rootfs: Restore "gpu: Handle root_hash.txt ..."

This reverts commit 923f97bc66 in
order to re-instantiate the logic from commit
e4a13b9a4a.

The latter commit was previously reverted due to the NVIDIA GPU TEE
handler using an initrd, not an image.

Signed-off-by: Manuel Huber <manuelh@nvidia.com>
This commit is contained in:
Manuel Huber
2026-01-16 11:16:24 -08:00
committed by Fabiano Fidêncio
parent f1ca547d66
commit d37db5f068
5 changed files with 81 additions and 30 deletions

View File

@@ -153,6 +153,8 @@ FIRMWARETDVFVOLUMEPATH :=
FIRMWARESNPPATH := $(PREFIXDEPS)/share/ovmf/AMDSEV.fd
ROOTMEASURECONFIG ?= ""
ROOTMEASURECONFIG_NV ?= ""
KERNELTDXPARAMS += $(ROOTMEASURECONFIG)
KERNELQEMUCOCODEVPARAMS += $(ROOTMEASURECONFIG)
@@ -478,6 +480,7 @@ ifneq (,$(QEMUCMD))
# using an image and /dev is already mounted.
KERNELPARAMS_NV = "cgroup_no_v1=all"
KERNELPARAMS_NV += "devtmpfs.mount=0"
KERNELPARAMS_NV += $(ROOTMEASURECONFIG_NV)
# Setting this to false can lead to cgroup leakages in the host
# Best practice for production is to set this to true