Skip to content

Commit

Permalink
Updated content.
Browse files Browse the repository at this point in the history
  • Loading branch information
harneshalaka committed Sep 12, 2024
1 parent 49f0b80 commit df67a49
Showing 1 changed file with 5 additions and 4 deletions.
9 changes: 5 additions & 4 deletions xml/vm_security.xml
Original file line number Diff line number Diff line change
Expand Up @@ -79,10 +79,11 @@
<procedure>
<step>
<para>To install the replacement packages, run the command:</para>
&prompt.sudo;<screen>zypper install coco:kernel-coco coco:qemu coco:libvirt
//TO DO: replace with the actual command.</screen>
<para>After replacing the packages, you must set up the system with a configuration change to make the AMD SEV-SNP feature ready to use. The IOMMU on the host side must be configured in non-<literal>passthrough</literal> mode. This is required to prevent peripheral devices from writing to memory which belongs to an encrypted guest and destroy its data integrity. The default IOMMU configuration in SUSE Linux Enterprise Server is <literal>passthrough</literal> mode.</para>
</step>
<screen>sudo zypper install coco:kernel-coco coco:qemu coco:libvirt
<!-- TO DO: Replace with the actual command.-->
</screen>
<para>After replacing the packages, you must set up the system with a configuration change to make the AMD SEV-SNP feature ready to use. The IOMMU on the host side must be configured in non-<literal>passthrough</literal> mode. This is required to prevent peripheral devices from writing to memory which belongs to an encrypted guest and destroy its data integrity. The default IOMMU configuration in SUSE Linux Enterprise Server is <literal>passthrough</literal> mode.</para>
</step>
<step>
<para>To disable the IOMMU configuration in SUSE Linux Enterprise Server, open the <filename>/etc/default/grub</filename> file and add <literal>iommu=nopt</literal> to the <varname>GRUB_CMDLINE_LINUX_DEFAULT</varname> variable. </para>
</step>
Expand Down

0 comments on commit df67a49

Please sign in to comment.