xref: /cloud-hypervisor/docs/amd_sev_snp.md (revision 4d12192490e09b119e2adfb8032f767e6c520859)
170074ddfSJinank Jain# AMD SEV-SNP
270074ddfSJinank Jain
370074ddfSJinank Jain### WARNING
4*4d121924SRuoqing He
570074ddfSJinank JainThis feature is only currently supported on MSHV.
670074ddfSJinank Jain
770074ddfSJinank JainAMD Secure Encrypted Virtualization & Secure Nested Paging (SEV-SNP) is an AMD
870074ddfSJinank Jaintechnology designed to add strong memory integrity protection to help prevent
970074ddfSJinank Jainmalicious hypervisor-based attacks like data replay, memory-remapping and more
1070074ddfSJinank Jainin order to create an isolated execution environment. Here are some useful
1170074ddfSJinank Jainlinks:
1270074ddfSJinank Jain
13*4d121924SRuoqing He- [SNP Homepage](https://www.amd.com/content/dam/amd/en/documents/epyc-business-docs/solution-briefs/amd-secure-encrypted-virtualization-solution-brief.pdf):
1470074ddfSJinank Jain  more information about SEV-SNP technical aspects, design and specification.
1570074ddfSJinank Jain
1670074ddfSJinank Jain## Cloud Hypervisor support
1770074ddfSJinank Jain
1870074ddfSJinank JainIt is required to use a machine which has enabled support for AMD SEV-SNP in
1970074ddfSJinank Jainthe BIOS.
2070074ddfSJinank Jain
2170074ddfSJinank JainOn the Cloud Hypervisor side, all you need is to build the project with the
2270074ddfSJinank Jain`sev_snp` feature enabled:
2370074ddfSJinank Jain
2470074ddfSJinank Jain```bash
2570074ddfSJinank Jaincargo build --no-default-features --features "sev_snp"
2670074ddfSJinank Jain```
2770074ddfSJinank Jain
2870074ddfSJinank Jain**Note**
2970074ddfSJinank JainPlease note that `sev_snp` cannot be enabled in conjunction with `tdx` feature flag.
3070074ddfSJinank Jain
3170074ddfSJinank JainYou can run a SEV-SNP VM using the following command:
3270074ddfSJinank Jain
3370074ddfSJinank Jain```bash
3470074ddfSJinank Jain./cloud-hypervisor \
3570074ddfSJinank Jain     --platform sev_snp=on \
3670074ddfSJinank Jain     --cpus boot=1 \
3770074ddfSJinank Jain     --memory size=1G \
3870074ddfSJinank Jain     --disk path=ubuntu.img
3970074ddfSJinank Jain```
404cea713aSMuminul Islam
414cea713aSMuminul IslamFor more information related to Microsoft Hypervisor please see [mshv.md](mshv.md)
42