Zhen-Rong Wu
I am an undergraduate student majoring in Computer Science at National Taiwan Normal University. While I am a newcomer to the BSD community, I have a deep passion for operating systems, kernel development, and low-level system programming. I look forward to learning from the community and contributing to BSD as I grow.
Session
AMD SEV encrypts a VM's memory with a per-VM key hidden from the hypervisor, but encryption is only useful if the guest owner can prove what was actually launched. This talk presents a complete AMD SEV host stack for FreeBSD bhyve, running today on AMD EPYC hardware, with pre-attestation.
I will follow one encrypted Ubuntu 25.04 guest through the stack, and a new asp(4) driver for AMD Secure Processor, vmm/SVM changes for SEV ASIDs, bhyve userspace and a FreeBSD port of sevctl for measurement verification and launch secret injection, and a clean BhyveSevX64 OVMF platform.
The result boots attested SEV guests with SMP, tested with 8 vCPUs, and working virtio-net 1.0 on Ubuntu 25.04.