Niteesh Dubey
Niteesh Dubey
@jpecholt Since I had some code locally to test the creation of SEV & SNP guest on SNP host (based upon some PR on CCv0), i have modified this PR...
@ryansavino @fitzthum @fidencio
> does it require any change in the QEMU command line used to create the VM? It does not require change in the kata shim to create the SNP coco....
> Btw @niteeshkd will this new QEMU still function on the old non-UPM SNP Kernel? If not we should probably also add a note to the coco docs. No, this...
Fixed building of qemu-snp-experimental using tools/packaging/kata-deploy/local-build/kata-deploy-binaries.sh .
When I specify the qemu built from [snp-latest](https://github.com/AMDESE/qemu/tree/snp-latest) in /opt/kata/share/defaults/kata-containers/configuration-qemu-snp.toml file , I am able to create SNP coco.
@ryansavino @fitzthum @fidencio
Since the attestation report from the SNP KBC/ attestation agent / attester already contains the chipId and TCB info, the AS could get the VCEK (e.g. wget -q -O vcek.der...
@ryansavino @fitzthum @AdithyaKrishnan
> Some unit tests are failing due to ` SnpCertsPath:/opt/snp/cert_chain.cert` being set and not expected I thought to initialize SnpCertsPath through GetDefaultHypervisorConfig() when initConfig() is called. But, i don't think...