Add SEV getting started guide for users - #171
Conversation
DGonzalezVillal
left a comment
DGonzalezVillal
left a comment
There was a problem hiding this comment.
I think the guide could use a bit more clarity around its main intention.
From my perspective, the goal of this guide should be to quickly introduce SEV and provide concise setup instructions for SNP. I emphasize SNP because that’s the feature we want users to focus on adopting, so it’s probably not necessary to go too deep into SEV-specific details.
I added some suggestions to help improve the organization of the guide and narrow its scope a bit. I think it’s meant for users who want to start using SNP but may not know how to get started.
One additional note — for users who simply want to use SNP (not certify an OS), we probably shouldn’t direct them to use the artifacts from this repository. Instead, they should check which operating systems we’ve already certified and then download the official releases for their hosts or guests. The images in this repo are minimized and slightly modified versions of the official ones, so they’re not intended for real production environments.
bdc67fa to
83a6dea
Compare
DGonzalezVillal
left a comment
DGonzalezVillal
left a comment
There was a problem hiding this comment.
Just a couple of more things, mostly wordking. the rest of it looks good thanks !
68b7aaf to
eda5080
Compare
DGonzalezVillal
left a comment
DGonzalezVillal
left a comment
There was a problem hiding this comment.
Hey Harika it looks great.
Just one comment. The guest policy is incomplete, just fix that and then we can merge! Thank you!
| The 64-bit policy value controls security requirements for the SNP guest: | ||
|
|
||
| | Bit(s) | Name | Meaning when set | | ||
| |--------|------|------------------| | ||
| | 0 | `SMT` | Guest may be launched on a host with SMT enabled | | ||
| | 1 | `RESERVED` | Must be 1 | | ||
| | 2 | `MIGRATE_MA` | Guest may be associated with a migration agent | | ||
| | 3 | `DEBUG` | Debugging of the guest is allowed (disables production security) | | ||
| | 16-17 | `ABI_MAJOR` | Minimum ABI major version required | | ||
| | 18-25 | `ABI_MINOR` | Minimum ABI minor version required | |
There was a problem hiding this comment.
Incomplete please see guest policy in: https://docs.amd.com/v/u/en-US/56860_PUB_SEV_SNP
eda5080 to
ce29cc0
Compare
Signed-off-by: Harika Nittala <lnittala@amd.com>
ce29cc0 to
13f322f
Compare
DGonzalezVillal
left a comment
DGonzalezVillal
left a comment
There was a problem hiding this comment.
LGTM thank you Harika!
2 participants
Created an easy-to-use Getting Started SEV guides for different users: