Extend the firmware metadata JSON schema to support Secure VM Service Module
(SVSM) firmware images. Parts of these changes can be useful for describing
other (confidential) firmware types as well.
This series adds:
- An entry in the FirmwareFeature enum indicating a virtual (emulated) TPM
devices offered by the firmware (Coconut SVSM provides one)
- An entry in the FirmwareOSInterface enum indicating support of the
SVSM guest interface
- A new top-level array to store associated digest values
- Add structures to describe AMD SEV-SNP launch digests.
For attesting a confidential virtual machine, the verifier needs to know the
expected launch digest. This new format allows us to add this information to a
metadata file and include it in distribution packages of confidential firmware
images.
Oliver Steffen (3):
docs/interop: Add vtpm feature firmware.json
docs/interop: Add AMD SEV-SNP SVSM interface to firmware.json
docs/interop: Add firmware digests to schema
docs/interop/firmware.json | 94 ++++++++++++++++++++++++++++++++++++--
1 file changed, 91 insertions(+), 3 deletions(-)
--
2.52.0