Verification for Resolute --- On a machine with AMD SNP enabled
$ cat /sys/module/kvm_amd/parameters/sev_snp Y $ sudo dmesg | grep -i -E "sev|snp|rmp" [ 0.000000] SEV-SNP: RMP table physical range [0x000000002d500000 - 0x000000004ddfffff] [ 0.004387] SEV-SNP: Reserving start/end of RMP table on a 2MB boundary [0x000000002d400000] [ 0.991243] AMD-Vi: IOMMU SNP support enabled. [ 1.032489] AMD-Vi: Extended features (0xa5bf7320a2294aee, 0x1d): PPR X2APIC NX [5] IA GA PC GA_vAPIC SNP [ 1.033355] AMD-Vi: Force to disable Virtual APIC due to SNP [ 11.783087] ccp 0000:01:00.5: sev enabled [ 11.873725] ccp 0000:01:00.5: SEV firmware updated from 1.55.36 to 1.55.39 [ 16.624897] ccp 0000:01:00.5: SEV-SNP API:1.55 build:39 [ 16.688002] ccp 0000:01:00.5: SEV API:1.55 build:39 [ 16.690524] kvm_amd: SEV enabled (ASIDs 10 - 1006) [ 16.690527] kvm_amd: SEV-ES enabled (ASIDs 1 - 9) [ 16.690528] kvm_amd: SEV-SNP enabled (ASIDs 1 - 9) [ 16.690530] kvm_amd: AVIC disabled: missing HvInUseWrAllowed on SNP-enabled system $ wget https://cloud- images.ubuntu.com/releases/noble/release/ubuntu-24.04-server-cloudimg- amd64.img $ cat vm.xml <domain type='kvm' xmlns:qemu='http://libvirt.org/schemas/domain/qemu/1.0'> <name>sev</name> <memory unit='GiB'>16</memory> <currentMemory unit='GiB'>16</currentMemory> <vcpu placement="static">32</vcpu> <os firmware='efi'> <type arch='x86_64' machine='q35'>hvm</type> <boot dev='hd'/> </os> <features> <acpi/> <apic/> <vmport state='off'/> </features> <cpu mode='host-model' check='partial'> <model fallback='allow'/> </cpu> <devices> <emulator>/usr/bin/qemu-system-x86_64</emulator> <disk type="file" device="disk"> <driver name="qemu" type="qcow2"/> <source file="/tmp/ubuntu-24.04-server-cloudimg-amd64.img"/> <target dev="vda" bus="virtio"/> </disk> <console type='pty'> <target type='virtio' port='1'/> </console> </devices> <allowReboot value='no'/> <launchSecurity type='sev-snp'> <policy>0x30000</policy> </launchSecurity> </domain> $ virsh define vm.xml $ virsh start sev 2026-09-14T12:00:18.667584Z qemu-system-x86_64: pflash with kvm requires KVM readonly memory support -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/2160129 Title: Descriptor file for amd-sev is not compatible with SEV-SNP To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/edk2/+bug/2160129/+subscriptions -- ubuntu-bugs mailing list [email protected] https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
