Skip to content

[BUG]: Missing GCP guest OS image tag for SEV live migration #357

Description

@davidskidmore

Is there an existing issue for this?

  • I have searched the existing issues

Current Behavior

I have been reviewing guest OS image tags lately and came across AlmaLinux. It looks like you are using SEV_CAPABLE and SEV_LIVE_MIGRATABLE, but have not added SEV_LIVE_MIGRATABLE_V2 for AlmaLinux 8 and 9. I admit it is not well documented, but the SEV_LIVE_MIGRATABLE tag is deprecated and you should consider adding SEV_LIVE_MIGRATABLE_V2. This will correctly mark the OS image as compatible with confidential live migration.

Expected Behavior

We do not have to remove SEV_LIVE_MIGRATABLE, but we should add SEV_LIVE_MIGRATABLE_V2. an image should look more like the following:

davidskidmore@davidskidmore:~$ gcloud compute images describe \
  --project almalinux-cloud \
  --format="table(guestOsFeatures.type:label=FEATURE)" \
  almalinux-9-v20260609
FEATURE
['UEFI_COMPATIBLE', 'VIRTIO_SCSI_MULTIQUEUE', 'SEV_CAPABLE', 'SEV_SNP_CAPABLE', 'SEV_LIVE_MIGRATABLE', 'SEV_LIVE_MIGRATABLE_V2', 'GVNIC', 'IDPF', 'TDX_CAPABLE']

Steps To Reproduce

GCP users can list images using gcloud from the Google Cloud CLI, for example:

davidskidmore-mac:~ davidskidmore$ gcloud compute images list \
  --project=almalinux-cloud \
  --no-standard-images \
  --filter="guestOsFeatures[].type:SEV_CAPABLE AND NOT guestOsFeatures[].type:SEV_LIVE_MIGRATABLE_V2"
NAME                   PROJECT          FAMILY       DEPRECATED  STATUS
almalinux-8-v20260609  almalinux-cloud  almalinux-8              READY
almalinux-9-v20260609  almalinux-cloud  almalinux-9              READY

To get the full list of guest OS features, use gcloud to describe an image:

davidskidmore@davidskidmore:~$ gcloud compute images describe \
  --project almalinux-cloud \
  --format="table(guestOsFeatures.type:label=FEATURE)" \
  almalinux-9-v20260609
FEATURE
['UEFI_COMPATIBLE', 'VIRTIO_SCSI_MULTIQUEUE', 'SEV_CAPABLE', 'SEV_SNP_CAPABLE', 'SEV_LIVE_MIGRATABLE', 'GVNIC', 'IDPF', 'TDX_CAPABLE']

Anything else?

https://docs.cloud.google.com/confidential-computing/confidential-vm/docs/supported-configurations

Search terms

gcp, live migration, SEV, confidential

Metadata

Metadata

Assignees

No one assigned

    Labels

    bugSomething isn't working

    Type

    No type
    No fields configured for issues without a type.

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions