Re: Steps towards live migration

Hi Jakub,

Thanks a lot for working on this and bringing your results to the COCONUT-SVSM
community. Live migration for confidential VMs is a much wanted feature and any
helping hand to make it happen is appreciated!

On Tue, Jul 08, 2025 at 03:49:48PM +0200, Jakub Růžička wrote:
> There is no comprehensive design document at the moment.

Before any code can be merged, a couple of fundamental questions need to be
answered, e.g.:

	* What are the security guarantees for SVSM-based live migration?
	* How is continuity in the attestation chain achieved?
	* Which platforms are in scope for live migration support?
	* Is SVSM live migration code generic or hypervisor-specific?

I think that the discussion should focus on these questions for now, because
they are fundamental and heavily influence how the code and the VMM/SVSM
interface will look like.

Having a design document that tries to answer the above questions would be a
great start for the discussion.

Kind regards,

     Joerg