qemu-options: Add confidential-guest-support to machine options
"confidential-guest-support" is the recommended property to configure machine with confidential computing technology instead of "memory-encryption". Add "confidential-guest-support" to machine options and call out explicitly "memory-encryption" is the alias of it and not recommended. Reviewed-by: Daniel P. Berrangé <berrange@redhat.com> Signed-off-by: Xiaoyao Li <xiaoyao.li@intel.com> Link: https://lore.kernel.org/r/20260512084458.622465-4-xiaoyao.li@intel.com Signed-off-by: Paolo Bonzini <pbonzini@redhat.com>
Xiaoyao Li committed
May 12, 2026 at 16:44 UTC
b91ae3b688f8149d608753723b17f8fb90a8b7c4
1 file changed
+7
-2
qemu-options.hx
+7
-2
@@ -36,7 +36,8 @@ DEF("machine", HAS_ARG, QEMU_OPTION_machine, \
36
" dea-key-wrap=on|off controls support for DEA key wrapping (default=on)\n"
37
" suppress-vmdesc=on|off disables self-describing migration (default=off)\n"
38
" nvdimm=on|off controls NVDIMM support (default=off)\n"
39
- " memory-encryption=<id> memory encryption object to use (default=none)\n"
39
+ " confidential-guest-support=<id> specifies confidential guest support object (default=none)\n"
40
+ " memory-encryption=<id> (memory-encryption is the alias of confidential-guest-support, recommend to use confidential-guest-support)\n"
41
" hmat=on|off controls ACPI HMAT support (default=off)\n"
42
" spcr=on|off controls ACPI SPCR support (default=on)\n"
43
#ifdef CONFIG_POSIX
@@ -100,8 +101,12 @@ SRST
101
``nvdimm=on|off``
102
Enables or disables NVDIMM support. The default is off.
103
104
+ ``confidential-guest-support=<id>``
105
+ confidential guest support object to use. The default is none.
106
+
107
``memory-encryption=<id>``
104
- Memory encryption object to use. The default is none.
108
+ The alias of ``confidential-guest-support``. Recommend to use
109
+ confidential-guest-support.
110
111
``hmat=on|off``
112
Enables or disables ACPI Heterogeneous Memory Attribute Table