Re: [RFC PATCH 0/4] Multi-instance vTPM driver

[Jarkko Sakkinen <jarkko.sakkinen-VuQAYsv1563Yd54FQh9/CA@public.gmane.org>]

On Mon, Jan 25, 2016 at 07:28:35PM -0500, Stefan Berger wrote:
> Jarkko Sakkinen <jarkko.sakkinen-VuQAYsv1563Yd54FQh9/CA@public.gmane.org> wrote on 01/25/2016 06:15:32
> PM:
> 
> >
> > On Fri, Jan 15, 2016 at 08:02:52AM -0500, Stefan Berger wrote:
> > > Jarkko Sakkinen <jarkko.sakkinen-VuQAYsv1563Yd54FQh9/CA@public.gmane.org> wrote on 01/15/
> > 2016 05:11:46
> > > AM:
> > >
> > > >
> > > > On Thu, Jan 14, 2016 at 11:01:54AM -0500, Stefan Berger wrote:
> > > > > From: Stefan Berger <stefanb-0rqouEpbLJlpnrxNGchxj0EOCMrvLtNR@public.gmane.org>
> > > > >
> > > > > The following series of patches implements a multi-instance vTPM driver
> > > > > that can dynamically create TPM 'server' and client device pairs.
> > > > >
> > > > > Using ioctl's on the provided /dev/vtpmx, a server and a client
> > > > > side vTPM device can be created. The server side offers a /dev/vtpms%d
> > > > > device and a TPM emulator must be started on it to listen for
> > TPM commands
> > > > > that are written to /dev/vtpmc%d, which is created by the core
> > TPM driver.
> > > > >
> > > > > The primary goal of this series of patches is enabling vTPM
> > for containers
> > > > > and hooking them up to a (future) namespaced IMA. However, thedriver
> can
> > > > > also be used for simulating a hardware TPM on the host.
> > > > >
> > > > > The last patch provides a test program for controlling device pairs.
> > > >
> > > > I like the idea. Looking into this in more detail after the next pull
> > > > request. Thanks!
> > >
> > > Thank you. I actually found some issues in the code yesterday, so
> > I eventually
> > > will need to repost.
> > > I may put the latest on a public git repo in case someone wants to test.
> >
> > I haven't yet reviewed the first version nor read the discussion you and
> > Jason have had (except for some distinct emails). The main reasons is
> > that I haven't received any feedback to some questions I've asked... One
> > of the most important has been is there any documentation for vTPM?
> 
> If necessary I can add documentation for the vTPM driver to the patch.
> 
> Otherwise there are man pages in this project here that at least explain the
> command line parameters and tools for the vTPM.
> 
> https://github.com/stefanberger/swtpm/blob/master/man/man8
> 
> example:
> 
> https://github.com/stefanberger/swtpm/blob/master/man/man8/swtpm.pod

Sorry this was my bad! I haven't had chance to read the patches before
today. I got a good understanding how  it is done by reading the source
and am now in the process of compiling it.

>     Stefan

/Jarkko

------------------------------------------------------------------------------
Site24x7 APM Insight: Get Deep Visibility into Application Performance
APM + Mobile APM + RUM: Monitor 3 App instances at just $35/Month
Monitor end-to-end web transactions and take corrective actions now
Troubleshoot faster and improve end-user experience. Signup Now!
http://pubads.g.doubleclick.net/gampad/clk?id=267308311&iu=/4140