Skip to content

AMD SEV support and a GCP confidential VM guide - #306

Merged
drasko merged 3 commits into
absmach:mainfrom
rodneyosodo:gcp-amd-sev
Oct 6, 2026
Merged

drasko merged 3 commits into
absmach:mainfrom
rodneyosodo:gcp-amd-sev

Conversation

@rodneyosodo

@rodneyosodo rodneyosodo commented Oct 6, 2026 •

Copy link
Copy Markdown
Contributor

What type of PR is this?

This is a documentation update. It adds the missing AMD SEV-SNP guide for GCP and names the existing guides after the TEE they cover.

What does this do?

Adds hal/gcp-sev/README.md, the AMD SEV-SNP counterpart of the GCP Intel TDX guide. It renames hal/gcp → hal/gcp-tdx and hal/azure → hal/azure-sev so the directory says which TEE it documents, updates the link table in hal/ubuntu/README.md, and points the two GCP guides at their rendered pages.

Two things worth knowing about the SEV guide: the attester is snp-attester and the evidence is a firmware SNP report from /dev/sev-guest via the TSM, not a vTPM HCL report — Azure's az-snp-vtpm path does not apply on GCP. And no Intel SGX/DCAP packages are needed anywhere: kbs-client is built with -p kbs-client, which avoids compiling the workspace verifier that wants the DCAP headers.

Which issue(s) does this PR fix/relate to?

None tracked.

Have you included tests for your changes?

No tests — docs only, no code changed. proplet/ and examples/hal-runner/ are unchanged from main.

Did you document any new/modified features?

Yes, that is the whole PR.

Notes

  • The guide's SNP attester support is already on main, so this is safe to land on its own.
  • Known inconsistency: hal/gcp-tdx still documents the old "add Intel's SGX apt repo" step for kbs-client, while hal/gcp-sev builds the client without it. Worth aligning gcp-tdx in a follow-up.

Signed-off-by: Rodney Osodo <socials@rodneyosodo.com>
Signed-off-by: Rodney Osodo <socials@rodneyosodo.com>
Signed-off-by: Rodney Osodo <socials@rodneyosodo.com>
@rodneyosodo
rodneyosodo marked this pull request as ready for review October 6, 2026 11:43
@drasko
drasko merged commit 929b7ca into absmach:main Oct 6, 2026
12 checks passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants