-
Notifications
You must be signed in to change notification settings - Fork 114
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
Oak Containers: QEMU not recognizing SEV-SNP: parameter 'qom-type' does not accept value 'sev-snp-guest'
#5045
Comments
I believe that AMD SEV-SNP support has not been upstreamed for QEMU yet, so the version of QEMU that is installed in the nix environment will not work with it. To use SEV-SNP I think you will have to install the version from the AMD repository and use that version in the launcher. |
To further clarify, we are using the nix install of
|
I think that you will have to build QEMU from https://github.com/AMDESE/qemu/tree/snp-latest to support AMD SEV-SNP rather than use the nix version |
@conradgrobler: thank you; that worked after applying @dingelish's QEMU patch dingelish/qemu@876e262 to also correct the vmw_vsock_virtio_transport error at launch. |
@conradgrobler we verified the stack on the latest upstream stable 6.11 kernel and upstream qemu. AMD's branch is bit of old. |
@smherwig could you please do me a favor? I want to know if you can run the vanilla qemu without that patch after applying this to the oak_containers_launcher
also this patch
|
@dingelish - Thanks. For either patch, I still get the QEMU error:
when using vanilla QEMU v9.0.1 ( Patch 1 Trial Run
Patch 2 Trial Run
|
@dingelish - It also occurred to me that by "vanilla" you meant the https://github.com/AMDESE/qemu/tree/snp-latest version (without your QEMU patch dingelish/qemu@876e262). When I try using that version, I get the following errors: Patch 1 Trial Run
Patch 2 Trial Run
|
@smherwig I upgraded my workstation to use the upstream linux kernel from kernel.org, and upstream 9.1.1 qemu. they worked together perfectly without any patch. I'm using debian 12 bookworm on that machine. |
I'm working on the main branch (commit c5190c0).
I'm attempting to run the
rust_hello_world_trusted_bundle
container using the following command:Running this command results in the following log lines:
The last log line indicates a QEMU issue.
Our setup is:
docs/development.md
.Additionally, I manually had to
sudo modprobe vhost_vsock
.Thanks. I appreciated any help.
The text was updated successfully, but these errors were encountered: