On Fri, Sep 29, 2017 at 10:54:39AM -0500, Brijesh Singh wrote: > In production, you do not want to run encrypted guest on an unencrypted > hypervisor -- I was thinking about the debug environment. We can start > with mem_encrypt=sme and if we see the need for 'sev' arg then we can > extend it later. Yap, exactly. > I am working on the patch and will send for the review. thanks Thanks. -- Regards/Gruss, Boris. SUSE Linux GmbH, GF: Felix Imendörffer, Jane Smithard, Graham Norton, HRB 21284 (AG Nürnberg) --