The unpack facility provides the means to setup a protected guest. A protected guest cannot be introspected by the hypervisor or any user/administrator of the machine it is running on. Protected guests are encrypted at rest and need a special boot mechanism via diag308 subcode 8 and 10. Code 8 sets the PV specific IPLB which is retained separately from those set via code 5. Code 10 is used to unpack the VM into protected memory, verify its integrity and start it. Signed-off-by: Janosch Frank <frankja@linux.ibm.com> Co-developed-by: Christian Borntraeger <borntraeger@de.ibm.com> [Changes to machine] Reviewed-by: David Hildenbrand <david@redhat.com> Reviewed-by: Claudio Imbrenda <imbrenda@linux.ibm.com> Reviewed-by: Cornelia Huck <cohuck@redhat.com> Message-Id: <20200323083606.24520-1-frankja@linux.ibm.com> [CH: fixed up KVM_PV_VM_ -> KVM_PV_] Signed-off-by: Cornelia Huck <cohuck@redhat.com>
38 lines
1.2 KiB
Makefile
38 lines
1.2 KiB
Makefile
obj-y += s390-virtio-hcall.o
|
|
obj-y += sclp.o
|
|
obj-y += event-facility.o
|
|
obj-y += sclpquiesce.o
|
|
obj-y += sclpcpu.o
|
|
obj-y += ipl.o
|
|
obj-y += css.o
|
|
obj-$(CONFIG_S390_CCW_VIRTIO) += s390-virtio-ccw.o
|
|
obj-$(CONFIG_TERMINAL3270) += 3270-ccw.o
|
|
ifeq ($(CONFIG_VIRTIO_CCW),y)
|
|
obj-y += virtio-ccw.o
|
|
obj-$(CONFIG_VIRTIO_SERIAL) += virtio-ccw-serial.o
|
|
obj-$(CONFIG_VIRTIO_BALLOON) += virtio-ccw-balloon.o
|
|
obj-$(CONFIG_VIRTIO_SCSI) += virtio-ccw-scsi.o
|
|
obj-$(CONFIG_VIRTIO_RNG) += virtio-ccw-rng.o
|
|
obj-$(CONFIG_VIRTIO_CRYPTO) += virtio-ccw-crypto.o
|
|
obj-$(CONFIG_VIRTIO_GPU) += virtio-ccw-gpu.o
|
|
obj-$(CONFIG_VIRTIO_INPUT) += virtio-ccw-input.o
|
|
obj-$(CONFIG_VIRTIO_NET) += virtio-ccw-net.o
|
|
obj-$(CONFIG_VIRTIO_BLK) += virtio-ccw-blk.o
|
|
obj-$(call land,$(CONFIG_VIRTIO_9P),$(CONFIG_VIRTFS)) += virtio-ccw-9p.o
|
|
obj-$(CONFIG_VHOST_VSOCK) += vhost-vsock-ccw.o
|
|
endif
|
|
obj-y += css-bridge.o
|
|
obj-y += ccw-device.o
|
|
obj-y += s390-pci-bus.o s390-pci-inst.o
|
|
obj-y += s390-skeys.o
|
|
obj-y += s390-stattrib.o
|
|
obj-y += tod.o
|
|
obj-y += tod-qemu.o
|
|
obj-$(CONFIG_KVM) += tod-kvm.o
|
|
obj-$(CONFIG_KVM) += s390-skeys-kvm.o
|
|
obj-$(CONFIG_KVM) += s390-stattrib-kvm.o
|
|
obj-$(CONFIG_KVM) += pv.o
|
|
obj-y += s390-ccw.o
|
|
obj-y += ap-device.o
|
|
obj-y += ap-bridge.o
|