Right now there doesn't seem to have been a lot of work in exposing security features to guests. Is there interest in supporting stuff like Secure Boot or any form of runtime attestation?
bonzini
QEMU + KVM + OVMF supports Secure Boot (including SMM emulation for the trusted base), or are you talking specifically of GCE?
mjg59OP
Yeah, specifically GCE
andyhonig
Thanks for the feedback, unfortunately I can't publicly comment on future product plans.