Re: [PATCH] igvm: add initial support for non-cc firmware in igvm format

On Wed, Jul 09, 2025 at 03:34:20PM +0200, Philippe Mathieu-Daudé wrote: > Hi Gerd, > > On 9/7/25 14:30, Gerd Hoffmann wrote: > > Implement a ConfidentialGuestSupportClass for non-confidential VMs. > > This allows the igvm support code work without sev/tdx. > > Is this something we only want in no

Re: [PATCH] igvm: add initial support for non-cc firmware in igvm format

Hi Gerd, On 9/7/25 14:30, Gerd Hoffmann wrote: Implement a ConfidentialGuestSupportClass for non-confidential VMs. This allows the igvm support code work without sev/tdx. Is this something we only want in non-KVM builds due to security boundary concerns? RfC: Not fully sure this is the best

[PATCH] igvm: add initial support for non-cc firmware in igvm format

Implement a ConfidentialGuestSupportClass for non-confidential VMs. This allows the igvm support code work without sev/tdx. RfC: Not fully sure this is the best way to implement this. Alternatively we could add this directly into the igvm backend and run it in case no confidential guest support ob