plan regarding libtpms?  Will you be making actual
releases at sf.net at some point?

thanks,
-serge



Re: [Qemu-devel] [PATCH V4 00/10] Qemu Trusted Platform Module (TPM) integration

2011-05-10 Thread Stefan Berger

On 05/10/2011 12:07 AM, Serge E. Hallyn wrote:

To get this to compile on top of qemu-kvm, I needed the following
patch to force CONFIG_THREAD on so as to define things like
qemu_mutex_lock:

Index: qemu-kvm-tpm/configure
===
--- qemu-kvm-tpm.orig/configure 2011-05-09 21:19:10.920002303 -0500
+++ qemu-kvm-tpm/configure  2011-05-09 21:19:22.150002305 -0500
@@ -3420,6 +3420,7 @@
exit 1
fi
echo "CONFIG_TPM=y">>  $config_host_mak
+  echo "CONFIG_THREAD=y">>  $config_host_mak
fi
  fi


That seems to be qemu-kvm specific.

  Stefan




Re: [Qemu-devel] [PATCH V4 00/10] Qemu Trusted Platform Module (TPM) integration

2011-05-09 Thread Serge E. Hallyn
To get this to compile on top of qemu-kvm, I needed the following
patch to force CONFIG_THREAD on so as to define things like
qemu_mutex_lock:

Index: qemu-kvm-tpm/configure
===
--- qemu-kvm-tpm.orig/configure 2011-05-09 21:19:10.920002303 -0500
+++ qemu-kvm-tpm/configure  2011-05-09 21:19:22.150002305 -0500
@@ -3420,6 +3420,7 @@
   exit 1
   fi
   echo "CONFIG_TPM=y" >> $config_host_mak
+  echo "CONFIG_THREAD=y" >> $config_host_mak
   fi
 fi
 



Re: [Qemu-devel] [PATCH V4 00/10] Qemu Trusted Platform Module (TPM) integration

2011-05-09 Thread Stefan Berger

On 05/09/2011 10:21 AM, Serge E. Hallyn wrote:

Quoting Stefan Berger (stef...@linux.vnet.ibm.com):

The following series of patches adds a TPM (Trusted Platform Module)
TIS (TPM Interface Spec) interface to Qemu and with that provides
means to access a backend implementing the actual TPM functionality.
This frontend enables for example Linux's TPM TIS (tpm_tis) driver.

I am also posting the implementation of a backend implementation that is based
on a library (libtpms) providing TPM functionality. This library is currently
undergoing further testing but is now available via Fedora Rawhide:

http://download.fedora.redhat.com/pub/fedora/linux/development/rawhide/x86_64/os/Packages/libtpms-0.5.1-5.x86_64.rpm
http://download.fedora.redhat.com/pub/fedora/linux/development/rawhide/x86_64/os/Packages/libtpms-devel-0.5.1-5.x86_64.rpm

Hi,

where is the source for these?


http://download.fedora.redhat.com/pub/fedora/linux/development/rawhide/source/SRPMS/libtpms-0.5.1-5.src.rpm

   Stefan




Re: [Qemu-devel] [PATCH V4 00/10] Qemu Trusted Platform Module (TPM) integration

2011-05-09 Thread Serge E. Hallyn
Quoting Stefan Berger (stef...@linux.vnet.ibm.com):
> The following series of patches adds a TPM (Trusted Platform Module)
> TIS (TPM Interface Spec) interface to Qemu and with that provides
> means to access a backend implementing the actual TPM functionality.
> This frontend enables for example Linux's TPM TIS (tpm_tis) driver.
> 
> I am also posting the implementation of a backend implementation that is based
> on a library (libtpms) providing TPM functionality. This library is currently
> undergoing further testing but is now available via Fedora Rawhide:
> 
> http://download.fedora.redhat.com/pub/fedora/linux/development/rawhide/x86_64/os/Packages/libtpms-0.5.1-5.x86_64.rpm
> http://download.fedora.redhat.com/pub/fedora/linux/development/rawhide/x86_64/os/Packages/libtpms-devel-0.5.1-5.x86_64.rpm

Hi,

where is the source for these?

thanks,
-serge