SEV-SNP instances on AWS fail to boot

Bug #2137714 reported by Magali Lemes do Sacramento
6
This bug affects 1 person
Affects Status Importance Assigned to Milestone
linux-aws (Ubuntu)
New
Undecided
Unassigned
Questing
Fix Committed
High
Magali Lemes do Sacramento

Bug Description

[Impact]
AWS instances with SEV-SNP enabled running the 6.17 kernel fail to boot
following upstream commit 81256a50aa0f ("x86/mm: Make memremap(MEMREMAP_WB) map
memory as encrypted by default"). The failure occurs because the vmgenid
driver relies on memory that must be shared, but is now mapped as encrypted by
default.

[Fix]
Clean cherry-pick of bb9ff576fdff ("virt: vmgenid: remap memory as
decrypted") from linux-next.

[Test Plan]
Compile the kernel with this patch applied and boot test on AWS c7a.8xlarge
instances with SEV-SNP enabled and disabled, verifying that the system boots
successfully in both configurations.

[Where problems could occur]
This patch only touches the vmgenid driver, and only affects the memory
attributes of the vmgenid mapping. However, incorrect assumptions about the
sharing requirements of the vmgenid memory region could potentially lead to
loss of vmgenid functionality or boot failures.

Changed in linux-aws (Ubuntu Questing):
assignee: nobody → Magali Lemes do Sacramento (magalilemes)
status: New → Incomplete
status: Incomplete → In Progress
importance: Undecided → High
description: updated
tags: added: kernel-daily-bug
Changed in linux-aws (Ubuntu Questing):
status: In Progress → Fix Committed
Revision history for this message
Ubuntu Kernel Bot (ubuntu-kernel-bot) wrote :

This bug is awaiting verification that the linux-aws/6.17.0-1007.7 kernel in -proposed solves the problem. Please test the kernel and update this bug with the results. If the problem is solved, change the tag 'verification-needed-questing-linux-aws' to 'verification-done-questing-linux-aws'. If the problem still exists, change the tag 'verification-needed-questing-linux-aws' to 'verification-failed-questing-linux-aws'.

If verification is not done by 5 working days from today, this fix will be dropped from the source code, and this bug will be closed.

See https://wiki.ubuntu.com/Testing/EnableProposed for documentation how to enable and use -proposed. Thank you!

tags: added: kernel-spammed-questing-linux-aws-v2 verification-needed-questing-linux-aws
To post a comment you must log in.
This report contains Public information  
Everyone can see this information.

Other bug subscribers

Remote bug watches

Bug watches keep track of this bug in other bug trackers.