openstack/nova — Week of 2026-07-18

AMD SEV-SNP support. The libvirt driver gained end-to-end detection and configuration for AMD SEV-SNP, spanning roughly 1,600 lines across capability probing, host validation, and domain XML generation. The launchSecurity element now understands SEV-SNP, SEV-ES is ignored when SEV-SNP is detected, and startup-time validation of SEV/SEV-ES support replaces the old per-launch capability check. Related cleanups drop iommu='on' for virtio devices under SEV and omit optional launchSecurity fields for the plain SEV/SEV-ES cases. See the detection groundwork at https://review.opendev.org/c/openstack/nova/+/994764.

Compute startup and driver interface. Instance startup processing on compute restart is now delegated to the virt drivers themselves, restructuring ~840 lines in the compute manager and libvirt driver. A companion reproducer for vTPM startup validation lands alongside it. Image metadata also learned to accept hw_firmware_stateless=True for the BIOS firmware type.

Bug fixes. The websocket proxy no longer mutates global config (fixed on both master and a stable branch), the API stops returning empty attachment_id values on volume attachments, and QEMU_IMG_LIMITS process limits become configurable across three branches. Smaller fixes cover a service_ref destroy check plus functional-test stabilization and speedups.

Maintenance. Dead code from the old image v1 API path and UpdateGlanceImage was removed, along with stale policy and cursive doc references.