On 2/14/25 10:24, Paraskevas Nik wrote:

Hello, I am trying to build libvirt v10.5.0 to support SEV-SNP but when I run virsh domcapabilities I am getting <sev support=no>. If I install libvirt 8.0.0 using apt install libvirt-daemon-system qemu-kvm them sev shows as supported. Everything is enabled on the system about SEV, SEV- ES, SEV-SNP. Is there a specific build option to enable SEV?

*# cat /sys/module/kvm_amd/parameters/sev*

*Y*

**

***CPU: AMD EPYC 9254*

* *

*# dmesg | grep -i sev*

*[    0.000000] SEV-SNP: RMP table physical range [0x000000002d500000 - 0x000000004ddfffff]*

*[    0.009021] SEV-SNP: Reserving start/end of RMP table on a 2MB boundary [0x000000002d400000]*

*[   11.184492] ccp 0000:01:00.5: sev enabled*

*[   12.664210] ccp 0000:01:00.5: SEV API:1.55 build:36*

*[   12.664217] ccp 0000:01:00.5: SEV-SNP API:1.55 build:36*

*[   12.671343] kvm_amd: SEV enabled (ASIDs 16 - 1006)*

*[   12.671345] kvm_amd: SEV-ES enabled (ASIDs 1 - 15)*

*[   12.671346] kvm_amd: SEV-SNP enabled (ASIDs 1 - 15)

**Linux kernel version: 6.12 **Libvirt version: 10.5.0*

*qemu-system-x86_64 version : 9.1.0***

* *

*If you need any other information please let me know.

Cheers*

Hi, are you running the daemon as root? Also - if you start the daemon from git, there's the "run" script that executes the daemon with correct selinux label. Also, there's 'virt-host-validate' tool that should check sev support and print info about it. Michal