search

gramineproject / gramine-tdx

A library OS for Linux multi-process applications, with Intel TDX support (experimental)
GNU Lesser General Public License v3.0
19 stars 5 forks source link

[tools] Fix `memory-backend` arg in QEMU cmdline in `gramine-vm.in` #30

Closed dimakuv closed 4 months ago

dimakuv commented 4 months ago

Description of the changes

Newer QEMU version (v8.0.4 patched for TDX) shipped with Ubuntu 23.10 (Canonical TDX-enlightened version) changed requirements on the QEMU cmdline. In particular, newer versions of virtiofsd (that Gramine-TDX uses for sharing files) require -object memory-backend-memfd,... and QEMU requires -object memory-backend-memfd,...,private=on (note private=on, without it QEMU/KVM complains about ENCRYPT_OPs).

Also see notes in https://github.com/gramineproject/gramine-tdx/discussions/14#discussioncomment-10006771.

How to test this PR?

Run gramine-tdx helloworld.

This change is Reviewable