AMD SEV/SEV-ES Local Migration Support Patches For Linux
Written by Michael Larabel in AMD on 21 June 2021 at 02:56 PM EDT. 1 Comment
AMD --
Google engineers have prepared a set of Linux kernel patches allowing for AMD Secure Encrypted Virtualization (SEV) / SEV-ES encrypted state to allow for local migration support of these encrypted virtual machines on the same host.

Local migration of VMs allow for moving the guest to a new user-space VMM within the same host such as when upgrading/changing its resources or other alterations to the virtual machine but short of remote migration to a different host.

With Secure Encrypted Virtualization on EPYC processors isolating the VMs from the hypervisor with encrypted memory and SEV-ES also protecting the CPU register state, VM migration support requires special handling. In particular, the proper and secure passing of SEV metadata from the old to new VMM.


With this kernel patch series submitted by Google, the just under 500 lines of new code allow for SEV/SEV-ES local migration support with the Kernel-based Virtual Machine (KVM). Meanwhile on their latest SEV front with EPYC 7003 series processors, the SEV-SNP upstreaming is still ongoing but hopefully that too will be settled soon.

This isn't the first time we have seen Google engineers submitting patches to the Linux kernel for AMD EPYC server CPU features. They have in the past worked on other features like the RAPL support for EPYC and more. For some of these non-critical features they have been at times a bit tardy to arrive for mainline until tackled by the likes of Google, but with AMD continuing to hire more Linux engineers it looks like they are working to provide much more robust support moving forward.
Related News
About The Author
Author picture

Michael Larabel is the principal author of Phoronix.com and founded the site in 2004 with a focus on enriching the Linux hardware experience. Michael has written more than 20,000 articles covering the state of Linux hardware support, Linux performance, graphics drivers, and other topics. Michael is also the lead developer of the Phoronix Test Suite, Phoromatic, and OpenBenchmarking.org automated benchmarking software. He can be followed via Twitter or contacted via MichaelLarabel.com.

Popular News This Week