Comment 11 for bug 1982896

Revision history for this message
Juro Bystricky (jurobystricky) wrote :

Hi Michal,
I was able to verify that using virsh/libvirt I was able to launch a VM supporting SGX.
These were my steps:

For my testing I used a NUC NUC7PJYH which is only about ~$200 abd supports SGX.
I did a fresh install of Jammy desktop, installed PPA you provided and upgraded all.
I installed various required packages libguestfs-tools, virt-manager,...

I modified /etc/libvirt/qemu.conf, editing:

cgroup_device_acl = [
   "/dev/null", "/dev/full", "/dev/zero",
   "/dev/random", "/dev/urandom",
   "/dev/ptmx", "/dev/kvm",
   "/dev/rtc","/dev/hpet",
   "/dev/sgx_enclave", "/dev/sgx_provision", "/dev/sgx_vepc"
]

user = "root"
security_driver = “none”

Started libvirtd:
$sudo systemctl start libvirtd

After that I created a CS8 VM image:

$ wget https://cloud.centos.org/centos/8-stream/x86_64/images/CentOS-Stream-GenericCloud-8-20230710.0.x86_64.qcow2

$ sudo mv CentOS-Stream-GenericCloud-8-20230710.0.x86_64.qcow2 /var/lib/libvirt/images
$ sudo virt-customize -a /var/lib/libvirt/images/CentOS-Stream-GenericCloud-8-20230710.0.x86_64.qcow2 --root-password password:123456

Edited cs8-vm-sgx.xml with the new qcow2 image name and launched the VM:

$ sudo virsh define cs8-vm-sgx1.xml
$ sudo virsh start cs8-vm-sgx1

Then I opened the running VM in virt-manager, logged into CS8 VM and verified VM supports SGX.
Screenshot attached.