The inspiration for these rules comes from
qemuValidateDomainDef().
Signed-off-by: Michal Privoznik <mprivozn@xxxxxxxxxx>
---
src/qemu/qemu_capabilities.c | 20 +++++++++++++++++++
src/qemu/qemu_capabilities.h | 3 +++
.../domaincapsdata/qemu_4.2.0-q35.x86_64.xml | 3 +++
.../domaincapsdata/qemu_4.2.0-tcg.x86_64.xml | 3 +++
.../qemu_4.2.0-virt.aarch64.xml | 3 +++
tests/domaincapsdata/qemu_4.2.0.aarch64.xml | 3 +++
tests/domaincapsdata/qemu_4.2.0.ppc64.xml | 3 +++
tests/domaincapsdata/qemu_4.2.0.s390x.xml | 3 +++
tests/domaincapsdata/qemu_4.2.0.x86_64.xml | 3 +++
.../domaincapsdata/qemu_5.0.0-q35.x86_64.xml | 3 +++
.../qemu_5.0.0-tcg-virt.riscv64.xml | 3 +++
.../domaincapsdata/qemu_5.0.0-tcg.x86_64.xml | 3 +++
.../qemu_5.0.0-virt.aarch64.xml | 3 +++
.../qemu_5.0.0-virt.riscv64.xml | 3 +++
tests/domaincapsdata/qemu_5.0.0.aarch64.xml | 3 +++
tests/domaincapsdata/qemu_5.0.0.ppc64.xml | 3 +++
tests/domaincapsdata/qemu_5.0.0.x86_64.xml | 3 +++
.../domaincapsdata/qemu_5.1.0-q35.x86_64.xml | 3 +++
.../domaincapsdata/qemu_5.1.0-tcg.x86_64.xml | 3 +++
tests/domaincapsdata/qemu_5.1.0.sparc.xml | 3 +++
tests/domaincapsdata/qemu_5.1.0.x86_64.xml | 3 +++
.../domaincapsdata/qemu_5.2.0-q35.x86_64.xml | 3 +++
.../qemu_5.2.0-tcg-virt.riscv64.xml | 3 +++
.../domaincapsdata/qemu_5.2.0-tcg.x86_64.xml | 3 +++
.../qemu_5.2.0-virt.aarch64.xml | 3 +++
.../qemu_5.2.0-virt.riscv64.xml | 3 +++
tests/domaincapsdata/qemu_5.2.0.aarch64.xml | 3 +++
tests/domaincapsdata/qemu_5.2.0.ppc64.xml | 3 +++
tests/domaincapsdata/qemu_5.2.0.s390x.xml | 3 +++
tests/domaincapsdata/qemu_5.2.0.x86_64.xml | 3 +++
.../domaincapsdata/qemu_6.0.0-q35.x86_64.xml | 5 +++++
.../domaincapsdata/qemu_6.0.0-tcg.x86_64.xml | 5 +++++
.../qemu_6.0.0-virt.aarch64.xml | 3 +++
tests/domaincapsdata/qemu_6.0.0.aarch64.xml | 3 +++
tests/domaincapsdata/qemu_6.0.0.s390x.xml | 5 +++++
tests/domaincapsdata/qemu_6.0.0.x86_64.xml | 5 +++++
.../domaincapsdata/qemu_6.1.0-q35.x86_64.xml | 3 +++
.../domaincapsdata/qemu_6.1.0-tcg.x86_64.xml | 3 +++
tests/domaincapsdata/qemu_6.1.0.x86_64.xml | 3 +++
.../domaincapsdata/qemu_6.2.0-q35.x86_64.xml | 3 +++
.../domaincapsdata/qemu_6.2.0-tcg.x86_64.xml | 3 +++
.../qemu_6.2.0-virt.aarch64.xml | 3 +++
tests/domaincapsdata/qemu_6.2.0.aarch64.xml | 3 +++
tests/domaincapsdata/qemu_6.2.0.ppc64.xml | 3 +++
tests/domaincapsdata/qemu_6.2.0.x86_64.xml | 3 +++
.../qemu_7.0.0-hvf.aarch64+hvf.xml | 3 +++
.../domaincapsdata/qemu_7.0.0-q35.x86_64.xml | 3 +++
.../domaincapsdata/qemu_7.0.0-tcg.x86_64.xml | 3 +++
.../qemu_7.0.0-virt.aarch64.xml | 3 +++
tests/domaincapsdata/qemu_7.0.0.aarch64.xml | 3 +++
tests/domaincapsdata/qemu_7.0.0.ppc64.xml | 3 +++
tests/domaincapsdata/qemu_7.0.0.x86_64.xml | 3 +++
.../domaincapsdata/qemu_7.1.0-q35.x86_64.xml | 3 +++
.../domaincapsdata/qemu_7.1.0-tcg.x86_64.xml | 3 +++
tests/domaincapsdata/qemu_7.1.0.ppc64.xml | 3 +++
tests/domaincapsdata/qemu_7.1.0.x86_64.xml | 3 +++
.../qemu_7.2.0-hvf.x86_64+hvf.xml | 3 +++
.../domaincapsdata/qemu_7.2.0-q35.x86_64.xml | 3 +++
.../qemu_7.2.0-tcg.x86_64+hvf.xml | 3 +++
.../domaincapsdata/qemu_7.2.0-tcg.x86_64.xml | 3 +++
tests/domaincapsdata/qemu_7.2.0.ppc.xml | 3 +++
tests/domaincapsdata/qemu_7.2.0.x86_64.xml | 3 +++
.../domaincapsdata/qemu_8.0.0-q35.x86_64.xml | 3 +++
.../qemu_8.0.0-tcg-virt.riscv64.xml | 3 +++
.../domaincapsdata/qemu_8.0.0-tcg.x86_64.xml | 3 +++
.../qemu_8.0.0-virt.riscv64.xml | 3 +++
tests/domaincapsdata/qemu_8.0.0.x86_64.xml | 3 +++
.../domaincapsdata/qemu_8.1.0-q35.x86_64.xml | 3 +++
.../domaincapsdata/qemu_8.1.0-tcg.x86_64.xml | 3 +++
tests/domaincapsdata/qemu_8.1.0.s390x.xml | 5 +++++
tests/domaincapsdata/qemu_8.1.0.x86_64.xml | 3 +++
.../domaincapsdata/qemu_8.2.0-q35.x86_64.xml | 3 +++
.../qemu_8.2.0-tcg-virt.loongarch64.xml | 3 +++
.../domaincapsdata/qemu_8.2.0-tcg.x86_64.xml | 3 +++
.../qemu_8.2.0-virt.aarch64.xml | 3 +++
.../qemu_8.2.0-virt.loongarch64.xml | 3 +++
tests/domaincapsdata/qemu_8.2.0.aarch64.xml | 3 +++
tests/domaincapsdata/qemu_8.2.0.armv7l.xml | 3 +++
tests/domaincapsdata/qemu_8.2.0.s390x.xml | 5 +++++
tests/domaincapsdata/qemu_8.2.0.x86_64.xml | 3 +++
.../domaincapsdata/qemu_9.0.0-q35.x86_64.xml | 3 +++
.../domaincapsdata/qemu_9.0.0-tcg.x86_64.xml | 3 +++
tests/domaincapsdata/qemu_9.0.0.x86_64.xml | 3 +++
.../domaincapsdata/qemu_9.1.0-q35.x86_64.xml | 3 +++
.../domaincapsdata/qemu_9.1.0-tcg.x86_64.xml | 3 +++
tests/domaincapsdata/qemu_9.1.0.x86_64.xml | 3 +++
86 files changed, 287 insertions(+)
diff --git a/src/qemu/qemu_capabilities.c b/src/qemu/qemu_capabilities.c
index adaf5f9c26..4f9895ba9c 100644
--- a/src/qemu/qemu_capabilities.c
+++ b/src/qemu/qemu_capabilities.c
@@ -6514,6 +6514,24 @@ virQEMUCapsFillDomainDeviceCryptoCaps(virQEMUCaps *qemuCaps,
}
+void
+virQEMUCapsFillDomainLaunchSecurity(virQEMUCaps *qemuCaps,
+ virDomainCapsLaunchSecurity *launchSecurity)
+{
+ launchSecurity->supported = VIR_TRISTATE_BOOL_YES;
+ launchSecurity->sectype.report = true;
+
+ if (virQEMUCapsGet(qemuCaps, QEMU_CAPS_SEV_GUEST))
+ VIR_DOMAIN_CAPS_ENUM_SET(launchSecurity->sectype, VIR_DOMAIN_LAUNCH_SECURITY_SEV);
+ if (virQEMUCapsGet(qemuCaps, QEMU_CAPS_SEV_SNP_GUEST))
+ VIR_DOMAIN_CAPS_ENUM_SET(launchSecurity->sectype, VIR_DOMAIN_LAUNCH_SECURITY_SEV_SNP);
+ if (virQEMUCapsGet(qemuCaps, QEMU_CAPS_S390_PV_GUEST) &&
+ virQEMUCapsGet(qemuCaps, QEMU_CAPS_MACHINE_CONFIDENTAL_GUEST_SUPPORT))
+ VIR_DOMAIN_CAPS_ENUM_SET(launchSecurity->sectype, VIR_DOMAIN_LAUNCH_SECURITY_PV);
+}
+
+
+
/**
* virQEMUCapsSupportsGICVersion:
* @qemuCaps: QEMU capabilities
@@ -6678,6 +6696,7 @@ virQEMUCapsFillDomainCaps(virQEMUCaps *qemuCaps,
virDomainCapsDeviceChannel *channel = &domCaps->channel;
virDomainCapsMemoryBacking *memoryBacking = &domCaps->memoryBacking;
virDomainCapsDeviceCrypto *crypto = &domCaps->crypto;
+ virDomainCapsLaunchSecurity *launchSecurity = &domCaps->launchSecurity;
virQEMUCapsFillDomainFeaturesFromQEMUCaps(qemuCaps, domCaps);
@@ -6717,6 +6736,7 @@ virQEMUCapsFillDomainCaps(virQEMUCaps *qemuCaps,
virQEMUCapsFillDomainFeatureSGXCaps(qemuCaps, domCaps);
virQEMUCapsFillDomainFeatureHypervCaps(qemuCaps, domCaps);
virQEMUCapsFillDomainDeviceCryptoCaps(qemuCaps, crypto);
+ virQEMUCapsFillDomainLaunchSecurity(qemuCaps, launchSecurity);
return 0;
}
diff --git a/src/qemu/qemu_capabilities.h b/src/qemu/qemu_capabilities.h
index a98da8c2eb..ef71e8511e 100644
--- a/src/qemu/qemu_capabilities.h
+++ b/src/qemu/qemu_capabilities.h
@@ -867,6 +867,9 @@ void virQEMUCapsFillDomainDeviceChannelCaps(virQEMUCaps *qemuCaps,
void virQEMUCapsFillDomainDeviceCryptoCaps(virQEMUCaps *qemuCaps,
virDomainCapsDeviceCrypto *crypto);
+void virQEMUCapsFillDomainLaunchSecurity(virQEMUCaps *qemuCaps,
+ virDomainCapsLaunchSecurity *launchSecurity);
+
bool virQEMUCapsGuestIsNative(virArch host,
virArch guest);
diff --git a/tests/domaincapsdata/qemu_4.2.0-q35.x86_64.xml b/tests/domaincapsdata/qemu_4.2.0-q35.x86_64.xml
index c42a20763f..f9aacbfbf9 100644
--- a/tests/domaincapsdata/qemu_4.2.0-q35.x86_64.xml
+++ b/tests/domaincapsdata/qemu_4.2.0-q35.x86_64.xml
@@ -319,5 +319,8 @@
<async-teardown supported='no'/>
<sev supported='no'/>
<sgx supported='no'/>
+ <launchSecurity supported='yes'>
+ <enum name='sectype'/>
+ </launchSecurity>
</features>
</domainCapabilities>
diff --git a/tests/domaincapsdata/qemu_4.2.0-tcg.x86_64.xml b/tests/domaincapsdata/qemu_4.2.0-tcg.x86_64.xml
index 5766bcc428..9a3f15f56b 100644
--- a/tests/domaincapsdata/qemu_4.2.0-tcg.x86_64.xml
+++ b/tests/domaincapsdata/qemu_4.2.0-tcg.x86_64.xml
@@ -264,5 +264,8 @@
<async-teardown supported='no'/>
<sev supported='no'/>
<sgx supported='no'/>
+ <launchSecurity supported='yes'>
+ <enum name='sectype'/>
+ </launchSecurity>
</features>
</domainCapabilities>
diff --git a/tests/domaincapsdata/qemu_4.2.0-virt.aarch64.xml b/tests/domaincapsdata/qemu_4.2.0-virt.aarch64.xml
index ab68d3547b..c5337f602f 100644
--- a/tests/domaincapsdata/qemu_4.2.0-virt.aarch64.xml
+++ b/tests/domaincapsdata/qemu_4.2.0-virt.aarch64.xml
@@ -196,5 +196,8 @@
<async-teardown supported='no'/>
<sev supported='no'/>
<sgx supported='no'/>
+ <launchSecurity supported='yes'>
+ <enum name='sectype'/>
+ </launchSecurity>
</features>
</domainCapabilities>
diff --git a/tests/domaincapsdata/qemu_4.2.0.aarch64.xml b/tests/domaincapsdata/qemu_4.2.0.aarch64.xml
index ab68d3547b..c5337f602f 100644
--- a/tests/domaincapsdata/qemu_4.2.0.aarch64.xml
+++ b/tests/domaincapsdata/qemu_4.2.0.aarch64.xml
@@ -196,5 +196,8 @@
<async-teardown supported='no'/>
<sev supported='no'/>
<sgx supported='no'/>
+ <launchSecurity supported='yes'>
+ <enum name='sectype'/>
+ </launchSecurity>
</features>
</domainCapabilities>
diff --git a/tests/domaincapsdata/qemu_4.2.0.ppc64.xml b/tests/domaincapsdata/qemu_4.2.0.ppc64.xml
index 66a9ba87e9..735d563e1b 100644
--- a/tests/domaincapsdata/qemu_4.2.0.ppc64.xml
+++ b/tests/domaincapsdata/qemu_4.2.0.ppc64.xml
@@ -164,5 +164,8 @@
<async-teardown supported='no'/>
<sev supported='no'/>
<sgx supported='no'/>
+ <launchSecurity supported='yes'>
+ <enum name='sectype'/>
+ </launchSecurity>
</features>
</domainCapabilities>
diff --git a/tests/domaincapsdata/qemu_4.2.0.s390x.xml b/tests/domaincapsdata/qemu_4.2.0.s390x.xml
index c0567ffdde..e275d71d5d 100644
--- a/tests/domaincapsdata/qemu_4.2.0.s390x.xml
+++ b/tests/domaincapsdata/qemu_4.2.0.s390x.xml
@@ -270,5 +270,8 @@
<s390-pv supported='no'/>
<sev supported='no'/>
<sgx supported='no'/>
+ <launchSecurity supported='yes'>
+ <enum name='sectype'/>
+ </launchSecurity>
</features>
</domainCapabilities>
diff --git a/tests/domaincapsdata/qemu_4.2.0.x86_64.xml b/tests/domaincapsdata/qemu_4.2.0.x86_64.xml
index 27199ff0c5..68caf22e4a 100644
--- a/tests/domaincapsdata/qemu_4.2.0.x86_64.xml
+++ b/tests/domaincapsdata/qemu_4.2.0.x86_64.xml
@@ -319,5 +319,8 @@
<async-teardown supported='no'/>
<sev supported='no'/>
<sgx supported='no'/>
+ <launchSecurity supported='yes'>
+ <enum name='sectype'/>
+ </launchSecurity>
</features>
</domainCapabilities>
diff --git a/tests/domaincapsdata/qemu_5.0.0-q35.x86_64.xml b/tests/domaincapsdata/qemu_5.0.0-q35.x86_64.xml
index a4db647efc..18ed6c5929 100644
--- a/tests/domaincapsdata/qemu_5.0.0-q35.x86_64.xml
+++ b/tests/domaincapsdata/qemu_5.0.0-q35.x86_64.xml
@@ -321,5 +321,8 @@
<async-teardown supported='no'/>
<sev supported='no'/>
<sgx supported='no'/>
+ <launchSecurity supported='yes'>
+ <enum name='sectype'/>
+ </launchSecurity>
</features>
</domainCapabilities>
diff --git a/tests/domaincapsdata/qemu_5.0.0-tcg-virt.riscv64.xml b/tests/domaincapsdata/qemu_5.0.0-tcg-virt.riscv64.xml
index 1c7d7c97df..e2a4ac3c66 100644
--- a/tests/domaincapsdata/qemu_5.0.0-tcg-virt.riscv64.xml
+++ b/tests/domaincapsdata/qemu_5.0.0-tcg-virt.riscv64.xml
@@ -149,5 +149,8 @@
<async-teardown supported='no'/>
<sev supported='no'/>
<sgx supported='no'/>
+ <launchSecurity supported='yes'>
+ <enum name='sectype'/>
+ </launchSecurity>
</features>
</domainCapabilities>
diff --git a/tests/domaincapsdata/qemu_5.0.0-tcg.x86_64.xml b/tests/domaincapsdata/qemu_5.0.0-tcg.x86_64.xml
index d2b82e5581..520cf1fa30 100644
--- a/tests/domaincapsdata/qemu_5.0.0-tcg.x86_64.xml
+++ b/tests/domaincapsdata/qemu_5.0.0-tcg.x86_64.xml
@@ -266,5 +266,8 @@
<async-teardown supported='no'/>
<sev supported='no'/>
<sgx supported='no'/>
+ <launchSecurity supported='yes'>
+ <enum name='sectype'/>
+ </launchSecurity>
</features>
</domainCapabilities>
diff --git a/tests/domaincapsdata/qemu_5.0.0-virt.aarch64.xml b/tests/domaincapsdata/qemu_5.0.0-virt.aarch64.xml
index d3cd333c07..6899e58ff2 100644
--- a/tests/domaincapsdata/qemu_5.0.0-virt.aarch64.xml
+++ b/tests/domaincapsdata/qemu_5.0.0-virt.aarch64.xml
@@ -209,5 +209,8 @@
<async-teardown supported='no'/>
<sev supported='no'/>
<sgx supported='no'/>
+ <launchSecurity supported='yes'>
+ <enum name='sectype'/>
+ </launchSecurity>
</features>
</domainCapabilities>
diff --git a/tests/domaincapsdata/qemu_5.0.0-virt.riscv64.xml b/tests/domaincapsdata/qemu_5.0.0-virt.riscv64.xml
index 3272241b8f..3780a0c765 100644
--- a/tests/domaincapsdata/qemu_5.0.0-virt.riscv64.xml
+++ b/tests/domaincapsdata/qemu_5.0.0-virt.riscv64.xml
@@ -152,5 +152,8 @@
<async-teardown supported='no'/>
<sev supported='no'/>
<sgx supported='no'/>
+ <launchSecurity supported='yes'>
+ <enum name='sectype'/>
+ </launchSecurity>
</features>
</domainCapabilities>
diff --git a/tests/domaincapsdata/qemu_5.0.0.aarch64.xml b/tests/domaincapsdata/qemu_5.0.0.aarch64.xml
index d3cd333c07..6899e58ff2 100644
--- a/tests/domaincapsdata/qemu_5.0.0.aarch64.xml
+++ b/tests/domaincapsdata/qemu_5.0.0.aarch64.xml
@@ -209,5 +209,8 @@
<async-teardown supported='no'/>
<sev supported='no'/>
<sgx supported='no'/>
+ <launchSecurity supported='yes'>
+ <enum name='sectype'/>
+ </launchSecurity>
</features>
</domainCapabilities>
diff --git a/tests/domaincapsdata/qemu_5.0.0.ppc64.xml b/tests/domaincapsdata/qemu_5.0.0.ppc64.xml
index 5f29f5c4ae..9e640a7e63 100644
--- a/tests/domaincapsdata/qemu_5.0.0.ppc64.xml
+++ b/tests/domaincapsdata/qemu_5.0.0.ppc64.xml
@@ -171,5 +171,8 @@
<async-teardown supported='no'/>
<sev supported='no'/>
<sgx supported='no'/>
+ <launchSecurity supported='yes'>
+ <enum name='sectype'/>
+ </launchSecurity>
</features>
</domainCapabilities>
diff --git a/tests/domaincapsdata/qemu_5.0.0.x86_64.xml b/tests/domaincapsdata/qemu_5.0.0.x86_64.xml
index 56b94b1ea0..c939476333 100644
--- a/tests/domaincapsdata/qemu_5.0.0.x86_64.xml
+++ b/tests/domaincapsdata/qemu_5.0.0.x86_64.xml
@@ -321,5 +321,8 @@
<async-teardown supported='no'/>
<sev supported='no'/>
<sgx supported='no'/>
+ <launchSecurity supported='yes'>
+ <enum name='sectype'/>
+ </launchSecurity>
</features>
</domainCapabilities>
diff --git a/tests/domaincapsdata/qemu_5.1.0-q35.x86_64.xml b/tests/domaincapsdata/qemu_5.1.0-q35.x86_64.xml
index 2a8a784813..31b312e26e 100644
--- a/tests/domaincapsdata/qemu_5.1.0-q35.x86_64.xml
+++ b/tests/domaincapsdata/qemu_5.1.0-q35.x86_64.xml
@@ -253,5 +253,8 @@
<async-teardown supported='no'/>
<sev supported='no'/>
<sgx supported='no'/>
+ <launchSecurity supported='yes'>
+ <enum name='sectype'/>
+ </launchSecurity>
</features>
</domainCapabilities>
diff --git a/tests/domaincapsdata/qemu_5.1.0-tcg.x86_64.xml b/tests/domaincapsdata/qemu_5.1.0-tcg.x86_64.xml
index 2743f91431..9c442ff803 100644
--- a/tests/domaincapsdata/qemu_5.1.0-tcg.x86_64.xml
+++ b/tests/domaincapsdata/qemu_5.1.0-tcg.x86_64.xml
@@ -266,5 +266,8 @@
<async-teardown supported='no'/>
<sev supported='no'/>
<sgx supported='no'/>
+ <launchSecurity supported='yes'>
+ <enum name='sectype'/>
+ </launchSecurity>
</features>
</domainCapabilities>
diff --git a/tests/domaincapsdata/qemu_5.1.0.sparc.xml b/tests/domaincapsdata/qemu_5.1.0.sparc.xml
index 7baee953ce..3752115e46 100644
--- a/tests/domaincapsdata/qemu_5.1.0.sparc.xml
+++ b/tests/domaincapsdata/qemu_5.1.0.sparc.xml
@@ -135,5 +135,8 @@
<async-teardown supported='no'/>
<sev supported='no'/>
<sgx supported='no'/>
+ <launchSecurity supported='yes'>
+ <enum name='sectype'/>
+ </launchSecurity>
</features>
</domainCapabilities>
diff --git a/tests/domaincapsdata/qemu_5.1.0.x86_64.xml b/tests/domaincapsdata/qemu_5.1.0.x86_64.xml
index 735cd42466..b634db1fd6 100644
--- a/tests/domaincapsdata/qemu_5.1.0.x86_64.xml
+++ b/tests/domaincapsdata/qemu_5.1.0.x86_64.xml
@@ -253,5 +253,8 @@
<async-teardown supported='no'/>
<sev supported='no'/>
<sgx supported='no'/>
+ <launchSecurity supported='yes'>
+ <enum name='sectype'/>
+ </launchSecurity>
</features>
</domainCapabilities>
diff --git a/tests/domaincapsdata/qemu_5.2.0-q35.x86_64.xml b/tests/domaincapsdata/qemu_5.2.0-q35.x86_64.xml
index 968cfe68e8..ed4112461f 100644
--- a/tests/domaincapsdata/qemu_5.2.0-q35.x86_64.xml
+++ b/tests/domaincapsdata/qemu_5.2.0-q35.x86_64.xml
@@ -253,5 +253,8 @@
<async-teardown supported='no'/>
<sev supported='no'/>
<sgx supported='no'/>
+ <launchSecurity supported='yes'>
+ <enum name='sectype'/>
+ </launchSecurity>
</features>
</domainCapabilities>
diff --git a/tests/domaincapsdata/qemu_5.2.0-tcg-virt.riscv64.xml b/tests/domaincapsdata/qemu_5.2.0-tcg-virt.riscv64.xml
index 1c7d7c97df..e2a4ac3c66 100644
--- a/tests/domaincapsdata/qemu_5.2.0-tcg-virt.riscv64.xml
+++ b/tests/domaincapsdata/qemu_5.2.0-tcg-virt.riscv64.xml
@@ -149,5 +149,8 @@
<async-teardown supported='no'/>
<sev supported='no'/>
<sgx supported='no'/>
+ <launchSecurity supported='yes'>
+ <enum name='sectype'/>
+ </launchSecurity>
</features>
</domainCapabilities>
diff --git a/tests/domaincapsdata/qemu_5.2.0-tcg.x86_64.xml b/tests/domaincapsdata/qemu_5.2.0-tcg.x86_64.xml
index 7e5f3c8c2b..bc28ada928 100644
--- a/tests/domaincapsdata/qemu_5.2.0-tcg.x86_64.xml
+++ b/tests/domaincapsdata/qemu_5.2.0-tcg.x86_64.xml
@@ -266,5 +266,8 @@
<async-teardown supported='no'/>
<sev supported='no'/>
<sgx supported='no'/>
+ <launchSecurity supported='yes'>
+ <enum name='sectype'/>
+ </launchSecurity>
</features>
</domainCapabilities>
diff --git a/tests/domaincapsdata/qemu_5.2.0-virt.aarch64.xml b/tests/domaincapsdata/qemu_5.2.0-virt.aarch64.xml
index f32634548b..3ad9cf7a39 100644
--- a/tests/domaincapsdata/qemu_5.2.0-virt.aarch64.xml
+++ b/tests/domaincapsdata/qemu_5.2.0-virt.aarch64.xml
@@ -209,5 +209,8 @@
<async-teardown supported='no'/>
<sev supported='no'/>
<sgx supported='no'/>
+ <launchSecurity supported='yes'>
+ <enum name='sectype'/>
+ </launchSecurity>
</features>
</domainCapabilities>
diff --git a/tests/domaincapsdata/qemu_5.2.0-virt.riscv64.xml b/tests/domaincapsdata/qemu_5.2.0-virt.riscv64.xml
index 3272241b8f..3780a0c765 100644
--- a/tests/domaincapsdata/qemu_5.2.0-virt.riscv64.xml
+++ b/tests/domaincapsdata/qemu_5.2.0-virt.riscv64.xml
@@ -152,5 +152,8 @@
<async-teardown supported='no'/>
<sev supported='no'/>
<sgx supported='no'/>
+ <launchSecurity supported='yes'>
+ <enum name='sectype'/>
+ </launchSecurity>
</features>
</domainCapabilities>
diff --git a/tests/domaincapsdata/qemu_5.2.0.aarch64.xml b/tests/domaincapsdata/qemu_5.2.0.aarch64.xml
index f32634548b..3ad9cf7a39 100644
--- a/tests/domaincapsdata/qemu_5.2.0.aarch64.xml
+++ b/tests/domaincapsdata/qemu_5.2.0.aarch64.xml
@@ -209,5 +209,8 @@
<async-teardown supported='no'/>
<sev supported='no'/>
<sgx supported='no'/>
+ <launchSecurity supported='yes'>
+ <enum name='sectype'/>
+ </launchSecurity>
</features>
</domainCapabilities>
diff --git a/tests/domaincapsdata/qemu_5.2.0.ppc64.xml b/tests/domaincapsdata/qemu_5.2.0.ppc64.xml
index 96fd13e06e..791bf6e60e 100644
--- a/tests/domaincapsdata/qemu_5.2.0.ppc64.xml
+++ b/tests/domaincapsdata/qemu_5.2.0.ppc64.xml
@@ -171,5 +171,8 @@
<async-teardown supported='no'/>
<sev supported='no'/>
<sgx supported='no'/>
+ <launchSecurity supported='yes'>
+ <enum name='sectype'/>
+ </launchSecurity>
</features>
</domainCapabilities>
diff --git a/tests/domaincapsdata/qemu_5.2.0.s390x.xml b/tests/domaincapsdata/qemu_5.2.0.s390x.xml
index 2af88d081a..5189544d66 100644
--- a/tests/domaincapsdata/qemu_5.2.0.s390x.xml
+++ b/tests/domaincapsdata/qemu_5.2.0.s390x.xml
@@ -272,5 +272,8 @@
<s390-pv supported='no'/>
<sev supported='no'/>
<sgx supported='no'/>
+ <launchSecurity supported='yes'>
+ <enum name='sectype'/>
+ </launchSecurity>
</features>
</domainCapabilities>
diff --git a/tests/domaincapsdata/qemu_5.2.0.x86_64.xml b/tests/domaincapsdata/qemu_5.2.0.x86_64.xml
index 9bbb22b0d8..99a565072b 100644
--- a/tests/domaincapsdata/qemu_5.2.0.x86_64.xml
+++ b/tests/domaincapsdata/qemu_5.2.0.x86_64.xml
@@ -253,5 +253,8 @@
<async-teardown supported='no'/>
<sev supported='no'/>
<sgx supported='no'/>
+ <launchSecurity supported='yes'>
+ <enum name='sectype'/>
+ </launchSecurity>
</features>
</domainCapabilities>
diff --git a/tests/domaincapsdata/qemu_6.0.0-q35.x86_64.xml b/tests/domaincapsdata/qemu_6.0.0-q35.x86_64.xml
index 66da296d8e..ed2511d138 100644
--- a/tests/domaincapsdata/qemu_6.0.0-q35.x86_64.xml
+++ b/tests/domaincapsdata/qemu_6.0.0-q35.x86_64.xml
@@ -260,5 +260,10 @@
<maxESGuests>450</maxESGuests>
</sev>
<sgx supported='no'/>
+ <launchSecurity supported='yes'>
+ <enum name='sectype'>
+ <value>sev</value>
+ </enum>
+ </launchSecurity>
</features>
</domainCapabilities>
diff --git a/tests/domaincapsdata/qemu_6.0.0-tcg.x86_64.xml b/tests/domaincapsdata/qemu_6.0.0-tcg.x86_64.xml
index 169e777644..b4c9092996 100644
--- a/tests/domaincapsdata/qemu_6.0.0-tcg.x86_64.xml
+++ b/tests/domaincapsdata/qemu_6.0.0-tcg.x86_64.xml
@@ -274,5 +274,10 @@
<maxESGuests>450</maxESGuests>
</sev>
<sgx supported='no'/>
+ <launchSecurity supported='yes'>
+ <enum name='sectype'>
+ <value>sev</value>
+ </enum>
+ </launchSecurity>
</features>
</domainCapabilities>
diff --git a/tests/domaincapsdata/qemu_6.0.0-virt.aarch64.xml b/tests/domaincapsdata/qemu_6.0.0-virt.aarch64.xml
index 64e62aacf2..6a0a497b83 100644
--- a/tests/domaincapsdata/qemu_6.0.0-virt.aarch64.xml
+++ b/tests/domaincapsdata/qemu_6.0.0-virt.aarch64.xml
@@ -211,5 +211,8 @@
<async-teardown supported='no'/>
<sev supported='no'/>
<sgx supported='no'/>
+ <launchSecurity supported='yes'>
+ <enum name='sectype'/>
+ </launchSecurity>
</features>
</domainCapabilities>
diff --git a/tests/domaincapsdata/qemu_6.0.0.aarch64.xml b/tests/domaincapsdata/qemu_6.0.0.aarch64.xml
index 64e62aacf2..6a0a497b83 100644
--- a/tests/domaincapsdata/qemu_6.0.0.aarch64.xml
+++ b/tests/domaincapsdata/qemu_6.0.0.aarch64.xml
@@ -211,5 +211,8 @@
<async-teardown supported='no'/>
<sev supported='no'/>
<sgx supported='no'/>
+ <launchSecurity supported='yes'>
+ <enum name='sectype'/>
+ </launchSecurity>
</features>
</domainCapabilities>
diff --git a/tests/domaincapsdata/qemu_6.0.0.s390x.xml b/tests/domaincapsdata/qemu_6.0.0.s390x.xml
index c8dd1e88c9..d4fdef3791 100644
--- a/tests/domaincapsdata/qemu_6.0.0.s390x.xml
+++ b/tests/domaincapsdata/qemu_6.0.0.s390x.xml
@@ -273,5 +273,10 @@
<s390-pv supported='yes'/>
<sev supported='no'/>
<sgx supported='no'/>
+ <launchSecurity supported='yes'>
+ <enum name='sectype'>
+ <value>s390-pv</value>
+ </enum>
+ </launchSecurity>
</features>
</domainCapabilities>
diff --git a/tests/domaincapsdata/qemu_6.0.0.x86_64.xml b/tests/domaincapsdata/qemu_6.0.0.x86_64.xml
index 0af8b9d064..557c22a67e 100644
--- a/tests/domaincapsdata/qemu_6.0.0.x86_64.xml
+++ b/tests/domaincapsdata/qemu_6.0.0.x86_64.xml
@@ -260,5 +260,10 @@
<maxESGuests>450</maxESGuests>
</sev>
<sgx supported='no'/>
+ <launchSecurity supported='yes'>
+ <enum name='sectype'>
+ <value>sev</value>
+ </enum>
+ </launchSecurity>
</features>
</domainCapabilities>
diff --git a/tests/domaincapsdata/qemu_6.1.0-q35.x86_64.xml b/tests/domaincapsdata/qemu_6.1.0-q35.x86_64.xml
index cc2081955d..ae8f0bcda1 100644
--- a/tests/domaincapsdata/qemu_6.1.0-q35.x86_64.xml
+++ b/tests/domaincapsdata/qemu_6.1.0-q35.x86_64.xml
@@ -256,5 +256,8 @@
<async-teardown supported='no'/>
<sev supported='no'/>
<sgx supported='no'/>
+ <launchSecurity supported='yes'>
+ <enum name='sectype'/>
+ </launchSecurity>
</features>
</domainCapabilities>
diff --git a/tests/domaincapsdata/qemu_6.1.0-tcg.x86_64.xml b/tests/domaincapsdata/qemu_6.1.0-tcg.x86_64.xml
index 35f31f4ae8..59ee5c3c67 100644
--- a/tests/domaincapsdata/qemu_6.1.0-tcg.x86_64.xml
+++ b/tests/domaincapsdata/qemu_6.1.0-tcg.x86_64.xml
@@ -269,5 +269,8 @@
<async-teardown supported='no'/>
<sev supported='no'/>
<sgx supported='no'/>
+ <launchSecurity supported='yes'>
+ <enum name='sectype'/>
+ </launchSecurity>
</features>
</domainCapabilities>
diff --git a/tests/domaincapsdata/qemu_6.1.0.x86_64.xml b/tests/domaincapsdata/qemu_6.1.0.x86_64.xml
index 22f8c8a397..3c13c2712c 100644
--- a/tests/domaincapsdata/qemu_6.1.0.x86_64.xml
+++ b/tests/domaincapsdata/qemu_6.1.0.x86_64.xml
@@ -256,5 +256,8 @@
<async-teardown supported='no'/>
<sev supported='no'/>
<sgx supported='no'/>
+ <launchSecurity supported='yes'>
+ <enum name='sectype'/>
+ </launchSecurity>
</features>
</domainCapabilities>
diff --git a/tests/domaincapsdata/qemu_6.2.0-q35.x86_64.xml b/tests/domaincapsdata/qemu_6.2.0-q35.x86_64.xml
index 782aa792a9..4df5b1b3ab 100644
--- a/tests/domaincapsdata/qemu_6.2.0-q35.x86_64.xml
+++ b/tests/domaincapsdata/qemu_6.2.0-q35.x86_64.xml
@@ -256,5 +256,8 @@
<async-teardown supported='no'/>
<sev supported='no'/>
<sgx supported='no'/>
+ <launchSecurity supported='yes'>
+ <enum name='sectype'/>
+ </launchSecurity>
</features>
</domainCapabilities>
diff --git a/tests/domaincapsdata/qemu_6.2.0-tcg.x86_64.xml b/tests/domaincapsdata/qemu_6.2.0-tcg.x86_64.xml
index fa1c32f138..9f3e6cb9de 100644
--- a/tests/domaincapsdata/qemu_6.2.0-tcg.x86_64.xml
+++ b/tests/domaincapsdata/qemu_6.2.0-tcg.x86_64.xml
@@ -271,5 +271,8 @@
<async-teardown supported='no'/>
<sev supported='no'/>
<sgx supported='no'/>
+ <launchSecurity supported='yes'>
+ <enum name='sectype'/>
+ </launchSecurity>
</features>
</domainCapabilities>
diff --git a/tests/domaincapsdata/qemu_6.2.0-virt.aarch64.xml b/tests/domaincapsdata/qemu_6.2.0-virt.aarch64.xml
index 64bed8b367..682d796ba9 100644
--- a/tests/domaincapsdata/qemu_6.2.0-virt.aarch64.xml
+++ b/tests/domaincapsdata/qemu_6.2.0-virt.aarch64.xml
@@ -218,5 +218,8 @@
<async-teardown supported='no'/>
<sev supported='no'/>
<sgx supported='no'/>
+ <launchSecurity supported='yes'>
+ <enum name='sectype'/>
+ </launchSecurity>
</features>
</domainCapabilities>
diff --git a/tests/domaincapsdata/qemu_6.2.0.aarch64.xml b/tests/domaincapsdata/qemu_6.2.0.aarch64.xml
index 64bed8b367..682d796ba9 100644
--- a/tests/domaincapsdata/qemu_6.2.0.aarch64.xml
+++ b/tests/domaincapsdata/qemu_6.2.0.aarch64.xml
@@ -218,5 +218,8 @@
<async-teardown supported='no'/>
<sev supported='no'/>
<sgx supported='no'/>
+ <launchSecurity supported='yes'>
+ <enum name='sectype'/>
+ </launchSecurity>
</features>
</domainCapabilities>
diff --git a/tests/domaincapsdata/qemu_6.2.0.ppc64.xml b/tests/domaincapsdata/qemu_6.2.0.ppc64.xml
index 69a6bcc8bc..b7336e995d 100644
--- a/tests/domaincapsdata/qemu_6.2.0.ppc64.xml
+++ b/tests/domaincapsdata/qemu_6.2.0.ppc64.xml
@@ -170,5 +170,8 @@
<async-teardown supported='no'/>
<sev supported='no'/>
<sgx supported='no'/>
+ <launchSecurity supported='yes'>
+ <enum name='sectype'/>
+ </launchSecurity>
</features>
</domainCapabilities>
diff --git a/tests/domaincapsdata/qemu_6.2.0.x86_64.xml b/tests/domaincapsdata/qemu_6.2.0.x86_64.xml
index e6283ff153..dbc25bd48e 100644
--- a/tests/domaincapsdata/qemu_6.2.0.x86_64.xml
+++ b/tests/domaincapsdata/qemu_6.2.0.x86_64.xml
@@ -256,5 +256,8 @@
<async-teardown supported='no'/>
<sev supported='no'/>
<sgx supported='no'/>
+ <launchSecurity supported='yes'>
+ <enum name='sectype'/>
+ </launchSecurity>
</features>
</domainCapabilities>
diff --git a/tests/domaincapsdata/qemu_7.0.0-hvf.aarch64+hvf.xml b/tests/domaincapsdata/qemu_7.0.0-hvf.aarch64+hvf.xml
index 94a79e8743..5b4e05f91e 100644
--- a/tests/domaincapsdata/qemu_7.0.0-hvf.aarch64+hvf.xml
+++ b/tests/domaincapsdata/qemu_7.0.0-hvf.aarch64+hvf.xml
@@ -172,5 +172,8 @@
<async-teardown supported='no'/>
<sev supported='no'/>
<sgx supported='no'/>
+ <launchSecurity supported='yes'>
+ <enum name='sectype'/>
+ </launchSecurity>
</features>
</domainCapabilities>
diff --git a/tests/domaincapsdata/qemu_7.0.0-q35.x86_64.xml b/tests/domaincapsdata/qemu_7.0.0-q35.x86_64.xml
index 50b2ee2ffe..59953e6309 100644
--- a/tests/domaincapsdata/qemu_7.0.0-q35.x86_64.xml
+++ b/tests/domaincapsdata/qemu_7.0.0-q35.x86_64.xml
@@ -266,5 +266,8 @@
<section node='1' size='262144' unit='KiB'/>
</sections>
</sgx>
+ <launchSecurity supported='yes'>
+ <enum name='sectype'/>
+ </launchSecurity>
</features>
</domainCapabilities>
diff --git a/tests/domaincapsdata/qemu_7.0.0-tcg.x86_64.xml b/tests/domaincapsdata/qemu_7.0.0-tcg.x86_64.xml
index 8a98f7ed87..02e585816a 100644
--- a/tests/domaincapsdata/qemu_7.0.0-tcg.x86_64.xml
+++ b/tests/domaincapsdata/qemu_7.0.0-tcg.x86_64.xml
@@ -281,5 +281,8 @@
<section node='1' size='262144' unit='KiB'/>
</sections>
</sgx>
+ <launchSecurity supported='yes'>
+ <enum name='sectype'/>
+ </launchSecurity>
</features>
</domainCapabilities>
diff --git a/tests/domaincapsdata/qemu_7.0.0-virt.aarch64.xml b/tests/domaincapsdata/qemu_7.0.0-virt.aarch64.xml
index d5830c46a3..86ec857aaa 100644
--- a/tests/domaincapsdata/qemu_7.0.0-virt.aarch64.xml
+++ b/tests/domaincapsdata/qemu_7.0.0-virt.aarch64.xml
@@ -217,5 +217,8 @@
<async-teardown supported='no'/>
<sev supported='no'/>
<sgx supported='no'/>
+ <launchSecurity supported='yes'>
+ <enum name='sectype'/>
+ </launchSecurity>
</features>
</domainCapabilities>
diff --git a/tests/domaincapsdata/qemu_7.0.0.aarch64.xml b/tests/domaincapsdata/qemu_7.0.0.aarch64.xml
index d5830c46a3..86ec857aaa 100644
--- a/tests/domaincapsdata/qemu_7.0.0.aarch64.xml
+++ b/tests/domaincapsdata/qemu_7.0.0.aarch64.xml
@@ -217,5 +217,8 @@
<async-teardown supported='no'/>
<sev supported='no'/>
<sgx supported='no'/>
+ <launchSecurity supported='yes'>
+ <enum name='sectype'/>
+ </launchSecurity>
</features>
</domainCapabilities>
diff --git a/tests/domaincapsdata/qemu_7.0.0.ppc64.xml b/tests/domaincapsdata/qemu_7.0.0.ppc64.xml
index c865dcf418..83ac4a9ba9 100644
--- a/tests/domaincapsdata/qemu_7.0.0.ppc64.xml
+++ b/tests/domaincapsdata/qemu_7.0.0.ppc64.xml
@@ -175,5 +175,8 @@
<async-teardown supported='no'/>
<sev supported='no'/>
<sgx supported='no'/>
+ <launchSecurity supported='yes'>
+ <enum name='sectype'/>
+ </launchSecurity>
</features>
</domainCapabilities>
diff --git a/tests/domaincapsdata/qemu_7.0.0.x86_64.xml b/tests/domaincapsdata/qemu_7.0.0.x86_64.xml
index fa4b912168..b0dd57f4f7 100644
--- a/tests/domaincapsdata/qemu_7.0.0.x86_64.xml
+++ b/tests/domaincapsdata/qemu_7.0.0.x86_64.xml
@@ -266,5 +266,8 @@
<section node='1' size='262144' unit='KiB'/>
</sections>
</sgx>
+ <launchSecurity supported='yes'>
+ <enum name='sectype'/>
+ </launchSecurity>
</features>
</domainCapabilities>
diff --git a/tests/domaincapsdata/qemu_7.1.0-q35.x86_64.xml b/tests/domaincapsdata/qemu_7.1.0-q35.x86_64.xml
index 2eec2e3162..d68ba222e2 100644
--- a/tests/domaincapsdata/qemu_7.1.0-q35.x86_64.xml
+++ b/tests/domaincapsdata/qemu_7.1.0-q35.x86_64.xml
@@ -256,5 +256,8 @@
<async-teardown supported='no'/>
<sev supported='no'/>
<sgx supported='no'/>
+ <launchSecurity supported='yes'>
+ <enum name='sectype'/>
+ </launchSecurity>
</features>
</domainCapabilities>
diff --git a/tests/domaincapsdata/qemu_7.1.0-tcg.x86_64.xml b/tests/domaincapsdata/qemu_7.1.0-tcg.x86_64.xml
index 4741164370..a9c4b36f90 100644
--- a/tests/domaincapsdata/qemu_7.1.0-tcg.x86_64.xml
+++ b/tests/domaincapsdata/qemu_7.1.0-tcg.x86_64.xml
@@ -270,5 +270,8 @@
<async-teardown supported='no'/>
<sev supported='no'/>
<sgx supported='no'/>
+ <launchSecurity supported='yes'>
+ <enum name='sectype'/>
+ </launchSecurity>
</features>
</domainCapabilities>
diff --git a/tests/domaincapsdata/qemu_7.1.0.ppc64.xml b/tests/domaincapsdata/qemu_7.1.0.ppc64.xml
index aa3a0571b6..5aec717752 100644
--- a/tests/domaincapsdata/qemu_7.1.0.ppc64.xml
+++ b/tests/domaincapsdata/qemu_7.1.0.ppc64.xml
@@ -168,5 +168,8 @@
<async-teardown supported='no'/>
<sev supported='no'/>
<sgx supported='no'/>
+ <launchSecurity supported='yes'>
+ <enum name='sectype'/>
+ </launchSecurity>
</features>
</domainCapabilities>
diff --git a/tests/domaincapsdata/qemu_7.1.0.x86_64.xml b/tests/domaincapsdata/qemu_7.1.0.x86_64.xml
index 449e1b51d1..1e33d89b6e 100644
--- a/tests/domaincapsdata/qemu_7.1.0.x86_64.xml
+++ b/tests/domaincapsdata/qemu_7.1.0.x86_64.xml
@@ -256,5 +256,8 @@
<async-teardown supported='no'/>
<sev supported='no'/>
<sgx supported='no'/>
+ <launchSecurity supported='yes'>
+ <enum name='sectype'/>
+ </launchSecurity>
</features>
</domainCapabilities>
diff --git a/tests/domaincapsdata/qemu_7.2.0-hvf.x86_64+hvf.xml b/tests/domaincapsdata/qemu_7.2.0-hvf.x86_64+hvf.xml
index dfd319431e..076a1daa99 100644
--- a/tests/domaincapsdata/qemu_7.2.0-hvf.x86_64+hvf.xml
+++ b/tests/domaincapsdata/qemu_7.2.0-hvf.x86_64+hvf.xml
@@ -179,5 +179,8 @@
<async-teardown supported='no'/>
<sev supported='no'/>
<sgx supported='no'/>
+ <launchSecurity supported='yes'>
+ <enum name='sectype'/>
+ </launchSecurity>
</features>
</domainCapabilities>
diff --git a/tests/domaincapsdata/qemu_7.2.0-q35.x86_64.xml b/tests/domaincapsdata/qemu_7.2.0-q35.x86_64.xml
index e48a07da28..7d855b68c5 100644
--- a/tests/domaincapsdata/qemu_7.2.0-q35.x86_64.xml
+++ b/tests/domaincapsdata/qemu_7.2.0-q35.x86_64.xml
@@ -262,5 +262,8 @@
<async-teardown supported='no'/>
<sev supported='no'/>
<sgx supported='no'/>
+ <launchSecurity supported='yes'>
+ <enum name='sectype'/>
+ </launchSecurity>
</features>
</domainCapabilities>
diff --git a/tests/domaincapsdata/qemu_7.2.0-tcg.x86_64+hvf.xml b/tests/domaincapsdata/qemu_7.2.0-tcg.x86_64+hvf.xml
index bba0e5069b..42b889b1d2 100644
--- a/tests/domaincapsdata/qemu_7.2.0-tcg.x86_64+hvf.xml
+++ b/tests/domaincapsdata/qemu_7.2.0-tcg.x86_64+hvf.xml
@@ -260,5 +260,8 @@
<async-teardown supported='no'/>
<sev supported='no'/>
<sgx supported='no'/>
+ <launchSecurity supported='yes'>
+ <enum name='sectype'/>
+ </launchSecurity>
</features>
</domainCapabilities>
diff --git a/tests/domaincapsdata/qemu_7.2.0-tcg.x86_64.xml b/tests/domaincapsdata/qemu_7.2.0-tcg.x86_64.xml
index bba0e5069b..42b889b1d2 100644
--- a/tests/domaincapsdata/qemu_7.2.0-tcg.x86_64.xml
+++ b/tests/domaincapsdata/qemu_7.2.0-tcg.x86_64.xml
@@ -260,5 +260,8 @@
<async-teardown supported='no'/>
<sev supported='no'/>
<sgx supported='no'/>
+ <launchSecurity supported='yes'>
+ <enum name='sectype'/>
+ </launchSecurity>
</features>
</domainCapabilities>
diff --git a/tests/domaincapsdata/qemu_7.2.0.ppc.xml b/tests/domaincapsdata/qemu_7.2.0.ppc.xml
index 7fd4b1ce17..f76d41b7a3 100644
--- a/tests/domaincapsdata/qemu_7.2.0.ppc.xml
+++ b/tests/domaincapsdata/qemu_7.2.0.ppc.xml
@@ -154,5 +154,8 @@
<async-teardown supported='no'/>
<sev supported='no'/>
<sgx supported='no'/>
+ <launchSecurity supported='yes'>
+ <enum name='sectype'/>
+ </launchSecurity>
</features>
</domainCapabilities>
diff --git a/tests/domaincapsdata/qemu_7.2.0.x86_64.xml b/tests/domaincapsdata/qemu_7.2.0.x86_64.xml
index d116cf2e48..5ca0ad53c7 100644
--- a/tests/domaincapsdata/qemu_7.2.0.x86_64.xml
+++ b/tests/domaincapsdata/qemu_7.2.0.x86_64.xml
@@ -262,5 +262,8 @@
<async-teardown supported='no'/>
<sev supported='no'/>
<sgx supported='no'/>
+ <launchSecurity supported='yes'>
+ <enum name='sectype'/>
+ </launchSecurity>
</features>
</domainCapabilities>
diff --git a/tests/domaincapsdata/qemu_8.0.0-q35.x86_64.xml b/tests/domaincapsdata/qemu_8.0.0-q35.x86_64.xml
index 2815064abc..ac181ca366 100644
--- a/tests/domaincapsdata/qemu_8.0.0-q35.x86_64.xml
+++ b/tests/domaincapsdata/qemu_8.0.0-q35.x86_64.xml
@@ -281,5 +281,8 @@
<value>avic</value>
</enum>
</hyperv>
+ <launchSecurity supported='yes'>
+ <enum name='sectype'/>
+ </launchSecurity>
</features>
</domainCapabilities>
diff --git a/tests/domaincapsdata/qemu_8.0.0-tcg-virt.riscv64.xml b/tests/domaincapsdata/qemu_8.0.0-tcg-virt.riscv64.xml
index 1911e34b07..cd462603d4 100644
--- a/tests/domaincapsdata/qemu_8.0.0-tcg-virt.riscv64.xml
+++ b/tests/domaincapsdata/qemu_8.0.0-tcg-virt.riscv64.xml
@@ -155,5 +155,8 @@
<async-teardown supported='no'/>
<sev supported='no'/>
<sgx supported='no'/>
+ <launchSecurity supported='yes'>
+ <enum name='sectype'/>
+ </launchSecurity>
</features>
</domainCapabilities>
diff --git a/tests/domaincapsdata/qemu_8.0.0-tcg.x86_64.xml b/tests/domaincapsdata/qemu_8.0.0-tcg.x86_64.xml
index ce9035cb9b..5ad8f24d87 100644
--- a/tests/domaincapsdata/qemu_8.0.0-tcg.x86_64.xml
+++ b/tests/domaincapsdata/qemu_8.0.0-tcg.x86_64.xml
@@ -283,5 +283,8 @@
<value>avic</value>
</enum>
</hyperv>
+ <launchSecurity supported='yes'>
+ <enum name='sectype'/>
+ </launchSecurity>
</features>
</domainCapabilities>
diff --git a/tests/domaincapsdata/qemu_8.0.0-virt.riscv64.xml b/tests/domaincapsdata/qemu_8.0.0-virt.riscv64.xml
index d331dc45e5..913f20afc3 100644
--- a/tests/domaincapsdata/qemu_8.0.0-virt.riscv64.xml
+++ b/tests/domaincapsdata/qemu_8.0.0-virt.riscv64.xml
@@ -158,5 +158,8 @@
<async-teardown supported='no'/>
<sev supported='no'/>
<sgx supported='no'/>
+ <launchSecurity supported='yes'>
+ <enum name='sectype'/>
+ </launchSecurity>
</features>
</domainCapabilities>
diff --git a/tests/domaincapsdata/qemu_8.0.0.x86_64.xml b/tests/domaincapsdata/qemu_8.0.0.x86_64.xml
index 07d1d06115..7fb44a17a3 100644
--- a/tests/domaincapsdata/qemu_8.0.0.x86_64.xml
+++ b/tests/domaincapsdata/qemu_8.0.0.x86_64.xml
@@ -281,5 +281,8 @@
<value>avic</value>
</enum>
</hyperv>
+ <launchSecurity supported='yes'>
+ <enum name='sectype'/>
+ </launchSecurity>
</features>
</domainCapabilities>
diff --git a/tests/domaincapsdata/qemu_8.1.0-q35.x86_64.xml b/tests/domaincapsdata/qemu_8.1.0-q35.x86_64.xml
index 4d438efdf7..0b5da8882e 100644
--- a/tests/domaincapsdata/qemu_8.1.0-q35.x86_64.xml
+++ b/tests/domaincapsdata/qemu_8.1.0-q35.x86_64.xml
@@ -283,5 +283,8 @@
<value>avic</value>
</enum>
</hyperv>
+ <launchSecurity supported='yes'>
+ <enum name='sectype'/>
+ </launchSecurity>
</features>
</domainCapabilities>
diff --git a/tests/domaincapsdata/qemu_8.1.0-tcg.x86_64.xml b/tests/domaincapsdata/qemu_8.1.0-tcg.x86_64.xml
index b8a566920f..759af05bd4 100644
--- a/tests/domaincapsdata/qemu_8.1.0-tcg.x86_64.xml
+++ b/tests/domaincapsdata/qemu_8.1.0-tcg.x86_64.xml
@@ -284,5 +284,8 @@
<value>avic</value>
</enum>
</hyperv>
+ <launchSecurity supported='yes'>
+ <enum name='sectype'/>
+ </launchSecurity>
</features>
</domainCapabilities>
diff --git a/tests/domaincapsdata/qemu_8.1.0.s390x.xml b/tests/domaincapsdata/qemu_8.1.0.s390x.xml
index 3f4299237e..e909ffd420 100644
--- a/tests/domaincapsdata/qemu_8.1.0.s390x.xml
+++ b/tests/domaincapsdata/qemu_8.1.0.s390x.xml
@@ -268,5 +268,10 @@
<s390-pv supported='yes'/>
<sev supported='no'/>
<sgx supported='no'/>
+ <launchSecurity supported='yes'>
+ <enum name='sectype'>
+ <value>s390-pv</value>
+ </enum>
+ </launchSecurity>
</features>
</domainCapabilities>
diff --git a/tests/domaincapsdata/qemu_8.1.0.x86_64.xml b/tests/domaincapsdata/qemu_8.1.0.x86_64.xml
index 919357e577..3e8a25452e 100644
--- a/tests/domaincapsdata/qemu_8.1.0.x86_64.xml
+++ b/tests/domaincapsdata/qemu_8.1.0.x86_64.xml
@@ -283,5 +283,8 @@
<value>avic</value>
</enum>
</hyperv>
+ <launchSecurity supported='yes'>
+ <enum name='sectype'/>
+ </launchSecurity>
</features>
</domainCapabilities>
diff --git a/tests/domaincapsdata/qemu_8.2.0-q35.x86_64.xml b/tests/domaincapsdata/qemu_8.2.0-q35.x86_64.xml
index f711a51044..83cc97b2fd 100644
--- a/tests/domaincapsdata/qemu_8.2.0-q35.x86_64.xml
+++ b/tests/domaincapsdata/qemu_8.2.0-q35.x86_64.xml
@@ -285,5 +285,8 @@
<value>avic</value>
</enum>
</hyperv>
+ <launchSecurity supported='yes'>
+ <enum name='sectype'/>
+ </launchSecurity>
</features>
</domainCapabilities>
diff --git a/tests/domaincapsdata/qemu_8.2.0-tcg-virt.loongarch64.xml b/tests/domaincapsdata/qemu_8.2.0-tcg-virt.loongarch64.xml
index 0edce04323..0f59518360 100644
--- a/tests/domaincapsdata/qemu_8.2.0-tcg-virt.loongarch64.xml
+++ b/tests/domaincapsdata/qemu_8.2.0-tcg-virt.loongarch64.xml
@@ -161,5 +161,8 @@
<async-teardown supported='yes'/>
<sev supported='no'/>
<sgx supported='no'/>
+ <launchSecurity supported='yes'>
+ <enum name='sectype'/>
+ </launchSecurity>
</features>
</domainCapabilities>
diff --git a/tests/domaincapsdata/qemu_8.2.0-tcg.x86_64.xml b/tests/domaincapsdata/qemu_8.2.0-tcg.x86_64.xml
index e215b5d946..0eb354e836 100644
--- a/tests/domaincapsdata/qemu_8.2.0-tcg.x86_64.xml
+++ b/tests/domaincapsdata/qemu_8.2.0-tcg.x86_64.xml
@@ -284,5 +284,8 @@
<value>avic</value>
</enum>
</hyperv>
+ <launchSecurity supported='yes'>
+ <enum name='sectype'/>
+ </launchSecurity>
</features>
</domainCapabilities>
diff --git a/tests/domaincapsdata/qemu_8.2.0-virt.aarch64.xml b/tests/domaincapsdata/qemu_8.2.0-virt.aarch64.xml
index e4519e4a1b..291493272b 100644
--- a/tests/domaincapsdata/qemu_8.2.0-virt.aarch64.xml
+++ b/tests/domaincapsdata/qemu_8.2.0-virt.aarch64.xml
@@ -223,5 +223,8 @@
<async-teardown supported='yes'/>
<sev supported='no'/>
<sgx supported='no'/>
+ <launchSecurity supported='yes'>
+ <enum name='sectype'/>
+ </launchSecurity>
</features>
</domainCapabilities>
diff --git a/tests/domaincapsdata/qemu_8.2.0-virt.loongarch64.xml b/tests/domaincapsdata/qemu_8.2.0-virt.loongarch64.xml
index 2259a6ebca..32b2385af8 100644
--- a/tests/domaincapsdata/qemu_8.2.0-virt.loongarch64.xml
+++ b/tests/domaincapsdata/qemu_8.2.0-virt.loongarch64.xml
@@ -165,5 +165,8 @@
<async-teardown supported='yes'/>
<sev supported='no'/>
<sgx supported='no'/>
+ <launchSecurity supported='yes'>
+ <enum name='sectype'/>
+ </launchSecurity>
</features>
</domainCapabilities>
diff --git a/tests/domaincapsdata/qemu_8.2.0.aarch64.xml b/tests/domaincapsdata/qemu_8.2.0.aarch64.xml
index e4519e4a1b..291493272b 100644
--- a/tests/domaincapsdata/qemu_8.2.0.aarch64.xml
+++ b/tests/domaincapsdata/qemu_8.2.0.aarch64.xml
@@ -223,5 +223,8 @@
<async-teardown supported='yes'/>
<sev supported='no'/>
<sgx supported='no'/>
+ <launchSecurity supported='yes'>
+ <enum name='sectype'/>
+ </launchSecurity>
</features>
</domainCapabilities>
diff --git a/tests/domaincapsdata/qemu_8.2.0.armv7l.xml b/tests/domaincapsdata/qemu_8.2.0.armv7l.xml
index efc6010e44..059c4236c3 100644
--- a/tests/domaincapsdata/qemu_8.2.0.armv7l.xml
+++ b/tests/domaincapsdata/qemu_8.2.0.armv7l.xml
@@ -171,5 +171,8 @@
<async-teardown supported='yes'/>
<sev supported='no'/>
<sgx supported='no'/>
+ <launchSecurity supported='yes'>
+ <enum name='sectype'/>
+ </launchSecurity>
</features>
</domainCapabilities>
diff --git a/tests/domaincapsdata/qemu_8.2.0.s390x.xml b/tests/domaincapsdata/qemu_8.2.0.s390x.xml
index 9c00145370..6897395eef 100644
--- a/tests/domaincapsdata/qemu_8.2.0.s390x.xml
+++ b/tests/domaincapsdata/qemu_8.2.0.s390x.xml
@@ -268,5 +268,10 @@
<s390-pv supported='yes'/>
<sev supported='no'/>
<sgx supported='no'/>
+ <launchSecurity supported='yes'>
+ <enum name='sectype'>
+ <value>s390-pv</value>
+ </enum>
+ </launchSecurity>
</features>
</domainCapabilities>
diff --git a/tests/domaincapsdata/qemu_8.2.0.x86_64.xml b/tests/domaincapsdata/qemu_8.2.0.x86_64.xml
index bc060e21b6..6e20c9be9b 100644
--- a/tests/domaincapsdata/qemu_8.2.0.x86_64.xml
+++ b/tests/domaincapsdata/qemu_8.2.0.x86_64.xml
@@ -285,5 +285,8 @@
<value>avic</value>
</enum>
</hyperv>
+ <launchSecurity supported='yes'>
+ <enum name='sectype'/>
+ </launchSecurity>
</features>
</domainCapabilities>
diff --git a/tests/domaincapsdata/qemu_9.0.0-q35.x86_64.xml b/tests/domaincapsdata/qemu_9.0.0-q35.x86_64.xml
index 015effd3b0..7b3f073e2e 100644
--- a/tests/domaincapsdata/qemu_9.0.0-q35.x86_64.xml
+++ b/tests/domaincapsdata/qemu_9.0.0-q35.x86_64.xml
@@ -285,5 +285,8 @@
<value>avic</value>
</enum>
</hyperv>
+ <launchSecurity supported='yes'>
+ <enum name='sectype'/>
+ </launchSecurity>
</features>
</domainCapabilities>
diff --git a/tests/domaincapsdata/qemu_9.0.0-tcg.x86_64.xml b/tests/domaincapsdata/qemu_9.0.0-tcg.x86_64.xml
index 91d3f68c26..3d16bbce6e 100644
--- a/tests/domaincapsdata/qemu_9.0.0-tcg.x86_64.xml
+++ b/tests/domaincapsdata/qemu_9.0.0-tcg.x86_64.xml
@@ -286,5 +286,8 @@
<value>avic</value>
</enum>
</hyperv>
+ <launchSecurity supported='yes'>
+ <enum name='sectype'/>
+ </launchSecurity>
</features>
</domainCapabilities>
diff --git a/tests/domaincapsdata/qemu_9.0.0.x86_64.xml b/tests/domaincapsdata/qemu_9.0.0.x86_64.xml
index a258cdc063..ce5f901e37 100644
--- a/tests/domaincapsdata/qemu_9.0.0.x86_64.xml
+++ b/tests/domaincapsdata/qemu_9.0.0.x86_64.xml
@@ -285,5 +285,8 @@
<value>avic</value>
</enum>
</hyperv>
+ <launchSecurity supported='yes'>
+ <enum name='sectype'/>
+ </launchSecurity>
</features>
</domainCapabilities>
diff --git a/tests/domaincapsdata/qemu_9.1.0-q35.x86_64.xml b/tests/domaincapsdata/qemu_9.1.0-q35.x86_64.xml
index 40e8533e16..0150f0ab93 100644
--- a/tests/domaincapsdata/qemu_9.1.0-q35.x86_64.xml
+++ b/tests/domaincapsdata/qemu_9.1.0-q35.x86_64.xml
@@ -286,5 +286,8 @@
<value>avic</value>
</enum>
</hyperv>
+ <launchSecurity supported='yes'>
+ <enum name='sectype'/>
+ </launchSecurity>
</features>
</domainCapabilities>
diff --git a/tests/domaincapsdata/qemu_9.1.0-tcg.x86_64.xml b/tests/domaincapsdata/qemu_9.1.0-tcg.x86_64.xml
index 996d2e9390..0111abd4e6 100644
--- a/tests/domaincapsdata/qemu_9.1.0-tcg.x86_64.xml
+++ b/tests/domaincapsdata/qemu_9.1.0-tcg.x86_64.xml
@@ -285,5 +285,8 @@
<value>avic</value>
</enum>
</hyperv>
+ <launchSecurity supported='yes'>
+ <enum name='sectype'/>
+ </launchSecurity>
</features>
</domainCapabilities>
diff --git a/tests/domaincapsdata/qemu_9.1.0.x86_64.xml b/tests/domaincapsdata/qemu_9.1.0.x86_64.xml
index 6381d05bf2..7275237a47 100644
--- a/tests/domaincapsdata/qemu_9.1.0.x86_64.xml
+++ b/tests/domaincapsdata/qemu_9.1.0.x86_64.xml
@@ -286,5 +286,8 @@
<value>avic</value>
</enum>
</hyperv>
+ <launchSecurity supported='yes'>
+ <enum name='sectype'/>
+ </launchSecurity>
</features>
</domainCapabilities>
--
2.44.2
