snp: update family id that to be shared across OpenHCL verions (#4183) - #4185
Open
Ming-Wei Shih (mingweishih) wants to merge 2 commits into
Open
snp: update family id that to be shared across OpenHCL verions (#4183)#4185Ming-Wei Shih (mingweishih) wants to merge 2 commits into
Ming-Wei Shih (mingweishih) wants to merge 2 commits into
Conversation
…soft#4183) Remove the version-specific value from family id, making it consistent across all OpenHCL versions (cherry picked from commit 75e780a)
Ming-Wei Shih (mingweishih)
added
the
release_1.8.2607
Copilot started reviewing on behalf of
Ming-Wei Shih (mingweishih)
August 7, 2026 15:56
View session
Contributor
There was a problem hiding this comment.
Pull request overview
This PR updates the SEV-SNP identity constants emitted into OpenHCL SNP ID blocks so the “family id” no longer encodes a version-specific value, aiming to keep the attestation identity consistent across OpenHCL versions.
Changes:
- Update
SNP_FAMILY_IDbytes to a reserved-zero layout with a single OpenHCL discriminator byte. - Rename/update the
SNP_IMAGE_IDconstant value fromunderhilltoopenhcl. - Update the unit test that pins these constants’ exact byte identities.
Suppressed comments (1)
vm/loader/igvmfilegen/src/snp_id_block.rs:54
SNP_IMAGE_IDis also part of the externally-consumed SNP ID block payload (same asSNP_FAMILY_ID). Adding the same “attestation identity” warning here would make the risk of changing this constant more obvious to future editors.
/// SNP image identifier for OpenHCL guests.
pub const SNP_IMAGE_ID: [u8; 16] = *b"openhcl\0\0\0\0\0\0\0\0\0";
Comment on lines
+53
to
+54
| /// SNP image identifier for OpenHCL guests. | ||
| pub const SNP_IMAGE_ID: [u8; 16] = *b"openhcl\0\0\0\0\0\0\0\0\0"; |
Comment on lines
+44
to
+46
| /// Layout convention: | ||
| /// - `byte[3] == 0x01` identifies OpenHCL. | ||
| /// - all other bytes are reserved and must remain `0x00`. |
Copilot started reviewing on behalf of
Matt LaFayette (Kurjanowicz) (mattkur)
August 7, 2026 21:46
View session
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Remove the version-specific value from family id, making it consistent across all OpenHCL versions
Clean cherry pick of #4183