Re: [libvirt] [PATCH v5 17/20] tpm: Pass migration key passphrase via fd to swtpm

2019-07-25 Thread Stefan Berger
On 7/25/19 5:58 AM, Daniel P. Berrangé wrote: On Fri, Jul 12, 2019 at 12:23:51PM -0400, Stefan Berger wrote: This patch now passes the passphrase as a migration key to swtpm. This now encrypts the state of the TPM while a VM is migrated between hosts or when suspended into a file. Since the

Re: [libvirt] [PATCH v5 17/20] tpm: Pass migration key passphrase via fd to swtpm

2019-07-25 Thread Daniel P . Berrangé
On Fri, Jul 12, 2019 at 12:23:51PM -0400, Stefan Berger wrote: > This patch now passes the passphrase as a migration key to swtpm. > This now encrypts the state of the TPM while a VM is migrated between > hosts or when suspended into a file. Since the migration key secret > is the same as the

[libvirt] [PATCH v5 17/20] tpm: Pass migration key passphrase via fd to swtpm

2019-07-12 Thread Stefan Berger
This patch now passes the passphrase as a migration key to swtpm. This now encrypts the state of the TPM while a VM is migrated between hosts or when suspended into a file. Since the migration key secret is the same as the state encryption secret, this now requires that the migration destination