From mboxrd@z Thu Jan  1 00:00:00 1970
Return-Path: <pve-devel-bounces@lists.proxmox.com>
Received: from firstgate.proxmox.com (firstgate.proxmox.com [IPv6:2a01:7e0:0:424::9])
	by lore.proxmox.com (Postfix) with ESMTPS id 2D9191FF173
	for <inbox@lore.proxmox.com>; Mon, 24 Feb 2025 13:37:52 +0100 (CET)
Received: from firstgate.proxmox.com (localhost [127.0.0.1])
	by firstgate.proxmox.com (Proxmox) with ESMTP id A5B5119BC;
	Mon, 24 Feb 2025 13:37:47 +0100 (CET)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; t=1740400658;
 x=1741005458; d=canarybit.eu; s=rsa2;
 h=content-transfer-encoding:mime-version:message-id:date:subject:to:from:from; 
 bh=pU+zlcUJlzTcn+ACZqjZwD0zCYYkW8opxhYrAWZB3XM=;
 b=M3mSi55AQc4aGKSPrIOG00edJobnHV+duGxCrCI+pzhb504WsjoJZhEXhk7Moz/f69tih7M8AnzQU
 7XNi3MzNxRJ8AsVADNbt+8wUa81AMCs4CKc7fezU+ku2Wzq9NOO+cjgBOsteyS4jlqxJCGa1iToEFb
 uRu/8zja2/lp9K4YdV4luSQ2/T9gYLfD/t31tobPy/9+1DPfbFzyF18aZPOqjKNFkw4EMK3XpO73q3
 14KpG5985BcvlwXyWYjuqwI6ql1QylogMCItJCjE0NL/Va27TK4V7S/lkTPP+gOaTxVCtXTtY56saw
 2BoaWQnCG33DQ0iOGvmryvIg3d31soQ==
DKIM-Signature: v=1; a=ed25519-sha256; c=relaxed/relaxed; t=1740400658;
 x=1741005458; d=canarybit.eu; s=ed2;
 h=content-transfer-encoding:mime-version:message-id:date:subject:to:from:from; 
 bh=pU+zlcUJlzTcn+ACZqjZwD0zCYYkW8opxhYrAWZB3XM=;
 b=HQOWWotMsO0/OZKT7d9qGR275DmjpQ780JxAwMghbxfpZuE+yC53+8OSAOFXEngnyt8cyI9YL4qso
 lRDjFo6CQ==
X-HalOne-ID: 187cf90f-f2ac-11ef-ab26-29b2d794c87d
From: Philipp Giersfeld <philipp.giersfeld@canarybit.eu>
To: pve-devel@lists.proxmox.com
Date: Mon, 24 Feb 2025 13:37:09 +0100
Message-Id: <20250224123714.2662460-1-philipp.giersfeld@canarybit.eu>
X-Mailer: git-send-email 2.39.5
MIME-Version: 1.0
X-SPAM-LEVEL: Spam detection results:  0
 AWL 0.208 Adjusted score from AWL reputation of From: address
 BAYES_00                 -1.9 Bayes spam probability is 0 to 1%
 DKIM_SIGNED               0.1 Message has a DKIM or DK signature,
 not necessarily valid
 DKIM_VALID -0.1 Message has at least one valid DKIM or DK signature
 DKIM_VALID_AU -0.1 Message has a valid DKIM or DK signature from author's
 domain
 DKIM_VALID_EF -0.1 Message has a valid DKIM or DK signature from envelope-from
 domain DMARC_MISSING             0.1 Missing DMARC policy
 RCVD_IN_DNSWL_NONE     -0.0001 Sender listed at https://www.dnswl.org/,
 no trust
 SPF_HELO_PASS          -0.001 SPF: HELO matches SPF record
 SPF_NONE                0.001 SPF: sender does not publish an SPF Record
Subject: [pve-devel] [PATCH edk2-firmware/qemu-server/manager v3 0/5] AMD
 SEV-SNP
X-BeenThere: pve-devel@lists.proxmox.com
X-Mailman-Version: 2.1.29
Precedence: list
List-Id: Proxmox VE development discussion <pve-devel.lists.proxmox.com>
List-Unsubscribe: <https://lists.proxmox.com/cgi-bin/mailman/options/pve-devel>, 
 <mailto:pve-devel-request@lists.proxmox.com?subject=unsubscribe>
List-Archive: <http://lists.proxmox.com/pipermail/pve-devel/>
List-Post: <mailto:pve-devel@lists.proxmox.com>
List-Help: <mailto:pve-devel-request@lists.proxmox.com?subject=help>
List-Subscribe: <https://lists.proxmox.com/cgi-bin/mailman/listinfo/pve-devel>, 
 <mailto:pve-devel-request@lists.proxmox.com?subject=subscribe>
Reply-To: Proxmox VE development discussion <pve-devel@lists.proxmox.com>
Content-Type: text/plain; charset="us-ascii"
Content-Transfer-Encoding: 7bit
Errors-To: pve-devel-bounces@lists.proxmox.com
Sender: "pve-devel" <pve-devel-bounces@lists.proxmox.com>

This patch series adds support for AMD SEV-SNP. 
Where possible it mimics the existing support for AMD SEV(-ES). 

Running SEV-SNP VMs requires a more recent version of edk2
and OVMF firmware image. Contrary to other setups, SEV-SNP does not support loading the firmware via pflash. Instead, the firmware image is loaded  via the -bios option.

---

 changes since v2: https://lists.proxmox.com/pipermail/pve-devel/2025-February/068418.html
 * Only set no-key-sharing if SNP is not used
 * Fix formatting



_______________________________________________
pve-devel mailing list
pve-devel@lists.proxmox.com
https://lists.proxmox.com/cgi-bin/mailman/listinfo/pve-devel