From c549d12da764715286034aad74b8c736c90f0bfe Mon Sep 17 00:00:00 2001 From: Pavel Mores Date: Thu, 30 Jan 2025 08:46:02 +0100 Subject: [PATCH] runtime-rs: parse SEV-SNP related config file settings The 'sev_snp_guest' default value of 'false' is in compliance with the golang runtime behaviour. Signed-off-by: Pavel Mores --- src/libs/kata-types/src/config/hypervisor/mod.rs | 8 ++++++++ 1 file changed, 8 insertions(+) diff --git a/src/libs/kata-types/src/config/hypervisor/mod.rs b/src/libs/kata-types/src/config/hypervisor/mod.rs index cef5e1d34f..e4f0006b22 100644 --- a/src/libs/kata-types/src/config/hypervisor/mod.rs +++ b/src/libs/kata-types/src/config/hypervisor/mod.rs @@ -825,6 +825,14 @@ pub struct SecurityInfo { #[serde(default)] pub confidential_guest: bool, + /// If false prefer SEV even if SEV-SNP is also available + #[serde(default)] + pub sev_snp_guest: bool, + + /// Path to SNP certificates + #[serde(default)] + pub snp_certs_path: String, + /// Path to OCI hook binaries in the *guest rootfs*. /// /// This does not affect host-side hooks which must instead be added to the OCI spec passed to