On Fri, Feb 23, 2024, Paolo Bonzini wrote: > Disable all VMSA features in KVM_SEV_INIT and KVM_SEV_ES_INIT. They are > not actually supported by SEV (a SEV guest does not have a VMSA to which > you can apply features) and they cause unexpected changes in measurement > for SEV-ES. Sorry :-( I've done my best to avoid having to deal with attestation, so it's a bit of a blind spot for me.