Skip to content

kernel/attest: get vsock port from cmdline - #1243

Draft
luigix25 wants to merge 2 commits into
coconut-svsm:mainfrom
luigix25:vsock_cmdline
Draft

luigix25 wants to merge 2 commits into
coconut-svsm:mainfrom
luigix25:vsock_cmdline

Conversation

@luigix25

Copy link
Copy Markdown
Collaborator

Depends on #1164

msft-jlange and others added 2 commits September 29, 2026 09:29
The IGVM command line is intended to convey debug configuration options,
so obtain the debug com port identifier from the command line instead of
relying on a static configuration in the IGVM file.  This eliminates one
more hypervisor-specific difference from the IGVM file.  If the command
line is not specified (QEMU does not specify a command line), then the
com port defaults to 1, which is the value that QEMU expects, thus
ensuring that QEMU can get the correct behavior without requiring a
command line to be specified.

Signed-off-by: Jon Lange <jlange@microsoft.com>
The attestation proxy's vsock port was hardcoded, preventing multiple
guests from using distinct proxy instances on the same host.

Add `attestation_vsock_port()` to read an optional ATTESTATIONPORT=<port>
argument from the IGVM command line, mirroring the existing
CONSOLEPORT= handling. Invalid or missing values fall back to the previous
default.

Document the new parameter in ATTESTATION.md

Signed-off-by: Luigi Leonardi <leonardi@redhat.com>

This branch has not been deployed

No deployments
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants