https://exquisite.tube/videos/watch/cba81a43-5995-4148-8a62-cb9b97aedaee AMD SEV encrypts a VM's memory with a per-VM key hidden from the hypervisor, but encryption is only useful if the guest owner can prove what was actually launched. This talk presents a complete AMD SEV host stack for FreeBSD bhyve, running today on AMD EPYC hardware, with pre-attestation. I will follow one encrypted Ubuntu 25.04 guest through the stack, and a new asp(4) driver for AMD Secure Processor, vmm/SVM changes for SEV ASIDs, bhyve userspace and a FreeBSD port of sevctl for measurement verification and launch secret injection, and a clean BhyveSevX64 OVMF platform. The result boots attested SEV guests with SMP, tested with 8 vCPUs, and working virtio-net 1.0 on Ubuntu 25.04. Tue, 15 Sep 2026 16:06:49 GMT https://validator.w3.org/feed/docs/rss2.html PeerTube - https://exquisite.tube https://exquisite.tube/lazy-static/avatars/15cdbc2e-7773-4916-99e9-38207b20252d.png https://exquisite.tube/videos/watch/cba81a43-5995-4148-8a62-cb9b97aedaee All rights reserved, unless otherwise specified in the terms specified at https://exquisite.tube/about and potential licenses granted by each content's rightholder.