opensuse-leap 16.0 SEV version 3.0

[markg-github]

Achieved Certification Level 3.0.0-0

Certified level: 3.0.0-0
Max certification level: 3.0.0-0
Started: 2026-09-09T01:22:22.000462+00:00
Completed: 2026-09-09T01:25:54.704507+00:00

Environment

• Host OS: openSUSE Leap 16.0
• Host kernel: 6.12.0-160000.37-default
• Guest OS: openSUSE Leap 16.0
• QEMU: 10.0.12 (SUSE Linux 16)
• OVMF: qemu-ovmf-x86_64-202502-160000.7.1.noarch

Level 3.0.0-0

Test	Description	Result
attestation-test	Launch an SEV-SNP guest and verify attestation report	✅

Level 3.0.0-1

Test	Description	Result
snphost-config-commit	Test SNP_CONFIG and SNP_COMMIT host commands	❌
key-derivation	Launch SEV-SNP guest and run key derivation tests	❌

Failure Details

snphost-config-commit (fail)

Launch SEV-SNP guest — fail
Duration: 183.4s

Guest did not boot: Vsock agent on CID 3:5000 not ready after 180.0s: Failed to connect to guest vsock CID 3 port 5000: [Errno 110] Connection timed out

guest-report-after-lower — error
Duration: 0ms

Guest did not boot: Vsock agent on CID 3:5000 not ready after 180.0s: Failed to connect to guest vsock CID 3 port 5000: [Errno 110] Connection timed out

pull-report-after-lower — error
Duration: 0ms

Guest did not boot: Vsock agent on CID 3:5000 not ready after 180.0s: Failed to connect to guest vsock CID 3 port 5000: [Errno 110] Connection timed out

verify-guest-report-lowered — fail
Duration: 0ms

report not found: artifacts/3.0/3.0.0-1/snphost_config_commit/report.bin

verify-lowered-report-signature — fail
Duration: 0ms

report not found: artifacts/3.0/3.0.0-1/snphost_config_commit/report.bin

guest-report-after-reset — error
Duration: 0ms

Guest did not boot: Vsock agent on CID 3:5000 not ready after 180.0s: Failed to connect to guest vsock CID 3 port 5000: [Errno 110] Connection timed out

pull-report-after-reset — error
Duration: 0ms

Guest did not boot: Vsock agent on CID 3:5000 not ready after 180.0s: Failed to connect to guest vsock CID 3 port 5000: [Errno 110] Connection timed out

verify-guest-report-restored — fail
Duration: 1ms

report not found: artifacts/3.0/3.0.0-1/snphost_config_commit/report_after_reset.bin

verify-committed-equals-current — fail
Duration: 3ms

report not found: artifacts/3.0/3.0.0-1/snphost_config_commit/report_after_reset.bin

key-derivation (fail)

Get attestation report — fail
Duration: 12ms

ERROR: No space left on device (os error 28)
Error: No space left on device (os error 28)

sev-verify output

   Guest:  /usr/local/lib/guest-image/guest.efi
   Host:   openSUSE Leap 16.0
   Kernel: 6.12.0-160000.37-default
   QEMU:   10.0.12 (SUSE Linux 16)
   OVMF:   qemu-ovmf-x86_64-202502-160000.7.1.noarch

   Host changes: --allow-host-changes enabled
   Tests that may change host state (boot-session-only, reset on reboot):
     • 3.0.0-1  snphost-config-commit

── Prerequisites ───────────────────────────────────────────────────────────────

   Verify SNP    Verify SEV-SNP is enabled and functional on the host and the right components are present
   Artifacts: artifacts/prereqs/Verify_SNP
   ├─ snphost ok ··················································· 26ms [PASS]
   ├─ snphost show guests ··········································· 8ms [PASS]
   └─ verify OVMF ··················································· 0ms [PASS]
   result:                                                     3/3 passed [PASS]

   Prerequisites:                                              1/1 passed [PASS]

── Certification 3.0 ───────────────────────────────────────────────────────────
   SEV 3.0 Tests (AMD EPYC 7003+)
   Max certification level: 3.0.0-0

   ── 3.0.0-0 ──
   attestation-test        Launch an SEV-SNP guest and verify attestation report
   Artifacts: artifacts/3.0/3.0.0-0/attestation_test
   ├─ Calculate measurement ······································· 255ms [PASS]
   ├─ Launch SEV-SNP guest ········································ 13.7s [PASS]
   ├─ Get attestation report with snpguest ························· 11ms [PASS]
   ├─ Pull report from guest ········································ 7ms [PASS]
   ├─ Pull request file from guest ·································· 4ms [PASS]
   ├─ Fetch certificate chain from kds ···························· 279ms [PASS]
   ├─ Fetch VCEK from kds ········································· 308ms [PASS]
   ├─ Verify certificate chain ······································ 5ms [PASS]
   ├─ Verify report signature and TCB values ························ 5ms [PASS]
   ├─ Verify Request data and Measurement ··························· 5ms [PASS]
   └─ Stop VM ······················································ 1.2s [PASS]
   result:                                                   11/11 passed [PASS]

   ── 3.0.0-1 ──
   snphost-config-commit            Test SNP_CONFIG and SNP_COMMIT host commands
   Artifacts: artifacts/3.0/3.0.0-1/snphost_config_commit
   ├─ show-tcb ······················································ 9ms [PASS]
   ├─ config-set-lower ············································· 68ms [PASS]
   ├─ verify-differ after config-set-lower ·························· 8ms [PASS]
   ├─ Launch SEV-SNP guest ······································· 183.4s [FAIL]
   │     Guest did not boot: Vsock agent on CID 3:5000 not ready after 180.0s: Failed to connect to guest vsock CID 3 port 5000: [Errno 110] Connection timed out
   ├─ guest-report-after-lower ······································ 0ms [ERR!]
   │     Guest did not boot: Vsock agent on CID 3:5000 not ready after 180.0s: Failed to connect to guest vsock CID 3 port 5000: [Errno 110] Connection timed out
   ├─ pull-report-after-lower ······································· 0ms [ERR!]
   │     Guest did not boot: Vsock agent on CID 3:5000 not ready after 180.0s: Failed to connect to guest vsock CID 3 port 5000: [Errno 110] Connection timed out
   ├─ verify-guest-report-lowered ··································· 0ms [FAIL]
   │     report not found: artifacts/3.0/3.0.0-1/snphost_config_commit/report.bin
   ├─ verify-lowered-report-signature ······························· 0ms [FAIL]
   │     report not found: artifacts/3.0/3.0.0-1/snphost_config_commit/report.bin
   ├─ config-reset ················································· 12ms [PASS]
   ├─ verify-match after config-reset ······························ 10ms [PASS]
   ├─ guest-report-after-reset ······································ 0ms [ERR!]
   │     Guest did not boot: Vsock agent on CID 3:5000 not ready after 180.0s: Failed to connect to guest vsock CID 3 port 5000: [Errno 110] Connection timed out
   ├─ pull-report-after-reset ······································· 0ms [ERR!]
   │     Guest did not boot: Vsock agent on CID 3:5000 not ready after 180.0s: Failed to connect to guest vsock CID 3 port 5000: [Errno 110] Connection timed out
   ├─ verify-guest-report-restored ·································· 1ms [FAIL]
   │     report not found: artifacts/3.0/3.0.0-1/snphost_config_commit/report_after_reset.bin
   ├─ Stop VM ····················································· 113ms [PASS]
   ├─ teardown-config-reset ········································ 14ms [PASS]
   ├─ verify-committed-equals-current ······························· 3ms [FAIL]
   │     report not found: artifacts/3.0/3.0.0-1/snphost_config_commit/report_after_reset.bin
   └─ commit-current-tcb ················································ [SKIP]
   result:                                                    9/17 failed [FAIL]

   key-derivation              Launch SEV-SNP guest and run key derivation tests
   Artifacts: artifacts/3.0/3.0.0-1/key_derivation
   ├─ Calculate measurement ······································· 247ms [PASS]
   ├─ Launch SEV-SNP guest ········································ 12.1s [PASS]
   ├─ Get attestation report ······································· 12ms [FAIL]
   │     ERROR: No space left on device (os error 28)
   │     Error: No space left on device (os error 28)
   ├─ Pull attestation report ··········································· [SKIP]
   ├─ Parse attestation report ·········································· [SKIP]
   ├─ Test determinism ·················································· [SKIP]
   ├─ Test VMPL isolation ··············································· [SKIP]
   ├─ Test root key difference ·········································· [SKIP]
   ├─ Test SVN bound enforcement and sensitivity ························ [SKIP]
   ├─ Test TCB bound enforcement and sensitivity ························ [SKIP]
   ├─ Test GFS sensitivity ·············································· [SKIP]
   ├─ Test GFS field mixing ············································· [SKIP]
   ├─ Save reference key from CVM 1 ····································· [SKIP]
   ├─ Stop CVM 1 ························································ [SKIP]
   ├─ Launch CVM 2 ······················································ [SKIP]
   ├─ Verify key matches across CVMs ···································· [SKIP]
   └─ Stop CVM 2 ························································ [SKIP]
   result:                                                    1/17 failed [FAIL]

   Certification 3.0:                                          1/3 passed [FAIL]

   Wrote /root/results/cert-3.0.json
   Wrote /root/results/cert-3.0.md

── Summary ─────────────────────────────────────────────────────────────────────
   Certification 3.0:                                                  [3.0.0-0]