What is the right way to load VLEK?

[cowbon]

Hi there,

SNP_VLEK_LOAD ioctl has been in the kernel for a while, is there a plan for snphost to load VLEK to AMD-SP in snphost? If not, what's the appropriate way to load it?

[tylerfanelli]

@DGonzalezVillal I see that you've been working on SNP_VLEK_LOAD uapi support in the library lately. Any thoughts on this?

[DGonzalezVillal]

I'm working on the functionality right now. There will be a draft PR open once that is done, but we also have to wait for virtee/sev#313 to be merged first.

[DGonzalezVillal]

#128

[DGonzalezVillal]

Hey @cowbon

Sorry it's taken this long but the library fix has been approved, we will merge it and cut a new SEV library release. virtee/sev#316

After that I'll finish the draft pr to upstream the support:

#128

I have tested it and it's working, it just needs a little clean up.

The problem is that I actually discovered an upstream kernel bug, which has been stopping vlek_load from working correctly. The patch has been submitted already, just waiting on it to be upstreamed.

https://patchew.org/linux/20250728234303.2836702-1-michael.roth@amd.com/

If you manually patch your kernel module with this addition, then vlek load should work alright.