Daniel Berrangé

> How do you know there aren't other disks that get mounted, by something else other than systemd, stored in exactly the same way? We have already attested to the...

> I see, so it's a lot more about having measurements of what happened than about blocking what can happen, right? > > I don't really grok what "confidential computing"...

> btw, systemd nowadays picks ups credentials (i.e. this stuff: https://systemd.io/CREDENTIALS/) from smbios type 11. Should systemd measure them if we pick them up from there? I presume so? SMBIOS...

> > efi variables that systemd reads (or are those measured anyway by firmware?) > > Not needed I think. In confidential VMs the initial state of the variable store...

> > Well, the gpt is not encrypted so it is easy to make the guest behave in specific ways by the host tampering with it. It must be considered...

The --help output is pretty terse for the commands, so not really sufficient unless the users are already very familiar with SEV concepts. A man page is definitely required here...

The GTK-VNC 0.8.0 release entirely deleted the python binding. Applications should access GTK-VNC APIs using GObject Introspection instead. Note that support for GTK2 is also going to be dropped from...

If this is ever implemented, please let it be optional. The current behaviour of having a single view of rooms across all accounts is what makes quaternion so compelling for...

> Notice how the message ends up with "," which obviously makes it invalid JSON. Is this a pagination problem or something? The workspace has lots of users (~5000) which...

It seems the messages about re-adding Peter Xu were not misleading - it **has** in fact sent emails to him despite me removing him when editting the CC list, and...