Skip to content

Commit dcdc39a

Browse files
committed
runtime: disable protection check
enableProtection() is called when confidential_guest=true, so we disable this check to allow us to test running with confidential_guest=true and sev_snp_guest=false. Note this was already done by Wedson previously to allow testing on non-SNP CPUs, but the purpose here is different. Signed-off-by: Aurelien Bombo <[email protected]>
1 parent 7da3655 commit dcdc39a

File tree

1 file changed

+2
-1
lines changed
  • src/runtime/virtcontainers

1 file changed

+2
-1
lines changed

src/runtime/virtcontainers/clh.go

Lines changed: 2 additions & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -474,7 +474,8 @@ func (clh *cloudHypervisor) enableProtection() error {
474474
return nil
475475

476476
default:
477-
return errors.New("This system doesn't support Confidential Computing (Guest Protection)")
477+
// Allow running with no hardware protection for testing.
478+
return nil
478479
}
479480
}
480481

0 commit comments

Comments
 (0)