-
Notifications
You must be signed in to change notification settings - Fork 270
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
docs: vTPM spec #6802
docs: vTPM spec #6802
Conversation
docs/vtpm.md
Outdated
- `is_protected`: The TPM is encrypted whenever it's transferred or at stored to disk (and exported) | ||
- `is_unique`: The TPM contents are exclusive to that VM, that means it has never been cloned (and maybe never exported nor imported) | ||
|
||
vTPM features are only enabled if XAPI is recent enough (check for version >= 8.3). |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
Alternative checks:
pool.restrictions.restrict_vtpm === 'false'
docs/vtpm.md
Outdated
- The default value is `false`, except if `template.platform.vtpm` is `"true"`. | ||
- A message will be displayed below the toggle if: | ||
- The value is `true`: _Please note that once the vTPM is used, its deletion is strongly discouraged as it will lead to data loss._ | ||
- The value is `false` and the `template.platform.vtpm` is `"true"`: _The VM cannot be created without vTPM_ |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
- The value is `false` and the `template.platform.vtpm` is `"true"`: _The VM cannot be created without vTPM_ | |
- The value is `false` and the `template.platform.vtpm` is `"true"`: _This template requires a vTPM, if you proceed, the VM will likely not be able to boot_ |
docs/vtpm.md
Outdated
- A toggle will be displayed in advanced settings under `boot firmware`. | ||
- The default value is `false`, except if `template.platform.vtpm` is `"true"`. | ||
- A message will be displayed below the toggle if: | ||
- The value is `true`: _Please note that once the vTPM is used, its deletion is strongly discouraged as it will lead to data loss._ |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
Not necessary, a warning confirmation modal at vTPM creation will be enough.
docs/vtpm.md
Outdated
```ts | ||
vTPM Object | ||
{ | ||
id: string, |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
uuid
.
docs/vtpm.md
Outdated
is_protected: boolean, // Currently unused by the XAPI, may be used in future. | ||
is_unique: boolean // Currently unused by the XAPI, may be used in future. |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
Remove for now if unused.
Description
Short explanation of this PR (feel free to re-use commit message)
Checklist
Fixes #007
,See xoa-support#42
,See https://...
)Introduced by
CHANGELOG.unreleased.md