*Hello I am trying to enable libvirt to support sev-snp. Currently I am
using virsh domcapabilities to check if its enabled but I am getting : <sev
supported='no'/>*


*Followed the instructions at : *
*https://libvirt.org/kbase/launch_security_sev.html*
<https://libvirt.org/kbase/launch_security_sev.html>


* My AMD CPU supports SEV,SEV-SNP and I have followed all the steps and it
is enabled.  BIOS settings are configured to support SEV,SNP CPU: AMD EPYC
9254*



*# cat /sys/module/kvm_amd/parameters/sev*

*Y*



*# dmesg | grep -i sev*

*[    0.000000] SEV-SNP: RMP table physical range [0x000000002d500000 -
0x000000004ddfffff]*

*[    0.009021] SEV-SNP: Reserving start/end of RMP table on a 2MB boundary
[0x000000002d400000]*

*[   11.184492] ccp 0000:01:00.5: sev enabled*

*[   12.664210] ccp 0000:01:00.5: SEV API:1.55 build:36*

*[   12.664217] ccp 0000:01:00.5: SEV-SNP API:1.55 build:36*

*[   12.671343] kvm_amd: SEV enabled (ASIDs 16 - 1006)*

*[   12.671345] kvm_amd: SEV-ES enabled (ASIDs 1 - 15)*

*[   12.671346] kvm_amd: SEV-SNP enabled (ASIDs 1 - 15)*



My guess is that my qemu binary does not support sev cpu feature.
I am trying to add it using:
#qemu-system-x86_64 -cpu host,+sev

But the output is the following.
qemu-system-x86_64: Property 'host-x86_64-cpu.sev' not found

Do you have any insights on this?

*Versions:*

*Libvirt version: 10.7.0*

*qemu-system-x86_64 version : 9.1.0*

*Linux kernel version: 6.11.0-rc3*

*Distro: Ubuntu 22.04.4 LTS*


* If you need any other information please let me know.*

Thanks!

Reply via email to