[libvirt PATCH v3 06/12] tools: support validating SEV-ES initial vCPU state measurements

Ján Tomko jtomko at redhat.com
Fri Nov 4 13:48:54 UTC 2022


On a Wednesday in 2022, Daniel P. Berrangé wrote:
>With the SEV-ES policy the VMSA state of each vCPU must be included in
>the measured data. The VMSA state can be generated using the 'sevctl'
>tool, by telling it a QEMU VMSA is required, and passing the hypevisor's
>CPU SKU (family, model, stepping).
>
>Signed-off-by: Daniel P. Berrangé <berrange at redhat.com>
>---
> docs/manpages/virt-qemu-sev-validate.rst | 58 ++++++++++++++++++++
> tools/virt-qemu-sev-validate             | 69 ++++++++++++++++++++++--
> 2 files changed, 124 insertions(+), 3 deletions(-)
>

Reviewed-by: Ján Tomko <jtomko at redhat.com>

Jano


More information about the libvir-list mailing list