xref: /cloud-hypervisor/docs/amd_sev_snp.md (revision 655d512523353961a67cf19cf3bc227d403898f0)
1# AMD SEV-SNP
2
3### WARNING
4
5This feature is only currently supported on MSHV.
6
7AMD Secure Encrypted Virtualization & Secure Nested Paging (SEV-SNP) is an AMD
8technology designed to add strong memory integrity protection to help prevent
9malicious hypervisor-based attacks like data replay, memory-remapping and more
10in order to create an isolated execution environment. Here are some useful
11links:
12
13- [SNP Homepage](https://www.amd.com/content/dam/amd/en/documents/epyc-business-docs/solution-briefs/amd-secure-encrypted-virtualization-solution-brief.pdf):
14  more information about SEV-SNP technical aspects, design and specification.
15
16## Cloud Hypervisor support
17
18It is required to use a machine which has enabled support for AMD SEV-SNP in
19the BIOS.
20
21On the Cloud Hypervisor side, all you need is to build the project with the
22`sev_snp` feature enabled:
23
24```bash
25cargo build --no-default-features --features "sev_snp"
26```
27
28**Note**
29Please note that `sev_snp` cannot be enabled in conjunction with `tdx` feature flag.
30
31You can run a SEV-SNP VM using the following command:
32
33```bash
34./cloud-hypervisor \
35     --platform sev_snp=on \
36     --cpus boot=1 \
37     --memory size=1G \
38     --disk path=ubuntu.img
39```
40
41For more information related to Microsoft Hypervisor please see [mshv.md](mshv.md)
42