swtpm

swtpm copied to clipboard

Fixed typo `fs_mount` vs `fsmount`

2

I think there was a small typo with the seccomp profile creation. The project wouldn't compile on my ubuntu 20.04.1 based system with the error message: ``` CC libswtpm_libtpms_la-seccomp_profile.lo In...

hnj2

Release the lock on the storage backend when migrating with shared storage

2

This PR adds a `--migration` command line option with parameters `incoming` and `release-lock-outgoing` that allows to migrate the state over shared storage of the swtpm's state directory (between source and...

stefanberger

Host access to the Platform and EK certificates for a vTPM instance ?

8

When invoking swtpm_setup to provision a new VTPM instance for a KVM guest, libvirt passes the --create-ek-cert and --create-platform-cert options. While they are on disk temporarily as output from swtpm_cert...

berrange

Live migrations fail when using shared storage

13

**Describe the bug** When a shared drive is mounted under the location where swtpm stores its state, live migrations will fail if that drive is mounted on both the source...

jean-edouard

Add support for setting of a profile for a TPM 2

10

This PR adds support for setting of profiles for a TPM 2 that restrict what algorithms are available to the TPM 2. It requires libtpms v0.10 with the profile support...

stefanberger

Windows arm64 virtual machine?

59

As you may have heard, Windows 11 is requiring the presence of TPM 2.0, and I'm trying to provide it one via qemu on aarch64. I followed the instructions from...

jeremyd2019

Send a TPM2_Shutdown before TPMLIB_Terminate() in case client did not send it

9

If necessary send a TPM2_Shutdown() command to libtpms before processing CMD_INIT. However, this is only necessary for a TPM 2 and only if the TPM2_Shutdown command has not been sent...

stefanberger

Backwards/forwards compatibility needs for swtpm state vs QEMU live migration

7

**Describe the bug** This issue arises from the comments leading up to https://bugzilla.redhat.com/show_bug.cgi?id=2090219#c37 I wanted to clarify the needs around backwards/forwards compatibility for swtpm state and how it impacts on...

berrange

Reenable fsync() on state file and directory

4

Reenable fsync() on state file and directory. This depends on availability of packages of libtpms with the required fix.

stefanberger

How to use TPM hardware passthrough?

1

I was reading this: https://www.qemu.org/docs/master/specs/tpm.html#the-qemu-tpm-passthrough-device at the same time of reviewing the wiki in this project: https://github.com/stefanberger/swtpm/wiki/Using-the-Intel-TSS-with-swtpm And I got confused: so are there two ways of using TPM passthrough...

bfg01