[pve-devel] [PATCH edk2-firmware v3 2/5] Add OVMF targets for AMD SEV-ES and SEV-SNP
Fiona Ebner
f.ebner at proxmox.com
Wed Mar 5 15:18:03 CET 2025
Am 24.02.25 um 13:37 schrieb Philipp Giersfeld:
> AMD SEV-SNP boots with a single volatile firmware image OVMF.fd via the
> -bios option.
>
> Currently, an SEV-enabled VM will not boot with an OVMF
> firmware that was compiled with `SECURE_BOOT_ENABLE` [1].
>
> Furthermore, during testing, SEV-enabled amchines did not boot with
> `SMM_REQUIRE`.
>
> Therefore, introduce a new target build-ovmf-cvm that builds OVMF
> firmware suitable for AMD SEV.
>
> [1] https://github.com/tianocore/edk2/pull/6285
>
This has been merged in edk2-stable202502, which is already out now. I'd
prefer going directly for that tag. Can we avoid splitting out the
SMM_REQUIRE flag then?
More information about the pve-devel
mailing list