AMDEPYC / AMDEPYC/sev-certify

Include ID block when launching guests

Abierto
#246 1 comentario 0 reacciones 1 asignado Reclamado por @markg-github Ver en GitHub
enhancement
Lenguaje dominante
Python
Estrellas
3
Forks
7
Merge medio
1 d 21 h
PR fusionados (30 d)
8

Descripción

An SEV-SNP "ID block" allows additional properties to be associated with/bound to an SEV-SNP CVM, for example, a "guest policy", a guest SVN and a Family ID. More guest tests are possible when SNP CVMs have these properties.

ID blocks need to be signed, but self-signing is allowed as the verifier checks the signature and the public key, which is included in the "ID authentication information structure". Both the ID block and the authentication information structure must be provided, for example, on the QEMU command line.

Note that ID blocks were introduced with SEV-SNP.

Guía de contribución

Abrir la guía de contribución

Evaluación

Este issue todavía no se ha evaluado.

Recibe los nuevos issues en tu correo

Un resumen breve de issues de GitHub para principiantes.