similar to: TPM

On onsdag 29 augusti 2018 kl. 10:00:39 EEST Sandro Bonazzola wrote: > 2018-08-28 13:52 GMT+02:00 Dag Nygren <dag at newtech.fi>: > > > We have a desperate need for TPM support and: > > > > 1. Tried the "standard" distro install. linvirt supports > > TPM passthrough but kvm-qemu barfs: > > "unsupported configuration: The QEMU executable

On onsdag 29 augusti 2018 kl. 15:37:47 EEST Alvin Starr wrote: > On 08/29/2018 07:38 AM, Dag Nygren wrote: > > > On onsdag 29 augusti 2018 kl. 10:00:39 EEST Sandro Bonazzola wrote: > >> 2018-08-28 13:52 GMT+02:00 Dag Nygren <dag at newtech.fi>: > >> > >>> We have a desperate need for TPM support and: > >>> > >>> 1. Tried the

On 08/29/2018 07:38 AM, Dag Nygren wrote: > On onsdag 29 augusti 2018 kl. 10:00:39 EEST Sandro Bonazzola wrote: >> 2018-08-28 13:52 GMT+02:00 Dag Nygren <dag at newtech.fi>: >> >>> We have a desperate need for TPM support and: >>> >>> 1. Tried the "standard" distro install. linvirt supports >>> TPM passthrough but kvm-qemu

2018-08-28 13:52 GMT+02:00 Dag Nygren <dag at newtech.fi>: > Hi all! > > Just setting up a cluster using Centos 7 > > We have a desperate need for TPM support and: > > 1. Tried the "standard" distro install. linvirt supports > TPM passthrough but kvm-qemu barfs: > "unsupported configuration: The QEMU executable /usr/libexec/qemu-kvm > does

On onsdag 29 augusti 2018 kl. 17:39:18 EEST Stephen John Smoogen wrote: > On Wed, 29 Aug 2018 at 10:25, Dag Nygren <dag at newtech.fi> wrote: > > Anyone here with an experience in transitioning QEMU -> XEN ? > http://www.cse.psu.edu/~pdm12/cse544/slides/cse544-schiffman-vTPM.pdf goes > through some of the problems. Yes, I had a look at that earlier and it seems XEN has

On Thu, Jul 09, 2020 at 14:14:32 +0200, Milan Zamazal wrote: > Milan Zamazal <mzamazal@redhat.com> writes: > > > Hi, > > > > I would like to clarify how to make snapshots of running VMs with > > emulated TPM devices. As far as I understand QEMU documentation, it's > > possible to make snapshots of running VMs with TPM, but it's important >

Hi, I would like to clarify how to make snapshots of running VMs with emulated TPM devices. As far as I understand QEMU documentation, it's possible to make snapshots of running VMs with TPM, but it's important to retain the state of swtpm. Does libvirt assist with that in any way or is it completely user's responsibility? libvirt pauses the VM internally when making a snapshot,

On onsdag 29 augusti 2018 kl. 15:37:47 EEST Alvin Starr wrote: > You could try using Xen. > A quick search implies that Xen from 4.3 onward will virtualize TPM. > I am not sure if the libvirt drivers for xen will support the feature > but some work around may be possible. Nice attitude and helpfulness in this list! Just had a look and it doesn't seem to be that an intrusive

On Thu, Jul 09, 2020 at 17:54:23 +0200, Milan Zamazal wrote: > Peter Krempa <pkrempa@redhat.com> writes: > > > On Thu, Jul 09, 2020 at 14:14:32 +0200, Milan Zamazal wrote: > >> Milan Zamazal <mzamazal@redhat.com> writes: > >> > > > >> > Hi, > >> > > >> > I would like to clarify how to make snapshots of running

On torsdag 13 september 2018 kl. 12:58:03 EEST George Dunlap wrote: > Dag, > Just verified after a lengthy compilation of the kernel that the patch really works and now I can see a TPM on the virtual side! > Thanks for tracking this down. Any chance you could send a PR to > https://github.com/CentOS-virt7/xen-kernel? I will definitely join that mailing list. Have a feeling this is

Hi. I am very interested in the security properties a totally open TPM can give our users? - its use as a universal smartcard to protect all types of keys. When adding the virtual 1.2 or 2.0 TPM I get the vague error below. OS is Debian stable with standard packages. Error starting domain: Unable to find 'swtpm' binary in $PATH: No such file or directory Traceback (most recent call

Hi again! Succeeded in creating vtpmmgr-stubdom.gz from the source RPM with some shortcuts. ow the next problem seems to be that the libvirt we have will not support the XEN vtpm:s For example: virsh dumpxml <vm-machine> will not contain any info on the vtpm :-( Am I really the first one around with a need for TPM support in the VM:s ?? Best Dag

Hi! Think I found a reference to the problem(s) I am seeing with xen-tpmfront in my setup on the net: https://patchwork.kernel.org/patch/9485637/ This patch has not been officially entered and it is not included in the kernel provided in SIG virt either Can we please get it in ? Best Dag

On 08/29/2018 12:08 PM, Stephen John Smoogen wrote: > > > On Wed, 29 Aug 2018 at 11:58, Dag Nygren <dag at newtech.fi > <mailto:dag at newtech.fi>> wrote: > > On onsdag 29 augusti 2018 kl. 17:39:18 EEST Stephen John Smoogen > wrote: > > On Wed, 29 Aug 2018 at 10:25, Dag Nygren <dag at newtech.fi > <mailto:dag at newtech.fi>>

On Sat, Oct 05, 2019 at 02:32:19PM +0000, procmem@riseup.net wrote: >Hi. I am very interested in the security properties a totally open TPM >can give our users  - its use as a universal smartcard to protect all >types of keys. When adding the virtual 1.2 or 2.0 TPM I get the vague >error below. OS is Debian stable with standard packages. > > >Error starting domain: Unable to

Peter Krempa <pkrempa@redhat.com> writes: > On Thu, Jul 09, 2020 at 14:14:32 +0200, Milan Zamazal wrote: >> Milan Zamazal <mzamazal@redhat.com> writes: >> > >> > Hi, >> > >> > I would like to clarify how to make snapshots of running VMs with >> > emulated TPM devices. As far as I understand QEMU documentation, it's >>

On Sat, 2019-10-05 at 14:32 +0000, procmem@riseup.net wrote: > Hi. I am very interested in the security properties a totally open TPM > can give our users - its use as a universal smartcard to protect all > types of keys. When adding the virtual 1.2 or 2.0 TPM I get the vague > error below. OS is Debian stable with standard packages. > > > Error starting domain: Unable to

On Mon, 2019-10-07 at 13:26 +0000, procmem@riseup.net wrote: > On 10/7/19 7:31 AM, Andrea Bolognani wrote: > > On Sat, 2019-10-05 at 14:32 +0000, procmem@riseup.net wrote: > > > Hi. I am very interested in the security properties a totally open TPM > > > can give our users - its use as a universal smartcard to protect all > > > types of keys. When adding the

Milan Zamazal <mzamazal@redhat.com> writes: > Hi, > > I would like to clarify how to make snapshots of running VMs with > emulated TPM devices. As far as I understand QEMU documentation, it's > possible to make snapshots of running VMs with TPM, but it's important > to retain the state of swtpm. Does libvirt assist with that in any way > or is it completely

On Wed, 29 Aug 2018 at 11:58, Dag Nygren <dag at newtech.fi> wrote: > On onsdag 29 augusti 2018 kl. 17:39:18 EEST Stephen John Smoogen wrote: > > On Wed, 29 Aug 2018 at 10:25, Dag Nygren <dag at newtech.fi> wrote: > > > > Anyone here with an experience in transitioning QEMU -> XEN ? > > >