From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: X-Spam-Checker-Version: SpamAssassin 3.4.0 (2014-02-07) on aws-us-west-2-korg-lkml-1.web.codeaurora.org X-Spam-Level: X-Spam-Status: No, score=-2.3 required=3.0 tests=HEADER_FROM_DIFFERENT_DOMAINS, MAILING_LIST_MULTI,SPF_HELO_NONE,SPF_PASS,USER_AGENT_SANE_1 autolearn=no autolearn_force=no version=3.4.0 Received: from mail.kernel.org (mail.kernel.org [198.145.29.99]) by smtp.lore.kernel.org (Postfix) with ESMTP id 417D9C28CBC for ; Sat, 9 May 2020 19:21:30 +0000 (UTC) Received: from vger.kernel.org (vger.kernel.org [23.128.96.18]) by mail.kernel.org (Postfix) with ESMTP id 1C77720644 for ; Sat, 9 May 2020 19:21:30 +0000 (UTC) Received: (majordomo@vger.kernel.org) by vger.kernel.org via listexpand id S1728309AbgEITV3 (ORCPT ); Sat, 9 May 2020 15:21:29 -0400 Received: from jabberwock.ucw.cz ([46.255.230.98]:51526 "EHLO jabberwock.ucw.cz" rhost-flags-OK-OK-OK-OK) by vger.kernel.org with ESMTP id S1727938AbgEITV3 (ORCPT ); Sat, 9 May 2020 15:21:29 -0400 Received: by jabberwock.ucw.cz (Postfix, from userid 1017) id 1EEA61C0257; Sat, 9 May 2020 21:21:27 +0200 (CEST) Date: Sat, 9 May 2020 21:21:25 +0200 From: Pavel Machek To: "Paraschiv, Andra-Irina" Cc: Paolo Bonzini , linux-kernel@vger.kernel.org, Anthony Liguori , Benjamin Herrenschmidt , Colm MacCarthaigh , Bjoern Doebel , David Woodhouse , Frank van der Linden , Alexander Graf , Martin Pohlack , Matt Wilson , Balbir Singh , Stewart Smith , Uwe Dannowski , kvm@vger.kernel.org, ne-devel-upstream@amazon.com Subject: Re: [PATCH v1 00/15] Add support for Nitro Enclaves Message-ID: <20200509192125.GA1597@bug> References: <20200421184150.68011-1-andraprs@amazon.com> <18406322-dc58-9b59-3f94-88e6b638fe65@redhat.com> <2a4a15c5-7adb-c574-d558-7540b95e2139@redhat.com> <20200507174438.GB1216@bug> <620bf5ae-eade-37da-670d-a8704d9b4397@amazon.com> MIME-Version: 1.0 Content-Type: text/plain; charset=us-ascii Content-Disposition: inline In-Reply-To: <620bf5ae-eade-37da-670d-a8704d9b4397@amazon.com> User-Agent: Mutt/1.5.23 (2014-03-12) Sender: linux-kernel-owner@vger.kernel.org Precedence: bulk List-ID: X-Mailing-List: linux-kernel@vger.kernel.org On Fri 2020-05-08 10:00:27, Paraschiv, Andra-Irina wrote: > > > On 07/05/2020 20:44, Pavel Machek wrote: > > > >Hi! > > > >>>it uses its own memory and CPUs + its virtio-vsock emulated device for > >>>communication with the primary VM. > >>> > >>>The memory and CPUs are carved out of the primary VM, they are dedicated > >>>for the enclave. The Nitro hypervisor running on the host ensures memory > >>>and CPU isolation between the primary VM and the enclave VM. > >>> > >>>These two components need to reflect the same state e.g. when the > >>>enclave abstraction process (1) is terminated, the enclave VM (2) is > >>>terminated as well. > >>> > >>>With regard to the communication channel, the primary VM has its own > >>>emulated virtio-vsock PCI device. The enclave VM has its own emulated > >>>virtio-vsock device as well. This channel is used, for example, to fetch > >>>data in the enclave and then process it. An application that sets up the > >>>vsock socket and connects or listens, depending on the use case, is then > >>>developed to use this channel; this happens on both ends - primary VM > >>>and enclave VM. > >>> > >>>Let me know if further clarifications are needed. > >>Thanks, this is all useful. However can you please clarify the > >>low-level details here? > >Is the virtual machine manager open-source? If so, I guess pointer for sources > >would be useful. > > Hi Pavel, > > Thanks for reaching out. > > The VMM that is used for the primary / parent VM is not open source. Do we want to merge code that opensource community can not test? Pavel -- (english) http://www.livejournal.com/~pavelmachek (cesky, pictures) http://atrey.karlin.mff.cuni.cz/~pavel/picture/horses/blog.html