AMDEPYC / AMDEPYC/sev-certify

Include ID block when launching guests

未關閉
#246 1 則留言 0 個 reaction 已指派 1 人 已被 @markg-github 認領 在 GitHub 檢視
enhancement
主要語言
Python
星號
3
分支
7
平均合併
1 天 21 小時
30 天內合併 PR
8

描述

An SEV-SNP "ID block" allows additional properties to be associated with/bound to an SEV-SNP CVM, for example, a "guest policy", a guest SVN and a Family ID. More guest tests are possible when SNP CVMs have these properties.

ID blocks need to be signed, but self-signing is allowed as the verifier checks the signature and the public key, which is included in the "ID authentication information structure". Both the ID block and the authentication information structure must be provided, for example, on the QEMU command line.

Note that ID blocks were introduced with SEV-SNP.

貢獻指南

開啟貢獻指南

評估

這個 Issue 還沒有評估資料。

把新 issue 寄到你的電子郵件信箱

精選適合新手參與的 GitHub issue 摘要。