Jim Cadden a87698fe56 runtime: Add support for SEV pre-attestation ...

AMD SEV pre-attestation is handled by the runtime before the guest is
launched. Guest VM is started paused and the runtime communicates with a
remote keybroker service (e.g., simple-kbs) to validate the attestation
measurement and to receive launch secret. Upon validation, the launch
secret is injected into guest memory and the VM is started.

Fixes: #4280
Signed-off-by: Jim Cadden <jcadden@ibm.com>
Signed-off-by: Tobin Feldman-Fitzthum <tobin@ibm.com>
Signed-off-by: Dov Murik <dovmurik@linux.ibm.com>

2022-08-10 14:00:14 -04:00

..

sev.go

runtime: Add support for SEV pre-attestation

2022-08-10 14:00:14 -04:00