Re: [libvirt PATCH 1/2] tools: fix handling of CPU family/model/stepping in SEV validation

2023-08-29 Thread Erik Skultety
On Fri, Aug 25, 2023 at 01:52:57PM +0100, Daniel P. Berrangé wrote: > The SEV-ES boot measurement includes the initial CPU register state > (VMSA) and one of the fields includes the CPU identification. When > building a VMSA blob we get the CPU family/model/stepping from the > host capabilities,

Re: [libvirt PATCH 1/2] tools: fix handling of CPU family/model/stepping in SEV validation

2023-08-29 Thread Peter Krempa
On Fri, Aug 25, 2023 at 13:52:57 +0100, Daniel P. Berrangé wrote: > The SEV-ES boot measurement includes the initial CPU register state > (VMSA) and one of the fields includes the CPU identification. When > building a VMSA blob we get the CPU family/model/stepping from the > host capabilities,

[libvirt PATCH 1/2] tools: fix handling of CPU family/model/stepping in SEV validation

2023-08-25 Thread Daniel P . Berrangé
The SEV-ES boot measurement includes the initial CPU register state (VMSA) and one of the fields includes the CPU identification. When building a VMSA blob we get the CPU family/model/stepping from the host capabilities, however, the VMSA must reflect the guest CPU not host CPU. Thus using host