Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Config setup? - TD Quote from host is failing inside SVSM #19

Closed
oriordain-s opened this issue Jan 27, 2025 · 1 comment
Closed

Config setup? - TD Quote from host is failing inside SVSM #19

oriordain-s opened this issue Jan 27, 2025 · 1 comment

Comments

@oriordain-s
Copy link

Hi folks,

I have followed directions for ingredient building as per documentation in:
https://github.com/intel-staging/td-partitioning-svsm/blob/svsm-tdp-vtpm/Documentation/TDP-VTPM.md
and
https://github.com/intel-staging/td-partitioning-svsm/blob/svsm-tdp-patches/INSTALLATION_GUIDE.md

See txt file attached for output from running the launch script from the host (Ubuntu 24.04).

Launch script used is quite similar to:
https://github.com/intel-staging/td-partitioning-svsm/blob/svsm-tdp-patches/INSTALLATION_GUIDE.md#sample-tdp-guest-launch-script

From a tad further debug, it's running into failure after call to:
generate_vtpm_certificates: quote_generation: get_quote_from_host: tdvmcall_get_quote
Is this a known issue? If not, would appreciate pointers to possible fix.

Many thanks.
-Seo

svsm-td-quote-error.txt

@oriordain-s
Copy link
Author

Ok, folks, this issue can be closed - the quote tdvmcall was not getting caught by qgsd daemon on the host.
Need the correct qemu setup parameters when launching.

-machine q35,accel=kvm,kernel-irqchip=on,hpet=off,pic=off,pit=off,sata=off,l2bios=${L2BIOS},confidential-guest-support=tdx0 \
-object '{"qom-type":"tdx-guest","id":"tdx0","num-l2-vms":1,"svsm":true,"quote-generation-socket":{"type": "vsock", "cid":"2","port":"4050"}}' \
-device vhost-vsock-pci,guest-cid=3

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

1 participant