Re: [Qemu-devel] Secure KVM

2011-11-08 Thread Will Drewry
On Mon, Nov 7, 2011 at 12:03 PM, Anthony Liguori wrote: > On 11/07/2011 11:52 AM, Sasha Levin wrote: >> >> Hi Anthony, >> >> Thank you for your comments! >> >> On Mon, 2011-11-07 at 11:37 -0600, Anthony Liguori wrote: >>> >>> On 11/06/2011 02:40 PM, Sasha Levin wrote: Hi all, I

Re: [Qemu-devel] Secure KVM

2011-11-07 Thread Rusty Russell
On Mon, 07 Nov 2011 12:03:38 -0600, Anthony Liguori wrote: > So the sandbox loop would look like: > > void main() { >setup_devices(); > >read_from_event_channel(main_channel); >for i in vrings: > check_vring_notification(i); > } lguest uses a model where you attach an eventfd

Re: [Qemu-devel] Secure KVM

2011-11-07 Thread Anthony Liguori
On 11/07/2011 11:52 AM, Sasha Levin wrote: Hi Anthony, Thank you for your comments! On Mon, 2011-11-07 at 11:37 -0600, Anthony Liguori wrote: On 11/06/2011 02:40 PM, Sasha Levin wrote: Hi all, I'm planning on doing a small fork of the KVM tool to turn it into a 'Secure KVM' enabled hyperviso

Re: [Qemu-devel] Secure KVM

2011-11-07 Thread Sasha Levin
Hi Anthony, Thank you for your comments! On Mon, 2011-11-07 at 11:37 -0600, Anthony Liguori wrote: > On 11/06/2011 02:40 PM, Sasha Levin wrote: > > Hi all, > > > > I'm planning on doing a small fork of the KVM tool to turn it into a > > 'Secure KVM' enabled hypervisor. Now you probably ask yourse

Re: [Qemu-devel] Secure KVM

2011-11-07 Thread Anthony Liguori
On 11/06/2011 02:40 PM, Sasha Levin wrote: Hi all, I'm planning on doing a small fork of the KVM tool to turn it into a 'Secure KVM' enabled hypervisor. Now you probably ask yourself, Huh? The idea was discussed briefly couple of months ago, but never got off the ground - which is a shame IMO.