search

AMDESE / ovmf

EDK2 / OVMF related projects
BSD 2-Clause "Simplified" License
6 stars 21 forks source link

How to insert SNP_KERNEL_HASH into OVMF #6

Open blossomin opened 10 months ago

blossomin commented 10 months ago

hello, I'm considering using this OVMF with the SNP VM. According to talks, I learned that the hash of kernel/initrd/cmdline should be inserted into the OVMF, and the OVMF needs to verify this hash when it loads the kernel and initrd into the memory. I searched online, but didn't find a tutorial telling me how to do this. Is there any docs showing the steps for this purpose?

tlendacky commented 10 months ago

You would use the AmdSevX64.dsc package located in the OvmfPkg/AmdSev/ directory. It requires adding kernel-hashes=on to the Qemu sev-snp-guest object command line option.