On 8/25/25 10:19, Andrea Bolognani via Devel wrote:
Based on proposed changes in the Fedora edk2 package.
The SEV(-ES) and SEV-SNP descriptors are now separate, which allows libvirt to pick the correct firmware loading mechanism (flash vs ROM) automatically. --- .../qemu/firmware/60-edk2-ovmf-x64-amdsev.json | 1 - .../qemu/firmware/60-edk2-ovmf-x64-amdsev.json | 3 +-- .../qemu/firmware/60-edk2-ovmf-x64-amdsevsnp.json} | 14 ++++++--------
As said before, with these changes on top of git master, autoselection for SNP guests should work fine.
tests/qemufirmwaretest.c | 2 ++ ...ware-auto-efi-sev-snp.x86_64-latest+amdsev.args | 5 ++--- ...mware-auto-efi-sev-snp.x86_64-latest+amdsev.xml | 2 +- ...unch-security-sev-snp.x86_64-latest+amdsev.args | 5 ++--- ...aunch-security-sev-snp.x86_64-latest+amdsev.xml | 2 +- .../launch-security-sev-snp.x86_64-latest.args | 5 ++--- .../launch-security-sev-snp.x86_64-latest.xml | 2 +-
Along with improving the SEV-related tests, I now recall another change in the series I assembled: forcibly rebasing this patch on git master https://gitlab.com/jfehlig/libvirt/-/commit/894f3602ec279bc0eeaa723ca6e94859... No need to repeat my preference of first reaching closure on patches 8 and 9, before proceeding with the rest (sans patch 1). Opps... Regards, Jim