]> git.ipfire.org Git - thirdparty/systemd.git/commit
man: document SEV-SNP credential delivery via initrd cpio 42272/head
authorPaul Meyer <katexochen0@gmail.com>
Sat, 23 May 2026 15:37:40 +0000 (17:37 +0200)
committerPaul Meyer <katexochen0@gmail.com>
Wed, 24 Jun 2026 10:47:42 +0000 (12:47 +0200)
commit236bade19c043134ca7c784838099e2aa279ebf7
tree09a1b2fe8795e8ea250281d318e5fd2469a556e3
parent76b62b0435c4c0e4f684cac767cc8981bec86a47
man: document SEV-SNP credential delivery via initrd cpio

Under --coco=sev-snp, credentials no longer flow through SMBIOS/fw_cfg
(which the guest PID1 discards as unmeasured in confidential VMs) but
through a cpio archive appended to the initrd, landing in the @system
bucket via the new /.extra/system_credentials/ initrd path. Update
systemd-vmspawn(1) to describe this and the guest systemd version
requirement.

Signed-off-by: Paul Meyer <katexochen0@gmail.com>
man/systemd-vmspawn.xml