machine: Deprecate memory-encryption
We've had 'confidential-guest-support' for long enough that no one should be using 'memory-encryption' anymore. Deprecate 'memory-encryption' by adding notes in docs/about/deprecated.rst and print a warning when 'memory-encryptio' is used. Suggested-by: Daniel P. Berrangé <berrange@redhat.com> Signed-off-by: Xiaoyao Li <xiaoyao.li@intel.com> Link: https://lore.kernel.org/qemu-devel/aMPYkUsytGxLPIM7@redhat.com/ Link: https://lore.kernel.org/r/20260512084458.622465-6-xiaoyao.li@intel.com Signed-off-by: Paolo Bonzini <pbonzini@redhat.com>
Xiaoyao Li committed
May 12, 2026 at 16:44 UTC
5cd5188ef8ae90624eeca023e9dc8ef18eb747b1
2 files changed
+9
docs/about/deprecated.rst
+7
@@ -249,6 +249,13 @@ The RISC-V ``shakti_c`` machine hasn't had meaningful contributions since 2021
249
and is currently unmaintained. The machine is scheduled to be removed as it
250
appears to have no users.
251
252
+``memory-encryption`` machine property (since 11.1)
253
+'''''''''''''''''''''''''''''''''''''''''''''''''''
254
+
255
+Use ``confidential-guest-support`` instead. The ``memory-encryption`` object
256
+was an early implementation of memory encryption support in QEMU, but it has
257
+been superseded by the more comprehensive ``confidential-guest-support``
258
+object.
259
260
Backend options
261
---------------
hw/core/machine.c
+2
@@ -497,6 +497,8 @@ static void machine_set_memory_encryption(Object *obj, const char *value,
497
Object *cgs =
498
object_resolve_path_component(object_get_objects_root(), value);
499
500
+ warn_report("memory-encryption is deprecated, use confidential-guest-support instead");
501
+
502
if (!cgs) {
503
error_setg(errp, "No such memory encryption object '%s'", value);
504
return;