security-misc
security-misc copied to clipboard
Provide the option to enable AMD SEV-ES and SEV-SNP
This pull request provides the options to enable two extensions of AMD Secure Encrypted Virtualization (SEV):
- SEV-ES (Encrypted State) extends SEV by encrypting each guests virtual CPU register state during VM exits, and
- SEV-SNP (Secure Nested Paging) extends SEV by activating hardware-level memory integrity.
As per suggested in https://github.com/Kicksecure/security-misc/pull/338#issuecomment-3588000749 by @ArrayBolt3.
Changes
There are no changes to the functionality of the codebase.
Provide the disabled by default options:
kvm_amd.sev_es=1
kvm_amd.sev_snp=1
Mandatory Checklist
- [x] Legal agreements accepted. By contributing to this organisation, you acknowledge you have read, understood, and agree to be bound by these these agreements:
Terms of Service, Privacy Policy, Cookie Policy, E-Sign Consent, DMCA, Imprint
Optional Checklist
The following items are optional but might be requested in certain cases.
- [x] I have tested it locally
- [x] I have reviewed and updated any documentation if relevant
- [ ] I am providing new code and test(s) for it