[pve-devel] [PATCH v3 0/3] Initial TPM support for VMs

[Stefan Reiter]

Makes Windows 11 (test build) happy: https://i.imgur.com/kZ0Mpnr.jpeg

Tested under Linux as well, works with (updated) OVMF and SeaBIOS, though
SeaBIOS requires clearing via the BIOS setup screen and may not support all
features it seems (e.g. Windows shows the TPM, but doesn't allow BitLocker,
presumably because it requires UEFI).

Requires patched swtpm with my PRs applied:
https://github.com/stefanberger/swtpm/pull/513
https://github.com/stefanberger/swtpm/pull/570

Can also be found as 'swtpm' in my staff repos.

RFC v2 -> v3:
* support backups by attaching the TPM as a drive to QEMU temporarily
* swtpm_setup now has support for file backend, so use it
* Ceph is now supported by forcing krbd and mapping the block device
* drop applied OVMF patch


RFC v1 -> RFC v2:
* with the above PR, we can store state in a single file/block device, thus we
  can treat it similar to an efidisk - this eliminates any concerns about
  storing on pmxcfs
* always allocate the state as 4 MiB (on directory storage it might auto-shrink)
* fixes migration, since source and destination are now different
* add GUI patch


 storage: Stefan Reiter (1):
  import: don't check for 1K aligned size

 PVE/Storage/Plugin.pm | 1 -
 1 file changed, 1 deletion(-)

 qemu-server: Stefan Reiter (1):
  fix #3075: add TPM v1.2 and v2.0 support via swtpm

 PVE/API2/Qemu.pm         |   5 ++
 PVE/QemuMigrate.pm       |  14 +++-
 PVE/QemuServer.pm        | 137 +++++++++++++++++++++++++++++++++++++--
 PVE/QemuServer/Drive.pm  |  63 ++++++++++++++----
 PVE/VZDump/QemuServer.pm |  43 ++++++++++--
 5 files changed, 238 insertions(+), 24 deletions(-)

 manager: Stefan Reiter (1):
  ui: add support for adding TPM devices

 www/manager6/Makefile                    |  1 +
 www/manager6/Utils.js                    |  2 +-
 www/manager6/form/DiskStorageSelector.js |  5 +-
 www/manager6/qemu/HDMove.js              |  1 +
 www/manager6/qemu/HDTPM.js               | 88 ++++++++++++++++++++++++
 www/manager6/qemu/HardwareView.js        | 25 ++++++-
 6 files changed, 119 insertions(+), 3 deletions(-)
 create mode 100644 www/manager6/qemu/HDTPM.js

-- 
2.30.2