File _patchinfo of Package patchinfo.36673
<patchinfo incident="36673">
<issue tracker="bnc" id="1232762">AMD SEV and SEV-ES guests fail to start on SLES15 SP6 host with latest qemu-ovmf package</issue>
<packager>joeyli</packager>
<rating>moderate</rating>
<category>recommended</category>
<summary>Recommended update for ovmf</summary>
<description>This update for ovmf fixes the following issues:
- Added ovmf-x86_64-sev flavor to X64 against AMD SEV (bsc#1232762):
* Moved "-D SECURE_BOOT_ENABLE" from OVMF_FLAGS to EXTRA_FLAGS_X64,
BUILD_OPTIONS_AA64 and BUILD_OPTIONS_RV64 because SEV can NOT work
with secure boot.
* Add "-D SECURE_BOOT_ENABLE" to BUILD_OPTIONS_X86 because the
building option be removed from OVMF_FLAGS.
* The ovmf-x86_64-sev-code.bin, ovmf-x86_64-sev-vars.bin and a unified
image ovmf-x86_64-sev.bin can be used.
- Added 50-ovmf-x86_64-sev.json and 60-ovmf-x86_64-sev.json to descriptors.tar.xz for SEV flavor:
* Removed features tag:
+ "acpi-s4", "acpi-s3", "requires-smm", "secure-boot", "enrolled-keys"
* Added features tag:
+ "amd-sev", "amd-sev-es", "amd-sev-snp"
* The 50-ovmf-x86_64-sev.json is for the ovmf-x86_64-sev.bin unified image
which is stateless mode.
* The 60-ovmf-x86_64-sev.json is for the ovmf-x86_64-sev-code/vars.bin.
Please note that the -vars storage is non-secure because SEV does NOT
support SMM (requires-smm).
- Removed "amd-sev" and "amd-sev-es" from descriptors/60-ovmf-x86_64.json
and descriptors/60-ovmf-x86_64-2m.json.
</description>
</patchinfo>