[libvirt PATCH v3 07/12] tools: support automatically constructing SEV-ES vCPU state

Ján Tomko jtomko at redhat.com
Fri Nov 4 14:02:50 UTC 2022


On a Wednesday in 2022, Daniel P. Berrangé wrote:
>The VMSA files contain the expected CPU register state for the VM. Their
>content varies based on a few pieces of the stack
>
>  - AMD CPU architectural initial state
>  - KVM hypervisor VM CPU initialization
>  - QEMU userspace VM CPU initialization
>  - AMD CPU SKU (family/model/stepping)
>
>The first three pieces of information we can obtain through code
>inspection. The last piece of information we can take on the command
>line. This allows a user to validate a SEV-ES guest merely by providing
>the CPU SKU information, using --cpu-family, --cpu-model,
>--cpu-stepping. This avoids the need to obtain or construct VMSA files
>directly.
>
>Signed-off-by: Daniel P. Berrangé <berrange at redhat.com>
>---
> docs/manpages/virt-qemu-sev-validate.rst |  45 +++
> tools/virt-qemu-sev-validate             | 467 +++++++++++++++++++++++
> 2 files changed, 512 insertions(+)
>

Reviewed-by: Ján Tomko <jtomko at redhat.com>

Jano


More information about the libvir-list mailing list