Skip to content

Commit

Permalink
feat(qemu): add efi_secret driver
Browse files Browse the repository at this point in the history
Despite the generic name, the only current use of the `efi_secret`
is exposing data in /sys that's been injected into a SEV/SEV-ES
virtual machine. More info:

https://docs.kernel.org/security/secrets/coco.html

This secret is probably a luks password, so we need this driver at
boot time.

Signed-off-by: Cole Robinson <crobinso@redhat.com>
  • Loading branch information
crobinso authored and LaszloGombos committed Nov 5, 2022
1 parent 415e551 commit 8194f72
Showing 1 changed file with 2 additions and 1 deletion.
3 changes: 2 additions & 1 deletion modules.d/90qemu/module-setup.sh
Original file line number Diff line number Diff line change
Expand Up @@ -18,5 +18,6 @@ installkernel() {
virtio_blk virtio virtio_ring virtio_pci \
virtio_scsi virtio_console virtio_rng virtio_mem \
spapr-vscsi \
qemu_fw_cfg
qemu_fw_cfg \
efi_secret
}

0 comments on commit 8194f72

Please sign in to comment.