From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: Received: (majordomo@vger.kernel.org) by vger.kernel.org via listexpand id S1755504AbdIFQmN (ORCPT ); Wed, 6 Sep 2017 12:42:13 -0400 Received: from mx2.suse.de ([195.135.220.15]:49536 "EHLO mx1.suse.de" rhost-flags-OK-OK-OK-FAIL) by vger.kernel.org with ESMTP id S1754251AbdIFQmK (ORCPT ); Wed, 6 Sep 2017 12:42:10 -0400 Date: Wed, 6 Sep 2017 18:41:59 +0200 From: Borislav Petkov To: Brijesh Singh Cc: linux-kernel@vger.kernel.org, x86@kernel.org, kvm@vger.kernel.org, Thomas Gleixner , Joerg Roedel , "Michael S . Tsirkin" , Paolo Bonzini , Radim =?utf-8?B?S3LEjW3DocWZ?= , Tom Lendacky Subject: Re: [RFC Part2 PATCH v3 01/26] Documentation/virtual/kvm: Add AMD Secure Encrypted Virtualization (SEV) Message-ID: <20170906164159.2ysrftypnx2ameqp@pd.tnic> References: <20170724200303.12197-1-brijesh.singh@amd.com> <20170724200303.12197-2-brijesh.singh@amd.com> <20170905172130.24fgl6xsrfovsbsp@pd.tnic> MIME-Version: 1.0 Content-Type: text/plain; charset=utf-8 Content-Disposition: inline Content-Transfer-Encoding: 8bit In-Reply-To: User-Agent: NeoMutt/20170113 (1.7.2) Sender: linux-kernel-owner@vger.kernel.org List-ID: X-Mailing-List: linux-kernel@vger.kernel.org On Tue, Sep 05, 2017 at 04:39:14PM -0500, Brijesh Singh wrote: > Not sure if we need to document the complete measurement flow in the > driver doc. No, not the whole thing - only summarized in a couple of sentences with the link to the doc. > I was trying to keep everything to 80 column limit but if that is > not an issue for documentation then I like your recommendation. That rule is not a hard one - rather, it is to human discretion what is better - readability or fitting on some small screen, no one uses anymore. > The command does not require explicit parameter to differentiate between > live migration vs snapshot. All it needs is a destination platform > PDH key. If its live migration case then VM management stack will probably > communicate with remote platform and get its PDH keys before calling us. > The KVM driver simply acts upon the request from the userspace. SEV firmware > spec Appendix A [1] provides complete flow diagram which need to be implemented > in userspace. The driver simply act upon when it asked to create SEND_START > context. Ok, so that only creates the context after sending the PDH cert into the firmware. So please state that first and then what the command can be used for. The way it is written now, it reads like it does the sending of the guest. Thx. -- Regards/Gruss, Boris. SUSE Linux GmbH, GF: Felix Imendörffer, Jane Smithard, Graham Norton, HRB 21284 (AG Nürnberg) --