* [PATCH v2] SUPPORT.md: add Dom0less as Supported
@ 2021-07-14 23:48 Stefano Stabellini
2021-07-15 8:47 ` Bertrand Marquis
` (2 more replies)
0 siblings, 3 replies; 7+ messages in thread
From: Stefano Stabellini @ 2021-07-14 23:48 UTC (permalink / raw)
To: xen-devel
Cc: sstabellini, julien, andrew.cooper3, george.dunlap, jbeulich,
iwj, wl, Stefano Stabellini
Add Dom0less to SUPPORT.md to clarify its support status. The feature is
mature enough and small enough to make it security supported.
Signed-off-by: Stefano Stabellini <stefano.stabellini@xilinx.com>
---
Changes in v2:
- clarify memory scrubbing
---
SUPPORT.md | 9 +++++++++
1 file changed, 9 insertions(+)
diff --git a/SUPPORT.md b/SUPPORT.md
index 317392d8f3..524cab9c8d 100644
--- a/SUPPORT.md
+++ b/SUPPORT.md
@@ -832,6 +832,15 @@ OVMF firmware implements the UEFI boot protocol.
Status, qemu-xen: Supported
+## Dom0less
+
+Guest creation from the hypervisor at boot without Dom0 intervention.
+
+ Status, ARM: Supported
+
+Memory of dom0less DomUs is not scrubbed at boot (even with
+bootscrub=on); no XSAs will be issues due to unscrubbed memory.
+
# Format and definitions
This file contains prose, and machine-readable fragments.
--
2.17.1
^ permalink raw reply related [flat|nested] 7+ messages in thread
* Re: [PATCH v2] SUPPORT.md: add Dom0less as Supported
2021-07-14 23:48 [PATCH v2] SUPPORT.md: add Dom0less as Supported Stefano Stabellini
@ 2021-07-15 8:47 ` Bertrand Marquis
2021-07-15 9:10 ` Julien Grall
2022-04-07 16:00 ` Julien Grall
2 siblings, 0 replies; 7+ messages in thread
From: Bertrand Marquis @ 2021-07-15 8:47 UTC (permalink / raw)
To: Stefano Stabellini
Cc: Xen-devel, julien, andrew.cooper3, george.dunlap, jbeulich, iwj,
wl, Stefano Stabellini
Hi Stefano,
> On 15 Jul 2021, at 00:48, Stefano Stabellini <sstabellini@kernel.org> wrote:
>
> Add Dom0less to SUPPORT.md to clarify its support status. The feature is
> mature enough and small enough to make it security supported.
>
> Signed-off-by: Stefano Stabellini <stefano.stabellini@xilinx.com>
Reviewed-by: Bertrand Marquis <bertrand.marquis@arm.com>
Cheers
Bertrand
> ---
> Changes in v2:
> - clarify memory scrubbing
> ---
> SUPPORT.md | 9 +++++++++
> 1 file changed, 9 insertions(+)
>
> diff --git a/SUPPORT.md b/SUPPORT.md
> index 317392d8f3..524cab9c8d 100644
> --- a/SUPPORT.md
> +++ b/SUPPORT.md
> @@ -832,6 +832,15 @@ OVMF firmware implements the UEFI boot protocol.
>
> Status, qemu-xen: Supported
>
> +## Dom0less
> +
> +Guest creation from the hypervisor at boot without Dom0 intervention.
> +
> + Status, ARM: Supported
> +
> +Memory of dom0less DomUs is not scrubbed at boot (even with
> +bootscrub=on); no XSAs will be issues due to unscrubbed memory.
> +
> # Format and definitions
>
> This file contains prose, and machine-readable fragments.
> --
> 2.17.1
>
>
^ permalink raw reply [flat|nested] 7+ messages in thread
* Re: [PATCH v2] SUPPORT.md: add Dom0less as Supported
2021-07-14 23:48 [PATCH v2] SUPPORT.md: add Dom0less as Supported Stefano Stabellini
2021-07-15 8:47 ` Bertrand Marquis
@ 2021-07-15 9:10 ` Julien Grall
2021-07-16 20:29 ` Stefano Stabellini
2022-04-07 16:00 ` Julien Grall
2 siblings, 1 reply; 7+ messages in thread
From: Julien Grall @ 2021-07-15 9:10 UTC (permalink / raw)
To: Stefano Stabellini, xen-devel
Cc: andrew.cooper3, george.dunlap, jbeulich, iwj, wl, Stefano Stabellini
Hi Stefano,
On 15/07/2021 00:48, Stefano Stabellini wrote:
> Add Dom0less to SUPPORT.md to clarify its support status. The feature is
> mature enough and small enough to make it security supported.
I would suggest to explain the restriction in the commit message (and
give a link to XSA-372 commit).
> Signed-off-by: Stefano Stabellini <stefano.stabellini@xilinx.com>
> ---
> Changes in v2:
> - clarify memory scrubbing
> ---
> SUPPORT.md | 9 +++++++++
> 1 file changed, 9 insertions(+)
>
> diff --git a/SUPPORT.md b/SUPPORT.md
> index 317392d8f3..524cab9c8d 100644
> --- a/SUPPORT.md
> +++ b/SUPPORT.md
> @@ -832,6 +832,15 @@ OVMF firmware implements the UEFI boot protocol.
>
> Status, qemu-xen: Supported
>
> +## Dom0less
> +
> +Guest creation from the hypervisor at boot without Dom0 intervention.
> +
> + Status, ARM: Supported
> +
> +Memory of dom0less DomUs is not scrubbed at boot (even with
> +bootscrub=on); no XSAs will be issues due to unscrubbed memory.
The memory will not be scrubbed for bootscrub=on and bootscrub=off.
However, it should be scrubbed for bootscrub=idle (the default).
Cheers,
--
Julien Grall
^ permalink raw reply [flat|nested] 7+ messages in thread
* Re: [PATCH v2] SUPPORT.md: add Dom0less as Supported
2021-07-15 9:10 ` Julien Grall
@ 2021-07-16 20:29 ` Stefano Stabellini
2021-07-19 6:57 ` Jan Beulich
0 siblings, 1 reply; 7+ messages in thread
From: Stefano Stabellini @ 2021-07-16 20:29 UTC (permalink / raw)
To: Julien Grall
Cc: Stefano Stabellini, xen-devel, andrew.cooper3, george.dunlap,
jbeulich, iwj, wl, Stefano Stabellini
On Thu, 15 Jul 2021, Julien Grall wrote:
> Hi Stefano,
>
> On 15/07/2021 00:48, Stefano Stabellini wrote:
> > Add Dom0less to SUPPORT.md to clarify its support status. The feature is
> > mature enough and small enough to make it security supported.
>
> I would suggest to explain the restriction in the commit message (and give a
> link to XSA-372 commit).
>
> > Signed-off-by: Stefano Stabellini <stefano.stabellini@xilinx.com>
> > ---
> > Changes in v2:
> > - clarify memory scrubbing
> > ---
> > SUPPORT.md | 9 +++++++++
> > 1 file changed, 9 insertions(+)
> >
> > diff --git a/SUPPORT.md b/SUPPORT.md
> > index 317392d8f3..524cab9c8d 100644
> > --- a/SUPPORT.md
> > +++ b/SUPPORT.md
> > @@ -832,6 +832,15 @@ OVMF firmware implements the UEFI boot protocol.
> > Status, qemu-xen: Supported
> > +## Dom0less
> > +
> > +Guest creation from the hypervisor at boot without Dom0 intervention.
> > +
> > + Status, ARM: Supported
> > +
> > +Memory of dom0less DomUs is not scrubbed at boot (even with
> > +bootscrub=on); no XSAs will be issues due to unscrubbed memory.
>
> The memory will not be scrubbed for bootscrub=on and bootscrub=off. However,
> it should be scrubbed for bootscrub=idle (the default).
With bootscrub=idle, do you know if it is guaranteed to complete the
scrubbing before dom0less domUs start? I assumed it wasn't guaranteed,
but if it is, then we should rephrase the statement.
^ permalink raw reply [flat|nested] 7+ messages in thread
* Re: [PATCH v2] SUPPORT.md: add Dom0less as Supported
2021-07-16 20:29 ` Stefano Stabellini
@ 2021-07-19 6:57 ` Jan Beulich
0 siblings, 0 replies; 7+ messages in thread
From: Jan Beulich @ 2021-07-19 6:57 UTC (permalink / raw)
To: Stefano Stabellini
Cc: xen-devel, andrew.cooper3, george.dunlap, iwj, wl,
Stefano Stabellini, Julien Grall
On 16.07.2021 22:29, Stefano Stabellini wrote:
> On Thu, 15 Jul 2021, Julien Grall wrote:
>> Hi Stefano,
>>
>> On 15/07/2021 00:48, Stefano Stabellini wrote:
>>> Add Dom0less to SUPPORT.md to clarify its support status. The feature is
>>> mature enough and small enough to make it security supported.
>>
>> I would suggest to explain the restriction in the commit message (and give a
>> link to XSA-372 commit).
>>
>>> Signed-off-by: Stefano Stabellini <stefano.stabellini@xilinx.com>
>>> ---
>>> Changes in v2:
>>> - clarify memory scrubbing
>>> ---
>>> SUPPORT.md | 9 +++++++++
>>> 1 file changed, 9 insertions(+)
>>>
>>> diff --git a/SUPPORT.md b/SUPPORT.md
>>> index 317392d8f3..524cab9c8d 100644
>>> --- a/SUPPORT.md
>>> +++ b/SUPPORT.md
>>> @@ -832,6 +832,15 @@ OVMF firmware implements the UEFI boot protocol.
>>> Status, qemu-xen: Supported
>>> +## Dom0less
>>> +
>>> +Guest creation from the hypervisor at boot without Dom0 intervention.
>>> +
>>> + Status, ARM: Supported
>>> +
>>> +Memory of dom0less DomUs is not scrubbed at boot (even with
>>> +bootscrub=on); no XSAs will be issues due to unscrubbed memory.
>>
>> The memory will not be scrubbed for bootscrub=on and bootscrub=off. However,
>> it should be scrubbed for bootscrub=idle (the default).
>
> With bootscrub=idle, do you know if it is guaranteed to complete the
> scrubbing before dom0less domUs start? I assumed it wasn't guaranteed,
> but if it is, then we should rephrase the statement.
Idle scrubbing never touches pages already owned by a domain. Hence the
question isn't whether scrubbing happens before these DomU-s start, but
whether they have their memory scrubbed before or while being allocated /
assigned to them. init_heap_pages() has
if ( system_state < SYS_STATE_active && opt_bootscrub == BOOTSCRUB_IDLE )
idle_scrub = true;
i.e. all memory given to the page allocator early enough will be _marked_
for scrubbing. If idle scrubbing didn't make it far enough,
alloc_heap_pages() will recognize this and scrub the page(s) synchronously
(of course unless passed MEMF_no_scrub).
Jan
^ permalink raw reply [flat|nested] 7+ messages in thread
* Re: [PATCH v2] SUPPORT.md: add Dom0less as Supported
2021-07-14 23:48 [PATCH v2] SUPPORT.md: add Dom0less as Supported Stefano Stabellini
2021-07-15 8:47 ` Bertrand Marquis
2021-07-15 9:10 ` Julien Grall
@ 2022-04-07 16:00 ` Julien Grall
2022-04-08 0:03 ` Stefano Stabellini
2 siblings, 1 reply; 7+ messages in thread
From: Julien Grall @ 2022-04-07 16:00 UTC (permalink / raw)
To: Stefano Stabellini, xen-devel
Cc: andrew.cooper3, george.dunlap, jbeulich, iwj, wl, Stefano Stabellini
Hi Stefano,
On 15/07/2021 00:48, Stefano Stabellini wrote:
> Add Dom0less to SUPPORT.md to clarify its support status. The feature is
> mature enough and small enough to make it security supported.
>
> Signed-off-by: Stefano Stabellini <stefano.stabellini@xilinx.com>
I was going through my inbox and notice this was no follow-up. Dom0less
is getting more traction, so I think it would be good for us to have a
support statement.
Is it still under your radar?
Cheers,
--
Julien Grall
^ permalink raw reply [flat|nested] 7+ messages in thread
* Re: [PATCH v2] SUPPORT.md: add Dom0less as Supported
2022-04-07 16:00 ` Julien Grall
@ 2022-04-08 0:03 ` Stefano Stabellini
0 siblings, 0 replies; 7+ messages in thread
From: Stefano Stabellini @ 2022-04-08 0:03 UTC (permalink / raw)
To: Julien Grall
Cc: Stefano Stabellini, xen-devel, andrew.cooper3, george.dunlap,
jbeulich, iwj, wl, Stefano Stabellini
On Thu, 7 Apr 2022, Julien Grall wrote:
> Hi Stefano,
>
> On 15/07/2021 00:48, Stefano Stabellini wrote:
> > Add Dom0less to SUPPORT.md to clarify its support status. The feature is
> > mature enough and small enough to make it security supported.
> >
> > Signed-off-by: Stefano Stabellini <stefano.stabellini@xilinx.com>
>
> I was going through my inbox and notice this was no follow-up. Dom0less is
> getting more traction, so I think it would be good for us to have a support
> statement.
>
> Is it still under your radar?
Totally fell through the cracks. I'll resend.
^ permalink raw reply [flat|nested] 7+ messages in thread
end of thread, other threads:[~2022-04-08 0:03 UTC | newest]
Thread overview: 7+ messages (download: mbox.gz / follow: Atom feed)
-- links below jump to the message on this page --
2021-07-14 23:48 [PATCH v2] SUPPORT.md: add Dom0less as Supported Stefano Stabellini
2021-07-15 8:47 ` Bertrand Marquis
2021-07-15 9:10 ` Julien Grall
2021-07-16 20:29 ` Stefano Stabellini
2021-07-19 6:57 ` Jan Beulich
2022-04-07 16:00 ` Julien Grall
2022-04-08 0:03 ` Stefano Stabellini
This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox;
as well as URLs for NNTP newsgroup(s).