Published at LXer:

This article describes the changes to the IBM Power Architecture that can be used to provide enhanced protection of virtual machines from other software running on the same system. A new higher privilege mode called Ultravisor mode is being introduced, along with the concept of secure virtual machines (SVMs). This mode is supported by the Protected Execution Ultravisor which will be open sourced. An SVM is protected at rest, when transmitted over a network as a file, and while executing. In this article, we discuss the impact of this new architecture for SVMs. There is near-zero impact on VMs.

Read More...