Re: [PATCH v4 4/6] sev/i386: Don't allow a system reset under an SEV-ES guest

2021-01-26 Thread Tom Lendacky
On 1/26/21 10:16 AM, Paolo Bonzini wrote: > On 25/09/20 21:03, Tom Lendacky wrote: >> >>  { >> -    if (no_reboot && reason != SHUTDOWN_CAUSE_SUBSYSTEM_RESET) { >> +    if (!cpus_are_resettable()) { >> +    error_report("cpus are not resettable, terminating"); >> +    shutdown_requested = r

Re: [PATCH v4 4/6] sev/i386: Don't allow a system reset under an SEV-ES guest

2021-01-26 Thread Paolo Bonzini
On 25/09/20 21:03, Tom Lendacky wrote: { -if (no_reboot && reason != SHUTDOWN_CAUSE_SUBSYSTEM_RESET) { +if (!cpus_are_resettable()) { +error_report("cpus are not resettable, terminating"); +shutdown_requested = reason; +} else if (no_reboot && reason != SHUTDOWN_CAUS

[PATCH v4 4/6] sev/i386: Don't allow a system reset under an SEV-ES guest

2020-09-25 Thread Tom Lendacky
From: Tom Lendacky An SEV-ES guest does not allow register state to be altered once it has been measured. When an SEV-ES guest issues a reboot command, Qemu will reset the vCPU state and resume the guest. This will cause failures under SEV-ES. Prevent that from occuring by introducing an arch-spe