[libvirt PATCH v2 10/12] conf: add support for setting SEV kernel hashes

Peter Krempa pkrempa at redhat.com
Fri Dec 10 14:47:30 UTC 2021


On Fri, Dec 10, 2021 at 11:37:33 +0000, Daniel P. Berrangé wrote:
> Normally the SEV measurement only covers the firmware
> loader contents. When doing a direct kernel boot, however,
> with new enough OVMF it is possible to ask for the
> measurement to cover the kernel, ramdisk and command line.
> 
> It can't be done automatically as that would break existing
> guests using direct kernel boot with old firmware, so there
> is a new XML setting allowing this behaviour to be toggled.
> 
> Signed-off-by: Daniel P. Berrangé <berrange at redhat.com>
> ---
>  docs/formatdomain.rst         | 7 ++++++-
>  docs/schemas/domaincommon.rng | 5 +++++
>  src/conf/domain_conf.c        | 8 ++++++++
>  src/conf/domain_conf.h        | 1 +
>  4 files changed, 20 insertions(+), 1 deletion(-)

Reviewed-by: Peter Krempa <pkrempa at redhat.com>




More information about the libvir-list mailing list