====== SEV CERTIFICATE ======
SEV VERSION: 3.0.0-0
=== TEST ENVIRONMENT DETAILS ===
Host Environment Details:
Host Operating System: Fedora Linux 41 (Forty One)
OVMF Version: 20241117-5.fc41
QEMU Version: 9.1.3-2.fc41
Host Kernel Version: 6.17.10-100.fc41.x86_64
Guest Environment Details:
Guest Operating System: Fedora Linux 41 (Forty One)
Guest Kernel version: 6.17.10-100.fc41.x86_64
=== SUMMARY ===
[ ✅ ] SEV VERSION 3.0.0-0 SNP HOST TESTS
❌ snphost-ok.service : Run snphost ok to make sure host is correctly set-up for SNP functionalities....
snphost-ok.service fails !!! Please check below for more details:
[ PASS ] - AMD CPU
[ PASS ] - Microcode support
[ PASS ] - Secure Memory Encryption (SME)
[ PASS ] - SME: Enabled in MSR
[ PASS ] - Secure Encrypted Virtualization (SEV)
[ PASS ] - SEV firmware version: 1.54
[ PASS ] - Encrypted State (SEV-ES)
[ PASS ] - SEV-ES initialized
[ PASS ] - SEV initialized: Initialized, no guests running
[ PASS ] - Secure Nested Paging (SEV-SNP)
[ PASS ] - VM Permission Levels
[ PASS ] - Number of VMPLs: 4
[ PASS ] - SNP: Enabled in MSR
[ PASS ] - SNP initialized
[ PASS ] - RMP table addresses: 0x1827a500000 - 0x183fe5fffff
[ PASS ] - RMP table initialized
[ FAIL ] - Alias check
[ PASS ] - Physical address bit reduction: 6
[ PASS ] - C-bit location: 51
[ PASS ] - Number of encrypted guests supported simultaneously: 1006
[ PASS ] - Minimum ASID value for SEV-enabled, SEV-ES disabled guest: 100
[ PASS ] - /dev/sev readable
[ PASS ] - /dev/sev writable
[ PASS ] - Page flush MSR: ENABLED
[ PASS ] - KVM supported: API version: 12
[ PASS ] - SEV enabled in KVM
[ PASS ] - SEV-ES enabled in KVM
[ PASS ] - SEV-SNP enabled in KVM
[ PASS ] - Memlock resource limit: Soft: 8388608 | Hard: 8388608
[ PASS ] - Comparing TCB values: TCB versions match
Platform TCB version: TCB Version:
Microcode: 22
SNP: 11
TEE: 0
Boot Loader: 7
FMC: None
Reported TCB version: TCB Version:
Microcode: 22
SNP: 11
TEE: 0
Boot Loader: 7
FMC: None
ERROR: One or more tests in snphost ok reported a failure
Error: One or more tests in snphost ok reported a failure
✅ calculate-measurement.service : Calculate guest measurement...
❌ generate-id-block.service : Generate id-block.b64 and id-auth.b64 for guest launch...
generate-id-block.service fails !!! Please check below for more details:
ERROR: snpguest failed (exit 2)
error: unexpected argument '--id-block-file' found
tip: to pass '--id-block-file' as a value, use '-- --id-block-file'
Usage: snpguest generate id-block --family-id --image-id --svn --policy
For more information, try '--help'.
✅ display-guest-logs.service : Show the guest logs for the appropriate services in the host...
✅ verify-guest.service : Verify the SEV-SNP guest booted correctly...
[ ❌ ] SEV VERSION 3.0.0-0 SNP GUEST TESTS
✅ snpguest-ok.service : Run snguest ok to verify SNP enablement on guest...
❌ attestation-workflow.service : Run SNP Regular Attestation after boot...
✅ Generation of SNP Guest Report
❌ Fetch of CA certificate chain
attestation-workflow.service fails !!! Please check below for more details:
Perform Regular Attestation workflow using snpguest tool ...
ERROR: Fetch of CA certificate chain fails !!
ERROR: Attestation report could be either Milan or Genoa. Update firmware to get a new version of the report.
Error: Attestation report could be either Milan or Genoa. Update firmware to get a new version of the report.
=== SEV VERSION 3.0.0-0 LOG ===
Jun 28 20:32:38 systemd[1]: Starting snphost-ok.service - Run snphost ok to make sure host is correctly set-up for SNP functionalities....
Jun 28 20:32:38 snphost[4448]: [ PASS ] - AMD CPU
Jun 28 20:32:38 snphost[4448]: [ PASS ] - Microcode support
Jun 28 20:32:38 snphost[4448]: [ PASS ] - Secure Memory Encryption (SME)
Jun 28 20:32:38 snphost[4448]: [ PASS ] - SME: Enabled in MSR
Jun 28 20:32:38 snphost[4448]: [ PASS ] - Secure Encrypted Virtualization (SEV)
Jun 28 20:32:38 snphost[4448]: [ PASS ] - SEV firmware version: 1.54
Jun 28 20:32:38 snphost[4448]: [ PASS ] - Encrypted State (SEV-ES)
Jun 28 20:32:38 snphost[4448]: [ PASS ] - SEV-ES initialized
Jun 28 20:32:38 snphost[4448]: [ PASS ] - SEV initialized: Initialized, no guests running
Jun 28 20:32:38 snphost[4448]: [ PASS ] - Secure Nested Paging (SEV-SNP)
Jun 28 20:32:38 snphost[4448]: [ PASS ] - VM Permission Levels
Jun 28 20:32:38 snphost[4448]: [ PASS ] - Number of VMPLs: 4
Jun 28 20:32:38 snphost[4448]: [ PASS ] - SNP: Enabled in MSR
Jun 28 20:32:38 snphost[4448]: [ PASS ] - SNP initialized
Jun 28 20:32:38 snphost[4448]: [ PASS ] - RMP table addresses: 0x1827a500000 - 0x183fe5fffff
Jun 28 20:32:38 snphost[4448]: [ PASS ] - RMP table initialized
Jun 28 20:32:38 snphost[4448]: [ FAIL ] - Alias check
Jun 28 20:32:38 snphost[4448]: [ PASS ] - Physical address bit reduction: 6
Jun 28 20:32:38 snphost[4448]: [ PASS ] - C-bit location: 51
Jun 28 20:32:38 snphost[4448]: [ PASS ] - Number of encrypted guests supported simultaneously: 1006
Jun 28 20:32:38 snphost[4448]: [ PASS ] - Minimum ASID value for SEV-enabled, SEV-ES disabled guest: 100
Jun 28 20:32:38 snphost[4448]: [ PASS ] - /dev/sev readable
Jun 28 20:32:38 snphost[4448]: [ PASS ] - /dev/sev writable
Jun 28 20:32:38 snphost[4448]: [ PASS ] - Page flush MSR: ENABLED
Jun 28 20:32:38 snphost[4448]: [ PASS ] - KVM supported: API version: 12
Jun 28 20:32:38 snphost[4448]: [ PASS ] - SEV enabled in KVM
Jun 28 20:32:38 snphost[4448]: [ PASS ] - SEV-ES enabled in KVM
Jun 28 20:32:38 snphost[4448]: [ PASS ] - SEV-SNP enabled in KVM
Jun 28 20:32:38 snphost[4448]: [ PASS ] - Memlock resource limit: Soft: 8388608 | Hard: 8388608
Jun 28 20:32:38 snphost[4448]: [ PASS ] - Comparing TCB values: TCB versions match
Jun 28 20:32:38 snphost[4448]: Platform TCB version: TCB Version:
Jun 28 20:32:38 snphost[4448]: Microcode: 22
Jun 28 20:32:38 snphost[4448]: SNP: 11
Jun 28 20:32:38 snphost[4448]: TEE: 0
Jun 28 20:32:38 snphost[4448]: Boot Loader: 7
Jun 28 20:32:38 snphost[4448]: FMC: None
Jun 28 20:32:38 snphost[4448]: Reported TCB version: TCB Version:
Jun 28 20:32:38 snphost[4448]: Microcode: 22
Jun 28 20:32:38 snphost[4448]: SNP: 11
Jun 28 20:32:38 snphost[4448]: TEE: 0
Jun 28 20:32:38 snphost[4448]: Boot Loader: 7
Jun 28 20:32:38 snphost[4448]: FMC: None
Jun 28 20:32:38 snphost[4448]: ERROR: One or more tests in snphost ok reported a failure
Jun 28 20:32:38 snphost[4448]: Error: One or more tests in snphost ok reported a failure
Jun 28 20:32:38 systemd[1]: snphost-ok.service: Main process exited, code=exited, status=1/FAILURE
Jun 28 20:32:38 systemd[1]: snphost-ok.service: Failed with result 'exit-code'.
Jun 28 20:32:38 systemd[1]: Failed to start snphost-ok.service - Run snphost ok to make sure host is correctly set-up for SNP functionalities..
Jun 28 20:32:39 systemd[1]: Starting calculate-measurement.service - Calculate guest measurement...
Jun 28 20:32:39 guest_measurement.sh[4838]: 0x2138d01921e2a7bedfbbdebd5b0823922e928e70869baa6e11fc5a68c17240006b9c0aeb2103761b42a1ca8c3550c241
Jun 28 20:32:39 systemd[1]: calculate-measurement.service: Deactivated successfully.
Jun 28 20:32:39 systemd[1]: Finished calculate-measurement.service - Calculate guest measurement.
Jun 28 20:32:39 systemd[1]: calculate-measurement.service: Consumed 307ms CPU time, 274.9M memory peak.
Jun 28 20:32:39 systemd[1]: Starting generate-id-block.service - Generate id-block.b64 and id-auth.b64 for guest launch...
Jun 28 20:32:39 generate_id_block.py[4843]: ERROR: snpguest failed (exit 2)
Jun 28 20:32:39 generate_id_block.py[4843]: error: unexpected argument '--id-block-file' found
Jun 28 20:32:39 generate_id_block.py[4843]: tip: to pass '--id-block-file' as a value, use '-- --id-block-file'
Jun 28 20:32:39 generate_id_block.py[4843]: Usage: snpguest generate id-block --family-id --image-id --svn --policy
Jun 28 20:32:39 generate_id_block.py[4843]: For more information, try '--help'.
Jun 28 20:32:39 systemd[1]: generate-id-block.service: Main process exited, code=exited, status=1/FAILURE
Jun 28 20:32:39 systemd[1]: generate-id-block.service: Failed with result 'exit-code'.
Jun 28 20:32:39 systemd[1]: Failed to start generate-id-block.service - Generate id-block.b64 and id-auth.b64 for guest launch.
Jun 28 20:32:39 systemd[1]: Starting display-guest-logs.service - Show the guest logs for the appropriate services in the host...
Jun 28 20:32:39 systemd[1]: Starting verify-guest.service - Verify the SEV-SNP guest booted correctly...
Jun 28 20:32:39 journalctl[4857]: No journal files were found.
Jun 28 20:32:40 journalctl[4874]: No journal files were found.
Jun 28 20:32:41 journalctl[4879]: No journal files were found.
Jun 28 20:32:42 journalctl[4887]: No journal files were found.
Jun 28 20:32:43 journalctl[4893]: No journal files were found.
Jun 28 20:32:44 journalctl[4899]: No journal files were found.
Jun 28 20:32:45 journalctl[4905]: No journal files were found.
Jun 28 20:32:46 journalctl[4911]: No journal files were found.
Jun 28 20:32:47 journalctl[4917]: No journal files were found.
Jun 28 20:32:48 journalctl[4923]: No journal files were found.
Jun 28 20:32:49 journalctl[4929]: No journal files were found.
Jun 28 20:32:50 journalctl[4935]: No journal files were found.
Jun 28 20:32:52 verify-guest.sh[4851]: Guest boot successful.
Jun 28 20:32:52 systemd[1]: verify-guest.service: Deactivated successfully.
Jun 28 20:32:52 systemd[1]: Finished verify-guest.service - Verify the SEV-SNP guest booted correctly.
Jun 28 20:32:52 display-guest-logs.sh[4849]: SEV-SNP guest test results:
Jun 28 20:32:52 display-guest-logs.sh[4849]: For more information check journals in /var/log/journal/guest-logs
Jun 28 20:32:52 display-guest-logs.sh[4849]: [ PASS ] - SEV: ENABLED
Jun 28 20:32:52 display-guest-logs.sh[4849]: [ PASS ] - SEV-ES: ENABLED
Jun 28 20:32:52 display-guest-logs.sh[4849]: [ PASS ] - SNP: ENABLED
Jun 28 20:32:52 display-guest-logs.sh[4849]: [ PASS ] - Optional Features statuses:
Jun 28 20:32:52 display-guest-logs.sh[4849]: [ PASS ] - VTOM: DISABLED
Jun 28 20:32:52 display-guest-logs.sh[4849]: [ PASS ] - ReflectVC: DISABLED
Jun 28 20:32:52 display-guest-logs.sh[4849]: [ PASS ] - Restricted Injection: DISABLED
Jun 28 20:32:52 display-guest-logs.sh[4849]: [ PASS ] - Alternate Injection: DISABLED
Jun 28 20:32:52 display-guest-logs.sh[4849]: [ PASS ] - Debug Swap: DISABLED
Jun 28 20:32:52 display-guest-logs.sh[4849]: [ PASS ] - Prevent Host IBS: DISABLED
Jun 28 20:32:52 display-guest-logs.sh[4849]: [ PASS ] - SNP BTB Isolation: DISABLED
Jun 28 20:32:52 display-guest-logs.sh[4849]: [ PASS ] - VMPL SSS: DISABLED
Jun 28 20:32:52 display-guest-logs.sh[4849]: [ PASS ] - Secure TSE: DISABLED
Jun 28 20:32:52 display-guest-logs.sh[4849]: [ PASS ] - VMG Exit Parameter: DISABLED
Jun 28 20:32:52 display-guest-logs.sh[4849]: [ PASS ] - IBS Virtualization: DISABLED
Jun 28 20:32:52 display-guest-logs.sh[4849]: [ PASS ] - VMSA Reg Prot: DISABLED
Jun 28 20:32:52 display-guest-logs.sh[4849]: [ PASS ] - SMT Protection: DISABLED
Jun 28 20:32:52 display-guest-logs.sh[4849]: snpguest-ok.service: Deactivated successfully.
Jun 28 20:32:52 display-guest-logs.sh[4849]: Finished snpguest-ok.service - Run snguest ok to verify SNP enablement on guest.
Jun 28 20:32:52 display-guest-logs.sh[4849]: Starting attestation-workflow.service - Run SNP Regular Attestation after boot...
Jun 28 20:32:52 display-guest-logs.sh[4849]: Perform Regular Attestation workflow using snpguest tool ...
Jun 28 20:32:52 display-guest-logs.sh[4849]: ERROR: Fetch of CA certificate chain fails !!
Jun 28 20:32:52 display-guest-logs.sh[4849]: ERROR: Attestation report could be either Milan or Genoa. Update firmware to get a new version of the report.
Jun 28 20:32:52 display-guest-logs.sh[4849]: Error: Attestation report could be either Milan or Genoa. Update firmware to get a new version of the report.
Jun 28 20:32:52 display-guest-logs.sh[4849]: attestation-workflow.service: Main process exited, code=exited, status=1/FAILURE
Jun 28 20:32:52 display-guest-logs.sh[4849]: attestation-workflow.service: Failed with result 'exit-code'.
Jun 28 20:32:52 display-guest-logs.sh[4849]: Failed to start attestation-workflow.service - Run SNP Regular Attestation after boot.
Jun 28 20:32:52 systemd[1]: display-guest-logs.service: Deactivated successfully.
Jun 28 20:32:52 systemd[1]: Finished display-guest-logs.service - Show the guest logs for the appropriate services in the host.
====== SEV CERTIFICATE ======
SEV VERSION: 3.0.0-0
=== TEST ENVIRONMENT DETAILS ===
Host Environment Details:
Host Operating System: Fedora Linux 41 (Forty One)
OVMF Version: 20241117-5.fc41
QEMU Version: 9.1.3-2.fc41
Host Kernel Version: 6.17.10-100.fc41.x86_64
Guest Environment Details:
Guest Operating System: Fedora Linux 41 (Forty One)
Guest Kernel version: 6.17.10-100.fc41.x86_64
=== SUMMARY ===
[ ✅ ] SEV VERSION 3.0.0-0 SNP HOST TESTS
❌ snphost-ok.service : Run snphost ok to make sure host is correctly set-up for SNP functionalities....
snphost-ok.service fails !!! Please check below for more details:
[ PASS ] - AMD CPU
[ PASS ] - Microcode support
[ PASS ] - Secure Memory Encryption (SME)
[ PASS ] - SME: Enabled in MSR
[ PASS ] - Secure Encrypted Virtualization (SEV)
[ PASS ] - SEV firmware version: 1.54
[ PASS ] - Encrypted State (SEV-ES)
[ PASS ] - SEV-ES initialized
[ PASS ] - SEV initialized: Initialized, no guests running
[ PASS ] - Secure Nested Paging (SEV-SNP)
[ PASS ] - VM Permission Levels
[ PASS ] - Number of VMPLs: 4
[ PASS ] - SNP: Enabled in MSR
[ PASS ] - SNP initialized
[ PASS ] - RMP table addresses: 0x1827a500000 - 0x183fe5fffff
[ PASS ] - RMP table initialized
[ FAIL ] - Alias check
[ PASS ] - Physical address bit reduction: 6
[ PASS ] - C-bit location: 51
[ PASS ] - Number of encrypted guests supported simultaneously: 1006
[ PASS ] - Minimum ASID value for SEV-enabled, SEV-ES disabled guest: 100
[ PASS ] - /dev/sev readable
[ PASS ] - /dev/sev writable
[ PASS ] - Page flush MSR: ENABLED
[ PASS ] - KVM supported: API version: 12
[ PASS ] - SEV enabled in KVM
[ PASS ] - SEV-ES enabled in KVM
[ PASS ] - SEV-SNP enabled in KVM
[ PASS ] - Memlock resource limit: Soft: 8388608 | Hard: 8388608
[ PASS ] - Comparing TCB values: TCB versions match
Platform TCB version: TCB Version:
Microcode: 22
SNP: 11
TEE: 0
Boot Loader: 7
FMC: None
Reported TCB version: TCB Version:
Microcode: 22
SNP: 11
TEE: 0
Boot Loader: 7
FMC: None
ERROR: One or more tests in snphost ok reported a failure
Error: One or more tests in snphost ok reported a failure
✅ calculate-measurement.service : Calculate guest measurement...
❌ generate-id-block.service : Generate id-block.b64 and id-auth.b64 for guest launch...
generate-id-block.service fails !!! Please check below for more details:
ERROR: snpguest failed (exit 2)
error: unexpected argument '--id-block-file' found
tip: to pass '--id-block-file' as a value, use '-- --id-block-file'
Usage: snpguest generate id-block --family-id --image-id --svn --policy
For more information, try '--help'.
✅ display-guest-logs.service : Show the guest logs for the appropriate services in the host...
✅ verify-guest.service : Verify the SEV-SNP guest booted correctly...
[ ❌ ] SEV VERSION 3.0.0-0 SNP GUEST TESTS
✅ snpguest-ok.service : Run snguest ok to verify SNP enablement on guest...
❌ attestation-workflow.service : Run SNP Regular Attestation after boot...
✅ Generation of SNP Guest Report
❌ Fetch of CA certificate chain
=== SEV VERSION 3.0.0-0 LOG ===
Jun 28 20:32:38 systemd[1]: Starting snphost-ok.service - Run snphost ok to make sure host is correctly set-up for SNP functionalities....
Jun 28 20:32:38 snphost[4448]: [ PASS ] - AMD CPU
Jun 28 20:32:38 snphost[4448]: [ PASS ] - Microcode support
Jun 28 20:32:38 snphost[4448]: [ PASS ] - Secure Memory Encryption (SME)
Jun 28 20:32:38 snphost[4448]: [ PASS ] - SME: Enabled in MSR
Jun 28 20:32:38 snphost[4448]: [ PASS ] - Secure Encrypted Virtualization (SEV)
Jun 28 20:32:38 snphost[4448]: [ PASS ] - SEV firmware version: 1.54
Jun 28 20:32:38 snphost[4448]: [ PASS ] - Encrypted State (SEV-ES)
Jun 28 20:32:38 snphost[4448]: [ PASS ] - SEV-ES initialized
Jun 28 20:32:38 snphost[4448]: [ PASS ] - SEV initialized: Initialized, no guests running
Jun 28 20:32:38 snphost[4448]: [ PASS ] - Secure Nested Paging (SEV-SNP)
Jun 28 20:32:38 snphost[4448]: [ PASS ] - VM Permission Levels
Jun 28 20:32:38 snphost[4448]: [ PASS ] - Number of VMPLs: 4
Jun 28 20:32:38 snphost[4448]: [ PASS ] - SNP: Enabled in MSR
Jun 28 20:32:38 snphost[4448]: [ PASS ] - SNP initialized
Jun 28 20:32:38 snphost[4448]: [ PASS ] - RMP table addresses: 0x1827a500000 - 0x183fe5fffff
Jun 28 20:32:38 snphost[4448]: [ PASS ] - RMP table initialized
Jun 28 20:32:38 snphost[4448]: [ FAIL ] - Alias check
Jun 28 20:32:38 snphost[4448]: [ PASS ] - Physical address bit reduction: 6
Jun 28 20:32:38 snphost[4448]: [ PASS ] - C-bit location: 51
Jun 28 20:32:38 snphost[4448]: [ PASS ] - Number of encrypted guests supported simultaneously: 1006
Jun 28 20:32:38 snphost[4448]: [ PASS ] - Minimum ASID value for SEV-enabled, SEV-ES disabled guest: 100
Jun 28 20:32:38 snphost[4448]: [ PASS ] - /dev/sev readable
Jun 28 20:32:38 snphost[4448]: [ PASS ] - /dev/sev writable
Jun 28 20:32:38 snphost[4448]: [ PASS ] - Page flush MSR: ENABLED
Jun 28 20:32:38 snphost[4448]: [ PASS ] - KVM supported: API version: 12
Jun 28 20:32:38 snphost[4448]: [ PASS ] - SEV enabled in KVM
Jun 28 20:32:38 snphost[4448]: [ PASS ] - SEV-ES enabled in KVM
Jun 28 20:32:38 snphost[4448]: [ PASS ] - SEV-SNP enabled in KVM
Jun 28 20:32:38 snphost[4448]: [ PASS ] - Memlock resource limit: Soft: 8388608 | Hard: 8388608
Jun 28 20:32:38 snphost[4448]: [ PASS ] - Comparing TCB values: TCB versions match
Jun 28 20:32:38 snphost[4448]: Platform TCB version: TCB Version:
Jun 28 20:32:38 snphost[4448]: Microcode: 22
Jun 28 20:32:38 snphost[4448]: SNP: 11
Jun 28 20:32:38 snphost[4448]: TEE: 0
Jun 28 20:32:38 snphost[4448]: Boot Loader: 7
Jun 28 20:32:38 snphost[4448]: FMC: None
Jun 28 20:32:38 snphost[4448]: Reported TCB version: TCB Version:
Jun 28 20:32:38 snphost[4448]: Microcode: 22
Jun 28 20:32:38 snphost[4448]: SNP: 11
Jun 28 20:32:38 snphost[4448]: TEE: 0
Jun 28 20:32:38 snphost[4448]: Boot Loader: 7
Jun 28 20:32:38 snphost[4448]: FMC: None
Jun 28 20:32:38 snphost[4448]: ERROR: One or more tests in snphost ok reported a failure
Jun 28 20:32:38 snphost[4448]: Error: One or more tests in snphost ok reported a failure
Jun 28 20:32:38 systemd[1]: snphost-ok.service: Main process exited, code=exited, status=1/FAILURE
Jun 28 20:32:38 systemd[1]: snphost-ok.service: Failed with result 'exit-code'.
Jun 28 20:32:38 systemd[1]: Failed to start snphost-ok.service - Run snphost ok to make sure host is correctly set-up for SNP functionalities..
Jun 28 20:32:39 systemd[1]: Starting calculate-measurement.service - Calculate guest measurement...
Jun 28 20:32:39 guest_measurement.sh[4838]: 0x2138d01921e2a7bedfbbdebd5b0823922e928e70869baa6e11fc5a68c17240006b9c0aeb2103761b42a1ca8c3550c241
Jun 28 20:32:39 systemd[1]: calculate-measurement.service: Deactivated successfully.
Jun 28 20:32:39 systemd[1]: Finished calculate-measurement.service - Calculate guest measurement.
Jun 28 20:32:39 systemd[1]: calculate-measurement.service: Consumed 307ms CPU time, 274.9M memory peak.
Jun 28 20:32:39 systemd[1]: Starting generate-id-block.service - Generate id-block.b64 and id-auth.b64 for guest launch...
Jun 28 20:32:39 generate_id_block.py[4843]: ERROR: snpguest failed (exit 2)
Jun 28 20:32:39 generate_id_block.py[4843]: error: unexpected argument '--id-block-file' found
Jun 28 20:32:39 generate_id_block.py[4843]: tip: to pass '--id-block-file' as a value, use '-- --id-block-file'
Jun 28 20:32:39 generate_id_block.py[4843]: Usage: snpguest generate id-block --family-id --image-id --svn --policy
Jun 28 20:32:39 generate_id_block.py[4843]: For more information, try '--help'.
Jun 28 20:32:39 systemd[1]: generate-id-block.service: Main process exited, code=exited, status=1/FAILURE
Jun 28 20:32:39 systemd[1]: generate-id-block.service: Failed with result 'exit-code'.
Jun 28 20:32:39 systemd[1]: Failed to start generate-id-block.service - Generate id-block.b64 and id-auth.b64 for guest launch.
Jun 28 20:32:39 systemd[1]: Starting display-guest-logs.service - Show the guest logs for the appropriate services in the host...
Jun 28 20:32:39 systemd[1]: Starting verify-guest.service - Verify the SEV-SNP guest booted correctly...
Jun 28 20:32:39 journalctl[4857]: No journal files were found.
Jun 28 20:32:40 journalctl[4874]: No journal files were found.
Jun 28 20:32:41 journalctl[4879]: No journal files were found.
Jun 28 20:32:42 journalctl[4887]: No journal files were found.
Jun 28 20:32:43 journalctl[4893]: No journal files were found.
Jun 28 20:32:44 journalctl[4899]: No journal files were found.
Jun 28 20:32:45 journalctl[4905]: No journal files were found.
Jun 28 20:32:46 journalctl[4911]: No journal files were found.
Jun 28 20:32:47 journalctl[4917]: No journal files were found.
Jun 28 20:32:48 journalctl[4923]: No journal files were found.
Jun 28 20:32:49 journalctl[4929]: No journal files were found.
Jun 28 20:32:50 journalctl[4935]: No journal files were found.
Jun 28 20:32:52 verify-guest.sh[4851]: Guest boot successful.
Jun 28 20:32:52 systemd[1]: verify-guest.service: Deactivated successfully.
Jun 28 20:32:52 systemd[1]: Finished verify-guest.service - Verify the SEV-SNP guest booted correctly.
Jun 28 20:32:52 display-guest-logs.sh[4849]: SEV-SNP guest test results:
Jun 28 20:32:52 display-guest-logs.sh[4849]: For more information check journals in /var/log/journal/guest-logs
Jun 28 20:32:52 display-guest-logs.sh[4849]: [ PASS ] - SEV: ENABLED
Jun 28 20:32:52 display-guest-logs.sh[4849]: [ PASS ] - SEV-ES: ENABLED
Jun 28 20:32:52 display-guest-logs.sh[4849]: [ PASS ] - SNP: ENABLED
Jun 28 20:32:52 display-guest-logs.sh[4849]: [ PASS ] - Optional Features statuses:
Jun 28 20:32:52 display-guest-logs.sh[4849]: [ PASS ] - VTOM: DISABLED
Jun 28 20:32:52 display-guest-logs.sh[4849]: [ PASS ] - ReflectVC: DISABLED
Jun 28 20:32:52 display-guest-logs.sh[4849]: [ PASS ] - Restricted Injection: DISABLED
Jun 28 20:32:52 display-guest-logs.sh[4849]: [ PASS ] - Alternate Injection: DISABLED
Jun 28 20:32:52 display-guest-logs.sh[4849]: [ PASS ] - Debug Swap: DISABLED
Jun 28 20:32:52 display-guest-logs.sh[4849]: [ PASS ] - Prevent Host IBS: DISABLED
Jun 28 20:32:52 display-guest-logs.sh[4849]: [ PASS ] - SNP BTB Isolation: DISABLED
Jun 28 20:32:52 display-guest-logs.sh[4849]: [ PASS ] - VMPL SSS: DISABLED
Jun 28 20:32:52 display-guest-logs.sh[4849]: [ PASS ] - Secure TSE: DISABLED
Jun 28 20:32:52 display-guest-logs.sh[4849]: [ PASS ] - VMG Exit Parameter: DISABLED
Jun 28 20:32:52 display-guest-logs.sh[4849]: [ PASS ] - IBS Virtualization: DISABLED
Jun 28 20:32:52 display-guest-logs.sh[4849]: [ PASS ] - VMSA Reg Prot: DISABLED
Jun 28 20:32:52 display-guest-logs.sh[4849]: [ PASS ] - SMT Protection: DISABLED
Jun 28 20:32:52 display-guest-logs.sh[4849]: snpguest-ok.service: Deactivated successfully.
Jun 28 20:32:52 display-guest-logs.sh[4849]: Finished snpguest-ok.service - Run snguest ok to verify SNP enablement on guest.
Jun 28 20:32:52 display-guest-logs.sh[4849]: Starting attestation-workflow.service - Run SNP Regular Attestation after boot...
Jun 28 20:32:52 display-guest-logs.sh[4849]: Perform Regular Attestation workflow using snpguest tool ...
Jun 28 20:32:52 display-guest-logs.sh[4849]: ERROR: Fetch of CA certificate chain fails !!
Jun 28 20:32:52 display-guest-logs.sh[4849]: ERROR: Attestation report could be either Milan or Genoa. Update firmware to get a new version of the report.
Jun 28 20:32:52 display-guest-logs.sh[4849]: Error: Attestation report could be either Milan or Genoa. Update firmware to get a new version of the report.
Jun 28 20:32:52 display-guest-logs.sh[4849]: attestation-workflow.service: Main process exited, code=exited, status=1/FAILURE
Jun 28 20:32:52 display-guest-logs.sh[4849]: attestation-workflow.service: Failed with result 'exit-code'.
Jun 28 20:32:52 display-guest-logs.sh[4849]: Failed to start attestation-workflow.service - Run SNP Regular Attestation after boot.
Jun 28 20:32:52 systemd[1]: display-guest-logs.service: Deactivated successfully.
Jun 28 20:32:52 systemd[1]: Finished display-guest-logs.service - Show the guest logs for the appropriate services in the host.