Re: One pager on SVSM_REBOOT_EXECUTE
Jörg Rödel <[email protected]> Wed, 12 Nov 2025 09:27:07 +0100
| Newsgroups | dev.linux.lists.coconut-svsm,dev.linux.lists.linux-coco |
|---|---|
| Message-ID | <cgiypgi34vkzsmn6vsdvxpgh6v2oaddfrb6nozdvru2xrswyxb@magqcoyl3xw5> |
Hey Richard, On Wed, Nov 05, 2025 at 05:32:58PM +0000, Relph, Richard wrote: > In our 15-October-2025 Coconut SVSM meeting, I agreed to write up a one-pager > describing the initial implementation of the SVSM Reboot Protocol. > > I’ve attached Tom’s original 2-pager full specification for the protocol with > modifications. The substantive change is to replace "Rebooting the guest will > restore the guest state to match that of a newly booted guest.” With > "Rebooting the guest invalidates memory pages that were validated by the > guest and resets the CPU register state to their initial state. No other > system state is modified.” Thanks for putting this together. I have two comments: 1. The protocol needs a separate feature detection call so the guest can determine which version of the reboot protocol is supported by the SVSM. 2. The call definition for SVSM_REBOOT_EXECUTE needs to specifically define what state is reset with this call. My understanding is that it only resets memory and CPU state, but explicitly not any service state (like TPM). Could you please add that to the specification? Thanks, Joerg