[pve-devel] [PATCH edk2-firmware/qemu-server/manager 0/5] AMD SEV-SNP

Philipp Giersfeld philipp.giersfeld at canarybit.eu
Mon Feb 17 15:06:46 CET 2025


This patch series adds support for AMD SEV-SNP. 
Where possible it mimics the existing support for AMD SEV(-ES). 

Running SEV-SNP VMs requires a more recent version of edk2
and OVMF firmware image. Contrary to other setups, SEV-SNP does not support loading the firmware via pflash. Instead, the firmware image is loaded  via the -bios option.

Tested-by: Markus Frank <m.frank at proxmox.com>
---
 Thanks to Daniel for the feedback.

 changes since v1: https://lists.proxmox.com/pipermail/pve-devel/2025-February/068159.html
 * Add patch to calculate policy using shift and OR
 * Add note in WebUI for required host kernel version
 * Fix formatting and code layout
 * Fix bug in policy calculation
 * Disable key-sharing option for SNP





More information about the pve-devel mailing list