AMDEPYC / AMDEPYC/sev-certify

Include ID block when launching guests

Offen
#246 1 Kommentar 0 Reaktionen 1 zugewiesene Person Beansprucht von @markg-github Auf GitHub ansehen
enhancement
Vorherrschende Sprache
Python
Sterne
3
Forks
7
Ø Merge
1 T. 21 Std.
Gemergte PRs (30 T.)
8

Beschreibung

An SEV-SNP "ID block" allows additional properties to be associated with/bound to an SEV-SNP CVM, for example, a "guest policy", a guest SVN and a Family ID. More guest tests are possible when SNP CVMs have these properties.

ID blocks need to be signed, but self-signing is allowed as the verifier checks the signature and the public key, which is included in the "ID authentication information structure". Both the ID block and the authentication information structure must be provided, for example, on the QEMU command line.

Note that ID blocks were introduced with SEV-SNP.

Beitragsleitfaden

Beitragsleitfaden öffnen

Bewertung

Dieses Issue wurde noch nicht bewertet.

Neue Issues direkt in Ihr Postfach

Eine kurze Übersicht über anfängerfreundliche GitHub-Issues.