AMD SEV

The documentation on the AMD SEV integration in YAOOK offers two perspectives: the administrative cloud provider side concerning the configuration and enabling of the feature and the cloud user side concerning the usage of the feature.

Note

In contrast to AMD SEV-ES, the integration of AMD SEV-SNP is a YAOOK-specific feature not yet available in upstream OpenStack and relies on specific patches maintained by YAOOK. It is provided for YAOOK OpenStack releases 2024.2 and up.

• AMD SEV configuration in YAOOK
  • Important caveats
  • Configuring Nova compute nodes
  • Preparing Nova flavors for SEV-SNP
  • Adjusting the scheduling of SEV-capable compute hosts
  • Enabling the visibility of attestation metadata properties in Nova
  • Preparing SEV-SNP-capable Glance images
  • SEV firmware
  • Tempest Testing
• AMD SEV usage in YAOOK
  • Preface: flavor and image properties for SEV
  • Creating a virtual machine with AMD SEV-SNP
  • Verify AMD SEV-SNP state of a virtual machine
  • Attestation procedures for SEV-SNP
  • Appendix