[libvirt PATCH v2 10/12] conf: add support for setting SEV kernel hashes
Peter Krempa
pkrempa at redhat.com
Fri Dec 10 14:47:30 UTC 2021
On Fri, Dec 10, 2021 at 11:37:33 +0000, Daniel P. Berrangé wrote:
> Normally the SEV measurement only covers the firmware
> loader contents. When doing a direct kernel boot, however,
> with new enough OVMF it is possible to ask for the
> measurement to cover the kernel, ramdisk and command line.
>
> It can't be done automatically as that would break existing
> guests using direct kernel boot with old firmware, so there
> is a new XML setting allowing this behaviour to be toggled.
>
> Signed-off-by: Daniel P. Berrangé <berrange at redhat.com>
> ---
> docs/formatdomain.rst | 7 ++++++-
> docs/schemas/domaincommon.rng | 5 +++++
> src/conf/domain_conf.c | 8 ++++++++
> src/conf/domain_conf.h | 1 +
> 4 files changed, 20 insertions(+), 1 deletion(-)
Reviewed-by: Peter Krempa <pkrempa at redhat.com>
More information about the libvir-list
mailing list