[svsm-devel] [PATCH v3 09/14] virt: sev-guest: Choose the VMPCK key based on executing VMPL

Dan Williams dan.j.williams at intel.com
Tue Apr 16 06:54:46 CEST 2024


Hey, Tom, came looking to review the tsm_report changes and noticed
this...

Tom Lendacky wrote:
> Currently, the sev-guest driver uses the vmpck-0 key by default. When an
> SVSM is present the kernel is running at a VMPL other than 0 and the
> vmpck-0 key is no longer available. So choose the vmpck key based on the
> active VMPL level.

The module parameter is not mentioned in the changelog. Is it not
sufficient to always use snp_get_vmpl(), and if not should there be some
documentation about when to specify vmpck_id?

Do users know that "vmpl" and "vmpck_id" are interchangeable?


More information about the Svsm-devel mailing list