Add support for enabling Secure Encrypted Virtualization in the GUI

[Boris Fiuczynski]

On 4/4/22 2:50 PM, Daniel P. Berrangé wrote:
> On Fri, Apr 01, 2022 at 12:13:17PM -0600, Charles Arnold wrote:
>>  From d700e8cee7cd525c0022b5a9a440f64c4ab149f0 Mon Sep 17 00:00:00 2001
>> From: Charles Arnold <carnold at suse.com>
>> Date: Fri, 1 Apr 2022 12:01:21 -0600
>> Subject: [PATCH 1/1] Add support for enabling Secure Encrypted
>> Virtualization
>>   in the GUI
>>
>> Add an "Enable Launch Security" checkbox on the Details memory tab.
>> Do the minimal configuration required for libvirt to enable this feature
>> on compatible hardware.
>>
> 
> Don't we need to turn on the 'iommu' option for all virtio devices
> too, and disable PXE on any NICs ?
> 
> https://libvirt.org/kbase/launch_security_sev.html#virtio
> 
> With regards,
> Daniel
> 

Hi Arnold,
your patch does not take into account that libvirt uses launch security 
for more types besides sev.


-- 
Mit freundlichen Grüßen/Kind regards
    Boris Fiuczynski

IBM Deutschland Research & Development GmbH
Vorsitzender des Aufsichtsrats: Gregor Pillen
Geschäftsführung: David Faller
Sitz der Gesellschaft: Böblingen
Registergericht: Amtsgericht Stuttgart, HRB 243294