[PATCH 1/3] kexec: Do not map the kexec area as decrypted when SEV is active

Boris Petkov bp at alien8.de
Tue Mar 26 03:06:13 PDT 2019

On March 25, 2019 8:59:28 PM GMT+01:00, "Lendacky, Thomas" <Thomas.Lendacky at amd.com> wrote:
>Maybe what would help is to describe why there is a difference between
>and SEV in regards to kexec. During a traditional boot under SME, SME
>encrypt the kernel, so the SME kexec kernel also needs to be
>in order to replicate a normal SME boot. During a traditional boot
>SEV, the kernel has already been loaded encrypted, so the SEV kexec
>needs to be encrypted in order to replicate a normal SEV boot.

Yah, that should be in a comment above that function.


Sent from a small device: formatting sux and brevity is inevitable. 

More information about the kexec mailing list