On 31.10.2025 14:15, Roger Pau Monné wrote: > Not putting rdseed in the max policy completely blocks the upgrade > path, even when a toolstack is possibly making the right informed > decisions.
Why would that be? To evacuate guests, one would force-enable RDSEED on an affected host. After updating of the original host (incl fixed ucode), migrating back will be fine. The admin will thus be fully aware of where guests run unsafely, while no un-safety is going to be introduced behind the back of the admin and/or any guest. Jan
