Bug 2541015

Summary: Review Request: coconut-svsm - Secure VM Service Module for AMD SEV-SNP
Product: [Fedora] Fedora Reporter: Luigi Leonardi <leonardi>
Component: Package ReviewAssignee: Nobody's working on this, feel free to take it <nobody>
Status: NEW --- QA Contact: Fedora Extras Quality Assurance <extras-qa>
Severity: medium Docs Contact:
Priority: medium    
Version: rawhideCC: laggarcia, leonardi, osteffen, package-review
Target Milestone: ---   
Target Release: ---   
Hardware: All   
OS: Linux   
Whiteboard:
Fixed In Version: Doc Type: ---
Doc Text:
Story Points: ---
Clone Of: Environment:
Last Closed: Type: ---
Regression: --- Mount Type: ---
Documentation: --- CRM:
Verified Versions: Category: ---
oVirt Team: --- RHEL 7.3 requirements from Atomic Host:
Cloudforms Team: --- Target Upstream Version:
Embargoed:

Description Luigi Leonardi 2026-09-25 10:39:23 UTC
Spec URL: https://lleonard.fedorapeople.org/coconut-svsm.spec
SRPM URL: https://lleonard.fedorapeople.org/coconut-svsm-v2026.07.devel-21.fc44.src.rpm
Description: coconut-svsm is an implementation of a SVSM (Secure VM Service Module) that is a used by AMD SEV-SNP confidential virtual machines.
This firmware provides some services to VMs, such as virtual TPM or persistent uefi variable storage.
Fedora Account System Username: lleonard

This is part of the effort to enable confidential computing in fedora.

Some additional notes: 
- This package contains a firmware binary, like edk2-ovmf. So there is no executable.
- This package only makes sense for x86_64. For now, it can only run on that architecture, emulation doesn't make sense.
- This package contains the openssl and the TCG-TPM source, as they are used when building the project. Unfortunately it's not possible to use an already built one.