From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: Received: from gate001.proxmox.com (gate001.proxmox.com [IPv6:2a0f:8001:1:32::40]) by lore.proxmox.com (Postfix) with ESMTPS id 8BF571FF0AF for ; Thu, 24 Sep 2026 16:23:34 +0200 (CEST) Received: from gate001.proxmox.com (localhost.localdomain [127.0.0.1]) by gate001.proxmox.com (Proxmox) with ESMTP id EAFFB21723; Thu, 24 Sep 2026 16:23:06 +0200 (CEST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=genua.de; s=202307; t=1790259251; bh=o2kvwm4aSezUHc73B2kJ6kl54XNzDYrgBazl47V+99Y=; h=Date:From:To:Subject:References:In-Reply-To:From; b=bKQPDUnthLO30SpAjXfKikOHvd+5FRff62R2Wduqk7548O8kQRsvvhvsKdCkMlXLE kiLYvI/9CUoEDA9dT6xKxM01vQLuXZEMQZmpsdY6PPcMu4Y+RkziWk7TPQUnhlgkwX KET0dNv/cOd1ho7kTv1spm0j3wiCwhk31CP98mISinP8XYhmtSdlZCGVRUTWhPfaYz 6dDYcQHR7e4BKSvYb2knHq/aFSslJQCtZmRucwkWTYxh+b9V023cOq1gqU0AwJHdXQ 0SrUTbsvLcrUvcfL1namxHsRxvbkTS5N21vYK0n2wlB4n+wl3FJuS+MvIq8EmN7w2U pQyRwndetpsZw== Date: Thu, 24 Sep 2026 16:14:09 +0200 From: Christian Ludwig To: Subject: [PATCH pve-docs 6/7] qm: Describe ASIDs for SEV Message-ID: <2482783c7a24b5a76956aa91ca839361bcc1ef37.1790236164.git@genua.de> References: MIME-Version: 1.0 In-Reply-To: X-Originating-IP: [192.168.217.185] X-ClientProxiedBy: kch1-mta08.win.genua.de (10.208.16.108) To kch1-mta07.win.genua.de (10.208.16.107) Content-Type: multipart/signed; protocol="application/pkcs7-signature"; micalg="sha-256"; boundary="----A845218A1F15E96670FD65CA5B9EAF3C" X-SPAM-LEVEL: Spam detection results: 0 AWL 0.122 Adjusted score from AWL reputation of From: address DKIM_SIGNED 0.1 Message has a DKIM or DK signature, not necessarily valid DKIM_VALID -0.1 Message has at least one valid DKIM or DK signature DKIM_VALID_AU -0.1 Message has a valid DKIM or DK signature from author's domain DKIM_VALID_EF -0.1 Message has a valid DKIM or DK signature from envelope-from domain DMARC_PASS -0.1 DMARC pass policy SPF_HELO_PASS -0.001 SPF: HELO matches SPF record SPF_PASS -0.001 SPF: sender matches SPF record UNPARSEABLE_RELAY 0.001 Informational: message has unparseable relay lines Message-ID-Hash: QW3DVKG22RVD3ZRLWQZUYRVYUFYX32JG X-Message-ID-Hash: QW3DVKG22RVD3ZRLWQZUYRVYUFYX32JG X-MailFrom: christian_ludwig@genua.de X-Mailman-Rule-Misses: dmarc-mitigation; no-senders; approved; loop; banned-address; emergency; member-moderation; nonmember-moderation; administrivia; implicit-dest; max-recipients; max-size; news-moderation; no-subject; digests; suspicious-header X-Content-Filtered-By: Mailman/MimeDel 3.3.10 X-Mailman-Version: 3.3.10 Precedence: list List-Id: Proxmox VE development discussion List-Help: List-Owner: List-Post: List-Subscribe: List-Unsubscribe: ------A845218A1F15E96670FD65CA5B9EAF3C Content-Type: text/plain; charset="us-ascii" Content-Disposition: inline It's an important limitation that can be tuned in firmware settings on most machines. While there, provide update dmesg output that includes SEV-SNP. Signed-off-by: Christian Ludwig --- qm.adoc | 10 ++++++++-- 1 file changed, 8 insertions(+), 2 deletions(-) diff --git a/qm.adoc b/qm.adoc index 5b46cdc..37950fc 100644 --- a/qm.adoc +++ b/qm.adoc @@ -842,14 +842,20 @@ the SEV kernel parameter of kvm_amd: ---- # dmesg | grep -i sev +[...] SEV-SNP: RMP table physical range [] [...] ccp 0000:45:00.1: sev enabled +[...] ccp 0000:45:00.1: SEV-SNP API: [...] ccp 0000:45:00.1: SEV API: -[...] SEV supported: ASIDs -[...] SEV-ES supported: ASIDs +[...] SEV enabled (ASIDs ...) +[...] SEV-ES enabled (ASIDs ...) +[...] SEV-SNP enabled (ASIDs ...) # cat /sys/module/kvm_amd/parameters/sev Y ---- +The number of ASIDs gives the maximum number of confidential guests for each +type that can run in parallel. + *Guest Requirements:* * edk2-OVMF -- 2.34.1 ------A845218A1F15E96670FD65CA5B9EAF3C--