From: Daniel P. Berrangé <berrange@redhat.com>
Date: Thu, 20 Nov 2025 09:42:35 +0000 (-0500)
Subject: tools: be explicit about failure to find x86 secure virt
X-Git-Tag: v11.10.0-rc1~73
X-Git-Url: http://git.ipfire.org/?a=commitdiff_plain;h=e6d8983cdb49505e5c6bf3bf205dfd2877337aa8;p=thirdparty%2Flibvirt.git

tools: be explicit about failure to find x86 secure virt

If we fail to find either SEV or TDX on x86, we can explicitly
say there is no secure guest support on the platform.

Reviewed-by: Peter Krempa <pkrempa@redhat.com>
Signed-off-by: Daniel P. Berrangé <berrange@redhat.com>
---

diff --git a/tools/virt-host-validate-common.c b/tools/virt-host-validate-common.c
index 344f9656e5..6bca661ffc 100644
--- a/tools/virt-host-validate-common.c
+++ b/tools/virt-host-validate-common.c
@@ -492,13 +492,17 @@ int virHostValidateSecureGuests(const char *hvname,
                             "support for IBM Secure Execution");
             return VIR_VALIDATE_FAILURE(level);
         }
-    } else if (hasAMDSev) {
-        return virHostValidateAMDSev(hvname, level);
-    } else if (hasIntelTDX) {
-        return virHostValidateIntelTDX(level);
+    } else if (arch == VIR_ARCH_X86_64) {
+        if (hasAMDSev) {
+            return virHostValidateAMDSev(level);
+        } else if (hasIntelTDX) {
+            return virHostValidateIntelTDX(level);
+        } else {
+            virValidateFail(level, "None of SEV, SEV-ES, SEV-SNP, TDX available");
+        }
+    } else {
+        virValidateFail(level,
+                        "Unknown if this platform has Secure Guest support");
     }
-
-    virValidateFail(level,
-                    "Unknown if this platform has Secure Guest support");
     return VIR_VALIDATE_FAILURE(level);
 }