On 8/25/25 10:19, Andrea Bolognani via Devel wrote:
Based on proposed changes in the Fedora edk2 package.
The SEV(-ES) and SEV-SNP descriptors are now separate, which
allows libvirt to pick the correct firmware loading mechanism
(flash vs ROM) automatically.
---
.../qemu/firmware/60-edk2-ovmf-x64-amdsev.json | 1 -
.../qemu/firmware/60-edk2-ovmf-x64-amdsev.json | 3 +--
.../qemu/firmware/60-edk2-ovmf-x64-amdsevsnp.json} | 14 ++++++--------
As said before, with these changes on top of git master, autoselection for SNP
guests should work fine.
tests/qemufirmwaretest.c | 2 ++
...ware-auto-efi-sev-snp.x86_64-latest+amdsev.args | 5 ++---
...mware-auto-efi-sev-snp.x86_64-latest+amdsev.xml | 2 +-
...unch-security-sev-snp.x86_64-latest+amdsev.args | 5 ++---
...aunch-security-sev-snp.x86_64-latest+amdsev.xml | 2 +-
.../launch-security-sev-snp.x86_64-latest.args | 5 ++---
.../launch-security-sev-snp.x86_64-latest.xml | 2 +-
Along with improving the SEV-related tests, I now recall another change in the
series I assembled: forcibly rebasing this patch on git master
https://gitlab.com/jfehlig/libvirt/-/commit/894f3602ec279bc0eeaa723ca6e948596dfa88f9
No need to repeat my preference of first reaching closure on patches 8 and 9,
before proceeding with the rest (sans patch 1). Opps...
Regards,
Jim
