{"id":1199418,"date":"2023-11-02T11:28:23","date_gmt":"2023-11-02T15:28:23","guid":{"rendered":"https:\/\/www.prime-wow.com\/?p=1199418"},"modified":"2023-11-02T11:28:23","modified_gmt":"2023-11-02T15:28:23","slug":"guest-first-memory-for-kvm","status":"publish","type":"post","link":"https:\/\/www.prime-wow.com\/?p=1199418","title":{"rendered":"[$] Guest-first memory for KVM"},"content":{"rendered":"<p>One of the core objectives of any confidential-computing implementation is<br \/>\nto protect a guest system&#8217;s memory from access by actors outside of the<br \/>\nguest itself.  The host computer and hypervisor are part of the group that<br \/>\nis to be excluded from such access; indeed, they are often seen as<br \/>\nthreat in their own right.  Hardware vendors have added features like memory<br \/>\nencryption to make memory inaccessible to the host, but such features can<br \/>\nbe difficult to use and are not available on all CPUs, so there is ongoing<br \/>\ninterest in software-only solutions that can improve confidentiality.  The<br \/>\n<a href=\"https:\/\/lwn.net\/ml\/linux-kernel\/20231027182217.3615211-1-seanjc@google.com\/\">guest-first<br \/>\nmemory patch set<\/a>, posted by Sean Christopherson and containing work by<br \/>\nseveral developers, looks poised to bring some software-based protection to<br \/>\nan upcoming kernel release.&#013;<br \/>\n&#013;<br \/>\nSource: LWN.net &#8211; <a href=\"https:\/\/lwn.net\/Articles\/949277\/\" target=\"_blank\" rel=\"noopener\">[$] Guest-first memory for KVM<\/a><\/p>\n","protected":false},"excerpt":{"rendered":"<p>One of the core objectives of any confidential-computing implementation is to protect a guest system&#8217;s memory from access by actors outside of the guest itself. The host computer and hypervisor are part of the group that is to be excluded &hellip; <a href=\"https:\/\/www.prime-wow.com\/?p=1199418\">Continue reading <span class=\"meta-nav\">&rarr;<\/span><\/a><\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"open","ping_status":"","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[72],"tags":[75],"class_list":["post-1199418","post","type-post","status-publish","format-standard","hentry","category-linux","tag-linux"],"_links":{"self":[{"href":"https:\/\/www.prime-wow.com\/index.php?rest_route=\/wp\/v2\/posts\/1199418","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.prime-wow.com\/index.php?rest_route=\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.prime-wow.com\/index.php?rest_route=\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.prime-wow.com\/index.php?rest_route=\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/www.prime-wow.com\/index.php?rest_route=%2Fwp%2Fv2%2Fcomments&post=1199418"}],"version-history":[{"count":0,"href":"https:\/\/www.prime-wow.com\/index.php?rest_route=\/wp\/v2\/posts\/1199418\/revisions"}],"wp:attachment":[{"href":"https:\/\/www.prime-wow.com\/index.php?rest_route=%2Fwp%2Fv2%2Fmedia&parent=1199418"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.prime-wow.com\/index.php?rest_route=%2Fwp%2Fv2%2Fcategories&post=1199418"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.prime-wow.com\/index.php?rest_route=%2Fwp%2Fv2%2Ftags&post=1199418"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}