News: 0001570660

  ARM Give a man a fire and he's warm for a day, but set fire to him and he's warm for the rest of his life (Terry Pratchett, Jingo)

Ahead Of Ubuntu 26.04 LTS, Ubuntu 25.04 Has AMD SEV-SNP Host Support

([Ubuntu] 3 Hours Ago AMD SEV-SNP Virtualization)


While Ubuntu 25.04 has been shipping since April and following software support already upstreamed into the Linux kernel and related virtualization components, Ubuntu maker Canonical today put out a blog post to announce their AMD SEV-SNP host support found in Ubuntu 25.04. This complements the guest-side support present since Ubuntu 22.04 LTS and is an important milestone on the host-side ahead of next year's Ubuntu 26.04 LTS release.

AMD Secure Encrypted Virtualization Secure Nested Paging (SEV-SNP) has all the necessary host support in place with the Ubuntu 25.04 interim release. With most major enterprise sticking to the Long Term Support (LTS) releases this isn't particularly pressing but important to have all squared away ahead of Ubuntu 26.04 LTS next April. This follows [1]Ubuntu shipping Intel TDX support since last year for CoCo VMs on the Xeon side.

From kernel space [2]the host bits landed in Linux 6.11 although further improvements have been merged since. Fedora 41 last year [3]already was shipping SEV-SNP support for confidential host virtualization support. Some elements of that support were delayed to Fedora 42, which shipped earlier this year -- two days ahead of Ubuntu 25.04.

It's been known that AMD SEV-SNP host support should work in Ubuntu 25.04 albeit only now being officially promoted by Canonical. With all of that said, rather interestingly their blog post notes:

"This makes Ubuntu the first production-grade Linux distribution to support AMD SEV-SNP from host to guest. No out-of-tree patches, no experimental builds: it all works out of the box. With this, you can now deploy confidential virtual machines (CVMs) on entirely Ubuntu-based stacks, in private clouds, or on bare metal nodes in public clouds."

To which really doesn't make much sense unless Canonical doesn't consider Fedora and rolling-release distributions and the like "production-grade" Linux distributions... Canonical is just riding on [4]all of the SEV-SNP open-source, upstream work that's been happening since the EPYC 7003 days.

In any event those wishing to learn more about Ubuntu 25.04's host support for AMD SEV-SNP for confidential computing virtualization can do so via [5]the Ubuntu.com blog .



[1] https://www.phoronix.com/news/Intel-TDX-2.1-Ubuntu-24.04-LTS

[2] https://www.phoronix.com/news/AMD-SEV-SNP-SVSM-Linux-6.11

[3] https://www.phoronix.com/news/Fedora-41-Goes-AMD-SEV-SNP

[4] https://www.phoronix.com/news/AMD-SEV-SNP-Hypervisor-v14

[5] https://ubuntu.com/blog/ubuntu-25-04-amd-sev-snp-host-support



phoronix

"Multiply in your head" (ordered the compassionate Dr. Adams) "365,365,365,
365,365,365 by 365,365,365,365,365,365". He [ten-year-old Truman Henry
Safford] flew around the room like a top, pulled his pantaloons over the
tops of his boots, bit his hands, rolled his eyes in their sockets, sometimes
smiling and talking, and then seeming to be in an agony, until, in not more
than one minute, said he, 133,491,850,208,566,925,016,658,299,941,583,225!"
An electronic computer might do the job a little faster but it wouldn't be
as much fun to watch.
-- James R. Newman, "The World of Mathematics"