[CentOS-virt] TPM

Tue Aug 28 11:52:49 UTC 2018
Dag Nygren <dag at newtech.fi>

Hi all!

Just setting up a cluster using Centos 7

We have a desperate need for TPM support and:

1. Tried the "standard" distro install. linvirt supports
  TPM passthrough but kvm-qemu barfs:
  "unsupported configuration: The QEMU executable /usr/libexec/qemu-kvm does not support TPM backend type passthrough"

2. The activated the qemu-ev repo and updated qemu-kvm to version 2.10.0, which for sure
   should support at least passthrough. No luck - Same error message.
   Downloaded the source for th rpm and found a line: "--disable-tpm"
   in build_configure.sh. Guess that the maintainers has some reason
   to turn tpm off. Can somone confirm this?

3. And now what next? The setup would really need swtpm, which
   should be available in 2.11.0. Can someone confirm that tpm
   will be enabled here? Would also be nice having a libvirt that
   will accept the swtpm configuration. the current don't like it.

Could of course recompile qemu myself, but really wouldn't like
going that route. The sheer number of patches applied is quite scary...

Best
Dag