Re: [Qemu-devel] Emulation of TCG OPAL self-encrypting drive

2019-01-24 Thread John Snow
On 1/24/19 5:24 AM, David Kozub wrote: >> > > libata seems to support SCSI / ATA Translation, including ATA PASS > THROUGH (12) and ATA PASS THROUGH (16). Is this not sufficient? (The > implementation can be seen in ata_scsi_pass_thru.) > Oh, I missed this! Thanks for pointing it out. I'll ta

Re: [Qemu-devel] Emulation of TCG OPAL self-encrypting drive

2019-01-24 Thread David Kozub
On Wed, 23 Jan 2019, John Snow wrote: On 1/23/19 5:39 PM, David Kozub wrote: On Thu, 17 Jan 2019, John Snow wrote: I think SG_IO IOCTL allows one to send a single ATA command and the call blocks until the request is processed. The problem(?) with this is that you don't get to choose the AT

Re: [Qemu-devel] Emulation of TCG OPAL self-encrypting drive

2019-01-23 Thread John Snow
On 1/23/19 5:39 PM, David Kozub wrote: > On Thu, 17 Jan 2019, John Snow wrote: > >> Admittedly I'm not too sure of how the ATA support in Linux works to >> know what the passthrough would actually look like, bit-wise. I know >> there's some SCSI abstraction layer that can drive ATA devices, but

Re: [Qemu-devel] Emulation of TCG OPAL self-encrypting drive

2019-01-23 Thread David Kozub
On Thu, 17 Jan 2019, John Snow wrote: Admittedly I'm not too sure of how the ATA support in Linux works to know what the passthrough would actually look like, bit-wise. I know there's some SCSI abstraction layer that can drive ATA devices, but I'm not completely clear on the actual plumbing. How

Re: [Qemu-devel] Emulation of TCG OPAL self-encrypting drive

2019-01-17 Thread John Snow
On 1/17/19 6:04 PM, David Kozub wrote: > On Wed, 16 Jan 2019, John Snow wrote: > >> I can answer some questions about the ATA layer, but I'm not well read >> on OPAL or the interrelationship between the two. >> >> We don't have an ATA-style passthrough in QEMU right now and nobody has >> ever a

Re: [Qemu-devel] Emulation of TCG OPAL self-encrypting drive

2019-01-17 Thread David Kozub
On Wed, 16 Jan 2019, John Snow wrote: I can answer some questions about the ATA layer, but I'm not well read on OPAL or the interrelationship between the two. We don't have an ATA-style passthrough in QEMU right now and nobody has ever asked! Would you mind elaborating for me what kind of setup

Re: [Qemu-devel] Emulation of TCG OPAL self-encrypting drive

2019-01-16 Thread John Snow
On 1/7/19 4:16 AM, Stefan Hajnoczi wrote: > On Sat, Jan 05, 2019 at 07:27:03PM +0100, David Kozub wrote: >> Hi, >> >> Can QEMU emulate an OPAL disk? The only relevant thing I found is a post >> from 2017 about TPM that mentions OPAL: >> https://lists.gnu.org/archive/html/qemu-devel/2017-07/msg04

Re: [Qemu-devel] Emulation of TCG OPAL self-encrypting drive

2019-01-10 Thread Stefan Hajnoczi
On Thu, Jan 10, 2019 at 12:05:32AM +0100, David Kozub wrote: > On Mon, 7 Jan 2019, Stefan Hajnoczi wrote: > > > QEMU supports LUKS encrypted disk images so no new code is needed for > > the actual encryption. > > Thanks for the feedback, Stefan. I know very little about qemu internals (I > looked

Re: [Qemu-devel] Emulation of TCG OPAL self-encrypting drive

2019-01-09 Thread David Kozub
On Mon, 7 Jan 2019, Stefan Hajnoczi wrote: QEMU supports LUKS encrypted disk images so no new code is needed for the actual encryption. Thanks for the feedback, Stefan. I know very little about qemu internals (I looked around a bit). One issue is: OPAL needs some persistent data outside of t

Re: [Qemu-devel] Emulation of TCG OPAL self-encrypting drive

2019-01-07 Thread Stefan Hajnoczi
On Sat, Jan 05, 2019 at 07:27:03PM +0100, David Kozub wrote: > Hi, > > Can QEMU emulate an OPAL disk? The only relevant thing I found is a post > from 2017 about TPM that mentions OPAL: > https://lists.gnu.org/archive/html/qemu-devel/2017-07/msg04586.html CCing John Snow (IDE/ATA) and Kevin Wolf

[Qemu-devel] Emulation of TCG OPAL self-encrypting drive

2019-01-05 Thread David Kozub
Hi, Can QEMU emulate an OPAL disk? The only relevant thing I found is a post from 2017 about TPM that mentions OPAL: https://lists.gnu.org/archive/html/qemu-devel/2017-07/msg04586.html specifically this bit: Well, at some point somebody's going to want us to implement this, but... they can d