Enum GuestStateEncryptionPolicy

pub enum GuestStateEncryptionPolicy {
    Auto,
    None,
    GspById,
    GspKey,
    HardwareSealing,
}

Guest state encryption policy

Variants

Auto

Use the best encryption available, allowing fallback.

VMs will be created as or migrated to the best encryption available, attempting GspKey, then GspById, and finally leaving the data unencrypted if neither are available.

None

Prefer (or require, if strict) no encryption.

Do not encrypt the guest state unless it is already encrypted and strict encryption policy is disabled.

GspById

Prefer (or require, if strict) GspById.

This prevents a VM from being created as or migrated to GspKey even if it is available. Exisiting GspKey encryption will be used unless strict encryption policy is enabled. Fails if the data cannot be encrypted.

GspKey

Require GspKey.

VMs will be created as or migrated to GspKey. Fails if GspKey is not available. Strict encryption policy has no effect here since GspKey is currently the most secure policy.

HardwareSealing

Use hardware sealing

Trait Implementations

impl Clone for GuestStateEncryptionPolicy

fn clone(&self) -> GuestStateEncryptionPolicy

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for GuestStateEncryptionPolicy

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl Default for GuestStateEncryptionPolicy

fn default() -> GuestStateEncryptionPolicy

Returns the “default value” for a type.

impl<'de> Deserialize<'de> for GuestStateEncryptionPolicy

fn deserialize<__D>(__deserializer: __D) -> Result<Self, __D::Error>

where __D: Deserializer<'de>,

Deserialize this value from the given Serde deserializer.

impl Serialize for GuestStateEncryptionPolicy

fn serialize<__S>(&self, __serializer: __S) -> Result<__S::Ok, __S::Error>

where __S: Serializer,

Serialize this value into the given Serde serializer.

impl Copy for GuestStateEncryptionPolicy