On 12/4/20 6:44 AM, David Gibson wrote: > Currently the "memory-encryption" property is only looked at once we > get to kvm_init(). Although protection of guest memory from the > hypervisor isn't something that could really ever work with TCG, it's > not conceptually tied to the KVM accelerator. > > In addition, the way the string property is resolved to an object is > almost identical to how a QOM link property is handled. > > So, create a new "securable-guest-memory" link property which sets > this QOM interface link directly in the machine. For compatibility we > keep the "memory-encryption" property, but now implemented in terms of > the new property. > > Signed-off-by: David Gibson <david@xxxxxxxxxxxxxxxxxxxxx> > Reviewed-by: Richard Henderson <richard.henderson@xxxxxxxxxx> > --- > accel/kvm/kvm-all.c | 22 ++++++---------------- > hw/core/machine.c | 43 +++++++++++++++++++++++++++++++++++++------ > include/hw/boards.h | 2 +- > 3 files changed, 44 insertions(+), 23 deletions(-) Reviewed-by: Philippe Mathieu-Daudé <philmd@xxxxxxxxxx>