Re: Potential project on implementing AMD SEV emulation in QEMU
Stefano Garzarella <[email protected]>
| Newsgroups | dev.linux.lists.coconut-svsm |
|---|---|
| Message-ID | <CAGxU2F7=TuWMrbUAE0fqwfpb4A82pNqtaf63Fq59P=7h6U8tdQ@mail.gmail.com> |
Hi Tom, On Thu, 17 Apr 2025 at 22:14, Tom Lendacky <[email protected]> wrote: > > On 4/17/25 10:26, Stefano Garzarella wrote: > > Hi Tom, > > Hi Stefano, > > > yesterday in the Coconut-SVSM community call we talked about a > > potential project with the University of Pisa to emulate AMD > > SEV/SEV-ES/SEV-SNP support in QEMU. > > > > Joerg rightly suggested having a step-by-step approach, supporting SEV > > initially, as supporting SEV-SNP directly might be too much for a > > master's thesis (about 6 months of work). > > > > We wondered if you knew of any attempts already made in this regard, > > Nothing that I'm aware of. > > > but especially if you think it's a feasible thing. > > Anything is possible I guess, but I'm not sure what it would take to > accomplish that. Attestation would tell you if you're on real hardware > vs emulated hardware. As I wrote to Dionna, I did not explain the ultimate goal well: Test/develop SVSM and guest OS interaction without having the hardware in place. So that's why IMO it's perfectly fine for attestation to be unsuccessful, plus I don't think it's even necessary to implement any encryption. Thanks, Stefano