[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

Re: [PATCH v2] SUPPORT.md: add Dom0less as Supported


  • To: Stefano Stabellini <sstabellini@xxxxxxxxxx>
  • From: Bertrand Marquis <Bertrand.Marquis@xxxxxxx>
  • Date: Thu, 15 Jul 2021 08:47:18 +0000
  • Accept-language: en-GB, en-US
  • Arc-authentication-results: i=1; mx.microsoft.com 1; spf=pass smtp.mailfrom=arm.com; dmarc=pass action=none header.from=arm.com; dkim=pass header.d=arm.com; arc=none
  • Arc-message-signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com; s=arcselector9901; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=MGaZbc2V2+MQgkWl+HlsG3dfLdDeP9IrPeXmfHHtr5U=; b=MMaDmlzXV/gLKdRjOIl7hGtLlNvDQJALiR8kd3j2+UVkCikGvu+aUb3c95IJwgXOK97nBZ64eQAV/Hq2hal9MAEn+Bjsq7hPjqBKxGjBEsZ3mQz8Ygp8zdyqUH5ptb/2ceYhcXIz5P89FYThKPvINZTBRuRaUs7DanOOfrRMB5gN3K0ycADyBMxrhgbCSZO3mI1HNa6nFsEuftEsCjT4j7ds9ofgC15XxaoMZiGbe1m0iJay0TD/E5rA+PJYUDUsFkQ2BJoIOLoeWtqTFCmKdTAmREZ3snL9jA11tGin6TThCOS1wVSjcXNuylgZ7SPXBVUlCEOAkeE0/tC8cfA/rg==
  • Arc-seal: i=1; a=rsa-sha256; s=arcselector9901; d=microsoft.com; cv=none; b=gzopu85tpkh7CI0uxW0QV/0vftFZuqj9SBPlBW/7DenX5ei5xHwgVkxgQZeMrhNkRlwyZO5gB8gHlZdQkeOGX0cJX9GQCr0TPRTmjvis0IXPbfsuk1mWkNkyWohS2KNLekND/rk+XYKd7F+PkPGq0af/lZapLTbN5y33GWhqD5/4qK9hH6yQwb4H5wQUCGnU4lt4DEeXp0uj+gtVtb441hmeoPp9F/xG5WFCylugvIoeE6cyQtSvfzaBGtFEHm2iLCus1M9S7Ks5By91x8B1UpYLGflYk8M7wVYMGQMU7wZpnQ1wk/W+R8efe+Dbf4vUq/38CIWX5foe4vXyzwFTXA==
  • Authentication-results-original: kernel.org; dkim=none (message not signed) header.d=none;kernel.org; dmarc=none action=none header.from=arm.com;
  • Cc: Xen-devel <xen-devel@xxxxxxxxxxxxxxxxxxxx>, "julien@xxxxxxx" <julien@xxxxxxx>, "andrew.cooper3@xxxxxxxxxx" <andrew.cooper3@xxxxxxxxxx>, "george.dunlap@xxxxxxxxxx" <george.dunlap@xxxxxxxxxx>, "jbeulich@xxxxxxxx" <jbeulich@xxxxxxxx>, "iwj@xxxxxxxxxxxxxx" <iwj@xxxxxxxxxxxxxx>, "wl@xxxxxxx" <wl@xxxxxxx>, Stefano Stabellini <stefano.stabellini@xxxxxxxxxx>
  • Delivery-date: Thu, 15 Jul 2021 08:48:22 +0000
  • List-id: Xen developer discussion <xen-devel.lists.xenproject.org>
  • Nodisclaimer: true
  • Original-authentication-results: kernel.org; dkim=none (message not signed) header.d=none;kernel.org; dmarc=none action=none header.from=arm.com;
  • Thread-index: AQHXeQrE43zpeLksDEud9U+EI8bv5qtDufKA
  • Thread-topic: [PATCH v2] SUPPORT.md: add Dom0less as Supported

Hi Stefano,


> On 15 Jul 2021, at 00:48, Stefano Stabellini <sstabellini@xxxxxxxxxx> wrote:
> 
> Add Dom0less to SUPPORT.md to clarify its support status. The feature is
> mature enough and small enough to make it security supported.
> 
> Signed-off-by: Stefano Stabellini <stefano.stabellini@xxxxxxxxxx>
Reviewed-by: Bertrand Marquis <bertrand.marquis@xxxxxxx>

Cheers
Bertrand

> ---
> Changes in v2:
> - clarify memory scrubbing
> ---
> SUPPORT.md | 9 +++++++++
> 1 file changed, 9 insertions(+)
> 
> diff --git a/SUPPORT.md b/SUPPORT.md
> index 317392d8f3..524cab9c8d 100644
> --- a/SUPPORT.md
> +++ b/SUPPORT.md
> @@ -832,6 +832,15 @@ OVMF firmware implements the UEFI boot protocol.
> 
>     Status, qemu-xen: Supported
> 
> +## Dom0less
> +
> +Guest creation from the hypervisor at boot without Dom0 intervention.
> +
> +    Status, ARM: Supported
> +
> +Memory of dom0less DomUs is not scrubbed at boot (even with
> +bootscrub=on); no XSAs will be issues due to unscrubbed memory.
> +
> # Format and definitions
> 
> This file contains prose, and machine-readable fragments.
> -- 
> 2.17.1
> 
> 




 


Rackspace

Lists.xenproject.org is hosted with RackSpace, monitoring our
servers 24x7x365 and backed by RackSpace's Fanatical Support®.