Bug 1954750

Summary: firmware schema for sev-es
Product: Red Hat Enterprise Linux Advanced Virtualization Reporter: Dr. David Alan Gilbert <dgilbert>
Component: qemu-kvmAssignee: Virtualization Maintenance <virt-maint>
qemu-kvm sub component: General QA Contact: zixchen
Status: CLOSED ERRATA Docs Contact:
Severity: medium    
Priority: medium CC: coli, ddepaula, jinzhao, juzhang, ldu, lersek, virt-maint, yacao
Version: 8.5Keywords: Documentation, FutureFeature, Triaged
Target Milestone: rc   
Target Release: 8.5   
Hardware: Unspecified   
OS: Unspecified   
Whiteboard:
Fixed In Version: qemu-kvm-6.0.0-21.module+el8.5.0+11555+e0ab0d09 Doc Type: If docs needed, set a value
Doc Text:
Story Points: ---
Clone Of: Environment:
Last Closed: 2021-11-16 07:52:40 UTC Type: Feature Request
Regression: --- Mount Type: ---
Documentation: --- CRM:
Verified Versions: Category: ---
oVirt Team: --- RHEL 7.3 requirements from Atomic Host:
Cloudforms Team: --- Target Upstream Version:
Embargoed:
Bug Depends On:    
Bug Blocks: 1868085, 1957194    

Description Dr. David Alan Gilbert 2021-04-28 17:52:43 UTC
Description of problem:
qemu defines a schema for the definition files for firmwar;e for sev-es host we need to add an entry to let libvirt know to pick the right ovmf.  The schme changes, and Laszlo asks that we keep the schema up to date.

Version-Release number of selected component (if applicable):


How reproducible:


Steps to Reproduce:
1.
2.
3.

Actual results:


Expected results:


Additional info:

Comment 1 Laszlo Ersek 2021-04-30 16:48:00 UTC
Related upstream patch:

[PATCH v2 3/3] docs/interop/firmware.json: Add SEV-ES support
https://lists.gnu.org/archive/html/qemu-devel/2021-04/msg04861.html

Comment 2 John Ferlan 2021-05-07 20:35:47 UTC
Connor - I'll give this one to you for now w/ a medium priority - we'd need to get this backported once merged.

Comment 9 Yanan Fu 2021-06-24 15:24:40 UTC
QE bot(pre verify): Set 'Verified:Tested,SanityOnly' as gating/tier1 test pass.

Comment 14 zixchen 2021-07-01 03:51:18 UTC
Thank you Laszlo and Connor for the explaination.

Check the change log of qemu-kvm-6.0.0-21.module+el8.5.0+11555+e0ab0d09, and commits, no issue found, change status to verified.

Version:
qemu-kvm-6.0.0-21.module+el8.5.0+11555+e0ab0d09

Steps:
# rpm -qpi qemu-kvm-6.0.0-21.module+el8.5.0+11555+e0ab0d09.x86_64.rpm --changelog|more
Name        : qemu-kvm
Epoch       : 15
Version     : 6.0.0
Release     : 21.module+el8.5.0+11555+e0ab0d09
Architecture: x86_64
Install Date: (not installed)
Group       : Development/Tools
Size        : 0
License     : GPLv2 and GPLv2+ and CC-BY
Signature   : (none)
Source RPM  : qemu-kvm-6.0.0-21.module+el8.5.0+11555+e0ab0d09.src.rpm
Build Date  : Wed 23 Jun 2021 05:58:02 PM EDT
Build Host  : x86-038.build.eng.bos.redhat.com
Relocations : (not relocatable)
Packager    : Red Hat, Inc. <http://bugzilla.redhat.com/bugzilla>
Vendor      : Red Hat, Inc.
URL         : http://www.qemu.org/
Summary     : QEMU is a machine emulator and virtualizer
Description :
qemu-kvm is an open source virtualizer that provides hardware
emulation for the KVM hypervisor. qemu-kvm acts as a virtual
machine monitor together with the KVM kernel modules, and emulates the
hardware for a full system such as a PC and its associated peripherals.
* Wed Jun 23 2021 Danilo Cesar Lemes de Paula <ddepaula> - 6.0.0-21.el8
- kvm-block-backend-add-drained_poll.patch [bz#1960137]
- kvm-nbd-server-Use-drained-block-ops-to-quiesce-the-serv.patch [bz#1960137]
- kvm-disable-CONFIG_USB_STORAGE_BOT.patch [bz#1866133]
- kvm-doc-Fix-some-mistakes-in-the-SEV-documentation.patch [bz#1954750]
- kvm-docs-Add-SEV-ES-documentation-to-amd-memory-encrypti.patch [bz#1954750]
- kvm-docs-interop-firmware.json-Add-SEV-ES-support.patch [bz#1954750]
- Resolves: bz#1960137
  ([incremental backup] qemu-kvm hangs when Rebooting the VM during full backup)
- Resolves: bz#1866133
  (Disable usb-bot device in QEMU (unsupported))
- Resolves: bz#1954750
  (firmware scheme for sev-es)
...

Results:
The three commits are included in the target qemu-kvm version.

Comment 17 errata-xmlrpc 2021-11-16 07:52:40 UTC
Since the problem described in this bug report should be
resolved in a recent advisory, it has been closed with a
resolution of ERRATA.

For information on the advisory (virt:av bug fix and enhancement update), and where to find the updated
files, follow the link below.

If the solution does not work for you, open a new bug report.

https://access.redhat.com/errata/RHBA-2021:4684