tdx: Update GPU config for the latest TDX stack

We need extra kernel_params for TDX

Signed-off-by: Zvonko Kaiser <zkaiser@nvidia.com>
This commit is contained in:
Zvonko Kaiser 2025-02-06 20:58:10 +00:00
parent d4dd87a974
commit 66ccc25724
3 changed files with 5 additions and 2 deletions

View File

@ -457,6 +457,8 @@ ifneq (,$(QEMUCMD))
# Setting this to false can lead to cgroup leakages in the host # Setting this to false can lead to cgroup leakages in the host
# Best practice for production is to set this to true # Best practice for production is to set this to true
DEFSANDBOXCGROUPONLY_NV = true DEFSANDBOXCGROUPONLY_NV = true
# The latest OVMF build should be good for both TDX and SNP
FIRMWAREPATH_NV := $(PREFIXDEPS)/share/ovmf/OVMF.fd
endif endif
ifneq (,$(CLHCMD)) ifneq (,$(CLHCMD))
@ -627,6 +629,7 @@ USER_VARS += KERNELTDXPARAMS_NV
USER_VARS += KERNELSNPPARAMS_NV USER_VARS += KERNELSNPPARAMS_NV
USER_VARS += DEFAULTTIMEOUT_NV USER_VARS += DEFAULTTIMEOUT_NV
USER_VARS += DEFSANDBOXCGROUPONLY_NV USER_VARS += DEFSANDBOXCGROUPONLY_NV
USER_VARS += FIRMWAREPATH_NV
USER_VARS += DEFROOTFSTYPE USER_VARS += DEFROOTFSTYPE
USER_VARS += MACHINETYPE USER_VARS += MACHINETYPE
USER_VARS += KERNELDIR USER_VARS += KERNELDIR

View File

@ -70,7 +70,7 @@ kernel_params = "@KERNELTDXPARAMS_NV@"
# Path to the firmware. # Path to the firmware.
# If you want that qemu uses the default firmware leave this option empty # If you want that qemu uses the default firmware leave this option empty
firmware = "@FIRMWARETDVFPATH@" firmware = "@FIRMWAREPATH_NV@"
# Path to the firmware volume. # Path to the firmware volume.
# firmware TDVF or OVMF can be split into FIRMWARE_VARS.fd (UEFI variables # firmware TDVF or OVMF can be split into FIRMWARE_VARS.fd (UEFI variables

View File

@ -71,7 +71,7 @@ kernel_params = "@KERNELTDXPARAMS@"
# Path to the firmware. # Path to the firmware.
# If you want that qemu uses the default firmware leave this option empty # If you want that qemu uses the default firmware leave this option empty
firmware = "@FIRMWARETDVFPATH@" firmware = "@FIRMWAREPATH_NV@"
# Path to the firmware volume. # Path to the firmware volume.
# firmware TDVF or OVMF can be split into FIRMWARE_VARS.fd (UEFI variables # firmware TDVF or OVMF can be split into FIRMWARE_VARS.fd (UEFI variables