diff options
| author | Marcin Juszkiewicz <marcin.juszkiewicz+kolla@linaro.org> | 2022-09-15 16:13:12 +0200 |
|---|---|---|
| committer | Marcin Juszkiewicz <marcin.juszkiewicz+kolla@linaro.org> | 2022-09-27 10:02:23 +0000 |
| commit | 8d209901fa86c58eee45502f3bb8e9ee7c84a885 (patch) | |
| tree | 83509d99ac1461c7c15945c858a6466dee0c3ad2 | |
| parent | 878b00013b01e3d02a704ce7c9fac1629cd1a705 (diff) | |
| download | kolla-8d209901fa86c58eee45502f3bb8e9ee7c84a885.tar.gz kolla-8d209901fa86c58eee45502f3bb8e9ee7c84a885.zip | |
nova-libvirt: provide TPM emulation
The goal of the swtpm project is to provide a TPM emulator (TPM 1.2 &
TPM 2) that can be integrated into virtualized environments, such as
virtual machines and containers.
Nova supports it for quite a while:
https://review.opendev.org/c/openstack/nova/+/631363
Change-Id: Ifb7e0f1632805807851720873a70179218bdf372
| -rw-r--r-- | docker/nova/nova-libvirt/Dockerfile.j2 | 2 | ||||
| -rw-r--r-- | releasenotes/notes/nova-libvirt-add-tpm-emulation-ed5e823eaaf6aa8f.yaml | 4 |
2 files changed, 6 insertions, 0 deletions
diff --git a/docker/nova/nova-libvirt/Dockerfile.j2 b/docker/nova/nova-libvirt/Dockerfile.j2 index 100b0c2d6..5fbf0ca6d 100644 --- a/docker/nova/nova-libvirt/Dockerfile.j2 +++ b/docker/nova/nova-libvirt/Dockerfile.j2 @@ -25,6 +25,7 @@ LABEL maintainer="{{ maintainer }}" name="{{ image_name }}" build-date="{{ build 'openvswitch', 'qemu-img', 'qemu-kvm', + 'swtpm', ] %} {% if base_arch == 'x86_64' %} {% set nova_libvirt_packages = nova_libvirt_packages + [ @@ -53,6 +54,7 @@ LABEL maintainer="{{ maintainer }}" name="{{ image_name }}" build-date="{{ build 'qemu-system', 'qemu-utils', 'sasl2-bin', + 'swtpm', 'trousers' ] %} diff --git a/releasenotes/notes/nova-libvirt-add-tpm-emulation-ed5e823eaaf6aa8f.yaml b/releasenotes/notes/nova-libvirt-add-tpm-emulation-ed5e823eaaf6aa8f.yaml new file mode 100644 index 000000000..4aeea838d --- /dev/null +++ b/releasenotes/notes/nova-libvirt-add-tpm-emulation-ed5e823eaaf6aa8f.yaml @@ -0,0 +1,4 @@ +--- +features: + - | + Nova instances can use TPM emulation (via "swtpm"). |