kata-containers/s390-tools
1
0
Fork 0
mirror of https://github.com/ibm-s390-linux/s390-tools.git synced 2026-08-05 02:14:52 +00:00
Code Issues Packages Projects Releases Wiki Activity

Add tool to display Secure Execution system information

Browse Source 
Add 'pvinfo' a tool to display the information of enabled flags, and
print the debug information in Yaml and Human format.

Reviewed-by: Steffen Eiden <seiden@linux.ibm.com>
Signed-off-by: Serena Santosh <serena@linux.ibm.com>
Signed-off-by: Ann Mariya Jojo <annjojo@linux.ibm.com>
Signed-off-by: Annu Sharma <annu09@linux.ibm.com>
Signed-off-by: Steffen Eiden <seiden@linux.ibm.com>
This commit is contained in:
Annu Sharma
2025-12-03 16:31:04 +00:00
committed by Steffen Eiden
parent c0d8034962
commit ce82010827
33 changed files with 1626 additions and 2 deletions
Download Patch File Download Diff File Expand all files Collapse all files
rust/pvinfo/src/strings.rs
+145
View File
@@ -0,0 +1,145 @@
// SPDX-License-Identifier: MIT
//
// Copyright IBM Corp. 2025
//! For processing descriptions
pub const FACILITIES_DESC: &str = r#"Query Ultravisor Information
Initialize Ultravisor
Create Secure Configuration
Destroy Secure Configuration
Create Secure CPU
Destroy Secure CPU
Convert to Secure Storage
Convert from Secure Storage
Set Shared Access
Remove Shared Access
Reserved
Set Secure Parameters
Destroy Secure Storage
Unpack Image
Verify Image
Perform CPU Reset
Perform Initial CPU Reset
Set CPU State
Prepare for Reset
Perform CPU Clear Reset
Unshare All
Pin Shared Storage
Unpin Shared Storage
Destroy Secure Configuration Fast
Initiate Configuration Dump
Dump Configuration Storage State
Dump CPU State
Complete Configuration Dump
Retrieve Attestation Measurement
Add Secret
List Secrets
Lock Secrets
Verify Large Frame
Retrieve Secret"#;
pub const FEATURE_INDICATIONS_DESC: &str = r#"Reserved
Adapter interrupt virtualization is supported
Reserved
Reserved
AP passthrough is supported
AP interpretion passthrough is supported"#;
pub const SUPP_ADD_SECRET_PCF_DESC: &str = r#"Disable dumping"#;
pub const SUPP_ATT_PFLAGS_DESC: &str = r#"Reserved
The attestation request contains an optional nonce
Adding the SHA-256 hash of the public host key to the additional data area for measurement.
Adding the SHA-256 hash of the public host key for the Attestation request header to the additional data area for measurement.
The Add-secret Request Stream Flag (ARSF) is a SHA-512 hash of successful add-secret tags (in order), plus a byte indicating store lock status.
Adding the 320-byte firmware attestation measurement (FWCF) to the additional data area."#;
pub const SUPP_SE_HDR_PCF_DESC: &str = r#"Reserved
Reserved
Reserved
Reserved
Reserved
Reserved
Reserved
Reserved
Reserved
Reserved
Reserved
Reserved
Reserved
Reserved
Reserved
Reserved
Reserved
Reserved
Reserved
Reserved
Reserved
Reserved
Reserved
Reserved
Reserved
Reserved
Reserved
Reserved
Reserved
Reserved
Reserved
Reserved
Reserved
Reserved
Dumping of the secure execution guest is allowed
The decrypt image ultravisor command does not decrypt the content of the specified 4K-byte block of storage. The page-list digest, the address-list digest, and the tweak-list digest are still verified.
Reserved
Reserved
Reserved
Reserved
Reserved
Reserved
Reserved
Reserved
Reserved
Reserved
Reserved
Reserved
Reserved
Reserved
Reserved
Reserved
Reserved
Reserved
Reserved
Reserved
PCKMO encrypt-DEA/TDEA-key functions allowed
PCKMO encrypt-AES-key functions allowed
PCKMO encrypt-ECC-key functions allowed
Reserved
Reserved
Reserved
Temporary backup-host-key use allowed
Reserved"#;
pub const SUPP_SECRET_TYPES_DESC: &str = r#"Reserved
Meta
AP-association
Plaintext
AES 128
AES 192
AES 256
AES 128 XTS
AES 256 XTS
HMAC SHA 256
HMAC SHA 512
Reserved
Reserved
Reserved
Reserved
Reserved
Reserved
ECDSA P256 private key
ECDSA P384 private key
ECDSA P521 private key
EdDSA Ed25529 private key
EdDSA Ed448 private key
Update-CCK"#;