[25.04 FEAT] [VS2304] KVM: Support retrievable secrets in Secure Execution guests - kernel part

[bugproxy]

Feature Description:

For crypto passthrough, so far it was necessary to pass guest-specific secrets (Item binding keys) to the Ultravisor to ensure that passed-through APQNs can only be used by authorized guests. In a next step the Ultravisor interface can be extended for generalized secrets management (storing, listing, retrieving), e.g. for key material to encrypt disk and network I/O. With this capability it will not be necessary any more to store secrets in the secure image (the initramfs) itself, which greatly simplifies image construction, specifically of generic/vendor images and also the image update process (e.g. kernel or initramfs security updates).

[bugproxy (bugproxy)]

------- Comment From <email address hidden> 2025-02-06 07:21 EDT-------
The kernel part of this item was included in kernel v6.13

These are the commits:

3fad3bdac4de s390/uvdevice: Support longer secret lists
f00469a6420e s390/uv: Retrieve UV secrets sysfs support
d35613718784 s390/uvdevice: Increase indent in IOCTL definitions
99961593e364 s390/uvdevice: Add Retrieve Secret IOCTL
7c9137af2042 s390/uv: Retrieve UV secrets support
da59c71cc727 s390/uv: Use a constant for more-data rc

[Frank Heimes (fheimes)]

Kernel 6.14 is now released for plucky,
hence updating the status to Fix Released (aka done).