Skip to content
  • Brijesh Singh's avatar
    i386/sev: Introduce 'sev-snp-guest' object · 7b34df44
    Brijesh Singh authored and Paolo Bonzini's avatar Paolo Bonzini committed
    SEV-SNP support relies on a different set of properties/state than the
    existing 'sev-guest' object. This patch introduces the 'sev-snp-guest'
    object, which can be used to configure an SEV-SNP guest. For example,
    a default-configured SEV-SNP guest with no additional information
    passed in for use with attestation:
    
      -object sev-snp-guest,id=sev0
    
    or a fully-specified SEV-SNP guest where all spec-defined binary
    blobs are passed in as base64-encoded strings:
    
      -object sev-snp-guest,id=sev0, \
        policy=0x30000, \
        init-flags=0, \
        id-block=YWFhYWFhYWFhYWFhYWFhCg==, \
        id-auth=CxHK/OKLkXGn/KpAC7Wl1FSiisWDbGTEKz..., \
        author-key-enabled=on, \
        host-data=LNkCWBRC5CcdGXirbNUV1OrsR28s..., \
        guest-visible-workarounds=AA==, \
    
    See the QAPI schema updates included in this patch for more usage
    details.
    
    In some cases these blobs may be up to 4096 characters, but this is
    generally well below the default limit for linux hosts where
    command-line sizes are ...
    7b34df44