From: Erik Skultety Date: Fri, 20 Sep 2019 11:47:09 +0000 (+0200) Subject: docs: kbase: Add a section explaining how to verify SEV from the guest X-Git-Tag: v5.8.0-rc1~111 X-Git-Url: http://git.ipfire.org/cgi-bin/gitweb.cgi?a=commitdiff_plain;h=8e02fa2e257b84d7e546d0b30a86373f27703289;p=thirdparty%2Flibvirt.git docs: kbase: Add a section explaining how to verify SEV from the guest Commit 50dfabbb59 forgot to add this important bit on how to check that all the changes to the XML actually worked. Signed-off-by: Erik Skultety Reviewed-by: Ján Tomko --- diff --git a/docs/kbase/launch_security_sev.html.in b/docs/kbase/launch_security_sev.html.in index 923bb52b25..985c11a47b 100644 --- a/docs/kbase/launch_security_sev.html.in +++ b/docs/kbase/launch_security_sev.html.in @@ -349,6 +349,18 @@ EOF ... </domain> +

Checking SEV from within the guest

+

+ After making the necessary adjustments discussed in + Configuration, the VM should now boot + successfully with SEV enabled. You can then verify that the guest has + SEV enabled by running: +

+ +
+# dmesg | grep -i sev
+AMD Secure Encrypted Virtualization (SEV) active
+

Limitations

Currently, the boot disk cannot be of type virtio-blk, instead, virtio-scsi