AMDEPYC / AMDEPYC/sev-certify

fedora 41 SEV version 3.0

未关闭
#279 0 条评论 0 个 reaction 已指派 0 人 在 GitHub 查看
certificate os-fedora-41 proc-7003
主要语言
Python
星标
3
派生
7
平均合并
1 天 21 小时
30 天内合并 PR
8

描述

# Achieved Certification Level 3.0.0-0

**Certified level:** 3.0.0-0
**Max certification level:** 3.0.0-0
**Started:** 2026-07-17T05:15:41.420845+00:00
**Completed:** 2026-07-17T05:15:56.822589+00:00

## Environment

- **Host OS:** Fedora Linux 41 (Forty One)
- **Host kernel:** 6.17.10-100.fc41.x86_64
- **Guest OS:** Fedora Linux 41 (Forty One)
- **QEMU:** 9.1.3 (qemu-9.1.3-2.fc41)
- **OVMF:** edk2-ovmf-20241117-5.fc41.noarch

### Level 3.0.0-0

| Test | Description | Result |
|------|-------------|--------|
| attestation-test | Launch an SEV-SNP guest and verify attestation report | :white_check_mark: |

### Level 3.0.0-1

| Test | Description | Result |
|------|-------------|--------|
| snphost-config-commit | Test SNP_CONFIG and SNP_COMMIT host commands | :white_check_mark: |

### sev-verify output
```
Guest: /usr/local/lib/guest-image/guest.efi
Host: Fedora Linux 41 (Forty One)
Kernel: 6.17.10-100.fc41.x86_64
QEMU: 9.1.3 (qemu-9.1.3-2.fc41)
OVMF: edk2-ovmf-20241117-5.fc41.noarch

── Prerequisites ───────────────────────────────────────────────────────────────

Verify SNP Verify SEV-SNP is enabled and functional on the host and the right components are present
Artifacts: artifacts/prereqs/Verify_SNP
├─ snphost ok ··················································· 25ms [PASS]
├─ snphost show guests ··········································· 8ms [PASS]
└─ verify OVMF ··················································· 1ms [PASS]
result: 3/3 passed [PASS]

Prerequisites: 1/1 passed [PASS]

── Certification 3.0 ───────────────────────────────────────────────────────────
SEV 3.0 Tests (AMD EPYC 7003+)
Max certification level: 3.0.0-0

── 3.0.0-0 ──
attestation-test Launch an SEV-SNP guest and verify attestation report
Artifacts: artifacts/3.0/3.0.0-0/attestation_test
├─ Calculate measurement ······································· 334ms [PASS]
├─ Launch SEV-SNP guest ········································ 12.8s [PASS]
├─ Get attestation report with snpguest ························· 36ms [PASS]
├─ Pull report from guest ········································ 2ms [PASS]
├─ Pull request file from guest ·································· 1ms [PASS]
├─ Fetch certificate chain from kds ···························· 278ms [PASS]
├─ Fetch VCEK from kds ········································· 276ms [PASS]
├─ Verify certificate chain ······································ 5ms [PASS]
├─ Verify report signature and TCB values ························ 7ms [PASS]
├─ Verify Request data and Measurement ··························· 7ms [PASS]
└─ Stop VM ······················································ 1.3s [PASS]
result: 11/11 passed [PASS]

── 3.0.0-1 ──
snphost-config-commit Test SNP_CONFIG and SNP_COMMIT host commands
Artifacts: artifacts/3.0/3.0.0-1/snphost_config_commit
├─ show-tcb ····················································· 11ms [PASS]
├─ config-set-lower ············································ 105ms [PASS]
├─ verify-differ after config-set-lower ·························· 9ms [PASS]
├─ config-reset ·················································· 8ms [PASS]
├─ verify-match after config-reset ······························ 40ms [PASS]
├─ config-set-mask-chip-id ······································· 9ms [PASS]
├─ config-set-mask-chip-key ······································ 8ms [PASS]
├─ config-set-mask-both ········································· 41ms [PASS]
├─ config-reset-masks ············································ 8ms [PASS]
├─ verify-match after config-reset-masks ························· 7ms [PASS]
└─ commit ························································ 4ms [PASS]
result: 11/11 passed [PASS]

Certification 3.0: 2/2 passed [PASS]

Wrote /root/results/cert-3.0.json
Wrote /root/results/cert-3.0.md

── Summary ─────────────────────────────────────────────────────────────────────
Certification 3.0: [3.0.0-0]

```

贡献指南

打开贡献指南

评估

这个 Issue 还没有评估数据。

把新 issue 发到你的邮箱

精选适合新手参与的 GitHub issue 摘要。