On 01/31/2018 11:45 AM, Markus Armbruster wrote:
Brijesh Singh <brijesh.singh@xxxxxxx> writes:
Add SEV_MEASUREMENT event which can be used by libvirt to get the
measurement of the memory regions encrypted through the SEV launch
flow. The measurement value is base64 encoded.
Cc: Daniel P. Berrange <berrange@xxxxxxxxxx>
Cc: Eric Blake <eblake@xxxxxxxxxx>
Cc: Markus Armbruster <armbru@xxxxxxxxxx>
Signed-off-by: Brijesh Singh <brijesh.singh@xxxxxxx>
---
qapi-schema.json | 13 +++++++++++++
1 file changed, 13 insertions(+)
diff --git a/qapi-schema.json b/qapi-schema.json
index 2046c96669bf..e1f5d14e2e3f 100644
--- a/qapi-schema.json
+++ b/qapi-schema.json
@@ -3192,3 +3192,16 @@
# Since: 2.11
##
{ 'command': 'watchdog-set-action', 'data' : {'action': 'WatchdogAction'} }
+
+##
+# @SEV_MEASUREMENT:
+#
+# Emitted when measurement is available for the SEV guest.
+#
+# @value: measurement value encoded in base64
+#
+# Since: 2.12
+#
+##
+{ 'event' : 'SEV_MEASUREMENT',
+ 'data' : { 'value' : 'str' } }
New event -> automatic question: do we need a way to poll for this
information? Say when an event could get lost during a libvirt restart.
In our initial SEV patches for libvirt we ran into similar cases where
the event was dropped on restart, and now leaning towards dropping this
event patch and add a new QMP command which can be used by libvirt to
retrieve the measurement.