COCONUT-SVSM BoF
summary
COCONUT‑SVSM now ships regular development releases, with VTPM usable on SEV SNP and much improved interrupt handling, and Fedora already packages the dev drops; the roadmap prioritizes getting KVM plane support upstream, finishing the move of kernel work into user‑mode TPM and the SPSM request loop, and implementing SVSM-tracked page validation state to enable SVSM‑assisted live migration (design uses shadow vCPU executors). Releases run fuzzers and formal verification (recently broken, being fixed).
AI-written summary · about
chapters (11)
- 0:00Introduction and project overview
- 1:01Current progress and future plans
- 3:32Discussion on priorities and use cases
- 7:00Cross-platform support challenges
- 12:10Live migration and SVSM features
- 17:55Hypervisor-SVSM interface design
- 20:32SVSM services and protocols
- 24:22SVSM specification governance
- 29:45Community involvement in specs
- 32:04Development releases and packaging
- 35:43Closing remarks and next steps
