3 releases (breaking)

0.3.0 Jun 16, 2022
0.2.0 Dec 20, 2021
0.1.0 Feb 2, 2021

#91 in Operating systems

Download history 38/week @ 2022-03-14 25/week @ 2022-03-21 29/week @ 2022-03-28 28/week @ 2022-04-04 20/week @ 2022-04-11 33/week @ 2022-04-18 33/week @ 2022-04-25 38/week @ 2022-05-02 19/week @ 2022-05-09 45/week @ 2022-05-16 29/week @ 2022-05-23 37/week @ 2022-05-30 41/week @ 2022-06-06 105/week @ 2022-06-13 85/week @ 2022-06-20 88/week @ 2022-06-27

324 downloads per month
Used in sevctl


3.5K SLoC

Workflow Status Average time to resolve an issue Percentage of issues still open Maintenance


The sev crate provides an implementation of AMD Secure Encrypted Virtualization (SEV) APIs.

The Linux kernel exposes two technically distinct AMD SEV APIs:

  1. An API for managing the SEV platform itself
  2. An API for managing SEV-enabled KVM virtual machines

This crate implements both of those APIs and offers them to client code through a flexible and type-safe high level interface.

Platform Management

Refer to the firmware module for more information.

Guest Management

Refer to the launch module for more information.


Note that the Linux kernel provides access to these APIs through a set of ioctls that are meant to be called on device nodes (/dev/kvm and /dev/sev, to be specific). As a result, these ioctls form the substrate of the sev crate. Binaries that result from consumers of this crate are expected to run as a process with the necessary privileges to interact with the device nodes.

License: Apache-2.0


~31K SLoC