Bug 1954750 - firmware schema for sev-es
Summary: firmware schema for sev-es
Keywords:
Status: CLOSED ERRATA
Alias: None
Product: Red Hat Enterprise Linux Advanced Virtualization
Classification: Red Hat
Component: qemu-kvm
Version: 8.5
Hardware: Unspecified
OS: Unspecified
medium
medium
Target Milestone: rc
: 8.5
Assignee: Virtualization Maintenance
QA Contact: zixchen
URL:
Whiteboard:
Depends On:
Blocks: 1868085 1957194
TreeView+ depends on / blocked
 
Reported: 2021-04-28 17:52 UTC by Dr. David Alan Gilbert
Modified: 2021-11-16 08:30 UTC (History)
8 users (show)

Fixed In Version: qemu-kvm-6.0.0-21.module+el8.5.0+11555+e0ab0d09
Doc Type: If docs needed, set a value
Doc Text:
Clone Of:
Environment:
Last Closed: 2021-11-16 07:52:40 UTC
Type: Feature Request
Target Upstream Version:
Embargoed:


Attachments (Terms of Use)


Links
System ID Private Priority Status Summary Last Updated
Red Hat Product Errata RHBA-2021:4684 0 None None None 2021-11-16 07:53:23 UTC

Description Dr. David Alan Gilbert 2021-04-28 17:52:43 UTC
Description of problem:
qemu defines a schema for the definition files for firmwar;e for sev-es host we need to add an entry to let libvirt know to pick the right ovmf.  The schme changes, and Laszlo asks that we keep the schema up to date.

Version-Release number of selected component (if applicable):


How reproducible:


Steps to Reproduce:
1.
2.
3.

Actual results:


Expected results:


Additional info:

Comment 1 Laszlo Ersek 2021-04-30 16:48:00 UTC
Related upstream patch:

[PATCH v2 3/3] docs/interop/firmware.json: Add SEV-ES support
https://lists.gnu.org/archive/html/qemu-devel/2021-04/msg04861.html

Comment 2 John Ferlan 2021-05-07 20:35:47 UTC
Connor - I'll give this one to you for now w/ a medium priority - we'd need to get this backported once merged.

Comment 9 Yanan Fu 2021-06-24 15:24:40 UTC
QE bot(pre verify): Set 'Verified:Tested,SanityOnly' as gating/tier1 test pass.

Comment 14 zixchen 2021-07-01 03:51:18 UTC
Thank you Laszlo and Connor for the explaination.

Check the change log of qemu-kvm-6.0.0-21.module+el8.5.0+11555+e0ab0d09, and commits, no issue found, change status to verified.

Version:
qemu-kvm-6.0.0-21.module+el8.5.0+11555+e0ab0d09

Steps:
# rpm -qpi qemu-kvm-6.0.0-21.module+el8.5.0+11555+e0ab0d09.x86_64.rpm --changelog|more
Name        : qemu-kvm
Epoch       : 15
Version     : 6.0.0
Release     : 21.module+el8.5.0+11555+e0ab0d09
Architecture: x86_64
Install Date: (not installed)
Group       : Development/Tools
Size        : 0
License     : GPLv2 and GPLv2+ and CC-BY
Signature   : (none)
Source RPM  : qemu-kvm-6.0.0-21.module+el8.5.0+11555+e0ab0d09.src.rpm
Build Date  : Wed 23 Jun 2021 05:58:02 PM EDT
Build Host  : x86-038.build.eng.bos.redhat.com
Relocations : (not relocatable)
Packager    : Red Hat, Inc. <http://bugzilla.redhat.com/bugzilla>
Vendor      : Red Hat, Inc.
URL         : http://www.qemu.org/
Summary     : QEMU is a machine emulator and virtualizer
Description :
qemu-kvm is an open source virtualizer that provides hardware
emulation for the KVM hypervisor. qemu-kvm acts as a virtual
machine monitor together with the KVM kernel modules, and emulates the
hardware for a full system such as a PC and its associated peripherals.
* Wed Jun 23 2021 Danilo Cesar Lemes de Paula <ddepaula> - 6.0.0-21.el8
- kvm-block-backend-add-drained_poll.patch [bz#1960137]
- kvm-nbd-server-Use-drained-block-ops-to-quiesce-the-serv.patch [bz#1960137]
- kvm-disable-CONFIG_USB_STORAGE_BOT.patch [bz#1866133]
- kvm-doc-Fix-some-mistakes-in-the-SEV-documentation.patch [bz#1954750]
- kvm-docs-Add-SEV-ES-documentation-to-amd-memory-encrypti.patch [bz#1954750]
- kvm-docs-interop-firmware.json-Add-SEV-ES-support.patch [bz#1954750]
- Resolves: bz#1960137
  ([incremental backup] qemu-kvm hangs when Rebooting the VM during full backup)
- Resolves: bz#1866133
  (Disable usb-bot device in QEMU (unsupported))
- Resolves: bz#1954750
  (firmware scheme for sev-es)
...

Results:
The three commits are included in the target qemu-kvm version.

Comment 17 errata-xmlrpc 2021-11-16 07:52:40 UTC
Since the problem described in this bug report should be
resolved in a recent advisory, it has been closed with a
resolution of ERRATA.

For information on the advisory (virt:av bug fix and enhancement update), and where to find the updated
files, follow the link below.

If the solution does not work for you, open a new bug report.

https://access.redhat.com/errata/RHBA-2021:4684


Note You need to log in before you can comment on or make changes to this bug.