Re: [PATCH 4/4] kvm: svm: Support KVM_SEV_SNP_PAGE_TYPE_VMSA at SNP_LAUNCH_UPDATE

On Wed, 2026-06-17 at 08:45 +0200, J=C3=B6rg R=C3=B6del wrote:
> On Tue, Jun 16, 2026 at 10:55:28AM -0700, Sean Christopherson wrote:
> > Isn't this essentially the same thing as hot-plugging vCPUs after
> > launch?=C2=A0 I have yet to review it in depth (sorry Jethro), but it
> > looks a *lot* simpler.
>=20
> Replacing the VMSA after launch (as supported with the AP_CREATE GHCB
> call) is different because this has no influence on the launch
> measurement.

That's true for the launch measure, but you do have a vTPM inside the
SVSM which you could use to measure an updated GHCB if we could decide
on a PCR to use (and a logging specification).

Regards,

James