Re: [PATCH v3 00/37] KVM: s390: Add support for protected VMs

[David Hildenbrand <david@redhat.com>]

> In fact you can do that. The hardware checks the integrity on guest physical
> address. So it is perfectly possible to remap a kvm slot as long as the
> eńcrypted content matches what counter, guest content hash and guest address
> tell. (It is like swapping, you move the encrypted content from one host 
> page to another). 
> For new pages (not unpacked and never touched by the guest) the ultravisor
> will bring a zeroed out page on first import.
> 
> What does not work is when the user space address changes for a guest
> virtio indicator. But this was already broken before (we never did an
> adapter unmap/remap).
> 

Thanks for the info!

>>
>> Can we get a new version once the other reviewers are done, so at least
>> I can have a final look?
> 
> Just the updated patches as reply (e.g. a 3.2 for patch 9) or the full monty?

Whatever you others prefer. I can see that Conny has some feedback.
maybe wait for that and then (selectively) resend.


-- 
Thanks,

David / dhildenb