2
0
mirror of https://github.com/NixOS/nixpkgs.git synced 2025-03-11 03:32:41 +00:00
nixpkgs/pkgs/os-specific
Vincent Haupert c0ae481757 linux: enable AMD SME, SEV, SEV-SE, SEV-SNP on x86_64
Enables the following kernel config options for AMD CPUs on x86_64:

- `CRYPTO_DEV_CCP`: Enables offloading of crypto operations to AMD's
  Cryptographic Coprocessor (CCP). Also required by `KVM_AMD_SEV`.
- `AMD_MEM_ENCRYPT`: Enables support for Secure Memory Encryption (SME).
  Please note that `AMD_MEM_ENCRYPT_ACTIVE_BY_DEFAULT` is not enabled;
  yet, you you can enable memory encryption by passing `mem_encrypt=on`
  as a kernal command line option.
- `KVM_AMD_SEV`: Enables launching Encrypted VMs (SEV) and Secure VMs
  with Encrypted State (SEV-ES).
- `SEV_GUEST`: Enables support for AMD Secure Encrypted Virtualization
  with Secure Nested Paging (SEV-SNP). Built as module.

Enabling these options is in line with other distros, e.g., Debian,
Fedora or Arch Linux.
2022-12-02 08:33:06 +01:00
..
bsd
darwin
linux linux: enable AMD SME, SEV, SEV-SE, SEV-SNP on x86_64 2022-12-02 08:33:06 +01:00
solo5 solo5: 0.7.3 -> 0.7.4 2022-11-08 08:13:10 -06:00
windows