[HCK-CI] Add VSM support and enable VBS for functest - #1144
Open
elizashurov wants to merge 3 commits into
Open
elizashurov wants to merge 3 commits into
elizashurov wants to merge 3 commits into
Conversation
kostyanf14
reviewed
Sep 16, 2026
Add a vsm_state platform option for Windows client VMs. When enabled, configure the required Hyper-V CPU features and SMM. Add a dedicated Windows Server 2025 VSM platform. Signed-off-by: Elizabeth Ashurov <eashurov@redhat.com>
Propagate --enable-vbs through QemuHCK and run the guest setup commands during functest client preparation. Enable VBS, HVCI, and Credential Guard, reboot with WinRM polling, and fail when the requested security services are not configured or running. Signed-off-by: Elizabeth Ashurov <eashurov@redhat.com>
elizashurov
force-pushed
the
enable-vsm-support
branch
from
September 16, 2026 15:21
ee909c3 to
606c50d
Compare
kostyanf14
reviewed
Sep 17, 2026
Add a secure_boot client option and use it when starting client VMs. Enable Secure Boot for the Windows 2025 VSM platform and reuse the existing Windows images. Signed-off-by: Elizabeth Ashurov <eashurov@redhat.com>
elizashurov
force-pushed
the
enable-vsm-support
branch
from
September 17, 2026 12:29
00ce3a2 to
4131244
Compare
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
2 participants
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Summary
Add support for running Windows guests with VSM and enabling VBS during functional tests.
vsm_stateand configure the required VSM QEMU flags, SMM, and TPM CRB.--enable-vbsthrough QemuHCK for both HCKTest and functest.Validated the VSM/VBS functest flow with:
For validation, I temporarily changed the VSM platform from 4 vCPUs (
"cpus": 4) to 1 vCPU, since the VM currently hangs during boot with multiple vCPUs due to the known boot issue.The platform remains configured with 4 vCPUs and should be retested once the fix is available.