External/cloud-hypervisor
1
0
Fork 0
mirror of https://github.com/cloud-hypervisor/cloud-hypervisor.git synced 2024-12-22 13:45:20 +00:00
Code Issues Packages Projects Releases Wiki Activity
stable/v36.x
cloud-hypervisor/docs/amd_sev_snp.md
Jinank Jain 70074ddf9f docs: Add documentation for AMD SEV-SNP 
Creating some brief documentation for SEV-SNP, summarizing the links on
where to find more information about SEV-SNP, as well as how to build
and run Cloud Hypervisor on it.

This document is a work in progress and will be updated in future PRs
as we add support for it.

Signed-off-by: Jinank Jain <jinankjain@microsoft.com>
2023-09-07 12:52:27 +01:00

1.1 KiB
Raw Permalink Blame History

AMD SEV-SNP

WARNING

This feature is only currently supported on MSHV.

AMD Secure Encrypted Virtualization & Secure Nested Paging (SEV-SNP) is an AMD technology designed to add strong memory integrity protection to help prevent malicious hypervisor-based attacks like data replay, memory-remapping and more in order to create an isolated execution environment. Here are some useful links:

Cloud Hypervisor support

It is required to use a machine which has enabled support for AMD SEV-SNP in the BIOS.

On the Cloud Hypervisor side, all you need is to build the project with the sev_snp feature enabled:

cargo build --no-default-features --features "sev_snp"

Note Please note that sev_snp cannot be enabled in conjunction with tdx feature flag.

You can run a SEV-SNP VM using the following command:

./cloud-hypervisor \
     --platform sev_snp=on \
     --cpus boot=1 \
     --memory size=1G \
     --disk path=ubuntu.img