snp: update family id and image id that to be shared across OpenHCL versions (#4183) - #4185
Conversation
…soft#4183) Remove the version-specific value from family id, making it consistent across all OpenHCL versions (cherry picked from commit 75e780a)
There was a problem hiding this comment.
Pull request overview
This PR updates the SEV-SNP identity constants emitted into OpenHCL SNP ID blocks so the “family id” no longer encodes a version-specific value, aiming to keep the attestation identity consistent across OpenHCL versions.
Changes:
- Update
SNP_FAMILY_IDbytes to a reserved-zero layout with a single OpenHCL discriminator byte. - Rename/update the
SNP_IMAGE_IDconstant value fromunderhilltoopenhcl. - Update the unit test that pins these constants’ exact byte identities.
Suppressed comments (1)
vm/loader/igvmfilegen/src/snp_id_block.rs:54
SNP_IMAGE_IDis also part of the externally-consumed SNP ID block payload (same asSNP_FAMILY_ID). Adding the same “attestation identity” warning here would make the risk of changing this constant more obvious to future editors.
/// SNP image identifier for OpenHCL guests.
pub const SNP_IMAGE_ID: [u8; 16] = *b"openhcl\0\0\0\0\0\0\0\0\0";
|
Given that this is an SNP-specific change, please look at the failed SNP tests and confirm that this change did not cause or exacerbate the failures. |
all green |
Matt LaFayette (Kurjanowicz) (mattkur)
left a comment
There was a problem hiding this comment.
Approving the clean cherry pick, not commenting on the righteousness of the change.
Matt LaFayette (Kurjanowicz) (mattkur)
left a comment
There was a problem hiding this comment.
Something's off with our scripts detecting this; one moment
Matt LaFayette (Kurjanowicz) (mattkur)
left a comment
There was a problem hiding this comment.
Good to go
e7ae29f
into
microsoft:release/1.8.2607
Remove the version-specific value from family id, making it consistent across all OpenHCL versions
Clean cherry pick of #4183