Hi, Sean,
Do you think we can have a quick sync about the re-assess for pKVM on x86?
Thanks
-----Original Message-----
From: Sean Christopherson <seanjc@xxxxxxxxxx>
Sent: 2023年9月20日 7:50
To: Christopherson,, Sean <seanjc@xxxxxxxxxx>
Cc: kvm@xxxxxxxxxxxxxxx; linux-kernel@xxxxxxxxxxxxxxx
Subject: [ANNOUNCE] PUCK Agenda - 2023.09.20 - No Topic (Office Hours)
No topic this week. Feel free to come with questions about upstream processes, the status or direction of a particular series, KVM technical details, etc.
Note! The next three instances after this are canceled, as I will either be unavailable or OOO.
Date: 2023.09.20 (September 20th)
Time: 6am PDT
Video: https://meet.google.com/vdb-aeqo-knk
Phone: https://tel.meet/vdb-aeqo-knk?pin=3003112178656
Calendar: https://calendar.google.com/calendar/u/0?cid=Y182MWE1YjFmNjQ0NzM5YmY1YmVkN2U1ZWE1ZmMzNjY5Y2UzMmEyNTQ0YzVkYjFjN2M4OTE3MDJjYTUwOTBjN2Q1QGdyb3VwLmNhbGVuZGFyLmdvb2dsZS5jb20
Drive: https://drive.google.com/drive/folders/1aTqCrvTsQI9T4qLhhLs_l986SngGlhPH?resourcekey=0-FDy0ykM3RerZedI8R-zj4A&usp=drive_link
Future Schedule:
September 27th - Canceled (Sean Unvailable)
October 4th - Canceled (Sean Unvailable)
October 11th - Canceled (Sean OOO)
October 18th - Available!
--- Begin Message ---
- Subject: [ANNOUNCE] PUCK Notes - 2023.06.07 - pKVM on x86
- From: "Christopherson,, Sean" <seanjc@xxxxxxxxxx>
- Date: Tue, 13 Jun 2023 17:33:05 +0000
- Cc: "Christopherson,, Sean" <seanjc@xxxxxxxxxx>, "linux-kernel@xxxxxxxxxxxxxxx" <linux-kernel@xxxxxxxxxxxxxxx>
- Reply-to: "Christopherson,, Sean" <seanjc@xxxxxxxxxx>
Apologies for the slow update, I was waiting for the recording to become
available and was OOO Th/F last week.
Key Takeaways:
- Primary use case is to secure workloads that process/handle sensitive
biometric data (e.g. fingerprints, face authentication).
- SEAM is a poor fit as it doesn't provide mechanisms to restrict access to
non-DRAM "memory", e.g. access to the hardware devices that provide biometric
data. And there's no line of sight to an AMD equivalent.
- pKVM support requires few changes outside of KVM (though the changes to KVM
are extensive).
Next Steps:
- Re-assess in 3-4 weeks after people have had a chance to read through and
review the RFC patches.
Recording:
https://drive.google.com/file/d/1JZ6e8ZgR2gUfB4uBYxsJUxp1KVL5YEA_/view?usp=drive_link&resourcekey=0-MGjMLec-8JEIFC3-vmZeLg
--- End Message ---