Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

core: Prevent writing TPM device twice to OVA #578

Merged
merged 1 commit into from
Aug 9, 2022

Conversation

mz-pdm
Copy link
Member

@mz-pdm mz-pdm commented Aug 8, 2022

TPM device has its own method writing its OVF entry. But as a special
device, it’s written the second time to OVF among other devices. When
such an OVF is imported, the VM has two TPM devices, which is not
allowed by libvirt and the VM fails to start.

This patch prevents writing the second TPM device entry to OVF.

Bug-Url: https://bugzilla.redhat.com/2112702

TPM device has its own method writing its OVF entry.  But as a special
device, it’s written the second time to OVF among other devices.  When
such an OVF is imported, the VM has two TPM devices, which is not
allowed by libvirt and the VM fails to start.

This patch prevents writing the second TPM device entry to OVF.

Bug-Url: https://bugzilla.redhat.com/2112702
@michalskrivanek michalskrivanek merged commit d6a3506 into oVirt:master Aug 9, 2022
@mz-pdm mz-pdm deleted the tpm-ova# branch August 9, 2022 08:09
@ahadas
Copy link
Member

ahadas commented Aug 9, 2022

@mz-pdm so why keeping TPM as a "special device"?

@smelamud
Copy link
Member

smelamud commented Aug 9, 2022

@ahadas
Copy link
Member

ahadas commented Aug 9, 2022

@smelamud that explains why it was added but if we write it elsewhere (not as "other" device) and here we add special handling, then the question is why keep considering it a special device? we can also read it as TPM and not "other" device

Copy link
Member Author

@mz-pdm mz-pdm left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

@ahadas Because TPM is a special device?

@ahadas
Copy link
Member

ahadas commented Aug 9, 2022

it's definitely a device we care about :) but why is it special? the criteria for being "special" in that context is that we write and read it as a general device, without unique or device-specific properties, and so we can use the general method for it. but as we have a specific method for writing it, we can also use a TPM-specific method for reading it and won't consider it special anymore no? the current state is a bit confusing

@mz-pdm
Copy link
Member Author

mz-pdm commented Aug 10, 2022

Let's move the discussion to #582 .

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Projects
None yet
Development

Successfully merging this pull request may close these issues.

None yet

4 participants