tools: be explicit about failure to find x86 secure virt

If we fail to find either SEV or TDX on x86, we can explicitly
say there is no secure guest support on the platform.

Reviewed-by: Peter Krempa <pkrempa@redhat.com>
Signed-off-by: Daniel P. Berrangé <berrange@redhat.com>
This commit is contained in:
Daniel P. Berrangé
2025-11-20 17:26:18 +00:00
parent 785c9fd512
commit e6d8983cdb
+11 -7
View File
@@ -492,13 +492,17 @@ int virHostValidateSecureGuests(const char *hvname,
"support for IBM Secure Execution");
return VIR_VALIDATE_FAILURE(level);
}
} else if (hasAMDSev) {
return virHostValidateAMDSev(hvname, level);
} else if (hasIntelTDX) {
return virHostValidateIntelTDX(level);
} else if (arch == VIR_ARCH_X86_64) {
if (hasAMDSev) {
return virHostValidateAMDSev(level);
} else if (hasIntelTDX) {
return virHostValidateIntelTDX(level);
} else {
virValidateFail(level, "None of SEV, SEV-ES, SEV-SNP, TDX available");
}
} else {
virValidateFail(level,
"Unknown if this platform has Secure Guest support");
}
virValidateFail(level,
"Unknown if this platform has Secure Guest support");
return VIR_VALIDATE_FAILURE(level);
}