Re: adding 'official' way to dump SEV VMSA

2022-04-19 Thread Daniel P . Berrangé
On Tue, Apr 19, 2022 at 09:33:21AM -0400, Cole Robinson wrote: > On 4/14/22 4:25 AM, Dr. David Alan Gilbert wrote: > > * Dov Murik (dovmu...@linux.ibm.com) wrote: > >> I plan to add SEV-ES and SEV measurements calculation to this > >> library/program as well. > > > > Everyone seems to be writing

Re: adding 'official' way to dump SEV VMSA

2022-04-19 Thread Daniel P . Berrangé
On Wed, Apr 13, 2022 at 09:36:23AM -0400, Cole Robinson wrote: > Hi all, > > SEV-ES and SEV-SNP attestation require a copy of the initial VMSA to > validate the launch measurement. For developers dipping their toe into > SEV-* work, the easiest way to get sample VMSA data for their machine is > to

Re: adding 'official' way to dump SEV VMSA

2022-04-19 Thread Dr. David Alan Gilbert
* Cole Robinson (crobi...@redhat.com) wrote: > On 4/14/22 4:25 AM, Dr. David Alan Gilbert wrote: > > * Dov Murik (dovmu...@linux.ibm.com) wrote: > >> Hi Cole, > >> > >> On 13/04/2022 16:36, Cole Robinson wrote: > >>> Hi all, > >>> > >>> SEV-ES and SEV-SNP attestation require a copy of the initial V

Re: adding 'official' way to dump SEV VMSA

2022-04-19 Thread Cole Robinson
On 4/14/22 4:25 AM, Dr. David Alan Gilbert wrote: > * Dov Murik (dovmu...@linux.ibm.com) wrote: >> Hi Cole, >> >> On 13/04/2022 16:36, Cole Robinson wrote: >>> Hi all, >>> >>> SEV-ES and SEV-SNP attestation require a copy of the initial VMSA to >>> validate the launch measurement. For developers di

Re: adding 'official' way to dump SEV VMSA

2022-04-14 Thread Dr. David Alan Gilbert
* Dov Murik (dovmu...@linux.ibm.com) wrote: > Hi Cole, > > On 13/04/2022 16:36, Cole Robinson wrote: > > Hi all, > > > > SEV-ES and SEV-SNP attestation require a copy of the initial VMSA to > > validate the launch measurement. For developers dipping their toe into > > SEV-* work, the easiest way

Re: adding 'official' way to dump SEV VMSA

2022-04-14 Thread Dov Murik
Hi Cole, On 13/04/2022 16:36, Cole Robinson wrote: > Hi all, > > SEV-ES and SEV-SNP attestation require a copy of the initial VMSA to > validate the launch measurement. For developers dipping their toe into > SEV-* work, the easiest way to get sample VMSA data for their machine is > to grab it fr

adding 'official' way to dump SEV VMSA

2022-04-13 Thread Cole Robinson
Hi all, SEV-ES and SEV-SNP attestation require a copy of the initial VMSA to validate the launch measurement. For developers dipping their toe into SEV-* work, the easiest way to get sample VMSA data for their machine is to grab it from a running VM. There's two techniques I've seen for that: pat