Skip to content

fedora 44 SEV version 3.0 #225

Description

@markg-github

Achieved Certification Level 3.0.0-0

Certified level: 3.0.0-0
Max certification level: 3.0.0-0
Started: 2026-09-04T15:43:49.837153+00:00
Completed: 2026-09-04T15:44:48.700227+00:00

Environment

  • Host OS: Fedora Linux 44 (Forty Four)
  • Host kernel: 7.1.13-200.fc44.x86_64
  • Guest OS: Fedora Linux 44 (Forty Four)
  • QEMU: 10.2.2 (qemu-10.2.2-1.fc44)
  • OVMF: edk2-ovmf-20260812-4.fc44.noarch

Level 3.0.0-0

Test Description Result
attestation-test Launch an SEV-SNP guest and verify attestation report

Level 3.0.0-1

Test Description Result
snphost-config-commit Test SNP_CONFIG and SNP_COMMIT host commands
id-block-test Verify ID block acceptance, report field binding, and launch rejection

sev-verify output

   Guest:  /usr/local/lib/guest-image/guest.efi
   Host:   Fedora Linux 44 (Forty Four)
   Kernel: 7.1.13-200.fc44.x86_64
   QEMU:   10.2.2 (qemu-10.2.2-1.fc44)
   OVMF:   edk2-ovmf-20260812-4.fc44.noarch

   Host changes: --allow-host-changes enabled
   Tests that may change host state (boot-session-only, reset on reboot):
     • 3.0.0-1  snphost-config-commit

── Prerequisites ───────────────────────────────────────────────────────────────

   Verify SNP    Verify SEV-SNP is enabled and functional on the host and the right components are present
   Artifacts: artifacts/prereqs/Verify_SNP
   ├─ snphost ok ··················································· 26ms [PASS]
   ├─ snphost show guests ··········································· 9ms [PASS]
   └─ verify OVMF ··················································· 0ms [PASS]
   result:                                                     3/3 passed [PASS]

   Prerequisites:                                              1/1 passed [PASS]

── Certification 3.0 ───────────────────────────────────────────────────────────
   SEV 3.0 Tests (AMD EPYC 7003+)
   Max certification level: 3.0.0-0

   ── 3.0.0-0 ──
   attestation-test        Launch an SEV-SNP guest and verify attestation report
   Artifacts: artifacts/3.0/3.0.0-0/attestation_test
   ├─ Calculate measurement ······································· 327ms [PASS]
   ├─ Launch SEV-SNP guest ········································ 16.1s [PASS]
   ├─ Get attestation report with snpguest ························· 29ms [PASS]
   ├─ Pull report from guest ······································· 10ms [PASS]
   ├─ Pull request file from guest ·································· 4ms [PASS]
   ├─ Fetch certificate chain from kds ···························· 276ms [PASS]
   ├─ Fetch VCEK from kds ········································· 268ms [PASS]
   ├─ Verify certificate chain ······································ 6ms [PASS]
   ├─ Verify report signature and TCB values ························ 6ms [PASS]
   ├─ Verify Request data and Measurement ··························· 5ms [PASS]
   └─ Stop VM ······················································ 2.6s [PASS]
   result:                                                   11/11 passed [PASS]

   ── 3.0.0-1 ──
   snphost-config-commit            Test SNP_CONFIG and SNP_COMMIT host commands
   Artifacts: artifacts/3.0/3.0.0-1/snphost_config_commit
   ├─ show-tcb ······················································ 9ms [PASS]
   ├─ config-set-lower ············································· 68ms [PASS]
   ├─ verify-differ after config-set-lower ·························· 8ms [PASS]
   ├─ Launch SEV-SNP guest ········································ 15.1s [PASS]
   ├─ guest-report-after-lower ····································· 12ms [PASS]
   ├─ pull-report-after-lower ······································· 4ms [PASS]
   ├─ verify-guest-report-lowered ·································· 15ms [PASS]
   ├─ verify-lowered-report-signature ····························· 276ms [PASS]
   ├─ config-reset ················································· 14ms [PASS]
   ├─ verify-match after config-reset ······························ 11ms [PASS]
   ├─ guest-report-after-reset ····································· 43ms [PASS]
   ├─ pull-report-after-reset ······································ 19ms [PASS]
   ├─ verify-guest-report-restored ································· 11ms [PASS]
   ├─ Stop VM ······················································ 1.2s [PASS]
   ├─ teardown-config-reset ········································ 14ms [PASS]
   ├─ verify-committed-equals-current ······························· 6ms [PASS]
   └─ commit-current-tcb ············································ 5ms [PASS]
   result:                                                   17/17 passed [PASS]

   id-block-test    Verify ID block acceptance, report field binding, and launch rejection
   Artifacts: artifacts/3.0/3.0.0-1/id_block_test
   ├─ Calculate measurement ······································· 328ms [PASS]
   ├─ Generate ID block ············································ 12ms [PASS]
   ├─ Launch with valid ID block ·································· 12.8s [PASS]
   ├─ Get attestation report ······································· 44ms [PASS]
   ├─ Pull attestation report ······································ 21ms [PASS]
   ├─ Stop VM ······················································ 1.0s [PASS]
   ├─ Verify ID block fields in report ······························ 1ms [PASS]
   ├─ Set bad measurement in ID block ······························ 14ms [PASS]
   ├─ Launch with bad measurement (expect rejection) ··············· 4.0s [PASS]
   ├─ Stop VM (after bad measurement) ······························· 0ms [PASS]
   ├─ Set incompatible policy (SMT) ································ 12ms [PASS]
   ├─ Launch with SMT-incompatible policy (expect rejection) ······· 2.0s [PASS]
   ├─ Stop VM (after SMT policy) ···································· 0ms [ERR!]
   │     vm_stop: no running guest (run vm_launch or a guest step first)
   ├─ Set impossible ABI version ··································· 12ms [PASS]
   ├─ Launch with impossible ABI version (expect rejection) ········ 2.0s [PASS]
   └─ Stop VM (after ABI version) ··································· 0ms [ERR!]
         vm_stop: no running guest (run vm_launch or a guest step first)
   result:                                                    2/16 failed [PASS]

   Certification 3.0:                                          3/3 passed [PASS]

   Wrote /root/results/cert-3.0.json
   Wrote /root/results/cert-3.0.md

── Summary ─────────────────────────────────────────────────────────────────────
   Certification 3.0:                                                  [3.0.0-0]

Activity

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Metadata

Metadata

Assignees

No one assigned

    Projects

    No projects

      Milestone

      No milestone

      Relationships

      None yet

      Development

      No branches or pull requests

      Issue actions