)]}'
{"/PATCHSET_LEVEL":[{"author":{"_account_id":9708,"name":"Balazs Gibizer","display_name":"gibi","email":"gibizer@gmail.com","username":"gibi"},"change_message_id":"eedd204522582c2fabd0dd881ac35b378b75b61f","unresolved":false,"context_lines":[],"source_content_type":"","patch_set":3,"id":"eaee1f17_ab32419c","updated":"2026-08-13 13:07:33.000000000","message":"OK the new stateless requirement are noted","commit_id":"b050013ded02e626067b438221c19c78cc95a85a"},{"author":{"_account_id":9708,"name":"Balazs Gibizer","display_name":"gibi","email":"gibizer@gmail.com","username":"gibi"},"change_message_id":"63bbeed50e4883be06c8c2ac8dc08ef5b432009f","unresolved":false,"context_lines":[],"source_content_type":"","patch_set":4,"id":"ffe4d505_4f637c21","updated":"2026-08-14 08:34:23.000000000","message":"thanks","commit_id":"432ec45fd18f090d0b2ff8a29fba937b026b058a"}],"doc/source/admin/tdx.rst":[{"author":{"_account_id":9708,"name":"Balazs Gibizer","display_name":"gibi","email":"gibizer@gmail.com","username":"gibi"},"change_message_id":"6f5932f01b52e17c1d02423c70ac744139631a34","unresolved":true,"context_lines":[{"line_number":87,"context_line":"     provides ``ovmf-inteltdx``)."},{"line_number":88,"context_line":""},{"line_number":89,"context_line":"     Nova uses QEMU\u0027s firmware auto-selection, which is based on firmware"},{"line_number":90,"context_line":"     descriptors, to select the matching firmware for TDs.More details on"},{"line_number":91,"context_line":"     these firmware descriptors can be found in the `QEMU firmware descriptor"},{"line_number":92,"context_line":"     documentation`_."},{"line_number":93,"context_line":""}],"source_content_type":"text/x-rst","patch_set":1,"id":"8b6b22ac_50dcd479","line":90,"range":{"start_line":90,"start_character":56,"end_line":90,"end_character":59},"updated":"2026-08-07 13:22:31.000000000","message":"nit: missing space","commit_id":"f7b9ec3119015d6b1dea8ac1ebb3c61435a62d08"},{"author":{"_account_id":9708,"name":"Balazs Gibizer","display_name":"gibi","email":"gibizer@gmail.com","username":"gibi"},"change_message_id":"5634fc620c4f6da2e05d57bb3d1db67b2caa97ad","unresolved":false,"context_lines":[{"line_number":87,"context_line":"     provides ``ovmf-inteltdx``)."},{"line_number":88,"context_line":""},{"line_number":89,"context_line":"     Nova uses QEMU\u0027s firmware auto-selection, which is based on firmware"},{"line_number":90,"context_line":"     descriptors, to select the matching firmware for TDs.More details on"},{"line_number":91,"context_line":"     these firmware descriptors can be found in the `QEMU firmware descriptor"},{"line_number":92,"context_line":"     documentation`_."},{"line_number":93,"context_line":""}],"source_content_type":"text/x-rst","patch_set":1,"id":"57813809_60f0ef4b","line":90,"range":{"start_line":90,"start_character":56,"end_line":90,"end_character":59},"in_reply_to":"8b6b22ac_50dcd479","updated":"2026-08-11 14:23:12.000000000","message":"Done","commit_id":"f7b9ec3119015d6b1dea8ac1ebb3c61435a62d08"},{"author":{"_account_id":9708,"name":"Balazs Gibizer","display_name":"gibi","email":"gibizer@gmail.com","username":"gibi"},"change_message_id":"6f5932f01b52e17c1d02423c70ac744139631a34","unresolved":false,"context_lines":[{"line_number":178,"context_line":"    affect the confidentiality or integrity provided by Intel TDX. A"},{"line_number":179,"context_line":"    host with a missing or broken QGS will still successfully boot TDs."},{"line_number":180,"context_line":"    Conversely, successfully launching a TD does not guarantee that attestation"},{"line_number":181,"context_line":"    is functioning correctly."},{"line_number":182,"context_line":""},{"line_number":183,"context_line":".. note::"},{"line_number":184,"context_line":""}],"source_content_type":"text/x-rst","patch_set":1,"id":"5972666f_e6258c42","line":181,"updated":"2026-08-07 13:22:31.000000000","message":"yeah. Also qemu does not kill the VM if attestation fails, e.g. due to a not accessible qgsd socket, it just logs an error to the domain logs.","commit_id":"f7b9ec3119015d6b1dea8ac1ebb3c61435a62d08"},{"author":{"_account_id":9708,"name":"Balazs Gibizer","display_name":"gibi","email":"gibizer@gmail.com","username":"gibi"},"change_message_id":"6f5932f01b52e17c1d02423c70ac744139631a34","unresolved":false,"context_lines":[{"line_number":200,"context_line":"- Because of missing support in the Linux kernel, TDs cannot yet be"},{"line_number":201,"context_line":"  live-migrated or suspended. At the moment, TDs need to be fully shut down"},{"line_number":202,"context_line":"  before migrating off a Intel TDX host, e.g. if maintenance is required on the"},{"line_number":203,"context_line":"  host."},{"line_number":204,"context_line":""},{"line_number":205,"context_line":"- For security hardening purposes, TDVF limits the supported features"},{"line_number":206,"context_line":"  of the virtualized platform. As a result, some features that are normally"}],"source_content_type":"text/x-rst","patch_set":1,"id":"2064da21_adaccbf2","line":203,"updated":"2026-08-07 13:22:31.000000000","message":"yepp. I tested, resize works","commit_id":"f7b9ec3119015d6b1dea8ac1ebb3c61435a62d08"},{"author":{"_account_id":9708,"name":"Balazs Gibizer","display_name":"gibi","email":"gibizer@gmail.com","username":"gibi"},"change_message_id":"7147d0b6958b30c2c186498edcb7c2518600881d","unresolved":true,"context_lines":[{"line_number":137,"context_line":"to ``none`` to not attach a video device. Intel TDX also requires stateless"},{"line_number":138,"context_line":"firmware, which is enabled by the ``hw_firmware_stateless`` property set to"},{"line_number":139,"context_line":"``true``."},{"line_number":140,"context_line":""},{"line_number":141,"context_line":"Attestation"},{"line_number":142,"context_line":"-----------"},{"line_number":143,"context_line":""}],"source_content_type":"text/x-rst","patch_set":3,"id":"885573f7_02f2c174","line":140,"updated":"2026-08-13 13:50:03.000000000","message":"lets mention setting os_secure_boot\u003doptional in case the host OS does not provide descriptors of firmwares for non secure boot by default (as is the case in centos 10 stream today)","commit_id":"b050013ded02e626067b438221c19c78cc95a85a"},{"author":{"_account_id":9708,"name":"Balazs Gibizer","display_name":"gibi","email":"gibizer@gmail.com","username":"gibi"},"change_message_id":"63bbeed50e4883be06c8c2ac8dc08ef5b432009f","unresolved":false,"context_lines":[{"line_number":137,"context_line":"to ``none`` to not attach a video device. Intel TDX also requires stateless"},{"line_number":138,"context_line":"firmware, which is enabled by the ``hw_firmware_stateless`` property set to"},{"line_number":139,"context_line":"``true``."},{"line_number":140,"context_line":""},{"line_number":141,"context_line":"Attestation"},{"line_number":142,"context_line":"-----------"},{"line_number":143,"context_line":""}],"source_content_type":"text/x-rst","patch_set":3,"id":"4d05fe79_3bce887b","line":140,"in_reply_to":"885573f7_02f2c174","updated":"2026-08-14 08:34:23.000000000","message":"Done","commit_id":"b050013ded02e626067b438221c19c78cc95a85a"}]}