[virt-manager RFC PATCH 0/3] Add support for enabling Secure Encrypted Virtualization in the GUI

Charles Arnold carnold at suse.com
Tue May 5 15:25:08 UTC 2020


This patch set adds a checkbox on the memory details dialog which
will only be enabled on SEV compatible hardware and for guests
which were created with OVMF (UEFI) boot and q35 machine type. 

The intent of this patch set is not to attempt to expose all the
capabilities of AMD SEV which includes SEV, SEV-ES and most
recently SEV-SNP. Instead, it provides a minimal change in the
interface to enable the most basic capability. Other SEV features
not exposed in the interface can be added through the XML editor.

The decision to include this feature in virt-manager has not been
determined. These patches allow for a discussion on the merits of
including such a feature and if it is desired, whether this patch
set satisfies the basic requirements. See earlier comments on this
topic here,

https://www.redhat.com/archives/virt-tools-list/2020-March/msg00008.html

Charles Arnold (3):
  Fix check for q35 machine type
  Add user interface for enabling launch security (sev)
  Add GUI support for enabling Secure Encrypted Virtualization

 ui/details.ui                      | 53 ++++++++++++++++++++++++++++++
 virtManager/details/details.py     | 31 +++++++++++++++++
 virtManager/object/domain.py       | 29 +++++++++++++++-
 virtinst/domain/launch_security.py |  2 +-
 virtinst/domain/memorybacking.py   |  3 ++
 5 files changed, 116 insertions(+), 2 deletions(-)

-- 
2.26.1





More information about the virt-tools-list mailing list