From e6d8983cdb49505e5c6bf3bf205dfd2877337aa8 Mon Sep 17 00:00:00 2001 From: =?utf8?q?Daniel=20P=2E=20Berrang=C3=A9?= Date: Thu, 20 Nov 2025 04:42:35 -0500 Subject: [PATCH] tools: be explicit about failure to find x86 secure virt MIME-Version: 1.0 Content-Type: text/plain; charset=utf8 Content-Transfer-Encoding: 8bit If we fail to find either SEV or TDX on x86, we can explicitly say there is no secure guest support on the platform. Reviewed-by: Peter Krempa Signed-off-by: Daniel P. Berrangé --- tools/virt-host-validate-common.c | 18 +++++++++++------- 1 file changed, 11 insertions(+), 7 deletions(-) diff --git a/tools/virt-host-validate-common.c b/tools/virt-host-validate-common.c index 344f9656e5..6bca661ffc 100644 --- a/tools/virt-host-validate-common.c +++ b/tools/virt-host-validate-common.c @@ -492,13 +492,17 @@ int virHostValidateSecureGuests(const char *hvname, "support for IBM Secure Execution"); return VIR_VALIDATE_FAILURE(level); } - } else if (hasAMDSev) { - return virHostValidateAMDSev(hvname, level); - } else if (hasIntelTDX) { - return virHostValidateIntelTDX(level); + } else if (arch == VIR_ARCH_X86_64) { + if (hasAMDSev) { + return virHostValidateAMDSev(level); + } else if (hasIntelTDX) { + return virHostValidateIntelTDX(level); + } else { + virValidateFail(level, "None of SEV, SEV-ES, SEV-SNP, TDX available"); + } + } else { + virValidateFail(level, + "Unknown if this platform has Secure Guest support"); } - - virValidateFail(level, - "Unknown if this platform has Secure Guest support"); return VIR_VALIDATE_FAILURE(level); } -- 2.47.3