From 83277fbd41d9d519d47b19ea6f2358bbad53c7e5 Mon Sep 17 00:00:00 2001
From: Caohongtao <caohongtao_yewu@cmss.chinamobile.com>
Date: Wed, 11 Sep 2024 06:43:27 +0000
Subject: [PATCH] =?UTF-8?q?=E6=9B=B4=E6=96=B0=E6=8A=80=E6=9C=AF=E6=89=8B?=
 =?UTF-8?q?=E5=86=8C?=
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

Signed-off-by: Caohongtao <caohongtao_yewu@cmss.chinamobile.com>
---
 ...\250AMD_SEV\350\231\232\346\213\237\346\234\272.md" |  2 +-
 ...345\257\206\350\231\232\346\213\237\346\234\272.md" | 10 ++++------
 2 files changed, 5 insertions(+), 7 deletions(-)

diff --git "a/sig/ConfidentialComputing/content/AMD_SEV/\345\234\250Anolis 8.6\345\220\257\345\212\250AMD_SEV\350\231\232\346\213\237\346\234\272.md" "b/sig/ConfidentialComputing/content/AMD_SEV/\345\234\250Anolis 8.6\345\220\257\345\212\250AMD_SEV\350\231\232\346\213\237\346\234\272.md"
index c32492bf..bb0c8e27 100644
--- "a/sig/ConfidentialComputing/content/AMD_SEV/\345\234\250Anolis 8.6\345\220\257\345\212\250AMD_SEV\350\231\232\346\213\237\346\234\272.md"	
+++ "b/sig/ConfidentialComputing/content/AMD_SEV/\345\234\250Anolis 8.6\345\220\257\345\212\250AMD_SEV\350\231\232\346\213\237\346\234\272.md"	
@@ -201,7 +201,7 @@ qemu-nbd -d /dev/nbd0
 
 ### 启动方式一：使用 QEMU 命令行启动
 
-请参考如下qemu命令行启动CSV guest虚拟机：
+请参考如下qemu命令行启动SEV guest虚拟机：
 
 ```shell
 /usr/libexec/qemu-kvm -enable-kvm -cpu host -smp 4 -m 4096 -drive if=pflash,format=raw,unit=0,file=/usr/share/edk2/ovmf/OVMF_CODE.cc.fd,readonly=on  -hda /var/lib/libvirt/images/sev-guest.img -object sev-guest,id=sev0,policy=0x1,cbitpos=51,reduced-phys-bits=5 -machine memory-encryption=sev0 -name test -nographic
diff --git "a/sig/ConfidentialComputing/content/\346\265\267\345\205\211\345\256\211\345\205\250\350\231\232\346\213\237\345\214\226\346\212\200\346\234\257CSV/\345\234\250Anolis 8\350\277\220\350\241\214CSV\346\234\272\345\257\206\350\231\232\346\213\237\346\234\272.md" "b/sig/ConfidentialComputing/content/\346\265\267\345\205\211\345\256\211\345\205\250\350\231\232\346\213\237\345\214\226\346\212\200\346\234\257CSV/\345\234\250Anolis 8\350\277\220\350\241\214CSV\346\234\272\345\257\206\350\231\232\346\213\237\346\234\272.md"
index 87632da0..d3bbcc18 100644
--- "a/sig/ConfidentialComputing/content/\346\265\267\345\205\211\345\256\211\345\205\250\350\231\232\346\213\237\345\214\226\346\212\200\346\234\257CSV/\345\234\250Anolis 8\350\277\220\350\241\214CSV\346\234\272\345\257\206\350\231\232\346\213\237\346\234\272.md"	
+++ "b/sig/ConfidentialComputing/content/\346\265\267\345\205\211\345\256\211\345\205\250\350\231\232\346\213\237\345\214\226\346\212\200\346\234\257CSV/\345\234\250Anolis 8\350\277\220\350\241\214CSV\346\234\272\345\257\206\350\231\232\346\213\237\346\234\272.md"	
@@ -91,12 +91,15 @@ service libvirtd restart
 以下是CSV虚拟机的参考配置文件csv_launch.xml，在使用过程中，请根据实际需求，修改对应的配置字段。更多配置请参考[Launch security with AMD SEV](https://libvirt.org/kbase/launch_security_sev.html)
 
 ```
-<domain type = 'kvm'  xmlns:qemu='http://libvirt.org/schemas/domain/qemu/1.0'>
+<domain type = 'kvm'>
     <name>csv_launch</name>
     <memory unit='GiB'>4</memory>
+    <currentMemory unit='KiB'>4194304</currentMemory>
     <vcpu>4</vcpu>
     <os>
         <type arch = 'x86_64' machine = 'pc'>hvm</type>
+        <loader readonly='yes' type='pflash'>/usr/share/edk2/ovmf/OVMF_CODE.fd</loader>
+        <nvram>/usr/share/edk2/ovmf/OVMF_VARS.fd</nvram>
         <boot dev = 'hd'/>
     </os>
     <features>
@@ -126,11 +129,6 @@ service libvirtd restart
         <cbitpos>47</cbitpos>
         <reducedPhysBits>5</reducedPhysBits>
     </launchSecurity>
-
-    <qemu:commandline>
-        <qemu:arg value="-drive"/>
-        <qemu:arg value="if=pflash,format=raw,unit=0,file=/usr/share/edk2/ovmf/OVMF_CODE.cc.fd,readonly=on"/>
-    </qemu:commandline>
 </domain>
 ```
 
-- 
Gitee