AMDEPYC / AMDEPYC/sev-certify

Include ID block when launching guests

未关闭
#246 1 条评论 0 个 reaction 已指派 1 人 已被 @markg-github 认领 在 GitHub 查看
enhancement
主要语言
Python
星标
3
派生
7
平均合并
1 天 21 小时
30 天内合并 PR
8

描述

An SEV-SNP "ID block" allows additional properties to be associated with/bound to an SEV-SNP CVM, for example, a "guest policy", a guest SVN and a Family ID. More guest tests are possible when SNP CVMs have these properties.

ID blocks need to be signed, but self-signing is allowed as the verifier checks the signature and the public key, which is included in the "ID authentication information structure". Both the ID block and the authentication information structure must be provided, for example, on the QEMU command line.

Note that ID blocks were introduced with SEV-SNP.

贡献指南

打开贡献指南

评估

这个 Issue 还没有评估数据。

把新 issue 发到你的邮箱

精选适合新手参与的 GitHub issue 摘要。