On Fri, Dec 10, 2021 at 11:37:33 +0000, Daniel P. Berrangé wrote: > Normally the SEV measurement only covers the firmware > loader contents. When doing a direct kernel boot, however, > with new enough OVMF it is possible to ask for the > measurement to cover the kernel, ramdisk and command line. > > It can't be done automatically as that would break existing > guests using direct kernel boot with old firmware, so there > is a new XML setting allowing this behaviour to be toggled. > > Signed-off-by: Daniel P. Berrangé <berrange@xxxxxxxxxx> > --- > docs/formatdomain.rst | 7 ++++++- > docs/schemas/domaincommon.rng | 5 +++++ > src/conf/domain_conf.c | 8 ++++++++ > src/conf/domain_conf.h | 1 + > 4 files changed, 20 insertions(+), 1 deletion(-) Reviewed-by: Peter Krempa <pkrempa@xxxxxxxxxx>
