diff --git a/README.md b/README.md index c108ad8..c5c79de 100644 --- a/README.md +++ b/README.md @@ -21,3 +21,21 @@ $ qemu-kvm -m 2G \ -kernel guest-fedora-41/image.efi \ -hda guest-fedora-41/image.qcow2 ``` + +4. **Launch SNP Guest:** Run an SNP guest with the direct boot options and kernel-hashes=on for the confidential guest measured boot: + +```sh +$ qemu-system-x86_64 \ + -enable-kvm \ + -cpu EPYC-v4 \ + -smp 1 \ + -device virtio-blk-pci,drive=disk0,id=scsi0 \ + -drive file=guest-fedora-41/image.qcow2,if=none,id=disk0 \ + -machine memory-encryption=sev0,vmport=off \ + -object memory-backend-memfd,id=ram1,size=2048M \ + -machine memory-backend=ram1 \ + -object sev-snp-guest,id=sev0,cbitpos=51,reduced-phys-bits=1,kernel-hashes=on \ + -bios /usr/share/edk2/ovmf/OVMF.amdsev.fd \ + -kernel guest-fedora-41/image.efi \ + -nographic +``` diff --git a/common/mkosi.conf b/common/mkosi.conf index 663aa8b..efc7f0a 100644 --- a/common/mkosi.conf +++ b/common/mkosi.conf @@ -9,6 +9,7 @@ SectorSize=512 [Content] KernelModulesInitrdInclude=dm-verity erofs +KernelCommandLine=console=ttyS0 WithRecommends=no MachineId=random WithDocs=no