> In fact you can do that. The hardware checks the integrity on guest physical > address. So it is perfectly possible to remap a kvm slot as long as the > eńcrypted content matches what counter, guest content hash and guest address > tell. (It is like swapping, you move the encrypted content from one host > page to another). > For new pages (not unpacked and never touched by the guest) the ultravisor > will bring a zeroed out page on first import. > > What does not work is when the user space address changes for a guest > virtio indicator. But this was already broken before (we never did an > adapter unmap/remap). > Thanks for the info! >> >> Can we get a new version once the other reviewers are done, so at least >> I can have a final look? > > Just the updated patches as reply (e.g. a 3.2 for patch 9) or the full monty? Whatever you others prefer. I can see that Conny has some feedback. maybe wait for that and then (selectively) resend. -- Thanks, David / dhildenb
