openstack/nova — Week of 2026-07-25

AMD SEV-SNP memory encryption. The week is dominated by a coordinated push to land SEV-SNP guest support in the libvirt driver, roughly 1,000+ lines across seven changes. Instances can now be launched with SEV-SNP memory encryption, with support detection reworked to consult libvirt domain capabilities rather than the old counting mechanism — the [libvirt] num_memory_encrypted_guests config option was removed as part of that shift. The CPU traits functional tests were refactored around the new AMD SEV code paths, _is_supported_mem_encryption_model gained additional coverage, and the docs were updated to describe SEV-SNP usage. A related cleanup drops the TPM support detection branch for libvirt older than 8.0.0.

API and RBAC. Internal _nova-prefixed scheduler hints are now stripped on server create so clients cannot smuggle them in. On the policy side, the temporary disabling of scope enforcement was removed and the new-defaults variable name was adopted, moving Nova further along the secure-RBAC transition.

Operability. The compute service now dumps its effective config options at startup, making on-host debugging of running nodes easier.