Re: [libvirt PATCH v2 09/12] tools: support generating SEV secret injection tables

2022-10-26 Thread Dov Murik
On 26/10/2022 15:51, Daniel P. Berrangé wrote: > On Wed, Oct 26, 2022 at 03:34:00PM +0300, Dov Murik wrote: >> >> >> On 26/10/2022 12:59, Daniel P. Berrangé wrote: >>> On Tue, Oct 25, 2022 at 07:38:43PM -0400, Cole Robinson wrote: On 10/19/22 6:17 AM, Daniel P. Berrangé wrote: [...] >>>

[PATCH for 8.9.0 0/2] Last service file and manpage fixes

2022-10-26 Thread Martin Kletzander
See patches for details (duh!). Martin Kletzander (2): Remove Before=libvirt-guests.service from other services docs: Remind users to remove --timeout option without socket activation docs/manpages/libvirtd.rst | 3 +++ src/ch/virtchd.service.in | 1 -

[PATCH for 8.9.0 1/2] Remove Before=libvirt-guests.service from other services

2022-10-26 Thread Martin Kletzander
libvirt-guests has After= dependency for all the sockets and that is enough. With the extra Before= in the service file systemd postpones the start of the socket activated service (when libvirt-guests is trying to connect to the socket) until after libvirt-guests is stopped effectively making

[PATCH for 8.9.0 2/2] docs: Remind users to remove --timeout option without socket activation

2022-10-26 Thread Martin Kletzander
There is part of our man page that describes how to switch to the traditional (non-socket) activation but it might still happens sometimes that there is an extra --timeout option specified for the daemon. Signed-off-by: Martin Kletzander --- docs/manpages/libvirtd.rst | 3 +++ 1 file changed, 3

Re: [libvirt PATCH v2 09/12] tools: support generating SEV secret injection tables

2022-10-26 Thread Daniel P . Berrangé
On Wed, Oct 26, 2022 at 03:47:12PM +0300, Dov Murik wrote: > > > On 19/10/2022 13:17, berrange at redhat.com (Daniel P. Berrangé) wrote: > > It is possible to build OVMF for SEV with an embedded Grub that can > > fetch LUKS disk secrets. This adds support for injecting secrets in > > the

Re: [libvirt PATCH v2 09/12] tools: support generating SEV secret injection tables

2022-10-26 Thread Dov Murik
On 19/10/2022 13:17, berrange at redhat.com (Daniel P. Berrangé) wrote: > It is possible to build OVMF for SEV with an embedded Grub that can > fetch LUKS disk secrets. This adds support for injecting secrets in > the required format. > > Signed-off-by: Daniel P. Berrang? > --- >

Re: [libvirt PATCH v2 09/12] tools: support generating SEV secret injection tables

2022-10-26 Thread Daniel P . Berrangé
On Wed, Oct 26, 2022 at 08:52:24AM -0400, James Bottomley wrote: > On Wed, 2022-10-26 at 10:59 +0100, Daniel P. Berrangé wrote: > > On Tue, Oct 25, 2022 at 07:38:43PM -0400, Cole Robinson wrote: > > > > > > This bytes([0]) NUL byte ends up in the efi_secret /sys path. > > > Dropping > > > it

Re: [libvirt PATCH v2 09/12] tools: support generating SEV secret injection tables

2022-10-26 Thread James Bottomley
On Wed, 2022-10-26 at 10:59 +0100, Daniel P. Berrangé wrote: > On Tue, Oct 25, 2022 at 07:38:43PM -0400, Cole Robinson wrote: > > On 10/19/22 6:17 AM, Daniel P. Berrangé wrote: > > > It is possible to build OVMF for SEV with an embedded Grub that > > > can fetch LUKS disk secrets. This adds

Re: [libvirt PATCH v2 09/12] tools: support generating SEV secret injection tables

2022-10-26 Thread Daniel P . Berrangé
On Wed, Oct 26, 2022 at 03:34:00PM +0300, Dov Murik wrote: > > > On 26/10/2022 12:59, Daniel P. Berrangé wrote: > > On Tue, Oct 25, 2022 at 07:38:43PM -0400, Cole Robinson wrote: > >> On 10/19/22 6:17 AM, Daniel P. Berrangé wrote: > >>> It is possible to build OVMF for SEV with an embedded Grub

Re: [libvirt PATCH v2 09/12] tools: support generating SEV secret injection tables

2022-10-26 Thread Dov Murik
On 26/10/2022 12:59, Daniel P. Berrangé wrote: > On Tue, Oct 25, 2022 at 07:38:43PM -0400, Cole Robinson wrote: >> On 10/19/22 6:17 AM, Daniel P. Berrangé wrote: >>> It is possible to build OVMF for SEV with an embedded Grub that can >>> fetch LUKS disk secrets. This adds support for injecting

Re: [libvirt PATCH v2 04/12] tools: support validating SEV direct kernel boot measurements

2022-10-26 Thread Daniel P . Berrangé
On Wed, Oct 26, 2022 at 02:57:33PM +0300, Dov Murik wrote: > (sorry in advance for missing CCs, I tried to download the mbox from > https://listman.redhat.com/archives/libvir-list/ but it doesn't include > the To and Cc lines of the messages.) > > > On 19/10/2022 13:17, berrange at redhat.com

Re: [libvirt PATCH v2 04/12] tools: support validating SEV direct kernel boot measurements

2022-10-26 Thread Dov Murik
(sorry in advance for missing CCs, I tried to download the mbox from https://listman.redhat.com/archives/libvir-list/ but it doesn't include the To and Cc lines of the messages.) On 19/10/2022 13:17, berrange at redhat.com (Daniel P. Berrangé) wrote: > When doing direct kernel boot we need to

Re: [PATCH] qemu: Report sev measurement value and nonce explicitly

2022-10-26 Thread Daniel P . Berrangé
On Tue, Oct 25, 2022 at 03:03:46PM -0400, Cole Robinson wrote: > On 10/17/22 3:42 AM, Michal Prívozník wrote: > > On 10/16/22 22:06, Cole Robinson wrote: > >> The value returned by qemu's query-sev-launch-measure comes > >> straight from the LAUNCH_MEASURE SEV firmware command. It's two > >>

Re: [libvirt PATCH] build: drop LINUGAS sorting rule

2022-10-26 Thread Andrea Bolognani
On Thu, Oct 20, 2022 at 02:10:51PM +0100, Daniel P. Berrangé wrote: > On Thu, Oct 20, 2022 at 03:06:23PM +0200, Ján Tomko wrote: > > A recent merge request from Weblate adding a new file fails syntax-check > > because it adds a new language at the end of LINGUAS, instead of sorting > > it

Re: [libvirt PATCH v2 09/12] tools: support generating SEV secret injection tables

2022-10-26 Thread Daniel P . Berrangé
On Tue, Oct 25, 2022 at 07:38:43PM -0400, Cole Robinson wrote: > On 10/19/22 6:17 AM, Daniel P. Berrangé wrote: > > It is possible to build OVMF for SEV with an embedded Grub that can > > fetch LUKS disk secrets. This adds support for injecting secrets in > > the required format. > > > >

[PATCH] NEWS: Document my contributions for upcoming release

2022-10-26 Thread Michal Privoznik
Signed-off-by: Michal Privoznik --- NEWS.rst | 22 ++ 1 file changed, 22 insertions(+) diff --git a/NEWS.rst b/NEWS.rst index 20541c6c6e..893ad6f370 100644 --- a/NEWS.rst +++ b/NEWS.rst @@ -17,6 +17,14 @@ v8.9.0 (unreleased) * **New features** + * qemu: Core Scheduling