[Feature][a8]Hygon：增加海光CSV Reuse ASID支持；增加海光自动注入秘密支持； · Pull Request !61 · src-anolis-os/libvirt

project: TC2024080203

bugzilla: https://bugzilla.openanolis.cn/show_bug.cgi?id=13124

This PR contains 2 patches.

Patch1:
Introduce `user-id` element to provide id for a group of Hygon CSV/CSV2 VMs, these VMs will share the same ASID. When provide `user-id` element, the bit 7 of the policy value must be 1. Below is a example contents in the XML.
```
<launchSecurity type='sev'>
  <policy>0x0081</policy>
  <cbitpos>47</cbitpos>
  <reducedPhysBits>5</reducedPhysBits>
  <userid>usertest</userid>
</launchSecurity>
```

Patch2:
Introduce `secretHeader` and `secret` elements to provide secret blobs for Hygon Confidential VM. Qemu will load this secret blobs automatically if the launch digest of the Hygon Confidential VM is validate. Below is a example contents in the XML.
```
<launchSecurity type='sev'>
 <policy>0x0001</policy>
 <cbitpos>47</cbitpos>
 <reducePhysBits>5</reducedPhysBits>
 <dhCert>2YjZitCin2LnYqSdiq2YQ=</dhCert>
 <session>aGVsbG8d291b2xk=</session>
 <secretHeader>Y2FzdGxlVGVzdE1pbg==</secretHeader>
 <secret>5L2g5aW977yM6KGo5qC45LqG77yB</secret>
</launchSecurity>
```

src-anolis-os/libvirt .gitee-modal { width: 500px !important; }

搜索帮助

src-anolis-os/libvirt