virt/coco/sev-guest.rst

4 The Definitive SEV Guest API Documentation
10 The SEV API is a set of ioctls that are used by the guest or hypervisor
11 to get or set a certain aspect of the SEV virtual machine. The ioctls belong
15    whole SEV firmware.  These ioctl are used by platform provisioning tools.
17  - Guest ioctls: These query and set attributes of the SEV virtual machine.
22 This section describes ioctls that is used for querying the SEV guest report
23 from the SEV firmware. For each ioctl, the following information is provided
27       which SEV technology provides this ioctl. SEV, SEV-ES, SEV-SNP or all.
79 SEV-SNP firmware. The ioctl uses the SNP_GUEST_REQUEST (MSG_REPORT_REQ) command
80 provided by the SEV-SNP firmware to query the attestation report.
83 contain the format described in the SEV-SNP specification. See the SEV-SNP
98 SEV-SNP firmware to derive the key. See SEV-SNP specification for further details
102 the SEV-SNP specification for further details.
117 The ioctl uses the SNP_GUEST_REQUEST (MSG_REPORT_REQ) command provided by the SEV-SNP
127 3. SEV-SNP CPUID Enforcement
130 SEV-SNP guests can access a special page that contains a table of CPUID values
136    binaries will be measured as part of the SEV-SNP attestation report.
143    SEV-SNP attestation report.
151 has taken care to make use of the SEV-SNP CPUID throughout all stages of boot.
159 SEV-SNP and GHCB specification: developer.amd.com/sev
161 The driver is based on SEV-SNP firmware spec 0.9 and GHCB spec version 2.0.