On Mon, Dec 16, 2024 at 3:57 PM Ashish Kalra <Ashish.Kalra@xxxxxxx> wrote: > > From: Ashish Kalra <ashish.kalra@xxxxxxx> > The on-demand SEV initialization support requires a fix in QEMU to > remove check for SEV initialization to be done prior to launching > SEV/SEV-ES VMs. > NOTE: With the above fix for QEMU, older QEMU versions will be broken > with respect to launching SEV/SEV-ES VMs with the newer kernel/KVM as > older QEMU versions require SEV initialization to be done before > launching SEV/SEV-ES VMs. > I don't think this is okay. I think you need to introduce a KVM capability to switch over to the new way of initializing SEV VMs and deprecate the old way so it doesn't need to be supported for any new additions to the interface. -- -Dionna Glaze, PhD, CISSP, CCSP (she/her)
